Methods and systems for secure cloud-based processing and storage through distributed allocation.

BR112025021855A2Pending Publication Date: 2026-09-08
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
BR112025021855
Authority / Receiving Office
BR · BR
Patent Type
Applications
Publication Date
2026-09-08

Smart Images

  • Figure 00000000_0000_ABST
    Figure 00000000_0000_ABST
Patent Text Reader
Need to check novelty before this filing date? Find Prior Art

Description

1 / 36 “METHODS AND SYSTEMS FOR SECURE CLOUD-BASED PROCESSING AND STORAGE BY DISTRIBUTED ALLOCATION” FIELD OF THE INVENTION

[001] The present disclosure is generally directed to methods and systems for processing and storing secure clinical data with a secure data processing system and distributed allocation. BACKGROUND

[002] Data security is a constant concern. In the clinical environment, data security is frequently required by regulatory and ethical requirements. The hardware and maintenance infrastructure installed in the clinical environment generates significant additional costs and increases the risk of data loss or leakage. Complex processing and secure data storage systems, such as those in precision diagnostic devices like CT and MRI, have become a significant part of the clinical IT infrastructure, which must be serviced by expensive third-party services or vendors.

[003] Alternatively, flexible and low-cost computing power is offered by cloud-based services, which can help outsource some of the risks and potential problems to the clinical environment. However, one of the main limitations of cloud-based processing and storage is the potential risk of data leakage and misuse, which is a major liability within the clinical environment. Certainly, one of the main concerns is that the third-party security system will fail (for example, a cloud-based service will be hacked), leading to the leakage of critical patient data.

[004] Therefore, skepticism is widespread within the clinical environment regarding cloud-based external processing and storage of clinical data, although remote processing offers numerous advantages over classic on-premises computing and infrastructure maintenance, which is necessary for various tasks such as data reconstruction and post-processing. Petition 870250092189, dated 09 / 10 / 2025, pp. 102 / 151 2 / 36 Image processing. In fact, hardware maintenance, software costs, and downtime are expensive and inefficient. SUMMARY OF REVELATION

[005] Consequently, there is a continuing need for improved methods and systems that can securely process and / or store secure clinical data within a distributed data processing and storage system. Several embodiments and implementations in this document are directed toward methods and systems for processing and storing secure clinical data with a distributed data processing and allocation system. The secure data system comprises a local data center and a plurality of distributed processors. The system receives secure clinical data associated with a patient and a processing request for the clinical data and determines, based on the received processing request, a segmentation protocol for the received secure clinical data. The received secure clinical data is segmented based on the determined segmentation protocol to generate a plurality of clinical data segments.These clinical data segments are then distributed to distributed processors, which perform the requested processing. The local data center receives the processed clinical data segments in return and combines the received clinical data segments to generate a single, secure, combined processed clinical data output.

[006] Generally, in one aspect, a method is provided for processing secure clinical data with a secure data processing system comprising a local data center and a plurality of distributed processors. The method includes: (i) receiving, by the local data center, secure clinical data associated with a patient and a processing request for the clinical data; (ii) determining, based on the received processing request, a segmentation protocol for the received secure clinical data; (iii) segmenting the received secure clinical data based on the Petition 870250092189, dated 09 / 10 / 2025, pp. 103 / 151 3 / 36 determined segmentation protocol to generate a plurality of clinical data segments; (iv) distribute the plurality of clinical data segments to the plurality of distributed processors, wherein a distributed processor performs the requested processing of a distributed clinical data segment to generate a processed clinical data segment; (v) receive, by the local data center, a plurality of processed clinical data segments from the plurality of distributed processors; and (vi) combine the received plurality of processed clinical data segments to generate a single combined processed secure clinical data result.

[007] According to a modality, clinical data are imaging data obtained by an imaging modality, and where the imaging modality is the local data center or is in communication with the local data center.

[008] According to one embodiment, the method also includes encrypting some or all of the plurality of clinical data segments.

[009] According to one embodiment, the plurality of clinical data segments is segmented so that a clinical data segment sent to a distributed processor cannot identify the patient.

[010] According to one embodiment, the method also includes providing, through a user interface, the single result of combined processed secure clinical data.

[011] According to one embodiment, the method further includes diagnosing the patient based on the result of unique combined processed reliable clinical data; and administering treatment based on the diagnosis.

[012] According to another aspect, it is a method for archiving secure clinical data with a secure data processing system comprising a local data center and a plurality of distributed databases. The method includes: (i) receiving, by the local data center, secure clinical data associated with a patient and a request for archiving to the Petition 870250092189, dated 09 / 10 / 2025, pp. 104 / 151 4 / 36 clinical data; (ii) determine, based on the archiving request received, a segmentation protocol for the received secure clinical data; (iii) encrypt the received secure clinical data to generate encrypted secure clinical data; (iv) segment the received encrypted secure clinical data based on the determined segmentation protocol to generate a plurality of encrypted clinical data segments; (v) replicate some or all of the plurality of encrypted clinical data segments to generate redundancy of the secure clinical data; and (vi) distribute the plurality of encrypted clinical data segments to the plurality of distributed databases for storage.

[013] According to one embodiment, the method further includes receiving, by the local data center in response to a request received for secure clinical data, a plurality of encrypted clinical data segments from a plurality of distributed databases; decrypting the received plurality of encrypted clinical data segments to generate a plurality of decrypted clinical data segments; and combining the plurality of decrypted clinical data segments to generate a single combined secure clinical data result.

[014] According to one embodiment, the local data center maintains a record of which distributed databases store which segments of encrypted clinical data.

[015] According to another aspect, it is a secure data processing system for processing or storing secure clinical data. The system includes a local data center in communication with a plurality of distributed processors and / or a plurality of distributed processors; a processor configured to: (i) receive (a) secure clinical data associated with a patient and (b) a processing request or a storage request for the clinical data; (ii) determine, based on the received processing request or storage request, a segmentation protocol for the received secure clinical data; (iii) Petition 870250092189, dated 09 / 10 / 2025, pp. 105 / 151 5 / 36 segment the received secure clinical data based on the determined segmentation protocol to generate a plurality of clinical data segments; (iv) distribute the plurality of clinical data segments to the plurality of distributed processors and / or to the plurality of distributed processors.

[016] According to one embodiment, the processor is further configured to encrypt some or all of the plurality of clinical data segments.

[017] According to one embodiment, the processor is further configured to: (v) receive a plurality of processed clinical data segments from a plurality of distributed processors; and combine the received plurality of processed clinical data segments to generate a single combined secure processed clinical data result.

[018] According to one embodiment, the processor is further configured to provide, via a user interface, the single result of combined processed secure clinical data.

[019] According to one embodiment, the processor is further configured to replicate some or all of the plurality of encrypted clinical data segments to generate redundancy of secure clinical data.

[020] According to one embodiment, the processor is further configured to: (v) receive, in response to a request received for secure clinical data, a plurality of encrypted clinical data segments from a plurality of distributed databases; (vi) decrypt the received plurality of encrypted clinical data segments to generate a plurality of decrypted clinical data segments; and (vii) combine the plurality of decrypted clinical data segments to generate a single combined secure clinical data result.

[021] It will be recognized that all combinations of the aforementioned concepts and the additional concepts discussed in more detail below (provided that such concepts are not mutually inconsistent) are contemplated as part of the subject matter disclosed herein. Petition 870250092189, dated 09 / 10 / 2025, pp. 106 / 151 6 / 36 document. In particular, all combinations of the claimed subject matter appearing at the end of this disclosure are contemplated as part of the inventive subject matter disclosed herein. It will also be acknowledged that the terminology explicitly employed in the present invention, which may also appear in any disclosure incorporated by reference, shall be in accordance with a meaning more consistent with the specific concepts disclosed herein.

[022] These and other aspects of the various modalities will become evident and will be elucidated with reference to one or more modalities described from this point onward. BRIEF DESCRIPTION OF THE DRAWINGS

[023] In the figures, identical reference characters generally refer to the same parts throughout the different views. The figures show features and ways of implementing various embodiments and should not be interpreted as limiting other possible embodiments that fall within the scope of the appended claims. Furthermore, the drawings are not necessarily to scale; instead, the emphasis is generally placed on illustrating the principles of the various embodiments: Figure 1 is a flowchart of a method for processing secure clinical data, according to a modality; Figure 2 is a schematic representation of a secure data processing system, according to one embodiment; Figure 3 is a schematic representation of a system for processing secure clinical data, according to a modality; Figure 4 is a flowchart of a method for securely storing clinical data, according to a modality; and Figure 5 is a schematic representation of a system for storing secure clinical data, according to a modality. DETAILED DESCRIPTION OF THE MODALITIES Petition 870250092189, dated 09 / 10 / 2025, pp. 107 / 151 7 / 36

[024] This disclosure describes various embodiments of a system and method configured to securely process or store sensitive clinical data. More generally, the Applicant has recognized and appreciated that it would be beneficial to provide secure data processing and storage. Therefore, a secure data system comprises a local data center and a plurality of distributed processors. The system receives secure clinical data associated with a patient and a processing request for the clinical data and determines, based on the received processing request, a segmentation protocol for the received secure clinical data. The received secure clinical data is segmented based on the determined segmentation protocol to generate a plurality of clinical data segments. These clinical data segments are then distributed to the distributed processors, which perform the requested processing.

[025] According to one embodiment, the methods and systems described or otherwise provided for in this document offer numerous advantages over existing methods. For example, the secure data systems and methods described or otherwise provided for in this document ensure the security of sensitive clinical data. The probabilities of a number of different data breaches occurring in different allocation locations, in parallel, allowing for the decryption and combination of allocated data segments, are very small. The proposed secure data systems and methods described or otherwise provided for in this document also reduce the costs associated with internal processing and storage, including the costs of hardware and software installation and maintenance.

[026] The modalities and implementations disclosed or otherwise envisioned herein may be used with any clinical environment or system. For example, one application of the modalities and implementations herein is to enhance analysis systems, such as, for example, the Philips® IntelliSpace® product (manufactured by Koninklijke Philips, NV), among many other products. However, the disclosure is not limited to these devices or systems and, therefore, the disclosure and Petition 870250092189, dated 09 / 10 / 2025, pp. 108 / 151 8 / 36 The modalities disclosed here may encompass any device or system capable of creating or manipulating secure clinical data.

[027] Referring to Figure 1, in one embodiment, is a flowchart of a method 100 for secure clinical data processing with a secure data processing system. The methods described in connection with the figures are provided only as examples and should be understood as not limiting the scope of disclosure. The secure data processing system may be any of the systems described or otherwise provided for herein. The secure data processing system may be a single system or several different systems.

[028] In step 110 of the method, a secure data processing system is provided. Referring to an embodiment of a secure data processing system 200, as illustrated in Figure 2, for example, the system comprises one or more of the following: processor 220, memory 230, user interface 240, communication interface 250, and storage 260, interconnected by means of one or more system buses 212. The secure data processing system also optionally comprises a local data center 270, a plurality of distributed processors 280, and / or a plurality of distributed databases 290. It should be understood that Figure 2 constitutes, in some respects, an abstraction and that the actual organization of the system components 200 may be different and more complex than that illustrated. Additionally, the secure data processing system 200 may be any of the systems described or otherwise provided for herein.Other elements and components of the secure data processing system 200 are disclosed and / or predicted elsewhere herein.

[029] In step 120 of the method, the secure data processing system receives, retrieves, or otherwise obtains secure clinical data associated with a patient. Clinical data is secure insofar as it is confidential data, such as patient data, and is desired and / or required or Petition 870250092189, dated 09 / 10 / 2025, pp. 109 / 151 9 / 36 It is mandatory that clinical data be protected so that only authorized individuals can access the clinical data. Clinical data may be any data, including but not limited to patient identification information, demographic information, diagnostic information, treatment information, clinical information such as medical data, imaging data and / or any other information or data that is desired and / or required or mandated to be kept secure.

[030] According to a non-limiting modality, the secure data processing system receives, retrieves, or otherwise obtains secure clinical data that represents imaging data from an imaging modality. The imaging modality may be ultrasound, X-ray, computed tomography (CT), magnetic resonance imaging (MRI), positron emission tomography (PET), and / or any other imaging modality. Thus, secure clinical data may be imaging data obtained from any of these imaging modalities.

[031] Secure clinical data may be received, retrieved, or otherwise obtained from one or a plurality of different sources. Secure clinical data may be received, retrieved, or otherwise obtained by the system’s local data center 270, which may be some or many of the system components shown in Figure 2. For example, the local data center may comprise everything except the plurality of distributed processors 280 and the plurality of distributed databases 290, or it may comprise only some of these components in Figure 2 (in addition to components not shown). For example, the local data center may be a server, another computer, or another component located in a clinical environment, such as an outpatient center, hospital, or doctor’s office. As another example, the local data center may be the imaging device or system or other Petition 870250092189, dated 09 / 10 / 2025, pp. 110 / 151 10 / 36 device or data collection system that gathers, creates, or generates clinical data.

[032] Secure clinical data received can be used immediately or stored in local or remote storage for use in further steps of the method.

[033] According to one embodiment, secure clinical data may require processing after it is obtained. Processing may be any data processing that can be performed on clinical data, including for analytical or diagnostic purposes. Processing may be, for example, the processing of imaging data to enable analysis. Thus, also in step 120 of the method, the secure data processing system receives, retrieves, or otherwise obtains a processing request for the clinical data. The request may be an automated request, so that the processing of clinical data is part of an automated workflow. Alternatively, the request may be received through a user interface of the secure data system, from a clinician or other individual authorized to process or view the secure clinical data. The request may also be received from another system.A processing request can be any command for processing that can be performed on the received secure clinical data.

[034] In step 130 of the method, the secure data processing system 200 determines, based on the received clinical data and / or the received processing request, a segmentation protocol for the received secure clinical data. The segmentation protocol can be any method, algorithm, or system for dividing the received clinical data into two or more components. The segmentation protocol can be automatic so that it is part of an automated workflow, and thus the same segmentation protocol can be used for all clinical data and for each processing request. Alternatively, there may be two or more possible segmentation protocols that can be Petition 870250092189, dated 09 / 10 / 2025, pp. 111 / 151 11 / 36 used and which of the two or more possible segmentation protocols is used depends on the nature of the clinical data received and / or the demands of the processing request received. For example, a specific segmentation protocol may be identified for a specific imaging modality. The specific segmentation protocol may be predetermined or selected by a system setting, a parameter of the clinical data, or by a user. Thus, the segmentation protocol may be automatically determined or identified by the secure data processing system or may be manually determined or identified by a user, programmer, clinician, or other individual. Different segmentation protocols may differ in how they segment the data, how they package or process the data segments, or according to any other parameter.According to one embodiment, therefore, the secure data processing system 200 may comprise one or a plurality of segmentation protocols.

[035] In step 140 of the method, the determined segmentation protocol is used to segment the received secure clinical data into a plurality of clinical data segments. The secure clinical data can be segmented by the segmentation protocol using any known method for segmentation and / or packaging of data. Once the plurality of clinical data segments is generated by the determined segmentation protocol, the segments can be used immediately or can be stored in local or remote storage for use in further steps of the method. According to one embodiment, the plurality of clinical data segments is segmented so that a clinical data segment sent to a distributed processor cannot identify the patient or otherwise reveal sensitive information about the patient or about the clinical data.

[036] In optional step 142 of the method, some or all of the plurality of clinical data segments may be encrypted. The data segments Petition 870250092189, dated 09 / 10 / 2025, pp. 112 / 151 12 / 36 clinical data can be encrypted using any known method, system, or algorithm for data encryption. Once encrypted, the segments can be used immediately or stored in local or remote storage for use in further steps of the method. Notably, step 142 of the method can also occur before step 140 of the method.

[037] In step 150 of the method, the plurality of clinical data segments is distributed to the plurality of distributed processors. The plurality of clinical data segments can be distributed to the plurality of distributed processors using any known method, system, or algorithm for distributing a data packet. For example, the data system might comprise an allocation algorithm or software service that packages or processes a data segment and then transmits the packaged data segment over a wired and / or wireless communication network to a distributed processor.

[038] According to one embodiment, the distributed processor processes the clinical data segment. The processing may comprise any processing that the processor is designed or programmed or configured to perform. Each of the plurality of distributed processors that receives a clinical data segment may process the data immediately or may store the clinical data segment for future processing. For example, a distributed processor may process data as it is received and / or may batch process the received data. Furthermore, the distributed processor may return the processed data to the local data center immediately after it is processed, or may store the processed data in local or remote storage until it is returned via the wired and / or wireless communication network to the local data center.

[039] Thus, in step 160 of the method, the local data center of the data processing system receives the plurality of processed clinical data segments from the plurality of distributed processors. The segments of Petition 870250092189, dated 09 / 10 / 2025, pp. 113 / 151 13 / 36 Processed clinical data can be received via wired and / or wireless communication network using any method to receive a data segment. This can be, for example, a function of the allocation algorithm of the data processing system. The received plurality of processed clinical data segments can be used immediately or can be stored in local or remote storage for use in further steps of the method.

[040] In step 170 of the method, the data processing system combines the received plurality of processed clinical data segments into a single combined processed secure clinical data result, effectively reversing the segmentation. The received plurality of processed clinical data segments can be combined into a single combined processed secure clinical data result using any method or algorithm to combine individual data packets. This can be performed by the segmentation protocol or algorithm, or it can be performed by another protocol or algorithm and may optionally be based on the segmentation protocol or algorithm.Since the data processing system combines the received plurality of processed clinical data segments into a single, secure, combined processed clinical data result, this result can be used immediately or stored in local or remote storage for use in further steps of the method.

[041] In optional step 180 of the method, the single result of combined processed secure clinical data is provided through a system user interface. The single result of combined processed secure clinical data can be provided to a user, who may be a clinician, patient, or medical professional, and / or any other individual authorized to view or review the information. The single result of combined processed secure clinical data can be provided to a user through any user interface or other information communication system. For example, the information may be transmitted or otherwise communicated. Petition 870250092189, dated 09 / 10 / 2025, pp. 114 / 151 14 / 36 via wired and / or wireless communication to a local or remote viewer, such as a remote medical professional.

[042] In optional step 190 of the method, the single result of combined processed secure clinical data can be used by a clinician or other medical professional to make a diagnosis and / or treatment recommendation for the patient. For example, the clinician or other medical professional can review the single result of combined processed secure clinical data provided through the user interface, which may be a patient portal, imaging system, or other system or display or device. The clinician or other medical professional can use this displayed result of processed secure clinical data to make a diagnosis and / or treatment recommendation for the patient. When the displayed single result of combined processed secure clinical data is an image, for example, the clinician or other medical professional can review the image and make a diagnosis or treatment recommendation for the patient.

[043] Therefore, in step 192 of the method, the clinician or other medical professional can administer a treatment based on the diagnosis and / or treatment recommendation for the patient from step 190 of the method. Thus, the single result of combined processed safe clinical data provided to the clinician or other medical professional through the user interface is implemented to make a diagnosis and / or treatment recommendation for the patient, and this treatment is then administered by the clinician or medical professional, or any other medical professional. The treatment can be any treatment that can be determined after the analysis of clinical data. For example, the analysis of a single processed image generated according to method 100 may determine that the patient has a broken bone and the treatment is bone setting and / or casting, among many other possible treatments.

[044] With reference to Figure 3, in one embodiment, is a schematic representation of a 300 system for processing secure clinical data with a Petition 870250092189, dated 09 / 10 / 2025, pp. 115 / 151 15 / 36 Secure data processing system. For complex processing tasks, the processing job may consist of a dataset and a set of instructions or an advanced description of the methods to be applied to the dataset. For jobs that can be run in parallel on multiple systems separately, each of these jobs is separated into micro-jobs that are sent to random instances of remote processing, which may be cloud processing services run by various vendors and institutions. The instructions for each micro-job may be provided by the vendor, preferably in the most up-to-date version. For AI-based methods, this may be the latest version of a trained network or the latest version of the software client required to process the data.

[045] Consequently, a local 310 data center receives, retrieves, or otherwise obtains secure clinical data associated with a patient. Clinical data is secure insofar as it is confidential data, such as patient data, and it is desired and / or required or mandated that clinical data be protected so that only authorized individuals can access the clinical data. Clinical data may be any data, including but not limited to patient identification information, demographic information, diagnostic information, treatment information, clinical information such as medical data, imaging data, and / or any other information or data that is desired and / or required or mandated to be kept secure.According to a non-limiting embodiment, the secure data processing system receives, retrieves, or otherwise obtains secure clinical data representing imaging data from an imaging modality. The local data center also receives, retrieves, or otherwise obtains a processing request for the clinical data. The request may be an automated request, so that the processing of clinical data is part of an automated workflow. Alternatively, a. Petition 870250092189, dated 09 / 10 / 2025, pp. 116 / 151 16 / 36 requests can be received through a secure data system user interface, from a clinician or other individual authorized to process or view the secure clinical data. The request can also be received from another system. The processing request can be any command for processing that can be performed on the received secure clinical data.

[046] As shown in 330, the local data center 310 receives the clinical data and the processing request or protocol, forming a processing job that must be performed. According to one embodiment, this processing job may be organized or processed or otherwise facilitated by processing software or instructions 320 provided or installed by a vendor. The local data center 310 segments the clinical data into a plurality of clinical data segments, which may be called microjobs, since each of the plurality of clinical data segments will be processed individually by a distributed processor as a microjob. The local data center 310 allocates or transmits the plurality of clinical data segments to different distributed remote processors, such as a cloud-based processing service, via a wired and / or wireless communication network.These distributed remote processors then perform the processing or micro-work to generate a micro-result that is returned to the local data center 310. The local data center 310 combines the micro-results to generate a single, secure, combined processed clinical data result (i.e., processing result), which can be provided to the clinician. EXAMPLE

[047] The following is provided only as a non-limiting example of clinical data processing and is therefore understood as not limiting the scope of the modalities described or otherwise provided for in this document.

[048] The following example is an exemplary method or algorithm or process for distributed reconstruction of raw CT data. During the Petition 870250092189, dated 09 / 10 / 2025, pp. 117 / 151 17 / 36 CT data acquisition (such as a scout scan and 3D helical / axial scan), the raw data is divided into N fragments (data segments) based on a selected CT protocol. The fragments must be large enough to allow independent reconstruction, but as small as possible to minimize the risk of identification and misuse of data. According to one embodiment, keys that are known to the processing service are used for encryption of each data block. The encryption of a data block and the reconstruction settings of an encrypted minijob, which is sent or streamed to a remote processing service (cloud). The system waits and then receives the encrypted reconstructed results, which are decrypted and then knitted or combined to generate a complete reconstructed dataset.For a helical computed tomography scan, for example, the raw data can be separated into overlapping data segments that can be reconstructed independently, each providing minimal diagnostic value on its own.

[049] According to another embodiment, the secure data processing system is used to store secure clinical data. Referring to Figure 4, in one embodiment, is a flowchart of a method 400 for storing secure clinical data by a secure data processing system. The methods described in connection with the figures are provided only as examples and should be understood as not limiting the scope of the disclosure. The secure data processing system may be any of the systems described or otherwise provided for herein. The secure data processing system may be a single system or several different systems.

[050] In step 410 of the method, the secure data processing system is provided. Referring to an embodiment of secure data processing system 200, as illustrated in Figure 2, for example, the system comprises one or more of the following: processor 220, Petition 870250092189, dated 09 / 10 / 2025, pp. 118 / 151 18 / 36 memory 230, user interface 240, communication interface 250, and storage 260, interconnected by means of one or more system buses 212. The secure data processing system also optionally comprises a local data center 270, a plurality of distributed processors 280, and / or a plurality of distributed databases 290. It should be understood that Figure 2 constitutes, in some respects, an abstraction and that the actual organization of the system components 200 may be different and more complex than illustrated. Additionally, the secure data processing system 200 may be any of the systems described or otherwise envisioned herein. Other elements and components of the secure data processing system 200 are disclosed and / or envisioned elsewhere herein.

[051] In step 420 of the method, the secure data processing system receives, retrieves, or otherwise obtains secure clinical data associated with a patient. Clinical data is secure insofar as it is confidential data, such as patient data, and it is desired and / or required or mandated that the clinical data be protected so that only authorized individuals can access the clinical data. Clinical data may be any data, including but not limited to patient identification information, demographic information, diagnostic information, treatment information, clinical information such as medical data, imaging data, and / or any other information or data that is desired and / or required or mandated to be kept secure.

[052] According to a non-limiting modality, the secure data processing system receives, retrieves, or otherwise obtains secure clinical data representing imaging data from an imaging modality. The imaging modality may be ultrasound, X-ray, computed tomography (CT), magnetic resonance imaging (MRI), positron emission tomography (PET), and / or any other modality of Petition 870250092189, dated 09 / 10 / 2025, pp. 119 / 151 19 / 36 image. Thus, reliable clinical data can be obtained from imaging data from any of these imaging modalities.

[053] Secure clinical data may be received, retrieved, or otherwise obtained from one or a plurality of different sources. Secure clinical data may be received, retrieved, or otherwise obtained by the system’s local data center 270, which may be some or many of the system components shown in Figure 2. For example, the local data center may comprise everything except the plurality of distributed processors 280 and the plurality of distributed databases 290, or it may comprise only some of these components in Figure 2 (in addition to components not shown). For example, the local data center may be a server, another computer, or another component located in a clinical environment, such as an outpatient center, hospital, or doctor’s office. As another example, the local data center may be the imaging device or system or other data collection device or system that gathers, creates, or generates the clinical data.The reliable clinical data received can be used immediately or stored locally or remotely for use in further steps of the method.

[054] According to one embodiment, secure clinical data may require storage after it is obtained. Storage may be temporary and / or permanent. Thus, also in step 120 of the method, the secure data processing system receives, retrieves, or otherwise obtains a storage request for the clinical data. The request may be an automated request, so that the storage of clinical data is part of an automated workflow. Alternatively, the request may be received through a user interface of the secure data system, from a clinician or other individual authorized to process or view the secure clinical data. The request may also be received from another system. The storage request may be any command for storage that can be performed on the received secure clinical data. Petition 870250092189, dated 09 / 10 / 2025, pp. 120 / 151 20 / 36

[055] In step 430 of the method, the secure data processing system 200 determines, based on the received clinical data and / or the received storage request, a segmentation protocol for the received secure clinical data. The segmentation protocol can be any method, algorithm, or system for dividing the received clinical data into two or more components. The segmentation protocol can be automatic so that it is part of an automated workflow, and thus the same segmentation protocol can be used for all clinical data and for each storage request. Alternatively, there may be two or more possible segmentation protocols that can be used, and which of the two or more possible segmentation protocols is used depends on the nature of the received clinical data and / or the demands of the received storage request.For example, a specific segmentation protocol can be identified for a specific imaging modality. The specific segmentation protocol can be predetermined or selected by a system setting, a clinical data parameter, or by a user. Thus, the segmentation protocol can be automatically determined or identified by the secure data processing system, or it can be manually determined or identified by a user, programmer, clinician, or other individual. Different segmentation protocols may differ in how they segment the data, how they package or process the data segments, or according to any other parameter. Depending on the modality, therefore, the secure data processing system 200 may comprise one or a plurality of segmentation protocols.

[056] In step 440 of the method, the determined segmentation protocol is used to segment the received secure clinical data into a plurality of clinical data segments. The secure clinical data can be segmented by the segmentation protocol using any known method for data segmentation and / or packaging. Once the Petition 870250092189, dated 09 / 10 / 2025, pp. 121 / 151 21 / 36 A plurality of clinical data segments is generated by the determined segmentation protocol; the segments can be used immediately or stored in local or remote storage for use in further steps of the method. According to one embodiment, the plurality of clinical data segments is segmented so that a clinical data segment sent to a distributed processor cannot identify the patient or otherwise reveal sensitive information about the patient or clinical data.

[057] In optional step 442 of the method, some or all of the plurality of clinical data segments may be encrypted. The clinical data segments may be encrypted using any known method, system, or algorithm for data encryption. Once encrypted, the segments may be used immediately or may be stored in local or remote storage for use in further steps of the method. Notably, step 442 of the method may also occur before step 440 of the method.

[058] In step 450 of the method, some or all of the plurality of encrypted clinical data segments are duplicated or replicated to generate redundancy of the secure clinical data. For example, the system may be programmed or designed to make an additional copy or multiple additional copies of the clinical data or of a clinical data segment. According to one embodiment, the duplicated clinical data segments may be distributed to different distributed databases in order to protect against data loss. The clinical data or clinical data segments may be duplicated or replicated using any known method for duplication or replication. The duplicated or replicated clinical data or clinical data segments may be used immediately or may be stored in local and / or remote storage for future use by the method. Petition 870250092189, dated 09 / 10 / 2025, pp. 122 / 151 22 / 36

[059] Notably, step 450 of the method can be performed at any step of the method. For example, clinical data can be duplicated before or after being segmented, before or after being encrypted, or before or after being distributed or allocated to a distributed database.

[060] In step 460 of the method, the plurality of encrypted clinical data segments is distributed to the plurality of distributed databases. The plurality of clinical data segments can be distributed to the plurality of distributed databases using any known method, system, or algorithm for distributing a data packet. For example, the data system might comprise an allocation algorithm or software service that packages or processes a data segment and then transmits the packaged data segment over a wired and / or wireless communication network to a distributed database. According to one embodiment, the distributed database stores the received clinical data segment(s).

[061] In step 470 of the method, the local data center receives the plurality of encrypted clinical data segments from the plurality of distributed databases in response to a request received for secure clinical data. For example, a clinician or other medical professional may request, via a user interface, clinical data that is stored remotely in distributed databases. The local data center sends a request to the distributed databases to transmit the stored plurality of encrypted clinical data segments back to the local data center.

[062] In step 480 of the method, the received plurality of encrypted clinical data segments is decrypted by the data processing system to generate a plurality of decrypted clinical data segments. The clinical data segments can be decrypted using any known method, system, or algorithm. Petition 870250092189, dated 09 / 10 / 2025, pp. 123 / 151 23 / 36 for data decryption. Once decrypted, the segments can be used immediately or stored in local or remote storage for use in further steps of the method.

[063] In step 490 of the method, the data processing system combines the plurality of decrypted clinical data segments to generate a single combined secure clinical data result, effectively reversing the segmentation. The plurality of decrypted clinical data segments can be combined into a single combined secure clinical data result using any method or algorithm to combine individual data packets. This can be performed by the segmentation protocol or algorithm, or it can be performed by another protocol or algorithm and may optionally be based on the segmentation protocol or algorithm. Once the data processing system combines the received plurality of decrypted clinical data segments into a single combined secure clinical data result, this result can be used immediately or can be stored in local or remote storage for use in further steps of the method.

[064] The single result of combined secure clinical data can then be provided through a system user interface. The single result of combined secure clinical data can be provided to a user, who may be a clinician, patient or medical professional, and / or any other individual authorized to view or review the information. The single result of combined secure clinical data can be provided to a user through any user interface or other information communication system. For example, the information can be transmitted or otherwise communicated via wired and / or wireless communication to a local or remote viewer, such as a remote medical professional.

[065] With reference to Figure 5, in one embodiment, is a schematic representation of a 500 system for storing secure clinical data with a secure data processing system. To archive a set of Petition 870250092189, dated 09 / 10 / 2025, pp. 124 / 151 24 / 36 clinical data: the dataset is divided into smaller fragments, where each fragment does not contain sufficient information for data interpretation (such as patient identification or analysis). The dataset can be encrypted and scrambled before being divided into smaller data blocks that are uploaded (outsourced) to cloud-based services in a redundant version. Redundancy is added so that if any data fragments are lost, the remaining distributed data allows for the reconstruction of the complete original clinical dataset. For this, the owning hospital must maintain links only to all data blocks, along with critical patient and study information, allowing them to find the specific dataset and the location of its distributed data blocks.

[066] Therefore, in 510, the local data center receives a request to store data, such as a set of clinical data for archiving. In 520, the local data center encrypts the data, generates data redundancy, and segments the data into a plurality of encrypted clinical data segments. The plurality of encrypted clinical data segments is then distributed or allocated to a plurality of remote distributed databases 520, such as through a cloud-based storage service.

[067] Although not shown in Figure 5, the stored data can be restored. The local data center can transmit a request for the data to the plurality of remote distributed databases 520, which will return the plurality of encrypted clinical data segments to the local data center. The local data center then combines and decrypts the plurality of encrypted clinical data segments to generate a single result of combined secure clinical data. EXAMPLE

[068] The following is provided only as a non-limiting example of clinical data storage and is therefore understood as non-limiting Petition 870250092189, dated 09 / 10 / 2025, pages 125 / 151 25 / 36 the scope of the modalities described or otherwise provided for in this document.

[069] For data storage, data can be encrypted and scrambled. RAID (redundant array of independent disks) transformation can be performed to generate data fragments (N+M) with a specified redundancy level (i.e., N fragments are sufficient to decompress original data). Each data block or segment can be assigned a unique ID, and each can be transferred (and then deleted locally) to a remote cloud data storage service. This remote cloud data storage service cannot be the same for at least some number N of fragments, where N results in identification or other disclosure of secure information. The system maintains a list of data block IDs and corresponding storage service identifiers saved locally (e.g., at the clinic that owns the data).

[070] For data recovery, the system can load the list of data block IDs and corresponding storage service identifiers saved locally (e.g., at the clinic that holds the data). The system can then send a data recovery request to each cloud service along with the corresponding unique data block ID and will recover at least N data fragments (from the total number of fragments N+M). The system can then decrypt and combine the data fragments to generate a single recombined output, which can be saved or otherwise used.

[071] Referring to Figure 2, it is a schematic representation of a secure data processing system 200. System 200 may be any of the systems described or otherwise contemplated in the present invention and may comprise any of the components described or otherwise contemplated in the present invention. It should be understood that Figure 2 constitutes, in some respects, an abstraction and that the actual organization Petition 870250092189, dated 09 / 10 / 2025, pp. 126 / 151 26 / 36 of the components of system 200 may be different and more complex than illustrated.

[072] According to one embodiment, the 200 system comprises a 220 processor capable of executing instructions stored in memory 230 or storage 260 or, alternatively, processing data to, for example, execute one or more steps of the method. The 220 processor may be formed of one or multiple modules. The 220 processor may assume any suitable form, including, but not limited to, a microprocessor, microcontroller, multiple microcontrollers, circuits, a field programmable gate array (FPGA), an application-specific integrated circuit (ASIC), a single processor or multiple processors.

[073] Memory 230 can take any suitable form, including non-volatile memory and / or RAM. Memory 230 may include various memories, such as an L1, L2, or L3 cache or system memory. Thus, memory 230 may include static random access memory (SRAM), dynamic RAM (DRAM), flash memory, read-only memory (ROM), or other similar memory devices. Memory may store, among other things, an operating system. RAM is used by the processor for temporary data storage. According to one embodiment, an operating system may contain code that, when executed by the processor, controls the operation of one or more system components 200.It will become evident that, in embodiments where the processor implements one or more of the functions described in the present invention in hardware, the software described as corresponding to such functionality in other embodiments may be omitted.

[074] The user interface 240 may include one or more devices to enable communication with a user. The user interface may be any device or system that allows information to be Petition 870250092189, dated 09 / 10 / 2025, pp. 127 / 151 27 / 36 transmitted and / or received, and may include a screen, a mouse and / or a keyboard to receive user commands. In some embodiments, the user interface 240 may include a command-line interface or a graphical user interface that can be presented to a remote terminal via the communication interface 250. The user interface may be located with one or more other system components, or may be located remotely from the system and communicating via a wired and / or wireless communication network.

[075] The 250 communication interface may include one or more devices to enable communication with other hardware devices. For example, the 250 communication interface may include a network interface card (NIC) configured to communicate according to the Ethernet protocol. Additionally, the 250 communication interface may implement a TCP / IP stack for communication according to TCP / IP protocols. Various alternative or additional hardware components or configurations for the 250 communication interface will be evident.

[076] Storage 260 may include one or more machine-readable storage media such as read-only memory (ROM), random access memory (RAM), magnetic disk storage media, optical storage media, flash memory devices, or similar storage media. In various embodiments, storage 260 may store instructions for execution by a processor 220 or data on which the processor 220 may operate. For example, storage 260 may store an operating system 261 to control various system operations 200.

[077] It will be evident that various pieces of information described as stored in storage 260 may additionally or alternatively be stored in memory 230. In this respect, memory 230 may also be considered as constituting a storage device and storage 260 may be considered a memory. Several other arrangements will be evident. Petition 870250092189, dated 09 / 10 / 2025, pp. 128 / 151 28 / 36 Additionally, 230 memory and 260 storage can be considered as non-transient machine-readable media. As used herein, the term non-transient will be understood to exclude transient signals, but to include all forms of storage, including both volatile and non-volatile memories.

[078] Although system 200 is shown as including one of each component described, the various components may be duplicated in several embodiments. For example, processor 220 may include multiple microprocessors that are configured to independently execute the methods described in the present invention or that are configured to execute steps or subroutines of the methods described in the present invention, such that the multiple processors cooperate to achieve the functionality described in the present invention. Additionally, when one or more components of system 200 are implemented in a cloud computing system, the various hardware components may belong to separate physical systems. For example, processor 220 may include a first processor in a first server and a second processor in a second server. Many other variations and configurations are possible.

[079] According to one embodiment, the system comprises a local data center 270, which may be some or many of the system components shown in Figure 2. For example, the local data center may comprise everything except the plurality of distributed processors 280 and the plurality of distributed databases 290, or it may comprise only some of these components in Figure 2 (in addition to components not shown). For example, the local data center may be a server, another computer, or another component located in a clinical environment, such as an outpatient center, hospital, or doctor's office. As another example, the local data center may be the imaging device or system or other data collection device or system that gathers, creates, or generates the clinical data. Petition 870250092189, dated 09 / 10 / 2025, pp. 129 / 151 29 / 36

[080] According to one embodiment, the system comprises or is in communication with a plurality of distributed processors 280. According to one embodiment, the plurality of distributed processors is remote from the local data center. The plurality of distributed processors can be any processor, server, computer, or other processing device that can process clinical data. For example, the plurality of distributed processors can be a remote service, such as a cloud-based service, which may or may not be hosted or provided by a third-party service or vendor.

[081] According to one embodiment, the system comprises or is in communication with a plurality of distributed databases 290. According to one embodiment, the plurality of distributed databases is remote from the local data center. The plurality of distributed databases can be any memory, databases, computers, or other storage device that can store clinical data. For example, the plurality of distributed databases can be a remote service, such as a cloud-based service, which may or may not be hosted or provided by a third-party service or vendor.

[082] According to one modality, the system's 260 storage 200 can store one or more algorithms, modules and / or instructions to perform one or more functions or steps of the methods described or otherwise contemplated in the present invention. For example, the system may comprise, among other instructions or data, segmentation instructions 262, encryption instructions 263, distribution instructions 264 and / or reporting instructions 265.

[083] According to one embodiment, the segmentation instructions 262 direct the secure data processing system to determine, based on the received clinical data and / or the received processing or storage request, a segmentation protocol for the received secure clinical data. The segmentation protocol can be any method, Petition 870250092189, dated 09 / 10 / 2025, pp. 130 / 151 30 / 36 An algorithm or system for dividing received clinical data into two or more components. The segmentation protocol can be automatic, forming part of an automated workflow, and thus the same segmentation protocol can be used for all clinical data and for each processing or storage request. Alternatively, there may be two or more possible segmentation protocols that can be used, and which of the two or more possible segmentation protocols is used depends on the nature of the received clinical data and / or the demands of the received processing or storage request. For example, a specific segmentation protocol may be identified for a specific imaging modality. The specific segmentation protocol may be predetermined or selected by a system setting, a clinical data parameter, or by a user.Thus, the segmentation protocol can be automatically determined or identified by the secure data processing system, or it can be manually determined or identified by a user, programmer, clinician, or other individual.

[084] According to one embodiment, segmentation instructions 262 also direct the secure data processing system to segment the received secure clinical data into a plurality of clinical data segments using any known method for data segmentation and / or packaging. Once the plurality of clinical data segments is generated by the determined segmentation protocol, the segments can be used immediately or can be stored in local or remote storage for use in further steps of the method. According to one embodiment, the plurality of clinical data segments is segmented so that a clinical data segment sent to a distributed processor cannot identify the patient or otherwise reveal sensitive information about the patient or about the clinical data. Petition 870250092189, dated 09 / 10 / 2025, pp. 131 / 151 31 / 36

[085] According to one embodiment, segmentation instructions 262 also direct the secure data processing system to combine processed clinical data segments into a single combined processed secure clinical data result, effectively reversing segmentation. The received plurality of processed clinical data segments can be combined into a single combined processed secure clinical data result using any method or algorithm to combine individual data packets.

[086] According to one embodiment, segmentation instructions 262 also direct the secure data processing system to combine decrypted clinical data segments to generate a single combined secure clinical data result, effectively reversing segmentation. The plurality of decrypted clinical data segments can be combined into a single combined secure clinical data result using any method or algorithm to combine individual data packets.

[087] According to one embodiment, encryption instructions 263 direct the secure data processing system to encrypt some or all of the plurality of clinical data segments before processing or storage. The clinical data segments may be encrypted using any known method, system, or algorithm for data encryption. Once encrypted, the segments may be used immediately or may be stored in local or remote storage for use in further steps of the method.

[088] According to one embodiment, encryption instructions 263 direct the secure data processing system to decrypt some or all of the plurality of clinical data segments after processing or storage. The clinical data segments may be decrypted using any known method, system, or algorithm for data decryption. Once decrypted, the segments may be Petition 870250092189, dated 09 / 10 / 2025, pp. 132 / 151 32 / 36 can be used immediately or stored in local or remote storage for use in further steps of the method.

[089] According to one embodiment, distribution instructions 264 direct the secure data processing system to distribute or allocate the plurality of clinical data segments to the plurality of distributed processors or the plurality of distributed databases. The plurality of clinical data segments may be distributed to the plurality of distributed processors or the plurality of distributed databases using any known method, system, or algorithm for distributing a data packet. For example, the data system may comprise an allocation algorithm or software service that packages or processes a data segment and then transmits the packaged data segment over a wired and / or wireless communication network to a distributed processor or database.

[090] According to one embodiment, distribution instructions 264 also direct the secure data processing system to request the processed or stored plurality of clinical data segments from the plurality of distributed processors or the plurality of distributed databases, such as in response to a request for the data through a user interface or an automated workflow.

[091] According to one embodiment, reporting instructions 265 direct the secure data processing system to provide, through a user interface, the single result of combined secure clinical data or the single result of combined secure clinical data. The result may be provided to a user, who may be a clinician, patient or medical professional, and / or any other individual authorized to view or review the information. The result may be provided to a user through any user interface or other information communication system. For example, the information may be transmitted or Petition 870250092189, dated 09 / 10 / 2025, pp. 133 / 151 33 / 36 otherwise communicated via wired and / or wireless communication to a local or remote viewer, such as a remote medical professional.

[092] According to one embodiment, the secure data processing system 200 is configured to process many thousands or millions of data points from the input to the system (i.e., the received clinical data) in order to generate the output (i.e., the plurality of clinical data segments and / or the single result of combined secure clinical data processing or the single result of combined secure clinical data). Processing this data securely—to avoid patient identification or secure data analysis—comprises a process with a volume of computation and analysis that a human brain cannot perform in a lifetime or in multiple lifetimes. In fact, one of the benefits of a computer-based system is that a human who might perform data segmentation would inadvertently see the data before segmentation, meaning that segmentation would not guarantee the security of the clinical data.

[093] All definitions, as defined and used in this document, shall be regarded as taking precedence over dictionary definitions, definitions in documents incorporated by reference and / or over the common meanings of the defined terms.

[094] The indefinite articles a and an as used in this document in the descriptive report and in the claims, unless clearly indicated otherwise, shall be understood to mean at least a.

[095] The phrase "and / or," as used in this document in the descriptive report and claims, should be understood to mean one or the other or both of the linked elements, that is, elements that are present conjuncturally in some cases and disjuncturally in other cases. Multiple elements in a list with "and / or" should be interpreted in the same way, that is, one or more of the elements connected in this way. Other elements may optionally be present in addition to those listed. Petition 870250092189, dated 09 / 10 / 2025, pp. 134 / 151 34 / 36 elements specifically identified by the clause and / or, related or unrelated to those specifically identified elements.

[096] As used in this document in the descriptive report and claims, the word "or" should be understood to have the same meaning as "and / or" as defined above. For example, when separating items in a list, "or" or "and / or" should be interpreted as inclusive, that is, including at least one, but also including more than one, several, or a list of elements and, optionally, additional items that do not appear in the list. Only terms that clearly indicate the contrary, such as "only one among" or "exactly one among" or, when used in claims, which consists of, refer to the inclusion of exactly one element among a diversity or list of elements. In general, the term "or" as used in this document should only be interpreted as indicating exclusive alternatives (that is, one or the other, but not both) when preceded by terms of exclusivity, such as "one or the other," "one of," "only one," or "exactly one."

[097] As used herein in the descriptive report and claims, the term "at least one," in reference to a list of one or more elements, shall be understood to mean at least one element selected from any one or more of the elements in the list of elements, but does not necessarily include at least one of each and every element specifically mentioned in the list of elements and does not exclude any combinations of elements in the list of elements. This definition also allows for other elements to optionally be present in addition to the elements specifically identified within the list of elements to which the term "at least one" refers, whether or not they are related to those specifically identified elements.

[098] It should also be understood that, unless otherwise indicated, in any methods claimed herein that include more than one step or action, the order of the steps or actions of Petition 870250092189, dated 09 / 10 / 2025, pages 135 / 151 35 / 36 method are not necessarily limited to the order in which the steps or actions of the method are mentioned.

[099] In the claims, as well as in the descriptive report above, all transitional phrases such as comprising, including, performing, having, containing, involving, encompassing, composed of and the like shall be understood as non-limiting, that is, meanings that include but are not limited to. Only the transitional phrases consisting of and consisting essentially of shall be closed or semi-closed transitional phrases, respectively.

[100] Although several inventive embodiments have been described and illustrated in this document, those skilled in the art will immediately recognize a variety of other means and / or structures for performing the function and / or obtaining the results and / or one or more of the advantages described in this document, and each of these variations and / or modifications is considered to fall within the scope of the inventive embodiments described in this document. More generally, those skilled in the art will readily recognize that all parameters, dimensions, materials, and configurations described in this document are exemplary and that the actual parameters, dimensions, materials, and / or configurations will depend on the specific application or applications for which the inventive teachings are / will be used. Those skilled in the art will recognize, or will be able to ascertain, through the use of ordinary experimentation alone, many equivalents to the specific inventive embodiments described herein.It should therefore be understood that the aforementioned embodiments are presented only by way of example and that, within the scope of the appended and equivalent claims, the inventive embodiments may be practiced in a manner different from that specifically described and claimed. The inventive embodiments of the present disclosure refer to each individual feature, system, article, material, kit and / or method described herein. In addition, any combination of two or more of these. Petition 870250092189, dated 09 / 10 / 2025, pp. 136 / 151 36 / 36 features, resources, systems, articles, materials, kits and / or methods, provided that such features, systems, articles, materials, kits and / or methods are not mutually inconsistent, are included within the inventive scope of the present disclosure. Petition 870250092189, dated 09 / 10 / 2025, pp. 137 / 151

Claims

1 / 4 CLAIMS 1. Method (100) for processing secure clinical data with a plurality of distributed processors (280) and according to a segmentation protocol, characterized by comprising: distributing (150) a plurality of clinical data segments to the plurality of distributed processors (280), wherein the clinical data segments are segmented based on the segmentation protocol; processing the distributed plurality of clinical data segments by the plurality of distributed processors (280) to generate a plurality of processed clinical data segments; and combining (170) the plurality of processed clinical data segments to generate a single combined processed clinical data result.

2. A method according to claim 1, characterized in that the clinical data are imaging data obtained by an imaging modality, and wherein the imaging modality is a local data center or is in communication with a local data center.

3. Method according to claim 1, characterized by further comprising the step of encrypting (142) some or all of the plurality of clinical data segments.

4. A method according to claim 1, characterized in that a plurality of clinical data segments are segmented in such a way that a clinical data segment sent to a distributed processor cannot identify the patient.

5. Method according to claim 1, characterized by further comprising the step of providing (180), through a user interface (240), the single result of combined processed secure clinical data.

6. Method according to claim 1, characterized by further comprising the steps of: Petition 870250092189, dated 09 / 10 / 2025, page 148 / 151 2 / 4 diagnosing (190) the patient based on the single result of combined processed safe clinical data; and administering (192) a treatment based on the diagnosis.

7. Non-transient machine-readable medium, characterized by comprising instructions for processing secure clinical data according to a segmentation protocol, wherein the instructions are executable by a processor to: distribute a plurality of clinical data segments to a plurality of distributed processors to process the plurality of clinical data segments to generate a plurality of processed clinical data segments, wherein the clinical data segments are segmented based on the segmentation protocol; and combine the plurality of processed clinical data segments to generate a single combined processed clinical data result.

8. Non-transient machine-readable medium according to claim 7, characterized by additionally comprising processor-executable instructions for encrypting some or all of the plurality of clinical data segments.

9. Non-transient machine-readable medium according to claim 8, characterized by further comprising processor-executable instructions for: receiving (470) a plurality of encrypted processed clinical data segments from a plurality of distributed databases; decrypting (480) the received plurality of encrypted processed clinical data segments to generate a plurality of decrypted processed clinical data segments; and combining (490) the plurality of decrypted processed clinical data segments to generate a single combined secure clinical data result. Petition 870250092189, dated 09 / 10 / 2025, pp. 149 / 151 3 / 4 10. Secure data processing system (200) for processing secure clinical data according to a segmentation protocol, characterized by comprising a processor configured to: distribute a plurality of clinical data segments to a plurality of distributed processors to process the plurality of clinical data segments to generate a plurality of processed clinical data segments, wherein the clinical data segments are segmented based on the segmentation protocol; and combine the plurality of processed clinical data segments to generate a single combined processed clinical data result.

11. Secure data processing system, according to claim 10, characterized in that the processor is further configured to encrypt some or all of the plurality of clinical data segments.

12. Secure data processing system, according to claim 10, characterized in that the processor is further configured to provide, through a user interface (240), the single result of combined secure clinical data.

13. Secure data processing system, according to claim 10, characterized in that the processor is further configured to replicate some or all of the plurality of encrypted clinical data segments.

14. Secure data processing system according to claim 11, characterized in that the processor is further configured to: (v) receive a plurality of encrypted processed clinical data segments from a plurality of distributed processors; (vi) decrypt the received plurality of encrypted processed clinical data segments to generate a plurality of decrypted processed clinical data segments; and (vii) combine the plurality of decrypted clinical data segments to generate a single combined secure clinical data result.

15. Computer program characterized by comprising instructions that, when the program is executed by a computer, cause the computer to execute the method as defined in any one of claims 1 to 6. Petition 870250092189, dated 09 / 10 / 2025, pp. 151 / 151