Method for pseudonymizing patient data

By distributing the TTP using SMPC and employing symmetric/asymmetric encryption, the method ensures robust security and unique key assignment, addressing the challenges of confidentiality, integrity, and availability in PPRL systems.

WO2025251096A1 Publication Date: 2025-12-11AIT AUSTRIAN INSTITUTE OF TECNOLOGY GMBH
0 Cites 0 Cited by

Patent Information

Application Number
PCT/AT2025/060214
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2024-06-05
Filing Date
2025-05-28
Publication Date
2025-12-11

AI Technical Summary

Technical Problem

Existing Privacy-Preserving Record Linkage (PPRL) solutions face challenges in balancing confidentiality, integrity, and availability, particularly in decentralized systems, where central storage of patient data poses security risks and decentralized systems struggle with long-term data availability, while centralized systems lack robustness against attacks.

Method used

Implementing Secure Multiparty Computation (SMPC) methods to distribute the Trusted Third Party (TTP) across multiple entities, ensuring that no single entity has access to the entire dataset, and using symmetric or asymmetric encryption to create and manage pseudonyms across a network of services, preventing unauthorized access and ensuring unique key assignment.

Benefits of technology

Enhances security by reducing trust assumptions and ensuring that a malfunction or attack on a single service does not compromise all data, while maintaining data linkability and preventing unauthorized access to patient information.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention relates to a method for managing information associated with a subject identified by identification data (I), wherein a client (C), for the purpose of accessing data assigned to the identified subject: a) generates, according to specified criteria, or makes available identification data relating to the subject, b) generates or makes available at least one key (R), c) optionally prepares the identification data for encryption using the key, d) encrypts the identification data or data derived therefrom using the at least one key and generates an encryption result (S), the encryption process ensuring that the identification data, which is prepared for encryption if necessary, or data derived therefrom can be recovered from the at least one key or a key (RPr) assigned to said key and from the encryption result by means of a decryption process, and e) transmits the encryption result and, if necessary, the at least one key in the form of an account request to a service network comprising at least two separate services, the individual services of the service network: f) not granting one another access to the keys and / or encryption results transmitted to the services and potentially stored thereon.
Need to check novelty before this filing date? Find Prior Art