Dynamic Pseudonymization for Medical Data Transmission

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for pseudonymizing medical data records in networks are inflexible and do not adapt to varying network bandwidth or specific data processing contexts, leading to inefficient data transmission and potential loss of critical information.

Innovation Solution

A method and apparatus for dynamically calculating a pseudonymization function based on the processing context, allowing for adaptive pseudonymization of medical data records to match the intended use and network capacity, with a processor using predefinable and variable rules to identify and alter security-critical sections.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If fixed pseudonymization profiles are used uniformly, then security requirements are met, but network bandwidth efficiency deteriorates due to unnecessary data removal

Engineering Contradiction:
Improvesecurity complianceVSAvoidnetwork bandwidth efficiency
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent implements dynamic pseudonymization profiles that adapt to different processing contexts and network conditions. The system calculates pseudonymization functions dynamically based on the intended use of data and available network capacity, transitioning from static fixed profiles to adaptive dynamic profiles that optimize the balance between security and transmission efficiency

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes parameters of pseudonymization by adjusting the degree and type of data removal based on processing context. Different pseudonymization functions are applied depending on whether data is used for remote appraisal, clinical studies, or other purposes, allowing optimization of data volume while maintaining necessary security protections

Inventive Principle:
Principle #35Parameter changes

2Reliability

If high degree of pseudonymization is applied, then security is improved, but data volume increases leading to transmission inefficiency

Engineering Contradiction:
Improvesecurity protectionVSAvoiddata volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent dynamically adjusts pseudonymization parameters based on the intended processing context. For example, clinical studies may require retention of certain protocol information while remote maintenance may require more aggressive pseudonymization, optimizing the balance between security and data utility for each specific use case

Inventive Principle:
Principle #35Parameter changes

3Adaptability or versatility

If context-specific data is preserved for certain applications, then data utility is improved, but network transmission efficiency deteriorates

Engineering Contradiction:
Improvedata processing adaptabilityVSAvoidnetwork bandwidth usage
Core Design Contradiction:
Adaptability or versatilityVSLoss of energy

Solution Approach 1:

The system dynamically determines which data elements to preserve based on the intended processing context. The pseudonymization function is calculated adaptively to retain only the specific information needed for the given application (e.g., examination protocols for clinical studies, device identifiers for remote maintenance), minimizing unnecessary data transmission

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent segments data pseudonymization into different levels and types based on processing context. Different sections of data records are pseudonymized to different degrees according to their specific utility requirements, allowing selective preservation of context-relevant information while removing unnecessary data

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9754127B2Processing-context-dependent pseudonymization of security-critical medical data via a network
Publication Date: 2017.09.05 SIEMENS HEALTHINEERS AG
  • US9754127B2 patent drawing
  • US9754127B2 patent drawing
  • US9754127B2 patent drawing

AI summary

An apparatus, a method and a product for transferring security-critical medical data records via a public network are disclosed. In order to be able to transmit security-critical data sections in pseudonymized form, a pseudonymization function is adaptively applied to the data records. The pseudonymization function is in each case calculated dynamically on the basis of a processing context that has been read in and that takes account of the planned user role, the planned intended use of the data processing and an application context.