Wearable Data De-identification and Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current health monitoring systems often fail to continuously and effectively collect and manage physiological data from wearable devices, leading to infrequent updates and lack of control over data privacy and access, which can result in missed health state changes and unauthorized data usage.
Innovation Solution
A wearable device system that allows users to control identification and access permissions for their physiological data, enabling de-identification and synthetic identifiers, and setting rules for data storage and access, including payment requirements for third-party access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physiological data is continuously collected and stored in the cloud, then health monitoring effectiveness is improved, but data privacy and security risks increase
Solution Approach 1:
The patent extracts identifying information from physiological data through de-identification processes. The system separates personal identifiers from health data, storing only anonymized versions in the cloud while maintaining the ability to link data to individuals when necessary for health monitoring purposes.
Solution Approach 2:
The system performs de-identification and access permission setup in advance before data is uploaded to the cloud. Users pre-configure which third parties can access their data and under what conditions, eliminating the need for real-time authentication decisions and reducing security risks during data transmission and storage.
2Adaptability or versatility
If third parties are granted access to physiological data, then data utility and research value increase, but unauthorized data usage and privacy violations may occur
Solution Approach 1:
The patent implements dynamic access permissions that can change over time and based on conditions. Users can grant temporary access, revoke permissions at any time, and set different access levels for different third parties. The system automatically enforces these dynamic permissions when processing data access requests.
Solution Approach 2:
The system introduces an intermediary permission layer between users and third parties. Instead of direct access, all data requests must pass through the permission validation mechanism that checks user-defined rules, ensuring that even authorized third parties cannot access data outside the scope of granted permissions.
3Ease of operation
If users maintain control over their data through identification rules and permissions, then privacy and autonomy are improved, but system complexity and operational burden increase
Solution Approach 1:
The system enables users to manage their own data permissions and access controls through intuitive interfaces. Users can independently configure which third parties can access their data, set time limits and conditions for access, and revoke permissions without requiring technical assistance or complex administrative procedures.
Solution Approach 2:
The patent implements a universal permission framework that handles multiple types of third-party access requests through a single system. The same permission rules and de-identification mechanisms apply whether the request comes from a healthcare provider, researcher, or insurance company, simplifying the user experience while maintaining comprehensive control.
Data Source
AI summary
A method for transmitting, storing and sharing data collected by a wearable device is provided. In one example, data related to one or more measurements obtained by the wearable device configured to be mounted to a body surface of a wearer is received in addition to an input by the wearer of the device. The input selects at least one identification rule that determines whether or how the wearer is identified in connection with the data from the wearable device. The data is stored in a database based, at least in part, on the at least one identification rule. The input from the wearer may also select at least one permission rule that determines whether third parties can access the data from the wearable device. A third party may be required to provide payment for access to or use of the data according to the at least one permission rule.