`US009355273B2
`
`c12) United States Patent
`Stevens et al.
`
`(10) Patent No.:
`(45) Date of Patent:
`
`US 9,355,273 B2
`May 31, 2016
`
`(54) SYSTEMANDMETHODFORTHE
`PROTECTION AND DE-IDENTIFICATION OF
`HEALTH CARE DATA
`
`(56)
`
`References Cited
`
`U.S. PATENT DOCUMENTS
`
`(75)
`
`Inventors: Steven E. Stevens, Chalfont, PA (US);
`Andrew E. Kress, Gladwyne, PA (US);
`Adam Dublin, Yardley, PA (US)
`
`(73) Assignee: BANK OF AMERICA, N.A.,AS
`COLLATERAL AGENT, New York,
`NY(US)
`
`( *) Notice:
`
`Subject to any disclaimer, the term of this
`patent is extended or adjusted under 35
`U.S.C. 154(b) by 1305 days.
`
`(21) Appl. No.: 11/945,795
`
`(22) Filed:
`
`Nov. 27, 2007
`
`(65)
`
`Prior Publication Data
`
`US 2008/0147554 Al
`
`Jun. 19,2008
`
`Related U.S. Application Data
`
`3,752,904 A
`3,896,266 A
`4,823,265 A
`4,979,832 A
`4,992,940 A
`4,993,068 A
`5,003,539 A
`5,005,200 A
`5,060,263 A
`5,070,452 A
`
`8/1973 Waterbury
`7/1975 Waterbury
`4/1989 Nelson
`12/1990 Ritter
`2/ 1991 Dworkin
`2/1991 Piosenka et al.
`3/1991 Takemoto et al.
`4/1991 Fischer
`10/1991 Bosen
`l 2/ 1991 Doyle, Jr. et al.
`(Continued)
`
`FOREIGN PATENT DOCUMENTS
`
`EP
`EP
`
`9/1994
`0732014 Bl
`5/1997
`0770967 A2
`(Continued)
`OTHER PUBLICATIONS
`
`Scheuren et al., "HIPAA Certification for SDI's De-Identification
`Technology" Washington D.C. Jun. 4, 2007; pp. 1-24.
`(Continued)
`
`(60)
`
`Provisional application No. 60/875,392, filed on Dec.
`18, 2006.
`
`Primary Examiner Dante Ravetti
`Fish & Richardson P.C.
`(74) Attorney, Agent, or Firm
`
`(51)
`
`(52)
`
`(58)
`
`(2013.01)
`(2013.01)
`(2011.01)
`(2006.01)
`
`lut. Cl.
`G06F 21100
`G06F 21162
`G06F 19100
`H04L29/06
`U.S.Cl.
`CPC .......... G06F 2116254 (2013.01); G06F 191322
`(2013.01); G06F 2221/2107 (2013.01); H04L
`63/0428 (2013.01)
`
`Field of Classification Search
`USPC ............................................................ 705/50
`See application file for complete search history.
`
`,.,
`
`104
`
`"'
`
`11a
`
`ABSTRACT
`(57)
`A system for protecting and de-identifying healthcare data
`includes a storage device for storing the healthcare data and
`personally identifiable information for a person and a proces(cid:173)
`sor in communication with the database. The processor gen(cid:173)
`erates an anonymous linking code using a keyed hash func(cid:173)
`tion and a second hash function. The anonymous linking code
`is based at least in part on a portion of the personally identi(cid:173)
`fiable information. The processor further appends the anony(cid:173)
`mous linking code to the healthcare data for the person.
`
`14 Claims, 5 Drawing Sheets
`,.
`/
`
`110
`
`second Ha.&b.
`l"wlCtian Kcdule
`
`DO•
`Id•ntification
`Module
`
`i:llC:ryption for
`T:ranllllission
`Module
`
`128
`
`DATAVANT, INC. EXHIBIT NO. 1007
`Page 1 of 20
`
`
`
`US 9,355,273 B2
`Page2
`
`(56)
`
`References Cited
`
`U.S. PATENT DOCUMENTS
`
`5,084,828 A
`5,175,681 A
`5,202,982 A
`5,214,702 A
`5,257,369 A
`5,265,247 A
`5,285,494 A
`5,293,615 A
`5,295,261 A
`5,297,202 A
`5,299,121 A
`5,301,105 A
`5,325,290 A
`5,331,544 A
`5,365,589 A
`5,371,797 A
`5,403,639 A
`5,410,602 A
`5,420,786 A
`5,444,823 A
`5,454,101 A
`5,471,382 A
`5,490,060 A
`5,497,486 A
`5,499,293 A
`5,502,764 A
`5,519,607 A
`5,526,257 A
`5,557,518 A
`5,557,780 A
`5,560,006 A
`5,581,749 A
`5,606,610 A
`5,615,264 A
`5,634,016 A
`5,644,778 A
`5,652,842 A
`5,664,109 A
`5,666,492 A
`5,680,611 A
`5,699,428 A
`5,704,044 A
`5,708,828 A
`5,719,938 A
`5,721,777 A
`5,724,575 A
`5,734,838 A
`5,737,539 A
`5,745,899 A
`5,748,765 A
`5,754,938 A
`5,758,085 A
`5,758,095 A
`5,758,147 A
`5,758,355 A
`5,761,500 A
`5,781,893 A
`5,784,565 A
`5,787,186 A
`5,787,435 A
`5,793,969 A
`5,794,246 A
`5,799,086 A
`5,799,308 A
`5,806,074 A
`5,809,494 A
`5,818,836 A
`5,821,871 A
`5,823,948 A
`5,825,906 A
`5,832,449 A
`5,832,494 A
`5,845,255 A
`5,845,284 A
`5,848,373 A
`
`1/1992 Kaufman et al.
`12/1992 Iwai et al.
`4/1993 Gramlich et al.
`5/1993 Fischer
`10/1993 Skeen et al.
`11/1993 Wienck et al.
`2/1994 Sprecher et al.
`3/1994 Amada
`3/1994 Simonetti
`3/1994 Kapp et al.
`3/1994 Brill et al.
`4/1994 Cummings, Jr.
`6/1994 Cauffman et al.
`7/1994 Lu et al.
`11/1994 Gutowitz
`12/1994 Bocinsky, Jr.
`4/1995 Belsan etal.
`4/1995 Finkelstein et al.
`5/1995 Felthauser et al.
`8/1995 Nguyen
`9/1995 Mackay et al.
`11/1995 Tallman et al.
`2/1996 Malec et al.
`3/1996 Stolfo et al.
`3/1996 Behram et al.
`3/1996 Naccache
`5/1996 Tawil
`6/1996 Lerner
`9/1996 Rosen
`9/1996 Edwards et al.
`9/1996 Layden et al.
`12/1996 Hossain et al.
`2/1997 Johansson
`3/1997 Kazmierczak et al.
`5/1997 Steadham, Jr. et al.
`7/1997 Burks etal.
`7/1997 Siegrist, Jr. et al.
`9/1997 Johnson et al.
`9/1997 Rhodes et al.
`10/1997 Rail et al.
`12/1997 McDonnal et al.
`12/1997 Tarter et al.
`1/1998 Coleman
`2/1998 Haas et al.
`2/1998 Blaze
`3/1998 Hoover et al.
`3/1998 Robinson et al.
`4/1998 Edelson et al.
`4/1998 Burrows
`5/1998 Takhar
`5/1998 Herz et al.
`5/1998 Kouoheris et al.
`5/1998 Albaurn et al.
`5/1998 Chen et al.
`5/1998 Buchanan
`6/1998 Gallant et al.
`7/1998 Felthauser et al.
`7/1998 Lewine
`7/1998 Schroeder
`7/1998 Burrows
`8/1998 Kamentsky et al.
`8/1998 Sankaran et al.
`8/1998 Sudia
`8/1998 Dixon
`9/1998 Souder et al.
`9/1998 Nguyen
`10/1998 DuVal
`10/1998 Benzler
`10/1998 Ross, Jr. et al.
`10/1998 Obataetal.
`11/1998 Cunningham
`11/1998 Egger etal.
`12/1998 Mayaud
`12/1998 Robinson
`12/1998 DeLorme et al.
`
`5,852,822 A
`12/1998 Srinivasan et al.
`5,867,821 A
`2/1999 Ballantyne et al.
`5,870,770 A
`2/1999 Wolfe
`5,876,926 A
`3/1999 Beecham
`3/1999 Spurgeon
`5,890,129 A
`3/1999 Rekieta et al.
`5,890,156 A
`4/1999 Ruddy et al.
`5,897,641 A
`5,897,989 A
`4/1999 Beecham
`5,907,677 A
`5/1999 Glenn et al.
`5,911,132 A
`6/1999 Sloane
`5,915,209 A
`6/1999 Lawrence
`6/1999 Karpf
`5,915,240 A
`6/1999 Javitt
`5,918,208 A
`7/1999 Kirsch et al.
`5,920,854 A
`7/1999 Angelo et al.
`5,923,754 A
`7/1999 Noble eta!.
`5,926,810 A
`5,937,063 A
`8/1999 Davis
`5,940,507 A
`8/1999 Cane et al.
`5,940,835 A
`8/1999 Sit
`5,956,400 A
`9/1999 Chaurn et al.
`9/1999 Kenner et al.
`5,956,716 A
`10/1999 Gabber et al.
`5,961,593 A
`10/1999 Melchione et al.
`5,966,695 A
`10/1999 Reichert
`5,970,462 A
`5,970,492 A
`10/1999 Nielsen
`5,978,791 A
`11/1999 Farber et al.
`5,987,448 A
`11/1999 Evans et al.
`5,987,464 A
`11/1999 Schneider
`5,987,572 A
`11/1999 Weidner
`11/1999 Colon et al.
`5,991,731 A
`11/1999 Rivette et al.
`5,991,751 A
`11/1999 Ellard
`5,991,758 A
`11/1999 Vethe
`5,991,765 A
`5,995,939 A
`11/1999 Berman et al.
`5,999,908 A
`12/1999 Abelow
`6,003,006 A
`12/1999 Colella et al.
`1/2000 Sammon, Jr. et al.
`6,012,051 A
`1/2000 Teagarden et al.
`6,014,631 A
`1/2000 Coli et al.
`6,018,713 A
`2/2000 Fischer
`6,021,200 A
`2/2000 Takai et al.
`6,024,287 A
`6,035,306 A
`3/2000 Lowenthal et al.
`6,061,658 A
`5/2000 Chou et al.
`6,073,140 A
`6/2000 Morgan et al.
`6,078,924 A
`6/2000 Ainsbury et al.
`6/2000 Abadi et al.
`6,079,021 A
`7/2000 Romney et al.
`6,085,322 A
`7/2000 Reed et al.
`6,088,717 A
`8/2000 Inbar et al.
`6,101,749 A
`6,195,643 Bl
`2/2001 Maxwell
`6,195,661 Bl
`2/2001 Filepp et al.
`6,226,675 Bl
`5/2001 Meltzer et al.
`6/2001 Tulskie, Jr. et al.
`6,249,768 Bl
`6/2001 Ruffin et al.
`6,249,769 Bl
`6/2001 O'Flaherty et al.
`6,253,203 Bl
`6,266,675 Bl
`7/2001 Evans et al.
`6,285,983 Bl
`9/2001 Jenkins
`9/2001 Takhar
`6,289,111 Bl
`6,295,608 Bl
`9/2001 Parkes et al.
`6,302,844 Bl
`10/2001 Walker et al.
`6,317,700 Bl
`11/2001 Bagne
`6,317,834 Bl
`11/2001 Gennaro et al.
`6,321,201 Bl
`11/2001 Dahl
`6,321,205 Bl
`11/2001 Eder
`6,330,976 Bl
`12/2001 Dyrnetman et al.
`6,336,114 Bl
`1/2002 Garrison
`1/2002 Taub
`6,341,267 Bl
`3/2002 VanBlarkom
`6,360,324 B2
`6,363,525 Bl
`3/2002 Dougherty et al.
`6,397,224 Bl• 5/2002 Zubeldia ............... G06F 19/322
`6,408,263 Bl
`6/2002 Summers
`6,415,280 Bl
`7/2002 Farber et al.
`6,421,650 Bl
`7/2002 Goetz et al.
`6,430,292 Bl
`8/2002 Ito et al.
`6,434,533 Bl
`8/2002 Fitzgerald
`6,449,621 Bl
`9/2002 Pettovello
`6,473,609 Bl
`10/2002 Schwartz et al.
`6,496,931 Bl
`12/2002 Rajchel et al.
`6,523,027 Bl
`2/2003 Underwood
`
`DATAVANT, INC. EXHIBIT NO. 1007
`Page 2 of 20
`
`
`
`US 9,355,273 B2
`Page3
`
`(56)
`
`References Cited
`
`U.S. PATENT DOCUMENTS
`
`2/2003 Morgan et al.
`6,523,041 Bl
`6/2003 Classen
`6,584,472 B2
`11/2003 Handelman
`6,654,721 B2
`11/2003 Rubin eta!.
`6,654,724 Bl
`3/2004 Craft et al.
`6,704,739 B2
`6,704,740 Bl
`3/2004 Lang
`6,704,873 Bl
`3/2004 Underwood
`6,708,156 Bl
`3/2004 VonGonten
`5/2004 Ober et al.
`6,732,113 Bl
`6,734,886 Bl
`5/2004 Hagan et al.
`5/2004 Tabb et al.
`6,735,399 B2
`8/2004 Stack
`6,782,370 Bl
`9/2004 Sullivan et al.
`6,792,412 Bl
`6,873,979 B2
`3/2005 Fishman et al.
`6,874,085 Bl
`3/2005 Koo et al.
`6,915,265 Bl
`7/2005 Johnson
`6,934,687 Bl
`8/2005 Papierniak et al.
`6,938,022 Bl
`8/2005 Singha!
`6,988,075 Bl
`1/2006 Hacker
`3/2006 Afeyan et al.
`7,016,882 B2
`8/2006 Delurgio et al.
`7,092,896 B2
`10/2006 Rubin eta!.
`7,127,432 B2
`7,143,289 B2
`11/2006 Denning et al.
`7,184,947 B2
`2/2007 Matsuoka et al.
`7,200,578 B2
`4/2007 Paltenghe et al.
`12/2007 Banfield et al.
`7,309,001 B2
`3/2008 Tolle et al.
`7,346,521 B2
`5/2008 Ober et al.
`7,376,677 B2
`6/2008 Chappel
`7,386,526 Bl
`9/2008 Hagan eta!.
`7,428,706 B2
`7,668,820 B2
`2/2010 Zuleba
`7,865,376 B2
`1/2011 Ober et al.
`7,885,882 Bl
`2/2011 Brander et al.
`8,275,850 B2
`9/2012 Kohan et al.
`6/2013 Ober et al.
`8,473,452 Bl
`1/2015 Ober et al.
`8,930,404 B2
`8/2001 O'Flaherty et al.
`2001/0011247 Al
`9/2001 Madoukh
`2001/0019614 Al
`2001/0027331 Al
`10/2001 Thompson
`11/2001 Keresman, III et al.
`2001/0047281 Al
`1/2002 Patel
`2002/0004900 Al
`2002/0073099 Al
`6/2002 Gilbert et al.
`2002/0073138 Al
`6/2002 Gilbert et al.
`2002/0080968 Al
`6/2002 Olsson
`2002/0083192 Al
`6/2002 Alisuag
`2002/0116615 Al
`8/2002 Nguyen et al.
`2002/0128860 Al
`9/2002 Leveque et al.
`2002/0136407 Al
`9/2002 Denning et al.
`2002/0143794 Al
`10/2002 Helt
`2002/0165736 Al
`11/2002 Tolle et al.
`2002/0193905 Al
`12/2002 Davison et al.
`12/2002 Kleinschmidt
`2002/0194024 Al
`12/2002 Notelovitz
`2002/0194025 Al
`12/2002 Kumar et al.
`2002/0198473 Al
`2003/0021417 Al
`1/2003 Vasic et al.
`2003/0039362 Al
`2/2003 Califano et al.
`2003/0041241 Al
`2/2003 Saito
`2003/0046114 Al
`3/2003 Davies et al.
`2003/0074564 Al• 4/2003 Peterson ............... G06F 19/322
`713/182
`
`2003/0081247 Al
`2003/0097358 Al
`2003/0120652 Al
`2004/0034550 Al
`2004/0088355 Al
`2004/0117215 Al
`2004/0122726 Al
`2004/0122792 Al
`2004/0143594 Al
`2004/0189707 Al
`2004/0193905 Al
`2004/0199781 Al
`2004/0215981 Al
`2005/0027564 Al
`2005/0065912 Al
`
`5/2003 Sharma
`5/2003 Mendez
`6/2003 Tifft
`2/2004 Menschik et al.
`5/2004 Hagan etal.
`6/2004 Marchosky
`6/2004 Linde et al.
`6/2004 Salazar
`7/2004 Kalies
`9/2004 Moore et al.
`9/2004 Lirov eta!.
`10/2004 Erickson
`10/2004 Ricciardi et al.
`2/2005 Yantis
`3/2005 Cafrelli et al.
`
`5/2005 Ober eta!.
`2005/0114334 Al
`6/2005 Winkelman, III et al.
`2005/0125317 Al
`7/2005 Agrawal et al.
`2005/0147246 Al
`2005/0165623 Al
`7/2005 Landi eta!.
`9/2005 Claud et al.
`2005/0216313 Al
`10/2005 Krishnan et al.
`2005/0234740 Al
`10/2005 Bade et al.
`2005/0234909 Al
`10/2005 Onurna et al.
`2005/0236474 Al
`11/2005 Kohan eta!.
`2005/0256740 Al
`2005/0256741 Al
`11/2005 Kohan eta!.
`11/2005 Kohan eta!.
`2005/0256742 Al
`2005/0268094 Al
`12/2005 Kohan eta!.
`2005/0288964 Al
`12/2005 Lutzen et al.
`1/2006 Lee
`2006/0004656 Al
`1/2006 Anthony et al.
`2006/0004739 Al
`212006 Zuleba
`2006/0026156 Al
`2006/0059368 Al• 3/2006 Fayad ..................... G06F 21/72
`713/189
`
`8/2006 Oon
`2006/0178892 Al
`2006/0179073 Al
`8/2006 Kimura
`2007/0073811 Al
`3/2007 Rubin et al.
`2007 /0282951 Al • 12/2007 Selimis ................... H04L 67/06
`709/205
`
`4/2008 Ober eta!.
`2008/0091474 Al
`2008/0137860 Al• 6/2008 Silvernail . ............. H04W 12/04
`380/270
`
`2008/0147554 Al
`2010/0114607 Al
`2010/0217973 Al
`
`6/2008 Stevens et al.
`5/2010 Kress et al.
`8/2010 Kress et al.
`
`FOREIGN PATENT DOCUMENTS
`
`EP
`EP
`EP
`EP
`EP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`JP
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`WO
`
`0884670 Bl
`0869637 A2
`1026603 A2
`1253544 Al
`1321883 A3
`6083847 A
`9-297795
`10021302 A
`10254807
`2000513463
`2000324094
`2000514938
`2002032473
`2003005645
`2003173376
`2007056989
`2011238064
`2008147364
`2010232811
`2001525614
`2011250165
`9105397
`WO-9515628 Al
`9641288
`WO-9641275 Al
`WO-9642059 Al
`9735271
`9802837
`9838910
`9937054
`0045317
`0118730 Al
`WO-0077642 Al
`WO-0118631 Al
`0129692
`0139075
`0141353
`02063823
`2004059555
`2007145010
`
`5/1998
`10/1998
`8/2000
`10/2002
`2/2004
`3/1994
`11/1997
`1/1998
`9/1998
`10/2000
`11/2000
`11/2000
`1/2002
`1/2003
`6/2003
`3/2007
`12/2007
`6/2008
`10/2010
`12/2011
`6/2013
`4/1991
`6/1995
`6/1996
`12/1996
`12/1996
`3/1997
`1/1998
`9/1998
`7/1999
`1/2000
`9/2000
`12/2000
`3/2001
`4/2001
`5/2001
`6/2001
`8/2002
`7/2004
`9/2011
`
`OTHER PUBLICATIONS
`
`National Institute of Standards and Technology (NIST), "Secure
`Hash Standard" Federal Information Processing Standards Publica-
`tion 180-2 (+Change Notice to include SHA-224), Aug. 1, 2002; pp.
`i-iv and 1-79.
`
`DATAVANT, INC. EXHIBIT NO. 1007
`Page 3 of 20
`
`
`
`US 9,355,273 B2
`Page4
`
`(56)
`
`References Cited
`
`OTHER PUBLICATIONS
`
`U.S. Patent and Trademark Office, Office Action for U.S. Appl. No.
`09/665,752, May 5, 2004, 5 pgs.
`U.S. Patent and Trademark Office, Office Action for U.S. Appl. No.
`09/665,752, Mar. 4, 2005, 6 pgs.
`U.S. Patent and Trademark Officer, Office Action for U.S. Appl. No.
`09/665,752, Dec. 16, 2005, 4 pgs.
`U.S. Patent and Trademark Office, Office Action for U.S. Appl. No.
`09/665,752, Mar. 16, 2007, 7 pgs.
`U.S. Patent and Trademark Office, Office Action for U.S. Appl. No.
`09/665,752, Jan. 25, 2008, 7 pgs.
`U.S. Patent and Trademark Office, Office Action for U.S. Appl. No.
`09/665,752, Dec. 8, 2008, 8 pgs.
`J.D. Halamka, P. Szolovits, D. Rind, and C. Safran, A WWW Imple(cid:173)
`mentation of National Recommendationsa for Protecting Electronic
`Health Information, Journal of the American Medical Informatics
`Association, vol. 4, No. 6, Nov./Dec. 1997, pp. 458-464.
`R. Anderson, The DeCODE Proposal for an Icelandic Health Data(cid:173)
`base, Oct. 20, 1998, pp. 1-12, www.decode.is.
`H. Bouzelat, C. Quantin and L. Dusserre, Extraction and Ananymity
`Protocol of Medical File, Proceedings of the American Medical
`InformaticsAssociationAnnual Fall Symposium, 1996, pp. 323-327,
`AMIA, Inc.
`K.R. Iversen and T.O. Grotan, Socio-technical aspects of the use of
`health related personal information for management and research,
`International journal of Bio-Medical Computing, vol. 43, 1996, pp.
`83-91, Elsevier Science Ireland Ltd.
`A. Ohm and L. Ohno-Machado, Using Boolean reasoning to
`ananymize databases, Artificial Intelligence in Medicine, vol. 15,
`1999, pp. 235-254, Elsevier Science B.V.
`K. Kahl, G. Dickson, J. Kebisek and M. Powell, Bar code tracking
`system enhances record- and film-handling productivity, Top Health
`Rec Manage, vol. 12, No. 3, Mar. 1992, 1 pg., St. Joseph's Hospital,
`Milwaukee, WI, PubMed-indexed for Medline.
`E.T. Carroll, S. Wright, C. Zakoworotny, Securely Implementing
`Remote Access within Health Information Management, Journal of
`AHIMA, vol. 69, No. 3, Mar. 1998, pp. 46-49, copied from the
`National Library of Medicine.
`Unique Health Identifier for Individuals, U.S. Department of Health
`and Human Services, A White Paper, pp. 1-32, http://epic.org/pri(cid:173)
`vacy/medical/hhs-id-798.html.
`English Translation of Japanese Office Action for co-pending appli(cid:173)
`cation, Reference No. B025547, Mailing No. 571403, Mailing Date:
`Aug. 10, 2010, Patent Application No. 2001-525614.
`S. Chaudhuri, et al: An overview of Data Warehousing and OLAP
`Technology, Sigmod Record, Sigmod, New York, NY, US, vol. 26,
`No. l,Mar.199,(Mar.1997),pp. 65-74,XP002193792, ISSN: 0163-
`5808.
`V.M. Brannigan and B. R. Beier, Patient privacy in the era of medical
`computer networks: a new paradigm for a new technology, Proceed(cid:173)
`ings of the Eighth World Congress on Medical Informatics, vol. 8,
`No. 8, Jul. 23, 1995, Jul. 27, 1995, pp. 640-643, XP009040274,
`Vancouver, British Columbia, Canada, ISSN: 1569-6332.
`C. Quantin, et al. How to ensure data security of an epidemiological
`follow up: quality assessment of an anonymous record linkage pro(cid:173)
`cedure, International Journal of Medical Informatics, Elsevier Sci(cid:173)
`entific Publishers, Shannon, IR, vol. 49, No. 1, Mar. 1998, pp. 117-
`122, XP004149470, ISSN: 1386-5056.
`R. J. Anderson, A security policy model for clinical information
`systems, Security and Privacy, 1996, Proceedings, 1996 IEEE Sym(cid:173)
`posium on Oakland, CA, USA May 6-8, 1996 (May 6, 1996), pp.
`30-43, XP010164923, ISBN: 0-8186-7417-2.
`Supplementary European Search Report ofEP 00 96 5216.
`International Search Report of PCT/US00/25818.
`Secure Hash Standard, National Institute of Standards and Technol(cid:173)
`ogy, Aug. I, 2002, pp. i-iv and 1-79, Federal Information Processing
`Standards Publication 180-2 ( +Change Notice to include SHA-224).
`HMS PxDx, Health Market Science, A Health Market Science Tar(cid:173)
`geting Solution, 2 pgs., www.healthmarketscience.com.
`
`Why Clearinghouses Transmit Electronic Claims to Insurance Car(cid:173)
`riers, and Why the Service They Provide is Essential to Medical
`Practices, Electronic Claim Clearinghouses, MPM Soft, Practice
`Billing Software, pp. 1-7, www.mpmsoft.com/EDI/clearinghouse.
`htm, printed Jan. 5, 2009.
`Vector One: Prescriber Extract (VOPEX), 2 pgs., Verispan, www.
`ehealthlist.com.
`Physicians Who Perform Medical Procedures, From Direct Medical
`Data, 1 pg., www.DMDdata.com.
`Physicians Treating Patients by Diagnostic Treatement Code ICD9,
`From Direct Medical Data, 1 pg., www.DMDdata.com.
`VOPEX, Vector One: Prescriber Extract, SDI, I pg., SDI Healthcare
`Profiling Solutions Group, www.ehealth.com.
`Max G. Arellano, MA, and Gerald I. Weber, PhD, "Issues in Identi(cid:173)
`fication and Linkage of Patient Records Across an Integrated Deliv(cid:173)
`ery System," Journal of Healthcare Information Management, vol.
`12, No. 3, Fall 1998.
`Claycamp et al., Simulation Techniques in the Analysis of Marketing
`Strategy, Applications of the Sciences in Marketing Management
`(NO DATE).
`Hauser et al., Application, Predictive Test, and Strategy Implications
`for a Dynamic Model of Consumer Response. Marketing Science,
`vol. I, No. 2, 1982.
`IBM DB2 Universal Database, SQL Ref vol. 1 v 8.2 , 2004-833
`pages.
`Oracle7 Release 7.3.4 Documentation Library (converted from htm
`files), 1997 (NO NAME)-2000 PAGES.
`Oracle7 Server Concepts Release 7.3, Feb. 1996-516 PAGES.
`Tanenbaum A., "Computer Networks 3rd Edition", Prentice-Hall
`Inc., 1996-BOOK.
`Ullman, Pfleeger, Principles of Database Systems, 2d Ed. pp. 216-
`219; Security in Computing, pp. 327-334, 364-365 (NO DATE}(cid:173)
`WON'T UPLOAD.
`European Search Report dated Oct. 30, 2015 for corresponding Euro(cid:173)
`pean Patent Application No. 15155354.2, 7 pages.
`"Person Identification Service (PIDS) (a.k.a. Patient Identification
`Service)", OMG CORBAmed DTF, Feb. 12, 1998 (NO NAME).
`U.S. Appl. No. 11/122,581, filed Jan. 21, 2010 Amendment and
`Request for Continued Examination (RCE).
`U.S. Appl. No. 11/122,581, filed Dec. 31, 2008 Non-Final Office
`Action.
`U.S. Appl. No. 11/122,581, filed May 29, 2009 Response to Non(cid:173)
`Final Office Action.
`U.S. Appl. No. 11/122,581, filed Sep. 2, 2009 Final Office Action.
`U.S. Appl. No. 11/122,589, filed Feb. 14, 2011 Amendment and
`Request for Continued Examination (RCE).
`U.S. Appl. No. 11/122,589, filed Aug. 13, 2010 Non-Final Office
`Action.
`A. Ohrm and L. Ohno-Machado, Using Boolean reasoning to
`anonymize databases, Artificial intelligence in Medicine, vol. 15,
`1999, DD. 235-254, Elsevier Science B.V.
`Allen, Computers & Security, Trusted Oracle--Multilevel Secure
`Data Management for Military Computing. vol. 70, Issue 3, pp.
`271-275, May 1991.
`Amendment and Response and Request for Continued Examination
`(RCE) filed Dec. 10, 2009 for U.S. Appl. No. 11/122,589.
`Amendment and Response filed Apr. 6, 2009 for U.S. Appl. No.
`11/122,589.
`Amendment and Response filed May 27, 2010 for U.S. Appl. No.
`11/122,589.
`Amendment and Response filed Oct. 23, 2009 for U.S. Appl. No.
`11/122,565.
`Amstutz, Management, Computers, and Market Simulation, Appli(cid:173)
`cations of Management Sciences In Marketing, 1970.
`Armstrong, Brief vs. comprehensive descriptions in measuring inten(cid:173)
`tions to purchase. Journal of Marketing Research, vol. 8, Issue I, Feb.
`1, 1971.
`Atkins et al., Pharmaceutical Marketing and Media. Automation in
`Pharmaceutical Marketing, 1968.
`Balog, Sprinter Mod III: A Model for the Analysis ofNew Frequently
`Purchased Consumer Products. Operations Research, vol. 18, No. 5,
`Jul. 1966.
`
`DATAVANT, INC. EXHIBIT NO. 1007
`Page 4 of 20
`
`
`
`US 9,355,273 B2
`Page5
`
`(56)
`
`References Cited
`
`OTHER PUBLICATIONS
`
`Berger, Andreas, "Privacy Protection for Public Directory Services",
`Computer Networks and ISDN Systems 30, 1998.
`Bertino andFoscoli, "Index Organizations for Object-Oriented Data(cid:173)
`base Systems", IEEE Transactions on Knowledge and Data Engi(cid:173)
`neering, vol. 7, No. 2, Apr. 1995.
`Blattberg et al., Tracker: An Early Test Market Forecasting and Diag(cid:173)
`nostic Model for New Product Planning. Journal of Marketing
`Research, vol. 15, Issue 2, May 1978.
`Bobrowski, Mastering Oracle7 & Client-Server Computing, 1994.
`Borking, John, et al., Privacy-Enhancing Technologies: the Path to
`Anonymity, vol. II. Registratiekamer, Netherlands, Aug. 1995.
`Brandt et al., Anonymous and Verifiable Registration in Databases,
`May 1988.
`Brice et al., Choice-Adapted Preference Modelling. 2000 Sawtooth
`Software Conference Proceedings, 2000.
`Chung, Yun-Chung, et al., Intrinsic Image Extraction from a Single
`Image. Journal of Information Science and Engineering 25, 1939-
`1953 (2009).
`Claycamp et al., Prediction of New Product Performance: An Ana(cid:173)
`lytical Approach, VI Journal of Marketing Research 414-20, 1969.
`Communication Pursuant to Article 94(3) EPC dated Oct. 23, 2013
`from corresponding European Patent Application No. 05 776 883.0,
`6 pages.
`Crosse, Marcia, et al., Medical Records Privacy, Access Needed for
`Health Research, but Oversight of Privacy Protections is Limited.
`U.S. General Accounting Office, Report to Congressional Request(cid:173)
`ers, GAO/HEHS-99-55, Feb. 24, 1999.
`Dalenius, Tore, and Steven Reiss, Data Swapping-a Technique for
`Disclosure Control (NO DATE).
`Dalrymple et al., Record Linkage in a Regional Mental Health Plan(cid:173)
`ning Study: Accuracy of Unique Identifiers, Reliability of
`Sociodemographics, and Estimating Identification Error. Journal of
`Mental Health Administration Thousand Oaks, vol. 21, Issue 2, 1994.
`Denning, Cryptography and Data Security, 1982.
`Denning, Field Encryption and Authentication (NO DATE).
`Djordjevic (Oracle Identity and Security Management (NO DATE).
`Dussere L., Quantin Co. & Bouzelat H., A One Way Public Key
`Cryptosystem for the Linkage of Nominal Files in Epidemiological
`Studies, Proceedings of the Eighth World Congress on Med.
`Informatics, 1995, pp. 644-647.
`European Search Report dated Jul. 10, 2012 from EP Application No.
`05 752 085.0, 6 pages.
`Evans, Josie and Thomas MacDonald, Record-Linkage for
`Pharmacovigilance in Scotland. Journal of Clinical Pharmacology
`47, 1999.
`Fair, M.E., Record Linkage in the National Dose Registry of Canada.
`European Journal of Cancer, vol. 33, Suppl. 3, 1997.
`Final Rcajection mailed Jun. 10, 2009 for U.S. Appl. No. 11/122,589.
`Final Rejection mailed Nov. 12, 2009 for U.S. Appl. No. 11/122,565.
`Gabrieli, Guide for Unique Healthcare Identifier Model. Journal of
`Clinical Computing, vol. 21, No. 5, 1993.
`Gertz, ECS 289F Database Systems, Security in Commercial Data(cid:173)
`base Systems Chap. 3, Lecture, 1998.
`Hamburg et al., Computer Model for New Product Demand, Harvard
`Business Review 107-115, 1967.
`Hamilton, Deborah, "Identification and Evaluation of the Security
`Requirements in Medican Application", IEEE Symposium on Com(cid:173)
`puter-Based Medican Systems.
`Harvard Business School Case Study Johnson Wax: Enhance (A),
`revised Aug. 2, 1999.
`Hauser et al., A Normative Methodology for Modeling Consumer
`Response to Innovation. Operations Research, vol. 25, No. 4, Jul.
`1977.
`Hauser et al., Application of the "Defender" Consumer Model. Mar(cid:173)
`keting Science, vol. 3, No. 4, 1984.
`Hauser et al., Consumer Oriented Transportation Service Planning:
`Consumer Analysis and Strategies. Applications of Management Sci(cid:173)
`ence, vol. 1, 1981.
`
`Hauser et al., Dynamic Analysis of Consumer Response to Marketing
`Strategies. Management Science, vol. 28, No. 5, May 1982.
`Herting, Robert and Barnes, Mike, Large Scale Database Scrubbing
`Using Object Oriented Software Components. Journal of the Ameri(cid:173)
`can Medical Informatics Association, 1998.
`Hoffman, The Formulary Model for Flexible Privacy and Access
`Controls, 1971.
`Holman et al., "Population-Based Linkage of Health Records in
`Western Australia: Development of a Health Services Research
`Linked Database", Australian and New Zealand Journal of Public
`Health, vol. 23, No. 5, Oct. 1999.
`International Search Report for PCT/US02/06268 dated Feb. 26,
`2003.
`International Search Report mailed Feb. 6, 2007 in International
`Application No. PCT/US05/16094, 2 pages.
`Jaro, Matthew, Probabilistic Linkage of Large Public Health Data
`Files. Statistics in Medicine, vol. 14, 1995.
`Jawade et al., Securing Anonymous and Confidential Database
`through Privacy Preserving Updates. International Journal of
`Applied Information Systems, 2013.
`Joshi et al., ScalParC: A New Scalable and Efficient Parallel Classi(cid:173)
`fication Algorithm for Mining Large Datasets, Univ. of Minn.
`Supercomputing Inst. (UMSI 98/14), pp. 1-20, Feb. 1998.
`Keller et al., An Algorithm for Matching Anonymous Hospital Dis(cid:173)
`charge Records Used in Occupational Disease Surveillance: Anony(cid:173)
`mous Record Matching Algorithm. American Journal of Industrial
`Medicine 20, 1991.
`Kerkri, Elmostafa, et al., Application of the Medical Data Warehous(cid:173)
`ing Architecture Epidware to Epidemiological Follow-Up: Data
`Extraction and Transformation. Medical Informatics Europe (1999).
`Kohane, Isaac, et al., Health Information Identification and De-Iden(cid:173)
`tification Toolkit. Journal of the American Medical Informatics Asso(cid:173)
`ciation, 1998.
`Kontzalis, Identification of key attributes, gap analysis and simula(cid:173)
`tion techniques in forecasting market potential of ethical pharmaceu(cid:173)
`tical products, International Journal of Forecasting 8 243-249, 1992.
`Kotler, Computer Simulation in the Analysis of New-Product Deci(cid:173)
`sions (NO DATE).
`Kotz, David, Technological Implications for Privacy, Jan. 3, 1999.
`La wren son et al., Clinical Information for Research; the Use of the
`General Practice Databases. Journal of Public Health Medicine, vol.
`21, No. 3, (1999).
`Lennon, Functional Magic-Tips and Tricks with Oracle 7 Stored
`Procedures, 1996.
`Levi, Albert, Design and Performance Evaluation of the Nested Cer(cid:173)
`tification Scheme and Its Application in Public Key Infrastructures.
`Ph.D. Dissertation, 1999.
`Lilien et al., Bayesian Estimation and Control of Detailing Effort in
`a Repeat Purchase Diffusion Environment. Management Science,
`vol. 27, No. 5, May 1981.
`Lilien et al., Marketing Decision Making, A model-Building
`Approach, 1983.
`Lilien et al., Marketing Engineering-Computer Assisted Marketing
`Analysis and Planning, 1998.
`Lilien et al., Marketing Models, 1992.
`Lowrance, William, "Privacy and Health Research" (1998).
`Mahajan et al., Innovation Diffusion and New Product Growth Mod(cid:173)
`els in Marketing. Journal of Marketing, vol. 43, No. 4, 1979.
`McDonald, Clement et al., The RegenstriefMedical Record System:
`A Quarter Century Experience. International Journal of Medical
`Informatics 54, 1999.
`Meax, Eleanor, Encrypting Personal Identifiers. Health Services
`Research 29:2, Jun. 1994.
`Medical Radar International, Mar. 29, 1997.
`Medical Radar, Guide to Success, Mar. 2, 1999.
`Merkle, R. et al. "On the Security of Multiple Encryption" Commu(cid:173)
`nications of the ACM, vol. 24 No. 7, Jul. 1981, pp. 465-467.
`Montgomery et al., Management Science in Marketing, 1969.
`Muse et al., Evaluating the Quality of Anonymous Record Linkage
`Using Deterministic Procedures with the New York State AIDS Reg(cid:173)
`istry and a Hospital Discharge File. Statistics in Medicine, vol. 14,
`1995.
`
`DATAVANT, INC. EXHIBIT NO. 1007
`Page 5 of 20
`
`
`
`US 9,355,273 B2
`Page6
`
`(56)
`
`References Cited
`
`OTHER PUBLICATIONS
`
`Nisbett et al., Telling More 1han We Can Know: Verbal Reports on
`Mental Processes. Psychological Review, vol. 84, No. 3, May 1977.
`Non-Final Rt;jection mailed Apr. 23, 2009 for U.S. Appl. No.
`11/122,565.
`Non-Final Rt;jection mailed Apr. 27, 2009 for U.S. Appl. No.
`11/122,564.
`Non-Final Rejection mailed Feb. 9, 2010 for U.S. Appl. No.
`11/122,589.
`Non-Final Rt;jection mailed Oct. 27, 2008 for U.S. Appl. No.
`11/122,589.
`Notice of Appeal filed May 12, 2010 for U.S. Appl. No. 11/122,565.
`Office Action dated Feb. 5, 2015 from Australian Patent Application
`No.2011250762, 4 pages.
`Office Action dated Jul. 28, 2014 from Canaclian Patent Application
`No. 2564313, 5 pages.
`Office Action dated Sep. 23, 2014 from Australian Patent Application
`No.2011250762, 3 pages.
`Office Action dated Sep. 24, 2014 from Australian Patent Application
`No. 2011250762, 3 pages.
`Office Action in Australian Application No. 2011247850, mailed
`Sep. 4, 2014, 4 pages.
`Office Action in CanaclianApplicationNo. 2564317, mailedAug. 20,
`2013, 3 pages.
`Office Action in Canaclian Application No. 2564317, mailed Jul. 28,
`2014, 3 pages.
`Ohm, Aleksander and Lucila Ohno-Machado, Using Boolean Rea(cid:173)
`soning to Anonymize Databases. Artificial Intelligence in Meclicine
`15, 1999.
`Patent Examination Report No. 1 dated Aug. 23, 2013 from corre(cid:173)
`sponcling Australian Patent Application No. 2011250762, 3 pages.
`Perry et al., Understanding Oracle Chapters 1,11,14, 1989.
`Pfleeger, Security in Computing (NO DATE).
`Pommerening et al., Pseudonyms for Cancer Registries, Me1hods of
`Information In Meclicine 112-121, 1996.
`Privacy Data: 1he Data Encryption Standard Provides Valuable Pro(cid:173)
`tection. U.S. General Accounting Office, Program Evaluation and
`Me1hodology Division, Transfer Paper 8, Mar. 1987.
`Proceeclings of1he 1993 Public Health Conference on Records and
`Statistics, Jul. 19, 1993.
`Quantin et al., A Computerized Record Hash Cocling and Linkage
`Procedure to Warrant Epidemiological Follow-Up Data Security.
`Meclical Informatics Europe, 1997.
`Quantin et al., Automatic Record Hash Cocling and Linkage for
`Epidemiological Follow-up Data Confidentiality, 37 Me1hods of
`Information in Meclicine 271-277, 1998.
`Quantin, C., et al., Irreversible Encryption Me1hod by Generation of
`Polynomials. Meclical Informatics, vol. 21, No. 2, 1996.
`Rao et al., Forecasting with a Repeat Purchase Diffusion Model,
`Management Science vol. 34, No. 6, 1988.
`Sarnarati, Pierangela and Latanya, Sweeney, Generalizing Data to
`Provide Anonymity when Disclosing Information (1998).
`Sarnarati, Pierangela and Latanya, Sweeney, Protecting Privacy
`when Disclosing Information: k-Anonymity and Its Enforcement
`through Generalization and Suppression (1998).
`Segev et al., A Framework for Join Pattern Indexing in Intelligent
`Database Systems, IEEE Trans. on Knowledge and Data Eng'g, vol.
`7, No. 6 at pp. 941-947, Dec. 1995.
`Silk et al., Pre-Test-Market Evaluation of New Packaged Goods: A
`Model and Measurement Methodology. Journal of Marketing
`Research, vol. 15, Issue 2, May 1978.
`Smith and Eloff, Security in Health-Care Information Systems-(cid:173)
`Current Trends. International Journal of Meclical Informatics 54,
`1999.
`
`Smith, An Inquiry into the Nature and Causes of the Weal1h of
`Nations (HeinOnline 91h ed. 1799).
`Spafford, Observing Reusable Password Choices, Jul. 31, 1992.
`Spenser, W., The Health Information System (HIS). Computer Pro(cid:173)
`grams in Biomeclicine 5, 1976.
`Stanberry, Ben, The Legal and E1hical Aspects of Telemeclicine 2:
`Data Protection, Security and European Law.
`Journal of
`Telemedicine and Telecare 1998, Nov. 23, 1997.
`Subramanian, Ashok, et al., Use of1he World Wide Web for Multisite
`Data Collection. Academic Emergency Meclicine, vol. 4, No. 8, Aug.
`1997.
`Sweeney, Latanya, "Dataf



