US 11,790,113 B2
Secure storage and retrieval of sensitive information
Pablo Antonio Gonzalez Cervantes, Cupertino, CA (US); Mohan Singh Randhava, San Carlos, CA (US); Jorge F. Pozas Trevino, San Mateo, CA (US); Samuel A. Mussell, Mountain View, CA (US); Isaac Pinol Catadau, Jamaica Plain, MA (US); Steven A. Myers, San Jose, CA (US); Dongsheng Zhang, Santa Clara, CA (US); Suhail Ahmad, Palo Alto, CA (US); Zhengjun Jiang, San Jose, CA (US); Yannick L. Sierra, San Francisco, CA (US); and Amir H. Jadidi, San Jose, CA (US)
Assigned to Apple Inc., Cupertino, CA (US)
Filed by Apple Inc., Cupertino, CA (US)
Filed on Jun. 9, 2021, as Appl. No. 17/343,358.
Claims priority of provisional application 63/064,811, filed on Aug. 12, 2020.
Prior Publication US 2022/0052847 A1, Feb. 17, 2022
Int. Cl. G06F 21/62 (2013.01); G16H 10/60 (2018.01); H04L 9/08 (2006.01); H04L 9/14 (2006.01)
CPC G06F 21/6245 (2013.01) [G16H 10/60 (2018.01); H04L 9/0825 (2013.01); H04L 9/0866 (2013.01); H04L 9/14 (2013.01)] 31 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
encrypting, by a mobile user device using a plurality of cryptographic keys, health data associated with a user account of the mobile user device;
storing the encrypted health data on the mobile user device using a multi-node data storage structure, with each node of the multi-node data storage structure being identified by a unique data identifier, wherein the encrypted health data is organized into a plurality of categories;
sending the encrypted health data to a service provider that stores the encrypted health data according to the multi-node data storage structure, the unique data identifier identifying at least one node of the multi-node data storage structure;
receiving a selection of a health institution to receive at least a portion of the health data, wherein the multi-node data storage structure comprises a root node that represents the health institution and a plurality of branch nodes corresponding to each of the plurality of categories; and
based at least in part on the selection, sending at least one cryptographic key of the plurality of cryptographic keys and a data identifier corresponding to the multi-node data storage structure to an electronic health record system associated with the health institution, the electronic health record system enabled to use the at least one cryptographic key and the data identifier to access and decrypt the portion of the health data from the service provider.