FR3067158A1 - METHOD FOR PROCESSING HYBRID DIGITAL DATA - Google Patents

Abstract

The invention relates to a method for processing hybrid digital data, comprising: - an initial synchronization step - and during the transmission by a user of information, ○ a step of opening a secure session between a user's equipment user and said first server, ○ a step of transmitting a digital sequence by said equipment to said server and recording in a dynamic random access memory excluding any recording in a permanent memory, ○ a step of analysis by the computer of the server of the content of said digital sequence transmitted by said equipment and ▪ local recording in a permanent memory of the digital information extracted from said digital sequence not corresponding to health data ▪ of transmission to said health platform and d erasure of said dynamic random access memory of the digital information extracted from said digital sequence corresponding to health data associated with the IDu.

Description

- i -

PROCESS FOR PROCESSING HYBRID DIGITAL DATA

Field of the invention

The present invention relates to the field of hybrid data management, comprising technical data, personal data and health data, and more generally data capable of improving the monitoring and remote assistance of fragile people such as the elderly.

The processing of this data implies compliance with specific constraints for those that fall within the regulatory framework of health data, and in particular the use of specific IT resources.

Health data concerns medical data and / or data relating to general determinants of health, and to the health of a person, a group of people (couple, family, neighborhood, city, region, ethnicity, country, etc.). ) or populations.

The computer processing of this sensitive data implies technical choices making it possible to guarantee

Anonymity and the absence of risk of re-identification of patients.

For these reasons, hosting health data requires dedicated infrastructures and protocols, often subject to prior approval by the health authorities and soon to certification.

State of the art

The European patent EP1994484 which describes an example of an interoperable healthcare data exchange platform system for the prior art is known in the prior art.

- 2 collect patient medical records from a plurality of disparate locations. This platform system includes:

a message management service to request and receive medical records in real time and ensuring the conversion of medical records into a standard protocol;

a matching engine which receives the converted medical records and matches the converted medical records with standard health terminology;

- a data storage space to receive and store the converted converted medical files, and comprising several central components including a marten patient index, a supplier directory or a file locator service, and information coded with an identifier specified for each patient.

This marten patient index includes a strict change control process for patient information to link disparate patient information received from external systems to a file.

Patent application EP 3129925 describes another solution intended for the collection and management of patient data delivered by measuring devices. Such a system comprises a platform collecting and ensuring the management of said data and cooperating with a server of computerized patient files and with a plurality of communicating devices. The platform develops and transmits requests to the server for updating relevant and complete computerized patient records.

Disadvantages of the prior art

The solutions of the prior art involve heavy treatments, with transport protocols for

- 3 highly secure data, means of anonymizing data as soon as this data is generated by a human interface or connected equipment, and very restrictive technical processing at the level of data production

In non-specialized environments, the application of these known solutions is hardly compatible with connected equipment which has not been designed to respect the requirements of anonymization and security, even when an IP address or even an address

Partially hidden IP can be considered as not sufficiently protecting the obligations regarding the processing of personal data or health data

The normal approach for a person skilled in the art would be to use a platform adapted to the processing of health data, for the management of all the exchanges between each of the user's devices and the processing platform. This would result in a complex and costly solution.

Another normal approach for a person skilled in the art would be to distinguish applications capable of transmitting health data, and to reserve communication with a health data processing platform, and other applications and equipment, which would communicate with a server. in the usual and simplified way. There would then be problems of global processing of user data and synchronization of data between different platforms, as well as of portability of this user data.

Solution provided by the invention

In order to remedy these drawbacks, the present invention relates, in its most general sense, to a method of processing digital data comprising

- 4 digital data subject to the constraints applicable to health data, including:

an initial synchronization step between a user account registered on a first server and a health account registered on a health data processing platform by means of a unique digital identifier ID _U comprising no information associated with the identity of the user and during the transmission by a user of information, o a step of opening a secure session between a device of the user and said first server, o a step of transmitting a digital sequence by said equipment to said server and recording in a dynamic random access memory to the exclusion of any recording in a permanent memory, o a step of analysis by the server computer of the content of said digital sequence transmitted by said equipment and of recording local in a permanent memory of digital information extracted from said digital sequence not corresponding to d health data transmission to said health platform and erasure of said dynamic random access memory of digital information extracted from said digital sequence corresponding to health data associated with the IDu.

According to an advantageous embodiment, said initial step consists, when registering a new account, in registering on a first server digital information relating to the new account and in generating a unique identifier ID _U , ideally stored from persistently

- 5 within the first server so as to be able to find it later, then to order the transmission by said first server of said unique identifier ID _U to a health data processing platform, then to order the creation of an account on said health data processing platform.

According to a particular variant, the transmission to the health data processing platform of the digital information extracted comprises a step of opening a secure session between said first server and said platform, with a transaction token whose validity period is ideally limited in time and calculated on the basis of the unique identifier for the use ID _U , the opening of access to the management service of the secure storage space and the recording of the health data transmitted by said first server, then destroying said transaction token and deleting information from the dynamic RAM of the first server.

According to a variant, the digital sequences transmitted by a device of the user comprise a digital marker of the health data. This marker makes it easier to identify the data that falls under the HDS server from those that do not.

According to a particular variant, said digital sequences come from local equipment connected to a remote assistance system for fragile or potentially fragile people.

The invention also relates to a digital data processing system comprising digital data subject to the constraints applicable to health data, comprising a health data processing platform characterized in that it further comprises a server comprising means

- 6 for communication with users' IT equipment and controlled by a commanding program:

an initial step of synchronization between a user account registered on a said server and a health account registered on a health data processing platform by means of a unique digital identifier ID _U containing no information associated with the identity of the user and during the transmission by a user of information, o a step of opening a secure session between a device of the user and said first server, o a step of transmitting a digital sequence by said equipment to said server and recording in a dynamic random access memory to the exclusion of any recording in a permanent memory, o a step of analysis by the server computer of the content of said digital sequence transmitted by said equipment and following recovery prior to IDu, local recording in a permanent memory of digital information extracted from said sequence this digital not corresponding to health data transmission to said health platform and erasing from said dynamic random access memory digital information extracted from said digital sequence corresponding to health data with the addition of the IDu.

The invention also relates to a remote assistance system for fragile or potentially fragile people, using the above digital data processing system and comprising:

A. a plurality of local facilities distributed in different individual dwellings of different people each comprising:

at. a plurality of local communication ports for exchanging information:

i. with at least one sensor for monitoring a physical or biological parameter of the person ii. with a peripheral including a local human-machine dialogue interface

b. means for recording historical data over a given period, from each sensor, in a local memory in the form of at least one reference profile

vs. a means of communication of Internet type, with the remote server as well as a secondary means of communication of GSM type for the sending of alert messages

d. a computer performing the following treatments:

i. the activation of a local alert confirmation process based on the local data collected, requiring a local confirmation or invalidation action conditioning the issue of a local alert or the closing of the sequence and ii. the triggering of the sending of a remote alert process according to the local action intervened in a predetermined time interval iii. a processing for marking the information transmitted by each sensor, consisting in associating an identifier of the person and a time stamping information with the digital data delivered by the sensor, conditionally as a function of the result of a prior local processing iv. processing of remote transmission to said remote server of the data marked conditionally on the one hand, and of the historical data anonymized unconditionally on the other hand

B. the remote server, common to a plurality of local devices, controlling the following processes:

at. sequences of actions as a function of the marked data transmitted by local equipment, and transmitted to the corresponding local equipment and / or to at least one peripheral of a third party associated with the local equipment

b. sequences of sending local messages to a plurality of local devices as a function of generic data and / or as a function of the data transmitted by these local devices and / or as a function of the local actions carried out on the local devices.

This remote assistance system can also have one and / or the other of the following characteristics:

- the local data collected for the activation of the local alert confirmation process includes the data collected by the sensors associated with the local equipment

- the local data collected for the activation of the local alert confirmation process includes data from a conversational agent

- the local data collected for the activation of the local alert confirmation process includes data from means of recognition of a predefined voice message

the computer performs a deactivation processing of the alert confirmation process on detection of an authority triggering event such as the activation of a security medallion, and executes the triggering of a local alert and of a remote alert

- 9 the local action to confirm or deny the alert is implemented by a conversational agent for the removal of doubt.

Detailed description of a nonlimiting example of the invention

The present invention will be better understood on reading the detailed description of a nonlimiting example of the invention which follows, referring to the accompanying drawings in which:

Figure 1 shows a schematic view of the system architecture of a solution according to the invention Figure 2 shows a schematic view of the information flow during data collection Figure 3 shows a schematic view of the information flow when requesting non-sensitive data, FIG. 4 represents a schematic view of the flow of information when requesting health data.

Referring to Figure 2, which illustrates the collection of sensitive information and / or out of range of the main system and managed in HDS, the user enters a form containing several information (item 1):

sensitive / HDS standard.

In accordance with item 2, the data transmitted are interpreted and only those of a standard nature and managed by the main system are stored in the main system.

In return, in accordance with reference 2 ', the storage identifier specific to the HDS system is retrieved. It is unique and anonymous.

- 10 In accordance with reference 3, the other so-called sensitive data and / or out of range of the main system, are transmitted to the dedicated partner system to host them (sensitive or other)) in HDS, partner system with which the main system is authenticated.

With reference to FIG. 3 which illustrates the retrieval of non-sensitive information from an HDS partner by a user who wishes it, the user makes a request to the main system in accordance with reference 4.

The main system retrieves the anonymous user identifier from the HDS system in accordance with marks 5 and 5 '.

The main system requires non-sensitive information (example: well-being advice) from the HDS system which manages it in accordance with benchmarks 6 and 6 '.

The information is restored and formatted by the main system in accordance with point 7.

With reference to FIG. 4 which illustrates the retrieval of sensitive information from an HDS partner by a user who wishes it, the main system provides the display of a functionality in accordance with reference 8. Any link or interaction involving restitution of sensitive data is carried out by directly referencing the HDS system in charge.

In accordance with references 9 and 9 ′, the user selects a sensitive functionality which is directly taken into account by the responding HDS system.

This hybrid data processing method can be implemented within an architecture as presented in FIG. 1, to form a remote assistance system for frail people designed to participate in the maintenance at home of the person in all vigilance towards his

- 11 state of health and with the utmost respect for his person and his social and mental aptitudes, so as to win his support and to favor his care.

Such a system uses local equipment distributed among the different users to assist remotely, and which collects data relating to them by means of different sensors.

Each local equipment or box also comprises a means of communication of the Internet type, with a remote server (for example API server) as well as a secondary means of communication of the GSM type for sending alert messages to this same server. .

In accordance with FIG. 1, the API server is also in communication with different servers and / or terminals of different partner entities of the system according to the invention, such as a medical partner managing the medical liaison book containing confidential personal data and sensitive, a partner managing information relating to the well-being of the person not containing so-called sensitive data.

The servers of partners of this type may be required to store locally in their own server data or some of the data concerning the persons assisted remotely by the system according to the invention, to modify these data, modifications all or part of which will be transmitted to API server by the server of the partner considered, and redistributed by the API server to the servers of the relevant partners relative to the data modified according to the predefined agreements between the partners.

The processing of this hybrid data collected by the box or one or other of the partner servers will be carried out in accordance with the process for processing this data set out above.

- 12 Presentation of a general architecture of a system involving the digital data processing method above, with reference to FIG. 1

The boxes X, Y and Z materialize three distinct partners brought to manage health data and / or non-health data of one or more users.

For each partner, integration between the portal and a partner server is carried out in two forms:

• Integration with a Rest / Json API allowing to exchange between systems (ex: creation of an account).

• Integration by HMI for the user so that he can have the partner's specific functionalities

The components used are listed below

Linux operating system

Java platform

OSGi

OSGi is a standard (https://www.osgi.org/) which defines a technical foundation based on the Java language and providing a modular approach. This base also specifies a set of functionalities responding to business issues such as:

• logging, • configuration and hot modification, • a module lifecycle (bundle), • the ability to manage several versions of a module.

Apache FELIX

FELIX is an opensource implementation of the OSGi standard. It is developed and maintained by the Apache foundation, (https://felix.apache.org/).

- 13 Apache KARAF

KARAF is an opensource product developed by the Apache foundation. It is a modern and polymorphic container.

It is based on an OSGi container and offers additional features such as:

• dynamic configuration, • provisioning: Karaf introduces the concept of “feature” allowing to group modules and declare dependencies between modules, • management: Karaf provides a set of metrics and operations via JMX in order to integrate in a corporate environment.

Hazelcast

HAZELCAST is a memory cache implementation distributed. It is developed in Java and offer of many features such than : • use of even mode to peer to peer " This avoids the syndrome SPOF (Single Point of Failure). • scalability. HAZELCAST detects automatically the

new nodes and these are synchronized

Apache KARAF CELLAR (marked with "C" in Figure 1)

CELLAR (http://karaf.apache.org/manual/cellar/latest-4/) is a component of KARAF allowing to integrate Karaf instances in a clustered environment. CELLAR offers management functions to manage several instances such as:

• deployment of a module on all KARAF instances of a cluster, • hot configuration on all KARAF instances of a cluster.

CELLAR also uses HAZELCAST to synchronize multiple instances. This ensures high availability.

Apache Camel

Camel is a mediation and routing framework. It is

a opensource project developed and maintained by the foundation apache. Camel architecture allows respond has a together of issues business form of boss

integration.

CASE

The CAS (Central Authentication Service) is a unified authentication system (SSO).

It is open source and allows integrating several authentication sources (database, directory, social networks, ...) CAS also uses HAZELCAST to synchronize several CAS instances. This ensures high availability.

According to an exemplary embodiment, the CAS is used in the Care Captain perimeter where the e-Health portal carries the authentication and management functionalities of the SSO.

KONY (marked with "K" in Figure 1)

KONY is a mobile development platform allowing to develop multi-support mobile applications.

MongoDB

MongoDB is a document-oriented database. The term "document" means a set of data structured and grouped together.

- 15 It is not necessary to define schemas, which makes it possible to adapt the database to the specific needs of each subsystem.

Artifactory

Artifactory is a deposit manager. It allows you to manage deployments of application packages.

Apache Karaf can rely on Artifactory to manage software component bundle dependencies.

This component must environments in order to when deploying a new one be shared with all the centralized deployment and installation of a new version of a component.

Angular

Angular a web framework allowing the web development of the portal.

It serves as a technical base.

An Angular application allows you to have an application on a single page

The addition of a graphical framework like bootstrap allows to realize ergonomic and sensitive HMI.

Web server

The Web server stores static resources as well as the Angular application that the user will load on his browser at the start of his session.

API Gateway

The API-Gateway is a service provided by AXWAY.

It mediates interactions between the central system, external systems and mobile and Web client applications.

This service provides a set of features including:

• management of API access rights,

- 16 bandwidth management.

Claims (13)

1 - Process for processing digital data comprising digital data subject to the constraints applicable to health data, comprising: an initial synchronization step between a user account registered on a first server and a health account registered on a health data processing platform by means of a unique digital identifier ID _U comprising no information associated with the identity of the user and during the transmission by a user of information, o a step of opening a secure session between a device of the user and said first server, o a step of transmitting a digital sequence by said equipment to said server and recording in a dynamic random access memory to the exclusion of any recording in a permanent memory, o a step of analysis by the server computer of the content of said digital sequence transmitted by said equipment and • local recording in a permanent memory of digital information extracted from said digital sequence not corresponding to s health data for transmission to said health platform and deletion of said dynamic random access memory of digital information extracted from said digital sequence corresponding to health data associated with the IDu. 2 - Method for processing digital data comprising digital data subject to the constraints applicable to health data according to claim 1 characterized in that said initial step consists, when registering a new account, in registering on a first server digital information relating to the new account and generating a unique identifier ID _U , then ordering the transmission by said first server of said unique identifier ID _U to a health data processing platform, then ordering the creation of an account on said health data processing platform 3 - Method for processing digital data comprising digital data subject to the constraints applicable to health data according to claim 1 or 2 characterized in that the transmission to the health data processing platform of the extracted digital information comprises a step of opening of a secure session between said first server and said platform, with a transaction token calculated according to the unique identifier of the use ID _U , the opening of access to the secure storage space and the recording health data transmitted by said first server, then destroying said transaction token and deleting information from the dynamic random access memory of the first server. 4 - Method for processing digital data comprising digital data subject to the constraints applicable to health data according to one of the preceding claims, characterized in that the digital sequences transmitted by the user's equipment include a digital marker of the data of health. _ 19 _ 5 - Process for processing digital data comprising digital data subject to the constraints applicable to health data according to claim 1 characterized in that said digital sequences come from local equipment connected to a remote assistance system for frail people or potentially fragile. 6 - Digital data processing system comprising digital data subject to the constraints applicable to health data, comprising a health data processing platform characterized in that it further comprises a server comprising means of communication with the computer equipment of users and controlled by a commanding program: an initial synchronization step between a user account registered on said server and a health account registered on a health data processing platform by means of a unique digital identifier ID _U comprising no information associated with the identity of the user and during the transmission by a user of information, o a step of opening a secure session between a device of the user and said first server, o a step of transmission of a digital sequence by said equipment to said server and recording in a dynamic random access memory to the exclusion of any recording in a permanent memory, o a step of analysis by the server computer of the content of said digital sequence transmitted by said equipment and of local recording in a permanent memory for digital information - 20 extracted from said digital sequence not corresponding to health data • transmission to said health platform and erasing from said dynamic random access memory digital information extracted from said digital sequence corresponding to health data associated with ID U. 7 - Remote assistance system for fragile or potentially fragile people, using the digital data processing system according to the preceding claim, comprising: A. a plurality of local facilities distributed in different individual dwellings of different people each comprising: at. a plurality of local communication ports for exchanging information: i. with at least one sensor for monitoring a physical or biological parameter of the person ii. with a peripheral including a local human-machine dialogue interface b. means for recording historical data over a given period, from each sensor, in a local memory in the form of at least one reference profile vs. a means of communication of Internet type, with the remote server as well as a secondary means of communication of GSM type for the sending of alert messages d. a computer performing the following treatments: i. the activation of a local alert confirmation process based on the local data collected, requiring a local confirmation or invalidation action conditioning the issuance of a local alert or the closing of the sequence and _ 21 - ii . the triggering of the sending of a remote alert process according to the local action intervened in a predetermined time interval iii. a processing for marking the information transmitted by each sensor, consisting in associating an identifier of the person and a time stamping information with the digital data delivered by the sensor, conditionally as a function of the result of a prior local processing iv. processing of remote transmission to said remote server of the data marked conditionally on the one hand, and of the historical data anonymized unconditionally on the other hand B. the remote server, common to a plurality of local devices, controlling the following processes: at. action sequences according to the marked data transmitted by local equipment, and transmitted to the corresponding local equipment and / or to at least one third party device associated with the local equipment b. sequences of sending local messages to a plurality of local devices as a function of generic data and / or as a function of the data transmitted by these local devices and / or as a function of the local actions carried out on the local devices. 8 - System according to the preceding claim, wherein the local data collected for the activation of the local alert confirmation process includes the data collected by the sensors associated with the local equipment. 9 - The system of claim 7 or 8, wherein the local data collected for the activation of the local alert confirmation process includes data from a conversational agent 10 - System according to one of claims 7 to 9, wherein the local data collected for the activation of the local alert confirmation process includes data from means of recognition of a voice message 5 preset 11 - System according to one of claims 7 to 10, in which the calculator performs a treatment of deactivation of the process confirmation warning sure 10 detection an authority triggering event such than 1'activation of a medallion of security, and runs the triggering of a local alert and a remote alert 12 - System according to one of claims 7 to 10, 15 in which the local action of confirmation or denial of alert is implemented by a conversational agent for the removal of doubt.