Abstract: Aspects of the present disclosure describe systems and methods that dynamically de-identifies confidential and/or sensitive patient health data maintained at computing devices deployed within a communications network. A key value is securely transmitted from a remote device included in a first security domain to a first server included in a second security domain. Based on the key value, the first server accesses a dataset containing health records identifying individual patients and de-identifies all or part of the dataset. A second server included in a security domain different from the remote device and the first server matches the de-identified data to previously de-identified data and generates a unique alias identifier for the matched de-identified data.

Abstract: Aspects of the present disclosure describe systems and methods that dynamically de-identifies confidential and/or sensitive patient health data maintained at computing devices deployed within a communications network. A key value is securely transmitted from a remote device included in a first security domain to a first server included in a second security domain. Based on the key value, the first server accesses a dataset containing health records identifying individual patients and de-identifies all or part of the dataset. A second server included in a security domain different from the remote device and the first server matches the de-identified data to previously de-identified data and generates a unique alias identifier for the matched de-identified data.