Abstract: Systems and methods are provided for healthcare quality measurement. A user interaction module receives a first unstructured quality indicator from a first healthcare quality delivery system. A natural language processing engine, including a quality indicator framework and a library parses the unstructured quality indicator to identify key words and relationships therebetween. A structured quality indicator generator generates suggested structured quality indicators from unstructured quality indicators. The suggested structured quality indicators are standardized according to a predetermined standard A quality measure engine generates a query corresponding to a selected one of the structured quality indicators. A data repository outputs data from executing the query thereon. A quality measure dashboard outputs the result data.

Abstract: In some embodiments, a proximity of a patient to a medical device (e.g., a medication dispensing device in which the patient removes a dose of medication that has been dispensed therefrom) may be determined, and a medical status associated with the patient is determined. Based on the determined proximity and the medical status, an alert, including a triggering element, is generated. The alert includes a first alarm type and a second, different alarm type. Upon activation of the triggering element, the medical device is monitored to confirm initiation and occurrence of a physical action (e.g., dispensing and removal of medication) using the medical device. Based on the monitoring, the medical status associated with the patient is updated. A patient device and/or interface may be utilized for the proximity determination and/or generating the alerts.

Abstract: A domain authority 13 for use in a hierarchy of domain authorities in a hierarchical cryptographic system. The domain authority 13 comprises a user secret key generator 21 for generating a user secret key based on a domain secret key and one or more attribute representations, to obtain a user secret key associated with a set of attributes corresponding to the attribute representations, and wherein the domain secret key is based on a domain secret key of a parent domain authority or a root secret key of a root authority of the hierarchy of domain authorities, and wherein the attribute representations are independent of the hierarchy. A decrypter makes use of the user secret key. An encrypter generates ciphertext decryptable by the decrypter.

Abstract: There is provided a computer-implemented method (100) for generating a patient care plan. The method comprises acquiring (102) a plurality of single-condition care plans for a patient suffering from multiple medical conditions; enriching (104) at least one of the single-condition care plans; combining (106) the plurality of single-condition care plans into a multiple-condition care plan; and evaluating (108) a quality of the multiple-condition care plan relative to the plurality of single-condition care plans. A computer program product, an apparatus and a system are also disclosed.

Abstract: An attribute-based digital signature system comprises a signature generation unit (1) for signing a message (m) by generating a signature (?) based on a user secret key (SK) associated with a set of user attributes, wherein the signature generation unit (1) is arranged for combining the user secret key (SK) with revocation data (R) to form at least part of the signature (?), wherein the revocation data (R) complements respective ones of a plurality of valid user secret keys and wherein the revocation data (R) prevents a revoked user secret key (SK) from being used to validly sign a message (m) with the set of user attributes. The system further comprises a revocation unit (2) for selectively removing at least part of the signing capability of a to-be-revoked user secret key (SK), by generating updated revocation data (R), wherein the updated revocation data (R) is based on at least part of the to-be-revoked user secret key (SK).

Abstract: A system for attribute-based encryption comprises a first encrypter (11) and a second encrypter (12). The first encrypter (11) comprises an input unit (1) for determining a message and a policy over a set of attributes, wherein the policy comprises a plurality of components, and a first cryptographic unit (2) for generating an encrypted representation of the message and an encrypted representation of the plurality of components. The second encrypter (12) comprises a receiving unit (3) for receiving the encrypted representation of the message and the encrypted representation of the plurality of components, and a second cryptographic unit (4) for transforming the encrypted representation of the message and the encrypted representation of the plurality of components into an attribute-based encrypted message associated with the policy.

Abstract: A method of dynamically determining the access rights of a client to a record comprises receiving an access request from the client with respect to the record, determining one or more contexts relating to the access request, calculating a score for each determined context, calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, and determining the client's access rights according to a comparison of the overall score to the score for each right in the rights policy.

Abstract: An attribute-based digital signature system is disclosed. A first signature generating unit (1) is used for generating a first signature (10) for a document (11), based on a first signature key (12) and the document (11). A re-signing unit (2) is used for generating a second signature (13) for the document (11), based on the first signature (10) and a re-signing key (14), wherein the re-signing unit (2) is arranged for handling attributes (15, 16) associated with the first signature (10) and/or the second signature (13). The second signature (13) is associated with a second set of attributes (16,16?) determined by the re-signing key (14), wherein the second set of attributes (16) comprises a plurality of attributes.

Abstract: A system is disclosed for providing interoperability between a plurality of data protection systems. The system includes an ontology (3) configured to store definitions (12) of concepts (4) relating to interface elements of at least two different data protection systems including a first data protection system (1) and a second data protection system (2); and a mapping generator (5) configured to generate a mapping between at least one interface element of the first data protection system (1) and at least one interface element of the second data protection system (2), based on the ontology (3). The system comprises a message converter (16) configured to receive a message generated by the first data protection system (1), convert the message based on the mapping to obtain a converted message, and transmit the converted message to the second data protection system (2).

Abstract: The present application relates to a system for managing access to medical data, comprising a first module which displays data request information for requesting access to the medical data from the data provider, and a second module which obtains the data request information from the first module and requests access to the medical data from a data provider based on the obtained data request information. The first module can provide the data request information by Patient Physician displaying the data request information, for example as a quick-response (QR) code. The data request information may comprise a uniform resource locator (URL) linking to the data provider. The data provider can store the medical data locally or can retrieve the medical data from a remote source, such as a personal health record (PHR) server.

Abstract: There is provided a method of operating a patient device in a patient monitoring system to assist a patient in completing a task, there being a redefined set of types of task for the patient to complete, the method comprising receiving information on a task for the patient to complete, the information comprising an indication of the type of task from the predefined set the patient is to complete; determining one or more operations associated with the type of task indicated in the received information that the patient device is to perform on initiation of the task or on occurrence of a predefined event; and on initiation of the task by the patient or on occurrence of the predefined event, performing the one or more operations associated with the task.

Abstract: A system for attribute-based encryption comprises a first encrypter (11) and a second encrypter (12). The first encrypter (11) comprises an input unit (1) for determining a message and a policy over a set of attributes, wherein the policy comprises a plurality of components, and a first cryptographic unit (2) for generating an encrypted representation of the message and an encrypted representation of the plurality of components. The second encrypter (12) comprises a receiving unit (3) for receiving the encrypted representation of the message and the encrypted representation of the plurality of components, and a second cryptographic unit (4) for transforming the encrypted representation of the message and the encrypted representation of the plurality of components into an attribute-based encrypted message associated with the policy.

Abstract: A system including a server system, a user terminal and a hardware token, for providing secure access to a data record. The server system comprises storage means (1) for storing a plurality of data records, a data record (2) having associated therewith a sequence of secrets (14) shared with a hardware token (60) corresponding to the data record (2), the server system (100) further being arranged for storing user authentication information (3). User authenticating means (10) are provided for receiving authentication credentials (11) of a user from a user terminal (200) and authenticating the user as an authorized user, based on the authentication credentials (11) of the user and the stored authentication information (3). Secret-receiving means (9) are provided for receiving a representation of a secret (13) revealed by a hardware token (60) and information identifying the data record corresponding to the hardware token from the terminal.

Abstract: A method of authenticating a device and a user comprises obtaining a device ID for the device, performing a biometric measurement of the user, obtaining helper data for the user, and generating a key from the biometric measurement and helper data. There is then generated a message comprising the key or a component derived from the key, which transmitted to a remote service, and at the service there is carried out the step of authenticating the device and the user with the message. In a preferred embodiment, the generating of the key further comprises generating the key from the device ID.

Abstract: The presently disclosed and claimed inventive concept(s) provides new estrogenic compounds of the general formula and pharmaceutical compositions containing them. The compounds of the presently disclosed and claimed inventive concept(s) are useful, for example, in hormone replacement therapies (HRT/ERT), and as contraceptives, and estrogenic hormone therapies. Also provided is a process for synthesizing the compounds of the presently disclosed and claimed inventive concept(s).

Abstract: A coin share generator (5) is employed in a system for performing a threshold coin tossing scheme. The coin share generator (5) comprises a coin determining unit (6) for determining a coin value, and a coin share generating unit (7) for generating a coin share based on a coin value and a private key associated with a set of attributes, to obtain a coin share associated with the set of attributes. The system further comprises a coin share verifier (8) that has a coin share determining unit (9) for determining a coin share to be verified, wherein the coin share is associated with a set of attributes, and a coin share verifying unit (10) for verifying a validity of the coin share, taking into account the set of attributes associated with the coin share.

Abstract: A domain authority 13 for use in a hierarchy of domain authorities in a hierarchical cryptographic system. The domain authority 13 comprises a user secret key generator 21 for generating a user secret key based on a domain secret key and one or more attribute representations, to obtain a user secret key associated with a set of attributes corresponding to the attribute representations, and wherein the domain secret key is based on a domain secret key of a parent domain authority or a root secret key of a root authority of the hierarchy of domain authorities, and wherein the attribute representations are independent of the hierarchy. A decrypter makes use of the user secret key. An encrypter generates ciphertext decryptable by the decrypter.

Abstract: A system including a server system, a user terminal and a hardware token, for providing secure access to a data record. The server system comprises storage means (1) for storing a plurality of data records, a data record (2) having associated therewith a sequence of secrets(14)shared with a hardware token (60) corresponding to the data record (2), the server system(100) further being arranged for storing user authentication information (3). User authenticating means (10) are provided for receiving authentication credentials (11) of a user from a user terminal (200) and authenticating the user as an authorized user, based on the authentication credentials (11) of the user and the stored authentication information (3). Secret-receiving means (9) are provided for receiving a representation of a secret (13) revealed by a hardware token (60) and information identifying the data record corresponding to the hardware token from the terminal. Marking means (12) are provided for marking the unused secret (s3) as used.

Abstract: The presently disclosed and claimed inventive concept(s) provides new estrogenic compounds of the general formula and pharmaceutical compositions containing them. The compounds of the presently disclosed and claimed inventive concept(s) are useful, for example, in hormone replacement therapies (HRT/ERT), and as contraceptives, and estrogenic hormone therapies. Also provided is a process for synthesizing the compounds of the presently disclosed and claimed inventive concept(s).

Abstract: The present invention provides new estrogenic compounds of the general formula in which the substituents have the meanings that are explained in more detail in the description, and pharmaceutical compositions containing them. The compounds of the invention are useful, for example, in hormone replacement therapies (HRT/ERT) and as contraceptives and estrogenic hormone therapies. Also provided is a process for synthesizing the compounds of the invention.