Metadata tree of a patient with lockboxes

摘要

A method performed by a processing system includes encrypting an electronic health record of a patient using a record key, encrypting a portion of a node of a metadata tree of the patient with a node key, the portion including a reference to the encrypted record in an encrypted data store, and updating the metadata tree for the patient to include the encrypted node and a node key lockbox with the node key.