Open Protocol · v1.0
Bilateral Cryptographic Data Exchange
Healthcare patient identifier exchange without PII transit. Raw data never leaves brand environment. No vendor middleware.
Architecture
Identifier hashing in the partner's browser. Encrypted tokens transit. Raw data never leaves the originating environment.
No PII on the wire. Both parties contribute key material. Neither side can unilaterally decrypt the exchange. Key material derives from both environments — bilaterally.
What Squyr Is
Squyr is a cryptographic protocol for exchanging healthcare patient identifiers between two parties without either side transmitting personally identifiable information. The primitives are standard. The architecture is what's distinctive.
SHA-256, HKDF-SHA256, AES-256-GCM, Ed25519. All FIPS 140-2 compliant. All published RFCs. Compatible with standard identity infrastructure (Epsilon, LiveRamp, DSPnative).
Both parties contribute key material. Neither side can unilaterally decrypt the exchange. No credential pool, no central data store, no operational dependency on a vendor.
Developed to stay compliant with HIPAA, BAA constraints, and state-level health privacy regulations. Identifiers hashed client-side before any exchange occurs.
All cryptographic operations run in the browser via Web Crypto API. Synthetic patient data in demos — real cryptographic operations. No network calls during hashing phase.
Three things to know
01
Raw phones, emails, or other PII never move between systems. Hashes derive from identical underlying identifiers in both environments — bilaterally, not centrally.
02
No credential pool, no central data store, no operational dependency on a vendor for the exchange to function. Both parties hold their own key material and derive locally.
03
Master key rotation is configurable (typically 90 days on-demand). In-flight bundles complete within a 30-day window using the key that was current when transmission began.
Documentation
Non-proprietary. Freely shareable with security, legal, and engineering teams during partner evaluation.