xDose: Pharmaceutical Formula Protection

The Problem

Proprietary drug formulas stored at single R&D sites are targets for industrial espionage. A single insider threat can leak a billion-dollar formula.

Pharmaceutical companies spend an average of $2.6 billion developing a single new drug. The complete formula -- active ingredients, excipients, ratios, manufacturing process parameters -- represents the core intellectual property. A single breach, insider threat, or state-sponsored espionage operation can expose this entire investment.

Traditional security relies on access control and encryption with a single key. If the key is compromised, the formula is exposed. If a privileged insider copies the data, no amount of perimeter security can prevent the leak. The formula needs protection that does not depend on any single trust point.

The Old Way

The PRIVATE.ME Solution

XorIDA splits formula data across independent R&D sites. No single site holds a reconstructable formula. Reconstruction requires threshold cooperation between independently governed facilities.

Each formula is split into N shares distributed across physically separate, independently administered R&D sites. Reconstruction requires K shares from K different sites, ensuring that no single site director, IT administrator, or insider can reconstruct the formula without authorized cooperation from other sites.

Every share is HMAC-signed for tamper detection. Any modification to a share -- even a single bit flip -- is detected before reconstruction proceeds. The system creates an immutable audit trail of every access attempt.

The New Way

Fast Onboarding: 3 Acceleration Levels

Traditional prescription management systems require manual DEA registration, pharmacy network configuration, and custodian coordination. xDose collapses this to 15 seconds with zero-click accept, 90 seconds with one-line CLI, and 10 minutes with deploy buttons.

# .env file
XDOSE_INVITE_CODE=XDOSE-abc123

# Auto-accept on first use
npx @private.me/xdose issue \
  --prescriber-dea AS1234563 \
  --patient-id patient-456 \
  --drug "Oxycodone HCl 5mg" \
  --schedule II \
  --quantity 30 \
  --refills 0

# ✅ Invite auto-accepted
# ✅ Ready to issue prescriptions

# Install and initialize
npx @private.me/xdose init

# Output:
# ✅ Pharmacy DID generated
# ✅ Saved to .env
# ✅ DEA/state board custodians registered
# Ready to issue prescriptions

# Click one button:
Vercel Deploy Button
Netlify Deploy Button

# Provisions:
# ✅ DEA compliance validation server
# ✅ Pharmacy share storage (encrypted)
# ✅ Diversion reporting dashboard
# ✅ Fill tracking + audit trail

Integration Examples

All three speed tiers use the same API. Choose based on your deployment needs:

import { PrescriptionManager } from '@private.me/xdose';

// Auto-accept invite from env var (XDOSE_INVITE_CODE)
const manager = new PrescriptionManager();

// Issue first prescription (auto-initializes)
const result = await manager.issuePrescription({
  prescription: {
    prescriberId: 'dr-smith-123',
    prescriberDeaNumber: 'AS1234563',
    prescriberNpi: '1234567890',
    patientId: 'patient-456',
    drugName: 'Oxycodone HCl 5mg',
    schedule: 'II',
    quantity: 30,
    refills: 0,
  },
  threshold: 2,
  totalShares: 3,
  custodians: [pharmacy, dea, stateBoard],
});

// ✅ Prescription split (2-of-3)
// ✅ Shares distributed to custodians
// ✅ Ready to fill at pharmacy

How It Works

A secure pipeline ensures formula data never exists in reconstructable form outside the authorized manufacturing or research environment.

Use Cases

Integration

import { protectFormula, reconstructFormula } from '@private.me/pharmasplit';

// Split formula across 3 R&D sites (2-of-3 threshold)
const shares = await protectFormula(formulaBuffer, {
  sites: ['boston', 'basel', 'tokyo'],
  n: 3,
  k: 2
});

// Reconstruct with cooperation from any 2 sites
const formula = await reconstructFormula(
  [shares[0], shares[1]]
);

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xDose?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xDose generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases