I'm not sure about the technicals, but there are some services that are HIPAA compliant, which I assume means something similar to the end-to-end encryption you're describing. WebeX is the one I know one of my local hospital systems uses.