Apparatus for preventing unauthorized access to computer files and for securing medical records

• US 10,037,408 B2
• Filed: 03/15/2013
• Issued: 07/31/2018
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Jeffrey A. Matos
• Original Assignee: Jeffrey A. Matos
• Inventors: Matos, Jeffrey A.
• Primary Examiner(s): NGUYEN, HIEP VAN
• Application Number:
  US13/834,634
• Publication Number:
  US 20140278529A1
• Time in Patent Office: 1,964 Days
• Field of Search: 705 3
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 80/00 ICT specially adapted for facilitating communication between medical practitioners or patients, e.g. for collaborative diagnosis, therapy or health monitoring
• CPC Class Codes: G16Z 99/00 Subject matter not provided for in other main groups of this subclass

Abstract

Apparatus for identifying the writer or receiver of a document, where identifying information for each of a plurality of registered human individuals is stored in a database, calls for capturing local images of an individual producing or receiving information and determining whether this individual is the same as one of the registered individuals whose identifying information is stored in the database. The identifying information stored in the database includes both an alphanumeric identifier and at least one image of a unique, visually observable biologic identifier on a body portion of each registered individual. The accuracy of user identification is enhanced by allowing the sender of information to supply visual content which modulates the appearance of a biologic identifier of the user. A human gatekeeper further hardens the system against inappropriate access. Utilization of the system for the document of critical encounters such as medical events is provided.

Claims

1. A dynamic biologic identifier (“

DBI”

) system for securely inputting and storing encounter information (“

EI”

) documenting at least one encounter between a first person and a second person, said system comprising;

a data memory for storing and providing (A) said EI and (B) identification information including at least one biologic identifier of each of a first person and a second person;

a processor, coupled to the memory;

at least one camera, coupled to the processor, arranged to provide said EI, including images capturing identification information of each of a putative first person and a putative second person, during the encounter, wherein each of a plurality of said images shows the identification information of each of said putative first person and said putative second person;

an identification information enhancement device (“

IIED”

), located in proximity to said putative first person and said putative second person, coupled to said processor, for producing modified information of said putative first person and said putative second person by providing at least one of;

an IIED output configured and arranged to induce a change in the appearance of at least one distinct biological feature of at least one of said putative first person and said putative second person, wherein enhancement information including a prompt provided by said processor causes said IIED to induce said change by producing said IIED output; and

an IIED output configured and arranged to display a visual representation of enhancement information provided by said processor, wherein said enhancement information causes said IIED to display said visual representation, and wherein said camera is arranged to capture images including each of said displayed visual representation and said images of each of said putative first person and said putative second person;

wherein said IIED modifies at least some of the information received by said at least one camera in response to the enhancement information provided by said processor, wherein at least some of said captured identification information includes said modified information; and

wherein said processor is operative to (A) provide said enhancement information, and (B) receive and compare (1) the identification information of each of said putative first person and said putative second person with (2) said stored identification information of said first person and said second person, and to enable storage of said EI when the identification information of each of said putative first person and said putative second person substantially matches said stored identification information of each one of said first and said second person.

2. The DBI system defined in claim 1, wherein said EI documenting said encounter is a medical record.

3. The DBI system defined in claim 2, wherein

the first person is a medical professional,

the second person is a medical patient, and

the encounter is an interaction between the medical professional and the medical patient;

whereby said stored EI documenting said encounter constitutes said medical record.

4. The DBI system defined in claim 1, comprising additional apparatus for providing secure access to said EI only to an authorized requesting person, comprising

at least one requesting person camera, coupled to said processor, for capturing second identification information from a putative requesting person;

and

a second identification information enhancement device (“

second IIED”

), located in proximity to said putative requesting person, coupled to said processor, for producing modified information of said putative requesting person by providing at least one of;

a second IIED output configured and arranged to induce a change in the appearance of at least one distinct biological feature of the putative requesting person, wherein second enhancement information including a prompt provided by said processor causes said second IIED to induce said change by producing said second IIED output, and

a second IIED output configured and arranged to display a visual representation of second enhancement information provided by said processor, wherein said second enhancement information causes said second IIED to display said visual representation of second enhancement information, and wherein said camera is arranged to capture images including each of said displayed visual representation and said images of said putative requesting person,

wherein said IIED modifies at least some of the information received by said at least one requesting person camera in response to the second enhancement information provided by said processor, wherein at least some of said captured second identification information includes said modified information of said putative requesting person;

wherein said data memory is further operative to store and provide second identification of at least one authorized requesting person; and

wherein said processor is further operative to (A) provide said second enhancement information, (B) receive and compare (1) the inputted second identification information of said putative requesting person with (2) said second identification information of said authorized requesting person, and to enable access to said stored EI by said putative requesting person when the inputted second identification information substantially matches said second identification information of one of said at least one authorized requesting persons.

5. The DBI system defined in claim 4, wherein said first person is one of said authorized requesting persons.

6. The DBI system defined in claim 4, wherein each of the first person and the second person is one of said authorized requesting persons.

7. The DBI system of claim 4, wherein said data memory is further operative to store and provide said second enhancement information.

8. The DBI system of claim 7, wherein said processor is further operative to generate additional second identification information, representing an expected modification in said inputted second identification information following said production of said second IIED output, and wherein said processor is further operative to enable access to said data memory by said putative requesting person when the second identification information of said putative requesting person substantially matches both said second stored identification information and said additional second identification information.

9. The DBI system of claim 8, wherein said data memory access comprises an enabling by said processor of reading EI stored in said data memory.

10. The DBI system of claim 8, wherein said data memory access comprises an enabling by said processor of writing additional EI for storage in said data memory.

11. The DBI system of claim 8, wherein said data memory access comprises an enabling by said processor of editing EI stored in said data memory.

12. The DBI system defined in claim 4, further comprising a registration input device, coupled to the processor, for inputting a command from an allowed registration person for registering said additional authorized requesting person;

wherein

(i) biologic identification information (“

BII”

) pertaining to the allowed registration person is stored in said data memory;

(ii) said processor is operative to allow a putative registration person to register an authorized requesting person when the inputted BII of said putative registration person substantially matches the stored BII of said allowed registration person;

(iii) said processor is further operative to input BII pertaining to said authorized requesting person received from said at least one requesting person camera;

(iv) said processor is further operative to store BII of said authorized requesting person as BII of an authorized requesting person upon receipt of a grant access command from said allowed registration person received from said registration input device; and

(v) said processor is further operative to provide access to said stored EI to a putative requesting person, when the inputted BII of said putative requesting person substantially matches the stored BII of said authorized requesting person;

whereby said authorized requesting person is registered to allow access to said stored encounter information; and

whereby the allowed registration person determines who is allowed to become an authorized requesting person.

13. The DBI system defined in claim 12, wherein

(i) said processor is operative to store a BII of an allowed first supervising person, prior to the storage of a BII of any registration person,

(ii) said processor is further operative to allow a putative first supervising person to register a registration person when the inputted BII of said putative first supervising person matches the stored BII of said allowed first supervising person;

(iii) said processor is further operative to receive BII of a putative registration person from at least one registration person camera, and

(iv) said processor is further operative to store BII of said putative registration person as BII of an allowed registration person upon receipt of a grant registration access command from said allowed first supervising person received from said registration input device;

whereby said allowed first supervising person is allowed to register a registration person.

14. The DBI system defined in claim 13, wherein said data memory includes a write-once-only memory, wherein said processor is operative to store the BII of the allowed first supervising person in said write-once-only memory.

15. The DBI system defined in claim 13, wherein said registration input device is further operative to enable a command designating at least one allowed additional supervising person;

wherein

(i) said processor is further operative to store BII of at least one allowed additional supervising person in said data memory;

(ii) said processor is further operative to permit said allowed first supervising person to designate an allowed additional supervising person by;

(a) entering the BII of said allowed additional supervising person, and (b) entering a designate additional supervisor command;

wherein both said allowed first supervising person and said allowed additional supervising person may enter BII of yet additional supervising persons.

16. The system defined in claim 15, wherein said processor is operative to receive a grant access command from at least one of said allowed first supervising person and said allowed additional supervising person;

and

wherein said processor is further operative to input the BII of another requesting person authorized to access said stored EI by one of said supervising persons, to be stored as the BII of another authorized requesting person upon receipt of said command.

17. The DBI system defined in claim 4, further comprising a registration input device, coupled to the processor, for inputting a command from an allowed registration person for registering a limited-access authorized requesting person;

wherein

(i) biologic identification information (“

BII”

) pertaining to the allowed registration person is stored in said data memory;

(ii) said processor is operative to allow a putative registration person to register a limited-access authorized requesting person when the inputted BII of said putative registration person substantially matches the stored BII of said allowed registration person;

(iii) said processor is further operative to input BII pertaining to said limited-access authorized requesting person received from said at least one requesting person camera;

(iv) said processor is further operative to store BII of said limited-access authorized person as BII of a limited-access authorized requesting person upon receipt of a grant limited-access command from said allowed registration person received from said registration input device; and

(v) said processor is further operative to provide access to a portion of said stored EI to a limited-access putative requesting person, when the inputted BII of said limited-access putative requesting person substantially matches the stored BII of said limited-access authorized requesting person;

whereby said limited-access authorized person is registered to allow limited access to said stored encounter information; and

whereby the allowed registration person determines who is allowed to become an limited access authorized requesting person.

18. The DBI system of claim 17, wherein said processor is operative to receive an access-specifying command from said registration input device by said allowed registration person which specifies at least one of:

(a) information pertaining to at least one portion of at least one specific encounter to which said limited-access authorized requesting person is allowed access; and

(b) information pertaining to at least one portion of at least one specific encounter to which said limited-access authorized requesting person is not allowed access.

19. The system defined in claim 4, further comprising an EI output device, coupled to said processor, for outputting said EI, in response to request by said putative requesting person, upon determination by said processor that said putative requesting person is an authorized requesting person.

20. The apparatus defined in claim 4, wherein said processor is further operative of repeatedly receive and compare (1) the inputted second identification information of said putative requesting person with (2) said second identification information of said at least one authorized requesting person, and to enable access to said EI by said putative requesting person only when the inputted second identification information substantially matches said second identification information of one of said at least one authorized requesting persons.

21. The DBI system defined in claim 1, further comprising a microphone, coupled to said processor, for inputting supplemental identification information from each of said putative first person and said putative second person;

wherein said data memory is further operative to store and provide supplemental identification information including voice information pertaining to each of said first and said second person;

wherein said processor is further operative to (a)compare said inputted supplemental identification information to respective stored supplemental Identification information and (b) to enable storage of said EI only if inputted supplemental identification information of each of said putative first person and said putative second person substantially matches said stored supplemental identification information of a respective one of said persons.

22. The DBI system defined in claim 1, further comprising at least one microphone, coupled to said processor, for inputting audio encounter information.

23. The DBI system defined in claim 1, further comprising at least one medical device, coupled to said processor, for inputting data representing physiologic information of said second person.

24. The DBI system defined in claim 1, further comprising a keyboard for inputting alphanumeric information pertinent to said encounter.

25. The DBI system defined in claim 1, further comprising a data port for inputting computer data files pertinent to said encounter.

26. The DBI system defined in claim 1, wherein

the first person and the second person are parties to a contract, and

the encounter is an interaction between the parties concerning an offer and acceptance of the contract;

whereby said stored information documenting said encounter constitutes a record of a formation of the contract.

27. The DBI system defined in claim 1, wherein said first and said second persons are parties to the purchase and sale of a property, and

the encounter is an interaction between the parties concerning an offer and acceptance of the sale of said property;

whereby said stored information documenting said encounter constitutes a record of said sale.

28. The DBI system defined in claim 1, wherein said identification information enhancement device is configured to induce a change in the appearance of at least one distinct biologic feature of at least one of said putative first person and said putative second person, and wherein said enhancement information causes said identification information enhancement device to prompt said change.

29. The DBI system defined in claim 28, wherein said change is involuntary.

30. The DBI system defined in claim 28, wherein said change is voluntary, and wherein (1) said identification information enhancement device comprises an instruction output device which provides an instruction to at least one of said putative first person and said putative second person to alter the configuration of a biologic identifier under voluntary control, and (2) said data memory is further operative to store and provide identification information pertaining to said altered biologic identifier.

31. The DBI system defined in claim 30, further comprising a fingerprint transmitting keyboard, coupled to said processor and comprising a plurality of keys,

each key configured to signal the input of an alphanumeric character/symbol to said processor when touched or depressed by a finger of at least one of said putative first person and said putative second person,

each key composed of a material through which a respective fingerprint of an applied finger may be visualized by a fingerprint camera located beneath said keyboard and configured to obtain an image of said fingerprint;

wherein one of said at least one camera is a fingerprint camera, configured to obtain in image of a fingerprint during an act of depression or touching of any one of said keys;

wherein said identification information enhancement device is configured to indicate, to a putative person utilizing said keyboard, a prompt to input specified information utilizing said keyboard;

wherein said induced biologic feature change is the change of the position of a finger associated with a respective fingerprint, in response to said prompt by said identification information enhancement device;

wherein said processor compares each of

(1) said information pertaining to said inputted fingerprint pattern with information pertaining a stored fingerprint pattern; and

(2) additional stored identification information indicating an expected pattern of keystrokes in response to said prompt, with an inputted pattern of keystrokes in response to said prompt;

whereby at least one of said putative first person and said putative second person, utilizing said keyboard, provides dynamic fingerprint information in response to said instruction.

32. The DBI system defined in claim 30, further comprising a fingerprint transmitting keyboard, and comprising a plurality of keys,

each key composed of a material through which a respective fingerprint of an applied finger may be visualized by a fingerprint camera located beneath said keyboard and configured to obtain an image of said fingerprint;

wherein one of said at least one camera is a fingerprint camera, configured to obtain an image of a fingerprint during an act of depression or touching of any one of said keys;

wherein said identification information enhancement device is configured to indicate, to a putative person utilizing said keyboard, a prompt to input specified information utilizing said keyboard;

wherein said induced biologic feature change is the change of the position of a finger associated with a respective fingerprint, in response to said prompt by said identification information enhancement device;

wherein said processor compares each of

(1) said information pertaining to said inputted fingerprint pattern with information pertaining a stored fingerprint pattern; and

(2) additional stored identification information indicating to an expected pattern of keystrokes in response to said prompt, with an inputted pattern of keystrokes in response to said prompt;

whereby at least one of said putative first person and said putative second person, utilizing said keyboard, provides dynamic fingerprint information in response to said instruction.

33. The DBI system defined in claim 28, wherein said distinct biologic feature is a configuration of at least one eye of at least one of said putative first person and said putative second person.

34. The DBI system defined in claim 28, wherein

said distinct biological feature is a configuration of an iris of at least one eye of at least one of said putative first person and said putative second person,

said identification information enhancement device is a light source having controllable light intensity, coupled to said processor;

and

wherein said at least one camera is configured to capture an image of said iris pattern, said pattern influenced by said light intensity;

wherein said processor compares the identification information pertaining to said inputted iris pattern, to information selected from the group consisting of

(1) said stored identification information pertaining to an iris pattern; and

(2) information pertaining to an expected iris pattern based on a light intensity specified by said enhancement information.

35. The DBI system defined in claim 28, wherein said distinct biologic feature is a configuration of at least a portion of a face of at least one of said putative first person and said putative second person.

36. The apparatus defined in claim 1, wherein said processor is further operative to repeatedly receive and compare (1) the identification information of each of said putative first person and said putative second person with (2) said stored identification information of said first person and said second person, and to enable storage of said EI only when the identification information of each of said putative first person and said putative second person substantially matches said stored identification information of a respective one of said persons.

37. The DBI system of claim 1, wherein said data memory is further operative to store and provide said enhancement information.

38. The DBI system of claim 37, wherein said processor is further operative to generate additional identification information, representing an expected modification in said inputted identification information following said production of said IIED output, and wherein said processor is further operative to enable storage of said EI when the identification information of each of said putative first person and said putative second person substantially matches both said stored identification information and said additional identification information.

39. The DBI system defined in claim 38, wherein said identification information enhancement device is configured to display said visual representation of enhancement information, and wherein said additional stored identification information further comprises information representing said displayed representation of said enhancement information.

40. The DBI system of claim 1, wherein the composition of said stored identification information is selected from the group consisting of:

(a) biologic information only; and

(b) biologic information and respective alphanumeric information;

wherein

(i) said biologic information represents descriptive information concerning at least one distinct biologic feature of a person, and

(ii) said alphanumeric information represents identifying information of said person consisting of alphanumeric data.

41. The DBI system defined in claim 1, further comprising an additional registration input device, coupled to the processor, for inputting a command from an allowed additional registration person for registering at least one of said first person, and said second person;

wherein

(i) biologic identification information (“

BII”

) pertaining to the allowed additional registration person is stored in said data memory;

(ii) said processor is operative to allow a putative additional registration person to register at least one of said first and said second person when the inputted BII of said putative additional registration person substantially matches the stored BII of said allowed additional registration person;

(iii) said processor further operative to input BII pertaining to at least one of said first and said second person received from an additional registration camera; and

(iv) said processor is further operative to store BII of at least one of said first and said second person as BII of said respective first person and second person upon receipt of a registration command from said allowed additional registration person received from said additional registration input device;

whereby at least one of said first and second person undergoes registration to allow input of said encounter information by said person; and

whereby the allowed additional registration person determines who is allowed to become one of said first and said second person.

42. A dynamic biologic identifier (“

DBI”

) system for securely inputting and storing and providing access to digital information, said system comprising;

(a) data memory for storing and providing

secure information,

biological identification information (“

BII”

) of at least one authorized person (“

AP”

), authorized to access said secure information; and

BII of at least one human gatekeeper person (“

HGP”

);

(b) a gatekeeper decision input device for inputting a signal representing an authorization decision of a HGP authorized to make said decision;

(c) a putative authorized person (“

PAP”

) camera arranged to repeatedly input visual information pertaining to the BII of a PAP;

(d) a processor, coupled to each of said gatekeeper decision input device, said PAP camera and said memory;

operative to;

(i) store and access information in said memory,

(ii) repeatedly analyze said inputted PAP BII,

(iii) repeatedly generate PAP analysis signals indicating the results of said BII analysis; and

(iv) receive said signal representing said HGP decision;

(e) a PAP biologic ID modulating device, coupled to said processor, for producing, in the vicinity of said PAP, at least one of;

a change in the appearance of an anatomic feature of said PAP, and

a visual representation of information represented by PAP ID output signals, wherein said PAP camera is arranged to provide images showing both said visual representation and a biologic identifier of said PAP, which alters the appearance of said inputted PAP BII, in response to said PAP ID output signals from said processor, wherein said processor is further operative to generate said PAP ID output signals;

(f) an output device, coupled to said processor, for providing said HGP with the results of said analysis;

(g) a putative human gatekeeper (“

PGHP”

) camera coupled to said processor, arranged to input visual information pertaining to the BII of a PGHP; and

(h) a gatekeeper ID modulating device, coupled to said processor, for producing, in the vicinity of said PGHP, at least one of;

a change in the appearance of an anatomic feature of said PGHP, and

a visual representation of information represented by at least one gatekeeper ID output signal, and wherein said PGHP camera is arranged to provide images showing both said visual representation and a biologic identifier of said PGHP,

which alters the appearance of said inputted PGHP BII, in response to said at least one gatekeeper ID output signal from said processor, wherein said processor is further operative to generate said at least one gatekeeper ID output signal;

wherein

(1) said processor is operative to repeatedly generate said PAP ID output signals which cause said PAP biologic ID modulating device to modulate the content of said PAP BII;

(2) said processor is operative to repeatedly compare stored BII of said AP and repeatedly inputted BII of said PAP, and to repeatedly generate said PAP analysis signals representing results of the comparisons;

(3) said processor is operative to generate said at least one gatekeeper ID output signal which causes said gatekeeper ID modulating device to modulate the content of said PGHP BII;

(4) said processor is operative to compare said stored HGP BII with said inputted PGHP BII; and

(5) said processor is operative to allow said PAP access to said memory if;

(A) each repeated processor analysis indicated that the inputted BII of said PAP and the stored BII of said AP are substantially similar;

(B) said HGP inputs an allow access signal to said gatekeeper decision input device, representing a decision of said HGP to allow said PAP access to said memory; and

(c) said comparison performed by said processor indicated that said inputted PGHP BII matches said stored HGP BII.

43. The apparatus defined in claim 42, wherein said PAP biologic ID modulating device causes a change in the appearance of an anatomic feature of said PAP.

44. The apparatus defined in claim 43, wherein

said PAP biologic ID modulating device comprises a light source for producing light with a controllable parameter, for application to an iris of an eye of said PAP;

said processor is operative to alter and control a quality of said light;

said camera is situated to view said iris; and

the authorized person BII stored in said data memory comprises data representing a plurality of images of said authorized person iris, each obtained under different lighting conditions defined by said controllable parameter;

whereby said processor causes the alteration of both the anatomic configuration and the appearance of said PAP iris; and

whereby the accuracy of identification of said PAP is enhanced.

45. The apparatus defined in claim 42, wherein said PAP biologic ID modulating device is a display device, configured to produce said visual representation, and wherein said PAP camera is arranged to provide images, each image showing both said visual representation and a biologic identifier of said PAP.

46. The apparatus defined in claim 42, further comprising an information output device, coupled to said processor, for outputting said secure information, when said processor allows said PAP access to said memory.

47. The apparatus defined in claim 42, wherein said the gatekeeper ID modulating device causes a change in the appearance of an anatomic feature of said PGHP.

48. The apparatus defined in claim 47, wherein

said gatekeeper ID modulating device comprises a light source for producing light with a controllable parameter, for application to an iris of an eye of said PGHP;

said processor is operative to alter and control a quality of said light;

said PGHP camera is situated to view said iris; and

the human gatekeeper BII stored in said data memory comprises data representing a plurality of images of said human gatekeeper iris, each obtained under different lighting conditions defined by said controllable parameter;

whereby said processor causes the alteration of both the anatomic configuration and the appearance of said PGHP iris; and

whereby the accuracy of identification of said PGHP is enhanced.

49. The apparatus defined in claim 42, wherein said gatekeeper ID modulating device is a display device, configured to produce said visual representation, and wherein said PGHP camera is arranged to provide images, each image showing both said visual representation and a biologic identifier of said PGHP.

50. The apparatus defined in claim 42, wherein said processor is operative to prevent PAP access to said memory if any one processor analysis indicates that the inputted BII of said PAP and the stored BII of said AP are not substantially similar.