Secure extranet operation with open access for qualified medical professional

• US 20020120573A1
• Filed: 03/29/2001
• Published: 08/29/2002
• Est. Priority Date: 11/03/1998
• Status: Abandoned Application

• Current Assignee: Physician Verification Services
• Original Assignee: Physician Verification Services
• Inventors: McCormick, Douglas
• Application Number:
  US09/821,777
• Publication Number:
  US 20020120573A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: G16H 80/00 ICT specially adapted for facilitating communication between medical practitioners or patients, e.g. for collaborative diagnosis, therapy or health monitoring
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A business method of verifying status of health care professionals for entry to limited access areas of Web sites. Users are not required to be preregistered, and can gain access by entering identifiers which are checked against American Medical Association records.

Claims

1. A business method of facilitating communication between health care professionals and subscribing Web sites, the Web sites containing secured areas, comprising the steps of:

when the health care professional attempts to access said secured areas of the subscribing Web sites,

allowing said health care professional to either provide previously assigned identifiers, or provide other identifying data;

verifying said previously assigned identifiers or said other identifying data;

allowing said health care professional access to said secured area upon verification of said previously assigned identifiers or said other identifying data,

while concealing sufficient information about said professionals to preclude said subscribing sites from initiating solicitations of said professionals.

2. The business method of claim 1, wherein said previously assigned identifiers or said other identifying data are verified by a separate server that does not contain said subscribing Web site.

3. The business method of claim 1, wherein if said health care professional does not enter previously assigned identifiers, said health care professional is allowed to request assignment of identifiers for future verification.

4. The business method of claim 1, wherein said secured areas contain information which is regulated by a regulatory agency.

6. The business method of claim 4, wherein said access is permitted for a limited time only.

7. The business method of claim 4, wherein said data on said authorization list is obtained from the American Medical Association masterfile.

8. The business method of claim 4, wherein said professional is not pre-registered with said secure server site.

10. The business method of claim 8, wherein said subscribing site is prevented from using information obtained from said professional to launch solicitations to said professional, under at least some circumstances.

11. The business method of claim 8, wherein said verification occurs via encrypted communication.

12. The business method of claim 8, wherein anonymous information about said professional is also sent to said subscribing site upon verification.

5. A business method of facilitating communication between health care professionals and subscribing Web sites, comprising the steps of:

when access to controlled information is requested from a subscribing site by one of said professionals,

requesting verification from a secure server site which has an authorization list, and

if said secure server site provides said verification, then permitting access,

while concealing sufficient information about said professionals to preclude said subscribing sites from initiating solicitations of said professionals,

wherein said verification is achieved by comparing personal data entered by the professional to data on said authorization list.

9. A business method of brokering privacy for access to controlled information by licensed professionals, said controled information contained on subscribing Web sites, comprising the steps of:

when said professional attempts access to said controlled information,

permitting said subscribing sites to obtain short-term verification of authorization for said professional to access said controlled information, with reference to a database that is not accessible to said subscribing site and is kept on a secured server;

comparing personal data entered by said professional to data kept on said database; and

preventing said subscribing site from accessing the data entered by said professional;

p1 wherein said professional need not be preregistered on said secure server or be issued a username or password by said secure server.