Method for controlling access to medical information

• US 20030037054A1
• Filed: 08/09/2001
• Published: 02/20/2003
• Est. Priority Date: 08/09/2001
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dutta, Rabindranath, Ravi, Kumar
• Application Number:
  US09/925,782
• Publication Number:
  US 20030037054A1
• Time in Patent Office: Days
• US Class Current: 707/100
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records

Abstract

A system and a method for controlling access to patient medical information through a networked aggregate medical server are provided. Patient medical information is received at the server. Patient access instructions are received at the server. An access request for medical information is received at the server from a requester. Correspondence with the access request and the patient access instructions is determined. A portion of the medical information is sent to the requestor based on the patient access instructions if the access request and the patient instructions correspond.

Claims

1. A method of controlling access to patient medical information through a networked connection comprising:

receiving patient medical information at an aggregate medical server;

receiving patient access instructions at the aggregate medical server;

receiving an access request from a requester at the aggregate medical server;

determining whether the access request corresponds with the patient access instructions; and

sending a portion of the patient medical information to the requester based on the patient access instructions and the access request if the patient access instructions corresponds with the access request.

2. The method of claim 1 wherein the patient access instructions include alert instructions.

3. The method of claim 2 further comprising:

generating alerts over the network to any of a healthcare provider, a patient, a treatment facility or a government agency subsequent to receiving adverse medical data.

4. The method of claim 1 further comprising:

providing a hyperlink to the aggregate server wherein the hyperlink comprises the access request.

5. The method of claim 4 wherein the hyperlink is provided on a web site for access by the requester.

6. The method of claim 1 wherein determining whether the access request corresponds with the patient access instructions further comprises implementing at least one security feature.

7. The method of claim 6 wherein the security feature is selected from a group consisting of a user password, a public key cryptograph, a digital signature, and an XML based security standard.

8. The method of claim 1 further comprising:

verifying a portion of the patient medical information with an outside server.

9. The method of claim 8 wherein verifying the portion of the patient medical information comprises determining a patient eligibility.

10. The method of claim 1 further comprising:

updating the patient medical information.

11. The method of claim 1 wherein the patient medical information is selected from a group consisting of a name, a social security number, a plan number, personal information, medical history information, medical claims information, prescription information, insurance company information, billing information, healthcare provider information, record ID, date of service and CPT4 code.

12. The method of claim 1 wherein the access information comprises level authorization information.

13. The method of claim 12 wherein level authorization comprises restriction to a patient medical information category.

14. The method of claim 13 wherein the patient medical information category is selected from a group consisting of laboratory services, healthcare providers, pharmacy services and diagnostic services.

15. A computer usable medium including a program for controlling access to patient medical information through a networked connection comprising:

computer readable program code for receiving patient medical information at an aggregate medical server;

computer readable program code for receiving patient access instructions at the aggregate medical server;

computer readable program code for receiving an access request from a requestor at the aggregate medical server;

computer readable program code for determining whether the access request corresponds with the patient access instructions; and

computer readable program code for sending a portion of the patient medical information to the requester based on the patient access instructions and the access request if the patient access instructions corresponds with the access request.

16. The computer usable medium of claim 15 wherein the patient access instruction includes an alert instruction.

17. The computer usable medium of claim 16 further comprising:

computer readable code for generating alerts over the network to any of a healthcare provider, a patient, a treatment facility or a government agency subsequent to receiving adverse medical data.

18. The computer usable medium of claim 15 further comprising:

computer readable code for providing a hyperlink to the aggregate server wherein the hyperlink comprises the access request.

19. The computer usable medium of claim 18 wherein the hyperlink is provided on a web site for access by the requester.

20. The computer usable medium of claim 15 wherein the computer readable code for determining whether the access request corresponds with the patient access instructions comprises computer readable code for implementing security features.

21. The computer usable medium of claim 20 wherein the security feature is selected from a group consisting of:

a user password, a public key cryptograph, a digital signature, and an XML based security standard.

22. The computer usable medium of claim 15 further comprising:

computer readable code for verifying a portion of the patient medical information with an outside server.

23. The computer usable medium of claim 22 wherein the computer readable code for verifying the portion of the patient medical information comprises computer readable code for determining a patient'"'"'s eligibility.

24. The computer usable medium of claim 15 further comprising:

computer readable code for updating the patient medical information.

25. The computer usable medium of claim 15 wherein the patient medical information is selected from a group consisting of:

a name, a social security number, a plan number, personal information, medical history information, medical claims information, prescription information, insurance company information, billing information, and health provider information.

26. The computer usable medium of claim 15 wherein the access information comprises level authorization information.

27. A system for controlling access to patient medical information through a networked connection comprising:

means for receiving patient medical information at an aggregate medical server;

means for receiving patient access instructions at the aggregate medical server;

means for receiving a request from a requester at the aggregate medical server;

means for determining whether the access request corresponds with the patient access instructions; and

means for sending a portion of the patient medical information to the requestor based on the access instructions and the access request if the patient access instructions corresponds with the access request.