Method for managing data records with person-related contents by means of a computer system

• US 20030196124A1
• Filed: 01/22/2003
• Published: 10/16/2003
• Est. Priority Date: 01/22/2002
• Status: Active Grant

• Current Assignee: Monument Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Siemens AG
• Inventors: Krickhahn, Frank, Vaupel, Juergen, Birkhoelzer, Thomas
• Granted Patent: US 7,926,088 B2
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records

Abstract

A computer system receives from a user computer, an authorization code and an access instruction for at least one data record with person-related contents. It executes the access instruction only if the authorization code matches a comparison criterion which it determines on the basis of a data record code assigned to the data record. The data record code is specific at least to the person whose personal data the data record contains.

Claims

1. A method for managing data records with person-related contents using a computer system, comprising:

receiving, in the computer system from a user computer, an authorization code and an access instruction for at least one data record;

executing, in the computer system, the access instruction only if the authorization code matches a comparison criterion;

determining the comparison criterion, by the computer system, on the basis of a data record code assigned to the data record, wherein the data record code is specific at least to the person whose personal data the data record contains.

2. The management method as claimed in claim 1, wherein the comparison criterion is exclusively person-specific.

3. The management method as claimed in claim 2, wherein, as a result of the access instruction, the data record is at least one of deleted and transmitted to the user computer, and it is not changed.

4. The management method as claimed in claim 3, wherein only a limited transmission of the data record to the user computer is performed.

5. The management method as claimed in claim 4, wherein the data record contains an image and wherein the image is transmitted to the user computer with only reduced image contents.

6. The management method as claimed in claim 3, wherein the computer system encrypts the data record before transmission to the user computer.

7. The management method as claimed in claim 1, wherein the comparison criterion comprises an exclusively person-specific sub-criterion and a further sub-criterion.

8. The management method as claimed in claim 7, wherein the further sub-criterion is time-specific.

9. The management method as claimed in claim 7, wherein the further sub-criterion is content-specific with respect to the data record.

10. The management method as claimed in claim 7, wherein, as a result of the access instruction, the data record is at least one of deleted, changed and transmitted to the user computer.

11. The management method as claimed in claim 10, wherein the data record contains an image and wherein the image is transmitted to the user computer with complete image contents.

12. The management method as claimed in claim 10, wherein the computer system encrypts the data record before transmission to the user computer.

13. The management method as claimed in claim 1, wherein the computer system decrypts at least the authorization code following reception.

14. The management method as claimed in claim 1, wherein the computer system communicates with the user computer via a point-to-point connection.

15. The management method as claimed in claim 1, wherein the contents of the data record are medical.

16. The management method as claimed in claim 1, wherein an account assigned to the data record is charged with a basic debit amount at periodic intervals.

17. The management method as claimed in claim 16, wherein, as a result of the execution of the access instruction, the account is charged with an access debit amount.

18. The management method as claimed in claim 17, wherein the access debit amount is cost-dependent.

19. A computer program product for carrying out a management method as claimed in claim 1.

20. A computer system programmed with a computer program product as claimed in claim 19.

21. The management method as claimed in claim 4, wherein the computer system encrypts the data record before transmission to the user computer.

22. The management method as claimed in claim 5, wherein the computer system encrypts the data record before transmission to the user computer.

23. The management method as claimed in claim 8, wherein the further sub-criterion is content-specific with respect to the data record.

24. The management method as claimed in claim 8, wherein, as a result of the access instruction, the data record is at least one of deleted, changed and transmitted to the user computer.

25. The management method as claimed in claim 9, wherein, as a result of the access instruction, the data record is at least one of deleted, changed and transmitted to the user computer.

26. The management method as claimed in claim 11, wherein the computer system encrypts the data record before transmission to the user computer.

27. A computer program product for carrying out a management method as claimed in claim 2.

28. A computer program product for carrying out a management method as claimed in claim 3.

29. A computer program product for carrying out a management method as claimed in claim 7.

30. A computer program product for carrying out a management method as claimed in claim 10.

31. A computer program product for carrying out a management method as claimed in claim 17.

32. A computer system programmed with a computer program product as claimed in claim 27.

33. A computer system programmed with a computer program product as claimed in claim 28.

34. A computer system programmed with a computer program product as claimed in claim 29.

35. A computer system programmed with a computer program product as claimed in claim 30.

36. A computer system programmed with a computer program product as claimed in claim 31.