Personal control of healthcare information and related systems, methods, and devices

• US 20060229911A1
• Filed: 02/10/2006
• Published: 10/12/2006
• Est. Priority Date: 02/11/2005
• Status: Abandoned Application

• Current Assignee: MedCommons, Inc.
• Original Assignee: MedCommons, Inc.
• Inventors: Donner, William L., Doyle, Sean, Gropper, Adrian, Frankel, Yair
• Application Number:
  US11/352,704
• Publication Number:
  US 20060229911A1
• Time in Patent Office: Days
• US Class Current: 705/2
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 30/20 for handling medical images, e.g. DICOM, HL7 or PACS

Abstract

The invention, in one embodiment, is directed to a healthcare information system including: a client interface unit for creating one or more healthcare information documents, a repository in communication with the client interface unit for storing one or more healthcare information documents received from the client interface unit, a registry in communication with the repository for maintaining an index table of one or more healthcare information documents stored in the repository and for maintaining control information associated with each document for controlling the distribution of each documents from the repository, and a patient interface unit in communication with the registry for enabling a patient to configure at least a portion of the control information within the registry associated with one or more healthcare information documents.

Claims

1. A healthcare information distribution system comprising:

a client interface unit for creating one or more healthcare information documents,

a repository in communication with the client interface unit for storing the one or more healthcare information documents received from the client interface unit,

a registry in communication with the repository for maintaining an index table of the one or more healthcare information documents stored in the repository and for maintaining control information associated with each document for controlling the distribution of each documents from the repository, and

a patient interface unit in communication with the registry for enabling a patient to configure at least a portion of the control information within the registry associated with one or more healthcare information documents.

2. The system of claim 1, wherein the registry initially configures the control information associated with each of the one or more healthcare information documents to enable the client interface unit to control the distribution of each document from the repository.

3. The system of claim 2, wherein the registry enables the patient to subsequently configure at least a portion of the control information associated with one or more healthcare information documents to establish subsequent control of the distribution of one or more healthcare information documents.

4. The system of claim 1, wherein the client interface unit is configured to retrieve one or more healthcare documents from the repository.

5. The system of claim 1, wherein the client interface unit includes a user interface to enable a healthcare professional to view one or more healthcare information documents.

6. The system of claim 1, wherein storing the one or more healthcare information documents includes encrypting the one or more healthcare documents.

7. The system of claim 6, wherein the repository is configured to generate at least one of a unique encryption key and decryption key for a portion of the one or more healthcare documents.

8. The system of claim 7, wherein the repository is configured to decrypt a portion of the one or more healthcare information documents using the unique decryption key.

9. The system of claim 1, wherein creating the one or more healthcare information documents in the client interface unit includes generating a unique identifier for each of the one or more healthcare information documents.

10. The system of claim 9, wherein the unique identifier includes a digest of a particular healthcare information document.

11. The system of claim 10, wherein the digest includes a cryptographic hash of the healthcare information document.

12. The system of claim 6, wherein the encrypting includes generating a digest of the encrypted healthcare information document.

13. The system of claim 12, wherein the digest includes a cryptographic hash of the encrypted healthcare information document.

14. The system of claim 13, wherein the registry includes the digest of the one or more encrypted healthcare information documents in the index table.

15. The system of claim 1, wherein the control information includes at least one of a digest of a healthcare information document, a digest of an encrypted healthcare information document, a client domain token, a patient account identifier, a PIN, a PIN Hash, an encryption key, a decryption key, an ownership indicator, and a tracking number.

16. The system of claim 1, wherein the repository is configured to send a registration message to the registry upon the occurrence of a transaction.

17. The system of claim 16, wherein a transaction includes receiving a healthcare information document from the client interface unit.

18. The system of claim 16, wherein registration message includes control information associated with the healthcare information document.

19. The system of claim 16, wherein the registry is configured to send a tracking number to the repository in response to the registration message.

20. The system of claim 1, wherein the registry is configured to initiate communication with the patient to enable the patient to configure at least a portion of the control information associated with one or more healthcare information documents within the registry.

21. The system of claim 1, wherein the control information includes patient identifier information.

22. The system of claim 21, wherein the patient identifier information includes at least one of an account identifier, name, social security number, credit card number, address, date of birth, photograph, and biometric information.

23. The system of claim 22, wherein the registry is configured to assign a unique account identifier to a patient.

24. The system of claim 23, wherein the assigning of a unique account identifier includes verifying the identity of a patient.

25. The system of claim 24, wherein the verifying includes performing a verification of the credit card number provided by the patient during an account registration process.

26. The system of claim 1, wherein the repository is co-located with the registry.

27. The system of claim 1, wherein the client interface unit includes one or more servers of a client information system.

28. A method for personal control of healthcare information comprising:

creating one or more healthcare information documents,

storing the one or more healthcare information documents in a repository,

maintaining, at a registry, an index table of the one or more healthcare information documents stored in the repository

maintaining, at the registry, control information associated with each document for controlling the distribution of each documents from the repository, and

enabling a patient to configure at least a portion of the control information associated with one or more healthcare information documents.

29. The method of claim 28 comprising initially configuring the control information associated with each of the one or more healthcare information documents to enable a client interface unit to control the distribution of each document from the repository.

30. The method of claim 29 comprising enabling a patient to configure the control information subsequent to initially configuring the control information.

31. The method of claim 28 comprising retrieving one or more healthcare documents from the repository.

32. The method of claim 28 comprising using a user interface to enable a healthcare professional to view one or more healthcare information documents.

33. The method of claim 28, wherein storing the one or more healthcare information documents includes encrypting the one or more healthcare documents.

34. The method of claim 33 comprising generating at least one of a unique encryption key and decryption key for a portion of the one or more healthcare documents.

35. The method of claim 34, comprising decrypting a portion of the one or more healthcare information documents using the unique decryption key.

36. The method of claim 28, wherein creating the one or more healthcare information documents includes generating a unique identifier for each of the one or more healthcare information documents.

37. The method of claim 36, wherein the unique identifier includes a digest of a particular healthcare information document.

38. The method of claim 37, wherein the digest includes a cryptographic hash of the healthcare information document.

39. The method of claim 33, wherein the encrypting includes generating a digest of the encrypted healthcare information document.

40. The method of claim 39, wherein the digest includes a cryptographic hash of the encrypted healthcare information document.

41. The method of claim 40 comprising storing the digest of the one or more encrypted healthcare information documents in the index table.

42. The method of claim 28, wherein the control information includes at least one of a digest of a healthcare information document, a digest of an encrypted healthcare information document, a client domain token, a patient account identifier, a PIN, a PIN Hash, an encryption key, a decryption key, an ownership indicator, and a tracking number.

43. The method of claim 28 comprising sending a registration message to the registry upon the occurrence of a transaction.

44. The method of claim 43, wherein the occurrence of a transaction includes receiving a healthcare information document from the client interface unit.

45. The method of claim 43, wherein registration message includes control information associated with the healthcare information document.

46. The method of claim 43 comprising sending a tracking number to the repository in response to the registration message.

47. The method of claim 28 comprising initiating communication with the patient to enable the patient to configure at least a portion of the control information associated with one or more healthcare information documents within the registry.

48. The method of claim 28 wherein the control information includes patient identifier information.

49. The method of claim 48, wherein the patient identifier information includes at least one of an account identifier, name, social security number, credit card number, address, date of birth, photograph, and biometric information.

50. The method of claim 49 comprising assigning a unique account identifier to a patient.

51. The method of claim 50, wherein the assigning of a unique account identifier includes verifying the identity of a patient.

52. The method of claim 51, wherein the verifying includes performing a verification of the credit card number provided by the patient during an account registration process.

53. The method of claim 28 comprising co-locating the repository with the registry.

54. The method of claim 28, wherein the storing includes receiving a healthcare information document from one or more servers of a client information system.

55. A registry for a healthcare information system, the healthcare information system including a plurality of client interface units, at least one repository, and at least one patient interface unit, the registry comprising:

a transceiver, and

a processor in communication with the transceiver, the processor configured for;

receiving control information associated with one or more healthcare information documents from the at least one repository,

maintaining an index table of the one or more healthcare information documents stored in the repository,

maintaining the control information associated with each document for controlling the distribution of each documents from the repository, and

enabling a patient to configure at least a portion of the control information within the registry associated with one or more healthcare information documents.

56. A registry for a healthcare information system comprising:

a table for storing control information associated with at least one healthcare information document, the control information including at least one healthcare information document identifier associated with the at least one healthcare information document, the control information including at least one authenticator associated with the at least one healthcare information document,

an interface for i) receiving the at least one healthcare information document identifier from a repository and ii) for receiving a request from a user to access the at least one healthcare information document, the request including at least one healthcare information document identifier and at least one authenticator, and

a processor for authorizing user access to the at least one healthcare information document by comparing the associated at least one authenticator stored within the table with the at least one authenticator received from the user.

57. The registry of claim 56, wherein the healthcare information document identifier is derived from a digest of the associated at least one healthcare information document.

58. The registry of claim 56, wherein the healthcare information document identifier includes a tracking number associated with the at least one healthcare information document.

59. The registry of claim 56, wherein the authenticator includes a PIN associated with the at least one healthcare information document.

60. The registry of claim 56, wherein the authenticator is derived, at least in part, from a PIN and the at least one healthcare information document identifier associated with the at least one healthcare information document.

61. The registry of claim 56, wherein the healthcare information document includes a medical image.

62. The registry of claim 61, wherein the medical image includes a DICOM-based medical image.

63. The registry of claim 56, wherein access to the healthcare information document is regulated, at least in part, by a government-based privacy law.

64. The registry of claim 63, wherein the government-based privacy law includes HIPAA.