Tools for access to databases via internet protocol networks

• US 20070005601A1
• Filed: 06/30/2005
• Published: 01/04/2007
• Est. Priority Date: 06/30/2005
• Status: Active Grant

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Gaucas, Dale
• Granted Patent: US 7,603,701 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

One embodiment is directed to apparatus. In the apparatus, a trusted intermediary computer screen user interface is provided. An identification information input receives, via the computer screen user interface, information identifying an authorized information seeker. The information seeker seeks access to a remote database via an internet protocol connection. An authorization confirmation display displays, via the computer screen user interface, that the authorized information seeker is confirmed as authorized to access the remote database. An access code request input requests, via the computer screen user interface, an access code for use by the authorized information seeker to access the remote database via the internet protocol connection. An access code output outputs the access code for use by the authorized information seeker.

Claims

1. Apparatus comprising:

a trusted intermediary computer screen user interface;

an identification information input to receive, via the computer screen user interface, information identifying an authorized information seeker seeking access to a remote database via an internet protocol connection;

an authorization confirmation display to display, via the computer screen user interface, that the authorized information seeker is confirmed as authorized to access the remote database;

an access code request input to request, via the computer screen user interface, an access code for use by the authorized information seeker to access the remote database via the internet protocol connection; and

an access code output to output the access code for use by the authorized information seeker.

2. The apparatus according to claim 1, wherein the access code includes a PIN.

3. The apparatus according to claim 2, further comprising:

a PIN requester to send a PIN request, via a PIN request internet protocol connection, to a remote PIN issuing database.

4. Apparatus comprising:

a credential issuing system to provide to a trusted intermediary unique third party identifying credentials to issue to an authorized third party;

a third party information system to maintain information on the authorized third parties; and

a verification system to verify the identity of an authorized third party based on the third party identifying credentials.

5. The apparatus of claim 4, further comprising an intermediary verification system to verify the credentials of the trusted intermediaries and to provide the trusted intermediaries with access to the credential issuing system.

6. The apparatus of claim 4, wherein the information is patient medical information.

7. The apparatus of claim 6, wherein the authorized third parties are family members of the patient.

8. The apparatus of claim 5, wherein the credential issuing system, the third party information system, the verification system, and the intermediary verification system comprise databases or portions thereof.

9. The apparatus of claim 8, wherein the databases communicate securely.

10. The apparatus of claim 8, further comprising an information system containing the information, the information system being coupled to the verification system to disclose the information after verification of the third party identifying credentials, the information system having an interface that is securely accessible to the authorized third party using the third party identifying credentials.

11. A apparatus comprising:

means for providing trusted intermediaries with unique identifying credentials to issue to an authorized third party after verification of the identity of the authorized third party, the unique identifying credentials enabling the authorized third party to access protected information;

means for storing and providing information on authorized third parties; and

means for verifying the identifying credentials before providing the protected information.

12. The apparatus of claim 11, further comprising means for managing information on the trusted intermediaries and for providing the trusted intermediaries with access to the means for providing credentials.

13. The apparatus of claim 12, wherein the trusted intermediary is a legal services provider.

14. The apparatus of claim 12, wherein the means for managing information on the trusted intermediaries, the means for providing credentials, the means for storing information on authorized third parties, and the means for verifying the identifying credentials comprise database means.

15. The apparatus of claim 12, wherein the authorized third party obtains identifying credentials by in-person contact with one of the trusted intermediaries.

16. The apparatus of claim 12, wherein the authorized third party obtains identifying credentials by secure electronic communication with one of the trusted intermediaries.

17. The apparatus of claim 14, further comprising:

means for managing the protected information coupled to the means for verifying the identifying credentials and a medical facility, the means for managing the protected information being adapted to contain patient medical data provided by the medical facility; and

means for presenting the protected information coupled to the means for managing protected information.

18. A method comprising:

a trusted intermediary verifying both the identity of a third party information requester and the third party information requester'"'"'s entitlement to the protected information;

the trusted intermediary issuing unique identifying credentials to the third party information requester; and

disclosing patient medical data to the third party information requester after the third party is presented with the unique identifying credentials.

19. The method of claim 18, further comprising, before allowing the trusted intermediary to verify the identity of a third party requester, establishing and verifying the credentials of the trusted intermediary.

20. The method of claim 18, wherein the protected information is patient medical information and the third party information requester is a patient family member.

21. The method of claim 18, wherein there are a plurality of trusted intermediaries.

22. The method of claim 18, wherein the trusted intermediary is a legal practitioner.

23. The method of claim 18, wherein the disclosing comprises in person disclosing, telephone disclosing, or disclosing by third party information requester access to an information system.