Policy driven access to electronic healthcare records
First Claim
Patent Images
1. A computer implemented method for processing requests for electronic records pertaining to individuals, comprising:
- receiving a request, wherein the request identifies at least an individual that is the subject of the request and a requesting party;
determining a set of electronic records responsive to the request, wherein each electronic record is related to an encounter between a healthcare provider and the individual;
from the set of electronic records responsive to the request;
(i) identifying an electronic record indicative of a particular health-related condition; and
(ii) determining each record in the set of electronic records associated with the particular health-related condition;
accessing an access policy associated with the individual to determine whether the access policy specifies that electronic records associated with the particular health-related condition may be disclosed to the requesting party; and
returning the electronic records associated with the particular health-related condition only if the access policy specifies that records associated with the particular health-related condition may be disclosed.
1 Assignment
0 Petitions
Accused Products
Abstract
A method and article of manufacture for managing access to electronic healthcare records is disclosed. Embodiments of the invention generally allow individuals to define an access policy regarding electronic healthcare records and health care providers who may have shared access to a data repository storing the records. Typically, the access policy specifies whether access to groups of records that are related to the diagnosis of a particular condition or that are related to a particular episode of care may be shared among multiple providers, including providers not responsible for creating a particular record.
64 Citations
24 Claims
-
1. A computer implemented method for processing requests for electronic records pertaining to individuals, comprising:
-
receiving a request, wherein the request identifies at least an individual that is the subject of the request and a requesting party;
determining a set of electronic records responsive to the request, wherein each electronic record is related to an encounter between a healthcare provider and the individual;
from the set of electronic records responsive to the request;
(i) identifying an electronic record indicative of a particular health-related condition; and
(ii) determining each record in the set of electronic records associated with the particular health-related condition;
accessing an access policy associated with the individual to determine whether the access policy specifies that electronic records associated with the particular health-related condition may be disclosed to the requesting party; and
returning the electronic records associated with the particular health-related condition only if the access policy specifies that records associated with the particular health-related condition may be disclosed. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A computer-readable medium containing a program, which when executed on a processor, performs operations processing a request for electronic records regarding an individual, comprising:
-
receiving a request, wherein the request identifies at least an individual that is the subject of the request and a requesting party;
determining a set of electronic records responsive to the request, wherein each electronic record is related to an encounter between a healthcare provider and the individual;
from the set of electronic records responsive to the request;
(i) identifying an electronic record indicative of a particular health-related condition; and
(ii) determining each record in the set of electronic records associated with the particular health-related condition;
accessing an access policy associated with the individual to determine whether the access policy specifies that electronic records associated with the particular health-related condition may be disclosed to the requesting party; and
returning the electronic records associated with the particular health-related condition only if the access policy specifies that records associated with the particular health-related condition may be disclosed. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18, 20, 21, 22, 23, 24)
-
-
19. A computer-implemented method for managing access to electronic records stored in a shared access data repository:
-
identifying a set of electronic records related to an individual, wherein the records in the shared access data repository are accessible by a plurality of health care providers;
identifying at least one of the electronic records indicative of a health-related condition of the individual;
determining each record, from the set of records, that is associated with the health-related condition;
selecting an access policy for the set of records associated with the identified health-related condition.
-
Specification