Secure Personal Medical Process

• US 20070180259A1
• Filed: 01/19/2007
• Published: 08/02/2007
• Est. Priority Date: 01/20/2006
• Status: Abandoned Application

• Current Assignee: Earl Bulot, Edward Scheidt
• Original Assignee: Earl Bulot, Edward Scheidt
• Inventors: Scheidt, Edward, Bulot, Earl
• Application Number:
  US11/625,025
• Publication Number:
  US 20070180259A1
• Time in Patent Office: Days
• US Class Current: 713/183
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A process of accessing and controlling medical information data enforced by an encryption process utilizes a split key design. The split key design includes a cryptographic key that is formed from one or more permissions as key splits.

Claims

1. A process of accessing and controlling medical information data enforced by an encryption process utilizing a split key design, wherein the split key design includes a cryptographic key that is formed from one or more permissions as key splits.

2. The process of claim 1, further comprising storing at least a first portion of keying material used in the split key design on a portable memory device and storing at least a second portion of keying material used in the split key design on a viewing device.

3. The process of claim 2, wherein the split key design is compliant with HIPAA regulations.

4. The process of claim 1, wherein the encryption process is performed on a server connected to at least one node.

5. The process of claim 1, wherein the encryption process includes

assigning a first permission to a patient, wherein the first permission cannot by itself be used to decrypt any data, and

assigning a second permission to a data viewing device, wherein a combination of the first and second permissions provides access on the data viewing device to data associated with the patient.

6. The process of claim 5, wherein the first permission is stored on a token.

7. The process of claim 5, wherein the second permission is stored on the data viewing device.

8. The process of claim 5, wherein the encryption process further includes assigning a third permission to a doctor'"'"'s office.

9. The process of claim 8, wherein a combination of the first and third permissions provides access to a doctor at the doctor'"'"'s office to data associated with the patient.

10. The process of claim 8, wherein the encryption process further includes assigning a fourth permission to a medical lab.

11. The process of claim 8, wherein the encryption process further includes assigning a fourth permission to a pharmacy.

12. The process of claim 1, wherein the split key design includes use of a random number in forming the cryptographic key.