Dual-access security system for medical records

• US 20080071577A1
• Filed: 09/14/2006
• Published: 03/20/2008
• Est. Priority Date: 09/14/2006
• Status: Abandoned Application

• Current Assignee: CHI LIN Technology Company Limited (CHI MEI Optoelectronics Corporation)
• Original Assignee: CHI LIN Technology Company Limited (CHI MEI Optoelectronics Corporation)
• Inventors: Highley, Robert D.
• Application Number:
  US11/522,093
• Publication Number:
  US 20080071577A1
• Time in Patent Office: Days
• US Class Current: 705/3
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD

Abstract

A secure system for accessing records uses a provider media device and a consumer media device to access records associated with the consumer. Both the consumer and provider media devices are normally authenticated before access to the consumer records is granted. Records can be centrally stored in a central location and downloaded, in full or in part, to the consumer media device. Passwords can be used to grant local access to consumer media device, for example, in the absence of network connectivity.

Claims

1. A security system for medical records, comprising:

A security mechanism that is configured to authenticate a consumer computer-readable media device comprising a first authentication mechanism and a memory for storing consumer information that comprises information from a consumer history, and to authenticate a provider computer-readable media device comprising a second authentication mechanism;

a data store for storing the consumer history; and

a server that, in response to successful authentication of the consumer and provider computer-readable media devices, grants to the provider access to the information stored in the consumer computer readable media and/or grant access to the consumer history stored in the data store.

2. The apparatus of claim 1, wherein the first and second authentication mechanism comprise keys issued by the security mechanism.

3. The apparatus of claim 1 wherein server transfers data from the data store to the consumer computer-readable media device.

5. The apparatus of claim 1, wherein the consumer computer readable media device has levels of security for granting different levels of access to the consumer information.

6. The apparatus of claim 1, wherein the consumer computer-readable media stores a locator for accessing the server across a network.

7. The apparatus of claim 1, wherein the provider computer-readable media stores medical licensing information of the provider.

8. The apparatus of claim 1, wherein the consumer computer-readable media comprises a password for allowing direct access to the consumer information.

9. The apparatus of claim 1, wherein the consumer computer-readable media device comprises information for authorizing payment for services provided to the consumer.

10. The apparatus of claim 1, wherein the provider computer-readable media device comprises insurance information for billing third parties for services provided to the consumer by the provider.

11. The apparatus of claim 1, wherein the consumer computer-readable media comprises a biometric identifier for allowing direct access to the consumer information.

4. The apparatus of claim 4, wherein the server stores an episode of medical care in the consumer history when the episode of medical care is provided to the consumer.

12. A method for securely accessing medical records, comprising:

authenticating a provider card and establishing a secure session with a server;

authenticating a first consumer card that stores consumer information that comprises episodes of a consumer history of a consumer;

accessing a data store that stores the consumer history only when the secure session is active; and

providing the accessed information to a terminal that is associated with the authenticated provider card.

13. The method of claim 12, further comprising closing the secure session and flushing caches associated with the consumer history.

14. The method of claim 12, further comprising authenticating a second consumer card when the secure session is still active.

15. The method of claim 12, wherein the data store is accessed using passwords for differing security levels that are associated with the consumer card.

16. The method of claim 15, wherein the data store can be accessed without using one of the passwords when the consumer card and the provider card are associated with the same insurance entity.

17. The method of claim 12, further comprising editing contents of the consumer card in response to the accessed data.

19. The method of claim 20, further comprising means for ending the session upon expiry of a timeout process.

20. The method of claim 12, further comprising authenticating a second consumer card when the secure session is still active.

18. A system for securely accessing medical records, comprising:

means for authenticating a provider card and establishing a secure session with a server;

means for authenticating a first consumer card that stores consumer information that comprises episodes of a consumer history of a consumer;

means for accessing a data store that stores the consumer history only when the secure session is active; and

means for providing the accessed information to a terminal that is associated with the authenticated provider card;