Digital data security in healthcare enterprise

• US 20080097786A1
• Filed: 10/18/2006
• Published: 04/24/2008
• Est. Priority Date: 10/18/2006
• Status: Abandoned Application

• Current Assignee: Rohit C.L. Sachdeva
• Original Assignee: Rohit C.L. Sachdeva
• Inventors: Sachdeva, Rohit
• Application Number:
  US11/582,764
• Publication Number:
  US 20080097786A1
• Time in Patent Office: Days
• US Class Current: 705/2
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Method and system for providing services in healthcare enterprises for authentication and forensic analysis of medical and dental records of patients comprising text, image, video and speech stored and communicated in digital form are disclosed. The digital images may be two-dimensional or three-dimensional comprising, for example, photographs, x-rays, CT-scans, other types of scanned images, video, etc. The patient records include living wills. Patient'"'"'s original record, record ID, activity log and signature are stored in digital storage along with the original patient record attributes. Access of the records is provided to the users. New versions of record are saved along with the activity log and signature; and attributes of new versions of the record are computes and compared with the original version. If new attributes are not the same as the original attributes, then further analyses is conducted to identify the extent and the nature of record modifications and the source of modifications. The modifications are evaluated to determine if tempering has occurred. This and many other aspects of the invention are disclosed.

Claims

1. A method for providing service by a data security provider for authentication of digital records in healthcare enterprise, comprising the following steps:

a) preparing a patient'"'"'s original record, record ID, activity log and signature at the health care provider facility;

b) transmitting the patient'"'"'s original record, record ID, activity log and signature to the data security provider;

c) computing original patient record attributes;

d) storing the patient'"'"'s original record, record ID, activity log, signature and attributes in a digital storage at the data security provider facility;

e) providing the patient'"'"'s record access to a user;

f) saving new version of the patient'"'"'s record, activity log and signature;

g) computing and saving the attributes of the new version of the patient'"'"'s record;

h) comparing the attributes of the new version of the patient'"'"'s record with the attributes of the original version of the record; and

i) if new attributes are not the same as the original attributes, then performing further analysis of the new version of the record, and reporting the findings to the healthcare provider.

2. The method of claim 1, wherein the digital records are in the form of text.

3. The method of claim 1, wherein the digital records are in the form of an image.

4. The method of claim 1, wherein the digital records are in the form of video.

5. The method of claim 1, wherein the digital records are in the form of speech.

6. The method of claim 1, wherein the digital records include the patient'"'"'s living will.

7. The method of claim 6, wherein the patient'"'"'s living will is made accessible to one or more practitioners treating the patient;

and to one or more relatives of the patient.

8. A method for providing service by a data security provider for authentication of digital records in healthcare enterprise, comprising the following steps:

a) preparing and storing a patient'"'"'s original record, record ID, activity log and signature; and

computing and storing attributes of the patient'"'"'s original record at the health care provider facility;

b) transmitting the patient'"'"'s original record ID, activity log, signature and the attributes of the patient'"'"'s original record to the data security provider;

c) storing the patient'"'"'s original record ID, activity log, signature and the attributes of the patient'"'"'s original record in a digital storage at the data security provider facility;

e) providing the patient'"'"'s record access to a user;

f) saving new version of the patient'"'"'s record, activity log and signature at the healthcare provider facility;

g) computing and saving the attributes of the new version of the patient'"'"'s record at the healthcare provider facility;

h) transmitting the patient'"'"'s record ID, activity log, signature and the attributes of new version of the patient'"'"'s record to the data security provider;

h) comparing the attributes of the new version of the patient'"'"'s record with the attributes of the original version of the record; and

i) if new attributes are not the same as the original attributes, then performing further analysis of the new version of the record, and reporting the findings to the healthcare provider.

9. The method of claim 8, wherein the digital records are in the form of text.

10. The method of claim 8, wherein the digital records are in the form of an image.

11. The method of claim 8, wherein the digital records are in the form of video.

12. The method of claim 8, wherein the digital records are in the form of speech.

13. The method of claim 8, wherein the digital records include the patient'"'"'s living will.

14. The method of claim 13, wherein the patient'"'"'s living will is made accessible to one or more practitioners treating the patient;

and to one or more relatives of the patient.

15. A system for authentication of digital records, comprising:

one or more workstations, each having a processor operably coupled to one or more storage devices;

wherein the storage devices store patient records in a digital form in the healthcare enterprise; and

wherein the one or more storage devices provides computer instructions enabling an user to;

a) prepare or receive patient'"'"'s original record, record ID, activity log and signature;

b) transmit the patient'"'"'s original record, record ID, activity log and signature to a data security provider;

c) compute attributes of the original patient record;

d) store patient record, record ID, activity log, signature and attributes in digital storage;

e) provide the patient'"'"'s record access to a user;

f) save new version of record, activity log and signature;

g) compute and save the attributes of new version of record;

h) compare the attributes of new version of record with the attributes of original version of the record; and

i) if the new attributes are not the same as the original attributes, then perform further analysis of the new version of the record; and

report the findings to the healthcare provider.

16. The system of claim 15, wherein the digital records are in the form of text.

17. The system of claim 15, wherein the digital records are in the form of an image.

18. The system of claim 15, wherein the digital records are in the form of video.

19. The system of claim 15, wherein the digital records are in the form of speech.

20. The system of claim 15, wherein the digital records include the patient'"'"'s living will.