Method of and System for Security and Privacy Protection in Medical Forms

• US 20080154622A1
• Filed: 09/11/2007
• Published: 06/26/2008
• Est. Priority Date: 09/12/2006
• Status: Abandoned Application

• Current Assignee: Clinsys Clinical Research, Inc.
• Original Assignee: Clinsys Clinical Research, Inc.
• Inventors: Tsarouchas, Akaterina, El Kadri, Nour A., Hein, Richard Anthony, Neri, Emilio Giuseppe, El Emam, Khaled M., Alkarkhi, Mazin
• Application Number:
  US11/853,384
• Publication Number:
  US 20080154622A1
• Time in Patent Office: Days
• US Class Current: 705/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/201 Price look-up processing, e.g. updating
• CPC Class Codes: G16H 10/20 for electronic clinical trials or questionnaires
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

The present invention relates to electronic medical forms and, in particular, to a method of and system for security and privacy protection in medical forms. The invention provides a medical form system and method that allows clients dealing with highly sensitive data to ensure that particular data entered is never accessible to certain other parties (or all other parties). In the preferred embodiment, this is done by encrypting and decrypting certain data only on the client and preventing decryption of the data on the server-side. Other systems do provide security in the form of SSL connections from the client to the server and enforce good security practices, but they do not provide client-side encryption.

Claims

1. A method of medical trial form management comprising the steps of:

generating an electronic medical trial form including fields which may be electronically populated by a user;

populating said fields with data values; and

encrypting data values in predetermined ones of said fields.

2. The method of claim 1 wherein said step of populating is performed by a user, via a graphic user interface.

3. The method of claim 1 wherein said predetermined ones of said fields are fields which comprise personal information, whereby all parties will be able to access unprotected data value, but only authorized individuals will be able to access said encrypted data value.

4. A system comprising:

a user computer;

a remote server;

a remote database; and

a communication network for transferring data between said user computer and said remote server, and between said remote server and said remote database;

said user computer being operable to;

generate an electronic medical trial form including fields which may be electronically populated by a user;

populate said fields with data values; and

encrypt data values in predetermined ones of said fields.