Trusted records using secure exchange

• US 20090055924A1
• Filed: 07/18/2007
• Published: 02/26/2009
• Est. Priority Date: 07/19/2006
• Status: Active Grant

• Current Assignee: Secure Exchange Solutions LLC
• Original Assignee: Secure Exchange Solutions LLC
• Inventors: Trotter, Douglas H.
• Granted Patent: US 8,381,287 B2
• Time in Patent Office: Days
• US Class Current: 726/20
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A secure method and apparatus for data exchange that allows a client'"'"'s or patient'"'"'s financial data, medical records, and other information to be stored on a card-shaped compact disk, with multiple levels of encryption to preserve privacy. The trusted record disc can be read on any computer with a network or internet connection, but access to the information on the disc is restricted according to a password protected hierarchical encryption policy. In order to obtain access to the restricted information, an individual user needs to enter a unique password that is sent to a central server. The server confirms the password and returns an electronic key to the user'"'"'s computer. The electronic key unlocks the encryption and allow the user to view only the information that is permitted (under federal patient, financial privacy or other laws). Thus, in the medical setting, physicians can review the patient'"'"'s entire medical record and make changes to it. Nurses, pharmacists, and billing clerks have differing predetermined levels of access.

Claims

1. An information system for secure permission-based access to records, comprising:

a readable/writable optical data card having dimensions conforming to conventional business cards, said data card including record data stored in optical format, and a magnetic stripe storing personal authentication information; and

a client/server network of computers, said client/server network comprising at least one optical reader/writer and at least one magnetic stripe reader, and running software including,

an application process associated with an application,

a user-authentication agent for identifying and authenticating each user attempting access to said record data;

a security policy broker including a security policy look-up table comprising a

predetermined hierarchy of rights assigned to a plurality of predetermined users for accessing and manipulating said record data;

an enforcement agent associated with said application process and interacting

with said application and with the security policy broker, said enforcement agent enforcing said security policy look-up table in accordance with the identity of a user attempting access to said record data, whereby said enforcement agent runs independent of and does not modify said application.

2. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent comprises an authentication service-type device capable of a challenge-response authentication protocol.

3. An information system for secure permission-based access to records according to claim 2, wherein said user-authentication agent comprises a biometric authentication device.

4. An information system for secure permission-based access to records according to claim 1, wherein said software further comprises a usage tracking agent for tracking, auditing, and determining usage levels of secure and unsecured transactions.

5. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent comprises an authentication service-type device for controlling access to data at predetermined class or policy levels

6. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent comprises an authentication service-type device for remote authorization of data contained on the optical media.

7. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent comprises an authentication service-type device for the identification of a user of optical media through biometric methods.

8. An information system for secure permission-based access to records according to claim 1, wherein said client/server network of computers includes a communication network for remote electronic identification over one or more of a telephone, internet, and cable.

9. An information system for secure permission-based access to records according to claim 1 for secure distribution of electronic information and products including software, publications, reports, and intellectual property.

10. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent comprises an authentication service-type device for determining usage levels, including usage length of time of optical media.

11. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent comprises an authentication service-type device for allowing multiple enterprises to control the same optical media.

12. An information system for secure permission-based access to records according to claim 11, wherein said user-authentication agent allows enterprise as well as local control on optical media

13. An information system for secure permission-based access to records according to claim 12, wherein said user-authentication agent comprises a hierarchically based access to optical and magnetic media

14. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent provides event reporting and alarms associated with use of optical media.

15. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent provides persistent protection for information extracted form optical media.

16. An information system for secure permission-based access to records according to claim 1, including any one from among a group including secure medical cards, secure prescription cards, secure internet transaction card, secure driver licenses with associated medical data, control information optical media.

17. An information system for secure permission-based access to records according to claim 1, wherein said user-authentication agent provides a ability to conduct secure, electronic gaming over a the internet.