Encrypted portable medical history system

• US 20090319789A1
• Filed: 04/14/2009
• Published: 12/24/2009
• Est. Priority Date: 04/14/2008
• Status: Abandoned Application

• Current Assignee: Optical Storage Solutions LLC (Strategic Intellectual Solutions, LLC)
• Original Assignee: Optical Storage Solutions LLC (Strategic Intellectual Solutions, LLC)
• Inventors: Griec, Barbara, Wilson, Larry Wendell, Smith, James Max
• Application Number:
  US12/423,801
• Publication Number:
  US 20090319789A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

The invention consists of a system of integrated components comprised of at least one portable data storage device, a secure server based system to warehouse data within a database and an image of the computer readable media on the portable data storage device, and a user interface to the secure server. It is contemplated that access to the secure server can be accomplished through a browser via the internet, an intranet, or an extranet. It is further contemplated that a secure client/server arrangement could permit direct access to the database. A client/server arrangement could be of a thin-client or fat-client type architecture. Users would require only a minimal amount of interaction with the system for the purpose of editing information and uploading files, while health care providers would require greater access and reporting for the purpose of facilitating the delivery of appropriate care.

Claims

1. (canceled)

2. A data storage device comprising:

a portable data storage device;

an interface through which said device communicates with a computer;

a non-volatile computer accessible memory, a public folder on said portable data storage device;

at least one encrypted partition on said non-volatile memory of said portable data storage device;

a data processor;

a database to warehouse personal and medical data as well as data images of individual said portable data storage devices, said database being installed on at least one secure server accessible over a computer network and capable of being updated by secure remote bi-directionally synchronization with said portable data storage device over said network.

3. The data storage system of claim 2, wherein said medical data is selected from the group consisting of x-ray photographs, imaging scans, blood chemistry, pharmaceutical history, allergy history, current medical conditions, and past medical conditions.

4. The data storage system of claim 3, wherein said personal data is selected from the group consisting of biometric information, wills, social security numbers, powers of attorney, personal directives, insurance information, emergency contacts, financial information, photographs, and videos.

5. The data storage system of claim 4, further including at least one public partition on said non-volatile memory.

6. The data storage system of claim 5, further including a security token on said portable data storage device, said security token enabling secure user authentication.

7. The data storage system of claim 6, wherein the security token is comprised of the group consisting of software and hardware tokens.

8. The data storage system of claim 7, wherein said software security token is comprised of the group consisting of mathematical-algorithm-based one-time passwords and time-synchronized one-time passwords.

9. The data storage device of claim 2, wherein said portable data storage device contains more than one encrypted partition.

10. The data storage device of claim 9, wherein said portable data storage device'"'"'s encrypted partitions utilize different encryptions.

11. The data storage device of claim 10, wherein said portable data storage device contains more than one security token.

12. The data storage device of claim 11, wherein said portable data storage device'"'"'s security tokens secure different partitions.

13. A data storage system comprising:

a. a portable data storage device, wherein said device has a central processing unit, a non-volatile flash memory, and an interface for establishing connections with computers, wherein said memory is capable of storing a personal medical history and is further capable of allowing said personal medical history to be retrieved, is capable of being partitioned into areas of differing levels of encryption and wherein said central processing unit resides between said non-volatile flash memory and said interface;

b. a security token on said portable data storage device, said security token enabling secure user authentication;

c. software modules on said portable data storage device, said software modules enabling said partitions on said portable data storage device to emulate USB interfaced media storage devices;

d. a computer server, said server possessing server side software to authenticate a security token on said portable data storage device, securely database personal medical information, receive and database uploaded medical history updates; and

said computer server being accessible via a computer network; and

e. a host computer, said host computer possessing client side software to facilitate the transfer of data between said computer server and said portable data storage device.