COMPUTERIZED METHOD AND SYSTEM FOR RESTRICTING ACCESS TO PATIENT PROTECTED HEALTH INFORMATION

• US 20100077487A1
• Filed: 11/25/2009
• Published: 03/25/2010
• Est. Priority Date: 06/17/2003
• Status: Active Grant

• Current Assignee: Cerner Innovation, Inc. (Oracle Corporation)
• Original Assignee: Cerner Innovation, Inc. (Oracle Corporation)
• Inventors: VENKAT, CHANDRASEKHAR K., ST. JOHN, STACY C., DAHLHAUSER, SARAH L., STROUD, JAMES L., TRAVIS, JOHN F., CROSS, LORI N.
• Granted Patent: US 8,117,663 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G16H 10/40 for data related to laboratory analysis, e.g. patient specimen analysis
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 20/40 relating to mechanical, radiation or invasive therapies, e.g. surgery, laser therapy, dialysis or acupuncture

Abstract

A computerized system and method for allowing restricted access to patient healthcare information is provided. Upon determining that one or more users are assigned to the location where an order for a patient is to be performed, the method allows one or more users restricted access to the order. The system includes an order entry module, an access evaluation module, a location entry module and a user module. The access evaluation module includes an assignment determination sub-module for determining whether one or more users are assigned to the specified location where an order for a patient is to be performed. The assignment determination module also includes a restricted access sub-module coupled with the assignment determination module and configured to allow restricted access to one or more users assigned to the specified location.

Claims

1. A computer-implemented method, which is carried out using one or more of a processor and computer-storage media, for allowing restricted access to a patient'"'"'s healthcare information in a computing environment of a healthcare organization, the method comprising:

storing in the computer-storage media a list of personnel that are assigned to a healthcare location;

assigning by the processor an order to the healthcare location, wherein the order indicates a procedure related to providing healthcare to a patient;

receiving from a user a request to access records of the patient;

determining by the processor that the user is included on the list of personnel that are assigned to the healthcare location; and

allowing the user to access the order.

2. The method of claim 1, further comprising:

allowing the user assigned to the healthcare location to access other healthcare information of the patient.

3. The method of claim 1, further comprising:

determining that the user has security clearance to enter test results of the order to which the user seeks access.

4. The method of claim 3, wherein the healthcare location at which the order is to be performed is either a physical location or a virtual location.

5. The method of claim 4, wherein the location is a work queue.

6. The method of claim 4, wherein the location is a patient examination room.

7. The method of claim 4, wherein the location is a testing laboratory.

8. The method of claim 4, wherein the location is a surgical suite.

9. The method of claim 3, further comprising:

allowing the user to input test results of the order.

10. A computer system embodied on one or more computer storage media having computer-executable instructions embodied thereon for allowing restricted access to patient healthcare information, the system comprising:

a location-entry module that receives input of a healthcare location to which a user is assigned;

an order-entry module that receives input of an order and that assigns the order to the healthcare location;

an assignment-determination module that determines that the user is assigned to the healthcare location; and

a restricted-access module coupled with the assignment-determination module and configured to allow the user to have restricted access to the order based on the user being assigned to the healthcare location.

11. The system of claim 10,

wherein the location-entry module receives input via a user interface, and

wherein the user interface includes:

a first portion depicting the healthcare location that is usable to perform the healthcare procedure, and

a second portion depicting, in response to selection of the healthcare location, a list of personnel that are authorized to perform the healthcare procedure at the healthcare location.

12. The system of claim 11, wherein the assignment-determination module determines that the user is assigned by referencing the list of personnel.

13. The system of claim 10, wherein the restricted-access module is configured to restrict access of the user to a second order, which is not assigned to the healthcare location.

14. The system of claim 10, wherein the healthcare location includes a patient examination room, a testing laboratory, or a surgical suite.

15. One or more computer-readable media having stored thereon computer-executable instructions that, when executed, cause a computing device to perform a method of controlling access to sensitive information, the method comprising:

storing in the computer-storage media a list of personnel that are assigned to a healthcare location;

assigning by the processor an order to the healthcare location, wherein the order indicates a procedure related to providing healthcare to a patient;

receiving from a user a request to access the order;

determining that the user is not included in the list of personnel that are assigned to the healthcare location; and

denying the user access to the order.

16. The method of claim 15, wherein the healthcare location includes a patient examination room, a testing laboratory, or a surgical suite.

17. The method of claim 15, further comprising:

determining that the user has security clearance to enter test results of the order to which the user seeks access.

18. The method of claim 17, further comprising:

allowing the user to input test results of the order.

19. The method of claim 15, further comprising:

allowing the user assigned to the healthcare location to access other healthcare information of the patient.

20. The method of claim 15, wherein the healthcare location includes a work queue.