METHOD AND APPARATUS FOR MEDICAL INFORMATION ENCRYPTION

• US 20120185951A1
• Filed: 03/11/2010
• Published: 07/19/2012
• Est. Priority Date: 03/11/2009
• Status: Abandoned Application

• Current Assignee: Codonics Incorporated
• Original Assignee: Codonics Incorporated
• Inventors: Bauman, Aaron A., Gilbert, Alan J., Harley, Christopher M., Siekmann, Rem O., Burke, Glenn T.
• Application Number:
  US13/256,082
• Publication Number:
  US 20120185951A1
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD

Abstract

Provided is an apparatus, system and method for protecting medical output to be stored on a portable computer-readable medium. Access to the medical output is restricted and a key is established to grant access to the medical output stored on the portable computer-readable medium. An identifier is assigned to the portable computer-readable medium and stored on both the portable computer-readable medium and a computer memory. The medical output is stored on the portable computer-readable memory, and access to the medical output on the portable computer-readable medium is restricted, requiring the key for accessing and viewing the medical output. The key is also stored in the computer memory and a relationship associating the identifier with the key is established to enable identification of the key with knowledge of the identifier. A security utility and a medical presentation utility can also be stored on the portable computer-readable medium. The security utility and medical presentation utility can be executable by the user computer to grant access to, and present the medical output on the portable computer-readable medium to the intended recipient in response to entry of the key.

Claims

1. A method of protecting medical output to be stored on a portable computer-readable medium, the method comprising:

using a computer operatively connected to a communication network, receiving the medical output to be stored on the portable computer-readable medium over the communication network;

restricting access to the medical output and establishing a key that is to be entered by an intended recipient of the portable computer-readable medium into a user computer to gain access to the medical output stored on the portable computer-readable medium;

assigning an identifier to the portable computer-readable medium and storing the identifier on both the portable computer-readable medium and a computer memory operatively connected to the computer;

storing the medical output on the portable computer-readable memory, wherein access to the medical output on the portable computer-readable medium is restricted, requiring the key to access and view the medical output;

storing the key in the computer memory and establishing a relationship associating the identifier with the key to enable identification of the key with knowledge of the identifier; and

storing a security utility and a medical presentation utility that is compatible with the medical output on the portable computer-readable medium, wherein the security utility is executable by the user computer to grant access to the medical output on the portable computer-readable medium in response to entry of the key and the medical presentation utility is executable by the user computer to present the medical output to the intended recipient of the portable computer-readable medium subsequent to entry of the key into the security utility.

2. The method according to claim 1 further comprising

using the computer, storing the medical output on the portable computer-readable medium in an encrypted format, wherein the security utility is a decryption utility that is executable by the user computer to decrypt the medical output in response to entry of the key.

3. The method according to claim 1, wherein the key comprises a password that is randomly generated by the computer and automatically stored in the computer memory in association with the identifier.

4. The method according to claim 1, wherein the medical presentation utility comprises:

a preview component that is executable by the user computer to retrieve a portion of the medical output from the portable computer-readable medium and present the portion retrieved to the user and temporarily store the portion of the medical output presented on a default memory location of a computer-accessible memory of the user computer, and

an extraction component that is executable by the user computer to save at least a portion of the medical output at a user-selectable memory location of the computer-accessible memory of the user computer from where it can be subsequently accessed and presented to the user in a human-readable format without the portable computer-readable medium.

5. The method according to claim 1, wherein the medical output is to be stored on a plurality of portable computer-readable media and storing the medical presentation utility comprises independently storing the medical presentation utility on each of the plurality of portable computer-readable media for presenting at least a portion of the medical output on each of the plurality of portable computer-readable media to the intended recipient independently of medical output stored on another of the plurality of portable computer-readable medium.

6. The method according to claim 1, wherein the key comprises a password formed from a plurality of characters included on a label provided to the portable computer-readable medium, wherein the plurality of characters forming the password are included in label content provided to the label to convey information other than the password and are not identified as the password on the label.

7. The method according to claim 4 further comprising automatically deleting the at least a portion of the medical output temporarily stored at the default memory location on the computer-accessible memory of the user computer in response to at least one of:

removal of the portable computer-readable medium from the user computer, and

closing of the viewer operating on the user computer to present the portion of the medical output to the intended recipient.

8. The method according to claim 1 further comprising storing a human-readable file on the portable computer-readable medium, wherein the human-readable file is accessible via the user computer without entry of the key and comprises the identifier and contact information for a party with access to the key stored in the computer memory that the intended recipient can contact and present with the identifier to determine the identifier in response.

11. The method according to claim 1, wherein establishing the key comprises selecting a plurality of characters to be included in fixed label content of a label for the portable computer-readable medium to be assembled into a password.

12. The method according to claim 1, wherein a label for the portable computer-readable medium comprises a visual indicator indicating a type of encryption employed to restrict access to the medical output stored on the portable computer-readable medium.

13. The method according to claim 1, wherein the identifier comprises a unique ID number assigned to the portable computer-readable medium.

14. The method according to claim 1, wherein the portable computer-readable medium comprises at least one of an optical medium and a flash memory medium.

15. The method according to claim 1 further comprising automatically generating a physical communication comprising the key, the physical communication to be delivered by courier to a mailing address of the intended recipient separately from the portable computer-readable medium.

9. The method according to claim I further comprising automatically generating an electronic communication comprising the key and transmitting the electronic communication to the intended recipient to deliver the key separately from the portable computer-readable medium.

10. The method according to claim 9, wherein the key is not delivered in a fixed medium of expression with the portable computer-readable medium when the portable computer-readable medium is delivered to the intended recipient.

16. A publisher for publishing a portable computer-readable medium storing encrypted medical output, the publisher comprising:

a network interface for receiving the medical output over a communication network;

a computer-accessible memory for at least temporarily storing the medical output received over the communication network;

a recording bay for receiving the portable computer-readable medium and writing the medical output to the portable computer-readable medium;

a labeler for creating label content to be associated with the portable computer-readable medium; and

a processing component for executing computer-executable instructions stored in the computer-executable memory for performing a method comprising;

restricting access to the medical output and establishing a key that is to be entered by an intended recipient of the portable computer-readable medium into a user computer to gain access to the medical output stored on the portable computer-readable medium

assigning an identifier to the portable computer-readable medium and storing the identifier on both the portable computer-readable medium and a computer memory operatively connected to the publisher;

storing the medical output on the portable computer-readable memory via the recording bay, wherein access to the medical output on the portable computer-readable medium is restricted, requiring the key to access and view the medical output;

storing the key in the computer memory and establishing a relationship associating the identifier with the key to enable identification of the key with knowledge of the identifier; and

storing a security utility and a medical presentation utility that is compatible with the medical output on the portable computer-readable medium, wherein the security utility is executable by the user computer to grant access to the medical output on the portable computer-readable medium in response to entry of the key and the medical presentation utility is executable by the user computer to present the medical output to the intended recipient of the portable computer-readable medium subsequent to entry of the key into the security utility.

17. The publisher according to claim 16 further comprising an email component that is operable to automatically generate an electronic communication comprising the key and transmit the electronic communication to the intended recipient to deliver the key separately from the portable computer-readable medium.

18. The publisher according to claim 16 further comprising a mailing component that is operable to automatically generate a physical communication comprising the key to be delivered by courier to a mailing address of the intended recipient separately from the portable computer-readable medium.

19. The publisher according to claim 16, wherein the processing component comprises a random password generator for randomly generating a password as the key to be saved in association with the identifier.

20. The publisher according to claim 17, wherein the email component is operable to include an identification of the identifier in the electronic communication comprising the key that is transmitted to the intended recipient.