APPARATUS FOR PREVENTING UNAUTHORIZED ACCESS TO COMPUTER FILES AND FOR SECURING MEDICAL RECORDS

• US 20140278529A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Jeffrey A. Matos
• Original Assignee: Jeffrey A. Matos
• Inventors: MATOS, Jeffrey A.
• Granted Patent: US 10,037,408 B2
• Time in Patent Office: Days
• US Class Current: 705/3
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 80/00 ICT specially adapted for facilitating communication between medical practitioners or patients, e.g. for collaborative diagnosis, therapy or health monitoring
• CPC Class Codes: G16Z 99/00 Subject matter not provided for in other main groups of this subclass

Abstract

Apparatus for identifying the writer or receiver of a document, where identifying information for each of a plurality of registered human individuals is stored in a database, calls for capturing local images of an individual producing or receiving information and determining whether this individual is the same as one of the registered individuals whose identifying information is stored in the database. The identifying information stored in the database includes both an alphanumeric identifier and at least one image of a unique, visually observable biologic identifier on a body portion of each registered individual. The accuracy of user identification is enhanced by allowing the sender of information to supply visual content which modulates the appearance of a biologic identifier of the user. A human gatekeeper further hardens the system against inappropriate access. Utilization of the system for the document of critical encounters such as medical events is provided.

Claims

1. A dynamic biologic identifier (“

DBI”

) system for securely inputting and storing encounter information (“

EI”

) documenting at least one encounter between a first person and a second person, said system comprising;

a data memory for storing said EI and biological identification information (“

BII”

) of at least one authorized person;

a processor, coupled to the memory;

at least one biologic identification (“

BioID”

) input device, coupled to the processor, for receiving BII from a putative authorized person; and

an EI input device, coupled to the processor, for receiving said EI;

wherein said processor is operative receive and compare the BII of a putative authorized person with said stored BII of said at least one authorized person, and to enable storage or retrieval of said EI when the BII of said putative authorized person substantially matches said stored BII of a respective one said authorized persons,

wherein said putative authorized person is at least one of;

(a) said first person;

(b) said second person; and

(c) a third person who desires to access the EI.

2. The DBI system defined in claim 1, wherein said EI documenting said encounter is a medical record.

3. The DBI system defined in claim 2, wherein

the first person is a medical professional,

the second person is a medical patient, and

the encounter is an interaction between the medical professional and the medical patient;

whereby said stored EI documenting said encounter constitutes said medical record.

4. The DBI system defined in claim 3, wherein said first person is one of said authorized persons.

5. The DBI system defined in claim 3, wherein the said second person is one of said authorized persons.

6. The DBI system defined in claim 1, wherein one of said at least one BioID input device is selected from the group consisting of (a) a camera, and (b) a microphone.

7. The DBI system defined in claim 1, wherein said EI input device comprises at least one camera, for inputting video information pertinent to said encounter.

8. The DBI system defined in claim 1, wherein said EI input device comprises at least one microphone, for inputting audio information pertinent to said encounter.

9. The DBI system defined in claim 1, wherein said EI input device comprises at least one medical device for obtaining data representing physiologic information of said second person.

10. The DBI system defined in claim 1, wherein said EI input device comprises a keyboard for inputting alphanumeric information pertinent to said encounter.

11. The DBI system defined in claim 1, wherein said EI input device comprises a data port for inputting computer data files pertinent to said encounter.

12. The DBI system defined in claim 1, wherein

the first person and the second person are parties to a contract, and

the encounter is an interaction between the parties concerning an offer and acceptance of the contract;

whereby said stored information documenting said encounter constitutes a record of a formation of the contract.

13. The DBI system defined in claim 1, wherein said first and said second persons are parties to the purchase and sale of a property, and

the encounter is an interaction between the parties concerning an offer and acceptance of the sale of said property;

whereby said stored information documenting said encounter constitutes a record of said sale.

14. The DBI system defined in claim 1, further comprising a BioID output device, coupled to said processor, which incorporates a prompting device, coupled to said processor, for inducing a change in at least one of said BII.

15. The DBI system defined in claim 14, wherein said BII change is involuntary.

16. The DBI system defined in claim 14, wherein said BII change is voluntary.

17. The DBI system defined in claim 1, further comprising a BioID output device, coupled to said processor, which incorporates a code-display device.

18. The DBI system of claim 1, wherein the composition of said BII is selected from the group consisting of:

(a) biologic information only; and

(b) biologic information and respective alphanumeric information;

wherein

(i) said biologic information represents descriptive information concerning at least one distinct biologic feature of a person, and

(ii) said alphanumeric information represents identifying information of said person consisting of alphanumeric data.

19. The DBI system defined in claim 1, further comprising a registration input device, coupled to the processor, for inputting a command from an allowed registration person for registering an additional authorized person;

wherein

(i) BII pertaining to the allowed registration person is stored in said DBI system;

(ii) said processor is operative to allow a putative registration person, who wishes to be recognized by the system as said allowed registration person, to register an additional authorized person when the inputted BII of said putative registration person substantially matches the stored BII of said allowed registration person;

(iii) said processor is further operative to input BII pertaining to said additional authorized person received from said BioID input device;

(iv) said processor is further operative to store BII of said additional authorized person as BII of an allowed additional authorized person upon receipt of a grant access command from said allowed registration person received from said registration input device; and

(v) said processor is further operative to provide said stored EI to a putative additional authorized person, who wishes to access said stored EI, when the inputted BII of said putative additional authorized person substantially matches the stored BII of said allowed additional authorized person;

whereby said additional authorized person is registered to allow access to said stored encounter information; and

whereby the allowed registration person determines who is allowed to become an allowed authorized person.

20. The DBI system defined in claim 1, further comprising a registration input device, coupled to the processor, for inputting a command from an allowed registration person for registering a limited-access authorized person;

wherein

(i) BII pertaining to the allowed registration person is stored in said DBI system;

(ii) said processor is operative to allow a putative registration person, who wishes to be recognized by the system as said allowed registration person, to register a limited-access authorized person when the inputted BII of said putative registration person substantially matches the stored BII of said allowed registration person;

(iii) said processor is further operative to input BII pertaining to said limited-access authorized person received from said BioID input device;

(iv) said processor is further operative to store BII of said limited-access authorized person as BII of an allowed limited-access authorized person upon receipt of a grant limited-access command from said allowed registration person received from said registration input device; and

(v) said processor is further operative to provide a portion of said stored EI to a putative limited-access authorized person, who wishes to access said portion, when the inputted BII of said putative limited-access authorized person substantially matches the stored BII of said allowed limited-access authorized person;

whereby said limited-access authorized person is registered to allow access to said stored encounter information; and

whereby the allowed registration person determines who is allowed to become an allowed authorized person.

21. The DBI system of claim 20, wherein said processor is operative to receive an access-specifying command from said registration input device by said allowed registration person which specifies at least one of:

(a) the EI to which said allowed limited accessing person is allowed access; and

(b) the EI to which said allowed limited accessing person is not allowed access.

22. The DBI system defined in claim 19, wherein

(i) said processor is operative to store a BII of an allowed first supervising person, prior to the storage of a BII of any registration person, and

(ii) said processor is further operative to allow a putative first supervising person to register a registration person when the inputted BII of said putative first supervising person matches the stored BII of said allowed first supervising person;

(iii) said processor is further operative to receive BII of a registration person from said BioID input device, and

(iv) said processor is further operative to store BII of said registration person as BII of an allowed registration person upon receipt of a grant registration access command from said allowed first supervising person received from said registration input device;

whereby said allowed first supervising person is allowed to register a registration person.

23. The DBI system defined in claim 22, wherein said data memory includes a write-once-only memory, wherein said processor is operative to store the BII of the allowed first supervising person in said write-once-only memory.

24. The DBI system defined in claim 22, wherein said registration input device is further operative to enable a command designating at least one allowed additional supervising person;

wherein

(i) said processor is further operative to store BII of at least one allowed additional supervising person;

(ii) said processor allows said allowed first supervising person to designate an allowed additional supervising person by;

(a) entering the BII of said allowed additional supervising person, and (b) entering a designate additional supervisor command;

wherein both said allowed first supervising person and said allowed additional supervising person may enter BII of yet additional supervising persons.

25. The system defined in claim 24, wherein said processor is operative to receive a grant access command from at least one of said allowed first supervising person and said allowed additional supervising person;

and

wherein said processor is further operative to input the BII of another person authorized to access said stored EI by said supervising persons, to be stored as the BII of another authorized person upon receipt of said command.

26. The system defined in claim 1 further comprising an EI output device, coupled to said processor, for outputting said EI.

27. Apparatus for controlling the access of a particular human individual to a computer memory for a given period of time by repeatedly assessing a changeable visible identifying feature (“

VIF”

) of said human individual, and by assessing an identifying feature of a gatekeeping human individual (“

GHI”

), said apparatus comprising, in combination;

(a) a computer memory in which are stored (i) a plurality of images of said VIF and other identification data pertaining to at least one registered accessing human individual (“

RAHI”

) and (ii) biologic identifying information (“

BII”

) and other identification data pertaining to at least one registered gatekeeping human individual (“

RGHI”

);

(b) a first processor coupled to the memory for accessing selected information from the memory and for producing (i) at least one supplementing signal and (ii) at least one assessment signal;

(c) a first camera, coupled to said first processor, which is configured

(1) to view an identifying feature of a putative accessing human individual (“

PAHI”

), and

(2) to repeatedly generate successive test images of said VIF of said PAHI during a first given period of time for transmission to said first processor;

(d) a first supplemental identification device, coupled to said first processor, for supplementing the test image information provided by said first camera in response to said at least one supplementing signal received from said first processor;

(e) at least one biologic identification input device, coupled to said first processor, for inputting BII of a putative gatekeeping human individual (“

PGHI”

) who wishes to perform gatekeeping activity as an RGHI;

(f) an output device, coupled to said first processor, for presenting match information to said RGHI; and

(g) an input device, coupled to said first processor, for inputting an access command from said RGHI pertaining to granting access to said memory;

wherein said first processor is operative to;

(1) generate said at least one supplementing signal for transmission to said first supplemental identification device;

(2) repeatedly compare each of said successive test images of said identifying feature of said PAHI, as received from said first camera, with said stored images of the identifying feature of said at least one RAHI to repeatedly assess the identity of the PAHI during said first given period of time;

(3) generate said at least one assessment signal indicating at least one result of said identity assessment of the PAHI;

(4) assess the inputted BII of said PGHI to determine whether or not the PGHI is an RGHI, in dependence on whether or not the information contained in the inputted BII of the PGHI matches the stored BII of the RGHI;

(5) indicate the result of said repeated assessment to the RGHI; and

(6) allow access by the PGHI to said memory for a first given period of time, following the input of an access command by said RGHI;

thereby to

(1) repeatedly verify that the PAHI is the same individual as one of said at least one RAHIs during said first given period of time, or to determine that the PAHI is not the same individual as any one of said at least one RAHI; and

indicate the result of said repeated assessment to said RGHI; and

(2) allow the PAHI access to said memory only if approved by said registered gatekeeping human individual.

28. The apparatus defined in claim 27, wherein said first processor is operative to allow access to selected files in said memory by said PAHI in response to a first command.

29. The apparatus defined in claim 27, wherein said first processor is operative to allow storage of selected files in said memory by said PAHI in response to a second command.

30. The apparatus defined in claim 27, wherein said first given period of time is selected from the group consisting of:

(a) less than 1 minute;

(b) 1 to 5 minutes;

(c) 5 to 15 minutes; and

(d) more than 15 minutes.

31. The apparatus defined in claim 27, wherein said first processor is operative to prevent PAHI access to said memory upon a non-match between the inputted BII of said PAHI and the stored BII of said RAHI.

32. The apparatus defined in claim 27, wherein said assessment signal indicates a degree of match of the BII of said PAHI with the stored BII of said RAHI.

33. The apparatus defined in claim 27, wherein said biologic identification input device comprises a PGHI camera, oriented to obtain at least one image of said PGHI.

34. The apparatus defined in claim 27, wherein each of said first camera, said first supplemental identification device, said first processor and said computer memory is situated at a common location.

35. The apparatus defined in claim 27, wherein said first camera and said first supplemental identification device are situated at a remote location from said computer memory and said first processor, and wherein said apparatus further comprises:

(a) a first transmitting and receiving (“

T/R”

) device, coupled to said first processor, for transmitting said at least one supplementing signal to said first supplemental identification device and for receiving said successive test images from said at least one first camera;

(b) a second T/R device, for communication with said first T/R device, coupled to each of

(1) said first supplemental identification device for receiving said at least one supplementing signal, and

(2) said first camera, for transmitting said successive test images;

wherein

(a) said first processor is further operative to cause said first T/R device to transmit said at least one supplementing signal, and to process said received test images;

(b) said first processor and said computer memory are situated at a first location; and

(c) said first camera, and said first supplemental identification device are situated at a second location, remote from said first location.

36. The apparatus defined in claim 27, further comprising:

(a) a second processor, coupled to each of said first camera and said first supplemental identification device; and

(b) a communication system, coupled to each of said first processor and said second processor, for exchanging of signals between said first and said second processors;

wherein

(i) said second processor is operative to transmit said successive test images to said first processor via said communication system;

(ii) said first processor is operative to transmit said supplementing signal to said first supplemental identification device via said communication system;

(iii) said first processor and said computer memory are situated at a first location; and

(iv) said second processor, said first camera and said first supplemental identification device are situated at a second location, remote from said first location.

37. The apparatus defined in claim 27, wherein said VIF is at least one pattern of an iris of an eye of the RAHI and of the PAHI.

38. The apparatus defined in claim 27, wherein said VIF is at least one pattern of retinal veins of an eye of the RAHI and PAHI.

39. The apparatus defined in claim 27, wherein said VIF is a face of the RAHI and PAHI.

40. The apparatus defined in claim 27, wherein said VIF is at least one of a fingerprint and a palm print of the RAHI and PAHI.

41. The apparatus defined in claim 27, wherein said VIF is a pattern of veins of a hand of the RAHI and PAHI.

42. The apparatus defined in claim 27, wherein:

(a) said supplementing signal is a first prompt producing signal;

(b) said first supplemental identification device is a first prompt producing device, for producing at least one first prompt in response to said first prompt producing signal; and

(c) said first prompt causes a change in the appearance of said VIF of said PAHI.

43. The apparatus defined in claim 42, wherein:

(i) said VIF is a pattern of an iris of an eye of the RAHI and the PAHI;

(ii) said computer memory stores a plurality of images of an iris of an eye of said RAHI, each image obtained under different lighting conditions for said iris; and

(iii) said prompt producing device is a light source configured to generate light in response to said at least one first prompt signal, which impinges on said PAHI iris thereby to alter an opening size of said PAHI iris;

wherein said first processor is further operative to change said lighting conditions by generating said at least one first prompt signal;

wherein said first processor is operative to compare a plurality of viewed images of said PAHI iris, each under different lighting conditions, with a plurality of stored RAHI iris images;

thereby to verify that said PAHI is or is not the same individual as said RAHI.

44. The apparatus defined in claim 27, wherein said first supplemental identification device comprises a display device located in proximity to said PAHI for displaying a representation of said supplementing signal received from said first processor.

45. The apparatus defined in claim 27, wherein said first supplemental identification device comprises a display device located in proximity to said PAHI, and wherein said apparatus further comprises a communication link between said first processor and said display device, wherein said communication link is selected from the group consisting of (a) a wired link, and (b) a wireless link.

46. The apparatus defined in claim 44, wherein the information represented by said supplementing signal causes said display device to produce an alteration in at least one of:

(a) the quantity of light impinging on an eye of said PAHI;

(b) the focus of an eye of said PAHI;

(c) a direction of gaze of an eye of said PAHI; and

(d) an angle of orientation of a face of said PAHI with respect to said first camera.

47. The apparatus defined in claim 44, wherein

(a) said first processor is further operative to generate a first representation of a first code, and to cause:

(i) said first representation to be stored in said computer memory, and

(ii) said first supplementing signal to specify said first representation;

(b) in response to receipt of said first supplementing signal, said display device is adapted to produce a visual second representation of said first code;

(c) said at least one first camera is arranged to view both

(1) said visible identifying feature of said PAHI, and

(2) said display device displaying said visual second representation of said first code,

for generating a composite image containing both said identifying feature of said PAHI and said visual second representation of said code, for transmission to said first processor;

wherein said first processor is further operative to;

(i) receive said composite image and generate both

(A) a third representation of said first code, and

(B) a representation of said identifying feature of said PAHI, each from the received composite image;

(ii) compare information contained in said stored first representation of said first code with information contained in said received third representation of said code;

(iii) compare information contained in said stored RAHI identifying feature with information contained in said representation of said identifying feature of said PAHI; and

(iv) indicate a verification that said PAHI is the same individual as said RAHI and that said PAHI is located at the location of said display device, if both

(A) said code comparison and

(B) said identifying feature comparison each indicate respective substantially similar information.

48. The apparatus defined in claim 33, wherein said PGHI camera is adapted to input at least one of:

(a) at least one pattern of an iris of an eye of said PGHI;

(b) at least one pattern of retinal veins of said PGHI;

(c) a face of said PGHI;

(d) at least one of a fingerprint and a palm print of said PGHI; and

(e) a pattern of veins of a hand of said PGHI.

49. The apparatus defined in claim 27, wherein said first processor is operative to repeatedly assess said PGHI biologic identification, and to prevent PAHI access to said memory upon a non-match between the inputted BII of said PAHI and the stored BII of said RAHI.

50. The apparatus defined in claim 27, further comprising a second supplemental identification device, for supplementing the BII pertaining to said PGHI, provided by said biologic identification input device, in response to at least one additional supplementing signal received from said first processor;

wherein said first processor is operative to;

(1) generate said at least one additional supplementing signal for controlling said second supplemental identification device;

(2) prevent access to said memory by said RAHI in the event of a non-match of an inputted RGHI image with one of the stored PGHI images.

51. The apparatus defined in claim 50, wherein:

(a) said biologic ID input device comprises a PGHI camera, oriented to obtain at least one image of said PGHI;

(b) said biologic identifying feature is a pattern of an iris of an eye of the PGHI;

(c) said computer memory is operative to store a plurality of images of an iris of an eye of said RGHI, each image obtained under different lighting conditions for said iris; and

(d) said second supplemental identification device is a light source configured to generate light which impinges on said PGHI iris thereby to alter an opening size of said PGHI iris, in response to said additional supplementing signal;

wherein said first processor is further operative to change said lighting conditions by generating said additional supplementing signal;

wherein said first processor is operative to compare a plurality of viewed images of said PGHI iris, each under different lighting conditions, with a plurality of stored RGHI iris images;

thereby to verify that said PGHI is or is not the same individual as said RGHI.

52. The apparatus defined in claim 51, wherein said second supplemental identification device comprises a PGHI display device coupled to said first processor, located in proximity to said PGHI for displaying a representation of said additional supplementing signal received from said first processor.

53. The apparatus defined in claim 52, wherein the information represented by said additional supplementing signal causes said PGHI display device to produce an alteration in at least one of:

(a) the quantity of light impinging on an eye of said PGHI;

(b) the focus of an eye of said PGHI;

(c) a direction of gaze of an eye of said PGHI; and

(d) an angle of orientation of a face of said PGHI with respect to said PGHI camera.

54. The apparatus defined in claim 52, wherein:

(a) said first processor is further operative to generate a first representation of a PGHI code, and to cause;

(i) said first representation to be stored in said computer memory, and

(ii) said additional supplementing signal to specify said first representation;

(b) in response to receipt of said additional supplementing signal, said PGHI display device is adapted to produce a visual second representation of said PGHI code; and

(c) said PGHI camera is arranged to view both

(1) said visible identifying feature of said PGHI, and

(2) said PGHI display device displaying said visual second representation of said PGHI code,

for generating a composite PGHI image containing both said identifying feature of said PGHI and said visual second representation of said PGHI code, for transmission to said first processor;

wherein said first processor is further operative to;

(i) receive said composite PGHI image and generate both

(A) a third representation of said PGHI code, and

(B) a representation of said identifying feature of said PGHI, each from the received composite PGHI image;

(ii) compare information contained in said stored first representation of said PGHI code with information contained in said received third representation of said PGHI code;

(iii) compare information contained in said stored RGHI identifying feature with information contained in said representation of said identifying feature of said PGHI; and

(iv) prevent access of said PGHI to said memory if said first processor does not determine that both

(A) said PGHI code comparison, and

(B) said PGHI identifying feature comparison with said stored RGHI images,

indicate respective substantially similar information matches;

thereby to prevent PAHI access to said memory if said PGHI is not determined to be an RGHI.

55. A dynamic biologic identifier (“

DBI”

) system for securely inputting and storing and providing access to digital information, said system comprising;

(a) data memory for storing

secure information, and

biological identification information (“

BII”

) of at least one authorized person (“

AP”

), authorized to access said secure information; and

(b) a gatekeeper decision input device for inputting a signal representing an authorization decision of a human gatekeeper person (“

HGP”

) authorized to make said decision;

(c) a putative authorized person (“

PAP”

) BII input device for inputting BII of a PAP who wishes to be recognized as said AP;

(d) a processor, coupled to each of said gatekeeper decision input device, said PAP BII input device and said memory;

for

(i) storing and accessing information in said memory,

(ii) analyzing said BII, and

(iii) generating at least one analysis signal indicating the results of said BII analysis; and

(iv) receiving said signal representing said HGP decision;

(e) a biologic ID output device, coupled to said processor, for generating visual content in the vicinity of said PAP, which alters the inputted PAP BII; and

(f) an output device, coupled to said processor, for providing said HGP with the results of said analysis;

wherein;

(1) said processor is operative to generate at least one signal which causes said biologic ID output device to modulate the content of said PAP BII;

(2) said processor compares stored and inputted BII of said PAP, and generates said at least one analysis signal representing a result of the comparison;

(3) said processor is operative to allow said PAP access to said memory if both;

(A) said processor analysis indicates that the inputted BII of said PAP and the stored BII of said AP are substantially similar; and

(B) said HGP inputs an allow access signal, representing a decision of said HGP to allow said PAP access to said memory.

56. The apparatus defined in claim 55, wherein said BII input device is a camera.

57. The apparatus defined in claim 55, wherein said biologic ID output device produces a visual prompt.

58. The apparatus defined in claim 55, wherein said biologic ID output device produces a representation of a code.

59. The apparatus defined in claim 55, further comprising an information output device, coupled to said processor, for outputting said secure information, when both said processor and said gatekeeper permit said output.