METHOD AND SYSTEM FOR ACCESSING CENTRALISED PATIENT DATA

• US 20150302223A1
• Filed: 11/26/2013
• Published: 10/22/2015
• Est. Priority Date: 11/26/2012
• Status: Active Grant

• Current Assignee: Fisher & Paykel Healthcare Limited
• Original Assignee: Fisher & Paykel Healthcare Limited
• Inventors: Casse, Benjamin Wilson
• Granted Patent: US 10,255,455 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records

Abstract

A system and method is provided to allow access to centralised patient data captured from a medical device across an open network to a third party. The system and method receives the request based upon patient-specific information, checks the request and allows access if the request matches stored information.

Claims

1. A method for allowing access to centralised patient data captured from a medical device across an open network to a third party comprising:

receiving a request from an interested party to access centralised patient data for a patient, the request comprising request access information based on identification information associated with a patient, wherein the third party is privy to the identification information,

checking that the request access information corresponds to stored access information associated with the patient,

allowing the third party access to the centralised patient data for the patient if the request access information corresponds to the stored access information.

2. A method according to claim 1 wherein the stored access information associated with the patient is based on identification information associated with the patient.

3. A method according to claim 1 wherein the identification information associated with the patient comprises one or more of the following identification items:

date of birth;

name;

medical apparatus ID;

address or other contact details;

social security number;

or

similar.

4. A method according to claim 1 wherein the request access information is created from a hash of the identification information associated with the patient.

5. A method according to claim 1 wherein the stored access information is created from a hash of the identification information associated with the patient.

6. A method according to claim 1 wherein there are different levels of access to the centralised data, each level corresponding to a different set (being all or a subset) of the centralised patient data, and wherein allowing the third party access to the centralised patient data comprises allowing access to the set of the centralised data corresponding to an access level associated with the request access information.

7. A method according to claim 6 wherein the access level associated with the request access information is based on the identification items that comprise identification information.

8. A method according to claim 1 wherein the third party has a security level, and for one or more security levels allowing the third party access to the centralised patient data for the patient further requires receiving data from a physical key that is provided by the third party.

9. A system for allowing access to centralised patient data captured from a medical device across an open network to a third party, the patient data being stored on a database, comprising:

a computer system for;

receiving a request from a third party to access centralised patient data for a patient, the request comprising request access information based on identification information associated with a patient, wherein the third party is privy to the identification information,

checking that the request access information corresponds to stored access information associated with the patient,

providing the third party with access to the centralised patient data in the database for the patient if the request access information corresponds to the stored access information.

10. A system according to claim 9 wherein the stored access information associated with the patient is based on identification information associated with the patient.

11. A system according to claim 9 wherein the identification information associated with the patient comprises one or more of the following identification items:

date of birth;

name;

medical apparatus ID;

address or other contact details;

social security number;

or

similar.

12. A system according to claim 9 wherein the request access information is created from a hash of the identification information associated with the patient.

13. A system according to claim 9 wherein the stored access information is created from a hash of the identification information associated with the patient.

14. A system according to claim 9 wherein there are different levels of access to the centralised data, each level corresponding to a different set (being all or a subset) of the centralised patient data, and wherein allowing the third party access to the centralised patient data comprises allowing access to the set of the centralised data corresponding to an access level associated with the request access information.

15. A system according to claim 14 wherein the access level associated with the request access information is based on the identification items that comprise identification information.

16. A system according to claim 9 wherein the third party has a security level, and for one or more security levels allowing the third party access to the centralised patient data for the patient further requires receiving data from a physical key that is provided by the third party.

17. A system configured to provide access to centralised patient data captured from a medical device across an open network to a third party, comprising:

at least one database with centralised patient data and stored access information associated with the patient,

a computer system in communication with the database and the third party, the computer system configured to;

receive a request from the third party to access the centralised patient data for a patient, the request comprising request access information based on identification information associated with a patient, wherein the third party is privy to the identification information;

check that the request access information corresponds to stored access information associated with the patient; and

facilitate the third party to gain access to the centralised patient data in the database for the patient if the request access information corresponds to the stored access information.