HIPAA COMPLIANT COMMUNICATIONS SYSTEM
First Claim
Patent Images
1. A HIPPA compliant system for transmitting relevant patient information in a secure, encrypted format from a repository of such information to a location where the information is required comprising:
- a first device capable for sending a request for patient information stored in a repository for such information that is HIPPA compliant, the request being made using a public key;
a second device capable of receiving and processing such requests to determine if the request is a valid request from one authorized to access patient information;
each device, once it is determined that the request is a valid request, switching from a public key to a private key, the private key being used for all subsequent transmissions, including the transmission of patient information, between the repository and said location; and
means within each device for encrypting all private key transmissions in a random code that is changed with each transmission for all communications involving patient information to be securely encrypted before transmission whereby no unauthorized individual or entity can access the patient information being transmitted.
0 Assignments
0 Petitions
Accused Products
Abstract
A HIPAA compliant communications systems (10) that enables the transfer of patient information from a repository (20) of such information to a device (30, 30′, 30″) at a location (40) where the information is needed. An initial dialogue between the repository and end user is established using a public key; but after that, each authorized transmission (AT) is accomplished using a private key (PK) which is changed for each communication.
6 Citations
16 Claims
-
1. A HIPPA compliant system for transmitting relevant patient information in a secure, encrypted format from a repository of such information to a location where the information is required comprising:
-
a first device capable for sending a request for patient information stored in a repository for such information that is HIPPA compliant, the request being made using a public key; a second device capable of receiving and processing such requests to determine if the request is a valid request from one authorized to access patient information; each device, once it is determined that the request is a valid request, switching from a public key to a private key, the private key being used for all subsequent transmissions, including the transmission of patient information, between the repository and said location; and means within each device for encrypting all private key transmissions in a random code that is changed with each transmission for all communications involving patient information to be securely encrypted before transmission whereby no unauthorized individual or entity can access the patient information being transmitted. - View Dependent Claims (2, 3, 4, 5, 6, 9, 10)
-
-
7. The HIPPA compliant system of 4 wherein the device includes a personal computer.
-
8. The HIPPA compliant system 1 wherein the devices communicate over the Internet, by radio frequency, or a conventional telephone system.
-
11. A method of transmitting patient information from a repository thereof to a location where the information is required for treatment of the patient, the transmission of patient information being in a HIPPA compliant manner, comprising:
-
transmitting an authorization request from a first HIPPA compliant device at a location where the patient information is needed to a second HIPPA compliant device at the repository of the information, the request being transmitted from the first device to the second device using a public key; accepting the request and authorizing transmission of the patient information; switching the first and second devices from a public key to a private key which is used for all subsequent transmissions between the first and second devices; and
,encrypting all private key transmissions between the first and second devices in a random code that is changed with each transmission between the first and second devices for all communications involving patient information to be securely encrypted before transmission whereby no unauthorized individual or entity can access the patient information being transmitted. - View Dependent Claims (12, 13, 14, 15, 16)
-
Specification