System and method for remotely accessing user data records

• US 5,995,965 A
• Filed: 11/18/1996
• Issued: 11/30/1999
• Est. Priority Date: 11/18/1996
• Status: Expired due to Term

• Current Assignee: Humetrix.com, Inc.
• Original Assignee: Humetrix Inc.
• Inventors: Experton, Bettina
• Primary Examiner(s): Choules, Jack M.
• Application Number:
  US08/751,339
• Time in Patent Office: 1,107 Days
• Field of Search: 707/1, 707/2, 707/9, 707/104, 707/10, 395/200.57, 709/227
• US Class Current: 709/217
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/959 Network

Abstract

User data records, such as health or financial data, are stored in a data base at one or more remote facilities, for example, at one or more hospitals or one or more central processing facilities. For each of a card-holding group of users a card is provided. The card is preferably a "smart card," which has a memory and, preferably, an onboard processor. The card is encoded with the respective user'"'"'s identifying information, as well as with information that identifies at least one remote network address of at least one remote facility where the user'"'"'s records are stored. The user uses the card to activate a local processor, which then automatically accesses a network, generates and applies to the network a remote record request corresponding to the activating user'"'"'s identification code, along with the appropriate remote network address(es). The remote processor, which is also connected to the network, verifies the record request and downloads all or a requested or predetermined part of the corresponding user data records to the local processor. This data may then also be downloaded at least in part to the memory of the user'"'"'s card. Updates to the user'"'"'s data records may also be uploaded from the local processor to the remote processing facility, or downloaded to the card, or both. The network is preferably a publicly accessible network such as the Internet, whereby the remote network address can be an Internet address in any conventional format.

Claims

1. A system for accessing user data records comprising:

remote processing and storage means that is connected to a network and has a remote network address,

for storing user-specific data records in a remote memory for each of a plurality of users;

for receiving and verifying remote user-specific record requests directed to the remote network address; and

for accessing and downloading user-specific data records for each verified remote record request;

for each of a predetermined group of users, a portable access device that includes an onboard processor;

at least one local processing means;

for sensing activation of the portable access device corresponding to an activating one of users,

upon sensing activation of the portable access device, for automatically accessing the network in accordance with activating data, including the remote network address, stored on the portable access device, and thereby for enabling immediate, direct access and transfer of the user-specific data records between the remote processing and storage means and the local processing means,

for automatically generating and, over the network, transmitting to the remote processing and storage means remote, user-specific record requests corresponding to the activating data,

for directly and automatically directing the remote user-specific record requests to the remote network address corresponding to the remote processing and storage means in accordance with the activating data, and

for automatically downloading from the remote processing and storage means via the network the requested user-specific data records of the activating user;

for user-initiated, user-directed and user-controlled reviewing, processing and updating of the downloaded, user-specific data records;

the portable access device forming means both for storing the activating data and for enabling and initiating immediate, direct, automatic accessing of the remote processing and storage means via the local processing means;

and

the remote processing and storage means and the portable access device together storing user-specific information sufficient to uniquely identify the user-specific data records associated with the user, the remote processing and storage means thereby being accessible via the network to all users through activation of any local processing means using the respective portable access device.

2. A system as in claim 1 including a plurality of the remote processing and storage means, each located at a respective remote data processing facility, each being connected to the same network, and in which the network is a public network.

3. A system as in claim 1, in which the portable access device includes a user memory and the remote processing and storage means is further provided for changing the contents of the user memory via the network and the local processing means.

4. A system as in claim 1, in which:

the portable access device has a user memory including memory portions containing user identification data and the remote network address; and

the local processing means is further provided for uploading from the portable access device the user identification data and the remote network address.

5. A system as in claim 4, further comprising:

reading means for connecting the portable access device to the local processing means; and

in which

the portable access device includes an onboard processor and a user memory that is both readable and writable by the local processing means.

6. A system as in claim 1, in which:

the portable access device has a user memory including a record memory portion containing user record information;

an input device means is connected to the local processing means, for entering into the local processing means data updates; and

the local processing means is further provided for downloading to the portable access device predetermined ones of the data updates for storage in the record memory portion, and for uploading the data updates into the corresponding data records in the remote memory.

7. A system for accessing user data records comprising:

remote processing and storage means that is connected to a publicly accessible network and has a remote network address,

for storing user-specific data records in a remote memory for each of a plurality of users;

for receiving and verifying remote user-specific record requests directed to the remote network address;

for accessing and downloading user-specific data records for each verified remote record request;

for each of a predetermined group of users, a portable access device that has an onboard processor and a user memory including memory portions containing user identification data and a corresponding remote network address;

at least one local processing means;

for sensing activation of the portable access device corresponding to an activating one of users,

upon sensing activation of the portable access device, for automatically accessing the network in accordance with activating data, including the remote network address, stored on the portable access device, and thereby for enabling immediate, direct access and transfer of the user-specific data records between the remote processing and storage means and the local processing means,

for automatically generating the remote record request corresponding to the activating data,

for directly and automatically directing the remote user-specific record request to the remote network address in accordance with the activating data, and

for automatically downloading from the remote processing and storage means via the network memory the user data records of the activating user;

reading means for connecting the portable access device to the local processing means;

the portable access device forming both means for storing the activating data and for enabling and initiating automatic accessing of the remote processing and storage means via the local processing means;

in which;

the remote processing and storage means is further provided for changing the contents of the user memory via the network and the local processing means; and

the local processing means is further provided for uploading from the portable access device the user identification data and the remote network address;

the remote processing and storage means and the portable access device together storing user-specific information sufficient to uniquely identify the user-specific data records associated with the user, the remote processing and storage means thereby being accessible via the network to all users through activation of any local processing means using the respective portable access device.

8. A method for accessing user data records comprising the following steps:

at a remote processor, storing user-specific user data records in a remote memory for each of a plurality of users, each of whom has a member identification code, the remote processor having a remote network address;

for each of a predetermined group of users, storing the corresponding member identification code and predetermined access data in a user memory on a portable access device;

in any of plurality of user non-specific local processing units, sensing activation of the portable access device associated with an activating user;

upon activation of the local processing unit by the portable access device, and, in accordance with the access data stored on the portable input device, directly and automatically accessing a network and automatically generating and applying to the network a remote, user-specific record request corresponding to the activating user'"'"'s identification code, along with the corresponding remote network address the identification code and remote network address being included in the access data;

at the remote processor, sensing, receiving and verifying the remote record request; and

upon verification of the remote record request, downloading to the local processing unit via the network the user-specific data records that are associated with the activating user from the remote processor to the local processor over the network, review, processing and updating of the downloaded user-specific data records remaining available to and under sole control of the user.

9. A method as in claim 8, in which the step of automatically accessing a network comprises automatically accessing a general, publicly accessible data network.

10. A method as in claim 8, further including the steps of storing portable user data in the user memory of the portable access device and automatically updating the portable user data upon downloading the user data records from the remote processor to the local processor.

11. A method as in claim 8, further including the following steps:

storing user record information in a record memory portion of the portable access device;

entering data updates into the local processor;

downloading to the portable access device predetermined ones of the data updates for storage in the record memory portion; and

uploading the data updates into the corresponding data records in the remote memory.