Tools for access to databases via internet protocol networks

• US 7,603,701 B2
• Filed: 06/30/2005
• Issued: 10/13/2009
• Est. Priority Date: 06/30/2005
• Status: Expired due to Fees

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Gaucas, Dale Ellen
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US11/173,774
• Publication Number:
  US 20070005601A1
• Time in Patent Office: 1,566 Days
• Field of Search: 713/155, 713/159, 713/184, 713/193, 726/7, 707/9
• US Class Current: 726/7
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

One embodiment is directed to apparatus. In the apparatus, a trusted intermediary computer screen user interface is provided. An identification information input receives, via the computer screen user interface, information identifying an authorized information seeker. The information seeker seeks access to a remote database via an internet protocol connection. An authorization confirmation display displays, via the computer screen user interface, that the authorized information seeker is confirmed as authorized to access the remote database. An access code request input requests, via the computer screen user interface, an access code for use by the authorized information seeker to access the remote database via the internet protocol connection. An access code output outputs the access code for use by the authorized information seeker.

Claims

1. Apparatus comprising:

a trusted intermediary computer screen user interface, to which a given human trusted intermediary is given access upon presenting his or her trusted intermediary credentials to a trusted intermediary computer system including the trusted intermediary computer screen user interface, the given human trusted intermediary obtaining access to the trusted intermediary computer screen user interface upon being approached by a human authorized information seeker different than and independent from the given human trusted intermediary;

an identification information input to receive, via the trusted intermediary interacting with the trusted intermediary computer screen user interface, information identifying an authorized information seeker seeking access to protected content, to which the information seeker is already authorized to access, the access being sought by the authorized information seeker being sought at a remote database via an internet protocol connection;

an authorization confirmation display to display to the trusted intermediary, via the trusted intermediary computer screen user interface, that the authorized information seeker is confirmed as authorized to access the remote database;

an access code request input to request, via the trusted intermediary interacting with the trusted intermediary computer screen user interface, an access code for use by the authorized information seeker to access the remote database via the internet protocol connection; and

an access code output to output the access code for use by the authorized information seeker.

2. The apparatus according to claim 1, wherein the access code includes a PIN.

3. The apparatus according to claim 2, further comprising:

a PIN requester to send a PIN request, via a PIN request internet protocol connection, to a remote PIN issuing database.

4. Apparatus comprising:

a credential issuing system to provide to a trusted intermediary unique third party identifying credentials to issue to an authorized third party, the credential issuing system being accessible to a given human trusted intermediary upon presenting his or her trusted intermediary credentials to a trusted intermediary computer system, the given human trusted intermediary obtaining access to the credential issuing system upon being approached by a human authorized third party different than and independent from the given human trusted intermediary;

a third party information system to maintain information on authorized third parties including the authorized third party; and

a verification system to verify the identity of an authorized third party based on the third party identifying credentials, the verification system being configured to receive the third party identifying credentials via input by the given human trusted intermediary.

5. The apparatus of claim 4, further comprising an intermediary verification system to verify the credentials of the trusted intermediaries and to provide the trusted intermediaries with access to the credential issuing system.

6. The apparatus of claim 5, wherein the credential issuing system, the third party information system, the verification system, and the intermediary verification system comprise databases or portions thereof

7. The apparatus of claim 6, wherein the databases communicate securely.

8. The apparatus of claim 6, further comprising an information system containing the information, the information system being coupled to the verification system to disclose the information after verification of the third party identifying credentials, the information system having an interface that is securely accessible to the authorized third party using the third party identifying credentials.

9. The apparatus of claim 4, wherein the information is patient medical information.

10. The apparatus of claim 9, wherein the authorized third parties are family members of the patient.

11. Apparatus comprising:

means for providing trusted intermediaries with unique identifying credentials to issue to an authorized third party after verification of the identity of the authorized third party, the unique identifying credentials enabling the authorized third party to access protected information, the means for providing trusted intermediaries with unique identifying credentials being accessible to a given human trusted intermediary upon presenting his or her trusted intermediary credentials to a trusted intermediary computer system, the given human trusted intermediary obtaining access to the credential issuing system upon being approached by a human authorized third party different than and independent from the given human trusted intermediary;

means for storing and providing information on authorized third parties; and

means for verifying the identifying credentials before providing the protected information, the means for verifying being configured to receive the third party identifying credentials via input by the given human trusted intermediary.

12. The apparatus of claim 11, further comprising means for managing information on the trusted intermediaries and for providing the trusted intermediaries with access to the means for providing credentials.

13. The apparatus of claim 12, wherein the trusted intermediary is a legal services provider.

14. The apparatus of claim 12, wherein the means for managing information on the trusted intermediaries, the means for providing credentials, the means for storing information on authorized third parties, and the means for verifying the identifying credentials comprise databases.

15. The apparatus of claim 14, further comprising:

means for managing the protected information coupled to the means for verifying the identifying credentials and a medical facility, the means for managing the protected information being adapted to contain patient medical data provided by the medical facility; and

means for presenting the protected information coupled to the means for managing protected information.

16. The apparatus of claim 12, further comprising means for providing the protected information via a computer screen viewable by one of the trusted intermediaries, wherein the authorized third party obtains identifying credentials by in-person contact with the one of the trusted intermediaries.

17. The apparatus of claim 12, further comprising means for providing the protected information electronically from a computer accessed by one of the trusted intermediaries, wherein the authorized third party obtains identifying credentials by secure electronic communication with the one of the trusted intermediaries.

18. A method comprising:

a given human trusted intermediary verifying, upon being approached by a third party information requester already being entitled to access protected information including sensitive patient medical data, via a trusted intermediary computer system to which the given human trusted intermediary was given access upon presenting his or her trusted intermediary credentials to the trusted intermediary computer, both the identity of a third party information requester and the third party information requester'"'"'s entitlement to the protected information, wherein the trusted intermediary computer system is configured to permit trusted intermediaries to have access to the trusted intermediary computer by requiring respective trusted intermediary credentials;

the human trusted intermediary learning, from the trusted intermediary computer system, and issuing to the third party information requester unique identifying authorized third party credentials; and

a health services provider different than the human trusted intermediary disclosing patient medical data to the third party information requester after the third party information requester has provided the unique identifying credentials to the health services provider.

19. The method of claim 18, further comprising, before allowing the trusted intermediary to verify the identity of a third party requester, establishing and verifying the credentials of the trusted intermediary.

20. The method of claim 18, wherein the protected information is patient medical information and the third party information requester is a patient family member.

21. The method of claim 18, wherein there are a plurality of trusted intermediaries.

22. The method of claim 18, wherein the trusted intermediary is a legal practitioner.

23. The method of claim 18, wherein the disclosing comprises in person disclosing, telephone disclosing, or disclosing by third party information requester access to an information system.