Computerized method and system for restricting access to patient protected health information

• US 7,634,419 B1
• Filed: 06/17/2003
• Issued: 12/15/2009
• Est. Priority Date: 06/17/2003
• Status: Active Grant

• Current Assignee: Cerner Innovation, Inc. (Oracle Corporation)
• Original Assignee: Cerner Innovation, Inc. (Oracle Corporation)
• Inventors: St. John, Stacy C., Dahlhauser, Sarah L., Stroud, James L., Venkat, Chandrasekhar K., Travis, John F., Cross, Lori N.
• Primary Examiner(s): Brown; Christopher J
• Application Number:
  US10/462,969
• Time in Patent Office: 2,373 Days
• Field of Search: 726/7, 726/28, 713/182, 705/2, 705/3
• US Class Current: 705/3
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G16H 10/40 for data related to laboratory analysis, e.g. patient specimen analysis
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 20/40 relating to mechanical, radiation or invasive therapies, e.g. surgery, laser therapy, dialysis or acupuncture

Abstract

A computerized system and method for allowing restricted access to patient healthcare information is provided. Upon determining that one or more users are assigned to the location where an order for a patient is to be performed, the method allows one or more users restricted access to the order. The system includes an order entry module, an access evaluation module, a location entry module and a user module. The access evaluation module includes an assignment determination sub-module for determining whether one or more users are assigned to the specified location where an order for a patient is to be performed. The assignment determination module also includes a restricted access sub-module coupled with the assignment determination module and configured to allow restricted access to one or more users assigned to the specified location.

Claims

1. A computer-implemented method, which is carried out using one or more of a server computer and computer-storage media, for allowing restricted access to a patient'"'"'s healthcare information in a computing environment of a healthcare organization, the method comprising:

generating a list of personnel that are authorized to perform a healthcare procedure at a healthcare location;

receiving an order that indicates that a patient is to undergo the healthcare procedure;

assigning the order to the healthcare location;

receiving from a user a request to access the order;

determining that the user is included on the list of personnel that are authorized to perform the healthcare procedures at the healthcare location; and

allowing the user to access the order.

2. The method of claim 1, further comprising:

allowing the user assigned to the location to access other healthcare information of the patient.

3. The method of claim 1, further comprising:

determining whether the user has security clearance to enter test results for the type of order to which the user seeks access.

4. The method of claim 3, wherein the healthcare location includes a physical location and a virtual location.

5. The method of claim 4, wherein the healthcare location includes a work queue.

6. The method of claim 4, wherein the healthcare location includes a patient examination room.

7. The method of claim 4, wherein the healthcare location includes a testing laboratory.

8. The method of claim 4, wherein the healthcare location includes a surgical suite.

9. One or more computer storage media having computer-executable instructions embodied thereon for performing the computer-implemented method recited in claim 1.

10. The method of claim 1, wherein the order is assigned based on information regarding the patient.

11. The method of claim 1, wherein the order is assigned based on the availability of the one or more users to complete the order.

12. The method of claim 1, wherein generating a list of personnel that are authorized to perform a healthcare procedure at a healthcare location comprises:

presenting for selection on a display the healthcare location that is usable to perform the healthcare procedure;

in response to a selection of the healthcare location, listing personnel that are authorized to perform the healthcare procedure at the healthcare location; and

receiving an approval of the personnel.

13. The method of claim 1, wherein generating a list of personnel that are authorized to perform a healthcare procedure at a healthcare location comprises:

presenting on a display the healthcare location that is usable to perform the healthcare procedure; and

receiving an input that identifies a user that is authorized to perform the healthcare procedure at the healthcare location.

14. A computer system embodied on one or more computer storage media having computer-executable instructions embodied thereon for allowing restricted access to patient healthcare information in a healthcare organization, the system comprising:

a location-entry module for input of a healthcare location at which a user is authorized to perform a healthcare procedure, wherein the location-entry module is configured to;

present for selection on a display the healthcare location that is usable to perform the healthcare procedure,

in response to a selection of the healthcare location, list personnel that are authorized to perform the healthcare procedure at the healthcare location, and

receive an approval of the personnel;

an order entry module for both input of a patient order and assignment of the patient order to a specified location;

an assignment-determination module for determining that the user is assigned to the specified location where the patient order is to be completed; and

a restricted access module coupled with the assignment determination module and configured to allow the user to have restricted access to the order.

15. The system of claim 14, further comprising:

an order access module for one or more users to access one or more patient order.

16. One or more computer storage media having embodied thereon computer-executable instructions that when executed cause a computing device to perform a method for allowing restricted access to patient health information in computing environment of a healthcare organization, the method comprising:

presenting on a display a list of personnel that are authorized to perform a healthcare procedure at a healthcare location;

receiving input that removes a user from the list of personnel;

receiving an order that indicates that a patient is to undergo the healthcare procedure;

assigning the order to the healthcare location;

receiving from the user a request to access the order;

determining that the user is not included in the list of personnel that are authorized to perform the healthcare procedures at the healthcare location; and

denying the user access to the order.