Computerized method and system for restricting access to patient protected health information

• US 8,117,663 B2
• Filed: 11/25/2009
• Issued: 02/14/2012
• Est. Priority Date: 06/17/2003
• Status: Active Grant

• Current Assignee: Cerner Innovation, Inc. (Oracle Corporation)
• Original Assignee: Cerner Innovation, Inc. (Oracle Corporation)
• Inventors: Travis, John F., Cross, Lori N., Dahlhauser, Sarah L., St. John, Stacy C., Stroud, James L., Venkat, Chandrasekhar K.
• Primary Examiner(s): BROWN, CHRISTOPHER J
• Application Number:
  US12/626,150
• Publication Number:
  US 20100077487A1
• Time in Patent Office: 811 Days
• Field of Search: 726/26, 713/182, 705/3
• US Class Current: 726/26
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G16H 10/40 for data related to laboratory analysis, e.g. patient specimen analysis
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 20/40 relating to mechanical, radiation or invasive therapies, e.g. surgery, laser therapy, dialysis or acupuncture

Abstract

A computerized system and method for allowing restricted access to patient healthcare information is provided. Upon determining that one or more users are assigned to the location where an order for a patient is to be performed, the method allows one or more users restricted access to the order. The system includes an order entry module, an access evaluation module, a location entry module and a user module. The access evaluation module includes an assignment determination sub-module for determining whether one or more users are assigned to the specified location where an order for a patient is to be performed. The assignment determination module also includes a restricted access sub-module coupled with the assignment determination module and configured to allow restricted access to one or more users assigned to the specified location.

Claims

1. A computer-implemented method, which is carried out using one or more of a processor and computer-storage media, for allowing restricted access to a patient'"'"'s healthcare information in a computing environment of a healthcare organization, the method comprising:

receiving an order specifying a healthcare procedure to be performed on a patient;

receiving a location assignment that assigns the order to be performed at a healthcare-service location;

receiving from a user a request to access the order;

determining by the processor that the user is assigned to the healthcare-service location at which the order is assigned to be performed; and

allowing the user to access the order based on the user being assigned to the healthcare-service location at which the order is assigned to be performed.

2. The method of claim 1, further comprising:

allowing the user assigned to the healthcare-service location to access other healthcare information of the patient.

3. The method of claim 1, further comprising:

determining that the user has security clearance to enter test results of the order to which the user seeks access.

4. The method of claim 3, wherein the healthcare-service location at which the order is to be performed is either a physical location or a virtual location.

5. The method of claim 4, wherein the healthcare-service location is a work queue.

6. The method of claim 4, wherein the healthcare-service location is a patient examination room.

7. The method of claim 4, wherein the order comprises analyzing a specimen collected from the patient and wherein the healthcare-service location is a testing laboratory at which the specimen is analyzed.

8. The method of claim 4, wherein the healthcare-service location is a surgical suite.

9. The method of claim 3, further comprising:

allowing the user to input test results of the order.

10. A computer system embodied on one or more non-transitory computer storage media having computer-executable instructions embodied thereon for allowing restricted access to patient healthcare information, the system comprising:

a location-entry module that receives input indicating a healthcare location to which a user is assigned;

an order-entry module that receives input indicating an order, which specifies a healthcare procedure to be performed on a patient, wherein the order is assigned to the healthcare location at which the order is to be performed;

an assignment-determination module that determines the user is assigned to the healthcare location, at which the order is to be performed, when a request is received to allow the user to access the order; and

a restricted-access module that is communicatively coupled with the assignment-determination module and that provides to the user restricted access to the order based on the user being assigned to the healthcare location at which the order is to be performed.

11. The system of claim 10,

wherein the location-entry module receives input via a user interface, and

wherein the user interface includes:

a first portion depicting the healthcare location that is usable to perform the order, and

a second portion depicting, in response to selection of the healthcare location, a list of personnel that are authorized to perform the order at the healthcare location.

12. The system of claim 11, wherein the assignment-determination module determines that the user is assigned by referencing the list of personnel.

13. The system of claim 10, wherein the restricted-access module is configured to restrict access of the user to a second order, which is not assigned to the healthcare location.

14. The system of claim 10, wherein the healthcare location includes a patient examination room, a testing laboratory, or a surgical suite.

15. One or more non-transitory computer-readable media having stored thereon computer-executable instructions that, when executed, cause a computing device to perform a method of controlling access to sensitive information, the method comprising:

receiving an order specifying a healthcare procedure to be performed on a patient;

receiving a location assignment that assigns the order to be performed at a healthcare-service location;

receiving from a user a request to access the order;

determining by the processor that the user is assigned to the healthcare-service location at which the order is assigned to be performed; and

allowing the user to access the order based on the user being assigned to the healthcare-service location at which the order is assigned to be performed.

16. The method of claim 15, further comprising:

allowing the user to input test results of the order.

17. The method of claim 15, further comprising:

allowing the user assigned to the healthcare location to access other healthcare information of the patient.