Controlled use medical application

• US 9,659,186 B2
• Filed: 10/14/2014
• Issued: 05/23/2017
• Est. Priority Date: 01/29/2010
• Status: Active Grant

• Current Assignee: Schwegman Lundberg & Woessner PA
• Original Assignee: Schwegman Lundberg & Woessner PA
• Inventors: Pinsky, Howard, Chen, Gen-nan, Halpern, Daniel A., Swartz, Stephen J., Henson, Trent W.
• Primary Examiner(s): Shyu, Jing-Yih
• Application Number:
  US14/513,252
• Publication Number:
  US 20150033363A1
• Time in Patent Office: 952 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G16H 40/63 for local operation
• CPC Class Codes: G16Z 99/00 Subject matter not provided for in other main groups of this subclass

Abstract

Various systems, machine-readable media, and methods for controlled use of medical applications using virtualization are described herein. In various embodiments, a virtualized medical application container can be created, including creating an image of a clean version of an operating system, installing a medical application on the image, and initializing the medical application on the image. Various embodiments include receiving an indication of a request for metered use of the medical application; requesting permission for metered use of the medical application, wherein the metered use includes at least one of a single use, a defined number of uses, unlimited use, or timed use; executing at least a portion of the medical application; and controlling usage of the medical application to comply with at least one of medical informatics standards and medical informatics regulations.

Claims

1. A computing system comprising:

at least one processor; and

a memory including instructions to implement a client application that, when executed by the at least one processor, causes the at least one processor to perform electronic operations that;

control access of a medical application to a resource of a client operating system operating on the computing system;

receive medical data from a data source that is external to the client application and the medical application;

provide information to the medical application based on the received medical data; and

control execution of the medical application and control access to the received medical data, to comply with at least one patient data privacy requirement defined by medical informatics standards or medical informatics regulations;

wherein the client application is provided to computing system as a container that is deployable in the client operating system;

wherein the container provides a virtualized operating system for operation of the medical application and the client application, wherein the virtualized operating system executes within the client operating system, and wherein the virtualized operating system is separated from the client operating system; and

wherein the client application and the medical application operate in the virtualized operating system, and wherein the client application and the medical application operate without installation of the client application and the medical application onto the client operating system.

2. The system of claim 1, wherein the electronic operations that receive the medical data include electronic operations to:

receive medical data according to information communication characteristics defined by a first medical standard.

3. The system of claim 1, wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that:

control access to the medical application.

4. The system of claim 1, wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that:

receive an indication of a request for metered use of the medical application;

request permission for metered use of the medical application, wherein the metered use includes at least one of a single use, a defined number of uses, unlimited use, or timed use;

receive at least a portion of the medical application in response to the request for metered permission; and

execute at least a portion of the medical application.

5. The system of claim 1, wherein at least a portion of the medical application includes a virtualized medical application;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

control access of the virtualized medical application to the resource of the client operating system; and

provide information to the virtualized medical application based on the received medical data.

6. The system of claim 1, wherein at least a portion of the medical application includes a virtualized medical application operable in the virtualized operating system;

wherein the memory further includes instructions to implement the virtualized medical application that, when executed by the at least one processor, causes the at least one processor to perform further electronic operations that;

receive information provided by the client application using based on the received medical data; and

process the received information.

7. The system of claim 1, wherein at least a portion of the medical application includes a web-based medical application;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

control access of the web-based medical application to the resource of the client operating system; and

provide information to the web-based medical application, based on the received medical data, through an application programming interface (API), or with a Transmission Control Protocol/Internet Protocol (TCP/IP) communication.

8. The system of claim 1, wherein at least a portion of the medical application includes a client-server-based medical application;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

control access of the client-server-based medical application to the resource of the client operating system; and

provide information to the client-server-based medical application, based on the received medical data, through an application programming interface (API), or with a Transmission Control Protocol/Internet Protocol (TCP/IP) communication.

9. The system of claim 2, wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that:

receive information from the medical application; and

provide medical data to the medical application according to a second medical standard based on the received information.

10. The system of claim 9, wherein the first and second medical standards separately include one of a Digital imaging and Communications in Medicine (DICOM) standard, a Health Level Seven (HL7) standard, or an Integrating the Healthcare Enterprise (IHE) standard.

11. The system of claim 10, wherein the first medical standard includes the second medical standard.

12. The system of claim 1, wherein the resource of the client operating system includes a network interface;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

restrict access of the medical application to the network interface.

13. The system of claim 1, wherein the medical application includes a plurality of medical applications selectable from a server;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

receive an indication of a selection of a first medical application; and

provide information to the first medical application based on the received medical data.

14. The system of claim 1, wherein the computing system is connected to a server configured to store a plurality of medical applications including the medical application;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

receive an indication of a selection of the medical application;

receive at least a portion of the medical application from the server;

execute at least a portion of the medical application;

receive information from the medical application; and

provide medical data to the medical application according to a second medical standard based on the received information.

15. The system of claim 1, wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that:

receive medical data from a database according to a first medical standard, the medical data including at least one of medical imaging data, patient medical records, or healthcare information;

receive information from the medical application; and

provide medical data to the database according to a second medical standard based on the received information.

16. A non-transitory machine-readable storage medium containing instructions to implement a client application that, when executed by at least one processor, causes the at least one processor to perform electronic operations that:

control access of a medical application to a resource of a client operating system;

receive medical data from a data source that is external to the client application and the medical application;

provide information to the medical application based on the received medical data; and

control execution of the medical application and control access to the received medical data, to comply with at least one patient data privacy requirement defined by medical informatics standards or medical informatics regulations;

wherein the client cation is provided to computing system as a container that is deployable in the client operating system;

wherein the container provides a virtualized operating system for operation of the medical application and the client application, wherein the virtualized operating system executes within the client operating system, and wherein the virtualized operating system is separated from the client operating system; and

wherein the client application and the medical application operate in the virtualized operating system, and wherein the client application and the medical application operate without installation of the client application and the medical application onto the client operating system.

17. The non-transitory machine-readable storage medium of claim 16, wherein the electronic operations that receive the medical data include electronic operations to:

receive medical data according to information communication characteristics defined by a first medical standard.

18. The non-transitory machine-readable storage medium of claim 16, wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that:

control access to the medical application.

19. The non-transitory machine-readable storage medium of claim 16, wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that:

receive an indication of a request for metered use of the medical application;

request permission for metered use of the medical application, wherein the metered use includes at least one of a single use, a defined number of uses, unlimited use, or timed use;

receive at least a portion of the medical application in response to the request for metered permission; and

execute at least a portion of the medical application.

20. The non-transitory machine-readable storage medium of claim 16, wherein at least a portion of the medical application includes a virtualized medical application;

and

wherein the instructions to implement the client application, when executed by the at least one processor, cause the at least one processor to perform further electronic operations that;

control access of the virtualized medical application to the resource of the client operating system; and

provide information to the virtualized medical application based on the received medical data.

21. A method of operation for a controlled used medical application, the method comprising electronic operations including:

receiving a client application as a container for deployment within a client operating system; and

operating the client application in the container, to perform operations including;

controlling access of a medical application to a resource of the client operating system;

receiving medical data from a data source that is external to the client application and the medical application;

providing information to the medical application based on the received medical data; and

controlling execution of the medical application and control access to the received medical data, to comply with at least one patient data privacy requirement defined by medical informatics standards or medical informatics regulations;

wherein the container provides a virtualized operating system for operation of the medical application and the client application, wherein the virtualized operating system executes within the client operating system, and wherein the virtualized operating system is separated from the client operating system; and

wherein the client application and the medical application operate in the virtualized operating system, and wherein the client application and the medical application operate without installation of the client application and the medical application onto the client operating system.

22. The method of claim 21, the electronic operations further including:

receiving an indication of a request for metered use of the medical application;

requesting permission for metered use of the medical application, wherein the metered use includes at least one of a single use, a defined number of uses, unlimited use, or timed use;

receiving at least a portion of the medical application in response to the request for metered permission; and

executing at least a portion of the medical application.