Secure and usable authentication for health care information access

• US 9,727,937 B2
• Filed: 08/23/2012
• Issued: 08/08/2017
• Est. Priority Date: 08/13/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wang, Qihua, Jin, Hongxia
• Primary Examiner(s): Seoh, Minnah
• Assistant Examiner(s): Durant, Jonathan
• Application Number:
  US13/593,251
• Publication Number:
  US 20120323607A1
• Time in Patent Office: 1,811 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Embodiments of the invention relate to providing a health care provider access to an electronic record of a patient may be provided. A determination is made as to whether the health care provider is logged onto a computer system in a physical area assigned to the patient. Whether the health care provider is logged onto the computer system during working hours of the provider is also ascertained. The health care provider is provided with access to the electronic record of the patient via the computer system if the determining resolves to true and the ascertaining resolves to true.

Claims

1. A method, comprising:

using a radio frequency tag secured to a badge, wherein the badge is configured to;

utilize a card authentication protocol to authenticate the radio frequency tag, wherein the card authentication protocol comprises a time-based shared secret stored in the radio frequency tag that is changed on a regular basis, and the radio frequency tag is authenticated by the radio frequency tag communicating with an authentication module on a computer system;

sense a proximity of the badge to the computer system by utilizing a proximity sensor attached to the computer system, wherein the proximity sensor is configured to sense proximity of the badge to the computer system;

verify that the shared secret stored on the radio frequency tag is the same as a system secret stored on the computer system;

in response to the shared secret being the same as the system secret;

determine whether the health care provider is in a physical area assigned to a first patient by;

sending a radio frequency signal identification information of the health care provider from the radio frequency tag to the authentication module with a tag reader on the computer system, wherein the radio frequency tag determines the position information of the health care provider based on proximity to a terminal of the computer system,

comparing the position of the terminal of the computer system with position information of the physical area assigned to the first patient; and

comparing position information of the health care provider with position information derived from the computer system of the physical area assigned to the first patient stored on the computer system;

periodically estimating an appointment time period for the health care provider with the one of the plurality of patients;

denying the health care provider access to an electronic record of the first patient if the health care provider is logged onto the computer system in a physical area assigned to the first patient outside the periodically estimated appointment time period for the first patient;

wherein the radio frequency tag is configured to automatically log in the health care provider to the computer system in response to the health care provider being in the physical area assigned to the first patient;

wherein the computer system is configured to determine whether the health care provider is logged onto the computer system at a time the health care provider is in the physical area assigned to the first patient;

wherein the computer system is configured to ascertain whether the health care provider is logged onto the computer system during authorized hours of the health care provider;

wherein the computer system is configured to, in response to the health care provider being logged onto the computer system at the time the health care provider is in the physical area assigned to the first patient, and in response to the health care provider being logged onto the computer system during the authorized hours of the health care provider, provide the health care provider with access to the electronic record of the first patient using the computer system by transmitting authorization for the health care provider to the computer system, thereby providing visual access to the electronic record of the first patient on a computer display of the computer system;

the computer system is configured to automatically generate a new shared secret, a new system secret, and new authorized hours for the health care provider in response to the health care provider accessing a system to update the shared secret;

whereby the electronic record of the first patient is available to the health care provider only when the health care provider needs it in order to treat the first patient;

whereby the health care provider is directly logged into the computer system without the need to type in a password, thus allowing the health care provider to log into the terminal of the computer system in a hands-free fashion; and

wherein the computer system is configured to log the health care provider out of the computer system after a predetermined time period of inactivity by the health care provider on the computer system.

2. The method of claim 1, further comprising:

the computer system being further configured to;

detect the health care provider in the physical area assigned to the first patient;

log the detected health care provider onto the computer system in the physical area assigned to the first patient; and

log the health care provider off of the computer system in the physical area assigned to the first patient in response to the health care provider being no longer detected in the physical area assigned to the first patient.

3. The method of claim 2, wherein the computer system is configured to detect that a portable wireless device assigned to the health care provider is near the computer system.

4. The method of claim 1, further comprising:

the computer system is further configured to, in response to the health care provider previously being logged onto the computer system, determine an elapsed time to when the health care provider last accessed the electronic records of the first patient; and

extend the new authorized hours by a particular amount of time in response to the elapsed time being less than a maximum time period.

5. The method of claim 1, further comprising:

the computer system being further configured to, in response to the health care provider having had access to more than a particular number of electronic records of patients in less than a particular amount of time, deny the health care provider access to the electronic record of the first patient.

6. The method of claim 1, further comprising:

the computer system being further configured to, in response to a second patient not being assigned to the area assigned to the first patient, deny the health care provider access to a second electronic record of the second patient via the computer system.

7. The method of claim 1 further comprising:

the computer system being further configured to, in response to the health care provider using a computer system assigned to the health care provider and the health care provider being in an office assigned to the health care provider, provide to the health care provider access to the electronic record from the assigned computer system.

8. The method of claim 1, further comprising:

the computer system being further configured to, in response to the health care provider inputting the password that allows the health care provider to log onto the computer system of the health care organization of which the health care provider is a member, allow the health care provider to access the electronic record of the first patient via the computer system of the health care organization.