Secure data transmission

• US 9,729,554 B2
• Filed: 11/28/2016
• Issued: 08/08/2017
• Est. Priority Date: 11/20/2012
• Status: Active Grant

• Current Assignee: Ikonopedia, Inc.
• Original Assignee: Ikonopedia, Inc.
• Inventors: Sokoryansky, Michael, Vendrell, Michael J.
• Primary Examiner(s): Woolcock, Madhu
• Application Number:
  US15/361,605
• Publication Number:
  US 20170078297A1
• Time in Patent Office: 253 Days
• Field of Search: 709229, 709201, 705705, 715715, 726 27
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

A system may include a first network in which user device(s) and a HIP server are communicably coupled. The first network may include a secure data administrator, such as a medical data system, that stores secure data. In some implementations, at least one of the user devices may include a web module and communicate with a web server through a second network. At least one of the user device may be restricted from communicating with the secure data administrator, so the user device may request data stored in the secure data administrator through the HIP server. The user device may base the requests for the data on information received from the web server.

Claims

1. A method of accessing secure data, the method comprising:

requesting, by a first user device on a first network, access to one or more web-based diagnostic interfaces generated by an application device on a second network, wherein one or more of the web-based diagnostic interfaces are related to patient test results;

receiving, at the first user device, at least one of the one or more web-based diagnostic interfaces from the application device;

requesting, by the first user device via one of the one or more web-based diagnostic interfaces, secure medical data to be presented on a second user device residing on the first network, wherein the secure medical data includes patient test results and is stored on a secure data administrator residing in the first network, and wherein the first user device is restricted from communicating directly with the second user device and the secure data administrator, and and wherein the second network is distinct from the first network, and wherein the second user device and the secure data administrator are restricted from accepting incoming communication initiated by the application device based at least partially on the application device having access to the second network;

receiving, at the first user device, instructions generated and provided by the application device to allow the secure medical data to be presented on the second user device; and

transmitting at least a portion of the received instructions from the first user device to a HIP server residing on the first network, wherein the HIP server transmits at least a portion of the received instructions to at least one of the second user device or the secure data administrator to allow at least a portion of the secure medical data to be presented on the second user device, wherein the HIP server is communicably coupled to the first user device and at least one of the second user device or the secure data administrator, and wherein the HIP server is restricted from accepting incoming communication initiated by the application device.

2. The method of claim 1 wherein the HIP server is restricted from accepting incoming communication initiated by the application device based at least in part on the application device residing on the second network.

3. The method of claim 1 further comprising automatically generating a report via the one or more web-based diagnostic interfaces generated by the application device, wherein the report comprises at least a portion of a diagnosis for a patient based on the secure medical data presented on the second user device.

4. The method of claim 3 wherein automatically generating the report based on the secure medical data presented on the second user device comprises:

receiving one or more anatomical locations via the one or more web-based diagnostic interfaces, wherein a received anatomic location identifies a portion of the patient presented in at least one patient test result in the secure medical data;

receiving a selection of one or more image icons to associate with at least one of the received one or more anatomical locations, wherein at least one of the one or more web-based diagnostic interfaces comprises one or more image icons, and wherein the selected one or more image icons are related to diagnosing the patient; and

wherein the automatically generated report is based on at least one of the selected one or more image icons.

5. The method of claim 4, wherein each of the one or more image icons includes at least a portion of a medical photographic image of an example characteristic, and wherein the example characteristic is not a portion of secure medical data presented on the second user device.

6. The method of claim 3 further comprising:

receiving a selection of one or more image icons to associate with at least one previously received anatomical locations; and

receiving a request for reference information associated with at least one of the selected one or more image icons; and

retrieving a first set of reference information from a second set of reference information stored in a database, wherein the first set of reference information is retrieved based on at least one of the selected one or more image icons, and wherein the second set of reference information stored in the database is indexed based at least partially on one or more relationships to at least one of the one or more of the image icons.

7. The method of claim 1 further comprising:

receiving a selection of one or more image icons, wherein at least one of the one or more web-based diagnostic interfaces comprises the one or more image icons, and wherein the selected one or more image icons are related to diagnosing the patient associated with the secure medical data; and

receiving a request for reference information associated with at least one of the selected one or more image icons; and

retrieving a first set of reference information from a second set of reference information stored in a database, wherein the first set of reference information is retrieved based on at least one of the selected one or more image icons, and wherein the second set of reference information stored in the database is indexed based at least partially on one or more relationships to at least one of the one or more image icons.

8. A method of accessing secure data, the method comprising:

requesting, by a first user device on a first network, access to one or more web-based diagnostic interfaces generated by an application device on a second network, wherein at least one of the one or more web-based diagnostic interfaces are related to patient test results;

receiving, at the first user device, at least one of the one or more web-based diagnostic interfaces from the application device;

requesting, by the first user device via one of the one or more web-based diagnostic interfaces, secure medical data to be presented on a second user device residing on the first network, wherein the secure medical data includes the patient test results, and wherein the secure medical data is stored on a secure data administrator residing on the first network, and wherein the first user device is restricted from communicating directly with the second user device and the secure data administrator, and wherein the second user device and the secure data administrator are restricted from accepting incoming communications initiated by the application device, and wherein the second network is distinct from the first network;

receiving, at the first user device, instructions generated and provided by the application device to allow the secure medical data to be presented on the second user device; and

transmitting, from the first user device to a HIP server, the instructions, wherein the HIP server resides on the first network and is restricted from accepting incoming communications initiated by the application device, and wherein the HIP server transmits at least a portion of the instructions to at least one of the second user device or the secure data administrator to allow presentation of at least a portion of the secure medical data on the second user device.

9. The method of claim 8 wherein the second user device and the secure data administrator are restricted from accepting incoming communication initiated by the application device based at least partially on the application device having access to the second network.

10. The method of claim 8

wherein the HIP server is communicably coupled to the first user device and at least one of the second user device or the secure data administrator.

11. The method of claim 8 further comprising automatically generating a report via the one or more web-based diagnostic interfaces generated by the application device, wherein the report comprises at least a portion of a diagnosis for a patient based on the secure medical data presented on the second user device.

12. The method of claim 11 wherein automatically generating the report based on the secure medical data presented on the second user device comprises:

receiving one or more anatomical locations via the one or more web-based diagnostic interfaces, wherein a received anatomic location identifies a portion of the patient presented in at least one patient test result in the secure medical data;

receiving a selection of one or more image icons to associate with at least one of the received one or more anatomical locations, wherein at least one of the one or more web-based diagnostic interfaces comprises one or more image icons, and wherein the selected one or more image icons are related to diagnosing the patient; and

wherein the automatically generated report is based on at least one of the selected one or more image icons.

13. The method of claim 11 further comprising:

receiving a selection of one or more image icons, wherein at least one of the one or more web-based diagnostic interfaces comprises the one or more image icons, and wherein the selected one or more image icons are related to diagnosing the patient associated with the secure medical data; and

receiving a request for reference information associated with at least one of the selected one or more image icons; and

retrieving a first set of reference information from a second set of reference information stored in a database, wherein the first set of reference information is retrieved based on at least one of the selected one or more images, and wherein the second set of reference information stored in the database is indexed based at least partially on one or more relationships to at least one of the one or more image icons.

14. The method of claim 8 further comprising:

receiving a selection of one or more image icons, wherein at least one of the one or more web-based diagnostic interfaces comprises the one or more image icons, and wherein the selected one or more image icons are related to diagnosing the patient associated with the secure medical data; and

receiving a request for reference information associated with at least one of the selected one or more image icons; and

retrieving a first set of reference information from a second set of reference information stored in a database, wherein the first set of reference information is retrieved based on at least one of the one or more selected image icons, and wherein the second set of reference information stored in the database is indexed based at least partially on one or more relationships to at least one of the one or more image icons.

15. A system comprising:

an application device residing on a second network, wherein the application device comprises;

a first memory storing application device instructions; and

a first processor configured to execute one or more of the application device instructions to;

generate one or more diagnostic interfaces to be presented on a first user device residing on a first network;

receive a first request, from the first user device via at least one of the generated one or more diagnostic interfaces, for secure medical data to be presented on a second user device residing on the first network, wherein the secure medical data is stored on a secure data administrator residing on the first network, and wherein the application device is restricted from communicating with the second user device and the secure data administrator; and

generate and provide instructions to the first user device to allow access to at least a portion of the requested secure medical data at least partially based on the received first request;

the first user device configured to communicate with the application device, wherein one or more of the generated one or more diagnostic interfaces are presented on the first user device, and wherein the first user device is restricted from communicating directly with the second user device and the secure data administrator, and wherein the first user device transmits the instructions generated and provided by the application device to a HIP server residing on the first network;

the HIP server configured to receive the instructions from the first user device and, based on the received instructions, transmit second instructions to at least one of the second user device or the secure data administrator to allow presentation of at least a portion of the requested secure medical data from the secure data administrator on the second user device, wherein the HIP server is restricted from accepting incoming communications initiated by the application device; and

the second user device, wherein the second user device comprises a processor configured to present the at least the portion of the requested secure medical data which is received from the secure data administrator based at least partially on the second instructions.

16. The system of claim 15 wherein transmitting the second instructions comprises transmitting the second instructions to the second user device;

and wherein the second user device requests retrieval of the at least the portion of the requested secure medical data based at least partially on the transmitted second instructions.

17. The system of claim 16 further comprising transmitting the instructions to present the at least the portion of the requested secure medical data to the HIP server instead of the first user device.

18. The system of claim 15 wherein transmitting the second instructions comprises transmitting the second instructions to the secure data administrator;

and wherein the secure data administrator transmits the at least the portion of the requested secure medical data based at least partially on the transmitted second instructions.

19. The system of claim 15 further comprising:

receiving a selection of one or more image icons, wherein at least one of the one or more web-based diagnostic interfaces comprises the one or more image icons, and wherein the selected one or more image icons are related to diagnosing a patient associated with the second medical data; and

receiving a request for reference information associated with at least one of the selected one or more image icons; and

retrieving a first set of reference information from a second set of reference information stored in a database, wherein the first set of reference information is retrieved based on at least one of the selected one or more image icons, and wherein the second set of reference information stored in the database is indexed based at least partially on one or more relationships to at least one of the one or more image icons.

20. The system of claim 19 further comprising restricting generation of a report comprising a diagnosis of the patient at least partially based on an identity of a person or entity that will receive the report.

21. The system of claim 15 further comprising generating a report comprising a diagnosis for a patient based on the secure medical data presented on the second user device.

22. The system of claim 21 wherein automatically generating the report based on the secure medical data presented on the second user device comprises:

receiving one or more anatomical locations via the one or more web-based diagnostic interfaces, wherein a received anatomic location identifies a portion of the patient presented in at least one patient test result in the secure medical data;

receiving a selection of one or more image icons to associate with at least one of the received one or more anatomical locations, wherein at least one of the one or more web-based diagnostic interfaces comprises one or more image icons, and wherein the selected one or more image icons are related to diagnosing the patient; and

wherein the automatically generated report is based on at least one of the selected one or more image icons.