Providing notifications to authorized users

• US 9,906,532 B2
• Filed: 11/30/2015
• Issued: 02/27/2018
• Est. Priority Date: 02/24/2014
• Status: Active Grant

• Current Assignee: C-HCA, Inc.
• Original Assignee: HCA Holdings Incorporated (HCA Healthcare, Inc.)
• Inventors: Perez, Gabriel O., Houston, Michael A.
• Primary Examiner(s): LWIN, MAUNG T
• Application Number:
  US14/954,249
• Publication Number:
  US 20160285876A1
• Time in Patent Office: 820 Days
• Field of Search: None
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/20 for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms
• CPC Class Codes: G16H 50/20 for computer-aided diagnosis, e.g. based on medical expert systems
• CPC Class Codes: G16H 80/00 ICT specially adapted for facilitating communication between medical practitioners or patients, e.g. for collaborative diagnosis, therapy or health monitoring
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A method and system for initiating message listening and routing message content to authorized user devices is disclosed. For a second user device to receive notifications regarding records of a first user, the second user device provides information identifying the first user to a notification service. The notification service verifies the identifying information. The notification service initiates one or more listeners to listen for messages flowing over a messaging bus that are relating to the first user. Once a message is identified, at least a portion of the message is used to generate a notification that may be sent to the second user device.

Claims

1. A system for routing message content to authorized user devices, the system comprising:

a messaging bus in network communication with one or more electronic devices in a medical provider network, at least some of the one or more electronic devices using a processing circuit configured to generate medical messages to be transmitted via the messaging bus;

a memory configured to store computer-executable instructions; and

a processor in communication with the memory and configured to execute the computer-executable instructions to at least;

receive a notification request from a patient, the notification request identifying;

(i) a role of a user with respect to the patient, the user associated with the patient;

(ii) an identity of the user; and

(iii) a notification method, the notification request requesting that a user device associated with the user be provided, via the notification method, notifications corresponding to changes to an electronic record associated with the patient;

generate an authorization code based at least in part on the notification request, the authorization code uniquely identifying the patient and enabling the user to subscribe to the messaging bus to receive a particular amount of information corresponding to the changes to the electronic record associated with the patient;

receive an authorization request from the user, the authorization request requesting authorization of the user to receive the notifications corresponding to the changes to the electronic record associated with the patient, the authorization request comprising the authorization code;

determine, based at least in part on the authorization request that the user is authorized to receive the notifications corresponding to the changes to the electronic record associated with the patient;

initiate, based at least in part on the notification request, one or more listeners configured to listen for particular medical messages on the messaging bus that identify the patient;

identify, using the one or more listeners, a medical message of the particular messages that comprises a change to the electronic record associated with the patient;

generate a notification that describes at least one aspect of the medical message based at least in part on the role of the user, the authorization code, and the notification method, the notification comprising the particular amount of information; and

transmit the notification to the user device using the notification method.

2. The system of claim 1, wherein the role of the user is one of a set of predefined roles.

3. The system of claim 1, wherein the notification method comprises at least one of a text message notification method, an email notification method, or application notification method.

4. The system of claim 1, wherein:

the notification method comprises a text message notification method; and

transmitting the notification to the user device using the notification method comprises;

providing the notification and an address of the user device to a messaging vendor, the messaging vendor configured to provide messages using a short message service (SMS), a multimedia message service (MMS), or an instant messaging service; and

instructing the message vendor to transmit the notification to the user device using at least one of the messaging services.

5. The system of claim 1, wherein:

the notification method comprises an application notification method; and

transmitting the notification to the user device using the notification method comprises transmitting the notification to a messaging application running on the user device, the messaging application configured to decrypt the notification.

6. The system of claim 1, wherein the changes to the electronic record comprise record entries of a medical professional corresponding to one or more decisions made or actions performed by the medical professional in relation to responding to current conditions pertaining to the patient.

7. The system of claim 1, wherein the one or more electronic devices generate the medical messages in response to one or more events occurring at the one or more electronic devices.

8. The system of claim 1, wherein the authorization request further comprises identifying information comprising one or more of a date of birth of the patient, a unique identifier of the patient, or nine-character government identifier of the patient.

9. The system of claim 1, wherein generating the notification is further based at least in part on one or more notification rules, the one or more notification rules identifying the role of the user and the notification method as conditions for selecting what information identifying the patient is included in the notification.

10. A computer-implemented method for initiating message listening and routing message content to authorized user devices, the method comprising:

receiving a notification request that identifies;

(i) a role of a user with respect to a patient, the user associated with the patient,

(ii) an identity of the user, and

(iii) a notification method, the notification request requesting that a user device associated with the user be provided, via the notification method, notifications corresponding to changes to an electronic record associated with the patient;

generating an authorization code based at least in part on the notification request, the authorization code uniquely identifying the patient and enabling the user to receive a particular amount of information corresponding to the changes to the electronic record associated with the patient;

receiving an authorization request from the user, the authorization request requesting authorization of the user to receive the notifications corresponding to the changes to the electronic record associated with the patient, the authorization request comprising the authorization code;

determining, based at least in part on the authorization request, that the user is authorized to receive the notifications corresponding to the changes to the electronic record associated with the patient;

initiating, based at least in part on the notification request, one or more listeners configured to listen for medical messages on a messaging bus that identify the patient, the medical messages generated by one or more electronic devices in network communication with the messaging bus;

identifying, using the one or more listeners, a medical message of the medical messages that comprises a change to the electronic record associated with the patient;

generating a notification that describes at least one aspect of the medical message based at least in part on the role of the user, the authorization code, and the notification method, the notification comprising the particular amount of information; and

transmitting the notification to the user device using the notification method.

11. The computer-implemented method of claim 10, wherein the role of the user is one of a set of predefined roles.

12. The computer-implemented method of claim 10, wherein the notification method comprises at least one of a text message notification method that allows a first amount of information identifying the patient, an email notification method that allows a second amount of information identifying the patient, or an application notification method that allows a third amount of information identifying the patient.

13. The computer-implemented method of claim 10, wherein:

the notification method comprises a text message notification method;

the notification is devoid of any information identifying the patient; and

transmitting the notification to the user device using the notification method comprises;

providing the notification and an address of the user device to a messaging vendor, the messaging vendor configured to provide messages using a short message service (SMS), a multimedia message service (MMS), or an instant messaging service; and

instructing the message vendor to transmit the notification to the user device using at least one of the messaging services.

14. The computer-implemented method of claim 10, wherein:

the notification method comprises an application notification method;

the notification comprises information of identifying the patient; and

transmitting the notification to the user device using the notification method comprises transmitting the notification to a messaging application running on the user device.

15. The computer-implemented method of claim 10, wherein the changes to the electronic record comprise record entries of a medical professional corresponding to one or more decisions made or actions performed by the medical professional in relation to responding to current conditions pertaining to the patient.

16. The computer-implemented method of claim 10, wherein the changes to the electronic record comprise an adjustment to a location of the patient in a medical facility, a medical order for the patient, or a change in a medical condition of the patient.

17. The computer-implemented method of claim 10, wherein the authorization request further comprises identifying information comprising one or more of a date of birth of the patient, a unique identifier of the patient, or nine-character government identifier of the patient.

18. The computer-implemented method of claim 10, wherein generating the notification is further based at least in part on one or more notification rules, the one or more notification rules identifying the role of the user and the notification method as conditions for selecting what information identifying the patient is included in the notification.

19. One or more computer-readable storage devices for storing computer-executable instructions that, when executed by one or more computer systems, configure the one or more computer systems to perform operations for initiating message listening and routing message content to authorized user devices, the operations comprising:

receiving a notification request that identifies;

(i) a role of a user with respect to a patient, the user associated with the patient,

(ii) an identity of the user, and

(iii) a notification method, the notification request requesting that a user device associated with the user be provided, via the notification method, with notifications corresponding to changes to an electronic record associated with the patient;

generating an authorization code based at least in part on the notification request, the authorization code uniquely identifying the patient and enabling the user to receive a particular amount of information corresponding to the changes to the electronic record associated with the patient

receiving an authorization request from the user, the authorization request requesting authorization of the user to receive the notifications corresponding to the changes to the electronic record associated with the patient, the authorization request comprising the authorization code;

determining, based at least in part on the authorization request, that the user is authorized to receive the notifications corresponding to the changes to the electronic record associated with the patient;

initiating, based at least in part on the notification request, one or more listeners configured to listen for medical messages on a messaging bus that identify the patient, the medical messages generated by one or more electronic devices in network communication with the messaging bus;

identifying, using the one or more listeners, a medical message of the medical messages that comprises a change to the electronic record associated with the patient;

generating a notification that describes at least one aspect of the medical message based at least in part on the role of the user, the authorization code, and the notification method, the notification comprising the particular amount of information; and

transmitting the notification to the user device using the notification method.

20. The one or more computer-readable storage devices of claim 19, wherein the role of the user is one of a set of predefined roles.