Secure access to healthcare information

• US 9,953,181 B2
• Filed: 03/31/2015
• Issued: 04/24/2018
• Est. Priority Date: 11/11/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dunaway, Fredrick T.
• Primary Examiner(s): Gelagay, Shewaye
• Assistant Examiner(s): Johnson, Carlton
• Application Number:
  US14/674,305
• Publication Number:
  US 20150205976A1
• Time in Patent Office: 1,120 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records

Abstract

A system and method for providing or exchanging healthcare information (e.g., medical information) to authorized users in a secure manner. The method is implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions operable to: assign identification information to a plurality of users and a plurality of items; associate the identification information of a user of the plurality of users with one or more items of the plurality of items; set-up security policies including predetermined locations, within predetermined stages within a sequence and during predetermined times; and provide the user access to the one or more items when there is a matching between the identification information of the user and the one or more items, and all of the security policies associated with the user and the one or more of the plurality of items are met.

Claims

1. A computer system for providing secure access to medical information, the system comprising:

a CPU, a computer readable memory, and a computer readable storage media;

program instructions to activate one or more RFID tags;

program instructions to record one or more locations of the one or more RFID tags when each of the one or more RFID tags enters or exits a respective location of the one or more locations;

program instructions to provide a user access to one or more items when there is a matching between an RFID tag of the user and one or more RFID tags associated with the one or more items, and all security policies associated with the user and the one or more items are met,

wherein the security polices include a predetermined authorized location, a predetermined authorized time, and a predetermined authorized stage within a sequence, and wherein the matching comprises determining that the RFID tag of the user and the one or more RFID tags of the one or more items are recorded at the predetermined authorized location at the predetermined authorized time, within the predetermined authorized stage; and

program instructions to manage the one or more items, including at least one of the group consisting of;

encrypting all digital media representative of the one or more items;

checking with a Security Manager if the user may access the one or more items;

recording all users that requested any of the one or more items and what items of the one or more items was requested;

destroying any of the one or more items per security policies; and

sending alerts when the security policies have been violated,

wherein the program instructions are stored on the computer readable storage medium for execution by the CPU via the computer readable memory.

2. The computer system of claim 1, wherein the one or more items is encrypted digital medical information.

3. The computer system of claim 2, wherein a client side system is authenticated prior to the providing the user access of the encrypted digital medical information, and the client side system decrypts the encrypted digital medical information.

4. The computer system of claim 1, further comprising program instructions to determine that the RFID tag of the user is not a duplicate or incorrect prior to providing the user access.

5. The computer system of claim 4, further comprising program instructions to send alerts when the RFID tag of the user is a duplicate or incorrect.

6. The computer system of claim 1, further comprising program instructions to determine that the one or more RFID tags are active and are in a designated location prior to the providing the user access to the one or more items.

7. The computer system of claim 1, further comprising program instructions to record a location of the RFID tag of the user and the one or more items or a system that displays digital media of the one or more items.

8. The computer system of claim 1, further comprising program instructions to provide authentication and authorization rights to all registered medical information that meet the security policies.

9. The computer system of claim 1, wherein the one or more items comprise non-digital media.

10. The computer system of claim 1, further comprising a client security module adapted to utilize a user'"'"'s picture to confirm the RFID tag of a user was assigned to a correct user.

11. The computer system of claim 1, wherein the providing access to the one or more items when the security policies are met includes matching identification information of the user in the security policies with identification information of the one or more items in the security policies.

12. A computer program product comprising a computer usable storage device having readable program code embodied in the storage device, the computer program product includes at least one component operable to:

activate one or more RFID tags;

record one or more locations of the one or more RFID tags when each of the one or more RFID tags enters or exits a respective location of the one or more locations;

determine whether the one or more RFID tags is a duplicate;

provide a user access to one or more items when the one or more RFID tags has no duplicate and there is a match between an RFID tag of a user and one or more RFID tags of the one or more items, and all of the security policies associated with the user and the one or more items are met,

wherein the match comprises determining that the RFID tag of the user and the one or more RFID tags of the one or more items are recorded at a predetermined location at a predetermined time within a predetermined stage within a sequence of different predetermined locations at predetermined times included in the security policies; and

manage the one or more items, including at least one of the group consisting of;

encrypting all digital media representative of the one or more items;

checking with a Security Manager if the user may access the one or more items;

recording all users that requested any of the one or more items and what items of the one or more items was requested;

destroying any of the one or more items per security policies; and

sending alerts when the security policies have been violated.

13. The computer program product of claim 12, wherein the one or more items comprise non-digital media.

14. The computer program product of claim 12, wherein the providing the user access to the one or more items when all of the securities policies associated with the user and the one or more items are met includes matching identification information of the user in the security policies with identification information of the one or more items in the security policies.

15. A computer system for providing secure access to medical information, the system comprising:

a CPU, a computer readable memory, and a computer readable storage media;

program instructions to activate one or more RFID tags;

program instructions to record one or more locations of the one or more RFID tags when each of the one or more RFID tags enters or exits a respective location of the one or more locations;

program instructions to provide a user access to one or more items when there is a matching between an RFID tag of the user and one or more RFID tags associated with the one or more items, and all security policies associated with the user and the one or more items are met,

wherein the security polices include a predetermined authorized location, a predetermined authorized time, and a predetermined authorized stage within a sequence, and wherein the matching comprises determining that the RFID tag of the user and the one or more RFID tags of the one or more items are recorded at the predetermined authorized location at the predetermined authorized time, within the predetermined authorized stage; and

a sequence manager configured to set the sequence of different predetermined locations at predetermined times included in the security policies, wherein the locations relate to pre-operative and post-operative locations within a medical facility, and

wherein the program instructions are stored on the computer readable storage medium for execution by the CPU via the computer readable memory.

16. The computer system of claim 15, further comprising a client security module adapted to utilize a user'"'"'s picture to confirm the RFID tag of a user was assigned to a correct user.

17. A computer program product comprising a computer usable storage device having readable program code embodied in the storage device, the computer program product includes at least one component operable to:

activate one or more RFID tags;

record one or more locations of the one or more RFID tags when each of the one or more RFID tags enters or exits a respective location of the one or more locations;

determine whether the one or more RFID tags is a duplicate;

provide a user access to one or more items when the one or more RFID tags has no duplicate and there is a match between an RFID tag of a user and one or more RFID tags of the one or more items, and all of the security policies associated with the user and the one or more items are met,

wherein the match comprises determining that the RFID tag of the user and the one or more RFID tags of the one or more items are recorded at a predetermined location at a predetermined time within a predetermined stage within a sequence of different predetermined locations at predetermined times included in the security policies; and

set the sequence of different predetermined locations at predetermined times included in the security policies, wherein the locations relate to pre-operative and post-operative locations within a medical facility.