Health kiosk

• US 10,692,596 B2
• Filed: 12/21/2018
• Issued: 06/23/2020
• Est. Priority Date: 08/30/2010
• Status: Active Grant

• Current Assignee: Mobile NewMedia Ltd.
• Original Assignee: Mobile NewMedia Ltd.
• Inventors: Randhawa, Tejinder S., Richards, John
• Primary Examiner(s): Elfervig, Taylor A
• Application Number:
  US16/231,260
• Publication Number:
  US 20190252060A1
• Time in Patent Office: 550 Days
• Field of Search: 709219
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 30/20 for handling medical images, e.g. DICOM, HL7 or PACS
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 41/0253 using browsers or web-pages for accessing management information
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

A health kiosk system is provided. A kiosk has a computing unit and a physiological measurement apparatus connected to the computing unit. A Web browser of the computing unit transmits information corresponding to the physiological measurement apparatus and a request for a resource to a Web server. In response to receiving the request, the Web server transmits to the kiosk profile-specific Web content responsive to the request and specific to the received profile information. The information corresponding to the physiological measurement apparatus may be transmitted in a URL or HTTP Cookie of an HTTP request.

Claims

1. A method of digitally signing a physiological measurement of a health kiosk comprising a computing unit and at least one physiological measurement apparatus, the method comprising:

transmitting, from a Web browser at the kiosk to a server, profile information of the kiosk in the form of an HTTP request comprising an HTTP cookie stored in a memory of the computing unit, the profile information comprising a configuration selection from among a plurality of possible configurations of the at least one physiological measurement apparatus, the at least one physiological measurement apparatus operatively connectable to a human user for measuring a physiological characteristic of the user and the at least one physiological measurement apparatus configurable to measure and output one or more physiological measurements of the physiological characteristic based on the configuration selection;

transmitting from the kiosk to the server a request for a resource; and

in response to receiving the profile information and the request;

generating dynamic, profile-specific, client-side executable Web content configured to run on the Web browser, responsive to the request and based at least in part on the profile information, the dynamic, profile-specific, client-side executable Web content comprising;

a first and a second display element,

the first display element, when rendered by the Web browser by executing the dynamic, profile-specific, client-side executable Web content, provides a user interface based on the configuration selection for user control, locally at the kiosk via the Web browser and the user interface, of the at least one physiological measurement apparatus to measure and output the one or more physiological characteristic, and

the second display element, when rendered by the Web browser, provides a data display element for displaying data output by the at least one physiological measurement apparatus locally at the kiosk via the Web browser and the user interface;

transmitting from the server to the kiosk the dynamic, profile-specific, client-side executable Web content;

rendering, by the Web browser, the dynamic, profile-specific, client-side executable Web content on a display at the kiosk by executing the dynamic, profile-specific, client-side executable Web content;

receiving, by the user interface of the first display element, a user identifier and a password from the user;

generating, by the kiosk, a password hash from the password;

transmitting, by the kiosk, the user identifier and the password hash to the server;

verifying, by the server, the password hash by comparing the password hash to a stored password hash associated with the user identifier;

transmitting, by the server, an encrypted private key associated with the user identifier to the kiosk;

generating, by the kiosk, a secret key from the password;

decrypting, by the kiosk, the encrypted private key with the secret key to generate a decrypted private key;

measuring the one or more physiological characteristic with the at least one physiological measurement apparatus of the kiosk;

generating, by the kiosk, a first verification hash of the physiological measurement;

encrypting, by the kiosk, the first verification hash with the decrypted private key to generate a first encrypted verification hash; and

transmitting, by the kiosk, the physiological measurement and the first encrypted verification hash to the server.

2. The method of claim 1, comprising:

receiving, by the kiosk, the physiological measurement, the first encrypted verification hash, and a public key paired with the decrypted private key from the server;

decrypting, by the kiosk, the first encrypted verification hash with the public key to generate a first decrypted verification hash;

generating, by the kiosk, a second verification hash from the physiological measurement;

encrypting, by the kiosk, the second verification hash with the decrypted private key to generate a second encrypted verification hash;

decrypting, by the kiosk, the second encrypted verification hash with the public key to generate a second decrypted verification hash;

verifying, by the kiosk, the first decrypted verification hash by comparing the first decrypted verification hash to the second decrypted verification hash; and

displaying, by the second display element, the physiological measurement.

3. The method of claim 2, comprising:

generating, by the kiosk, the decrypted private key and the public key;

encrypting, by the kiosk, the decrypted private key with the secret key to generate the encrypted private key;

receiving, by the user interface of the first display element, user information from the user;

encrypting, by the kiosk, the user information with the secret key to generate encrypted user information;

transmitting, by the kiosk, the public key, encrypted user information and the encrypted private key to the server; and

storing, by the server, the public key, the encrypted user information, and the encrypted private key.

4. The method of claim 3 wherein the user information comprises one or more of:

a user name, contact information, an age, and a gender.

5. The method of claim 2, comprising:

generating, by the kiosk, corroborative information associated with the physiological measurement;

generating, by the kiosk, a first corroborative information hash from the corroborative information;

encrypting, by the kiosk, the first corroborative information hash with the decrypted private key to generate a first encrypted corroborative information hash;

transmitting, by the kiosk, the corroborative information and the first encrypted corroborative information hash to the server; and

storing, by the server, the corroborative information and the first encrypted corroborative information hash.

6. The method of claim 5, comprising:

transmitting, by the server, the corroborative information and the first encrypted corroborative information hash to the kiosk;

decrypting, by the kiosk, the first encrypted corroborative information hash with the public key to generate a first decrypted corroborative information hash;

generating, by the kiosk, a second verification hash from the corroborative information;

encrypting, by the kiosk, the second verification hash with the decrypted private key to generate a second encrypted verification hash;

decrypting, by the kiosk, the second encrypted verification hash with the public key to generate a second decrypted verification hash;

verifying, by the kiosk, the first decrypted verification hash by comparing the first decrypted verification hash to the second decrypted verification hash; and

displaying, by the second display element, the corroborative information.

7. The method of claim 6 wherein the corroborative information comprises one or more of:

a kiosk identifier identifying the kiosk;

a measurement apparatus identifier identifying the physiological measurement apparatus;

a timestamp of when the physiological measurement was taken by the physiological measurement apparatus;

a timestamp of when the user logged into the kiosk; and

a timestamp of when the user logged out of the kiosk.

8. The method of claim 1, comprising:

encrypting, by the kiosk, the physiological measurement with the decrypted private key to generate an encrypted physiological measurement; and

wherein transmitting, by the kiosk, the physiological measurement to the server comprises transmitting the encrypted physiological measurement to the server.

9. The method of claim 8, comprising:

transmitting, by the server, a public key paired with the decrypted private key, the encrypted physiological measurement and the first encrypted verification hash to the kiosk;

decrypting, by the kiosk, the encrypted physiological measurement with the public key to generate a decrypted physiological measurement;

decrypting, by the kiosk, the first encrypted verification hash with the public key to generate a first decrypted verification hash;

generating, by the kiosk, a second verification hash from the decrypted physiological measurement;

encrypting, by the kiosk, the second verification hash with the decrypted private key to generate a second encrypted verification hash;

decrypting, by the kiosk, the second encrypted verification hash with the public key to generate a second decrypted verification hash; and

verifying, by the kiosk, the first decrypted verification hash by comparing the first decrypted verification hash to the second decrypted verification hash.

10. The method of claim 1 wherein the user identifier comprises an identifier associated with a user name, a barcode, an RFID, or a biometric measurement.

11. A health kiosk system comprising:

a server having a web server; and

a kiosk communicatively coupled to the server, the kiosk comprising;

a computing unit;

a web browser;

a display; and

at least one physiological measurement apparatus connected to the computing unit and operatively connectable to a human user for measuring a physiological characteristic of the user;

wherein the computing unit is configured to;

transmit profile information of the kiosk to the server in the form of an HTTP request comprising an HTTP cookie stored in a memory of the computing unit, the profile information comprising a configuration selection from among a plurality of possible configurations of the at least one physiological measurement apparatus, the at least one physiological measurement apparatus configurable to measure and output one or more physiological measurements of the physiological characteristic based on the configuration selection;

transmit a request for a resource to the server, and

wherein the server is configured to, in response to receiving the profile information and the request;

generate dynamic, profile-specific, client-side executable Web content configured to run on the Web browser, responsive to the request and based at least in part on the configuration selection, the dynamic, profile-specific, client-side executable Web content comprising;

a first and a second display element, the first display element, when rendered by the Web browser by executing the dynamic, profile-specific, client-side executable Web content, provides a user interface based on the configuration selection for user control, locally at the kiosk via the Web browser and the user interface, of the at least one physiological measurement apparatus to measure and output the one or more physiological measurements of the physiological characteristic, and the second display element when rendered by the Web browser, provides a data display element for displaying data output by the at least one physiological measurement apparatus locally at the kiosk via the Web browser and the user interface; and

transmit to the kiosk the dynamic, profile-specific, client-side executable Web content;

wherein the computing unit is operable to cause the Web browser to execute the dynamic, profile-specific, client-side executable Web content and to thereby cause the display to display the first and second display elements including the user interface based on the configuration selection and the data output by the at least one physiological measurement apparatus to thereby permit user control, locally at the kiosk via the Web browser and the user interface, of the at least one physiological measurement apparatus in accordance with the configuration selection; and

wherein the computing unit is further configured to;

receive by the user interface a user identifier and a password from the user;

generate a password hash from the password;

transmit the user identifier and the password hash to the server;

receive from the server an encrypted private key associated with the user identifier;

generate a secret key from the password;

decrypt the encrypted private key with the secret key to generate a decrypted private key;

measure the one or more physiological characteristic with the at least one physiological measurement apparatus;

generate a first verification hash of the physiological measurement;

encrypt the first verification hash with the decrypted private key to generate a first encrypted verification hash; and

transmit the physiological measurement and the first encrypted verification hash to the server.

12. The system of claim 11, wherein the computing unit is further configured to:

receive the physiological measurement, the first encrypted verification hash, and a public key paired with the decrypted private key from the server;

decrypt the first encrypted verification hash with the public key to generate a first decrypted verification hash;

generate a second verification hash from the physiological measurement;

encrypt the second verification hash with the decrypted private key to generate a second encrypted verification hash;

decrypt the second encrypted verification hash with the public key to generate a second decrypted verification hash;

verify the first decrypted verification hash by comparing the first decrypted verification hash to the second decrypted verification hash; and

display the physiological measurement via the second display element.

13. The system of claim 12, wherein the computing unit is further configured to:

generate the decrypted private key and the public key;

encrypt the decrypted private key with the secret key to generate the encrypted private key;

receive, by the user interface, user information from the user;

encrypt the user information with the secret key to generate encrypted user information; and

transmit the public key, encrypted user information and the encrypted private key to the server.

14. The system of claim 13, wherein the computing unit is further configured to:

encrypt the physiological measurement with the decrypted private key to generate an encrypted physiological measurement; and

wherein transmitting the physiological measurement to the server comprises transmitting the encrypted physiological measurement to the server.

15. The system of claim 14, wherein the computing unit is further configured to:

receive from the server a public key paired with the decrypted private key, the encrypted physiological measurement and the first encrypted verification hash;

decrypt the encrypted physiological measurement with the public key to generate a decrypted physiological measurement;

decrypt the first encrypted verification hash with the public key to generate a first decrypted verification hash;

generate a second verification hash from the decrypted physiological measurement;

encrypt the second verification hash with the decrypted private key to generate a second encrypted verification hash;

decrypt the second encrypted verification hash with the public key to generate a second decrypted verification hash; and

verify the first decrypted verification hash by comparing the first decrypted verification hash to the second decrypted verification hash.

16. The system of claim 13 wherein the user information comprises one or more of:

a user name, contact information, an age, and a gender.

17. The system of claim 12, wherein the computing unit is further configured to:

generate corroborative information associated with the physiological measurement;

generate a first corroborative information hash from the corroborative information;

encrypt the first corroborative information hash with the decrypted private key to generate a first encrypted corroborative information hash; and

transmit the first encrypted corroborative information hash and the corroborative information to the server.

18. The system of claim 17, wherein the computing unit is further configured to:

receive from the server the first encrypted corroborative information hash and the corroborative information;

decrypt the first encrypted corroborative information hash with the public key to generate a first decrypted corroborative information hash;

generate a second verification hash from the corroborative information;

encrypt the second verification hash with the decrypted private key to generate a second encrypted verification hash;

decrypt the second encrypted verification hash with the public key to generate a second decrypted verification hash;

verify the first decrypted verification hash by comparing the first decrypted verification hash to the second decrypted verification hash; and

display the corroborative information via the second display element.

19. The system of claim 18 wherein the corroborative information comprises one or more of:

a kiosk identifier identifying the kiosk;

a measurement apparatus identifier identifying the physiological measurement apparatus;

a timestamp of when the physiological measurement was taken by the physiological measurement apparatus;

a timestamp of when the user logged into the kiosk; and

a timestamp of when the user logged out of the kiosk.

20. The system of claim 11 wherein the user identifier uniquely identifies a user name, a barcode, an RFID, or a biometric measurement.