METHOD FOR SECURE TRANSFER OF MEDICAL DATA TO A MOBILE UNIT/TERMINAL

• US 20090222898A1
• Filed: 12/21/2006
• Published: 09/03/2009
• Est. Priority Date: 12/22/2005
• Status: Active Grant

• Current Assignee: World Medical Center Holding SA
• Original Assignee: World Medical Center Holding SA
• Inventors: Veidung, Arne
• Granted Patent: US 8,826,454 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: G16H 15/00 ICT specially adapted for medical reports, e.g. generation or transmission thereof
• CPC Class Codes: G16H 40/67 for remote operation

Abstract

A method is described for secure transfer of medical data to a mobile unit/terminal, where encoded medical data from a patient'"'"'s regular doctor are made available via a central server in a network. The method comprises the following steps: to order transfer of encoded information to the mobile unit/terminal, in that a request is sent to the central server; to generate encoded information containing medical data in the central server; to transfer information in encrypted and encoded format from the server to the mobile unit/terminal, after the user has authenticated himself; to store and protect the encoded information in the mobile unit/terminal; to transform the encoded information to a readable format in that the user authenticates himself with a personal code that is sent from the mobile unit/terminal to the server, whereupon the ID is verified in the server, and that encoded information is sent to the server for decoding; and to transfer from the server a picture in clear text to the mobile unit/terminal.

Claims

1. Method for secure transfer of medical data to a mobile unit/terminal, where encoded medical data from a patient'"'"'s regular doctor are made available via a central server in a network;

characterised in that it encompasses the following steps;

a) to order transfer of encoded information to the mobile unit/terminal, in that a request is sent to the central server,

b) to generate encoded information containing medical data in the central server,

c) to transfer information in encrypted and encoded format from the server to the mobile unit/terminal, after the user has authenticated himself,

d) to store and protect the encoded information in the mobile unit/terminal,

e) to transform the encoded information to a readable format in that the user authenticates himself using a personal code that is sent from the mobile unit/terminal to the server, whereupon the user ID is verified in the server, and that encoded information is sent to the server for decoding, and

f) to transfer from the server a picture in clear text to the mobile unit.

2. Method according to claim 1,

characterised in that in step a) the user states a password connected to his ID before encoded information is generated.

3. Method according to claim 1,

characterised in that after encoded information is generated in step b), a notice is sent to said user'"'"'s mobile unit/terminal that medical data are available, and that the user replies to said notice and in step c) provides his ID and password for authentication.

4. Method according to claim 3,

characterised in that after authentication is approved in the server in step c), and encoded information is transferred to the mobile unit, the user protects transferred data by inserting a personal code.

5. Method according to claim 1,

characterised in that to get the picture that is transferred to the mobile unit in step f), the user registers correct ID and personal code.

6. Method according to claim 1,

characterised in that the encoded information that is transferred to the user also contains a program code that can be used.

7. Method according to claim 6,

characterised in that the encoding is based on the ICD-10 codes of the WHO and the international code system for medicines ATC.

8. Method according to claim 1,

characterised in that encrypting of the type SSL128 is used for the transfer of data.

9. Method according to claim 1,

characterised in that ordering of encoded information to the mobile unit/terminal is carried out in connection with ordering of a medical card.

10. Method according to claim 1,

characterised in that telephones that can use MIDP 2.0 are used.