Secure Personal Medical Process

• US 20100235924A1
• Filed: 03/26/2010
• Published: 09/16/2010
• Est. Priority Date: 01/20/2006
• Status: Abandoned Application

• Current Assignee: Keyfocus Incorporated
• Original Assignee: Keyfocus Incorporated
• Inventors: Bulot, Earl J., Scheidt, Edward M.
• Application Number:
  US12/748,210
• Publication Number:
  US 20100235924A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A process of accessing and controlling medical information data by a Secure Process that includes two schemas—Medical Access Permission Schema (MAPS) information access system and encryption schema. In particular, the invention relates to a secure process for creating an access control and authentication methodology that identifies specific roles found in the medical field, applies these roles to content attributes, and binds those attributes to secret keys associated with an encryption schema.

Claims

1. A process of accessing and controlling medical information data enforced by an encryption process, wherein the encryption process includes controlling creation of and access to sensitive data stored on a machine-readable medium, according to a medical access permission schema and an associated encryption schema.

2. The process of claim 1, wherein the medical access encryption schema includes medical roles and associated content attributes that are unique numbers assigned to the roles.

3. The process of claim 2, wherein the medical roles are selected from the group of roles consisting of patient, doctor, hospital, and lab.

4. The process of claim 2, wherein the medical access encryption schema includes

assigning a first permission to a patient, wherein the first permission cannot by itself be used to access the sensitive data, and

assigning a second permission to a data viewing device, wherein a combination of the first and second permissions provides access on the data viewing device to data associated with the patient.

5. The process of claim 4, further comprising storing the first access on a portable memory device.

6. The process of claim 5, wherein the portable memory device is a token.

7. The process of claim 4, further comprising storing the second access on the data viewing device.

8. The process of claim 4, wherein the medical access encryption schema includes assigning the first access to a doctor'"'"'s office.

9. The process of claim 8, wherein a combination of the first access and the second access provides access to a doctor at the doctor'"'"'s office to data associated with the patient.

10. The process of claim 4, wherein the medical access encryption schema includes assigning the first access to a lab.

11. The process of claim 10, wherein a combination of the first access and the second access provides access to the lab to data associated with the patient.

12. The process of claim 4, wherein the medical access encryption schema includes assigning the first access to a pharmacy.

13. The process of claim 12, wherein a combination of the first access and the second access provides access to a pharmacist at the pharmacy to data associated with the patient.

14. The process of claim 1, wherein the encryption schema binds a content attribute to a secret encryption key.

15. The process of claim 1, wherein the encryption process is compliant with HIPAA regulations.

16. The process of claim 1, wherein the encryption process is performed on a server connected to at least one node.