Method of managing and controlling access to personal information

• US 6,073,106 A
• Filed: 10/30/1998
• Issued: 06/06/2000
• Est. Priority Date: 10/30/1998
• Status: Expired due to Term

• Current Assignee: Wellmed Medical Management Incorporated (UnitedHealth Group Incorporated)
• Original Assignee: Nehdc Incorporated
• Inventors: Rozen, Michael J., Chesko, Karen L., Doherty, Connie B.
• Primary Examiner(s): MacDonald, Allen R.
• Assistant Examiner(s): Kazimi, Hani M.
• Application Number:
  US09/183,687
• Time in Patent Office: 585 Days
• Field of Search: 705/2, 705/3, 705/51, 705/54, 707/9, 707/104, 709/229, 713/202
• US Class Current: 705/3
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: G16H 20/10 relating to drugs or medications, e.g. for ensuring correct administration to patients
• CPC Class Codes: G16H 50/20 for computer-aided diagnosis, e.g. based on medical expert systems
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

Via Internet communications or via phone/fax/mail, a participant is prompted to provide a constant identifier and a selected password. Emergency and confidential categories of medical information are identified, and the participant is prompted to provide personal information in each of the categories and a different personal identification number (E-PIN, C-PIN) for each category. The participant is also prompted to provide an instruction to disclose or to not disclose the personal information in the emergency category in the event a requester of the information is an emergency medical facility and is unable to provide the participant'"'"'s E-PIN. Alteration of any of the participant'"'"'s medical information is enabled upon presentation of the participant'"'"'s identifier and password by the requester. The emergency information or the confidential information is disclosed upon presentation of the participant'"'"'s identifier and E-PIN or C-PIN. In addition, the emergency information is disclosed to an emergency medical facility verified as such by a service provider in the event the participant has provided an instruction to disclose the emergency information. Storage and access to health related documents such as healthcare power of attorney, consent for treatment, and eyeglass prescription is also provided.

Claims

1. A method of managing personal information concerning a participant and of controlling, in conjunction with a service provider, access to said personal information by a requester, said method comprising the steps of:

prompting the participant to provide a constant identifier and a selected password;

identifying a first category and a second category of the personal information;

prompting the participant to provide personal information in each of the categories;

prompting the participant to provide a first personal identification number (PIN-1) for the first category and a second personal identification number (PIN-2) for the second category;

prompting the participant to provide an instruction to disclose or to not disclose the personal information in the first category in the event the requester is one of a defined group and is unable to provide the PIN-1 for said first category;

storing the identifier, the password and the personal information in the first and second categories in a data file;

storing the PIN-1 and the instruction to disclose or to not disclose in the data file in association with the first category of personal information;

storing the PIN-2 in the data file in association with the second category of personal information;

enabling alteration of any of the personal information in the data file upon presentation of the identifier and the password by the requester;

disclosing the personal information in the first category of the data file upon presentation of the identifier and the PIN-1 by the requester;

disclosing the personal information in the second category of the data file upon presentation of the identifier and the PIN-2 by the requester; and

disclosing the personal information in the first category having an instruction to disclose associated therewith in the event the requester is unable to provide the PIN-1 for said first category and the service provider determines that said requester is one of the defined group.

2. The method according to claim 1, wherein the step of disclosing the personal information in the first category having an instruction to disclose associated therewith further comprises disclosing said information upon presentation of an authorization code by the service provider.

3. The method according to claim 1, wherein each of the first and second categories comprises a plurality of items.

4. The method according to claim 3, wherein the first category comprises items of potential significance in a medical emergency.

5. The method according to claim 4, wherein the defined group comprises emergency medical facilities.

6. The method according to claim 4, wherein the first category comprises a plurality of items in a group comprising the participant'"'"'s emergency contact person, current diagnosis, primary insurance, physicians, allergies, current medications, immunizations, illnesses, hospitalizations, surgeries, and medical implants.

7. The method according to claim 3, wherein the second category comprises items of a particularly sensitive or potentially stigmatizing nature.

8. The method according to claim 7, wherein the second category comprises a plurality of items in a group comprising the participant'"'"'s mental health history, mental health hospitalizations /drug or alcohol rehab programs, psychiatric medications, treating practitioner, blood borne contagious diseases, sexually transmitted diseases, maternal/gynecologic history, and male urinary/genital/surgical procedures.

9. The method according to claim 1, which further comprises the steps of:

prompting the participant to provide one or more documents containing personal information not included in the first or second categories;

prompting the participant to provide an indication for each of the documents as to whether the participant desires the service provider to release said document to the requester in a specified circumstance;

storing the indication in association with the document in the data file; and

disclosing to the requester in the specified circumstance the document having the indication to release associated therewith.

10. The method according to claim 9, wherein the participant is prompted to provide one or more documents containing health related information or instructions relating to medical treatment.

11. The method according to claim 10, wherein the specified circumstance for release of the document comprises a medical emergency.

12. The method according to claim 1 which further comprises the step of providing an internet communications site for accomplishing the other steps of said method.

13. The method according to claim 1, which further comprises the steps of

providing one or more paper forms for identifying the first and second categories of the personal information, for prompting the participant to provide the personal information in each of said categories, for prompting the participant to provide the instruction to disclose or to not disclose, for enabling alteration of any of the personal information;

and for disclosing the personal information in the first or second categories; and

providing automated telephone communications for prompting the participant to provide the constant identifier and the selected password, for prompting the participant to provide the PIN-1 and the PIN-2, for presentation of the identifier and password by the requester, for presentation of the identifier and PIN-1 by the requester, for presentation of the identifier and PIN-2 by the requester and for connecting the requester to a representative of the service provider for voice communications.

14. The method according to claim 13, which further comprises the step of prompting the requester via the automated telephone communications to provide a fax number or an E-Mail address and wherein the step of disclosing the personal information in the first category comprises faxing or E-Mailing the personal information in the first category upon presentation of the identifier, the PIN-1 and the fax number or E-Mail address by the requester and the step of disclosing the personal information in the second category comprises faxing or E-Mailing the personal information in the second category upon presentation of the identifier, the PIN-2and the fax number or E-Mail address by the requester.