Electronic health record web-based platform

• US 9,760,962 B2
• Filed: 12/12/2011
• Issued: 09/12/2017
• Est. Priority Date: 12/10/2010
• Status: Active Grant

• Current Assignee: Secretarius LLC
• Original Assignee: Everything Success IP LLC
• Inventors: Lese, Gail B.
• Primary Examiner(s): Lam, Eliza
• Application Number:
  US13/316,778
• Publication Number:
  US 20120150564A1
• Time in Patent Office: 2,101 Days
• Field of Search: 705 2- 3
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/67 for remote operation
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A server for facilitating an electronic health record system. Each patient has a unique smart card. A processor: associates a security token with a patient; generates a one-time-use security code for storage based upon a security token; provides the one-time-use security code to the patient for storage on the smart card; applies two-factor authentication with the one-time-use security code for each login to a personal health record website presented by the processor; imports and exports the electronic health records associated with the patient based upon a request from the patient received through the personal health record website; generates a new one-time-use security code after each patient session based upon the respective security token; and provides the new one-time-use security code to the patient for storage on the smart card so that the personal health record website is accessed therewith.

Claims

1. An electronic health record system for providing secure patient management of electronic health records, the system comprising:

a smart card associated with a first patient of a plurality of patients, the smart card being configured to store a security token and a one-time-use security code thereon for use in securely accessing an electronic health record associated with the first patient and, upon an end of a patient session on a personal health record website, replace the one-time use security code with a new one-time-use security code;

a server configured to communicate with a client via a distributed computing network, thereby providing the first patient with a portal to access a personal health record website hosted by the server, the server including;

(a) a memory storing an instruction set and electronic health records related to the plurality of patients; and

(b) a processor for running the instruction set, the processor being in communication with the memory and the distributed computing network, wherein the processor is operative to;

(i) associate the security token with the first patient;

(ii) generate the one-time-use security code for storage based upon the security token;

(iii) provide the one-time-use security code to the smart card of the first patient via a read/write device coupled to the client and configured to write information to the smart card;

(iv) apply two-factor authentication with the one-time-use security code for each login to the personal health record website;

(v) display to the first patient, via the client, the electronic health record associated with the first patient based upon a request from the first patient received through the personal health record web site;

(vi) receive additional medical data relating to the first patient via the client;

(vii) update the electronic health record associated with the first patient with the additional medical data relating to the first patient;

(viii) generate the new one-time-use security code after each session on the personal health record website by the first patient based upon the security token; and

(ix) provide the new one-time-use security code to the the smart card via the read/write device coupled to the client for storage onto the smart card to enable subsequent access to the personal health record website by the first patient using the smart card.

2. The system of claim 1, wherein the client is selected from the group consisting of a personal computer, a computer workstation, a laptop computer, a server computer, a mainframe computer, a handheld tablet computer, a personal digital assistant, a cellular telephone, and combinations thereof.

3. The system of claim 1, wherein the smart card is further configured to store emergency contact information for the first patient.

4. The system of claim 1, wherein the first patient is selected from the group consisting of a person, an animal, and a legal entity such as a corporation, a partnership, and a nonprofit organization.

5. The system of claim 1, wherein the request from the first patient is based on a proxy request for the first patient from a caregiver.

6. The system of claim 1, wherein the processor is further operative to populate the first patient'"'"'s electronic health record with data received from multiple sources including the first patient and a caregiver of the first patient.

7. The system of claim 1, wherein the of client is a personal mobile device.

8. The system of claim 1, wherein the additional medical data relating to the first patient comprises legacy medical information provided by the first patient.

9. The system of claim 8, wherein the legacy medical information provided by the first patient includes at least one of diagnostic images, test results, lab results, and operative reports.

10. The system of claim 1, wherein a timeline of major medical events is generated according to the updated electronic health record comprising the additional medical data relating to the first patient.

11. The system of claim 1, wherein the processor is further operative to (i) receive a request from the first patient to export a health summary and (ii) generate the requested health summary for export.

12. The system of claim 11, wherein the health summary is generated from the updated electronic health record associated with the first patient.

19. The system of claim 1, wherein the processor is further operative to display, via the personal health record website, a timeline of a plurality of medical events relating to the first patient, the plurality of medical events based at least in part on the updated electronic health record associated with the first patient.

20. The system of claim 1, wherein the processor is further operative to receive a request from the first patient, via the personal health record website, to send the updated electronic health record associated with the first patient to a medical provider.

13. An electronic health record system for providing secure patient management of electronic health records, the system comprising:

a mobile device;

a smart card associated with a first patient of a plurality of patients, the smart card being configured to store a security token and a one-time-use security code thereon for use in securely accessing an electronic health record associated with the first patient and, upon an end of a patient session on a personal health record website, replace the one-time use security code with a new one-time-use security code;

a database storing electronic health records related to the plurality of patients;

a server configured to communicate with the database and the mobile device via a distributed computing network, thereby providing the first patient with a portal to access a personal health record website hosted by the server, the server including;

(a) a memory storing an instruction set; and

(b) a processor for running the instruction set, the processor being in communication with the memory and the distributed computing network, wherein the processor is operative to;

(i) associate the security token with the first patient;

(ii) generate the one-time-use security code for storage based upon the security token;

(iii) provide the one-time-use security code to the smart card of the first patient via a read/write device coupled to the mobile device and configured to write information to the smart card;

(iv) apply two-factor authentication with the one-time-use security code for each login to the personal health record website;

(v) display, on the mobile device, the electronic health record associated with the first patient based upon a request from the first patient received through the personal health record website;

(vi) generate the new one-time-use security code after each session on the personal health record website by the first patient based upon the security token; and

(vii) provide the new one-time-use security code to the smart card via the read/write device coupled to the mobile device for storage onto the smart card to enable subsequent access to the personal health record website by the first patient using the smart card.

14. The system of claim 13, wherein the processor is further operative to (i) receive additional medical data relating to the first patient via the mobile device, and (ii) update the electronic health record associated with the first patient with the additional medical data relating to the first patient.

15. The system of claim 14, wherein the additional medical data relating to the first patient comprises legacy medical information provided by the first patient.

16. The system of claim 15, wherein the legacy medical information provided by the first patient includes at least one of diagnostic images, test results, lab results, and operative reports.

17. The system of claim 14, wherein a timeline of major medical events is generated according to the updated electronic health record comprising the additional medical data relating to the first patient.

18. The system of claim 14, wherein the processor is further operative to (i) receive a request from the first patient to export a health summary and (ii) generate the requested health summary for export.