Trust based access to records via encrypted protocol communications with authentication system

A method for authorizing and providing selective and secured access to sensitive medical information of a patient according to one or more trusted relationships, the sensitive medical information spread across a plurality of independently operated servers, the method being implemented by a system of one or more computer systems, and the method comprising:

• receiving, from a requesting device, a request for access to at least a portion of the patient's health record from an outside entity, the request indicating medical data associated with the patient's health record;
• determining authentication information associated with the outside entity;
• determining whether the outside entity is authorized to access the requested medical data by determining if a trust relationship has been established between the outside entity and the patient, the trust relationship established by an action of the patient or a patient's representative;
• and
• establishing connections between the requesting device and at least a subset of the plurality of independently operated servers which store portions of the requested medical data, based upon a positive determination, wherein the respective portions of the medical data are routed to the requesting device via the established connections as encrypted information for decryption on the requesting device,
• wherein the encrypted information is configured to be decrypted based on one or more constraints comprising a particular identity of an outside entity authorized to access the patient's health record, one or more devices authorized to access the patient's health record, or time information specifying a time period during which the patient's health record can be accessed.

A method of routing secure medical information between requesting entities and systems storing medical information, the medical information being associated with patients who trusted the requesting entities to access the medical information, and access to the medical information being based on satisfaction of constraints, wherein the method comprises:

• by a system of one or more computers,
• receiving a request, from a user device of an outside entity, for access to medical information associated with a particular patient, the outside entity being indicated as trusted by the particular patient;
• and
• establishing connections between the user device and one or more a plurality of systems storing portions of the medical information, the portions of the medical information being routed, by the system, to the user device via the established connections as encrypted information over an application-layer protocol, and the application layer-protocol specifying constraints associated with decryption of the portions of the medical information, the constraints comprising one or more of (1) a particular identity of a user authorized to access the portions, (2) one or more user devices authorized to access received portions, (3) time information specifying a time period during which the portions can be accessed, wherein the user device executes an application configured to enforce the application layer-protocol constraints.