US 10,949,558 B2Granted

Secure access to healthcare information

AssigneeInternational Business Machines Corporation

InventorFredrick T. Dunaway

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method for providing or exchanging healthcare information (e.g., medical information) to authorized users in a secure manner. The method is implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions operable to: assign identification information to a plurality of users and a plurality of items; associate the identification information of a user of the plurality of users with one or more items of the plurality of items; set-up security policies including predetermined locations, within predetermined stages within a sequence and during predetermined times; and provide the user access to the one or more items when there is a matching between the identification information of the user and the one or more items, and all of the security policies associated with the user and the one or more of the plurality of items are met.

Claims20

Dependent claims

A computer system for providing secure access to medical information, the system comprising:

a CPU, a computer readable memory, and a computer readable storage media;
program instructions to activate one or more RFID tags;
program instructions to record one or more locations of the one or more RFID tags when each of the one or more RFID tags enters and exits a respective location of the one or more locations;
program instructions to determine whether one or more items include medical information and RFID information;
program instructions to encrypt and store the medical information and RFID information in response to determining that the one or more items include medical information and RFID information;
program instructions to destroy the encrypted and stored medical information and RFID information after a predetermined time period has elapsed;
program instructions to provide a user access to the one or more items when there is a matching between an RFID tag of the user and one or more RFID tags associated with the one or more items, and all security policies associated with the user and the one or more items are met, wherein:
the security polices include a predetermined authorized location, a predetermined authorized time, and a predetermined authorized stage within a sequence of events for authorized persons to view information from the one or more items in a context as determined by a combination of the predetermined authorized location and the sequence of events, and
the matching comprises determining that the RFID tag of the user and the one or more RFID tags of the one or more items are recorded at the predetermined authorized location at the predetermined authorized time, within the predetermined authorized stage within the sequence of events, and
program instructions to lock the one or more items in response to the one or more RFID tags associated with the one or more items showing up in two different locations at a same time;
program instructions to determine whether the RFID tag of the user is a duplicate RFID tag;
program instructions to disable the RFID tag of the user in response to determining that the RFID tag of the user is the duplicate RFID tag;
and
program instructions to record a plurality of transactions associated with the user access being provided to the one or more items, the transactions including a person who obtained medical information at a location, a time associated with the obtained medical information at the location, and the sequence of events associated with the obtained medical information at the location,
wherein the program instructions to provide the user access to the one or more items further comprises decrypting the encrypted and stored medical information and RFID information, and
wherein the program instructions are stored on the computer readable storage media for execution by the CPU via the computer readable memory.

13 more elements

A computer program product comprising a computer usable storage device having readable program code embodied in the storage device, the computer program product includes at least one component operable to:

activate one or more RFID tags;
record one or more locations of the one or more RFID tags when each of the one or more RFID tags enters and exits a respective location of the one or more locations;
determine whether the one or more RFID tags is a duplicate by using a look up table in the storage device;
verify an integrity of one or more items by comparing hash values associated with the one or more items to hash values computed for the one or more items;
determine whether the one or more items include medical information and RFID information;
encrypt and store the medical information and RFID information in response to determining that the one or more items include medical information and RFID information;
destroy the encrypted and stored medical information and RFID information after a predetermined time period has elapsed;
provide a user access to the verified the one or more items when the one or more RFID tags has no duplicate and there is a match between an RFID tag of a user and one or more RFID tags of the one or more items, and all of the security policies associated with the user and the one or more items are met;
and
lock the one or more items in response to a determination that the one or more RFID tags is duplicated;
determine whether the RFID tag of the user is a duplicate RFID tag;
disable the RFID tag of the user in response to determining that the RFID tag of the user is the duplicate RFID tag;
and
record a plurality of transactions associated with the user access being provided to the one or more items, the transactions including a person who obtained medical information at a location, a time associated with the obtained medical information at the location, and the sequence of events associated with the obtained medical information at the location,
wherein the match comprises determining that the RFID tag of the user and the one or more RFID tags of the one or more items are recorded at a predetermined location at a predetermined time within a predetermined stage within a sequence of events and a state of different predetermined locations at predetermined times included in the security policies for authorized persons to view information from the one or more items in a context as determined by a combination of the predetermined stage within the sequence of events and the state of different predetermined locations at the predetermined times,
the providing the user access to the one or more items includes decryption of the encrypted and stored medical information and RFID information, and
the encrypted and stored medical information includes medical charts, tests, x-rays, CAT scans, MRIs, and sonograms.

14 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/782,149Filed 12 Oct 2017 · continuation
Priority: 11 Nov 2010
Published: US 2018/0046822 A115 Feb 2018
Granted: 16 Mar 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/00
Security arrangements for protecting computers, components thereof, programs or data against unauthorised
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 21/604
Protecting data: tools and structures for managing or administering access control systems

Family

Application12/943,964Parent of this continuation · filed 11 Nov 2010
Application14/674,305Parent of this continuation · filed 31 Mar 2015
US 9,032,512 B2Parent of this continuation · filed 12 May 2015
US 2018/0046822 A1Pre-grant publication · published 15 Feb 2018
US 9,953,181 B2Parent of this continuation
US 2012/0124637 A1Published application
US 2015/0205976 A1Published application
US 10,949,558 B2This patent

From the US filing history. Foreign family members aren’t listed.