US 11,887,705 B2Granted

Apparatus, system and method for patient-authorized secure and time-limited access to patient medical records utilizing key encryption

AssigneeIlya Aronovich

InventorsBernard Davidovics, Ilya Aronovich, William Frumkin

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computerized system and method to allow patient to control and provide a safe, secure and efficient real-time access to the patient's private health records (PHR) stored in the encrypted uniform format in a Private Health Vault (PHV) database. The system utilizes patient's private encryption key for encrypting and decrypting PHR stored in the PHV. The patient (or patient's appointed agent) controls access to the PHR and authorizes by electronic communications with the PHV server to allow doctors to have access to the centrally maintained and structured medical data in the PHV. The access can be limited in duration. The patient's private keys may be stored in a remote Key Bank database, separately form the PHV database, and the location of the patient's PHV data may also require transmission of the location id from a separate Mapping server. Additional security is provided by determining digital proximity of the doctor's and patient's mobile devices to the node device in the doctor's office, and terminating access upon set condition. It also utilizes 2-way digital token or id exchange and confirmation between the patent and doctor, as well as digital authentication for access and identity verification. The centralized PHV stores patient data more efficiently and prevents unauthorized use of the patient data by separating the key(s) needed to decrypt patient data from the actual patient records in the PHV.

Claims18

Dependent claims

A method of secure access to patient's medical data comprising the steps of:

(a) authenticating the patient's mobile device on a remote server;
(b) authenticating the health care provider's mobile device on the server;
(c) automatically determining by electronic device proximity detection that the patient's mobile device is in a geographic proximity to a node located at the health care provider's location;
(d) transmitting a request to a patient mobile device to authorize the health care provider's access to the patient's health care records stored remotely with respect to the location of at least one node at the health care provider's location;
(e) obtaining said authorization from the patient for the health care provider to have access to the patient's health care records, wherein the authorization is at least partially based on the determined proximity of the patient's mobile device to the node at the health care provider's location;
(f) transmitting through a computer network to a processor on a remote server a patient's private electronic crypto key used for decryption of the patient's health care records stored remotely, wherein access to said crypto key is provided by the patient for a specified duration;
(g) receiving the patient's private crypto key by the processor on the remote server, wherein the key is utilized to decrypt the patient's health care records;
(h) obtaining an id of the patient's health care records by the processor on the remote server;
(i) utilizing the patient's private crypto key and the id of the patient's health care records to locate and decrypt the patient's health care record;
(j) utilizing asynchronous PKI encryption keys of the health care provider and the remote server to re-encrypt and securely transmit the patient's health care records to the health care provider for viewing and updating;
(k) storing the patient's health care records remotely with respect to the health care provider's location, encrypted with the patient's private crypto key;
(l) receiving from the health care provider an updated patient's health care record encrypted for safe transmission with the server's asynchronous PKI key;
(m) decrypting the updated patient health care records using servers' private PKI key;
(n) re-encrypting the updated patient health care records on the server with the patient's private crypto key;
and
(o) storing the updated encrypted records remotely.

13 more elements

A method of secure access to patient's medical data comprising the steps of:

(a) authenticating the patient's mobile device on a remote server;
(b) authenticating the health care provider's mobile device on the server;
(c) automatically determining by electronic device proximity detection that the patient's mobile device is in a geographic proximity to a node located at the health care provider's location;
(d) transmitting a request to a patient mobile device to authorize the health care provider's access to the patient's health care records stored remotely with respect to the location of at least one node at the health care provider's location;
(e) obtaining said authorization from the patient for the health care provider to have access to the patient's health care records, wherein the authorization is at least partially based on the determined proximity of the patient's mobile device to the node at the health care provider's location;
(f) transmitting through a computer network to a processor on a remote server a patient's private electronic crypto key used for decryption of the patient's health care records stored remotely, wherein access to said crypto key is provided by the patient for a specified duration;
(g) receiving the patient's private crypto key by the processor on the remote server, wherein the key is utilized to decrypt the patient's health care records;
(h) obtaining an id of the patient's health care records by the processor on the remote server;
(i) utilizing the patient's private crypto key and the id of the patient's health care records to locate and decrypt the patient's health care record;
(j) utilizing asynchronous PKI encryption keys of the health care provider and the remote server to re-encrypt and securely transmit the patient's health care records to the health care provider for viewing and updating;
(k) storing the patient's health care records remotely with respect to the health care provider's location, encrypted with the patient's private crypto key;
(l) receiving at the server a location id of the patient's health care records stored remotely in an electronic data storage and retrieval system;
and
(m) utilizing the location id to find the remotely stored health care records of the patient, for viewing and update by a health care provider;
wherein the remote electronic data storage and retrieval system that stores health records of the patient does not maintain or store any patient identifying information other than location id in a non-encrypted format.

12 more elements

A computerized system for secure access to patient's medical data comprising:

a patient's computer device, having a processor, a keyboard, a display screen, a computer memory, storing and executing software code for authorizing access by health care providers to the patient's health care records remotely stored;
a health care provider computer device, having a processor, a keyboard, a display screen, a computer memory, storing and executing software code for requesting authorized access by that health care provider to the patient's health care records stored remotely with respect to the health care provider's location and for receiving the patient's health care records for viewing and updates;
a remote electronic data storage and retrieval system, storing patient's health care records encrypted with the patient's private encryption key, wherein the decryption of and access to said patient records may be performed only using that patient's private encryption key;
a remote access server, having a processor, a keyboard, a display screen, a computer memory, wherein the processor on the remote access server is disposed in communication with said server computer memory to issue and execute the computer instructions to:
authenticate the patient's mobile device on a remote server;
authenticate the health care provider's mobile device on the server;
automatically determine by utilizing the electronic device proximity detection that the patient's mobile device is in a geographic proximity to a node located at the health care provider's location;
transmit a request to a patient mobile device to authorize the health care provider's access to the patient's health care records stored remotely;
obtain and process said authorization from the patient for the health care provider to have access to the patient's health care records;
obtain a patient's private electronic crypto key used for decryption of the patient's health care records stored remotely, wherein access to said crypto key is provided by the patient for a specified limited duration;
obtain an id of the patient's health care records;
utilize said patient's private crypto key by a processor on the remote server to locate and decrypt the patient's health care records by the processor on the server;
utilize asynchronous PKI encryption keys of the health care provider and the remote server to re-encrypt and securely transmit the patient's health care records to the health care provider for viewing and updating;
store the patient's health care records remotely with respect to the health care provider's location, encrypted with the patient's private crypto key;
receive from the health care provider an updated patient's health care record encrypted for safe transmission with the server's asynchronous PKI key;
decrypt the updated patient health care records using servers' private PKI key;
re-encrypt the updated patient health care records on the server with the patient's private crypto key;
and
store the updated encrypted records remotely.

16 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/071,966Filed 15 Oct 2020 · continuation in part
Priority: 2 Dec 2016
Published: US 2021/0104304 A18 Apr 2021
Granted: 30 Jan 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification22 codes

G16H 10/60
ICT specially adapted for the handling or processing of patient-related medical or healthcare data: for patient-specific data, e.g. for electronic…
G16H 40/20
ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or…:…
G16H 40/67
For the operation of medical equipment or devices: for remote operation
G16H 80/00
Ict specially adapted for facilitating communication between medical practitioners or patients