Back to results
US 2004/0172558 A1Published application
Method and system for access control
OwnerTerrance Callahan, Steven Meyerinventors
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
OwnerTerrance Callahan, Steven Meyerinventors
Estimating the term…
In one aspect of the invention, embodiments of the invention can superimposed upon the existing framework of network which includes a number of nodes interconnected by the underlying communications network. In one embodiment, an access control node is interposed between each node and the remainder of the network. The access control node is adapted to transmit information about the node and the user attempting to access the node to a server used for maintaining security and audit information. This information may take the form of node identification data (thus identifying the node) and user identification data (to ensure that the user is associated with an active account and the user has entered the correct password thus authenticating the user). If the node is not recognised by the server, then no access to protected information (e.g., PHI) is allowed. If, however, the node is recognised, then access to PHI requires that the user also be authenticated. Assuming both conditions exist, aspects of the invention will determine (based on a repository of information about users) the data each user is entitled to access and the functionality of the node that is to be made available to the user. Aspects of the invention may place limitations on the functionality offered by the node to which the user should be granted access. That is, although a user may be attempting to access data from a node which has a set of functions (e.g., printing, storing data to a removable media, displaying video signals, etc.), aspects of the invention enable only a subset of these functions to be made available depending on the rights which have been granted to a user.
A method for providing access to data stored in a repository forming part of a network, said access being requested from a node also forming part of said network, said method comprising:
A method for providing access to data stored in a repository forming part of a network, said access being requested from a node forming part of said network, said method comprising:
The method of 8 further comprising
The method of 13 wherein said intercepted messages conform with at least one of the DICOM and HL7 data formats and wherein said audit log record comprises data in the extensible mark-up language.
The method of 8 further comprising:
The method of 17 wherein said intercepted messages conform with at least one of the DICOM and HL7 data formats and wherein said audit log record comprises data in the extensible mark-up language.
A device for providing control of a node, said node forming part of a network, said device comprising:
A computer readable media storing data and instructions, said data and instructions when executed by a general purpose computer adapt said computer to provide access to data stored in a repository forming part of a network, said access being requested from a node forming part of said network, said data and instructions adapting said general purpose computer to:
The computer readable media of 41 wherein said intercepted messages conform with at least one of the DICOM and HL7 data formats and wherein said audit log record comprises data in the extensible mark-up language.
A method for generating audit logs for a network, said network comprising a plurality of nodes interconnected by way of a communications network, said method comprising:
The method of claim S1 wherein said analysing comprises:
A method for providing access to data for a plurality of users, said to data stored on a network, said network comprising a plurality of nodes, each of said plurality nodes associated with an access control node, each of said access control nodes interposed between its associated node and the network, said method comprising:
Dependencies are inferred from the claim text.