US 2013/0254901 A1 · Managing Secure Sharing of Private Information Pertaining to Abuse or Neglect Across Security Domains

Abstract

A method of granting a user in a first organization access to private information stored within an authorization profile of a second organization, an access agreement between the two organizations is formed. Authorization is requested for the user, the authorization profile is retrieved, and authorization to private information pertaining to abuse or neglect is granted if authorized by the access agreement. In a method of authorizing access by users to private information pertaining to abuse or neglect stored by an organization as associated with a program, three types of caseloads are defined. The first authorizes access to information of a first individual of a first program, the second authorizes access to information of a second individual of all programs, and the third authorizes access to information of all individuals of a second program.

Claims26

Dependent claims

1-34. (canceled)

A method of sharing information pertaining to abuse or neglect among at least a first organization and a second organization, the method comprising:

(a) receiving by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's information pertaining to abuse or neglect in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's information pertaining to abuse or neglect in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's information pertaining to abuse or neglect in the second organization;
(c) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user and the type of the one or more individual's information pertaining to abuse or neglect in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization:
(d)(i) transferring by the one or more physical nodes the one or more individual's information pertaining to abuse or neglect in the second organization to the user in the first organization;
(d)(ii) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's information pertaining to abuse or neglect in the second organization to the user in the first organization.

3 more elements

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for sharing information pertaining to abuse or neglect among at least a first organization and a second organization, the code, when executed:

(a) receives a first request for authorization for a user in the first organization to access one or more individual's information pertaining to abuse or neglect in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads, each of the one or more individual's information pertaining to abuse or neglect in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's information pertaining to abuse or neglect in the second organization;
(c) determines whether the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user;
and the type of the one or more individual's information pertaining to abuse or neglect in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization:
(d)(i) transfers the one or more individual's information pertaining to abuse or neglect in the second organization to the user in the first organization;
(d)(ii) logs, in the activity log, the transferring of the one or more individual's information pertaining to abuse or neglect in the second organization to the user in the first organization.

4 more elements

A system for secure sharing of information pertaining to abuse or neglect accessible by a user, wherein when the user accesses the system, the system:

(a) receives a first request for authorization for a user in the first organization to access one or more individual's information pertaining to abuse or neglect in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's information pertaining to abuse or neglect in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual ‘or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's information pertaining to abuse or neglect in the second organization;
(c) determines whether the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user and the type of the one or more individual's information pertaining to abuse or neglect in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization:
(d)(i) transfers the one or more individual's information in the second organization to the user in the first organization;
(d)(ii) logs, in the activity log, the transferring of the one or more individual's information pertaining to abuse or neglect in the second organization to the user in the first organization.

3 more elements

A method of sharing information pertaining to abuse or neglect among at least a first organization and a second organization, the method comprising:

(a) receiving by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's information pertaining to abuse or neglect in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, the one or more individual's information pertaining to abuse or neglect in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's information pertaining to abuse or neglect in the second organization;
(c) determining by the one or more physical nodes whether the one or more individual's information pertaining to abuse or neglect in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information pertaining to abuse or neglect in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the user, and the type of the individual's information pertaining to abuse or neglect in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization:
(d)(ii)(A) transferring by the one or more physical nodes the one or more individual's information pertaining to abuse or neglect in the second organization to the user;
(d)(ii)(B) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's information pertaining to abuse or neglect in the second organization to the user.

5 more elements

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for sharing information among at least a first organization and a second organization, the code, when executed:

(a) receives a first request for authorization for a user in the first organization to access one or more individual's information pertaining to abuse or neglect in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's information pertaining to abuse or neglect in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's information pertaining to abuse or neglect in the second organization;
(c) determines whether the one or more individual's information in the second organization is accessible based on at least the access profile, the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determines whether the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization, wherein the determination is based at least the access profile, on the one or more caseloads and one or more roles associated with the user, and the type of the individual's information pertaining to abuse or neglect in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization:
(d)(ii)(A) transfers the one or more individual's information pertaining to abuse or neglect in the second organization to the user;
(d)(ii)(B) logs, in the activity log, the transferring of the one or more individual's information pertaining to abuse or neglect in the second organization to the user.

5 more elements

A system for secure sharing of information pertaining to abuse or neglect accessible by a user, wherein when the user accesses the system, the system:

(a) receives a first request for authorization for a user in the first organization to access one or more individual's information pertaining to abuse or neglect in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's information pertaining to abuse or neglect in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's information pertaining to abuse or neglect in the second organization;
(c) determines whether the one or more individual's information pertaining to abuse or neglect in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information pertaining to abuse or neglect in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determines whether the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the user, and the type of the individual's information pertaining to abuse or neglect in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's information pertaining to abuse or neglect in the second organization:
(d)(ii)(A) transfers the one or more individual's information pertaining to abuse or neglect in the second organization to the user;
(d)(ii)(B) logs, in the activity log, the transferring of the one or more individual's information pertaining to abuse or neglect in the second organization to the user.

5 more elements

Dependencies are inferred from the claim text.

Managing Secure Sharing of Private Information Pertaining to Abuse or Neglect Across Security Domains

Life of this patent

Managing Secure Sharing of Private Information Pertaining to Abuse or Neglect Across Security Domains

Life of this patent

Abstract

Claims26