# US 2014/0207686 A1 · Secure real-time health record exchange > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0207686 A1 - Document ID: US20140207686A1 - Status: Published application - Kind: A1 - Application number: 14/160,476 - Filed: 2014-01-21 - Published: 2014-07-24 - Earliest claimed: 2013-01-21 - Assignees: Humetrix.com, Inc. - Applicants: Humetrix.Com, Inc. - Inventors: Bettina Experton - Web page: https://patentgrep.com/patent/US20140207686A1 ## CPC - G16H 10/60: for patient-specific data, e.g. for electronic patient records - G06F 21/31: User authentication - G16H 40/20: for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms - G16H 40/67: for remote operation - G16H 80/00: ICT specially adapted for facilitating communication between medical practitioners or patients, e.g. for collaborative diagnosis, therapy or health monitoring - G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method, an apparatus, and a computer program product for accessing electronic medical records are provided in which a portable computing device uniquely associated with a user authenticates an identification of the user and automatically retrieves information corresponding to the user from electronic healthcare records systems using the identification. The retrieved information may be combined with other information and electronically delivered to a healthcare provider or patient. Delivery may be initiated by the portable computing device and directed to a computing device of a healthcare provider or patient. Exchange of records and other information between the user and the provider is effected using a first channel to provide a network address of the records and cryptographic keys necessary to extract the records, and a second path to deliver the encrypted records. The first path may be implemented using a camera or optical scanner to read an encoded optical image. ## Claims ### Claim 1 A method for controlling access to electronic medical records, the method comprising: authenticating an identification of a user of a mobile device; and communicating an electronic authorization from the mobile device to a provider device using a first communication channel, wherein the electronic authorization provides the provider device with access to electronic healthcare records of the user, and wherein the access to the electronic healthcare records of the user is provided through a second communication channel that is different from the first communication channel. ### Claim 2 (depends on 1) The method of claim 1, wherein the first communication channel is used by the mobile device to transfer an image between the mobile device and the provider device after the user of the mobile device has been authenticated. ### Claim 3 (depends on 2) The method of claim 2, wherein the image is displayed by the mobile device for capture by a camera of the provider device, and wherein the image includes encoded information identifying the user of the mobile device, and an address of the electronic healthcare records of the user. ### Claim 4 (depends on 2) The method of claim 2, wherein the image includes cryptographic keys and is displayed by the mobile device for capture by a camera of the provider device, and wherein the provider device is configured to use the cryptographic keys to access the electronic healthcare records of the user. ### Claim 5 (depends on 2) The method of claim 2, wherein the image comprises a quick response code or a barcode. ### Claim 6 (depends on 2) The method of claim 2, wherein the first communication channel comprises a video link through a network connecting the mobile device and the provider device. ### Claim 7 (depends on 1) The method of claim 1, wherein the first communication channel is controlled by a Near Field Communications protocol, a Bluetooth protocol or a Zigbee protocol. ### Claim 8 (depends on 1) The method of claim 1, wherein the second communication channel comprises a wide area network that is configured to provide access to a container on a network server, wherein the electronic healthcare records of the user are encrypted and deposited in the container. ### Claim 9 (depends on 8) The method of claim 8, wherein the electronic healthcare records deposited in the container are deleted after a predetermined time or after a first retrieval of the electronic healthcare records of the user from the container. ### Claim 10 (depends on 9) The method of claim 9, wherein at least one of the mobile device, the provider device and the network server maintains a log related to transactions involving the container, and wherein the log records one or more of a description of the electronic healthcare records deposited in the container, the identity of the user of the mobile device, or an identity of the provider device when the provider device accesses the container. ### Claim 11 A mobile computing device configured for wireless communications and comprising: at least one processing circuit, wherein the at least one processing circuit is configured to: authenticate an identification of a user of a mobile device; and communicate an electronic authorization from the mobile device to a provider device using a first communication channel, wherein the electronic authorization provides the provider device with access to electronic healthcare records of the user, and wherein the access to the electronic healthcare records of the user is provided through a second communication channel that is different from the first communication channel. ### Claim 12 (depends on 11) The mobile computing device of claim 11, wherein the first communication channel is used by the mobile device to transfer an image between the mobile device and the provider device after the user of the mobile device has been authenticated. ### Claim 13 (depends on 12) The mobile computing device of claim 12, wherein the image is displayed by the mobile device for capture by a camera of the provider device, and wherein the image includes encoded information identifying the user of the mobile device, and an address of the electronic healthcare records of the user. ### Claim 14 (depends on 12) The mobile computing device of claim 12, wherein the image includes cryptographic keys and is displayed by the mobile device for capture by a camera of the provider device, and wherein the provider device is configured to use the cryptographic keys to access the electronic healthcare records of the user. ### Claim 15 (depends on 12) The mobile computing device of claim 12, wherein the image comprises a quick response code or a barcode. ### Claim 16 (depends on 12) The mobile computing device of claim 12, wherein the first communication channel comprises a video link through a network connecting the mobile device and the provider device. ### Claim 17 (depends on 11) The mobile computing device of claim 11, wherein the first communication channel is controlled by a Near Field Communications protocol, a Bluetooth protocol or a Zigbee protocol. ### Claim 18 (depends on 11) The mobile computing device of claim 11, wherein the second communication channel comprises a wide area network that is configured to provide access to a container on a network server, wherein the electronic healthcare records of the user are encrypted and deposited in the container, wherein the electronic healthcare records deposited in the container are deleted after a predetermined time or after a first retrieval of the electronic healthcare records of the user from the container. ### Claim 19 (depends on 18) The mobile computing device of claim 18, wherein at least one of the mobile device, the provider device and the network server maintains a log related to transactions involving the container, and wherein the log records one or more of a description of the electronic healthcare records deposited in the container, the identity of the user of the mobile device, or an identity of the provider device when the provider device accesses the container. ### Claim 20 A processor-readable storage medium having one or more instructions which, when executed by at least one processing circuit, cause the at least one processing circuit to: authenticate an identification of a user of a mobile device; and communicate an electronic authorization from the mobile device to a provider device using a first communication channel, wherein the electronic authorization provides the provider device with access to electronic healthcare records of the user, and wherein the access to the electronic healthcare records of the user is provided through a second communication channel that is different from the first communication channel.