Multi-factor authentication for remote access of patient data

A computer-readable storage device encoded with a computer program comprising instructions that, when executed, operate to cause one or more processors to perform operations comprising:

• receiving a logon request, the logon request comprising credentials and at least one technical factor;
• accessing a validation database based on the at least one technical factor;
• determining that a mobile device sending the logon request is an authorized mobile device based on information provided by the validation database and the at least one technical factor;
• validating the credentials to ensure that a user of the mobile device is authorized to access patient data provided by a clinical information system;
• and then, upon determining that the user is authorized to access patient data:
• establishing a session to communicate patient data between the mobile device and the clinical information system, and processing the patient data communicated during the session.

A system comprising:

• one or more processors;
• and
• a computer-readable medium coupled to the one or more processors having instructions stored thereon which, when executed by the one or more processors, causes the one or more processors to perform operations comprising:
• receiving a logon request, the logon request comprising credentials and at least one technical factor;
• accessing a validation database based on the at least one technical factor;
• determining that a mobile device sending the logon request is an authorized mobile device based on information provided by the validation database and the at least one technical factor;
• validating the credentials to ensure that a user of the mobile device is authorized to access patient data provided by a clinical information system;
• and then, upon determining that the user is authorized to access patient data:
• establishing a session to communicate patient data between the mobile device and the clinical information system, and processing the patient data communicated during the session.