Login token management
AssigneePreventice Solutions, Inc.
InventorsSavy Vath, Gale G. McFarland, Kevin W. Kirkeby, Michael S. Butterbrodt
Life of this patent
Estimating the term…
Abstract
Techniques for securing user data in a healthcare data management system are described. A client system receives a request to authenticate a user. A login token relating to an authenticated user is maintained at the client system. A role is selected for the user, and an authorization token relating to the selected role is maintained at the client system. A session for the user is initiated. This includes generating an encrypted session cookie relating to the user and the session, storing the encrypted session cookie at the client system, and periodically updating a timestamp for the session cookie.
Claims20
A method comprising:
- authenticating, at a remote computing device that comprises a user interface, a user for an application for viewing and classifying electrocardiogram (ECG) data and cardiac events;
- in response to the authenticating, generating and maintaining a login token for the user at the remote computing device;
- generating and maintaining an authorization token associated with a role of the user at the remote computing device;
- requesting a page of the application via the user interface, the page comprising the ECG data and a list of the cardiac events;
- determining, using the authorization token, that the user is authorized to access the page;
- and
- accessing the page, via the user interface, in response to the determining.
A non-transitory computer-readable medium containing computer program code that, when executed by one or more computer processors, performs an operation at a remote computing device, the operation comprising:
- authenticating a user for an application for viewing and classifying electrocardiogram (ECG) data and cardiac events;
- in response to the authenticating, generating and maintaining a login token for the user;
- generating and maintaining an authorization token associated with a role of the user;
- in response to a request to access a page of the application via a user interface, determining—using the authorization token—that the user is authorized to access the page, wherein the page comprises the ECG data and a list of the cardiac events;
- and
- accessing the page, via the user interface, in response to the determining.
Dependencies are inferred from the claim text.