Methods and systems for analyzing accessing of medical data
AssigneeProtenus, Inc.
InventorsNicholas T. CULBERTSON, Robert K. LORD
Life of this patent
Estimating the term…
Abstract
Various aspects described herein relate to presenting electronic patient data accessing information. Data related to a plurality of access events, by one or more employees, of electronic patient data can be received. A set of access events of the plurality of access events can be determined as constituting, by the one or more employees, possible breach of the electronic patient data. An alert related to the set of access events can be provided based on determining that the set of access events constitute possible breach of the electronic patient data.
Claims20
A computer-implemented method for detecting a non-compliant access of electronic patient data, the computer-implemented method comprising:
- receiving, by one or more processors of a patient privacy monitoring server, access data comprising a plurality of electronic patient data access events by one or more entities and entity-specific identification data associated with the one or more entities;
- filtering, by the one or more processors, the plurality of electronic patient data access events based on one or more whitelist events by excluding one or more of the plurality of electronic patient data access events that correspond to the one or more whitelist events to generate a filtered set of electronic patient data access events by the one or more entities;
- determining, by the one or more processors, that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a potential non-compliant access of the electronic patient data based on the entity-specific identification data and the filtered set of electronic patient data access events;
- and
- in response to determining that the at least one electronic patient data access event of the plurality of electronic patient data access events constitutes the potential non-compliant access of the electronic patient data, causing to present on a display of a user interface, by the one or more processors, an indicator of the at least one electronic patient data access event.
A system for detecting a non-compliant access of electronic patient data, the system comprising:
- one or more processors;
- and
- one or more computer readable storage media storing instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- receiving access data comprising a plurality of electronic patient data access events by one or more entities and entity-specific identification data associated with the one or more entities;
- filtering the plurality of electronic patient data access events based on one or more whitelist events by excluding one or more of the plurality of electronic patient data access events that correspond to the one or more whitelist events to generate a filtered set of electronic patient data access events by the one or more entities;
- determining that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a potential non-compliant access of the electronic patient data based on the entity-specific identification data and the filtered set of electronic patient data access events;
- and
- in response to determining that the at least one electronic patient data access event of the plurality of electronic patient data access events constitutes the potential non-compliant access of the electronic patient data, causing to present on a display of a user interface, by the one or more processors, an indicator of the at least one electronic patient data access event.
One or more non-transitory computer readable media storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations for detecting a non-compliant access of electronic patient data, the operations comprising:
- receiving access data comprising a plurality of electronic patient data access events by one or more entities and entity-specific identification data associated with the one or more entities;
- filtering the plurality of electronic patient data access events based on one or more whitelist events by excluding one or more of the plurality of electronic patient data access events that correspond to the one or more whitelist events to generate a filtered set of electronic patient data access events by the one or more entities;
- determining that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a potential non-compliant access of the electronic patient data based on the entity-specific identification data and the filtered set of electronic patient data access events;
- and
- in response to determining that the at least one electronic patient data access event of the plurality of electronic patient data access events constitutes the potential non-compliant access of the electronic patient data, causing to present on a display of a user interface, by the one or more processors, an indicator of the at least one electronic patient data access event.
Dependencies are inferred from the claim text.