US 8,528,056 B2Granted

Managing secure sharing of private information across security domains via a communication link, including through the internet, wireless communications, mobile devices, a telephone network, and electronic messaging

AssigneeTherap Services, LLC

InventorsRichard Allen Robbins, Warren Stanton Gifford, Mojahedul Hoque Abul Hassnat, Bradley Drew Turock, Justin Mark Brockie, James Michael Kelly, Ziaur Rahman

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A system and method of sharing information among at least a first organization and a second organization, comprising receiving via a communication link a request for authorization for a user in the first organization to access one or more individual's information in a second organization, the communication link comprising the Internet, Wireless Communications, Mobile Devices, a Telephone Network, and Electronic Messaging. A request is logged and authorization is determined based on at least an access profile, one or more caseloads and the one or more roles associated with the user and the type of the one or more individual's information in the second organization. The information requested is transferred, by the communication link, from the second organization to the user in the first organization and such transfer of information is logged.

Claims56

Dependent claims

A method of sharing information among at least a first organization and a second organization, the method comprising:

(a) receiving, via a communication link, by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's information in the second organization;
(c) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user 1 and the type of the one or more individual's information in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's information in the second organization:
(d)(i) transferring, via said communication link, by the one or more physical nodes the one or more individual's information in the second organization to the user in the first organization;
(d)(ii) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's information in the second organization to the user in the first organization.

3 more elements

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for sharing information among at least a first organization and a second organization, the code, when executed:

(a) receives, via a communication link, a first request for authorization for a user in the first organization to access one or more individual's information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads, each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's information in the second organization;
(c) determines whether the user in the first organization is authorized to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user;
and the type of the one or more individual's information in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's information in the second organization:
(d)(i) transfers, via said communication link, the one or more individual's information in the second organization to the user in the first organization;
(d)(ii) logs, in the activity log, the transferring of the one or more individual's information in the second organization to the user in the first organization.

4 more elements

A system accessible by a user, wherein when the user accesses the system, the system:

(a) receives, via a communication link, a first request for authorization for a user in the first organization to access one or more individual's information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual ‘or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's information in the second organization;
(c) determines whether the user in the first organization is authorized to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the userl and the type of the one or more individual's information in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's information in the second organization:
(d)(i) transfers, via said communication link, the one or more individual's information in the second organization to the user in the first organization;
(d)(ii) logs, in the activity log, the transferring of the one or more individual's information in the second organization to the user in the first organization.

3 more elements

A method of sharing information among at least a first organization and a second organization, the method comprising:

(a) receiving, via a communication link, by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's information in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's information in the second organization;
(c) determining by the one or more physical nodes whether the one or more individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the user, and the type of the individual's information in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's information in the second organization:
(d)(ii)(A) transferring, via said communication link, by the one or more physical nodes the one or more individual's information in the second organization to the user;
(d)(ii)(B) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's information in the second organization to the user.

5 more elements

(a) receives, via a communication link, a first request for authorization for a user in the first organization to access one or more individual's information in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's information in the second organization;
(c) determines whether the one or more individual's information in the second organization is accessible based on at least the access profile, the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determines whether the user in the first organization is authorized to access the one or more individual's information in the second organization, wherein the determination is based at least the access profile, on the one or more caseloads and one or more roles associated with the user, and the type of the individual's information in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's information in the second organization:
(d)(ii)(A) transfers, via said communication link, the one or more individual's information in the second organization to the user;
(d)(ii)(B) logs, in the activity log, the transferring of the one or more individual's information in the second organization to the user.

5 more elements

A system accessible by a user, wherein when the user accesses the system, the system:

(a) receives, via a communication link, a first request for authorization for a user in the first organization to access one or more individual's information in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's information in the second organization;
(c) determines whether the one or more individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determines whether the user in the first organization is authorized to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the user., and the type of the individual's information in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's information in the second organization:
(d)(ii)(A) transfers, via said communication link, the one or more individual's information in the second organization to the user;
(d)(ii)(B) logs, in the activity log, the transferring of the one or more individual's information in the second organization to the user.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/605,652Filed 6 Sep 2012 · continuation
Priority: 27 Nov 2006
Published: US 2013/0014280 A110 Jan 2013
Granted: 3 Sep 2013
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G16H 40/67
For the operation of medical equipment or devices: for remote operation
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G16H 10/60
ICT specially adapted for the handling or processing of patient-related medical or healthcare data: for patient-specific data, e.g. for electronic…
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources

Family

Application11/604,577Parent of this continuation · filed 27 Nov 2006
US 2013/0014280 A1Pre-grant publication · published 10 Jan 2013
US 8,281,370 B2Parent of this continuation
US 2008/0127310 A1Published application
US 8,528,056 B2This patent

From the US filing history. Foreign family members aren’t listed.