US 8,799,650 B2Granted

Secure portable medical information system and methods related thereto

AssigneeDatcard Systems, Inc.

InventorChristopher M. Duma

Life of this patent

Estimating the term…

Loading patent…

Abstract

Using a secure portable reference to medical information, stored on a portable storage medium, various embodiments allow a patient to give to their doctor an easy-to-use access key that will enable access to desired medical information stored on a computer network. The secure portable reference provides greater transportability of medical records to a patient or medical data repository including a doctor's office, clinic, or hospital, while maintaining data security to satisfy medical data privacy regulations and expectations. Some described embodiments use encrypted information inside the secure portable reference to hide, for example, who is allowed access to the stored medical information, and the network location of the stored information. Some embodiments use a secret PIN to authenticate the user attempting access to the referenced medical information. The secure portable reference contains information on network resources used to enable download access to medical information, including medical records and medical images.

Claims14

Dependent claims

A computer-implemented method for managing access to an individual's medical images using one or more computer processors configured to execute the steps comprising:

generating a first personal identification number for a secure portable reference, the secure portable reference stored within a USB thumb drive;
using the first personal identification number to encrypt secure information used to access an individual's medical digital imaging and communications in medicine (DICOM) images stored on two or more databases;
storing the secure information on the secure portable reference within the USB thumb drive;
storing, in the secure portable reference within the USB thumb drive, a security module configured to decrypt at least a portion of the secure portable reference including the security information;
storing, in the secure portable reference within the USB thumb drive, computer-executable instructions configured to:
receive a second personal identification number from a user through a client computer connected to the USB thumb drive;
use the second personal identification number and the security module to decrypt the secure information stored on the secure portable reference, the secure information being necessary to access the medical images stored on the two or more databases;
request the individual's medical DICOM images from the two or more databases using the secure information stored on the secure portable reference within the USB thumb drive;
receive the individual's medical DICOM images from the two or more databases associated with the secure information stored on the secure portable reference within the USB thumb drive;
and
provide a user interface for the client device, configured to in response to receiving the individual's medical DICOM images, process and display the individual's medical DICOM images from the two or more databases associated with the secure information stored on the secure portable reference;
and
expiring and rendering unusable the secure portable reference after a configurable number of uses of the secure portable reference to retrieve the individual's medical DICOM images from the two or more databases.

10 more elements

A USB thumb drive comprising a non-transitory computer-readable medium comprising computer-executable instructions for accessing an individual's medical digital imaging and communications in medicine (DICOM) images, said computer-executable instructions, when running on one or more computers, perform a method comprising:

interfacing a secure portable reference associated with an individual to a client device after connection of the USB thumb drive to the client device, the USB thumb drive comprising the secure portable reference;
displaying, within a web browser, a first web user interface for the client device to prompt a user to input a personal identification number;
receiving a personal identification number from the user through the first user interface on the client device interfaced to the secure portable reference;
using the personal identification number and a security module stored in the secure portable reference to decrypt secure information stored on the secure portable reference;
requesting the individual's medical DICOM images from two or more databases associated with the secure information stored on the secure portable reference, the two or more databases requiring the decrypted secure information to allow access to the medical DICOM images;
receiving the individual's medical DICOM images from the two or more databases associated with the secure information stored on the secure portable reference;
in response to receiving the medical DICOM images, displaying within the web browser a second web user interface for the client device, the second user interface configured to display the individual's medical DICOM images from the two or more databases associated with the secure information stored on the secure portable reference;
and
expiring and rendering unusable the secure portable reference after a configurable number of uses of the secure portable reference to retrieve the individual's medical DICOM images from the two or more databases.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/315,558Filed 9 Dec 2011 · us provisional application
Priority: 10 Dec 2010
Published: US 2012/0179908 A112 Jul 2012
Granted: 5 Aug 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

G16H 10/65
For patient-specific data, e.g. for electronic patient records: stored on portable record carriers, e.g. on smartcards, RFID tags or CD
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
H04L 63/083
For authentication of entities: using passwords
G06Q 2220/10
Business processing using cryptography: usage protection of distributed data files