US 8,819,785 B2Granted

Managing secure sharing of private medication information across security domains

AssigneeTherap Services, LLC

InventorsRichard Allen Robbins, Warren Stanton Gifford, Mojahedul Hoque Abul Hassnat, Bradley Drew Turock, Justin Mark Brockie, James Michael Kelly, Ziaur Rahman

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A method of granting a user in a first organization access to private medication information stored within an authorization profile of a second organization, an access agreement between the two organizations is formed. Authorization is requested for the user, the authorization profile is retrieved, and authorization to private information is granted if authorized by the access agreement. In a method of authorizing access by users to private medication information stored by an organization as associated with a program, three types of caseloads are defined. The first authorizes access to medication information of a first individual of a first program, the second authorizes access to medication information of a second individual of all programs, and the third authorizes access to medication information of all individuals of a second program. Authorization for access is requested and granted for the user to access one or more of the caseloads.

Claims18

Dependent claims

A method of sharing medication information among at least a first organization and a second organization, the method comprising:

(a) receiving by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's medication information in the second organization;
(c) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user and the type of the one or more individual's medication information in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(i) transferring by the one or more physical nodes the one or more individual's medication information in the second organization to the user in the first organization;
(d)(ii) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's medication information in the second organization to the user in the first organization.

3 more elements

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for sharing medication information among at least a first organization and a second organization, the code, when executed:

(a) receives a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads, each of the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's medication information in the second organization;
(c) determines whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user;
and the type of the one or more individual's medication information in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(i) transfers the one or more individual's medication information in the second organization to the user in the first organization;
(d)(ii) logs, in the activity log, the transferring of the one or more individual's medication information in the second organization to the user in the first organization.

4 more elements

A system for secure sharing of medication information accessible by a user, the system comprising:

a computer program stored in memory, which when executed by a processor performs the steps of:
(a) receiving a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's medication information in the second organization;
(c) determining whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user 1 and the type of the one or more individual's medication information in the second organization;
(d) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(i) transferring the one or more individual's information in the second organization to the user in the first organization;
(d)(ii) logging in the activity log, the transferring of the one or more individual's medication information in the second organization to the user in the first organization.

4 more elements

A method of sharing medication information among at least a first organization and a second organization, the method comprising:

(a) receiving by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's medication information in the second organization;
(c) determining by the one or more physical nodes whether the one or more individual's medication information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's medication information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the user, and the type of the individual's medication information in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(ii)(A) transferring by the one or more physical nodes the one or more individual's medication information in the second organization to the user;
(d)(ii)(B) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's medication information in the second organization to the user.

5 more elements

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for sharing information among at least a first organization and a second organization, the code, when executed:

(a) receives a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logs, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's medication information in the second organization;
(c) determines whether the one or more individual's information in the second organization is accessible based on at least the access profile, the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determines whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based at least the access profile, on the one or more caseloads and one or more roles associated with the user, and the type of the individual's medication information in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(ii)(A) transfers the one or more individual's medication information in the second organization to the user;
(d)(ii)(B) logs, in the activity log, the transferring of the one or more individual's medication information in the second organization to the user.

5 more elements

A system for secure sharing of medication information accessible by a user, the system comprising:

a computer program stored in memory, which when executed by a processor performs the steps of:
(a) receiving a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user in the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
(b) logging in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the one or more individual's medication information in the second organization;
(c) determining whether the one or more individual's medication information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
(d) responsive to determining that the individual's medication information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
(d)(i) determining whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the user, and the type of the individual's medication information in the second organization;
(d)(ii) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(ii)(A) transferring the one or more individual's medication information in the second organization to the user;
(d)(ii)(B) logging in the activity log, the transferring of the one or more individual's medication information in the second organization to the user.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/667,141Filed 2 Nov 2012 · continuation
Priority: 27 Nov 2006
Published: US 2013/0304505 A114 Nov 2013
Granted: 26 Aug 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G16H 40/67
For the operation of medical equipment or devices: for remote operation
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G16H 10/60
ICT specially adapted for the handling or processing of patient-related medical or healthcare data: for patient-specific data, e.g. for electronic…
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources

Family

Application11/604,577Parent of this division · filed 27 Nov 2006
Application13/600,338Parent of this continuation · filed 31 Aug 2012
US 8,281,370 B2Parent of this division · filed 2 Oct 2012
US 2013/0304505 A1Pre-grant publication · published 14 Nov 2013
US 8,615,790 B2Parent of this continuation
Application13/600,338Parent of this division
US 2008/0127310 A1Published application
US 2014/0062511 A1Published application
US 9,163,955 B2Related patent
US 8,819,785 B2This patent

From the US filing history. Foreign family members aren’t listed.