Managing secure sharing of private information across security domains by individuals having a service authorization

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for requesting a service authorization from a regulating or funding organization for a service provider in at least a first organization to provide service to one or more individuals in a second organization, the code, when executed:

• (a) stores a database comprising information pertaining to one or more services;
• (b) stores a database comprising information pertaining to one or more service providers associated with the first organization;
• (c) receives a first request for a service authorization for a service provider associated with a first organization to provide said service to one or more individuals in a second organization, wherein said service authorization comprises an authorization from said regulating or funding organization to provide specific services to the one or more individuals, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the service provider is associated with one or more roles and one or more caseloads, each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more service providers, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
• (d) logs, in an activity log associated with at least the first organization or the second organization, the first request for said service authorization for the service provider associated with the first organization to provide said service to the one or more individuals in the second organization;
• (e) determines whether the service provider associated with the first organization has been granted a service authorization provide said service to the one or more individuals in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the service provider;
• and the type of the one or more individual's information in the second organization;
• (f) responsive to determining that the service provider associated with the first organization has been granted said service authorization to provide said service to the one or more individuals in the second organization:
• (f)(i) transfers the one or more individual's information in the second organization to the service provider associated with the first organization;
• (f)(ii) logs, in the activity log, the granting of the said service authorization and the transferring of the one or more individual's information in the second organization to the service provider associated with the first organization.

A system for requesting a service authorization from a regulating or funding organization for a service provider in at least a first organization to provide service to one or more individuals in a second organization, the system comprising:

• a computer program stored in memory, which when executed by a processor performs the steps of:
• (a) storing a database comprising information pertaining to one or more services;
• (b) storing a database comprising information pertaining to one or more service providers associated with the first organization;
• (c) receiving a first request for a service authorization for a service provider associated with a first organization to provide a service to one or more individuals in a second organization, wherein said service authorization comprises an authorization from said regulating or funding organization to provide specific services to the one or more individuals, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the service provider is associated with one or more roles and one or more caseloads each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more service providers, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
• (d) logging, in an activity log associated with at least the first organization or the second organization, the first request for said service authorization for the service provider associated with the first organization to provide said service to the one or more individuals in the second organization;
• (c) determining whether the service provider associated with the first organization has been granted a service authorization provide said service to the one or more individuals in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the service provider and the type of the one or more individual's information in the second organization;
• (d) responsive to determining that the service provider associated with the first organization has been granted a service authorization to provide said service to the one or more individuals in the second organization:
• (d)(i) transferring the one or more individual's information in the second organization to the service provider associated with the first organization;
• (d)(ii) logging, in the activity log, the granting of said service authorization and the transferring of the one or more individual's information in the second organization to the service provider associated with the first organization.

A method of requesting a service authorization from a regulating or funding organization for a service provider in at least a first organization to provide service to one or more individuals in a second organization, the method comprising:

• (a) storing, by one or more physical nodes, a database comprising information pertaining to one or more services;
• (b) storing, by said one or more physical nodes, a database comprising information pertaining to one or more service providers associated with the first organization;
• (c) requesting a service authorization for a service provider associated with a first organization to provide a service to one or more individuals in a second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain;
• (d) comparing said requested service provider with said database of said information pertaining to one or more service providers to determine if said requested service provider has been authorized by the one or more individuals;
• (e) granting a service authorization to said requested service provider, wherein said service authorization comprises authorization from said regulating or funding organization to provide specific services to the one or more individuals;
• (f) receiving by said one or more physical nodes a first request for authorization for said service provider associated with a first organization to access one or more individual's information in a second organization, wherein the first request for authorization includes authorization to access one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the service provider associated with the first organization is associated with one or more roles and one or more caseloads, the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more service providers, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
• (g) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the first request for authorization for the service provider associated with the first organization to access the one or more individual's information in the second organization;
• (h) determining by said one or more physical nodes whether the one or more individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
• (i) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
• (i)(i) determining by the one or more physical nodes whether the service provider associated with the first organization has been granted authorization to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the service provider, and the type of the individual's information in the second organization;
• (i)(ii) responsive to determining that the service provider associated with the first organization has been granted a authorization to access the one or more individual's information in the second organization:
• (i)(ii)(A) transferring by the one or more physical nodes the one or more individual's information in the second organization to the service provider;
• (i)(ii)(B) logging by the one or more physical nodes, in the activity log, the granting of said service authorization and the transferring of the one or more individual's information in the second organization to the service provider.

A non-transitory computer-readable storage media having computer executable code stored thereon, the code for requesting a service authorization from a regulating or funding organization for a service provider in at least a first organization to provide service to one or more individuals in a second organization, the code, when executed:

• (a) stores a database comprising information pertaining to one or more services;
• (b) stores a database comprising information pertaining to one or more service providers associated with the first organization;
• (c) requests a service authorization for a service provider associated with a first organization to provide a service to one or more individuals in a second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain;
• (d) compares said requested service provider with said database of said information pertaining to one or more service providers to determine if said requested service provider has been authorized by the one or more individuals;
• (e) grants a service authorization to said requested service provider, wherein said service authorization comprises authorization from said regulating or funding organization to provide specific services to the one or more individuals;
• (f) receives a first request for authorization for a service provider associated with a first organization to access one or more individual's information in a second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the service provider associated with the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more service providers, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
• (g) logs, in an activity log associated with at least the first organization or the second organization, the first request for authorization for the service provider associated with the first organization to access the one or more individual's information in the second organization;
• (h) determines whether the one or more individual's information in the second organization is accessible based on at least the access profile, the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
• (i) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
• (i)(i) determines whether the service provider associated with the first organization has been granted authorization to access the one or more individual's information in the second organization, wherein the determination is based at least the access profile, on the one or more caseloads and one or more roles associated with the service provider, and the type of the individual's information in the second organization;
• (i)(ii) responsive to determining that the service provider associated with the first organization has been granted authorization to access the one or more individual's information in the second organization:
• (i)(ii)(A) transfers the one or more individual's information in the second organization to the servicer;
• (i)(ii)(B) logs, in the activity log, the granting of said service authorization and the transferring of the one or more individual's information in the second organization to the service provider.

A system for requesting a service authorization from a regulating or funding organization for a service provider in at least a first organization to provide service to one or more individuals in a second organization, the system comprising:

• a computer program stored in memory, which when executed by a processor performs the steps of:
• (a) storing, by one or more physical nodes, a database comprising information pertaining to one or more services;
• (b) storing, by said one or more physical nodes, a database comprising information pertaining to one or more service providers associated with the first organization;
• (c) requesting a service authorization for a service provider associated with a first organization to provide a service to one or more individuals in a second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain;
• (d) comparing said requested service provider with said database of said information pertaining to one or more service providers to determine if said requested service provider has been authorized by the one or more individuals;
• (e) granting a service authorization to said requested service provider, wherein said service authorization comprises authorization from said regulating or funding organization to provide specific services to the one or more individuals;
• (f) receiving by said one or more physical nodes a first request for authorization for said service provider associated with a first organization to access one or more individual's information in a second organization, wherein the first request for authorization includes one or more of the one or more individual's name, social security number, state identification number, birth date, home address, and Medicaid number, the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the service provider associated with the first organization is associated with one or more roles and one or more caseloads, each of the one or more individual's information in the second organization has at least one type, the one or more roles includes access privilege information for one or more service providers, and the one or more caseloads includes access privilege information for at least one individual or medical services program;
• (d) logging, in an activity log associated with at least the first organization or the second organization, the first request for authorization for the service provider associated with the first organization to access the one or more individual's information in the second organization;
• (e) determining whether the one or more individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number;
• (f) responsive to determining that the individual's information in the second organization is accessible based on the one or more of the one or more individual's name, social security number, state identification number, birth date, and Medicaid number:
• (d)(i) determining whether the service provider associated with the first organization has been granted authorization to access the one or more individual's information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and one or more roles associated with the service provider, and the type of the individual's information in the second organization;
• (d)(ii) responsive to determining that the service provider associated with the first organization has been granted authorization to access the one or more individual's information in the second organization:
• (d)(ii)(A) transferring the one or more individual's information in the second organization to the service provider;
• (d)(ii)(B) logging, in the activity log, the granting of said service authorization and the transferring of the one or more individual's information in the second organization to the service provider.