Systems and methods for providing secure access to data using encrypted codes
Inventors
ROSENBERG, MICHAEL DAVID • GOTTFRIED, BRANDON JOSEPH • BALLARD, CHASE SPENCER
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-10853518-B2
Publication Date
2020-12-01
Expiration Date
Abstract
The present invention relates to directly and securely transferring encrypted medical data between parties, wherein a sender generates an encrypted access code. The access code is provided to a recipient who can then view the medical data without requiring cloud and virtual private network infrastructures, and which eliminate the need for medical data to be stored on physical media and physically carried to a recipient's location. The invention empowers patients to view, share, and manage their medical data, and facilitates the preservation of the continuum of care.
Core Innovation
The invention provides secure access to a medical image study by generating, by a server, an encrypted access code that contains a study identifier and at least one network location. The study identifier is associated with a plurality of diagnostic images stored on a plurality of databases coupled to the server, and the network location corresponds to network addresses of databases with diagnostic images containing the study identifier.
A user device transmits an instruction to the server to transmit the access code to at least one recipient device. The transmission medium is selected from electronic mail, facsimile, SMS messaging, direct messaging, and secure messaging, and the instruction includes a recipient address. The server transmits the access code to the recipient device based on the specified transmission medium.
The recipient device is allowed access to the diagnostic images via an encapsulated viewer upon the recipient device transmitting the access code to the server. The system supports secure medical-data transfer without relying on VPN or cloud storage constraints, and it enables recipient access to diagnostic images after submitting the access code, optionally with patient-specific identifiers.
The architecture described includes a web socket server, an application node, a relational database, a session server, and a STUN server to support secure peer-to-peer communication channels. The document also describes differentiated sharing workflows for healthcare vs non-healthcare recipients, including in-network secure peer-to-peer communication and out-of-network Direct/HISPDirect transmission, with DirectTrust-based address mapping and an access document package.
Claims Coverage
The independent claim identifies a server-driven method that uses an encrypted access code tied to a study identifier and network location to enable encapsulated viewer access, with transmission by a selected communication medium. Dependent refinements specify direct-messaging via a named framework and additional access-control and recipient-authorization conditions, including code validity and patient-specific identifier inputs.
Server-generated encrypted access code tied to study identifier and network locations
Generating, by a server, an encrypted access code containing a study identifier and at least one network location, wherein the study identifier is associated with a plurality of diagnostic images stored on a plurality of databases coupled to the server and the network location corresponds to network addresses of databases with diagnostic images containing the study identifier.
Transmit access code using selected transmission medium to recipient device
Receiving, from a user device, an instruction to transmit the access code to at least one recipient device, wherein the transmission medium is selected from electronic mail, facsimile, SMS messaging, direct messaging, and secure messaging, the instruction further including a recipient address, and transmitting, by the server, the access code to the recipient device based on the transmission medium specified in the instruction.
Encapsulated viewer access to diagnostic images upon returning the access code
Wherein the recipient device is allowed access to the diagnostic images via an encapsulated viewer upon the recipient device transmitting the access code to the server.
Direct messaging via HISP Direct framework
Selecting direct messaging as the transmission medium using the Health Information Service Provider (HISP) Direct framework.
Access code valid for predetermined duration
Providing an access code that is valid for a predetermined duration.
Recipient device registration required for access
Allowing access to the diagnostic images only when the recipient device is registered with the server.
Patient-specific identifier and access code required to access diagnostic images
Requiring the recipient device to provide the access code and a patient-specific identifier to the server to access the diagnostic images.
Patient-specific identifier selected from date of birth, social security number, address, or telephone number
Limiting the patient-specific identifier to a selection from a group consisting of date of birth, social security number, address, and telephone number.
Overall claim coverage centers on server generation of an encrypted access code that encodes a study identifier and network location for diagnostic images, delivery of the code using a selected transmission medium to a recipient device, and enabling encapsulated viewer access when the recipient device sends the code back to the server. Dependent refinements further constrain communication to HISP Direct, introduce a predetermined validity duration, and add recipient registration and patient-specific identifier requirements with an enumerated set of identifier types.
Stated Advantages
Secure access to a medical image study via an encrypted access code tied to a study identifier and network location.
Recipient device access to diagnostic images via an encapsulated viewer after transmitting the access code to the server.
Supports multiple transmission media for delivering the access code, including electronic mail, facsimile, SMS messaging, direct messaging, and secure messaging.
Access control based on code validity duration and recipient device registration status.
Additional access requirements using a patient-specific identifier along with the access code.
Supports differentiated sharing workflows for healthcare vs non-healthcare recipients, including direct transmission with DirectTrust-based address mapping and an access document package.
Documented Applications
Providing secure access to a medical image study stored on databases coupled to the server.
Sharing diagnostic images with recipient devices through transmission media including electronic mail, facsimile, SMS messaging, direct messaging, and secure messaging, using an encapsulated viewer after access-code submission.
Healthcare vs non-healthcare recipient workflows, including in-network secure peer-to-peer communication and out-of-network Direct/HISPDirect transmission with DirectTrust-based address mapping and an access document package.
Interested in licensing this patent?