Integrated HIPAA-compliant computer security system for permitting an individual's circle of support to have access to individual budget and service plan data, and to monitor a plan for achieving the individual's goals

Inventors

Brockie, Justin Mark • Ali, Md. Asif • Faruq, A. S. M. Omar • Kelly, James Michael • Rafique, Sazzad • Robbins, Richard Allen

Assignees

Therap Services LLC

Abstract

Systems and methods are described which permit the state, the individual, the individual's case manager, and the individual's circle of support to have real time access to utilization data to monitor services and progress toward outcomes as part of a plan for achieving the individual's goals and maintain the individual's health and wellbeing, as well as to forecast future needs. Systems and methods for sharing billing information across at least two organizations in an integrated manner are also described. A physical node may receive a request for authorization for a user in an organization to access an individual's information in another organization. The request may be logged. The physical node may determine whether the user is authorized to access the individual's information and, if it is, provide appropriate access.

Core Innovation

The invention provides a HIPAA-compliant computer security method and a HIPAA-compliant computer security system for sharing service, budget, and billing information associated with personal health information of one or more individuals among at least a first organization and a second organization in an integrated manner. The invention includes preventing unauthorized access to the billing information while enabling authorized sharing in compliance with HIPAA.

The method and system receive, by one or more physical nodes, a first request for authorization for a user in the first organization to access service and budget information in the second organization pertaining to the personal health information of one or more individuals. The invention associates the first organization with a first security domain and the second organization with a second security domain, where the second organization has an access profile associated with the first security domain.

The invention logs the user's first request for authorization in an activity log associated with at least the first organization or the second organization and determines whether the user in the first organization is authorized to access the service and budget information in the second organization. If authorized, the invention transfers the service and budget information in compliance with HIPAA and logs the transferring in the activity log in compliance with HIPAA; if not authorized, the invention prevents the requested access in compliance with HIPAA and receives information pertaining to services provided and billing information generated by the first organization to permit monitoring of the service plan and progress toward outcomes and to forecast future needs.

Claims Coverage

The document includes two independent claims: a HIPAA-compliant computer security method for sharing service, budget, and billing information and a HIPAA-compliant computer security system for the same sharing. The independent claims center on authorization request receipt, activity logging, role/caseload/access-profile-based authorization determination, HIPAA-compliant transfer or prevention of unauthorized access, and receiving service and billing information to support monitoring and forecasting.

Across both independent claims, the claim coverage centers on an integrated, HIPAA-compliant sharing framework that uses security domains and an access profile tied to roles and caseloads to authorize transfer of service and budget information with HIPAA-compliant activity logging or to prevent unauthorized access. Both independent claims further include receiving service and billing information from the first organization to support monitoring the service plan and progress toward outcomes and to forecast future needs.

Stated Advantages

Documented Applications

No documented applications found