Managing secure sharing of private medication information across security domains
Inventors
Robbins, Richard Allen • Gifford, Warren Stanton • Hassnat, Mojahedul Hoque Abul • Turock, Bradley Drew • Brockie, Justin Mark • Kelly, James Michael • Rahman, Ziaur
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-8819785-B2
Publication Date
2014-08-26
Expiration Date
Abstract
A method of granting a user in a first organization access to private medication information stored within an authorization profile of a second organization, an access agreement between the two organizations is formed. Authorization is requested for the user, the authorization profile is retrieved, and authorization to private information is granted if authorized by the access agreement.In a method of authorizing access by users to private medication information stored by an organization as associated with a program, three types of caseloads are defined. The first authorizes access to medication information of a first individual of a first program, the second authorizes access to medication information of a second individual of all programs, and the third authorizes access to medication information of all individuals of a second program.Authorization for access is requested and granted for the user to access one or more of the caseloads.
Core Innovation
The disclosed invention relates to secure sharing of private medication information among at least a first organization and a second organization that are associated with different security domains. A first organization receives a first request for authorization for a user to access one or more individuals’ medication information in the second organization, and the authorization request is associated with one or more roles and one or more caseloads.
The system logs the user’s request for authorization in an activity log associated with at least the first organization or the second organization. It determines whether the user is authorized to access the one or more individuals’ medication information in the second organization based on at least the access profile, the one or more caseloads, the one or more roles associated with the user, and the type of the medication information in the second organization.
When authorization is determined, the system transfers the one or more individuals’ medication information in the second organization to the user and logs the transferring in the activity log. The shared medication information is characterized by medication information types, including medication error information and emergency medication information, and a corresponding non-transitory computer-readable storage media and secure sharing system are described with the same authorization, access determination, transfer, and logging functions.
Claims Coverage
The independent claims include a method claim, a non-transitory computer-readable storage media claim, and two system claims, each defining the same core authorization-and-transfer workflow with role/caseload-based access profiles and medication-information types. The claims also include logging of authorization requests and transfers, and optional identifier-based accessibility determination.
Domain-associated secure authorization request for medication information access
Receiving a first request for authorization for a user in the first organization to access one or more individuals' medication information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads, and each individual's medication information in the second organization has at least one type.
Activity logging of authorization requests and transfers
Logging the user's first request for authorization in an activity log associated with at least the first organization or the second organization, and responsive to determining authorization, logging the transferring of the medication information to the user in the activity log.
Authorization determination based on access profile, roles, caseloads, and medication-information type
Determining whether the user is authorized to access the medication information based on at least the access profile, the one or more caseloads, the one or more roles associated with the user, and the type of the medication information in the second organization.
Conditional transfer of authorized individuals’ medication information
Responsive to determining that the user is authorized to access the medication information, transferring the one or more individuals' medication information in the second organization to the user.
Identifier-based accessibility determination for medication information
Determining whether the medication information in the second organization is accessible based on one or more of the individual's name, social security number, state identification number, birth date, home address, or Medicaid number.
Across the independent claims, access to medication information across security domains is controlled by an access profile associated with the first security domain, roles and caseloads associated with a user, and the type of the medication information. The workflow includes logging authorization requests and transfers in an activity log, with optional identifier-based accessibility determination.
Stated Advantages
Provides secure sharing of medication information among organizations associated with security domains.
Provides logging of authorization requests and transferring in an activity log.
Restricts access by determining authorization based on an access profile, roles, caseloads, and the type of medication information.
Documented Applications
Secure sharing of medication information between organizations for access by a user.
Interested in licensing this patent?