Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-8868768-B2
Publication Date
2014-10-21
Expiration Date
Abstract
A system may include a first network in which user device(s) and a HIP server are communicably coupled. The first network may include a secure data administrator, such as a medical data system, that stores secure data. In some implementations, at least one of the user devices may include a web module and communicate with a web server through a second network. At least one of the user device may be restricted from communicating with the secure data administrator, so the user device may request data stored in the secure data administrator through the HIP server. The user device may base the requests for the data on information received from the web server.
Core Innovation
The invention provides a secure medical data access workflow for presenting restricted medical data on a second user device while reducing communication from a first user device to the second user device and a secure data administrator device. A first user device transmits a first request to an application device that comprises a web server external to a first network, and the first request is related to presentation of medical data, to which access is restricted, on the second user device residing in the first network.
The workflow receives instructions at the first user device from the application device at least partially based on the transmitted first request, and the first user device then transmits at least a portion of the received instructions to a HIP server residing in the first network. The HIP server is communicably coupled to the first user device and at least one of the second user device or the secure data administrator device, can initiate outgoing communication to a network external to the first network, and is restricted from accepting incoming communications initiated by a device in a network external to the first network.
Responsive to receiving at least a portion of the received instructions from the first user device, the HIP server transmits a second request to at least one of the second user device or the secure data administrator device to allow presentation of the medical data requested in the first request on the second user device. The secure medical data is stored on a secure data administrator device residing in the first network, and access restrictions are enforced by restricting the first user device from initiating communication with the second user device and the secure data administrator device based at least partially on the ability of the first user device to transmit requests to the application device.
Claims Coverage
The independent claims cover three aspects of the same secure medical data access concept: a method, a non-transitory machine-readable medium, and a system architecture. Across the independent claims, four inventive features recur: the web-server application device external to the first network generating and handling presentation-related requests, the HIP server in the first network that forwards instructions and requests while enforcing outgoing-only Internet communication restrictions, the restricted communication behavior of the first user device with the second user device and the secure data administrator device, and the request-and-instruction flow for presenting secure medical data on the second user device.
Multi-device secure medical data access mediated by a HIP server
transmitting a first request from a first user device to an application device external to the first network where the first request is related to presentation of medical data on a second user device in the first network and the medical data is stored on a secure data administrator device in the first network; receiving instructions from the application device and forwarding at least a portion of the received instructions to a HIP server in the first network; and responsive to the received instructions, transmitting a second request from the HIP server to at least one of the second user device or the secure data administrator device to allow presentation of the requested medical data on the second user device.
HIP server outgoing communication enabled and incoming communication restricted
wherein the HIP server can initiate outgoing communication to a network external to the first network and is restricted from accepting incoming communications initiated by a device in a network external to the first network, while the HIP server is communicably coupled to the first user device and at least one of the second user device or the secure data administrator device.
Restricting the first user device from initiating direct communication with presentation and data nodes
wherein the first user device is restricted from initiating communication with the second user device and the secure data administrator device based at least partially on the ability of the first user device to transmit requests to the application device.
Web-server external to the first network generating interfaces for presentation requests
an application device comprising a web server external to the first network and configured to generate one or more interfaces for requesting from the application device presentation of at least a portion of the secure medical data on a second user device, wherein the first user device requests presentation via at least one of the generated interfaces and receives instructions from the application device for presentation.
Taken together, the independent claims define a HIP server-mediated workflow in which an external web-server application device handles presentation-related requests, the HIP server forwards instructions and second requests from the first network while enforcing that the HIP server can initiate outgoing communication but is restricted from accepting incoming Internet-initiated communications, and the first user device is restricted from initiating communication with the second user device and the secure data administrator device.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?