Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-9509695-B2
Publication Date
2016-11-29
Expiration Date
Abstract
A system may include a first network in which user device(s) and a HIP server are communicably coupled. The first network may include a secure data administrator, such as a medical data system, that stores secure data. In some implementations, at least one of the user devices may include a web module and communicate with a web server through a second network. At least one of the user device may be restricted from communicating with the secure data administrator, so the user device may request data stored in the secure data administrator through the HIP server. The user device may base the requests for the data on information received from the web server.
Core Innovation
The invention relates to a secure-data access architecture in which an application device having a web server on a second network generates one or more web-based diagnostic interfaces for presentation on a first user device on a first network that is distinct from the second network. A user request received via the web-based diagnostic interface requests presentation of secure data related to the web-based diagnostic interface on a second user device that resides on the first network. The secure data is stored on a secure data administrator residing on the first network, while access to the secure data is restricted.
The restricted access is enforced by restricting the second user device and the secure data administrator from accepting incoming communication initiated by the first user device based at least partially on the first user device having access to the second network. The restriction is also applied such that the second user device and the secure data administrator are restricted from accepting incoming communication initiated by the application device based at least partially on the application device residing on the second network. Instead of direct cross-network communication from the application device, the first user device requests and receives instructions generated by the application device to allow presentation of the secure data on the second user device.
A HIP server residing on the first network mediates the transfer of the received instructions by transmitting at least a portion of the received instructions to at least one of the second user device or the secure data administrator. The HIP server is communicably coupled to the first user device and at least one of the second user device or the secure data administrator. The HIP server is restricted from accepting incoming communication initiated by the application device based at least in part on the application device residing on the second network, and key-based security association is used for validating security keys included in instructions and for allowing or restricting access to secure data.
Claims Coverage
The provided claims include three independent claims (method claim 1, method claim 7, and system claim 13). Across these independent claims, the core coverage centers on cross-network web-based diagnostic interfaces and restricted secure-data presentation mediated by a HIP server, with restrictions tied to network-initiated incoming communications and, in some dependents, instruction keys and key validity determination.
Cross-network web-based diagnostic interface access with restricted secure-data presentation
A method where a first user device on a first network requests one or more web-based diagnostic interfaces generated by an application device on a second network distinct from the first network, and the first user device requests presentation of restricted secure data on a second user device on the first network, where the secure data is stored on a secure data administrator on the first network; the second user device and the secure data administrator are restricted from accepting incoming communication initiated by the first user device based at least partially on the first user device having access to the second network, and are also restricted from accepting incoming communication initiated by the application device based at least partially on the application device residing on the second network.
HIP server-mediated transmission of instructions for presentation of secure data
A method where the first user device receives instructions generated by the application device to allow presentation of the secure data on the second user device, and the first user device transmits at least a portion of the received instructions to a HIP server on the first network, wherein the HIP server transmits at least a portion of the received instructions to at least one of the second user device or the secure data administrator to allow presentation of at least a portion of the requested secure data on the second user device, the HIP server is communicably coupled to the first user device and at least one of the second user device or the secure data administrator, and the HIP server is restricted from accepting incoming communication initiated by the application device based at least in part on the application device residing on the second network.
Key-based instruction control for allowing or restricting access
A method where the received first instructions include one or more keys, and the HIP server determines whether to allow access to secure data based at least in part on those keys, and where the HIP server checks whether one or more keys in the first instructions are valid, restricts access if any keys are invalid, and transmits at least part of the first instructions to display the secure data on a second user device if the keys are valid.
System with application web server generating diagnostic interfaces and a HIP-instruction device mediating presentation
A system comprising an application device with a web server on a second network that generates web-based diagnostic interfaces for presentation on a first user device on a first network distinct from the second network, receives a request to present secure data on a second user device where the secure data is stored on a secure data administrator on the first network and where the second user device and the secure data administrator are restricted from accepting incoming communication initiated by the first user device based at least partially on the first user device having access to the second network and are also restricted from accepting incoming communication initiated by the application device based at least partially on the application device residing on the second network, generates first instructions to present at least a portion of the secure data based on the received request, and transmits the first instructions to the first user device; and further comprising a second device on the first network that executes HIP instructions to receive at least a portion of the first instructions from the first user device and to transmit at least a portion of the first instructions to one of the second user device or the secure data administrator to allow presentation, wherein the second device is restricted from accepting incoming communication initiated by the application device based at least partially on the application device residing on the second network.
Across the independent claims, the invention provides cross-network generation of web-based diagnostic interfaces and controlled, restricted presentation of secure data on a separate user device on the first network. A HIP server/second device on the first network mediates instruction transmission for presentation while maintaining restrictions on incoming communications initiated across network boundaries, and additional dependent coverage includes key-based instruction control for allowing or restricting access based on key validity.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Medical applications involving diagnostic images and medical data systems, including PACS, RIS, BRIS, EHR, and HL7 [procedural detail omitted for safety]
Interested in licensing this patent?