Standing order database search system and method for internet and intranet application

Abstract

An internet and/or intranet based system and method for limiting access to confidential records to properly authorized and authenticated parties. The system's central premise is that the person to whom such records pertain should control access rights through specific, informed consent. It reinforces the widely held conception of privacy in general, while also providing an expedited and cost efficient means to find and transfer confidential records. It also gives the repositories where these records are held the right to stipulate the specific terms and conditions that must be fulfilled before they will release documents. And it carries out all of these legitimate interests in a way that is fast, simple to use and easy to audit. The system optionally includes a billing mechanism to pay for any added cost associated with providing this additional protection; and in its preferred embodiment, is applicable to both digital as well as non-digital records.

What is claimed is:  
     
         1 . A medical data base supervisory control system comprising:
 (a) at least one data base including medical data individually relating to each of a plurality of patients,   (b) means including interconnected computers for requesting and accessing said medical data,   (c) means for identifying medical data for each of said patients with conditions required for accessing said medical data, and   (d) data processing means responsive to a request for patient medical data for comparing said request with said conditions required for access to said data and, when said request fails to comply with said conditions, for denying access to said data.   
     
     
         2 . A system of  claim 1  further including means for authenticating the identity of the requesting party. 
     
     
         3 . The system of  claim 2  further including means to prevent access to information concerning medical records by any party without the prior authorization of the patient about whom such records pertain. 
     
     
         4 . The system of  claim 1  further including means for tentatively identifying records fulfilling criteria specified in said request for medical data. 
     
     
         5 . The system of  claim 4  further including means for authenticating identity of said patients. 
     
     
         6 . The system of  claim 1  wherein said means for requesting said medical data includes means for indicating what part of said records is desired. 
     
     
         7 . The system of  claim 1  wherein said means for requesting access to said medical records includes means for indicating the reason said records are being requested. 
     
     
         8 . The system of  claim 1  further including means for identifying records fulfilling said request with data symbolic of patient identity. 
     
     
         9 . The system of  claim 8  wherein said means for identifying records fulfilling said request further include data symbolic of medical symptoms or reason for patient visit. 
     
     
         10 . The system of  claim 8  wherein said means for identifying records fulfilling said request further include data symbolic of types of diagnostic tests performed. 
     
     
         11 . The system of  claim 10  wherein said means for identifying records fulfilling said request further include data symbolic of the attributes, levels or findings indicated within said diagnostic tests. 
     
     
         12 . The system of  claim 8  wherein said means for identifying records fulfilling said request further include data symbolic of modes of treatment or medical services rendered. 
     
     
         13 . The system of  claim 8  wherein said means used for identifying records fulfilling said request further include data symbolic of any ancillary services rendered. 
     
     
         14 . The system of  claim 8  wherein said means used for identifying records fulfilling said request further include data symbolic of attending physician identity. 
     
     
         15 . The system of  claim 8  wherein said means for identifying records fulfilling such request further include data symbolic of date of care. 
     
     
         16 . The system of  claim 1  wherein said means for requesting and accessing said medical data includes means for indicating a “standing order” that will automatically initiate an attempt to retrieve certain predetermined types of medical data under specific pre-specified circumstances. 
     
     
         17 . The system of  claim 1  wherein said conditions required for accessing said medical data includes an indication of the names of each of the parties who's permission must be obtained prior to the release of the medical data. 
     
     
         18 . The system of  claim 17  wherein said conditions required for accessing said medical data further includes an indication of the charge that will be assessed by the holder of such medical data for the part, or in the form, specified by the requesting party. 
     
     
         19 . The system of  claim 17  wherein said conditions for accessing said medical data includes means indicating the time following the receipt of all approvals that will be required for the delivery of such medical data to the requesting party. 
     
     
         20 . The system of  claim 1  wherein said at least one data base includes a firewall limiting access to searching such data base solely to those parties who are authorized to do so.