Patent Application
20180011973
The present invention relates to health data processing and secured health data management capabilities. For better sensitive health data access security management, there is a need for personal and highly secure legitimate device user's authentication, followed by the measurement and recording of user's personal health related parameters and further accumulating also the user's health related additional data received from external resources. The device should be functioning also as a vast content and secured health data depository. The invention should relate in particular to the integration of conventional smart mobile communication devices with computerized personal data measurement and storage devices to create a new type of mobile devices and their combined operational method. The legitimate device is user's authentication would enable the device exclusive use only by its owner, while blocking the device use and internal data depository content access to non-legitimate device users.
The Invention relates in particular also to the needs of supporting a specific health management application defined as the user's digital mobile Personal Health Records (mPHR), functioning as a personal mobile digital medical data depository, enabling the user's PHR creation and for further consistently updating and managing the owner's personal large scale and growing health history data depository. In addition the field of the invention deals with highly secured mobile, health related multi-users data management, storage and updating system, supporting the system's multi users with continuous personalized PHR data updating and management capabilities, done through cellular and internet communication. The system should also support measuring and sending out from the user's device a plurality of the user's recently measured medical data parameters, associated with the managing and supporting through the device its owner's health.
A personal health record, or PHR, is a health record where health data and information related to the care of a patient is maintained by the patient. This stands in contrast to the more widely used electronic medical record which is operated by institutions (such as hospitals) and contains data entered by clinicians or billing data to support insurance claims. The intention of a PHR is to provide a complete and accurate summary of an individual's medical history which is accessible online. The health data on PHR might include patient-reported outcome data, lab results, and data from devices such as wireless electronic weighing scales or collected passively from a smartphone.
The term “personal health record” is not new. The earliest mention of the term was in an article indexed by PubMed dated June 1978 and even earlier in 1956 reference is made to a personal health log. However, most scientific articles written about PHRs have been published since 2000. The term “PHR” has been applied to both paper-based and computerized systems; current usage usually implies an electronic application used to collect and store health data. In recent years, several formal definitions of the term have been proposed by various organizations.
based and computerized systems; current usage usually implies to an electronic application used to collect and store medical and health related data. In recent years several formal definitions of the term have been proposed by various organizations. It is important to note that PHRs are not the same as Electronic Health Records (EHRs). The latter are software systems designed for use by health care providers. Like the data recorded in paper-based medical records, the data in EHRs are legally mandated notes on the care provided by clinicians to patients. There is no legal mandate that compels a consumer or patient to store her personal health information in a PHR.
PHRs can contain a diverse range of data, including but not limited to: allergies and adverse drug reactions, chronic diseases, family history, illnesses and hospitalizations, imaging reports (e.g. X-ray, MRI, CT), laboratory test results, medications and dosing, prescription record, surgeries and other procedures, vaccinations, Etc.
There are two methods which data can arrive in a PHR. A patient may enter it directly, either by typing into fields or uploading/transmitting data from a file or another website. The second is when the PHR is tethered to an electronic health record, which automatically updates the PHR. Not all PHRs have the same capabilities, and individual PHRs may support one or all of these methods.
Portable wireless communication equipment, including smart mobile telephones, portable data assistants (PDAs), Notepads, Notebooks and other mobile electronic devices have been available and their technical and operational capabilities are fast expanding in the recent years. They are frequently used for implementing various daily needs through dedicated applications by the computer age users.
It has also been recognized that the high portability, strong computing power and the fast expanding daily frequent use of modern portable wireless communication equipment, is not any more just serving as a conventional phone or data communication device, but their use is expanding for using as modern communication devices as well as computerized mobile workstations. These computerized features are now serving most of modern user's life management needs. More specifically, because such devices are carried by most modern users through most of daily and night time activities hours, they are most suitable to be used as the user's safe and secured personal data depository including the user's personal and sensitive medical data depository. Further, a loss or theft of such devices creates a risk of unauthorized access and possible mal use of the device's internal user's personal data depository, the loss of a costly smartphone personal device containing a large variety of personal information important to its user, may lead to unauthorized access and mal-use by a hostile intruder to sensitive user's data stored on the device.
To reduce the risks of unauthorized use of the device's communication services and/or unauthorized access to stored data, most portable communication devices includes a password protection system. A typical password protection system is implemented by disabling the keypad, or the telephone circuits, and/or the specific installed data application, unless and until the user enters an applicable unlock code. Generally the password/unlock code is in the form of alpha numeric text which may be entered using the keypad of the mobile electronic device. There exist several challenges with such alphanumeric password/unlock code protection systems.
First, the protection provided by a password only exists so long as the password is not compromised. Many people tend to use passwords that are easily guessed, or write their passwords on paper, and otherwise compromise the integrity of their passwords.
Second, user entry of a password (and the associated key strokes needed to reach the password entry prompt and active the electronic device after password entry) can be hard to recall and also time consuming and aggravating—to the point where many people select the option of disabling the password protection of the mobile electronic device and their content.
An alternative system used to password protect a mobile telephone is disclosed in U.S. Pat. No. 6,351,634 to Shin. The system of Shin is useful for a mobile telephone that includes a touch screen. A registered secret symbol is used as the password. The secret symbol comprises a stroke number value responsive to the existence of pressure applied to the touch screen and X/Y coordinate values for each stroke. In operation, a user inputs a symbol using the pressure sensitive touch screen to draw the various strokes of the secret symbol. The device determines whether the input symbol matches the registered secret symbol and unlocks the telephone if the character stroke number value and the X/Y coordinate value signals match that of the secret password symbol. Shin teaches that the secret password symbol can be a character, a signature, a numeral, or a combination thereof. A significant challenge of the system of Shin is that so long as someone can duplicate the secret password symbol, whether by tracing the user's code insertion acts or by careful drawing possible variations on the touch screen, such person has access to the mobile telephone. Stated another way, authentication of the user is based on the user being able to duplicate the strokes and shape of the secret password symbol.
In a completely separate field of technology, character recognition has been proposed for use as a means for user input of character data into a computer system. For example, U.S. Pat. No. 6,188,392 to O'Connor discloses an electronic pen device that is coupled to a computer system by an RF transmitter or a batch communication docking station. The electronic pen device includes a combination of a pressure sensitive tip (for detecting contact with a surface) and accelerometers for detecting movement of the electronic pen device while in contact with the surface. Data from the accelerometers and the pressure sensitive tip are used to recognize each of a sequence of characters input by the user. While it may be possible to use the electronic pen device of O'Connor with a mobile telephone, such a system would include several drawbacks. First, such a system would be relatively expensive compared to a traditional mobile telephone or even the mobile telephone of Shin. Such a system would require the need for separate processing systems for both the mobile telephone and the pen, separate batteries, complimentary communication systems (whether by RF or docking station), and other duplicate components. Secondly, use of a discrete external electronic pen with a mobile telephone would be cumbersome at best for a user. The user would need to handle and maintain two separate devices.
The aim of a biometric system or module is the realization of the identification/authentication of people using some biological characteristic or physically measured behavior of the individual, in a safe and non-invasive way. The problem of identification and authentication of people is very old and has always tried in the past to be solved with different media: seals, titles, stamps, nameplates, etc. Today this is not enough and you need to introduce new legitimate user authentication and identification techniques to ensure that a person is who they say they are in many contexts.
There are many biometric techniques that try to recognize a person by their physical characteristics (iris, face morphology, fingerprint, voice recognition, etc.) or their behavior (gait, air gesture, manner of writing, online signature, etc.). It is vital in this document, by its similarity, to implement signature by a biometric technique online. Many works have been developed to improve this technique. They explain the basis for online signature verification. In this type of biometric identification testing, it is compared while the user is drawing on the screen to be matching to the one stored, and that the way to make such signature matches to what was done and recorded in the initial registration procedure by the registered user. To this end, various parameters are measured when making a signature, such as writing speed, pressure or angle of the pen at each point in time when the signature is done, among other features. These signatures can be performed in a special screen that collects and analyzes all necessary signals for analysis or on paper if the pen with which the firm is able to measure the signals described above and send them to a server where you perform the analysis and the signature verification. In patent MX2007007539 collects a system implementing the biometric authentication using an electronic signature. This system includes an interface to a computer capable of storing the movement of a cursor on a computer screen and compared with already stored signature patterns.
The first object of the present invention relates to performing a highly reliable user's authentication capability in a mobile device. Today, there are many applications that can be accessed from a mobile terminal where it is necessary and even critical in many implementations to positively and reliably identify the legitimate user. For years the entrusted all security user's identification on mobile devices are based on a simple solution, that is to type a secret key (PIN) on the phone keypad that the user knew. However, these keys can be easily forgotten, transferred, lost or even counterfeit, so that user authentication is highly compromised. Focusing on the advanced and more secured biometric technique to authenticate a user with a mobile device, are found in US2006286969 and in US2008005575.
In US2006286969 it is proposed to have a remote authentication scheme to authenticate users from a mobile device. The biometric technique used is the voice recognition. The system consists of a mobile phone to send voice samples of an authentication device that connects to a database that stores the identities of mobile phones and voice pattern associated with that phone to make a comparison and check the user is talking on the phone is registered in the system. US2008005575 proposes a method and integrated personal electronic device for authenticating a user on a mobile phone. While the user holds the phone to his ear, a microphone emits a signal near the user's ear and the speaker phone is able to measure the ear's response to this signal. A processor analyzes the response signal and converts it into a signature that uniquely identifies each person and can be used to authenticate. Alternatively various bio-authentication techniques are known as gesture recognition, in which a system is able to detect when a user makes a certain known gesture. Found US2009103780 and WO2009006173 patents related to methods to recognize standard gestures. Patent US2009103780 includes a method for collecting the gestures produced by hand, based on light hand at first by the palm and the back, to get your silhouette associated from various lighting infrared, it proposes a method for collecting various hand movements and identifying a series of gestures previously stored in a database of gestures.
WO2009006173 patent describes a method for detecting the response of an electronically gesture of a user while listening to a speaker using a mobile device, when performing a specific gesture. Related to the idea of recognition of a person by making a gesture is found the patent WO2007134433. It develops a method to authenticate a user when performing an action that manual manipulation of a device such as a mouse. Authentication is to obtain the gesture with the mouse by the user when chasing a target and compare it to the stored pattern of the user when that objective has been pursued previously. Regarding the use of accelerometers in mobile devices, there US2005226468 authentication systems proposed to authenticate the user based on certain biometric sensors must be connected to the mobile device, and verifies that the authentication was successful based on a accelerometer that collects data on how to get the user's device, ensuring it is not a machine trying to cheat the system.
Also, in US2009030350 discloses a method and a system for analyzing patterns gaits is of a subject by measuring the acceleration of the head in the vertical direction while walking. It uses an accelerometer that is placed on the user's head. The analysis includes the creation of a signature from the acceleration data when a user walks. In another invention the prior art also proposes the use of the patterns obtained by realizing the user gesture for generation or release of a cryptographic key. In this connection, patents found DE102005010698 and KR749380-B1. DE102005010698 describes the construction of a cryptographic key for secure communication independent from the fingerprint. It proposes to use that key to communication demand TV with pay per view applications, child protection or age verification.
KR749380-B1 describes a method to generate a key from a biometric characteristic that does not change with time as the iris. The biometric information is received and preprocessed, extracted some values and associated cryptographic key is obtained by grouping the values. The clustering error is corrected using a block of Reed-Solomon code. The obtained key can be applied to any cryptographic system.
Consequently, it is desirable to have a highly reliable mobile platform based medical health record personal data depository, highly protected by enabling access to the user's medical data depository, through a device integrated biometric recognition and authentication module, as will be further described in the present invention, to avoid the drawbacks existing in the previous methods, mobile devices and systems as of the present state of the art. The present invention solution is intended to perform a biometric authentication which brings and combines together the two general characteristics of biometric authentication: the physical characteristics and behavior. Therefore there is also a need in the art to have a mobile communication device that includes modules and methods for high reliability and easy to use way of authenticating a user of the mobile device, and locking or unlocking its communication functions and data storage access capabilities in a case of negative or a positive authentication, that does not suffer from the disadvantages of traditional characters strings based password protection systems and the disadvantages of prior art systems and biometric solutions such as in Shin's or O'Connor's.
Regarding to terminology used in this document portable communication equipment, FASO referred to herein as a “mobile radio terminal”, includes all equipment such as mobile phones, pagers, communicators, Notepads Notebooks and alike, e.g., electronic organizers, personal digital assistants (PDAs), smart phones or the like, It should also be appreciated that many of the elements discussed in this specification, whether referred to as a “system” a “module” a “circuit” or similar, may be implemented in hardware (circuits), or a processor executing software code, or a combination of a hardware circuit and a processor executing code. As such, the term circuit as used throughout this specification is intended to encompass a hardware circuit (whether discrete elements or an integrated circuit block), a processor executing code, or a combination of a hardware circuit and a processor executing code, or other combinations of the above known to those skilled in the art.
The following embodiments and aspects thereof are described and illustrated in conjunction with the invention devices, methods and systems, which are meant to be exemplary and illustrative, not limiting in scope. In various embodiments, one or more of the above-described limitations and emerging modern user's growing mobile devices daily secured use needs, have been solved, reduced or eliminated, while other embodiments are directed to other advantageous or improvements of securely managing and updating a modern user personal and private medical data comprehensive depository.
The core of the present invention is an advanced and highly reliable new approach to have and manage user's private personal medical data depository and other health management documentation storage on the present invention dedicated integrated mobile devices while highly protecting the invention mobile device stored medical data depository against intruders, hackers and mal use. The invention device has an is integrated highly reliable user's authentication module, analyzing the user's at least two biometric sensors measure output when user's authentication is done, while the user is holding the mobile device and operating in tandem the biometric sensors measurement on his relevant human body parts and on monitoring his unique human behavior parameters.
One of the main objects of the present invention proposes the creation of a positive and highly reliable and secured user's bio-authentication by implementing an advanced multi-sensors output results analysis fusion by an advanced set of algorithms, done through a dedicated computer SW that is processing the measured outputs of at least two parallel biological and physiological sensors and measuring their output in tandem and provide the final authentication results under a weighted decision factor to create a more reliable user's combined authentication means.
Two of the preferred embodiments of the present invention biometric identification and authentication means and methods may be the user's face recognition and in a second biological user's recognition channel it is done by imaging and analyzing the image of the user's hand—both palm and fingers morphological pattern. In another novel embodiment of the present invention the image of the palm may include also the detection and analysis of the image of the veins and minor blood vessels seen on the palm surface image while imaging the palm with an IR sensitive camera sensor and illuminating the palm with an near IR illumination source, such as a high intensity IR LED. In another user authentication mean may be by a human movement or gesture pattern, while the mobile device is intentionally moved in the air wherein held in the user's hand in a 3D personalized movement pattern that identifies a user, taking into account that this gesture will only be known by the user and also that physical characteristics, it will perform differently to other people who might try to repeat the gesture. Focusing on technical status related to the present invention, it should be noted that performing gestures to biometrically authenticate a person on a mobile device using 3D in-air gestures measured with an accelerometer is novel.
A first aspect of the present invention comprises a mobile electronic device, which enables a user to authenticate himself through the parallel in tandem operation of the present invention mobile electronic device internal integrated set of biological sensors capabilities and then to enable a function of the mobile electronic device using its internal CPU module to differentiate between the authenticated legitimate user and a none authenticated none legitimate user by analyzing and detecting the users personal unique biometric sensors output measurement such as the user's face pattern image, the user palm and fingers image analysis and the user's personalized movement sequence, while 3D moving the mobile electronic device in the air.
The invention integrated mobile electronic device comprises a 3D acceleration measurement module generating an acceleration signal representing the user hand motion in space while holding and uplifting the mobile electronic device. A lock/unlock circuit enables operation of at least one function of the mobile electronic device in response to the measured 3D acceleration signal indicating that the user holding the mobile device hand motion pattern deviates from pre-recorded reference original owners hand motion uplifting movement signal data, while holding and uplifting the mobile device by more than a predetermined threshold.
The lock/unlock circuit may further comprise an integration module and an executable authentication process module. The integration module integrates the acceleration signal with respect to time to generate a velocity signal and a displacement signal. The executable authentication process: i) compares a representation of the displacement signal and the velocity signal, with or without the acceleration measured signal, to the reference motion data. The reference motion data comprising reference displace; and ii) enables operation of at least one function of the mobile electronic device if the representation of the displacement signal and the velocity signal and the acceleration signal data deviate from the reference displacement data and velocity data and the measured acceleration data by more than a predetermined threshold. The reference motion data may also represents the device legitimate user's simple three dimensional gesture movements in space and the user motion represents the device user moving the electronic device in the same simple three dimensional gesture.
In one preferred embodiment of the present invention device there is an integrated mobile personal electronic device, comprising: a. a communication device equipped with a cellular modem, the communication device configured to receive and transmit a user's medical data to and from a plurality of medical data suppliers; b. an electronic add-on sleeve attachable to the communication device thereby forming together a single composite device, the sleeve configured to is securely store and manage the user's medical and health management data; and c. wherein the sleeve comprises a module for activating a lockable set of functions for inhibiting access to said sleeve content.
In another preferred embodiment of the present invention device, the electronic sleeve module of the integrated mobile device is further comprising: a. at least one CPU; b. a solid state, large data capacity, secured memory module; c. a RAM unit; and d. at least two sensor modules, the sensor modules are selected from the sensors group including at least biometric and physiological sensors, thereby to measure and generate the user's authentication by implementing and processing said user individual biometric and physiological parameters.
In another preferred embodiment of the present invention PHR management system the PHR management system is combined of a plurality of remotely distributed integrated mobile personal devices, each containing a secured personal health and medical records storage and data management module, each such integrated mobile personal device is combined of a mobile communication device operating together with an attached mobile electronic add-on sleeve device, the sleeve functioning as a private secure user bio-authentication and medical records storage and management platform, while each of said mobile communication devices communicating with at least one remote medical services provider, the system comprising: a. a system gateway server operating as said system manager for managing and updating ID data of the system plurality of PHR data users integrated mobile personal devices and for securely communicating through the cellular networks and the internet communication infrastructure with each of the plurality of PHR data users integrated mobile personal devices and with the at least one PHR data remote medical services provider serving said PHR data users; b. a memory sub-system connected to the system gateway server to store updated ID data of the integrated mobile personal devices and any required associated user data of each of the plurality of the integrated mobile personal devices users; c. a plurality of integrated personal mobile devices units, each of said integrated mobile devices being associated with a unique user, each unique ID data of said mobile devices being registered with said system gateway server and wherein the ID data file of each unique ID data of the mobile devices being stored in said memory sub-system; d. the gateway server has a plurality of registered medical emergency centers and a plurality of registered medical and health related service providers, all in secured communication through the internet network with said gateway server, the plurality of health service providers comprising at least one of the providers group including health insurance companies, clinics, hospitals, medical imaging institutes, private clinics, government health institutes and municipal health services; e. wherein the gateway server creates access and creates a communication link with any of the selected system registered health service providers in order to get and enable the creation of a direct data access and direct communication link between the selected service provider and a selected specific user's integrated personal mobile device and exchanging and updating personal health management related PHR data and documentation files resident on said user integrated personal mobile device and wherein said access creates a two-way data transfer enabled between any of said system selected user's personal data and documentation files stored by said registered service provider and said user integrated personal mobile device PHR data storage; and f. wherein said communication link is enabled only after positive authentication of the unique user is created by the user's integrated mobile personal device embedded user's bio-authentication capabilities.
Unless otherwise defined, all technical and/or scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the invention pertains. Although methods and systems similar or equivalent to those described herein can be used in the practice or testing of embodiments of the invention, exemplary methods and/or systems are described below. In case of conflict, the patent specification, including definitions, will control. In addition, the materials, methods, systems and examples herein are illustrative only and are not intended to be necessarily limiting.
Some embodiments of the invention are herein described, by way of example only, with reference to the accompanying drawings. With specific reference now to the drawings in detail, it is stressed that the particulars shown are by way of example and for purposes of illustrative discussion of embodiments of the invention. In this regard, the description taken with the drawings makes apparent to those skilled in the art how embodiments of the invention may be practiced.
The present invention, in some embodiments thereof, relates to dedicated integrated new mobile devices that are personal to their single owner, wherein the devices are serving their owners for PHR management and for updating personal mobile health & medical data management and, more particularly, but not exclusively, to methods, a device and a systems to manage and conduct mobile devices operational permit through bio authentication and the following execution of various alarms and notifications in case of a non-legitimate user authentication failure.
Before explaining some embodiments of the invention in details, it is to be understood that the invention is not necessarily limited in its application to the details of construction and the arrangement of the components and/or methods set forth in the following description and/or illustrated in the drawings and/or the examples. The invention is capable of other embodiments or of being practiced or carried out in various ways.
As will be appreciated by one skilled in the art, aspects of the present invention may be embodied as a device, a system, a method or computer program product. Accordingly, aspects of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment (including firmware, resident software, micro-code, etc.) or an embodiment combining software and hardware aspects that may all generally be referred to herein as a “circuit,” “module” or “system.” Furthermore, aspects of the present invention may take the form of a computer program product embodied in one or more computer readable medium(s) having computer readable program code embodied thereon.
Any combination of one or more computer readable medium(s) may be utilized. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, integrated personal electronic device, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a hard disk, a random access solid state memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash Memory), an optical fiber, an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, integrated personal electronic device, or device.
A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated signal may take any of a variety of forms, including, but not limited to electronic, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, integrated personal electronic device, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wire-line, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The program code may execute entirely on the user's smartphone, partly on the user's smartphone, as a stand-alone software package on the user electronic sleeve shaped add-on computerized device, partly on the user's smartphone and partly on a remote computer, or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's mobile device through any type of network, or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider, or through a cellular service provider).
Aspects of the present invention are described below with reference to flowchart illustrations and/or block diagrams of devices, methods, systems and computer program products according to different embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a smartphone, on an electronic sleeve shaped smartphone add-on computerized device, a notepad, a laptop, a special purpose computer, or other programmable data processing integrated personal electronic device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing integrated personal electronic device, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer readable medium that can direct a computer, other programmable data processing integrated personal electronic device, or other devices to function in a particular manner, such that the instructions stored in the computer readable medium produce an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.
The computer program instructions may also be loaded onto a smartphone a mobile or portable computerized device, other programmable data processing integrated personal electronic device, or other devices to cause a series of operational steps to be performed on the computer, other programmable integrated personal electronic device or other devices to produce a computer implemented process such that the instructions which execute on the computer or other programmable integrated personal electronic device provide processes for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
Reference is now made to
Authentication data buffer module 122 which is a part of the electronic add-on sleeve device 150 memory and authentication sub-section 160, is a secured memory buffer containing the device biometric sensors sampled data of the mobile personal electronic device user's authentication reference data, as the stored digital converted output of the various sampled mobile electronic sleeve shaped device 150 resident biometric sensors, wherein the biometric data is collected and stored during the user first and initial enrollment registration process. The data buffer module 122 is also connected with sub-module 123 that samples and stores the current user face and palm images digitized data, to further use it as the user's additional channels of bio authentication sources, according to the present invention authentication embodiments. Module 124 is the central SW module in the present invention electronic sleeve device 150 managing the selection of optimal process for selection, choosing and executing the optimal residing authentication algorithm, choosing the optimized one of several authentication algorithms and significant user identification sources options. The 124 module does the analysis the user's biometric sensors 120, 118, 130 and 127 modules output. The 124 module also creates the improved quality and reliability of the authentication process of the integrated mobile electronic device 100 while fusing together the user's measured biometric sensors output, wherein the method is implementing into the authentication process the user hand in air 3D gesture, the user's face pattern and the palm recognition imaging data, as the first, the second and the third sources of the user's bio personal data, thus enabling an optimal quality authentication process, combining gesture, face and palm personal bio data.
Module 124 has in one of the invention embodiment another additional set of functions for execution in the cases that the authentication process of the current device holder is indicating a failure, which is a non-authenticated user case. In such a case the module 124 is creating a series of preprogrammed alarm functions, creating audio alarm set of signals on the audio module 118 and displaying visual eye attracting flashing images through the display module 108. In parallel alarm data is sent from the invention mobile device to a remote cellular service provider and through it to a set of the users who are the device owner group of pre-selected piers to notify them on the event of theft or loss of said device 100 and the location of the theft, as it is constantly read and transmitted via data link 113 with the invention mobile device 100 location data created by the GPS module 112. Software module 126 is storing and managing legitimate user reference registration data, as required by present invention integrated mobile personal device 100, while managing the registration procedure of the legitimate user prepared and stored by module 126 to serve as the reference set of data while compared to the current user biologic sensors measured and processed authentication data. A sub module connected, functioning with and used by module 126. SW module 127 stores and manages the legitimate device owner face and palm pattern reference data created at enrollment session, The recorded reference imaging data including the legitimate user face and palm pattern recognition parameters and also may potentially store and manage the registered user's selected small group of piers (close friends and family) with their face recognition data to avoid false operation of the device alarm functions when one of the legitimate user's piers is by mistake lifting and holding the invention 100 protected mobile device. Module 128 is a SW module that manages the extraction and processing of the sampled output of a set of physiological sensors 129. Module 128 processed and stored physiological data package selected out of the total output of all the user's selected output of all physiological daily measured parameters by the sensors module 129. These sensors module may include one or more sensors selected from the sensors group including at least; a heart bit rate measurement sensor, a blood oxygen (O2) % content sensor, an EKG measurement sensor, an EEG measurement sensor, a blood sugar content measurement sensor, a body temperature measurement sensor, a blood pressure measurement sensor, a GSR skin perspiration measurement sensor, a video camera sensor for user's face image expressions and skin color status analysis, an eye Iris recognition imaging sensor, a body heat measurement indicator, an electro-dermal activity indicator and a physical or emotional stress sensing indicator.
The measured physiological sensors output are then transferred within said sleeve device 150 to the physio data packaging module 124 and then the selected user's measured physiological set of parameters is then fed to the communication device 140 to be securely transmitted through cellular link 103 through modem 104 to the selected remote medical staff, resident in the remote medical service providers 102. Also module 128 is used for processing of the integration algorithms on the acceleration measured device 114 results data, in order to achieve data related to the device velocity and position in space, based on the acceleration data one time for speed/velocity and two times integration for position calculation results. Module 130 is a SW module that manages the extraction of the sampled gyro based tilt measurement 3D set of sensors 114 and also in processing derivatives algorithms on the tilt angles measured device data results, in order to achieve data related to the device angular velocity and angular acceleration in space, based on the measured 3D tilt angles data, one time and two times derivatives calculation results.
Reference is now made to
Reference is now made to
In parallel in stage 312 the device is initiation a sequence of exposures of the integrated camera imaging the user in order to accumulated maximum visual data on the face recognition of the evaluated user, alternatively the user can choose the side camera for imaging the palm morphological pattern of his extended hand palm facing the side camera. In stage 316, the state machine shows the operation wherein the device SW is uploading the original user movement and face/palm measured data recorded and stored during the initial stage of the legitimate device owner/user first enrolment and registration procedure. In stage 318 the state machine shows the actual authentication phase execution by comparing the movement results of the user hand holding the device to the stored user's hand movement recorded data collected during the user's initial enrolment stage and in parallel comparing the main facial features of the photographed user to those recorded and securely stored in the sleeve device secured memory during enrolment. Stage 320 is a decision stage of the state machine by comparing the 3D movement graph shape of the user to the shape done and recorded in the enrollment initial phase. If comparison results show a bigger than a predefined threshold level deviation between the two present and past recorded 3D movements graphs, then the state machines moves to stage 324 when device is notifying present user on authentication failure and possibly activating a user optional selectable full alarm display and sound generation. If movement shape of the enrolment data file and the present user movement data file are matching above a predefined threshold, then the state machine is moving to stage 322 wherein comparing the measured face recognition main features of the user's photographed face between the present user imaged face and the registered set of user's original enrollment process face image main features recorded in the face recognition process. If the results show no match, the state machine moves to stage 324 notify the present device-holding user of non-authentication results and activates an optional prior original user selectable alarm mode as well. If comparison done on stage 322 show good match above a predefined SW driven matching threshold, then the invention electronic sleeve device CPU moves the state machine to state 328, wherein the device SW stating to the present combined mobile device holder that full user's authentication is approved and the user can use the combined mobile personal device for PHR depository content maintenance and updating functionality for, all its available operational functions. Stage 326 is activated as a final conclusive stage of a non-legitimate user with no authentication final approval stage, wherein the user is defined by the device as a non-legitimate user trying to still or use the device with no authorization. In such a case optional stage 326 the device sends an alarm and the face pictures of the suspected non authorized user by a text/image message (SMS or WhatsApp message) to a dedicated security entity and/or to remote multiple users and in parallel sending a similar alarm, suspect thief images and theft warning messages to pre-recorded contact details of friends of the legitimate device owner.
Reference is now made to
The invention multi-users PHR management system 400 is comprising of the following main elements: a; a system gateway server 408 operating as the invention PHR management system 400 manager, for managing and updating the ID data of the system 400 plurality of PHR data users mobile devices 402 and for securely communicating 410 with each of the plurality of PHR data users mobile devices 402 and in parallel securely communicating 412 with a plurality of PHR data suppliers remote medical services providers 414; b: a memory sub-system 409 connected to the system gateway servers 408 to store updated ID data of the mobile electronic sleeve device 404 and any required associated user data of each of the plurality of the mobile devices 402 users; c: a plurality of personal mobile devices units 402, each of these mobile devices 402 is being associated with a unique user, each unique ID data of the mobile devices sleeve units 404 is registered with the system gateway server 408 and wherein the ID data file of each unique ID characterizing number of the mobile devices 404 is stored in the servers 408 memory sub-system 409; d: a plurality of the gateway servers 408 are communicating with registered medical emergency centers and with a plurality of registered medical and health related service providers 414, these PHR data suppliers are in communication through the internet network with the gateway servers 408. The plurality of health service providers 414 include health insurance companies, medical testing clinics, hospitals, medical imaging institutes, private clinics, medical rehabilitation and specializing clinics, government health institutes and municipal health services and pharmacies; and e. wherein the gateway servers 408 access and creates a communication link with the any of the system registered health service providers to get access to their pre-registered users' personal health management related medical and administrative data and documentation files and wherein the access to any of the system registered users' personal data and documentation files generated, processed and stored by the registered medical data generating service providers 414, the access to transfer of the selected user data is only enabled after positive authentication of each of the system registered unique users by their integrated mobile personal devices 402 supported and executed by identifying the users' personalized identification data, associated by the system servers 408 with the registered owners of the integrated mobile personal devices 402 through the identification of their composing sleeves 404 unique production serial number. These electronic sleeve shaped add-on mobile devices are a critical PHR data management component in each one of the system 400 user's mobile personal mobile devices 402.
Reference is now made to
It is shown in
In stage 520 of the
In stage 521, the invention PHR management system 400 creates a secured access to the medical insurance company server that the user is a member of, according to the relevant data in the medical records stored in the user's invention integrated personal electronic device 402 memory.
In stage 522, the user's integrated personal electronic device 402 sends to the medical insurance server 414 the user's member username and medical insurance member ID number and if requested also the user's access password to the medical insurance website. In stage 523, the medical insurance company server checks if is the user medical file ID data fits to the ID and user data that was received from the user's integrated personal electronic device 402 through the invention system and continues to stage 524 if positive and returns back to starting point stage 510 if received user's identification information results are not acceptable and consequently the acceptance response is negative.
In stage 524, the system requests the user to select between several options in a menu screen that he gets on through his mobile personal electronic device display. In option 525, the user may choose making a doctor/clinic appointment. In choosing option 530, the user requests all his recent past medical tests results not yet updated to his mobile personal electronic device PHR data memory, otherwise the user is directed back to stage 520 and then stops if no further action item is selected by him.
In stage 525, the user receives a screen from the medical insurance through the invention PHR system fed into his mobile personal electronic device display, requesting the user to select the professional type and the name of the medical doctor he wants to meet. In stage 526, the user gets a screen with the reception open dates and hours for the selected doctor. In stage 527, the user is selecting and approving his best date and time choice for appointment with the selected doctor.
In stage 528, the user receives from the medical insurance computer 414 a final confirmation notice screen with the reception open dates and hours for the selected doctor regarding the user's final approved medical appointment time and day, then the process continues to stage 529. In options selection stage 529 the user receives a menu on his mobile personal electronic device 406 display screen to go back to 524 or to see his past medical tests results for which option selection he goes to 530, or to return through starting point 510 to main menu 520, or to save tests results in stage 501. In stage 530, the user receives on his mobile device screen display 406 a menu screen from the medical insurance server, to select the medical tests results he wants to review.
In stage 531, the user selects the requested tests results and the user's integrated personal electronic device forwards to the user's personal device screen 406, the most updated results the user has in his integrated personal electronic device memory on this specific test, if any. In stage 532, the medical insurance company is server searches its memory records to check if it finds more relevant updated tests data on this user and then it sends the found files to the user's personal mobile device to enable the user to select either to display the results on the device screen or/and to save them in his integrated personal electronic device memory for long term storage. In stage 533, the user selects his choice on the processing of the retrieved specific one or more medical tests results and the system goes back to stage 529, which may connect to the updated PHR data save stage 801.
In stage 540, the user receives a menu screen on his mobile device display 406 to choose a hospital from a list, or to return to stage 520. He then chooses the preferred hospital from the list and then goes to stage 541. In stage 541, the system server 408 contacts the selected hospital via a secured communication channel 416 it has with each of the hospitals in the displayed list and creates an open communication link with the hospital server 414. In Stage 542, the user's personal integrated personal electronic device 402 sends the user's ID data file including full name, ID card number and basic insurance and medical profile details. In stage 543, the selected hospital server checks if it has in its records that the specific user was a hospitalized patient or was treated by the hospital's clinics; if yes, it goes to stage 544, if not, it goes back to stage 540 and creates and automatically fills-in a new patient acceptance entry file document. In stage 544, the user receives a screen with a menu requesting him to choose if he needs a hospital release medical report, medical tests results, or billing and administrative reports and the user selects his choice.
In stage 545, the hospital server searches for the selected data files and goes to 546 if the requested data files were found, and if not, the process goes back to stage 540. In stage 546, the user receives the specific requested information from the hospital on his integrated mobile device screen 406. In stage 547, the user receives a menu screen requesting him to choose where to store the retrieved hospital data in the hospital system memory, wherein the user's personal medical data files are stored, or in the user's personal integrated personal electronic device 402 memory, or if both then it goes to stage 801.
After the new medical files are saved and stored in one or two of the selected storage memories in stage 801, then the process goes back to stage 520, where the user gets a new menu screen to start another medical data processing sequence with the is invention system and with external medical services providers, or goes back to start a new interaction sequence stage 302 with the PHR management system 400, as described in
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/IB2016/050432 | 1/28/2016 | WO | 00 |
| Number | Date | Country | |
|---|---|---|---|
| 62108614 | Jan 2015 | US |
