Patent Application
20160070924
Despite the availability of many kinds of content and information to users through wired and wireless networks, electronic copies of medical records and other patient-specific health information are often very difficult for patients to obtain. Some medical service providers maintain only paper copies of certain medical records, and others maintain utilize electronic health records that are not available to patients over a network. A smaller number of medical service providers do allow patient access to medical records over a secured network connection, but even then such providers typically require a patient to report in person to a medical service provider facility in order to obtain a code that is used for the network access. Even after doing this, the patient typically receives only the medical records and information generated by that medical service provider.
To address many of these issues, the National Health Information Network initiated the Direct Project. The Direct Project specifies a secure, standards-based technique for medical record communication between patient and medical service provider. Any patient who has already established a Direct Project email account (also referred to as a “Direct email account”) may give the email address for that account to the medical service provider, and the medical service provider may send medical records to that email address.
The detailed description is set forth with reference to the accompanying figures. In the figures, the left-most digit(s) of a reference number identifies the figure in which the reference number first appears. The use of the same reference numbers in different figures indicates similar or identical items or features.
This disclosure describes, in part, techniques for receiving content, such as medical information, for a recipient before the recipient has created a secure electronic message account. Upon receiving the content, a message may then be sent to a communication address of the recipient inviting the recipient to request creation of the secure electronic message account. Once the secure electronic message account is created, the content may be sent to the recipient via the secure electronic message account. In some examples, the communication address of the recipient may be obtained from the user name part of a virtual account address. The content may initially be communicated by a sender, such as a medical service provider, that sends a secure communication to the virtual account address. In further examples, the communication address may be obtained from the medical information.
Upon receiving a message inviting the recipient to request creation of a secure electronic message account to view content intended for the recipient, the recipient may request creation of the secure electronic message account. The recipient may then be requested to answer a validation challenge to provide evidence that the recipient is the intended recipient of the content. Following validation, the recipient may receive the content via the secure electronic message account.
In various examples, the account creation service 102 may be implemented by one or more computing devices. Such computing device(s) may each be or include a server or server farm, multiple, distributed server farms, a mainframe, a work station, a personal computer (PC), a laptop computer, a tablet computer, an embedded system, or any other sort of device or devices. In one implementation, the computing device(s) include a plurality of computing devices working in communication, such as a cloud computing network of nodes. An example computing device of the account creation service 102 is illustrated in
Further, the account creation service 102 may be associated with services provided to medical service providers, patients, and persons responsible for the care of patients (“responsible persons”). These services may include the creation of secure electronic message accounts, the secure transmission of medical information, such as medical records, between medical service providers and patients or responsible persons, and the maintenance of medical records, medical histories, and other medical information. In some examples, the account creation service 102 may maintain medical information and communications from multiple medical service providers 106 on behalf of a patient or responsible person.
In further examples, the medical service provider 106 and recipient 116 may each be associated with one or more computing devices. Such computing device(s) may each be or include a server, a work station, a PC, a laptop computer, a tablet computer, a cellular phone, a smart phone, a media player, an electronic reading device, an office device, a printer, a scanner, a photocopier, an embedded system, or any other sort of device or devices. In one implementation, the computing device(s) include a plurality of computing devices working in communication, such as a cloud computing network of nodes. An example computing device of the medical service provider 106 or recipient 116 is illustrated in
The medical service provider 106 may include any physician or care team member, such as a doctor, a physician's assistant, a nurse, a dentist, a hygienist, a nutritionist, a psychologist, a physical therapist, a lab worker, a medical technician, a pharmacist, a person assisting any of these care providers, or any other sort of person working in the medical field. The recipient 116 may be a patient, a responsible person for a patent, or another medical service provider. Any patient may have one or more medical care providers 106, which may each also have separate electronic health records and repositories of medical information.
In some examples, the account creation service 102 may be connected to the medical service provider 106 and the recipient 116 by one or more networks. Such network(s) may include wired network(s), wireless network(s), or any combination of wired and wireless network(s). The network(s) may also be public network(s), private network(s), or any combination of public and private network(s). Further, the network(s) may include the Internet, wide area networks (WANs), local area networks (LANs), personal area networks (PANs), or any combination of the Internet, WANs, LANs, or PANs. Additionally, the network(s) may include telecommunication network(s), such as cellular network(s).
In various examples, the medical service provider 106 (or patient or other sender—the medical service provider, patient, or other sender are hereinafter referred to as the “medical service provider 106”) may send a secure communication 104 to the account creation service 102. The secure communication 104 may be an electronic message or a secure web service call. For example, the secure communication 104 may be secured in accordance with the secure, standards-based technique specified by the Direct Project, or in accordance with some other security protocol or security technique.
The secure communication 104 may be addressed to a virtual account address 108, which may be an electronic message address. The user name part of the virtual account address 108 may be the recipient address 114. Examples of such recipient addresses 114 may include phone numbers, electronic message addresses (also referred interchangeably as “email addresses”), fax numbers, or social media identifiers. When the recipient address 114 is an email address, the medical service provider 106 may specify a transformed email address in place of the email address. For example, if the email address is “joe.smith@email.com,” the transformed email address may be “joe.smith!!!email.com.” The resulting virtual account address 108, which incorporates the recipient address 114, may then, for example, be of a form such as “joe.smith!!!email.com@secure.email.com” or “4253219876@ secure.email.com.” While the virtual account address 108 may not correspond to an existing email address or email account, the account creation service 102 may receive the secure communication 104 directed to such a virtual account address as if the virtual account address 108 does correspond to an existing email address or email account. The virtual account address 108 may be entered by personnel of the medical service provider 106 when the personnel draft the secure communication 104 or may be specified by software, such as a print driver, of a computing device of the medical service provider 106.
In some examples, the secure communication 104 includes any sort of content, such as medical information 110. Medical information 110 may be a medical record, a prescription, medical advice, a medical appointment reminder, or any sort of other medical-service-related communication. Such medical information 110 is transmitted in secured communications, such as secure communication 104 and secure communication 120, rather than in unsecured communications.
In further examples, the medical service provider 106 may capture a photo or biometric of the patient or responsible person during a visit to an office of the medical service provider 106. Such a photo or biometric may also be transmitted with the secure communication 104 to aid in validating that the recipient 116 is the patient or responsible person.
Upon receiving the secure communication, the account creation service 102 may determine the recipient address 114 included in the virtual account address 108 and may send an invite message 112 to the recipient address 114. The account creation service 102 may also store either or both of the secure communication 104 or the medical information 110 included in the secure communication, and any other information included in the secure communication 104 (e.g., photo, biometric, etc.). The invite message 112 may be any of a text message, an electronic message, a fax, a web portal, or a direct notification to a mobile application.
When the invite message 112 is a text message or electronic message, the invite message may include a link that, when interacted with, launches a web portal or a mobile application. The recipient 116 then interacts with the web portal to request creation of the secure electronic message account. When the invite message 112 is a fax, the invite message 112 may include a bar code representing a unique encrypted code which a recipient 116 may scan with a device or enter into a web portal in order to request creation of a secure electronic message account. When the invite message 112 is a web portal, such as a web portal associated with a social networking identifier, the user may interact with a notification included in the invite message 112 to launch a further web portal for requesting creation of the secure electronic message account.
In some examples, prior to delivering the invite message 112, the account creation service 102 may send an interactive voice recording (IVR) message to a phone number of the recipient 116. The recipient 116 may then speak or key-press an electronic message address for the recipient 116, which may result in the account creation service 102 sending an invite message 112 to that electronic message address. In other examples, the IVR may direct the recipient 116 to visit a web portal to enable the recipient 116 to request creation of a secure electronic message account. IVR may be used when the recipient address 114 is a phone number and when text messaging is not available for that phone number. Alternatively, IVR may also be used when text messaging is available.
In various examples, the account creation service 102 may then engage in account creation and validation communications 118, including one or more of an account creation request 118, a validation challenge 118, and a validation response 118. The account creation service 102 may receive a request 118 for creation of the secure electronic message account through a web portal or other mechanism, such as a reply email or text message from the recipient 116. The web portal or other mechanism for submitting the request may, in some examples, include fields for the recipient 116 to provide information. Such information could include a user name part for the secure electronic message account address (e.g., “joe.smith” for “joe.smith@secure.email.com”) and a password. The fields may also enable the recipient 116 to specify any of a name, a gender, a date of birth, an address, a zip code, medical history information, other private information.
Once the account creation service 102 receives the account creation request 118, the account creation service 102 may validate the identity of the recipient 116. Such validation may be based on information, based on the attestation of others (e.g., the medical service provider 106, identity validators 122, etc.), or both.
For instance, if the account creation request 118 includes information entered by the recipient 116 (e.g., name, gender, date of birth, address, zip code, medical history information, other private information, etc.), the account creation service 102 may compare that information to the medical information 110, to other medical history/records for the patient referenced in the medical information, or to both. If the information matches, the account creation service 102 may deem the identity validated and create the secure electronic message account.
In other examples, the account creation request 118 may not include the information entered by the recipient 116 or may only include insufficient information for validating the identity of the recipient 116. In such examples, the account creation service 102 may send a validation challenge 118 asking the recipient 116 to provide additional information (e.g., name, gender, date of birth, address, zip code, medical history information, other private information, etc.) in a validation response 118. If the information in the validation response 118 matches, the account creation service 102 may deem the identity validated and create the secure electronic message account.
In further examples, the account creation service 118 may have a photo or biometric of the patient (e.g., from the secure communication 104 or from medical history/records), and the recipient 116 may provide a photo or biometric in the account creation request 118 or in a validation challenge response 118. In such examples, if the photos or biometrics match, the account creation service 102 may deem the identity validated and create the secure electronic message account.
Also or instead, the account creation service 102 may seek validation of the identity of the recipient 116. For instance, if the account creation service 102 lacks sufficient information to compare to the information provided by the recipient 116 in the account creation request 118 or validation challenge 118, the account creation service 102 may provide all or a subset of the information provided by the patient (or other recipient 116) to another to ask that other to validate the recipient 116. The account creation service 102 could provide the information to the medical service provider 106, for example, to ask the medical service provider 106 to attest that the information indicates that the recipient 116 is the intended recipient of the medical information 110. The account creation service 102 could also or instead provide the information to a third party service 124 which may use that information to validate the identity of the recipient 116. Further, the account creation service 102 could perform a carrier phone number lookup with a telecommunication service provider 126 to validate the identity of the recipient 116. Upon receiving validation from the medical service provider 106, the third party service 124, the telecommunication service provider 126, or another identity validator 122, the account creation service 102 may deem the identity validated and create the secure electronic message account.
In various examples, upon creating the secure electronic message account, the account creation service 102 may create a secure communication 120 addressed to the secure electronic message account and include the medical information 110 with the secure communication 120. For example, the secure communication 120 may be secured in accordance with the secure, standards-based technique specified by the Direct Project, or in accordance with some other security protocol or security technique.
Various example scenarios illustrate uses to which the system of
In another scenario, rather than the doctor drafting an email to the virtual account address, the doctor may scan, copy, or print the blood test results, and a print driver of the device performing the scanning, copying, or printing may detect a phone number or email address of the patient in a patient information section of the results and may create an email to the virtual account address, attach the blood test results to that email, and send the email to a service.
In a further scenario, while visiting the doctor, the doctor or medical staff may take a photo or biometric of the patient and may provide her photo or biometric along with the email of the blood test results. The service creating the secure electronic message account for the patient may then use that photo or biometric in validating her identity.
In another scenario, rather than the doctor drafting an email to the virtual account address, the doctor may provide the blood test results in some fashion to the service. This may simply involve adding the blood test results to medical records of the patient or may involve sending a communication to the service. The service may then determine a communication address for the patient via a matching algorithm, such as her phone number or email address, and may create a text message or email for the doctor to elect to send to the patient. This created text message or email for the patient may be placed in a receiving folder for the doctor and the doctor may view a user interface representing the messages in the receiving folder. The doctor may then select one or more of the messages to be sent to invite their associated patients to create secure electronic message accounts. The purpose for allowing the doctor to review and approve is, among other things, to provide the doctor the option to validate the matching.
In a further scenario, the patient may have previously created a secure electronic message account for her child and provided her phone number or email address in the process of doing so. When that patient sends the blood test results to a virtual account address that includes that phone number or email address, the service will determine that the phone number or email address is already associated with a secure electronic message account. The service may then determine whether the patient information in the blood test results matches the patient information associated with the secure electronic message account. In this example, there will not be a match; the patient information associated with the secure electronic message account will describe the child, and the patient information in the blood test results will describe the patient. The service may then send an invite message to the email address or phone number, but may ask that the patient provide information that may be used to validate both the identity of the patient and the relationship of the patient to the child. Upon receiving this information and validating the identity and relationship, the service may create another secure electronic message account for the patient and create an association between the secure electronic message account for the patient and the secure electronic message account for the child.
In another scenario, the patient may have previously created a secure electronic message account but may have forgotten the email address for that account. The patient may again provide her phone number or other email address to the doctor, and the doctor may again send an email to a virtual account address which includes the phone number or email address. Upon receiving the email, the service may determine that the phone number or email address is associated with a secure electronic message account, and that the patient information in the blood test results matches the patient information associated with the secure electronic message account. The service may then send an email with the blood test results to the email address for the secure electronic message account. When the phone number or email address in the virtual account address is associated with multiple secure electronic message accounts (e.g., the above parent-child scenario), the service sends an email to the email address of whichever secure electronic message account matches the blood test results.
In a further scenario, the service may receive an email communicating a new prescription that the doctor would like the patient to take. Upon receiving the email, the service may compare the prescription to other medicines being taken by the patient. If there is a conflict, such as prescriptions that should not be taken together, the service may send an alert message to the doctor and may, in some cases, refrain from sending an invite message or email to the patient.
In another scenario, the doctor may wish to keep her email address private. In such cases, the service may use a conversation identifier instead of a doctor email address in the “from” line of the email to the secure electronic message account. The patient may reply to the email and conversation identifier, and the service may map the conversation identifier to the doctor email address and forward the patient communication to that doctor email address.
In various examples, system memory 202 may be volatile (such as RAM), non-volatile (such as ROM, flash memory, etc.) or some combination of the two.
The account creation module 204 may implement any of the account creation functionality of the account creation service 102 described above in detail with regard to
The medical history/records 206 may represent any of the medical information, patient records, patient histories, medical communications, etc. that are received, stored, analyzed, or communicated by the account creation service 102 and described above in detail with regard to
The accounts 208 may represent any datastore or datastores of information associated patients or medical service providers that are maintained by the account creation service 102 described above in detail with regard to
The web service 210 may implement any of the web user interface functionality of the account creation service 102 described above in detail with regard to
The receiving folder 212 may receive and store the invitation messages 112 created by the account creation service 102 and described above in detail with regard to
The conversation module 214 may implement any of the identity obfuscation functionality of the account creation service 102 described above in detail with regard to
The analysis module 216 may implement any of the medical information analysis functionality of the account creation service 102 described above in detail with regard to
The modules and data 218 may also comprise any sort of applications or platform components of the computing device 200, as well as data associated with such applications or platform components.
In some examples, the processor(s) 220 may be a central processing unit (CPU), a graphics processing unit (GPU), or both CPU and GPU, or any other sort of processing unit.
The computing device 200 may also include additional data storage devices (removable and/or non-removable) such as, for example, magnetic disks, optical disks, or tape. Such additional storage is illustrated in
Non-transitory computer-readable media may include volatile and nonvolatile, removable and non-removable tangible, physical media implemented in technology for storage of information, such as computer readable instructions, data structures, program modules, or other data. System memory 202, removable storage 222 and non-removable storage 224 are all examples of non-transitory computer-readable media. Non-transitory computer-readable media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other tangible, physical medium which can be used to store the desired information and which can be accessed by the computing device 200. Any such non-transitory computer-readable media may be part of the computing device 200.
In various examples, input devices 226 may include any sort of input devices known in the art. For example, input devices 226 may include a camera, a microphone, a keyboard/keypad, or a touch-sensitive display. A keyboard/keypad may be a push button numeric dialing pad (such as on a typical telecommunication device), a multi-key keyboard (such as a conventional QWERTY keyboard), or one or more other types of keys or buttons, and may also include a joystick-like controller and/or designated navigation buttons, or the like.
In some examples, the output devices 228 may include any sort of output devices known in the art, such as a display (e.g., a liquid crystal display), speakers, a vibrating mechanism, or a tactile feedback mechanism. Output devices 228 may also include ports for one or more peripheral devices, such as headphones, peripheral speakers, or a peripheral display.
Computing device 200 also contains communication connections 230 that allow the computing device 200 to communicate with other computing devices 232, such as device(s) of the medical service provider 106, the recipient 116, or the identity validators 122. As described above with reference to
In various examples, system memory 302 may be volatile (such as RAM), non-volatile (such as ROM, flash memory, etc.) or some combination of the two. The modules and data 304 may implement any of the functionality of the medical service provider 106 or the recipient 116 described above in detail with regard to
In some examples, the processor(s) 306 may be a central processing unit (CPU), a graphics processing unit (GPU), or both CPU and GPU, or any other sort of processing unit.
The computing device 300 may also include additional data storage devices (removable and/or non-removable) such as, for example, magnetic disks, optical disks, or tape. Such additional storage is illustrated in
Non-transitory computer-readable media may include volatile and nonvolatile, removable and non-removable tangible, physical media implemented in technology for storage of information, such as computer readable instructions, data structures, program modules, or other data. System memory 302, removable storage 308 and non-removable storage 310 are all examples of non-transitory computer-readable media. Non-transitory computer-readable media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other tangible, physical medium which can be used to store the desired information and which can be accessed by the computing device 300. Any such non-transitory computer-readable media may be part of the computing device 300.
In various examples, input devices 312 may include any sort of input devices known in the art. For example, input devices 312 may include a camera, a microphone, a keyboard/keypad, or a touch-sensitive display. A keyboard/keypad may be a push button numeric dialing pad (such as on a typical telecommunication device), a multi-key keyboard (such as a conventional QWERTY keyboard), or one or more other types of keys or buttons, and may also include a joystick-like controller and/or designated navigation buttons, or the like.
In some examples, the output devices 314 may include any sort of output devices known in the art, such as a display (e.g., a liquid crystal display), speakers, a vibrating mechanism, or a tactile feedback mechanism. Output devices 314 may also include ports for one or more peripheral devices, such as headphones, peripheral speakers, or a peripheral display.
Computing device 300 also contains communication connections 316 that allow the computing device 300 to communicate with other computing devices 318, such as device(s) of the account creation service 102. As described above with reference to
At 404, the one or more computing devices may analyze the content of the first communication (e.g., medical information) based on a medical history of the recipient and may generate an alert based at least in part on the analysis. Such analysis may occur at any point in time following receipt of the first communication.
At 406, the one or more computing devices may send a second communication to the recipient communication address. The second communication may invite a recipient of the second communication, such as the patient, responsible person, or other recipient party, to request creation of a secure electronic message account to receive the content associated with or included in the first communication. The second communication may be one of a text message, an electronic message, a fax, a web portal, or a direct notification to a mobile application. In some examples, sending the second communication comprises sending an interactive voice response message to the recipient communication address requesting entry of an electronic message address and sending the second communication to the electronic message address. In further examples, the second communication may utilize a conversation identifier as a sender identifier to protect a communication address of a sender of the first communication.
At 408, the one or more computing devices may validate an identity of the recipient responsive to input from the recipient requesting creation of the secure electronic message account. In some examples, the validating comprises validating the identity of the recipient based on information included in the secure content associated with the first communication, based on other information provided by a sender of the first communication, or based on records for the recipient. In further examples, the validating comprises receiving a first photo or a first biometric from the recipient and validating the identity of the recipient based on a comparison of the first photo or the first biometric to a second photo or a second biometric included in the first communication or stored in associated with a recipient record. In additional examples, the validating comprises providing validation input received from the recipient to a third party service and receiving validation of identity from the third party service (e.g., from a carrier phone number lookup) or providing validation input received from the recipient to a sender of the first communication to request the sender to verify the identity of the recipient based on the validation input. Also, in some examples, the validating comprises requesting that the recipient provide at least one of a name, a gender, a date of birth, an address, a zip code, medical history information, or other private information.
At 410, upon validating the identity of the recipient, the one or more computing devices may create the secure electronic message account.
At 412, responsive to creating the secure electronic message account, the one or more computing devices may provide the content associated with or included in the first communication to the recipient via the secure electronic message account.
At 414, either upon receipt of the first communication, upon creating the secure electronic message account, or at a time there between, the one or more computing devices may determine that the recipient communication address is associated with another secure electronic message account. Such a determination may include determining that the patient mentioned in the content of the first communication differs from the person associated with the other secure electronic message account. This may be because the person associated with the other secure electronic message account is under care of the patient or is a person responsible for the care of the patient (e.g., parent and young child or adult child and elderly parent). Upon making such a determination, the one or more computing devices may, at 412, create the secure electronic message account for the patient and, at 416, create an association between the secure electronic message account and the other secure electronic message account. In some examples, creating the association is performed conditionally based on confirmation by the recipient that the person referenced by the other secure electronic message account is associated with the recipient.
At 418, the one or more computing devices may receive a third communication to the virtual account address after creation of the secure electronic message account. At 420, the one or more computing devices may then send content associated with the third communication to the secure electronic message account. When the virtual account address is associated with both the secure electronic message account and another secure electronic message account, the one or more computing devices may determine a name of a patient, responsible person, or other recipient party referenced in the content associated with the third communication and send the content to whichever secure electronic message account is associated with the name.
At 504, the recipient device may request creation of the secure electronic message account. In some examples, the communication may be received as a fax with a bar code and the requesting may include requesting creation of the secure electronic message account through a web portal and providing the bar code through the web portal.
At 506, the recipient device may receive a validation challenge seeking information associated with the medical record.
At 508, the recipient device may then capture a photo or biometric.
At 510, the recipient device may provide a response from the recipient to the validation challenge. The response may include the captured photo or biometric. The response may also or instead include at least one of a name, a gender, a date of birth, an address, a zip code, medical history information, or other private information.
At 512, the recipient device may receive the medical record via the secure electronic message account responsive to a determination that the response to the validation challenge matches the information associated with the medical record.
At 604, the one or more computing devices may place the patient communication in a receiving folder for created patient communications.
At 606, the one or more computing devices may enable the medical service provider to send the patient communication to the communication address.
At 608, the one or more computing devices may create the secure account responsive to input from the patient or responsible person.
At 610, the one or more computing devices may provide the medical information to the patient or responsible person via the secure electronic message account.
At 704, the print driver may retrieve the communication address from the content. The communication address may be a communication address of a patient or of a person responsible for care of the patient.
At 706, the print driver may also retrieve descriptors of the patient from the medical information.
At 708, the print driver may send the content in a secure communication to a virtual account address. The virtual account address may include the communication address in a user name part of the virtual account address. In some examples, the sending may involve sending the secure communication through an electronic message or a web service call.
At 710, the print driver may provide the descriptors with the secure communication.
Although the subject matter has been described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described. Rather, the specific features and acts are disclosed as exemplary forms of implementing the claims.
