Cloud Server Patient Information Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In cloud-based medical image storage systems, users face challenges in efficiently accessing specific medical images across multiple facilities without compromising security, as existing systems often require users to search through numerous images and lack proper access controls.

Innovation Solution

A system that connects healthcare facilities and affiliated facilities via a network, using a cloud server to manage patient information by correlating medical images with examination order information and disclosure propriety information, allowing authorized users to view specific images while maintaining security through predetermined conditions and time limits.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If cloud-based storage systems are used to share medical images across multiple facilities, then accessibility and efficiency of information sharing are improved, but security control and access management become more difficult

Engineering Contradiction:
Improveinformation sharing efficiencyVSAvoidsecurity control
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent segments access control by creating distinct user roles (requesting users and viewing users) with different permission levels. The system divides medical image data into identifiable units with associated metadata, allowing granular control over what each user segment can access. This segmentation enables efficient sharing while maintaining security through role-based access control.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary authentication system that mediates between users and medical image data. The authentication server acts as a trusted intermediary that verifies user identities, checks authorization credentials, and manages access permissions without requiring direct access to the medical image storage system. This intermediary layer enhances security while maintaining efficient information sharing.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If users are authorized to view only specific regions of medical images, then security and data protection are improved, but users cannot access other relevant medical information they may need

Engineering Contradiction:
Improvedata protectionVSAvoidaccess flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic access control where authorization levels are not fixed but can be adjusted based on user credentials, medical necessity, and institutional policies. The system dynamically determines what regions and types of medical images a user can access by evaluating authentication credentials against predefined authorization rules. This dynamic approach allows the system to adapt to different clinical scenarios while maintaining data protection.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes access parameters by introducing multiple authorization levels and credential types. Instead of a single binary authorized/unauthorized state, the system uses varying parameters such as user role, facility affiliation, and specific image region permissions. These parameter changes enable flexible access control that can grant broader access when appropriate while maintaining security when needed.

Inventive Principle:
Principle #35Parameter changes

3Adaptability or versatility

If all medical images from multiple facilities are made available in a universal viewer, then users can access comprehensive patient information, but users must search through numerous images to find specific regions of interest

Engineering Contradiction:
Improveinformation accessibilityVSAvoidimage search time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-organizing medical images with structured metadata tags that identify key information such as patient ID, facility origin, image type, and anatomical region. Images are pre-categorized and indexed before users need to access them, eliminating the need for users to manually search through all images. This preliminary organization significantly reduces search time while maintaining comprehensive accessibility.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback mechanisms where the system provides users with targeted information based on their authentication credentials and viewing history. The universal viewer can filter and prioritize images based on user permissions and clinical relevance, providing feedback about which images are most appropriate for the user's needs. This feedback reduces information overload and accelerates the process of finding relevant images.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11705228B2Control of viewing of patient information shared between healthcare facilities
Publication Date: 2023.07.18 KONICA MINOLTA HEALTHCARE AMERICAS INC
  • US11705228B2 patent drawing
  • US11705228B2 patent drawing
  • US11705228B2 patent drawing

AI summary

A method for managing patient information in a system includes a cloud server, a healthcare facility, and affiliated facilities connected via a network. The method includes: receiving, from the healthcare facility, a medical image in response to examination order information sent by a first user from one affiliated facility; correlating the medical image to the examination order information and adding them to the patient information; correlating the medical image to disclosure propriety information indicating whether to allow the patient information to be disclosed to a second user; receiving a viewing request sent by the first or second user from one affiliated facility; determining whether to approve the viewing request based on the examination order information or the disclosure propriety information; and approving the viewing request and transmitting the patient information to the affiliated facility from which the viewing request has been sent.