Patient-Controlled Medical Record Access via Trusted Doctor Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing medical record systems fail to provide patients and doctors with complete and up-to-date medical records, often leading to misdiagnosis, redundant testing, and increased healthcare costs due to unavailability or mismanagement of patient data, and lack patient-driven access control.
Innovation Solution
A medical record system with a server, patient and doctor access devices, and a cloud network, utilizing a two-way firewall to allow secure patient and access to trusted medical records, allowing patient control over who has access to his/her medical records, and a two-way firewall to manage access based on trusted doctor status, ensuring secure and complete historical data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If patient medical records are stored on a portable data memory device carried by the patient, then the patient has access to their medical records, but the data may not be up-to-date when the patient travels internationally and visits a foreign doctor
Solution Approach 1:
The system transitions from a single portable device storage model to a distributed network architecture where medical records exist across multiple servers and databases globally. The patient's portable device serves as a client that can access records from any location through the network, adding the spatial dimension of accessibility without sacrificing data currency.
Solution Approach 2:
The patent introduces a network server system with databases as an intermediary between the patient's portable device and the actual medical records stored in healthcare facilities. This intermediary layer enables real-time or near-real-time synchronization of medical data, ensuring that the portable device displays up-to-date information even when the patient is internationally mobile.
2Loss of information
If a central server system stores patient medical records accessible via network, then complete historical data is available, but security and confidentiality of patient records are compromised
Solution Approach 1:
The system divides the central server architecture into multiple distributed servers and databases across different locations. Each server handles specific functions or stores specific types of data, and no single point contains all patient information. This segmentation reduces the security risk exposure while maintaining complete record availability through the network.
Solution Approach 2:
The patent implements location-specific and role-specific access controls where different servers or database segments provide different levels of access based on the user's identity, role, and authorization. Sensitive data can be stored with enhanced security measures at specific locations while less sensitive data is more broadly accessible, optimizing both security and completeness.
3Object-affected harmful factors
If medical record access is controlled by healthcare providers, then data security is maintained, but patients cannot access their complete medical history from multiple providers
Solution Approach 1:
The system inverts the traditional access control model where healthcare providers control access to patient records. Instead, the patient controls access by carrying their own portable device with authentication credentials. The patient can selectively grant access to specific providers while maintaining overall control, enabling complete medical history access without surrendering security control to any single provider.
Solution Approach 2:
The patient's portable device serves itself as the primary authentication and access control mechanism. The device stores the patient's identity information and cryptographic credentials, enabling the patient to independently access their medical records from any connected server without requiring manual authorization from each healthcare provider. This self-service approach maintains security while enabling comprehensive record access.
4Adaptability or versatility
If multiple country-specific ID systems are used for patient identification, then each country's healthcare infrastructure can identify patients, but patient health data is not available across borders
Solution Approach 1:
The patient's portable device serves multiple identification functions simultaneously. It can store and present different country-specific ID formats as needed while maintaining a universal access mechanism that works across different national healthcare infrastructures. The device acts as a universal key that adapts to various country-specific systems without requiring separate physical identification devices for each country.
Data Source
AI summary
A medical record system for accessing and maintaining patient medical records. The system comprises a server; a first patient access computer device and database; a first doctor access computer device and database for storing first doctor's patient medical records; a second doctor access computer device and database for storing second doctor's patient medical records; and a cloud network to allow communication between the connected devices and databases. The server comprises a two-way firewall arranged, subject to the first doctor and second doctor being identified as a trusted doctor in a first patient trusted doctor file, to allow the first patient access computer device to obtain and store links for assessing first patient medical records associated with the first patient, and to allow the first doctor access computer device to access the first patient medical records associated with the first patient through the stored links.