US10963585B2: Self-Controlled Digital Authorization Over Communication Networks
In plain language
Autonomous Authorization Mechanisms in Modern Communication Networks
Explore a secure computerized record system and the convenience of autonomous authorization in healthcare.
Drawings
13 sheets as filed; open one to see it at full size. A figure drawn across its sheet is turned to read upright.
What the drawings show
- The embodiments herein will be better understood from the following detailed description with reference to the drawings, in which:
- FIG. 1 illustrates generally, but not by way of limitation, among other things, an example of an environment or architecture in which various embodiments herein may operate;
- FIG. 2 illustrates generally, but not by way of limitation, among other things, a specific example of an environment or architecture in which at least some embodiments herein may operate;
- FIG. 3 illustrates a system for storing and creating computerized records, and authorizing access to an external device, at least in part, for the computerized records according to the embodiments herein;
- FIG. 4 illustrates a network of several devices representing as similar to the external device that are connected with a subject according to the embodiments herein;
- FIG. 5 illustrates generally, but not by way of limitation, an example of an interface providing a capability to the external device such as to access the server for requesting the authorization to access or create the computerized records, at least in part, stored at the server according to the embodiments herein;
- FIG. 6 is a flowchart illustrating a method for sharing the computerized records by the subjects with the server for the purpose of such as authorizing the external device to access the computerized records according to the embodiments herein;
- FIG. 7 is a flowchart illustrating a method of granting access or authorizing the external device for the computerized records, at least in part, by the server or the subject according to the embodiments herein;
- FIG. 8 illustrates a contextual authorization device, according to some embodiments herein;
- FIG. 9 illustrates an example of credentialing engine, according to the embodiments herein;
- FIG. 10 illustrates an integrated chip, according to some embodiments herein;
- FIG. 11 illustrates an exemplary portable device encapsulating the integrated chip connected with the external device, according to some embodiments herein; and
- FIG. 12 illustrates a representative hardware environment for practicing various embodiments herein.
Abstract
A system for authorizing an external device to access computerized records. The system includes a server. The server includes a computerized records data-store. The computerized records data-store stores multiple computer executable files associated with subjects. The system includes a communication network which facilitates communication between at least two of the subjects, the server, and the external device. The system includes a contextual authorization device for authorizing access to the external device for the computerized records. The contextual authorization device includes a database storing a set of custom rules. The contextual authorization device further includes a Global Positioning System-based tracking device, a credentialing engine, and a user behavior analytics engine. The contextual authorization device further includes an access module to process authorization of the external device for access of the computerized records.
Summary of the invention
The embodiments herein provide a distributed architecture-based system for digitally authorizing access to computerized records. The system includes at least one server. The server includes at least one computerized records data-store storing multiple computer executable files associated with a subject and containing subject data in a digital format and associated with a subject identifier that identifies association of the subject with its respective computer executable file. The system includes an external device communicatively linked to the at least one server. The system includes a scanner operatively linked to the external device. The system includes a communication network communicatively linking at least two of the subject, the server, the external device, and the scanner.
The system includes a contextual authorization device for authorizing access to the external device. The contextual authorization device includes a database storing a set of custom rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information. The contextual authorization device further includes a Global Positioning System (GPS)-based tracking device for tracking a geo-location of the external device such that the custom rules define different rights for different location types as identified from the geo-location of the external device. The different rights define either one of an outright denial or approval of the access or limiting the access to one or more types of digital records based on the location types. The contextual authorization device further includes a credentialing engine to determine a crowdsourced credentialing score associated with an entity associated with the external device. The crowdsourced credentialing score is determined based on credentialing of a digital profile of the entity by a plurality of respondents such that the crowdsourced credentialing score is indicative of a trust of the external device. The custom rules are defined to allow authorization of the external device only when the entity associated with the external device possesses at least a minimum threshold score. The contextual authorization device further includes a user behavior analytics engine to compare dynamically changing contextual details associated with the entity with a set of past requests indicative of historical behavior and determine an index of normality such that the custom rules are defined to allow the access only when a minimum predefined threshold of normality is noted about the external device and the associated entity.
The contextual authorization device further includes an access module that processes authorization of the external device for access of the computerized records based on an input received from the GPS-based tracking device, credentialing engine, and the user behavior analytics engine. The contextual authorization device further includes a processing component that creates the computerized records based on the authorization by the access module. The processing component transforms the authorized computerized records into a digital data structure readable by the scanner.
The full summary
The system may include an interface unit for providing a graphical user interface to the subject and the external entity associated with the external device to respectively update the computerized records of the subject and view or extract the computerized records as authorized by the contextual authorization device. The system may include a communication channel allowing transfer of the computerized records through at least one of a wired and wireless transmission technique to a destination identified by the external device, upon successful authorization of the access by the contextual authorization device. The system may include an input module configured to receive binary values relating authorization access such that the custom rules may be used in association with the input for providing access to the external device by the contextual authorization device. The contextual authorization device may be configured to select a real time automated manner of access authorization for the computerized records based on the custom rules stored in the database.
The system may include a document usage system which may include one or more document computer systems in communication with a network of devices including the external device and having a machine-accessible medium storing a plurality of program modules configured to determine document utilization information providing an indication of usage of computerized records as authorized to be accessed by the external device associated with the entity. The usage comprises an amount of time that the associated entity or the external devices has accessed particular sections of the authorized computerized records. The computerized records may be classified into discrete types. The system may include a monetization engine configured to associate a price value with the authorized computerized records based on the usage by the external device and based on the classification of authorized computerized records as accessed by the external device are classified into. The digital data structure may include a QR (quick response) code readable by the scanner.
The embodiments herein provide a portable device for encapsulating computerized records of multiple types. The portable device includes a plurality of memory segments, wherein each of the plurality of memory segments stores a specified type of computerized records and is accessible by an external device upon successful authorization. The portable device includes an access module that processes authorization to access the computerized records by the external device based on certain inputs received from external components to the portable device. The portable device includes a processing component that creates the computerized records based on the authorization by the access module, wherein the processing component transforms the authorized computerized records into a digital data structure readable by a scanner communicatively connected with the external device.
The portable device is communicatively connected with a remote server. The remote server includes a contextual authorization device for generating the certain inputs for use by the access module in authorizing access to the external device for the computerized records. The contextual authorization device includes a database storing a set of custom rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information. The contextual authorization device includes a Global Positioning System (GPS)-based tracking device for tracking geo-location of the external device such that the custom rules define different rights for different location types as identified from the geo-location of the external device. The different rights define either one of an outright denial or approval of the access or limiting the access to one or more types of computerized records based on the location types. The portable device includes a user interface with a plurality of single-click configurable menu options defined to provide authorization request in a single click such that a single-click configurable menu option of the plurality of single-click configurable menu options is defined to authenticate only a particular type of computerized record with a particular level of access. The level of access includes one of a full access, limited access, and no access, wherein the level of access is defined based on geo-location of the external system and the portable device.
The portable device includes a communication terminal configured to establish a communication link between the portable device and the external device as soon as any of the plurality of single-click configurable menu options is pressed by a user. The access module is allowed to authorize the access of the computerized records either based on the certain inputs received from the remote server without any manual intervention or alternatively based on single click manual authorization using one of the plurality of single-click configurable menu options to allow access of the computerized records of a particular type defined for a particular context.
The contextual authorization device may include a credentialing engine to determine a crowdsourced credentialing score associated with an entity associated with the external device. The crowdsourced credentialing score may be determined based on credentialing of a digital profile of the entity by a plurality of respondents such that the crowdsourced credentialing score is indicative of a trust of the external device. The custom rules may be defined to allow authorization of the external device only when the entity associated with the external device possesses at least a minimum threshold score. The contextual authorization device may include a user behavior analytics engine to compare dynamically changing contextual details associated with the entity with a set of past requests indicative of historical behavior and determine an index of normality such that the custom rules may be defined to allow the access only when a minimum predefined threshold of normality is noted about the external device and the associated entity.
The communication terminal may be a near-field communication (NFC) terminal with one or more NFC taps configured to establish a communication link between the portable device and the external device as soon as any of the plurality of single-click configurable menu options is pressed by a user and the one or more NFC taps is activated. The communication terminal may be a WiFi hotspot with one or more WiFi taps configured to establish a communication link between the portable device and the external device as soon as any of the plurality of single-click configurable menu options is pressed by a user and the one or more WiFi taps is activated. The plurality of single-click configurable menu options may include a single-click configurable option for a hospital terminal computer, a single-click configurable option for a pharmacy terminal computer, a single-click configurable option for a lab terminal computer such that each of the plurality of single-click configurable options may be defined by respective location types associated with particular levels of access to particular types of computerized records as defined through associated geo-locations. The external device may include a mobile computing device associated with the entity and may be configured to process a request to access the computerized records. The external device may include a swipe machine configured to receive a portion of the integrated chip such that the scanner may include a swipe machine reader configured to read the integrated chip for extracting the computerized records according to authorization by the authorization module. The digital data structure may include a QR (quick response) code readable by the scanner. The portable device may further include a printed circuit board mounting the plurality of memory segments, the processing component, and electrical circuitry. The portable device may include a housing component for encapsulating the printed circuit board, and a battery for providing a power source for the portable device.
Independent claims
Claim 1
A system for providing access authorization to an external device for access to computerized records of multiple types in a computerized records data store, the system comprising: a portable device; a communication terminal communicatively linking the portable device to the external device; a plurality of memory segments in the portable device and comprising a specified type of computerized records that have been authorized for access by the external device; a user interface on the portable device and comprising a plurality of single-click computer-executable menu options defined by a location type comprising particular levels of access to particular types of computerized records that allow authorizing access to the external device by selecting the location type for the external device; an access module in the portable device and comprising electronic circuits that execute computer logic instructions that authorizes that access to computerized records by the external device, wherein the electronic circuits of the access module receive a first signal comprising a geo-location associated with the external device, wherein the electronic circuits of the access module determine levels of access and types of computerized records in the computerized records data store that are allowed to be accessed by the external device, wherein the electronic circuits of the access module extract and place data structures comprising the computerized records that are allowed to be accessed by the external device in one or more of the plurality of memory segments for access by the external device, and wherein the electronic circuits of the access module execute computer logic instructions that authorize the external device to access the computerized records based on the geo-location associated with the external device; and an integrated circuit chip in the portable device and containing a processing component that executes computer logic instructions that create the computerized records in the plurality of memory segments, wherein the electronic circuits of the access module execute computer logic instructions that specifies the level of access and type of computerized records in the computerized records data store that are to be extracted and placed in the plurality of memory segments for access by the external device, wherein the processing component executes computer logic instructions that (i) extract the computerized records from the computerized records data store based upon authorization instructions from the electronic circuits of the access module, and (ii) store extracted computerized records in the plurality of memory segments, wherein the electronic circuits of the access module execute computer logic instructions that process the authorization using the geo-location of the external device in conjunction with custom computer-executable rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information stored in a database storing the custom computer-executable rules, wherein the electronic circuits of the access module execute computer logic instructions that process the authorization using the location type of the external device in conjunction with the custom computer-executable rules when the location type of the external device is selected by pressing at least one of the plurality of single-click computer-executable menu options, wherein the custom computer-executable rules define different rights for different location types based on the geo-location of the external device or as identified by selecting at least one of the plurality of single-click computer-executable menu options, wherein the different rights define either one of an outright denial or approval of access or limiting the access to the computerized records based on the location types, wherein the communication terminal provides a communication link through a near-field communication (NFC) or a WiFi communication protocol between the portable device and the external device when at least one of the plurality of single-click computer-executable menu options is selected, and wherein the electronic circuits of the access module execute computer logic instructions that authorize access of the computerized records based on the geo-location of the external device or based on the location type for the external device identified by selecting at least one of the plurality of single-click computer-executable menu options that grants access to authorized types of the computerized records.
All 6 claims
- A system for providing access authorization to an external device for access to computerized records of multiple types in a computerized records data store, the system comprising: a portable device; a communication terminal communicatively linking the portable device to the external device; a plurality of memory segments in the portable device and comprising a specified type of computerized records that have been authorized for access by the external device; a user interface on the portable device and comprising a plurality of single-click computer-executable menu options defined by a location type comprising particular levels of access to particular types of computerized records that allow authorizing access to the external device by selecting the location type for the external device; an access module in the portable device and comprising electronic circuits that execute computer logic instructions that authorizes that access to computerized records by the external device, wherein the electronic circuits of the access module receive a first signal comprising a geo-location associated with the external device, wherein the electronic circuits of the access module determine levels of access and types of computerized records in the computerized records data store that are allowed to be accessed by the external device, wherein the electronic circuits of the access module extract and place data structures comprising the computerized records that are allowed to be accessed by the external device in one or more of the plurality of memory segments for access by the external device, and wherein the electronic circuits of the access module execute computer logic instructions that authorize the external device to access the computerized records based on the geo-location associated with the external device; and an integrated circuit chip in the portable device and containing a processing component that executes computer logic instructions that create the computerized records in the plurality of memory segments, wherein the electronic circuits of the access module execute computer logic instructions that specifies the level of access and type of computerized records in the computerized records data store that are to be extracted and placed in the plurality of memory segments for access by the external device, wherein the processing component executes computer logic instructions that (i) extract the computerized records from the computerized records data store based upon authorization instructions from the electronic circuits of the access module, and (ii) store extracted computerized records in the plurality of memory segments, wherein the electronic circuits of the access module execute computer logic instructions that process the authorization using the geo-location of the external device in conjunction with custom computer-executable rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information stored in a database storing the custom computer-executable rules, wherein the electronic circuits of the access module execute computer logic instructions that process the authorization using the location type of the external device in conjunction with the custom computer-executable rules when the location type of the external device is selected by pressing at least one of the plurality of single-click computer-executable menu options, wherein the custom computer-executable rules define different rights for different location types based on the geo-location of the external device or as identified by selecting at least one of the plurality of single-click computer-executable menu options, wherein the different rights define either one of an outright denial or approval of access or limiting the access to the computerized records based on the location types, wherein the communication terminal provides a communication link through a near-field communication (NFC) or a WiFi communication protocol between the portable device and the external device when at least one of the plurality of single-click computer-executable menu options is selected, and wherein the electronic circuits of the access module execute computer logic instructions that authorize access of the computerized records based on the geo-location of the external device or based on the location type for the external device identified by selecting at least one of the plurality of single-click computer-executable menu options that grants access to authorized types of the computerized records.
- The system of claim 1 , wherein the plurality of single-click computer-executable menu options comprise a single-click computer-executable menu option for a hospital terminal computer, a single-click computer-executable menu option for a pharmacy terminal computer, a single-click computer-executable menu option for a lab terminal computer such that each of the plurality of single-click computer-executable options are defined by respective location types associated with particular levels of access to particular types of computerized records as defined through associated geo-locations.
- The system of claim 1 , comprising a Global Positioning System (GPS)-based tracking device operatively connected to the portable device, wherein the GPS-based tracking device tracks the geo-location of the external device.
- The system of claim 1 , wherein the processing component executes computer logic instructions that transform the authorized computerized records into a digital data structure readable by a scanner communicatively connected with the external device.
- The system of claim 4 , wherein the digital data structure comprises a QR (quick response) code readable by the scanner.
- The system of claim 1 , wherein the integrated circuit chip comprises the plurality of memory segments, wherein the external device comprises a scanner, and wherein the scanner comprises a swipe machine reader that electronically reads the integrated circuit chip and executes computer-executable instructions that extract computerized records according to authorization by the access module.
Related patents
- Continuation-in-part of US20140074638A1 Consumer Self-Authorization For Electronic Records
- Divided into US11874949B2 Self-Controlled Digital Authorization Over Communication Networks
Every patent of the Self-Controlled Digital Authorization Over Communication Networks family: US20140074638A1, US11874949B2.
Explained in plain language and in context
Patent summaries
- Autonomous Authorization Mechanisms in Modern Communication Networks
Explore a secure computerized record system and the convenience of autonomous authorization in healthcare. - Controlled Access of Digital Records Through Self Authorization Techniques
Learn how digital authorization methods bolster access control and data security in the modern digital landscape
Licence or acquire US10963585B2
Available for an exclusive or non-exclusive licence, field-of-use licences included, or for acquisition. Terms on inquiry. Ask about the whole family or any one of its patents.
Or write to hello+ip@intellectualfrontiers.com. A person answers.
Questions
Is US10963585B2 available for licensing?
Yes. Intellectual Frontiers offers US10963585B2, with the rest of the Self-Controlled Digital Authorization Over Communication Networks family, for an exclusive or non-exclusive licence, field-of-use licences included. Terms are agreed on inquiry: write to hello+ip@intellectualfrontiers.com.
Can US10963585B2 be bought?
Yes. US10963585B2 is available for acquisition, alone or with its family. Terms are agreed on inquiry: write to hello+ip@intellectualfrontiers.com.
What is the status of US10963585B2?
Patented Case as of 10 March 2021, according to the USPTO record read 27 September 2026.
When does US10963585B2 expire?
17 February 2035. An estimate from Google Patents, read 9 October 2026. Fees, terminal disclaimers and later events can change it, and it is not legal advice.
What does US10963585B2 cover?
A system for authorizing an external device to access computerized records. The system includes a server. The server includes a computerized records data-store. The computerized records data-store stores multiple computer executable files associated with subjects. The system includes a communication network which facilitates communication between at least two of the subjects, the server, and the e A plain-language summary is at https://www.intellectualfrontiers.com/patent-summaries/autonomous-authorization-mechanisms-in-modern-communication-networks.
Which patents are related to US10963585B2?
It is part of the Self-Controlled Digital Authorization Over Communication Networks family, with US20140074638A1, US11874949B2.
Who invented US10963585B2 and who holds it?
Shahid N. Shah is the inventor. Intellectual Frontiers LLC holds the rights.