# US20140074638A1: Consumer Self-Authorization For Electronic Records

- Kind: Published application
- Family: Self-Controlled Digital Authorization Over Communication Networks (https://www.intellectualfrontiers.com/patents/self-controlled-digital-authorization-over-communication-networks)
- USPTO status: Abandoned  --  Failure to Respond to an Office Action (as of 2017-05-30; record read 2026-09-27)
- Application: 13607997
- Filed: 2012-09-10
- Published: 2014-03-13
- Inventor: Shahid N. Shah
- Rights holder: Intellectual Frontiers LLC
- Classifications (CPC): G06F 21/6245, G16H 10/60
- Continued in part by US10963585B2

## Licence or acquisition

Available for an exclusive or non-exclusive licence, field-of-use licences included, or for acquisition. Terms on inquiry. Write to hello+ip@intellectualfrontiers.com.

## Abstract

A system and method for authorizing access to a third party at least in part for medical records. The system includes at least one server that includes or is coupled to at least one central repository. The at least one central repository stores multiple patient files. A patient is registered with the at least one central repository using a sign in scheme and allowed to store the medical records associated with the patient after signing in through the sign in scheme. The system further includes a device for authorizing access to the third party for the medical records at least in part. The device includes a second repository storing a set of rules dictating access rights and levels for the third party and an access module that processes authorization of the third party for access of the medical records.

## Independent claims

1. A system for storing and creating medical records, and authorizing access to a third party at least in part for said medical records, said system comprising: at least one server, wherein said server includes or is coupled to at least one central repository, said at least one central repository storing multiple patient files, wherein each patient file is associated with a patient and contains patient data, wherein said patient is registered with said at least one central repository using a sign in scheme and allowed to store said medical records associated with said patient after signing in through said sign in scheme; a communication network, wherein said system is connected over the communication network, said communication network further facilitating communication between said patient and said third party; and a device for authorizing access to said third party for said medical records at least in part, said device including: a second repository storing a set of rules dictating access rights and levels for said third party based on information associated with said third party; an access module that processes authorization of said third party for access of said medical records, at least in part; and a processing component that creates said medical records, at least in part, based on said authorization by said access module.

12. A system for storing and creating electronic records, and authorizing access to a consumer at least in part for said electronic records by an owner of said electronic records, said system comprising: at least one server, wherein said server includes or is coupled to: at least one central repository, said at least one central repository storing multiple files, wherein each file is associated with an owner and contains data specific to the owner, wherein said owner is registered with said at least one central repository using a sign in scheme and allowed to store said electronic records associated with said owner after signing in through said sign in scheme; a communication network, wherein said system is connected over the communication network, said communication network further facilitating communication between said owner and said consumer; and a device for authorizing access to said consumer for said electronic records at least in part, said device including: a second repository storing a set of rules dictating access rights and levels for said consumer based on information associated with said consumer; an access module that processes authorization of said consumer for access of said electronic records, at least in part; and a processing component that creates said electronic records, at least in part, based on said authorization by said access module.

13. A method for storing and creating medical records, and authorizing access to a third party at least in part for said medical records, said method comprising: receiving a registration request with a central repository through a sign in platform from a patient, wherein said sign in platform is accessed through a social networking platform; receiving information from said patient including personal details of said patient and details related to said patient indicative at least of said medical records associated with said patient for storage within said central repository; and defining access rules dictating access rights for said third party desiring an authorization for access of said medical records, at least in part, based on said information associated with said third party and said information received from said patient.

17. A non-transitory program storage device readable by a computer, and comprising a program of instructions executable by said computer to perform a method of storing and creating medical records, and authorizing access to a third party at least in part for said medical records, said method comprising: receiving a registration request with a central repository through a sign in platform from a patient, wherein said sign in platform is accessed through a social networking platform; receiving information from said patient including personal details of said patient and details related to said patient indicative at least of said medical records associated with said patient for storage within said central repository; and defining access rules dictating access rights for said third party desiring an authorization for access of said medical records, at least in part, based on said information associated with said third party and said information received from said patient.

Source: https://www.intellectualfrontiers.com/patents/self-controlled-digital-authorization-over-communication-networks/us20140074638a1