Method and system for accessing centralised patient data
A system and method is provided to allow access to centralized patient data captured from a medical device across an open network to a third party. The system and method receives the request based upon patient-specific information, checks the request and allows access if the request matches stored information.
1. A method for allowing access to centralised patient data captured from a medical device across an open network to a third party comprising:
receiving patient data from a plurality of medical devices;
storing the patient data on a centralised patient data database comprising data for multiple patients;
receiving a request from an interested party to access the centralised patient data database, the request comprising request access information based on one or more identification items of the patient, wherein the third party is privy to the one or more identification items of the patient;
checking that the request access information corresponds to stored access information associated with the patient; and
allowing the third party access to the patient data stored on the centralised patient data database for the patient if the request access information corresponds to the stored access information.
2. A method according to claim 1 wherein the stored access information associated with the patient is based on identification information associated with the patient.
3. A method according to claim 1 wherein the identification information associated with the patient comprises one or more of the following identification items:
date of birth;
name;
medical apparatus ID;
address or other contact details; and
social security number.
4. A method according to claim 1 wherein the request access information is created from a hash of the identification information associated with the patient.
5. A method according to claim 1 wherein the stored access information is created from a hash of the identification information associated with the patient.
6. A method according to claim 1 wherein there are different levels of access to the centralised patient data database, each level corresponding to a different set (being all or a subset) of the centralised patient data, and wherein allowing the third party access to the centralised patient data database comprises allowing access to the set of the centralised data corresponding to an access level associated with the request access information.
7. A method according to claim 6 wherein the access level associated with the request access information is based on the identification items that comprise identification information.
8. A method according to claim 1 wherein the third party has a security level, and for one or more security levels allowing the third party access to the centralised patient data for the patient further requires receiving data from a physical key that is provided by the third party.
9. A system for allowing access to centralised patient data captured from a medical device across an open network to a third party, the patient data being stored on a database, comprising:
a computer system for:
receiving patient data from a plurality of medical devices;
storing the patient data on a centralised patient data database;
receiving a request from a third party to access centralised patient data comprising data for multiple patients, the request comprising request access information based on one or more identification items of the patient, wherein the third party is privy to the one or more identification items of the patient;
checking that the request access information corresponds to stored access information associated with the patient; and
providing the third party with access to the centralised patient data in the centralised patient data database for the patient if the request access information corresponds to the stored access information.
10. A system according to claim 9 wherein the stored access information associated with the patient is based on identification information associated with the patient.
11. A system according to claim 9 wherein the identification information associated with the patient comprises one or more of the following identification items:
date of birth;
name;
medical apparatus ID;
address or other contact details; and
social security number.
12. A system according to claim 9 wherein the request access information is created from a hash of the identification information associated with the patient.
13. A system according to claim 9 wherein the stored access information is created from a hash of the identification information associated with the patient.
14. A system according to claim 9 wherein there are different levels of access to the centralised patient data database, each level corresponding to a different set (being all or a subset) of the centralised patient data, and wherein allowing the third party access to the centralised patient data database comprises allowing access to the set of the centralised data corresponding to an access level associated with the request access information.
15. A system according to claim 14 wherein the access level associated with the request access information is based on the identification items that comprise identification information.
16. A system according to claim 9 wherein the third party has a security level, and for one or more security levels allowing the third party access to the centralised patient data for the patient further requires receiving data from a physical key that is provided by the third party.
17. A system configured to provide access to centralised patient data captured from a medical device across an open network to a third party, comprising:
at least one database with centralised patient data comprising data for multiple patients, and stored access information associated with the patient,
a computer system in communication with the database and the third party, the computer system configured to:
receive a request from the third party to access the centralised patient data for a patient, the request comprising request access information based on one or more identification items of the patient, wherein the third party is privy to the one or more identification items of the patient;
check that the request access information corresponds to stored access information associated with the patient; and
put the third party in communication with the centralised patient data in the database for the patient if the request access information corresponds to the stored access information.