WO2001065443A1 - Use of internet site as a registry for results of medical tests - Google Patents

Use of internet site as a registry for results of medical tests Download PDF

Info

Publication number
WO2001065443A1
WO2001065443A1 PCT/US2001/005662 US0105662W WO0165443A1 WO 2001065443 A1 WO2001065443 A1 WO 2001065443A1 US 0105662 W US0105662 W US 0105662W WO 0165443 A1 WO0165443 A1 WO 0165443A1
Authority
WO
WIPO (PCT)
Prior art keywords
subscriber
person
results
medical
access
Prior art date
Application number
PCT/US2001/005662
Other languages
French (fr)
Inventor
Gregory Demopulos
Original Assignee
Gregory Demopulos
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Gregory Demopulos filed Critical Gregory Demopulos
Priority to CA002439396A priority Critical patent/CA2439396A1/en
Priority to AU4322101A priority patent/AU4322101A/en
Priority to AU2001243221A priority patent/AU2001243221B2/en
Priority to JP2001564063A priority patent/JP2003525499A/en
Priority to EP01916164A priority patent/EP1266322A4/en
Publication of WO2001065443A1 publication Critical patent/WO2001065443A1/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
    • G06Q50/10Services
    • G06Q50/22Social work
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00Administration; Management
    • G06Q10/10Office automation; Time management

Definitions

  • This invention generally relates to a method and system for reporting medical test results over a network, and more specifically, to providing a registry at which subscribers' medical test results can be accessed over a public network by the subscribers.
  • hepatitis C will not be sufficient to convince the other partner to engage in sex, since the person giving the assurance may not have been tested or may have been tested with positive results for such diseases. Proof of the testing is somewhat hard to provide, particularly when the prospective sexual union has occurred following a casual meeting or under circumstances in which proof, such as documentation of the medical test results, is not readily available.
  • a readily accessible registry that shows proof of recent negative test results for sexually transmitted diseases (STDs) for each partner would greatly reduce the risk of contracting such diseases from a sexual liaison, and the assurance provided by enabling the other prospective partner to access this proof would certainly reduce the concerns of both prospective partners for incurring such risks.
  • the Internet has become a freely and widely accessible site for all types of information and would provide an ideal medium to enable medical test results to be readily accessed by a party who has been tested and has authorized the test results to be recorded in an accessible registry.
  • the registry in which such test results are stored could be accessed through any computer or other computing device that is coupled to the Internet, from virtually any place in the world. Alternatively, the registry could be accessed by telephone.
  • the only other requirements for such a registry to serve the intended function would be that the access to an individual's test results be securely limited only to the person who was tested and to others provided access by that person, and that the party who was tested be unable to modify the test results that are posted, other than to delete the results.
  • the ability to access the results of tests for STDs in an accessible registry would not mean that partners engaging in sex should do so without taking other protective measures, such as using condoms.
  • the registry site might thus include information of a socially conscious nature or provide links to information concerning the practice of safe sex, in addition to providing the test results for assuring a prospective sexual partner that the other prospective partner was tested and found to be free of STDs, of at least a life threatening or incurable type.
  • test results for other types of medical tests could be stored and accessed by the person tested and/or by authorized medical personnel. While many other types of test results could be accessed on such a site, examples of such tests would be those carried out to measure blood glucose (for diabetes), or to measure protimes (for blood clotting factor), troponin (cardiac function), myoglobin (cardiac function), or creatinine (for renal function). Use of a registry to store these results would minimize paper work and reduce errors in reporting the results.
  • test apparatus designed to carry out the test and the individual's computer to process the test results and transmit them to the registry for storage.
  • the test apparatus might couple to the person's computer through a universal serial bus (USB) port or through a serial or parallel port.
  • USB universal serial bus
  • Some tests require that a relatively complex analysis be performed to determine the level of a substance in the person's blood or other bodily fluids or in bodily samples (e.g., serum, plasma, urine, saliva, hair, etc.), and such tests are more readily carried out by a personal computer.
  • test data could then be automatically transmitted to the registry site for storage and access by the person's physician or for use in prescribing appropriate drugs, therapy, or prophylactic measures.
  • test data could be analyzed by the registry site or its affiliated laboratory(ies) and the results made available on the registry site for access by the subscriber or other individual authorized by the subscriber.
  • Another possible application of this invention is a registry site that is directed to securely storing the results of testing for recreational and illicit drugs (e.g., marijuana, cocaine, opiates, phencylidine, amphetamines, barbiturates, benzodiazepines, methadone, propoxyphene and alcohol).
  • a registry site that is directed to securely storing the results of testing for recreational and illicit drugs (e.g., marijuana, cocaine, opiates, phencylidine, amphetamines, barbiturates, benzodiazepines, methadone, propoxyphene and alcohol).
  • Such a site could be used, for example, by employers and employees or prospective employees where such testing is a requirement of employment, i.e., in law enforcement, judicial and drug rehabilitation settings, or in the required testing of athletes.
  • a method for registering the results of a medical test performed on a subscriber so that the results are accessible only to authorized parties over a communication network and can serve as evidence of a medical condition of the subscriber.
  • the method includes the step of receiving the results of the medical test of the subscriber from a testing agency that performed the medical test, along with an indicia of an identity of the subscriber.
  • testing agency refers to a facility where blood, other bodily fluid or a bodily sample is collected, together with a facility where the actual testing/analysis is performed.
  • the collection facility and the testing/analysis facility may be located at the same site or at different sites.
  • the results of the medical test of the subscriber are stored at a registry site provided by a subscription service.
  • the subscriber is readily able to access the results of the medical test and the indicia of the identity of the subscriber at the registry site over the communication network to provide evidence to another party of the medical condition of the subscriber, based upon the results of the medical test.
  • the medical test is preferably a test for a STD, and more preferably, a potentially life-threatening or currently incurable STD.
  • the other party is likely to be a prospective sexual partner of the subscriber.
  • the subscriber is preferably provided with an access code including a user name and a password that must be supplied to gain access to the results of the medical test stored at the registry site.
  • the method also preferably includes the step of requiring the subscriber to authorize transmittal of the results of the medical test from the testing agency to the registry site prior to and as a condition to the step of receiving the results from the testing agency. Once the testing agency is authorized to do so, it electronically transmits the results of the medical test to the registry site.
  • a history of the results from medical tests performed on the subscriber at different times will also be maintained at the registry site. This testing history will likely include a date at which each medical test was performed, and can be accessed only by authorized parties, e.g., the subscriber.
  • the subscription service optionally charges the subscriber a fee for providing access by the subscriber to the results of the medical test at the registry site and/or may charge a fee for receiving and storing the results of the medical test.
  • a link on the registry site can be provided to a different site (maintained by another party) that provides information of potential interest to the subscriber. A fee can then be charged to the other party in regard to the subscriber accessing the different site via the link on the registry site of the subscription service. It is also contemplated that the registry site provided by the subscription service will display advertising and charge a fee for displaying the advertising.
  • the subscriber will optionally be able to access the results of the medical test via an electronic data communication link to the registry site.
  • electronic data communication As used herein and in the claims that follow, the terms “electronic data communication”, “communication network” and “communication channel” are intended to encompass all forms of wired and wireless communication, including but not limited to, communication between computing devices over local and wide area networks, communication using all types of network access devices, telephones, facsimile machines, and all other forms of electrical and electronic communication between disparate sites.
  • the subscription service will specify the testing agency that will provide the medical test of the subscriber and will receive a portion of a fee charged to the subscriber by the testing agency for carrying out the medical test.
  • the testing agency will provide a discount to the subscriber for using the testing agency that was specified by the subscription service.
  • the subscriber will be able to delete the entire history of the results of the subscriber's medical tests from the registry site. In addition, the subscriber will be able to determine who will have access to the results of the medical test stored at the registry site. The subscriber can also limit access of a guest to specific parts of the data of the subscriber that are stored at the registry site.
  • Another aspect of the present invention is directed to a system for enabling limited access to results of a medical test performed on a subscriber so that the results are accessible only to authorized parties over the electronic communication network and can serve as evidence of a medical condition of the subscriber.
  • the system includes a server that stores the results of the medical test and makes the results available to the authorized parties in a manner generally consistent with the steps of the method described above.
  • FIGURE 1 is a schematic diagram of the components of the present invention
  • FIGURE 2 is an overview flow chart showing the steps implemented in the present invention
  • FIGURE 3 is a flow chart showing the steps implemented in an online registration of a subscriber in the present invention
  • FIGURE 4 is a flow chart showing the steps implemented in a mail or phone registration of a subscriber in the present invention
  • FIGURE 5 is a flow chart showing the steps implemented when a subscriber registers at a kiosk
  • FIGURE 6 is a flow chart showing the steps for verifying identity of the subscriber with a driver's license
  • FIGURE 7 is a flow chart showing the steps involved in taking a digital photograph of a subscriber to prove identity
  • FIGURE 8 is a flow chart listing the steps for automatic posting of test results by a laboratory
  • FIGURE 9 is a flow chart showing the steps involved when a subscriber reviews the test results and then decides to post them on the site;
  • FIGURE 10 is a flow chart showing the steps taken to manually post the test results on the web site.
  • FIGURE 1 1 is a block diagram showing principle functional components of a personal computer suitable for implementing the present invention.
  • the present invention makes use of an Internet web site that will serve as a clearing house or registry for STD test results. Registration of a domain name for such a site has already been secured and is InformedPartner.com. This web site will provide subscribers secure access to personal information of a very sensitive nature, and will therefore implement extremely high standards of security to ensure that the information is not accessible by unauthorized parties and is not changed to alter the results of a medical test performed on a subscriber. Because the service is only available to subscribers who have registered with the web site, the following discussion and the claims that follow refer to this web site as a
  • Subscribers registering for the service provided by this registry site will have the option of having their STD test results posted to the registry site, along with an independent verification of the subscriber's identity, which is referred to in the claims that follow as "an indicia of the identity of the subscriber.”
  • the subscriber can also post test results that are not associated with verification of the subscriber's identity.
  • the registry site will simply provide a repository for such data, creating a historical database of medical test results that may be of benefit to the subscriber, and will indicate, in connection with such data, that the identity of the individual tested has NOT been verified.
  • the primary pu ⁇ ose of the service provided to the subscriber by the registry site is to enable proof of a medical condition to be presented to a prospective sexual partner of the subscriber based upon the results of one or more medical tests that were performed on the subscriber by a testing laboratory affiliated with the registry site.
  • the subscriber's personal information is securely accessible only by authorized parties via an Internet or other electronic communication connection. Results of a medical test and other personal data of the subscriber can be accessed and displayed to the subscriber or to any other party who has previously been authorized by the subscriber to have access to data of the subscriber by entering a correct user name (and/or a customer ID number (ID) assigned to the subscriber) and the correct password.
  • the subscriber will choose or be assigned a unique password, and will choose or be assigned a unique guest password and/or guest ID number for each specific other party authorized by the subscriber to access a selected portion of the subscriber's personal data.
  • the subscriber can set access rights that limit the specific data of the subscriber that can be accessed by another party, based upon the password and/or guest ID number entered by the other party, which the subscriber will provide to the other party.
  • a guest permission may optionally be valid for a single use only. Once a guest uses the credentials (the guest ID number and/or guest password) to access the subscriber's data, those credentials will expire, making it impossible for that guest or anyone else not so authorized to access the information on the web site.
  • Data maintained by the registry site will include personal identification information for each subscriber, a record of the types of medical tests performed on the subscriber, a test date, and test results, all of which will be associated with the customer ID originally assigned to the consumer. This information will be delivered in a format that is appropriate for display on a variety of different types of Internet or electronic communication access instruments.
  • FIGURE 1 a system diagram illustrates various components of a preferred system for implementing the present invention, including maintenance of data at the registry site, and providing access of that data by a subscriber (or by another party authorized by the subscriber).
  • a subscriber will connect to the registry site using a personal computer (PC) 20 on which a browser program is executed.
  • PC 20 personal computer
  • suitable browsing programs for execution on PC 20 include Microsoft Co ⁇ oration's INTERNET EXPLORERTM, and Netscape Co ⁇ oration's NAVIGATORTM browser programs.
  • PDA personal digital assistant
  • cell phone 24 that are Internet access enabled
  • PC 20 can access data displayed using the full browser graphic user interface, while only a textual representation of the data will be displayed on cell phone 24.
  • FIGURE 1 Details such as the type of Internet access employed by a subscriber, e.g., access over conventional telephone lines using a modem, a cable modem, a high-speed digital subscriber line, or satellite access of Internet 28 are not illustrated in FIGURE 1, since these details are not pertinent to the present invention.
  • PDA 22 and cell phone 24 it is contemplated that various types of wired and wireless connections with Internet 28 can be used for electronic data communication with the registry site at which the test results of a subscriber are maintained.
  • a consumer wishing to subscribe to the service provided by a registry site 30 can initially contact the registry site (to register as a subscriber to the service) over Internet 28 using PC 20, PDA 22, or cell phone 24, or may call the registry site by telephone, or by mail, email, or facsimile transmission.
  • a consumer wishing to subscribe to the service may first become aware of it when exposed to advertising associated with an information kiosk 26 or when the consumer visits a testing lab to be tested for a STD.
  • Each of the testing labs affiliated with the registry site will include one or more testing lab kiosks 32 that are connected to the registry site over Internet 28.
  • information kiosks 26 will be provided in places such as singles bars, which consumers having an interest in becoming a subscriber to the service provided by the registry site are likely to frequent and in which they are likely to meet prospective sexual partners.
  • the information kiosk or testing lab kiosk can thus provide a connection to the registry site enabling a consumer to become a subscriber of the service.
  • these kiosks can be used to connect to the registry site for access of the test results of a subscriber.
  • the information kiosks can be employed to provide evidence of a subscriber's medical condition, thereby enabling the subscriber to provide proof that when last tested for a STD, the results of the test were as asserted by the subscriber.
  • both prospective sexual partners will preferably be subscribers, so that each can provide the proof of the medical condition that the other prospective partner would prefer.
  • Internet 28 is the most likely channel for a subscriber (or a consumer who wants to register as a subscriber) to access registry site 30.
  • a consumer Before making use of the services provided by registry site 30, a consumer must register and thereby become a subscriber; and details of the registration process are discussed below. It is contemplated that a monthly or annual subscription fee will be charged to a subscriber for providing the services explained herein. In addition to paying a periodic subscription fee, each subscriber will likely be charged each time that test results of medical tests performed on the subscriber are transferred to the registry site for storage, and a smaller charge may be incurred each time that the subscriber's personal data and test results are accessed over Internet 28.
  • the registry site will display links to other web sites that provide information of possible interest to subscribers.
  • a link might be provided to a web site that sells birth control-related products, or a link might be provided to a site that discusses newly developed treatments for STDs.
  • the registry site may impose a charge to the other web site each time that the link to the other web site is activated, or may charge a fixed fee for simply including the link.
  • the registry site will likely display banner ads and other advertising components for web sites run by others. Typical fees for displaying such advertising at the registry site will be charged to those who are advertising in this manner.
  • testing labs Another source of revenue for the registry site will derive from the registry site specifying the testing labs that are affiliated with the registry site. A portion of the medical test fee charged by such a testing lab will then be received by the operators of the registry site. Since the service of the registry site is at least national, and more likely, will become international, the testing labs required to service all of the subscribers of the registry site will be distributed all over the country, and possibly, in all major countries of the world. Optionally, the testing labs may provide a discount to subscribers of the registry site, recognizing that the increased volume arising from the referral provided by the registry site will more than compensate the testing lab for the portion of the fee returned to the registry site and any discount provided the subscribers of the registry site. Secure Access of Subscriber Data
  • a key aspect of the service provided by registry site 30 is the security with which the personal information of each subscriber is maintained.
  • the security of this personal information and the test result data is protected by requiring that each subscriber enter a user name and unique password before being allowed access to the data of the subscriber.
  • each subscriber is provided with, or can specify, a guest or partner ID number and/or password that must be entered to enable the guest to gain access to that portion of the subscriber's personal information and test results to which the subscriber has authorized access.
  • the subscriber controls the access to this data and information by setting permissions for each specific unique guest or partner ID number. Such permissions will enable the subscriber to determine the information displayed to the guest and the protection level provided.
  • the subscriber can specify whether: (1) the guest requires a guest ID number and a secondary password; (2) the guest is permitted to view only a particular type of test (e.g., a test for STD, but not for drugs); and, (3) the guest ID number and/or password is valid for only a single use or for multiple accesses of the subscriber's information and test results.
  • the guest ID numbers are not sequential, but instead are randomly generated to prevent someone from "guessing" a more current guest ID, based on a previous guest ID.
  • the web site may optionally include a Digital Certification, providing a verifiable form of identification that the web site being accessed is, in fact, the true registry site, or the web site can provide other means to prove its authenticity as the registry site.
  • the registry site may enable a prospective partner, who also is a subscriber of the registry site, to access his or her test data, using his or her customer ID and/or password, directly from the subscriber's displayed information, to mitigate the risk that inaccurate or fraudulent test results posted on a fraudulent site can be displayed to an unwitting prospective partner.
  • the browser may be set to refresh after a short period of time and then automatically display a non-confidential page within the registry site (e.g., a guest login page).
  • Firewall 34 isolates the sensitive information of the subscribers, preventing unauthorized access by third parties. Communications through firewall 34 from Internet 28 are connected to a load balancer 36, which distributes the Internet traffic generally equally between a plurality of web servers 38a through 38d, thereby minimizing delays by subscribers and authorized guests in accessing the personal information and test result data. Firewall 34 also restricts access to the web services of each of these web servers and ensures that no outside traffic can directly reach the web servers.
  • SSL secure socket layer
  • Application servers 40a and 40b form a middle tier in the architecture of registry site 30 and are isolated from the Internet by both firewall 34 and load balancer 36. Only an application running on the application servers can enable access by authorized parties to data of the subscribers maintained on a database server 42.
  • the business logic for the web based application that enables subscribers to access their individual test results and other personal information are hosted by the application servers.
  • the application servers generate dynamic content based on data extracted from the database maintained on database server 42. Any incoming queries from web servers 38a through 38d are dispatched to the application servers, which perform appropriate queries of the data, extracting the requested information once all requirements for secure access have been met.
  • the application servers format the returned data in a form appropriate for the client Internet access device that has queried registry site 30, so that the form is appropriate and can readily be rendered on the PC, PDA, cell phone, or other Internet or electronic access device being used by the subscriber.
  • the output produced from a query of database server 42 will be returned to the web server that requested it, under the control of the application running on one of the application servers.
  • test result data Another key aspect in maintaining the integrity and security of test result data will be the use of a virtual private network (VPN) 60, which is connected to each affiliated testing lab work station 58.
  • VPN virtual private network
  • Several different approaches are contemplated for entry of test results into database server 42.
  • One preferred approach is to completely automate the process of reading the test results from medical tests performed on subscribers and to automatically batch load the test results into the data at registry site 30 over VPN 60, so that no human intervention is required for transcribing the test results. Automating this process should minimize the risks of inadvertently introducing an error in the results reported and stored for any subscriber.
  • test results from medical tests of subscribers can be entered in an appropriate form at testing lab work station 58, by trained personnel at the testing lab.
  • Additional support systems 44 will likely be provided to facilitate the management and administration of registry site 30. Examples of these support systems include a report server 46, an email server 48, an advertising server 50, an administration server 52, a billing server 54, and a system monitor 56. Other support systems will be provided as necessary to administer and manage the operation of the business of the registry site relating to servicing the needs of subscribers and controlling access to the sensitive data maintained on database server 42.
  • the subscriber When the lab has posted the test results for a subscriber to the registry site for inclusion in the data maintained there, the subscriber can be notified either by email, by facsimile transmission, or by a phone call (made by the system in an automated fashion) to inform the subscriber that the test results have been uploaded automatically or manually to the registry site and can be accessed by the subscriber. These test results can then be checked by the subscriber. Preferably, the subscriber will not be able to selectively withhold the display of test results from a similar group of test results once said test results have been transmitted to the registry without terminating his or her subscription to the registry, thereby expunging the subscriber's testing data history and invalidating further use of the subscriber's primary username and password.
  • test results for drug use and test results for STDs are stored at the registry site.
  • the subscriber will be enabled to select the type of test results (i.e., drug use test results or STD test results, in this example) to be included among the data that a guest or prospective partner of the subscriber can access to verify the medical condition of the subscriber based upon the results of the lab tests.
  • automatic notifications of the subscriber by email or facsimile transmission informing the subscriber that the test results are available on the registry site, can be customized by a particular testing lab to comply with specific trademark branding needs of the testing lab, but will not contain any personal information or the actual test results, as such messages will be transmitted through unsecured channels and might be accessed by third parties.
  • an automated verification email message will be transmitted to the testing lab from the registry site, providing proof that the registry site has received those results from the testing lab.
  • the registry site may generate automatic notification of the subscriber that test results are available for review on the registry site.
  • subscribers may elect to have the test results forwarded to them from the testing lab in a more traditional fashion, i.e., by personal mail, or over the telephone.
  • the subscriber can at that time, request that the testing lab post the results to the registry site. Only after receiving permission from the subscriber would the testing lab forward the results of the tests, along with validated identification information for the subscriber, to serve as proof of the subscriber's identity when the test results are accessed at the registry site, by a guest or prospective partner.
  • the subscriber may choose to use one or more kits to carry out medical testing at home, or may elect to have medical tests performed by a non-affiliated testing lab.
  • test results that are manually posted and not provided by an affiliated testing lab which has not drawn the test sample from a subscriber whose identity has been verified will not have the benefit of a validation of the subscriber's identity, and thus will be unable to serve as proof of the subscriber's medical condition.
  • Any guest or prospective sexual partner accessing results that are posted without benefit of the validation of the subscriber's identity will be clearly warned in the display of the results that the registry site is posting the results as a service to the subscriber, but without proof of the subscriber's identity. The guest will thus be alerted that the test results do not serve as evidence of the subscriber's medical condition, since they might be fictitious, or may be for a person other than the actual subscriber.
  • One of the benefits of enabling the subscriber to post medical test results from sources other than an affiliated testing lab and without a proof of identity is to maintain a history of the tests that can be readily accessed by the subscriber.
  • posting of such test results may be beneficial in facilitating discussions between the subscriber and the subscriber's physician, since it is possible that both the subscriber and the physician can simultaneously access the test results (assuming that the subscriber has provided permission and a guest password and/or guest ID number to the physician to access the results).
  • FIGURE 2 illustrates the steps involved in the overall use of the registry site for registering subscribers and for receiving, posting, and enabling access of test results that serve as proof of a medical condition of the subscriber.
  • a block 100 indicates that a consumer registers as a subscriber with the registry site (e.g., InformedPartner.com).
  • the subscriber may optionally be required to provide an indicia of identification (e.g., a digital copy of a passport photograph or a valid driver's license), although, it will be more likely that the indicia of identification will be required simply to confirm the identity of the subscriber for pu ⁇ oses of payment by a credit or debit card, or by other non-cash means.
  • the registration can be accomplished over a variety of different types of devices that can access the registry site over the Internet, including information kiosk 26, and testing lab kiosk 32.
  • the subscriber agrees to be financially liable for the subscription fee and for any other fees associated with the subscriber's use of the registry site.
  • such fees may include a fee charged each time that the personal information and data of the subscriber are accessed, and a fee charged each time that medical test results are posted to the registry site.
  • the subscriber visits an affiliated testing lab, having arranged for the testing lab to draw a sample in order to carry out the test requested by the subscriber.
  • the appointment for visiting the testing lab will be made from the registry site, but can alternatively be made over the telephone or during a previous visit to the testing lab.
  • the medical tests will likely be for STDs, and more likely, be limited to potentially life threatening or currently incurable kinds of STDs.
  • Examples of the types of tests that might be made for potentially life- threatening or currently incurable STDs include the Elisa immunoassay (EIA), the Western blot or other confirmatory test for HIV; the hepatitis B surface antigen and hepatitis C antibody tests; and the He ⁇ es simplex virus type 2 (HSV 2)- specific serology test.
  • EIA Elisa immunoassay
  • HSV 2 He ⁇ es simplex virus type 2
  • LCR ligase chain reaction
  • PCR polymerase chain reaction
  • EBV Epstein-Barr virus
  • CMV cytomegalovirus
  • VZV varicella-zoster virus
  • the lab draws a sample from the subscriber and at that time, verifies the identity of the subscriber. Verification of the identity of the subscriber can be based upon presentation by the subscriber of any kind of legally acceptable picture identification, such as a driver's license, passport, or other common legally accepted indicia of identification. However, in most cases, it is expected that a subscriber will present a driver's license with a picture as proof of his or her identity.
  • the testing lab also may access (e.g., only at an access level necessary for interaction with medical testing lab providers) the subscriber's identification information on the registry site to match the presented indicia of identification to that on the registry site, if such identification information was provided previously by the subscriber to the registry site.
  • a block 106 indicates that the subscriber provides to the testing lab the customer ID that was obtained from the registry site, so that the customer ID can be associated with the test results and with the subscriber identification data.
  • customer ID can be verified by the testing lab by accessing the registry site.
  • the simplest verification data for the subscriber's identification is the driver's license number of the subscriber.
  • the testing lab records the customer ID and the ID verification in association with the lab test, on the request form.
  • the lab completes the medical tests requested by the subscriber, obtaining results that are then posted (automatically or manually) to the registry site, along with the customer ID and identification verification data, as indicated in a block 1 12.
  • the subscriber may alternatively choose to receive and verify the test results before requesting that the testing lab post them to the registry site.
  • a block 1 14 indicates that the testing lab or registry site notifies the subscriber that the test results have been posted to the registry site.
  • the notification can be automated, as described above.
  • the subscriber verifies the lab results and the personal information on the registry site, typically using a browser to access the information.
  • the results of the test can only be accessed by the subscriber after the subscriber enters the user name and password previously assigned to the subscriber.
  • a block 116 provides for the subscriber to set the guest access rights, specifically defining the data of the subscriber that will be accessible to a guest or prospective sexual partner.
  • the subscriber will be unable to deny a guest or prospective partner access to selected test results contained in the subscriber's testing history, other than by type of test results, as noted above.
  • a subscriber will not be allowed to authorize access to only a portion of STD test results for the subscriber, but will be allowed to authorize access by a guest to only all of the subscriber's STD test results, while excluding access by the guest to the subscriber's drug use test results, or vice versa.
  • the subscriber will interact with a potential sexual partner.
  • the subscriber will provide the prospective partner with the guest password/and or guest ID number and customer ID for the subscriber as indicated in a block 1 18.
  • the prospective sexual partner can then access the authorized data of the subscriber on the registry site using the guest password and/or guest ID number, and customer ID of the subscriber.
  • a block 122 indicates that the guest or prospective partner reviews the subscriber's test results and verifies the person's (subscriber's) identity against the identification verification data included with the test result data of the subscriber on the registry site.
  • the prospective partner will at least be assured that, at the time of the medical test, the results shown at the registry site were valid. Naturally, such test results may no longer be applicable. The longer the time interval between the current date and the date of the medical tests, the less assured a prospective partner will be by viewing the test results of a subscriber. For this reason, it is likely that subscribers will be tested more frequently than they would otherwise, which should help (statistically) in detecting any STD-infected subscribers at an earlier time than would otherwise be the case.
  • the registry site will provide educational content directed to STDs, including epidemiology, clinical manifestations, diagnosis, treatment, and references to or copies of the most recent scientific literature relating to topics of potential interest to the subscriber, and will make very clear that subscribers and guests are encouraged to practice safe sexual procedures to minimize the risk of infection from any type of STD.
  • An alternative embodiment of the present invention is directed to a registry site that is intended to be accessed telephonically.
  • the subscriber would access the registry site via a telephone access number and enter his or her customer ID and password through an alpha-numeric keypad.
  • the subscriber also could provide a guest or prospective partner with the subscriber's customer ID and a guest password and/or ID number that, through similar use of an alpha-numeric keypad, would allow access to the subscriber's information on the registry.
  • the guest or prospective partner then would be allowed to hear an automated listing of the subscriber's testing history.
  • the automated response would include the subscriber's driver's license number or other identifying information that could be matched against the corresponding information presented by and identifying the party claiming to be the subscriber.
  • the partner subscriber If the two parties are located together when the registry is accessed telephonically and the guest or prospective partner also is a subscriber (i.e., a "partner subscriber") to the registry site, the partner subscriber, without terminating the call and redialing, would enter his or her customer ID and password, thereby accessing the partner subscriber's testing history and verifying that the automated response previously heard was, indeed, generated by the registry site and was not a fraudulent automated recording from some other source. The partner subscriber then could allow the subscriber to hear the automated listing of the partner subscriber's testing history and identifying information. Details of Registering as a Subscriber Further details of the steps taken by a consumer to register with the registry site as a subscriber are illustrated in FIGURES 3 through 5.
  • FIGURE 3 shows the steps involved in registering with the registry site over the Internet, beginning with a block 150.
  • a consumer who is considering becoming a subscriber to the service offered by the registry site accesses the site using a web browser.
  • the consumer selects a registration option provided on a web page of the registry site in order to subscribe to the service.
  • a block 156 indicates that the subscriber is queried to provide personal information, e.g., by displaying a registration form in the consumer's browser.
  • personal information e.g., by displaying a registration form in the consumer's browser.
  • Such information may include birth date, gender, mailing address, phone number, email address, etc.
  • the subscriber selects a primary user name and password, as indicated in a block 158.
  • the subscriber selects a guest password and/or guest ID number and sets the associated guest access rights.
  • the subscriber may not choose to disclose all test results to a guest, but may limit the data accessible to the guest to the results of a most recent test for STDs.
  • the subscriber will be unable to deny a guest or prospective partner access to selected test results from the subscriber's testing history for a particular type of test, e.g., access to only a portion of the STD test results.
  • a block 162 provides that the subscriber selects the subscription option and provides a payment method, which will typically be a credit card.
  • the information typically required for accepting payment by credit card will be provided by the subscriber at this time, including the type of credit card, card number, expiration date of the card, billing address, etc. It is also contemplated that other forms of payment can be provided, including payment by debit card, and by other financial instruments, including personal check.
  • a block 164 indicates that the subscriber is assigned a unique customer ID, which is provided to the subscriber for use in referencing the subscriber's personal information and test results on the registry site.
  • a consumer may elect to register with the registry site over the phone as indicated in a block 170. If so, a block 172 provides that the consumer phones the customer service department for the registry site. In a block 174, a customer service representative answering this telephone call collects the personal information from the consumer and describes the subscription offerings to the consumer, answering any other questions the consumer may have. In a block 176, the consumer selects the subscription option and chooses a payment method.
  • the various conventional ways of providing payment to the registry site for the services rendered will include credit or debit cards and other financial instruments.
  • FIGURE 5 illustrates steps that are similar to those in FIGURE 3, except that as indicated in a block 190, the consumer initiates the registration from a testing lab kiosk (or from an information kiosk that might be found in locations likely frequented by those interested in the services provided by the registry site).
  • a block 192 provides that, in this case, the consumer visits the testing lab, perhaps already having a ⁇ anged for a test to be made for one or more STDs without knowledge of or direction from the registry site. While making the visit, the consumer may learn that the services offered by the registry site are available and will then use the kiosk to access the registry site.
  • the consumer again selects the registration option provided on the homepage of the registry site in order to subscribe to the services offered.
  • Remaining blocks 196 through 204, respectively, in FIGURE 5, correspond to blocks 156 through 164 in FIGURE 3. Verification of Subscriber Identification
  • FIGURES 6 and 7 illustrate two alternative methods for verifying the subscriber's identification - both at the time the subscriber appears at the testing lab to "be tested," and later, when the test results are accessed by a guest or prospective sexual partner on the registry site.
  • the procedure begins with a block 210 in which the subscriber's driver's license (or other indicia of identification) is used as a basis for verifying identity.
  • the testing lab reviews the subscriber's driver's license to confirm that the picture shown there corresponds to the appearance of the person from whom the test sample is drawn.
  • the testing lab may access (but preferably only at an access level necessary for interaction with medical testing providers) the subscriber's identification information on the registry site to confirm that the subscriber's identification matches that of the individual undergoing the test.
  • a block 214 indicates that the testing lab records the driver's license number in association with the test ordered by the subscriber for STDs (or other type of test).
  • the recorded indicia of identification accompany the test sample electronically throughout the sample's testing process.
  • the testing lab then draws a sample from the subscriber whose identification has been confirmed, and completes the test using standard testing procedures.
  • the subscriber also provides the customer ID, that was obtained from the registry site when the subscriber registered, to the testing lab for association with the test results.
  • the testing lab records the customer ID and driver's license number for the subscriber with the test results obtained upon completing the test or analysis.
  • a block 222 provides that an optional further confirmation of the verification of the identification can be provided by scanning the image (photograph) of the subscriber included on the driver's license using a conventional scanner.
  • the scanned image can be posted with the test results to the registry site and viewed by a guest accessing the test results with the permission of the subscriber as further proof confirming the identity of the subscriber in connection with the test results.
  • the test results accessible at the registry site are linked to the driver's license number (and to the scanned image of the driver's license submitted by the subscriber, if available).
  • FIGURE 7 An alternative for providing verification of the identification of the subscriber is shown in FIGURE 7, beginning with a block 230.
  • the testing lab takes a digital photograph of the subscriber using any of the readily available digital cameras.
  • the digital photograph produced by the camera is attached to the test request by the testing lab in a block 234 and, preferably, accompanies the sample electronically through the sample's testing process.
  • the testing lab draws a sample from the subscriber and completes the tests requested by the subscriber in a block 238.
  • the digital photograph is included and is associated with the test results.
  • the test results can be viewed on the registry site, linked to the digital photograph.
  • the image of the subscriber is displayed on the registry site in association with the test results as proof of the identity of the subscriber, thereby providing evidence to a guest who has received permission from the subscriber to access the test results and the digital photo, of the medical condition asserted by the subscriber, as confirmed by the test results.
  • biometric data of the subscriber may be taken at the time a test sample is drawn from the subscriber and included with the test results that are posted at the registry site. Confirmation of the identity of the subscriber can then be achieved by a guest accessing the test results if the party claiming to be the subscriber has already submitted corresponding biometric data to the registry site.
  • the registry site can then indicate whether the biometric data submitted when the subscriber registered with the site matches the biometric data recorded when the subscriber was tested by the testing lab, thereby confirming that the subscriber tested is in fact the party asserting the medical condition confirmed by the test results.
  • biometric data to be compared to that accompanying the test results may be submitted in the presence of the guest, thereby further confirming the identity of the subscriber who was tested matches that of the party asserting a medical condition confirmed by the test results.
  • the biometric data may be a retinal scan, digital finge ⁇ rint scan, facial scan, voice print, etc. Input devices for scanning any of these various types of biometric data may eventually be more commonly available, making this alternative more practical. It is contemplated that in some cases, a subscriber will desire medical results to be posted and will permit access by a guest or prospective partner to those test results even though the results confirm that the subscriber has tested positive for a STD.
  • a prospective partner may have refused a sexual liaison with the subscriber because of concern of infecting the subscriber, if the prospective partner has tested positive for HSV-2.
  • the prospective partner may wish to confirm that the subscriber has also tested positive for HSV-2, thereby alleviating, to some extent, the concerns that either may infect the other.
  • a subscriber will not be able to change the test results that are posted to the registry site and, preferably, the subscriber will not be able to deny a guest or prospective partner access to selected tests from the subscriber's testing history. However, at any time, the subscriber may delete or purge his or her entire history of medical tests from the registry site's database, terminating his or her subscription with the site and invalidating his or her customer ID number.
  • FIGURE 8 begins with a block 250 in which the steps involved in posting the results of a test in an automated fashion are ca ⁇ ied out by the testing lab.
  • a block 252 provides that the test is completed to determine the results.
  • the testing lab posts the results of the test to the registry site via an SSL encrypted link, through a VPN, ensuring that the test results are not intercepted by any third party. If these test results are posted to the registry site without intervention of any personnel at the registry site, the potential for introducing an error in the posting of the results is minimized.
  • the process employed for automatically posting the results of the test to the registry site ensures that further errors are not introduced.
  • the test results will include the consumer account ID, thereby relating the test results to a specific subscriber, and a proof of the identity of a subscriber, such as the driver's license number, scanned image of the subscriber's driver's license, or a digital photograph of the subscriber.
  • a block 260 begins the alternative process of enabling the subscriber to review the test results before they are posted to the registry site.
  • the test results are produced by the testing lab as requested by the subscriber.
  • a block 264 provides that the testing lab notifies the subscriber of the test results, by telephone, mail, or other relatively secure format.
  • the subscriber has the option of requesting that the testing lab post the results to the registry site, as indicated in a block 266.
  • block 268 indicates that the testing lab posts the test results to the registry site for access by the subscriber and by any guest given permission by the subscriber.
  • the test results are associated with the consumer account ID provided to the subscriber by the registry site and with the verification of the subscriber's identity, such as the subscriber's driver's license number, the scanned image of the driver's license, or the digital photograph taken of the subscriber.
  • FIGURE 10 illustrates the steps taken for manually posting test results to the registry site, where it is understood that these results do not serve as proof of a medical condition, i.e., for pu ⁇ oses of convincing a prospective sexual partner that the subscriber was tested or that the asserted medical condition was determined by a test of the subscriber.
  • the steps for manually posting the test results begin.
  • a block 282 provides that the test results are produced by a testing lab, but can be based upon a sample submitted by the subscriber after using a home test kit, or as a sample from the subscriber submitted to a testing lab that is not affiliated with the registry site.
  • the testing lab notifies the subscriber of the test results.
  • FIGURE 11 illustrates basic components of PC 20, which currently is likely to be the most commonly used device for connecting to the registry site over the Internet. These components include a central processing unit (CPU) 300 that is coupled in communication with a memory 302, which includes both readonly memory (ROM) and random access memory (RAM). Memory 302 is loaded with machine instructions that are typically stored on a hard drive 304.
  • CPU central processing unit
  • memory 302 which includes both readonly memory (ROM) and random access memory (RAM).
  • the machine instructions which comprise program modules and other software components of applications such as a browser are executed by CPU 300.
  • the CPU can execute a browsing program used to access the registry site and to view information of a subscriber, including the test results and verification of the subscriber's identity.
  • CPU 300 is connected to a display interface 306, which drives a display 308, on which the browser displays information obtained by access of the registry site.
  • a network interface 312 To connect to the registry site, CPU 300 receives and transmits data bi-directionally over a network interface 312 in response to commands input by the user through user input devices 310, which may include a keyboard and/or pointer control device (or mouse).
  • Network interface 312 may include a modem, or a network interface card that connects to a data communication port on a network through which the registry site is accessed over the Internet, generally as shown in FIGURE 1.

Abstract

Results of medical test for sexually transmissible diseases (STDs) or other medical conditions such as drug use are posted to registry site (112) accessible by subscriber and subscriber-authorized guests (120). Medical test results are associated with subscriber identity verification (108), which may be a driver's license number, or other indicia of identification, recorded when a test sample was drawn by a testing lab affiliated with the registry site (104). Results of the test performed by the testing lab are automatically posted to the registry site (112), along with subscriber's pre-assigned customer ID (100) and verification of subscriber's identity (104). Subsequently, subscriber and authorized guests can access the subscriber's test results (120) and the verification of the subscriber's identity by entering a predefined password or other access code, thereby enabling the guest, who may be a prospective sexual partner, to verify a medical condition asserted by the subscriber (122).

Description

USE OF INTERNET SITE AS A REGISTRY FOR RESULTS OF
MEDICAL TESTS Related Patent Application
This application is based on prior copending U.S. provisional patent application, Serial No. 60/185,562, filed February 28, 2000, the benefit of the filing date of which is hereby claimed under 35 U.S.C. § 119(e).
Field of the Invention This invention generally relates to a method and system for reporting medical test results over a network, and more specifically, to providing a registry at which subscribers' medical test results can be accessed over a public network by the subscribers.
Background of the Invention
The potential for contracting life threatening or currently incurable diseases such as human immunodeficiency virus (HIV or acquired immunodeficiency syndrome (AIDS)) through sexual contact with infected partners has substantially changed attitudes about engaging in casual sex in our society. While certain measures can minimize the risk that a sexually transmissible disease will be transmitted from one partner to another, many people have viewed that risk as too great to justify a sexual relationship with another person. One way in which prospective sexual partners can minimize the risk and alleviate the dampening effects of concern about contracting such diseases from the other partner is to first ensure that each partner has recently been tested for at least life threatening or currently incurable sexual diseases, with negative results.
In many cases, a verbal assurance by a prospective sexual partner that the person has recently been tested for diseases such as HIV, genital heφes, hepatitis
B, or hepatitis C will not be sufficient to convince the other partner to engage in sex, since the person giving the assurance may not have been tested or may have been tested with positive results for such diseases. Proof of the testing is somewhat hard to provide, particularly when the prospective sexual union has occurred following a casual meeting or under circumstances in which proof, such as documentation of the medical test results, is not readily available. Clearly, a readily accessible registry that shows proof of recent negative test results for sexually transmitted diseases (STDs) for each partner would greatly reduce the risk of contracting such diseases from a sexual liaison, and the assurance provided by enabling the other prospective partner to access this proof would certainly reduce the concerns of both prospective partners for incurring such risks.
The Internet has become a freely and widely accessible site for all types of information and would provide an ideal medium to enable medical test results to be readily accessed by a party who has been tested and has authorized the test results to be recorded in an accessible registry. The registry in which such test results are stored could be accessed through any computer or other computing device that is coupled to the Internet, from virtually any place in the world. Alternatively, the registry could be accessed by telephone. The only other requirements for such a registry to serve the intended function would be that the access to an individual's test results be securely limited only to the person who was tested and to others provided access by that person, and that the party who was tested be unable to modify the test results that are posted, other than to delete the results. Clearly, it is very important that the other prospective sexual partner be able to rely upon the results of such medical tests to the extent that the tests were properly carried out by a certified testing agency.
The ability to access the results of tests for STDs in an accessible registry would not mean that partners engaging in sex should do so without taking other protective measures, such as using condoms. In fact, it would be desirable to provide education about safe sex practices at the same site as the registry in which the test results are stored and accessed in order to encourage individual awareness of risks, and responsibility and safety in dealing with STDs. The registry site might thus include information of a socially conscious nature or provide links to information concerning the practice of safe sex, in addition to providing the test results for assuring a prospective sexual partner that the other prospective partner was tested and found to be free of STDs, of at least a life threatening or incurable type.
It would also be desirable to employ a registry accessible over the Internet (or other public network, including the public telephone network) at which test results for other types of medical tests could be stored and accessed by the person tested and/or by authorized medical personnel. While many other types of test results could be accessed on such a site, examples of such tests would be those carried out to measure blood glucose (for diabetes), or to measure protimes (for blood clotting factor), troponin (cardiac function), myoglobin (cardiac function), or creatinine (for renal function). Use of a registry to store these results would minimize paper work and reduce errors in reporting the results.
Also, it would be desirable to store the results of home medical tests at an Internet registry site, so that both the individual being tested and that person's physician are able to access the results. In connection with home testing, it would be preferable to provide an interface between an automated test apparatus designed to carry out the test and the individual's computer to process the test results and transmit them to the registry for storage. For example, the test apparatus might couple to the person's computer through a universal serial bus (USB) port or through a serial or parallel port. Some tests require that a relatively complex analysis be performed to determine the level of a substance in the person's blood or other bodily fluids or in bodily samples (e.g., serum, plasma, urine, saliva, hair, etc.), and such tests are more readily carried out by a personal computer. The results could then be automatically transmitted to the registry site for storage and access by the person's physician or for use in prescribing appropriate drugs, therapy, or prophylactic measures. Alternatively, the test data could be analyzed by the registry site or its affiliated laboratory(ies) and the results made available on the registry site for access by the subscriber or other individual authorized by the subscriber.
Another possible application of this invention is a registry site that is directed to securely storing the results of testing for recreational and illicit drugs (e.g., marijuana, cocaine, opiates, phencylidine, amphetamines, barbiturates, benzodiazepines, methadone, propoxyphene and alcohol). Such a site could be used, for example, by employers and employees or prospective employees where such testing is a requirement of employment, i.e., in law enforcement, judicial and drug rehabilitation settings, or in the required testing of athletes.
Accordingly, it will be apparent that providing a site, which is secure, for storing medical test results accessible over a network (such as the Internet) has many desirable applications. Currently, no such site is available that both provides evidence of the identity of the individual tested and also enables the secure access of test results.
Summary of the Invention In accord with the present invention, a method is defined for registering the results of a medical test performed on a subscriber so that the results are accessible only to authorized parties over a communication network and can serve as evidence of a medical condition of the subscriber. The method includes the step of receiving the results of the medical test of the subscriber from a testing agency that performed the medical test, along with an indicia of an identity of the subscriber. Note that for puφoses of this specification and of the claims that follow, the terms "testing agency", "testing lab" and "test lab" refer to a facility where blood, other bodily fluid or a bodily sample is collected, together with a facility where the actual testing/analysis is performed. The collection facility and the testing/analysis facility may be located at the same site or at different sites. The results of the medical test of the subscriber are stored at a registry site provided by a subscription service. The subscriber is readily able to access the results of the medical test and the indicia of the identity of the subscriber at the registry site over the communication network to provide evidence to another party of the medical condition of the subscriber, based upon the results of the medical test.
In one preferred application of the present invention, the medical test is preferably a test for a STD, and more preferably, a potentially life-threatening or currently incurable STD. Also, in this preferred application, the other party is likely to be a prospective sexual partner of the subscriber. To ensure the security of the medical test results, the subscriber is preferably provided with an access code including a user name and a password that must be supplied to gain access to the results of the medical test stored at the registry site.
The method also preferably includes the step of requiring the subscriber to authorize transmittal of the results of the medical test from the testing agency to the registry site prior to and as a condition to the step of receiving the results from the testing agency. Once the testing agency is authorized to do so, it electronically transmits the results of the medical test to the registry site.
A history of the results from medical tests performed on the subscriber at different times will also be maintained at the registry site. This testing history will likely include a date at which each medical test was performed, and can be accessed only by authorized parties, e.g., the subscriber. The subscription service optionally charges the subscriber a fee for providing access by the subscriber to the results of the medical test at the registry site and/or may charge a fee for receiving and storing the results of the medical test.
A link on the registry site can be provided to a different site (maintained by another party) that provides information of potential interest to the subscriber. A fee can then be charged to the other party in regard to the subscriber accessing the different site via the link on the registry site of the subscription service. It is also contemplated that the registry site provided by the subscription service will display advertising and charge a fee for displaying the advertising.
The subscriber will optionally be able to access the results of the medical test via an electronic data communication link to the registry site. As used herein and in the claims that follow, the terms "electronic data communication", "communication network" and "communication channel" are intended to encompass all forms of wired and wireless communication, including but not limited to, communication between computing devices over local and wide area networks, communication using all types of network access devices, telephones, facsimile machines, and all other forms of electrical and electronic communication between disparate sites.
In one embodiment, the subscription service will specify the testing agency that will provide the medical test of the subscriber and will receive a portion of a fee charged to the subscriber by the testing agency for carrying out the medical test. Optionally, the testing agency will provide a discount to the subscriber for using the testing agency that was specified by the subscription service.
The subscriber will be able to delete the entire history of the results of the subscriber's medical tests from the registry site. In addition, the subscriber will be able to determine who will have access to the results of the medical test stored at the registry site. The subscriber can also limit access of a guest to specific parts of the data of the subscriber that are stored at the registry site.
Another aspect of the present invention is directed to a system for enabling limited access to results of a medical test performed on a subscriber so that the results are accessible only to authorized parties over the electronic communication network and can serve as evidence of a medical condition of the subscriber. The system includes a server that stores the results of the medical test and makes the results available to the authorized parties in a manner generally consistent with the steps of the method described above. Brief Description of the Drawing Figures
The foregoing aspects and many of the attendant advantages of this invention will become more readily appreciated as the same becomes better understood by reference to the following detailed description, when taken in conjunction with the accompanying drawings, wherein: FIGURE 1 is a schematic diagram of the components of the present invention; FIGURE 2 is an overview flow chart showing the steps implemented in the present invention;
FIGURE 3 is a flow chart showing the steps implemented in an online registration of a subscriber in the present invention; FIGURE 4 is a flow chart showing the steps implemented in a mail or phone registration of a subscriber in the present invention;
FIGURE 5 is a flow chart showing the steps implemented when a subscriber registers at a kiosk;
FIGURE 6 is a flow chart showing the steps for verifying identity of the subscriber with a driver's license;
FIGURE 7 is a flow chart showing the steps involved in taking a digital photograph of a subscriber to prove identity;
FIGURE 8 is a flow chart listing the steps for automatic posting of test results by a laboratory; FIGURE 9 is a flow chart showing the steps involved when a subscriber reviews the test results and then decides to post them on the site;
FIGURE 10 is a flow chart showing the steps taken to manually post the test results on the web site; and
FIGURE 1 1 is a block diagram showing principle functional components of a personal computer suitable for implementing the present invention.
Description of the Preferred Embodiment
The present invention makes use of an Internet web site that will serve as a clearing house or registry for STD test results. Registration of a domain name for such a site has already been secured and is InformedPartner.com. This web site will provide subscribers secure access to personal information of a very sensitive nature, and will therefore implement extremely high standards of security to ensure that the information is not accessible by unauthorized parties and is not changed to alter the results of a medical test performed on a subscriber. Because the service is only available to subscribers who have registered with the web site, the following discussion and the claims that follow refer to this web site as a
"registry site."
Subscribers registering for the service provided by this registry site will have the option of having their STD test results posted to the registry site, along with an independent verification of the subscriber's identity, which is referred to in the claims that follow as "an indicia of the identity of the subscriber." In addition, the subscriber can also post test results that are not associated with verification of the subscriber's identity. In this case, the registry site will simply provide a repository for such data, creating a historical database of medical test results that may be of benefit to the subscriber, and will indicate, in connection with such data, that the identity of the individual tested has NOT been verified. However, the primary puφose of the service provided to the subscriber by the registry site is to enable proof of a medical condition to be presented to a prospective sexual partner of the subscriber based upon the results of one or more medical tests that were performed on the subscriber by a testing laboratory affiliated with the registry site. The subscriber's personal information is securely accessible only by authorized parties via an Internet or other electronic communication connection. Results of a medical test and other personal data of the subscriber can be accessed and displayed to the subscriber or to any other party who has previously been authorized by the subscriber to have access to data of the subscriber by entering a correct user name (and/or a customer ID number (ID) assigned to the subscriber) and the correct password. The subscriber will choose or be assigned a unique password, and will choose or be assigned a unique guest password and/or guest ID number for each specific other party authorized by the subscriber to access a selected portion of the subscriber's personal data. Thus, the subscriber can set access rights that limit the specific data of the subscriber that can be accessed by another party, based upon the password and/or guest ID number entered by the other party, which the subscriber will provide to the other party. A guest permission may optionally be valid for a single use only. Once a guest uses the credentials (the guest ID number and/or guest password) to access the subscriber's data, those credentials will expire, making it impossible for that guest or anyone else not so authorized to access the information on the web site.
Data maintained by the registry site will include personal identification information for each subscriber, a record of the types of medical tests performed on the subscriber, a test date, and test results, all of which will be associated with the customer ID originally assigned to the consumer. This information will be delivered in a format that is appropriate for display on a variety of different types of Internet or electronic communication access instruments.
In FIGURE 1, a system diagram illustrates various components of a preferred system for implementing the present invention, including maintenance of data at the registry site, and providing access of that data by a subscriber (or by another party authorized by the subscriber). Currently, it is likely that, in most cases, a subscriber will connect to the registry site using a personal computer (PC) 20 on which a browser program is executed. Examples of suitable browsing programs for execution on PC 20 include Microsoft Coφoration's INTERNET EXPLORER™, and Netscape Coφoration's NAVIGATOR™ browser programs. However, it is also contemplated that other devices, such as a personal digital assistant (PDA) 22 or a cell phone 24 that are Internet access enabled, can alternatively be used to access medical test results and other personal information of a subscriber that are maintained at the registry site. An appropriate format for the data maintained at the registry site will be provided for the specific Internet or electronic communication device employed to access the data. Thus, PC 20 can access data displayed using the full browser graphic user interface, while only a textual representation of the data will be displayed on cell phone 24. Details such as the type of Internet access employed by a subscriber, e.g., access over conventional telephone lines using a modem, a cable modem, a high-speed digital subscriber line, or satellite access of Internet 28 are not illustrated in FIGURE 1, since these details are not pertinent to the present invention. However, as is evidenced by the inclusion of PDA 22 and cell phone 24, it is contemplated that various types of wired and wireless connections with Internet 28 can be used for electronic data communication with the registry site at which the test results of a subscriber are maintained.
A consumer wishing to subscribe to the service provided by a registry site 30 can initially contact the registry site (to register as a subscriber to the service) over Internet 28 using PC 20, PDA 22, or cell phone 24, or may call the registry site by telephone, or by mail, email, or facsimile transmission. Alternatively, a consumer wishing to subscribe to the service may first become aware of it when exposed to advertising associated with an information kiosk 26 or when the consumer visits a testing lab to be tested for a STD. Each of the testing labs affiliated with the registry site will include one or more testing lab kiosks 32 that are connected to the registry site over Internet 28. It is contemplated that information kiosks 26 will be provided in places such as singles bars, which consumers having an interest in becoming a subscriber to the service provided by the registry site are likely to frequent and in which they are likely to meet prospective sexual partners. The information kiosk or testing lab kiosk can thus provide a connection to the registry site enabling a consumer to become a subscriber of the service. Alternatively, these kiosks can be used to connect to the registry site for access of the test results of a subscriber. Thus, in singles bars and other locations where people may meet others with whom they would be interested in having a sexual liaison, the information kiosks can be employed to provide evidence of a subscriber's medical condition, thereby enabling the subscriber to provide proof that when last tested for a STD, the results of the test were as asserted by the subscriber. Clearly, in most instances, both prospective sexual partners will preferably be subscribers, so that each can provide the proof of the medical condition that the other prospective partner would prefer. Revenue Model for Registry Site
As illustrated in FIGURE 1 , Internet 28 is the most likely channel for a subscriber (or a consumer who wants to register as a subscriber) to access registry site 30. Before making use of the services provided by registry site 30, a consumer must register and thereby become a subscriber; and details of the registration process are discussed below. It is contemplated that a monthly or annual subscription fee will be charged to a subscriber for providing the services explained herein. In addition to paying a periodic subscription fee, each subscriber will likely be charged each time that test results of medical tests performed on the subscriber are transferred to the registry site for storage, and a smaller charge may be incurred each time that the subscriber's personal data and test results are accessed over Internet 28. It is also contemplated that the registry site will display links to other web sites that provide information of possible interest to subscribers. For example, a link might be provided to a web site that sells birth control-related products, or a link might be provided to a site that discusses newly developed treatments for STDs. The registry site may impose a charge to the other web site each time that the link to the other web site is activated, or may charge a fixed fee for simply including the link. In addition, the registry site will likely display banner ads and other advertising components for web sites run by others. Typical fees for displaying such advertising at the registry site will be charged to those who are advertising in this manner.
Another source of revenue for the registry site will derive from the registry site specifying the testing labs that are affiliated with the registry site. A portion of the medical test fee charged by such a testing lab will then be received by the operators of the registry site. Since the service of the registry site is at least national, and more likely, will become international, the testing labs required to service all of the subscribers of the registry site will be distributed all over the country, and possibly, in all major countries of the world. Optionally, the testing labs may provide a discount to subscribers of the registry site, recognizing that the increased volume arising from the referral provided by the registry site will more than compensate the testing lab for the portion of the fee returned to the registry site and any discount provided the subscribers of the registry site. Secure Access of Subscriber Data
A key aspect of the service provided by registry site 30 is the security with which the personal information of each subscriber is maintained. The security of this personal information and the test result data is protected by requiring that each subscriber enter a user name and unique password before being allowed access to the data of the subscriber. In addition, each subscriber is provided with, or can specify, a guest or partner ID number and/or password that must be entered to enable the guest to gain access to that portion of the subscriber's personal information and test results to which the subscriber has authorized access. The subscriber controls the access to this data and information by setting permissions for each specific unique guest or partner ID number. Such permissions will enable the subscriber to determine the information displayed to the guest and the protection level provided. For example, the subscriber can specify whether: (1) the guest requires a guest ID number and a secondary password; (2) the guest is permitted to view only a particular type of test (e.g., a test for STD, but not for drugs); and, (3) the guest ID number and/or password is valid for only a single use or for multiple accesses of the subscriber's information and test results. The guest ID numbers are not sequential, but instead are randomly generated to prevent someone from "guessing" a more current guest ID, based on a previous guest ID. The web site may optionally include a Digital Certification, providing a verifiable form of identification that the web site being accessed is, in fact, the true registry site, or the web site can provide other means to prove its authenticity as the registry site. For example, the registry site may enable a prospective partner, who also is a subscriber of the registry site, to access his or her test data, using his or her customer ID and/or password, directly from the subscriber's displayed information, to mitigate the risk that inaccurate or fraudulent test results posted on a fraudulent site can be displayed to an unwitting prospective partner. To mitigate the possibility of a third party accessing a subscriber's displayed test results without the permission of the subscriber, the browser may be set to refresh after a short period of time and then automatically display a non-confidential page within the registry site (e.g., a guest login page). All web-based communications accessing personal information and data of a subscriber that are maintained on registry site 30 will be via a secure socket layer (SSL) encrypted Internet connection to registry site 30 and will be through a firewall 34. Firewall 34 isolates the sensitive information of the subscribers, preventing unauthorized access by third parties. Communications through firewall 34 from Internet 28 are connected to a load balancer 36, which distributes the Internet traffic generally equally between a plurality of web servers 38a through 38d, thereby minimizing delays by subscribers and authorized guests in accessing the personal information and test result data. Firewall 34 also restricts access to the web services of each of these web servers and ensures that no outside traffic can directly reach the web servers.
Application servers 40a and 40b form a middle tier in the architecture of registry site 30 and are isolated from the Internet by both firewall 34 and load balancer 36. Only an application running on the application servers can enable access by authorized parties to data of the subscribers maintained on a database server 42. The business logic for the web based application that enables subscribers to access their individual test results and other personal information are hosted by the application servers. Also, the application servers generate dynamic content based on data extracted from the database maintained on database server 42. Any incoming queries from web servers 38a through 38d are dispatched to the application servers, which perform appropriate queries of the data, extracting the requested information once all requirements for secure access have been met. Also, the application servers format the returned data in a form appropriate for the client Internet access device that has queried registry site 30, so that the form is appropriate and can readily be rendered on the PC, PDA, cell phone, or other Internet or electronic access device being used by the subscriber. The output produced from a query of database server 42 will be returned to the web server that requested it, under the control of the application running on one of the application servers.
Another key aspect in maintaining the integrity and security of test result data will be the use of a virtual private network (VPN) 60, which is connected to each affiliated testing lab work station 58. Several different approaches are contemplated for entry of test results into database server 42. One preferred approach is to completely automate the process of reading the test results from medical tests performed on subscribers and to automatically batch load the test results into the data at registry site 30 over VPN 60, so that no human intervention is required for transcribing the test results. Automating this process should minimize the risks of inadvertently introducing an error in the results reported and stored for any subscriber. Alternatively, test results from medical tests of subscribers can be entered in an appropriate form at testing lab work station 58, by trained personnel at the testing lab. It is highly preferred that no personnel at registry site 30 be involved in the processing of test results or entry of the test results into the data maintained on database server 42. By limiting human interaction in the process only to personnel at the testing lab, any liability of the registry site for error in the result or in the performance of the medical test, or in the entry of the test results into the data will be avoided by the registry site. Transmission of the test results over VPN 60 in an encrypted form (either as an automated batch load or as manual transcription entries on a form) will ensure that the results cannot be intercepted by a third party. Also, since application servers 40a and 40b interact with testing lab work station 58 for providing entry and transmission of the test results into the database maintained on database server 42, they will provide an automated verification of the receipt of the test results by the registry site to the testing lab that submitted the test results.
Strict administrative controls will be enforced on the security of the application and application servers hosting the application that enable access to the subscriber data. All subscriber data contained within database server 42 of a sensitive nature will be encrypted and only accessible by administrator level personnel at the registry site, who because of the encrypted form of the data, will be unable to directly display and read sensitive information of the subscribers contained in the data.
Additional support systems 44 will likely be provided to facilitate the management and administration of registry site 30. Examples of these support systems include a report server 46, an email server 48, an advertising server 50, an administration server 52, a billing server 54, and a system monitor 56. Other support systems will be provided as necessary to administer and manage the operation of the business of the registry site relating to servicing the needs of subscribers and controlling access to the sensitive data maintained on database server 42.
When the lab has posted the test results for a subscriber to the registry site for inclusion in the data maintained there, the subscriber can be notified either by email, by facsimile transmission, or by a phone call (made by the system in an automated fashion) to inform the subscriber that the test results have been uploaded automatically or manually to the registry site and can be accessed by the subscriber. These test results can then be checked by the subscriber. Preferably, the subscriber will not be able to selectively withhold the display of test results from a similar group of test results once said test results have been transmitted to the registry without terminating his or her subscription to the registry, thereby expunging the subscriber's testing data history and invalidating further use of the subscriber's primary username and password. In the event that the subscriber arranges for test results for drug use and test results for STDs to be stored at the registry site, it is contemplated that the subscriber will be enabled to select the type of test results (i.e., drug use test results or STD test results, in this example) to be included among the data that a guest or prospective partner of the subscriber can access to verify the medical condition of the subscriber based upon the results of the lab tests. It is contemplated that automatic notifications of the subscriber by email or facsimile transmission, informing the subscriber that the test results are available on the registry site, can be customized by a particular testing lab to comply with specific trademark branding needs of the testing lab, but will not contain any personal information or the actual test results, as such messages will be transmitted through unsecured channels and might be accessed by third parties. When the registry site receives the test results from the testing lab, an automated verification email message will be transmitted to the testing lab from the registry site, providing proof that the registry site has received those results from the testing lab. Alternatively, the registry site may generate automatic notification of the subscriber that test results are available for review on the registry site.
As an alternative to automated uploading of test results to the registry site, subscribers may elect to have the test results forwarded to them from the testing lab in a more traditional fashion, i.e., by personal mail, or over the telephone. Once the subscriber has received and reviewed the test results, the subscriber can at that time, request that the testing lab post the results to the registry site. Only after receiving permission from the subscriber would the testing lab forward the results of the tests, along with validated identification information for the subscriber, to serve as proof of the subscriber's identity when the test results are accessed at the registry site, by a guest or prospective partner. It is also contemplated that the subscriber may choose to use one or more kits to carry out medical testing at home, or may elect to have medical tests performed by a non-affiliated testing lab. Also, some home test kits must be mailed into a testing lab for determination of the results of the tests. A subscriber will have the option of manually posting such tests to the registry site. However, test results that are manually posted and not provided by an affiliated testing lab which has not drawn the test sample from a subscriber whose identity has been verified will not have the benefit of a validation of the subscriber's identity, and thus will be unable to serve as proof of the subscriber's medical condition. Any guest or prospective sexual partner accessing results that are posted without benefit of the validation of the subscriber's identity will be clearly warned in the display of the results that the registry site is posting the results as a service to the subscriber, but without proof of the subscriber's identity. The guest will thus be alerted that the test results do not serve as evidence of the subscriber's medical condition, since they might be fictitious, or may be for a person other than the actual subscriber.
One of the benefits of enabling the subscriber to post medical test results from sources other than an affiliated testing lab and without a proof of identity is to maintain a history of the tests that can be readily accessed by the subscriber. In addition, posting of such test results may be beneficial in facilitating discussions between the subscriber and the subscriber's physician, since it is possible that both the subscriber and the physician can simultaneously access the test results (assuming that the subscriber has provided permission and a guest password and/or guest ID number to the physician to access the results). Summary of Procedures Used in Present Invention
FIGURE 2 illustrates the steps involved in the overall use of the registry site for registering subscribers and for receiving, posting, and enabling access of test results that serve as proof of a medical condition of the subscriber. Following a start block, a block 100 indicates that a consumer registers as a subscriber with the registry site (e.g., InformedPartner.com). As part of the registration process, the subscriber may optionally be required to provide an indicia of identification (e.g., a digital copy of a passport photograph or a valid driver's license), although, it will be more likely that the indicia of identification will be required simply to confirm the identity of the subscriber for puφoses of payment by a credit or debit card, or by other non-cash means. As noted above, the registration can be accomplished over a variety of different types of devices that can access the registry site over the Internet, including information kiosk 26, and testing lab kiosk 32. By registering with the registry site, the subscriber agrees to be financially liable for the subscription fee and for any other fees associated with the subscriber's use of the registry site. As noted above, such fees may include a fee charged each time that the personal information and data of the subscriber are accessed, and a fee charged each time that medical test results are posted to the registry site. In a block 102, the subscriber visits an affiliated testing lab, having arranged for the testing lab to draw a sample in order to carry out the test requested by the subscriber. It is possible that the appointment for visiting the testing lab will be made from the registry site, but can alternatively be made over the telephone or during a previous visit to the testing lab. For the puφoses of this exemplary application of this invention, the medical tests will likely be for STDs, and more likely, be limited to potentially life threatening or currently incurable kinds of STDs. Examples of the types of tests that might be made for potentially life- threatening or currently incurable STDs include the Elisa immunoassay (EIA), the Western blot or other confirmatory test for HIV; the hepatitis B surface antigen and hepatitis C antibody tests; and the Heφes simplex virus type 2 (HSV 2)- specific serology test. Additional tests for curable sexually transmissible diseases may be included, such as culture, ligase chain reaction (LCR) and polymerase chain reaction (PCR) tests for chlamydia trachomatis and neisseria gonorrhoeae; rapid plasma reagin (RPR), Venereal Disease Research Laboratories (VDRL) or other confirmatory test for syphilis; and tests for Epstein-Barr virus (EBV), cytomegalovirus (CMV) and varicella-zoster virus (VZV). Of course, many other types of tests may be carried out within the scope of the present invention, including those for other types of medical conditions that are not sexually transmitted and/or are tests for diseases or medical conditions that are not incurable or potentially life threatening. In a block 104, the lab draws a sample from the subscriber and at that time, verifies the identity of the subscriber. Verification of the identity of the subscriber can be based upon presentation by the subscriber of any kind of legally acceptable picture identification, such as a driver's license, passport, or other common legally accepted indicia of identification. However, in most cases, it is expected that a subscriber will present a driver's license with a picture as proof of his or her identity. The testing lab also may access (e.g., only at an access level necessary for interaction with medical testing lab providers) the subscriber's identification information on the registry site to match the presented indicia of identification to that on the registry site, if such identification information was provided previously by the subscriber to the registry site. A block 106 indicates that the subscriber provides to the testing lab the customer ID that was obtained from the registry site, so that the customer ID can be associated with the test results and with the subscriber identification data. Optionally, such customer ID can be verified by the testing lab by accessing the registry site. Although various types of identification data are contemplated, the simplest verification data for the subscriber's identification is the driver's license number of the subscriber.
In a block 108, the testing lab records the customer ID and the ID verification in association with the lab test, on the request form. In a block 1 10, the lab completes the medical tests requested by the subscriber, obtaining results that are then posted (automatically or manually) to the registry site, along with the customer ID and identification verification data, as indicated in a block 1 12. As noted above, it is also contemplated that the subscriber may alternatively choose to receive and verify the test results before requesting that the testing lab post them to the registry site.
A block 1 14 indicates that the testing lab or registry site notifies the subscriber that the test results have been posted to the registry site. The notification can be automated, as described above. The subscriber verifies the lab results and the personal information on the registry site, typically using a browser to access the information. Of course, the results of the test can only be accessed by the subscriber after the subscriber enters the user name and password previously assigned to the subscriber. In addition, a block 116 provides for the subscriber to set the guest access rights, specifically defining the data of the subscriber that will be accessible to a guest or prospective sexual partner. Preferably, the subscriber will be unable to deny a guest or prospective partner access to selected test results contained in the subscriber's testing history, other than by type of test results, as noted above. Thus, for example, a subscriber will not be allowed to authorize access to only a portion of STD test results for the subscriber, but will be allowed to authorize access by a guest to only all of the subscriber's STD test results, while excluding access by the guest to the subscriber's drug use test results, or vice versa.
Typically at some later point in time, the subscriber will interact with a potential sexual partner. In order to show proof of a medical condition satisfying the prospective sexual partner, the subscriber will provide the prospective partner with the guest password/and or guest ID number and customer ID for the subscriber as indicated in a block 1 18. As noted in a block 120, the prospective sexual partner can then access the authorized data of the subscriber on the registry site using the guest password and/or guest ID number, and customer ID of the subscriber. A block 122 indicates that the guest or prospective partner reviews the subscriber's test results and verifies the person's (subscriber's) identity against the identification verification data included with the test result data of the subscriber on the registry site. Assuming that the identification verification data confirm that the identity of the subscriber who was tested is that of the person asserting a medical condition, the prospective partner will at least be assured that, at the time of the medical test, the results shown at the registry site were valid. Naturally, such test results may no longer be applicable. The longer the time interval between the current date and the date of the medical tests, the less assured a prospective partner will be by viewing the test results of a subscriber. For this reason, it is likely that subscribers will be tested more frequently than they would otherwise, which should help (statistically) in detecting any STD-infected subscribers at an earlier time than would otherwise be the case. Also, the registry site will provide educational content directed to STDs, including epidemiology, clinical manifestations, diagnosis, treatment, and references to or copies of the most recent scientific literature relating to topics of potential interest to the subscriber, and will make very clear that subscribers and guests are encouraged to practice safe sexual procedures to minimize the risk of infection from any type of STD.
An alternative embodiment of the present invention is directed to a registry site that is intended to be accessed telephonically. The subscriber would access the registry site via a telephone access number and enter his or her customer ID and password through an alpha-numeric keypad. The subscriber also could provide a guest or prospective partner with the subscriber's customer ID and a guest password and/or ID number that, through similar use of an alpha-numeric keypad, would allow access to the subscriber's information on the registry. The guest or prospective partner then would be allowed to hear an automated listing of the subscriber's testing history. The automated response would include the subscriber's driver's license number or other identifying information that could be matched against the corresponding information presented by and identifying the party claiming to be the subscriber. If the two parties are located together when the registry is accessed telephonically and the guest or prospective partner also is a subscriber (i.e., a "partner subscriber") to the registry site, the partner subscriber, without terminating the call and redialing, would enter his or her customer ID and password, thereby accessing the partner subscriber's testing history and verifying that the automated response previously heard was, indeed, generated by the registry site and was not a fraudulent automated recording from some other source. The partner subscriber then could allow the subscriber to hear the automated listing of the partner subscriber's testing history and identifying information. Details of Registering as a Subscriber Further details of the steps taken by a consumer to register with the registry site as a subscriber are illustrated in FIGURES 3 through 5. These Figures illustrate three different approaches that can be used. FIGURE 3 shows the steps involved in registering with the registry site over the Internet, beginning with a block 150. In a block 152, a consumer who is considering becoming a subscriber to the service offered by the registry site accesses the site using a web browser. In a block 154, the consumer selects a registration option provided on a web page of the registry site in order to subscribe to the service. Having selected this option, a block 156 indicates that the subscriber is queried to provide personal information, e.g., by displaying a registration form in the consumer's browser. Such information may include birth date, gender, mailing address, phone number, email address, etc. The subscriber then selects a primary user name and password, as indicated in a block 158. In addition, as noted in a block 160, the subscriber selects a guest password and/or guest ID number and sets the associated guest access rights. In many cases, the subscriber may not choose to disclose all test results to a guest, but may limit the data accessible to the guest to the results of a most recent test for STDs. Preferably, the subscriber will be unable to deny a guest or prospective partner access to selected test results from the subscriber's testing history for a particular type of test, e.g., access to only a portion of the STD test results.
A block 162 provides that the subscriber selects the subscription option and provides a payment method, which will typically be a credit card. The information typically required for accepting payment by credit card will be provided by the subscriber at this time, including the type of credit card, card number, expiration date of the card, billing address, etc. It is also contemplated that other forms of payment can be provided, including payment by debit card, and by other financial instruments, including personal check. Once this information has been entered at the registry site over a SSL connection, a block 164 indicates that the subscriber is assigned a unique customer ID, which is provided to the subscriber for use in referencing the subscriber's personal information and test results on the registry site.
Alternatively, a consumer may elect to register with the registry site over the phone as indicated in a block 170. If so, a block 172 provides that the consumer phones the customer service department for the registry site. In a block 174, a customer service representative answering this telephone call collects the personal information from the consumer and describes the subscription offerings to the consumer, answering any other questions the consumer may have. In a block 176, the consumer selects the subscription option and chooses a payment method. Again, the various conventional ways of providing payment to the registry site for the services rendered will include credit or debit cards and other financial instruments. In a block 178, the subscriber selects a primary user name and password, while in a block 180, the subscriber chooses a guest password and/or guest ID number and sets the associated access rights for a guest. Finally, in a block 182, the subscriber is assigned a unique customer ID number that is given to the customer over the telephone. FIGURE 5 illustrates steps that are similar to those in FIGURE 3, except that as indicated in a block 190, the consumer initiates the registration from a testing lab kiosk (or from an information kiosk that might be found in locations likely frequented by those interested in the services provided by the registry site). A block 192 provides that, in this case, the consumer visits the testing lab, perhaps already having aπanged for a test to be made for one or more STDs without knowledge of or direction from the registry site. While making the visit, the consumer may learn that the services offered by the registry site are available and will then use the kiosk to access the registry site. In a block 194, the consumer again selects the registration option provided on the homepage of the registry site in order to subscribe to the services offered. Remaining blocks 196 through 204, respectively, in FIGURE 5, correspond to blocks 156 through 164 in FIGURE 3. Verification of Subscriber Identification
FIGURES 6 and 7 illustrate two alternative methods for verifying the subscriber's identification - both at the time the subscriber appears at the testing lab to "be tested," and later, when the test results are accessed by a guest or prospective sexual partner on the registry site. In regard to FIGURE 6, the procedure begins with a block 210 in which the subscriber's driver's license (or other indicia of identification) is used as a basis for verifying identity. Accordingly, in a block 212 the testing lab reviews the subscriber's driver's license to confirm that the picture shown there corresponds to the appearance of the person from whom the test sample is drawn. In addition, the testing lab may access (but preferably only at an access level necessary for interaction with medical testing providers) the subscriber's identification information on the registry site to confirm that the subscriber's identification matches that of the individual undergoing the test. Based upon a determination that the person appears to be the individual identified by the driver's license (and matches the indicia of identification on the registry site, if accessed), a block 214 indicates that the testing lab records the driver's license number in association with the test ordered by the subscriber for STDs (or other type of test). Preferably, the recorded indicia of identification accompany the test sample electronically throughout the sample's testing process. According to a block 216, the testing lab then draws a sample from the subscriber whose identification has been confirmed, and completes the test using standard testing procedures. In a block 218, as previously noted, the subscriber also provides the customer ID, that was obtained from the registry site when the subscriber registered, to the testing lab for association with the test results. In a block 220, the testing lab records the customer ID and driver's license number for the subscriber with the test results obtained upon completing the test or analysis.
A block 222 provides that an optional further confirmation of the verification of the identification can be provided by scanning the image (photograph) of the subscriber included on the driver's license using a conventional scanner. The scanned image can be posted with the test results to the registry site and viewed by a guest accessing the test results with the permission of the subscriber as further proof confirming the identity of the subscriber in connection with the test results. In a block 224, the test results accessible at the registry site are linked to the driver's license number (and to the scanned image of the driver's license submitted by the subscriber, if available).
An alternative for providing verification of the identification of the subscriber is shown in FIGURE 7, beginning with a block 230. In a block 232, the testing lab takes a digital photograph of the subscriber using any of the readily available digital cameras. The digital photograph produced by the camera is attached to the test request by the testing lab in a block 234 and, preferably, accompanies the sample electronically through the sample's testing process. In a block 236, the testing lab draws a sample from the subscriber and completes the tests requested by the subscriber in a block 238. When the test results are posted to the registry site, as indicated in a block 240, the digital photograph is included and is associated with the test results. Thus, as provided in a block 242, the test results can be viewed on the registry site, linked to the digital photograph. Thus, the image of the subscriber is displayed on the registry site in association with the test results as proof of the identity of the subscriber, thereby providing evidence to a guest who has received permission from the subscriber to access the test results and the digital photo, of the medical condition asserted by the subscriber, as confirmed by the test results.
It is also contemplated that other types of identification can be employed as an alternative to the driver's license number, scanned image of the driver's license, and digital photograph of the subscriber. For example, biometric data of the subscriber may be taken at the time a test sample is drawn from the subscriber and included with the test results that are posted at the registry site. Confirmation of the identity of the subscriber can then be achieved by a guest accessing the test results if the party claiming to be the subscriber has already submitted corresponding biometric data to the registry site. The registry site can then indicate whether the biometric data submitted when the subscriber registered with the site matches the biometric data recorded when the subscriber was tested by the testing lab, thereby confirming that the subscriber tested is in fact the party asserting the medical condition confirmed by the test results. In addition, the biometric data to be compared to that accompanying the test results may be submitted in the presence of the guest, thereby further confirming the identity of the subscriber who was tested matches that of the party asserting a medical condition confirmed by the test results. The biometric data may be a retinal scan, digital fingeφrint scan, facial scan, voice print, etc. Input devices for scanning any of these various types of biometric data may eventually be more commonly available, making this alternative more practical. It is contemplated that in some cases, a subscriber will desire medical results to be posted and will permit access by a guest or prospective partner to those test results even though the results confirm that the subscriber has tested positive for a STD. For example, a prospective partner may have refused a sexual liaison with the subscriber because of concern of infecting the subscriber, if the prospective partner has tested positive for HSV-2. In this case, the prospective partner may wish to confirm that the subscriber has also tested positive for HSV-2, thereby alleviating, to some extent, the concerns that either may infect the other.
A subscriber will not be able to change the test results that are posted to the registry site and, preferably, the subscriber will not be able to deny a guest or prospective partner access to selected tests from the subscriber's testing history. However, at any time, the subscriber may delete or purge his or her entire history of medical tests from the registry site's database, terminating his or her subscription with the site and invalidating his or her customer ID number. Further Details of the Process
Further details of the overall process disclosed in FIGURE 2 are illustrated in FIGURES 8 through 10. For example, FIGURE 8 begins with a block 250 in which the steps involved in posting the results of a test in an automated fashion are caπied out by the testing lab. A block 252 provides that the test is completed to determine the results. In a block 254, the testing lab posts the results of the test to the registry site via an SSL encrypted link, through a VPN, ensuring that the test results are not intercepted by any third party. If these test results are posted to the registry site without intervention of any personnel at the registry site, the potential for introducing an error in the posting of the results is minimized. Although the registry site cannot attest to the accuracy of the test performed by the testing lab, the process employed for automatically posting the results of the test to the registry site ensures that further errors are not introduced. As indicated in a block 256, the test results will include the consumer account ID, thereby relating the test results to a specific subscriber, and a proof of the identity of a subscriber, such as the driver's license number, scanned image of the subscriber's driver's license, or a digital photograph of the subscriber. With reference to FIGURE 9, a block 260 begins the alternative process of enabling the subscriber to review the test results before they are posted to the registry site. In a block 262, the test results are produced by the testing lab as requested by the subscriber. A block 264 provides that the testing lab notifies the subscriber of the test results, by telephone, mail, or other relatively secure format. After reviewing the test results, the subscriber has the option of requesting that the testing lab post the results to the registry site, as indicated in a block 266. Assuming that the subscriber has made such a request, block 268 indicates that the testing lab posts the test results to the registry site for access by the subscriber and by any guest given permission by the subscriber. Further, as noted in a block 270, the test results are associated with the consumer account ID provided to the subscriber by the registry site and with the verification of the subscriber's identity, such as the subscriber's driver's license number, the scanned image of the driver's license, or the digital photograph taken of the subscriber.
FIGURE 10 illustrates the steps taken for manually posting test results to the registry site, where it is understood that these results do not serve as proof of a medical condition, i.e., for puφoses of convincing a prospective sexual partner that the subscriber was tested or that the asserted medical condition was determined by a test of the subscriber. In a block 280, the steps for manually posting the test results begin. A block 282 provides that the test results are produced by a testing lab, but can be based upon a sample submitted by the subscriber after using a home test kit, or as a sample from the subscriber submitted to a testing lab that is not affiliated with the registry site. In a block 284, the testing lab notifies the subscriber of the test results. The subscriber then enters the test results on the registry site manually, for example, by making entries within a browser displayed form provided on the registry site, as indicated in a block 286. However, as noted in a block 288, the test results thus entered are not associated with any proof of the subscriber's identity, and therefore cannot serve as evidence of a medical condition if presented to a guest authorized by the subscriber to view the results. FIGURE 11 illustrates basic components of PC 20, which currently is likely to be the most commonly used device for connecting to the registry site over the Internet. These components include a central processing unit (CPU) 300 that is coupled in communication with a memory 302, which includes both readonly memory (ROM) and random access memory (RAM). Memory 302 is loaded with machine instructions that are typically stored on a hard drive 304. The machine instructions, which comprise program modules and other software components of applications such as a browser are executed by CPU 300. Thus, the CPU can execute a browsing program used to access the registry site and to view information of a subscriber, including the test results and verification of the subscriber's identity. CPU 300 is connected to a display interface 306, which drives a display 308, on which the browser displays information obtained by access of the registry site. To connect to the registry site, CPU 300 receives and transmits data bi-directionally over a network interface 312 in response to commands input by the user through user input devices 310, which may include a keyboard and/or pointer control device (or mouse). Network interface 312 may include a modem, or a network interface card that connects to a data communication port on a network through which the registry site is accessed over the Internet, generally as shown in FIGURE 1.
Although the present invention has been described in connection with the prefeπed form of practicing it, those of ordinary skill in the art will understand that many modifications can be made thereto within the scope of the claims that follow. Accordingly, it is not intended that the scope of the invention in any way be limited by the above description, but instead be determined entirely by reference to the claims that follow.

Claims

The invention in which an exclusive right is claimed is defined by the following:
1. A method for registering results of a medical test on a subscriber so that the results are accessible only to authorized parties over a communication network, as evidence of a medical condition of the subscriber, comprising the steps of:
(a) receiving the results of the medical test of the subscriber from a testing agency that performed the medical test, along with an indicia of an identity of the subscriber or verification of the identity of the subscriber;
(b) storing the results of the medical test of the subscriber at a registry site provided by a subscription service; and
(c) enabling the subscriber and any party authorized by the subscriber to access the results of the medical test and the indicia of the identity of the subscriber at the registry site over the communication network and thus, to provide evidence to said party of the medical condition of the subscriber based upon the results of the medical test.
2. The method of Claim 1, wherein the medical test is a test for a sexually transmitted disease and the party authorized by the subscriber is a prospective sexual partner of the subscriber.
3. The method of Claim 1 , wherein the medical test is a test for drug use.
4. The method of Claim 1, wherein the indicia of the identity of the subscriber comprises an image of the subscriber.
5. The method of Claim 1, wherein the indicia of the identity of the subscriber comprises a driver's license number of the subscriber.
6. The method of Claim 1 , wherein the step of enabling comprises the step of providing the subscriber with an access code that must be supplied to gain access to the results of the medical test and the indicia of the identity of the subscriber that are stored at the registry site.
7. The method of Claim 1 , further comprising the step of requiring the subscriber to authorize transmittal of the results of the medical test from the testing agency to the registry site prior to and as a condition to the step of receiving the results from the testing agency.
8. The method of Claim 1 , wherein the step of receiving comprises the step of the testing agency transmitting the results of the medical test to the registry site.
9. The method of Claim 1 , further comprising the step of maintaining a history of results from medical tests performed on the subscriber at different times, said history including a date at which each medical test was performed, for access by the authorized parties.
10. The method of Claim 1 , further comprising the step of the subscription service charging the subscriber a fee for providing access by the subscriber to the results of the medical test at the registry site.
11. The method of Claim 1 , further comprising the step of the subscription service charging a fee for receiving and storing the results of the medical test.
12. The method of Claim 1 , further comprising the steps of:
(a) including a link on the registry site, to a different site having information of possible interest to the subscriber, said different site being provided by a different party; and
(b) charging a fee to the different party in regard to the subscriber accessing the different site via the link on the registry site of the subscription service.
13. The method of Claim 1 , further comprising the steps of:
(a) displaying advertising on the registry site provided by the subscription service; and
(b) the subscription service charging a fee for displaying the advertising.
14. The method of Claim 1 , further comprising the step of enabling the subscriber to access the results of the medical test via an electronic data communication link to the registry site.
15. The method of Claim 1 , further comprising the steps of:
(a) the subscription service identifying an affiliated testing agency that will provide the medical test of the subscriber; and
(b) the subscription service receiving a portion of a fee charged to the subscriber by the affiliated testing agency for carrying out the medical test. -zo-
16. The method of Claim 15, further comprising the step of the affiliated testing agency providing a discount to the subscriber for using the affiliated testing agency that was specified by the subscription service.
17. The method of Claim 1 , further comprising the step of enabling the subscriber to delete the results of the medical test from the registry site, thereby terminating a subscription relationship between the subscriber and the registry site.
18. The method of Claim 1, further comprising the step of enabling the subscriber to determine who will have access to the results of the medical test stored at the registry site.
19. The method of Claim 1 , further comprising the step of enabling the subscriber to limit access by the party to specific data of the subscriber that are stored at the registry site.
20. The method of Claim 1, further comprising the step of enabling the subscriber to specify access rights associated with at least one of a guest password and a guest identification number that is provided by the subscriber to the party.
21. The method of Claim 1 , wherein the subscriber and the party authorized by the subscriber access the results of the medical test and the indicia of the identity of the subscriber over a telephone link with the registry site.
22. A method for enabling a first person to provide evidence to a second person of a medical condition of the first person, based upon results of a medical test previously performed on the first person, comprising the steps of:
(a) obtaining an indicia of identification of the first person in connection with confirming an identity of the first person;
(b) when the medical test is performed, associating the identity of the first person and the indicia of identification of the first person with the results of the medical test;
(c) causing the results to be transmitted to a registry site at which the results are stored in connection with the indicia of identification and the identity of the first person; and
(d) enabling the first person and any party authorized by the first person to access the results and the indicia of identification at the registry site over a communication channel that is linked to the registry site, but substantially precluding third parties from accessing the results, said second person being authorized by the first person to access the results to provide the second person with the evidence of the medical condition of the first person.
23. The method of Claim 22, wherein the indicia of identification comprise an image of the first person.
24. The method of Claim 22, wherein the medical condition relates to use of drugs.
25. The method of Claim 22, wherein the first person and the second person are prospective sexual partners and the medical condition relates to a sexually transmissible disease.
26. The method of Claim 25, wherein the results provide evidence that when the medical test was performed, the first person did not test positively for the sexually transmissible disease.
27. The method of Claim 25, wherein the results provide evidence that when the medical test was performed, the first person was found to have the sexually transmissible disease.
28. The method of Claim 22, further comprising the step of providing the first person with an access code that must be employed to access the results over the communication channel.
29. The method of Claim 22, wherein the step of causing the results to be transmitted comprises the step of obtaining permission from the first person to transmit the results to the registry site.
30. The method of Claim 22, further comprising the step of transmitting the results to the registry site.
31. The method of Claim 22, wherein the communication channel comprises at least one of the Internet, a wireless communication link, a telephone communication link, and a wire communication link, and the registry site comprises a subscriber site that is accessed by the first person over the communication channel.
32. The method of Claim 22, wherein the communication channel comprises at least one of the Internet, a wireless communication link, a telephone communication link, and a wireless communication link, and the registry site comprises a subscriber site that is accessed by the second person over the communication channel.
33. The method of Claim 22, further comprising the step of charging the first person a fee for accessing the results of the medical test at the registry site.
34. The method of Claim 22, further comprising the step of charging the first person a subscription fee to enable the result to be stored by the registry site.
35. The method of Claim 22, further comprising the step of maintaining a history of results from medical tests performed on the first person at different times, said history including a date at which each medical test was performed, for access by any party authorized by the first person.
36. The method of Claim 22, further comprising the step of discounting a cost of the medical test paid by the first person if the first person employs a testing agency affiliated with the registry site to conduct the medical test on the first person.
37. The method of Claim 22, wherein the indicia of identification and the results of the medical test are accessible by a telephone link with the registry site after entering an access code assigned to the first person.
38. The method of Claim 22, further comprising the steps of carrying out steps (a)-(d) to perform a medical test of the second person, access to the indicia of identification of the second person and the results of the medical test on the second person being substantially limited to said second person and to any party authorized by the second person, said second person then authorizing the first person to access the indicia of identification of the second person and the results of the medical test on the second person on the registry site, to provide the first person with evidence of a medical condition of the second person.
39. A system for enabling limited access to results of a medical test performed on a subscriber so that the results are accessible only to authorized parties over a communication network, to serve as evidence of a medical condition of the subscriber, comprising:
(a) a server that includes:
(i) a memory in which a plurality of machine instructions are stored; and (ii) a processor that is coupled to the memory and executes the machine instructions, execution of said machine instructions by the processor causing the processor to:
(1) store in the memory the results of the medical test of the subscriber and an indicia of an identity of the subscriber, said results and said indicia being received from a testing agency that performed the medical test; and
(2) provide restricted access limited to the subscriber and to any party authorized by the subscriber, to the results of the medical tests and the indicia of the identity of the subscriber stored in the memory, the results, along with the indicia of the identity of the subscriber, providing evidence to said party of the medical condition of the subscriber; and
(b) an interface to a communication network over which the subscriber accesses the results of the medical test and the indicia of the identity of the subscriber.
40. The system of Claim 39, wherein the machine instructions cause the processor to display the results on a web page with the indicia of the identity of the subscriber when the results are accessed by the subscriber and by any party authorized by the subscriber, over the communication network.
41. The system of Claim 39, wherein a predefined access code must be entered to enable access of the indicia of the identity of the subscriber and the results of the medical test on the subscriber.
42. The system of Claim 39, wherein the medical condition is related to a sexually transmissible disease and the party authorized by the subscriber is a prospective sexual partner of the subscriber.
43. The system of Claim 39, wherein the medical condition is related to drug use.
44. The system of Claim 39, wherein the results are transmitted to the server over the communication network from the testing agency after authorization is provided by the subscriber.
45. The system of Claim 39, wherein the results are displayed to the subscriber on a web page that includes a link to a different site on the communication network where information related to the medical condition is accessible.
46. The system of Claim 39, wherein the results of the medical test are accessed over an electronic data communication link by the subscriber and by the party authorized by the subscriber.
47. A system that enables a first person to provide evidence to a second person of a medical condition of the first person, based upon results of a medical test previously performed on the first person, comprising:
(a) a memory in which are stored an indicia of an identity of the first person, and, in association with the indicia of the identity of the first person, the results of the medical test; and
(b) a processor that communicates with the memory and executes machine instructions to enable the first person to access the results and the indicia of the identity of the first person over a communication channel that is linked to the processor, the first person authorizing access of the indicia of the identity of the first person and of the results by the second person, to provide evidence to the second person of the medical condition of the first person.
48. The system of Claim 47, wherein the processor transmits the results of the medical tests over the communication channel in a web page that is adapted to be displayed to the first person and to the second person, if access thereto is authorized by the first person, on a browser.
49. The system of Claim 47, wherein said web page includes a link to a registry site at which information of possible interest to the first person is provided.
50. The system of Claim 47, wherein the web page includes advertising.
51. The system of Claim 47, wherein the medical condition relates to a sexually transmissible disease, the results of the test confirming that the person did not test positively for the sexually transmissible disease when the medical test was performed on the first person.
52. The system of Claim 47, wherein the medical condition relates to a sexually transmissible disease, the results of the test confirming that the person had the sexually transmissible disease when the medical test was performed on the first person.
53. The system of Claim 47, wherein the first person accesses the results over the communication network using an electronic data communication link.
54. The system of Claim 47, wherein the indicia of the identity of the first person comprise an image of the first person.
55. The system of Claim 47, wherein the indicia of the identity of the first person comprise a driver's license number of the first person.
PCT/US2001/005662 2000-02-28 2001-02-23 Use of internet site as a registry for results of medical tests WO2001065443A1 (en)

Priority Applications (5)

Application Number Priority Date Filing Date Title
CA002439396A CA2439396A1 (en) 2000-02-28 2001-02-23 Use of internet site as a registry for results of medical tests
AU4322101A AU4322101A (en) 2000-02-28 2001-02-23 Use of internet site as a registry for results of medical tests
AU2001243221A AU2001243221B2 (en) 2000-02-28 2001-02-23 Use of internet site as a registry for results of medical tests
JP2001564063A JP2003525499A (en) 2000-02-28 2001-02-23 Use of Internet sites for registration of medical test results
EP01916164A EP1266322A4 (en) 2000-02-28 2001-02-23 Use of internet site as a registry for results of medical tests

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US18556200P 2000-02-28 2000-02-28
US60/185,562 2000-02-28
US56653000A 2000-05-08 2000-05-08
US09/566,530 2000-05-08

Publications (1)

Publication Number Publication Date
WO2001065443A1 true WO2001065443A1 (en) 2001-09-07

Family

ID=26881247

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2001/005662 WO2001065443A1 (en) 2000-02-28 2001-02-23 Use of internet site as a registry for results of medical tests

Country Status (7)

Country Link
EP (1) EP1266322A4 (en)
JP (1) JP2003525499A (en)
KR (1) KR100811706B1 (en)
CN (1) CN1426567A (en)
AU (2) AU4322101A (en)
CA (1) CA2439396A1 (en)
WO (1) WO2001065443A1 (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1329835A1 (en) * 2002-01-22 2003-07-23 Genonyme GmbH Method and system for anonymously administrating medical test results and user-enabled health risk assessment
WO2005034008A2 (en) * 2003-10-03 2005-04-14 Calabrese Charles A A method of anonymous medical testing and providing the patient with the test results
US9141951B2 (en) 2009-07-02 2015-09-22 Biometric Payment Solutions Electronic transaction verification system with biometric authentication
WO2015183150A1 (en) * 2014-05-30 2015-12-03 Bodymarkers Ab A method and a system for performing a health test
WO2016007064A1 (en) * 2014-07-08 2016-01-14 Bodymarkers Ab A method and a system for performing a health test of an animal
CN110324318A (en) * 2019-06-10 2019-10-11 平安科技(深圳)有限公司 A kind of Intranet access method and relevant apparatus
US11514737B2 (en) 2020-07-20 2022-11-29 Abbott Laboratories Digital pass verification systems and methods

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2003108672A (en) * 2001-09-27 2003-04-11 Eiken Chem Co Ltd New medical examination system
CN107833172A (en) * 2017-11-17 2018-03-23 南通伊仕生物技术股份有限公司 A kind of portable intelligent poison check system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4315309A (en) * 1979-06-25 1982-02-09 Coli Robert D Integrated medical test data storage and retrieval system
US5325294A (en) * 1992-06-29 1994-06-28 Keene Sharon A Medical privacy system
US6073106A (en) * 1998-10-30 2000-06-06 Nehdc, Inc. Method of managing and controlling access to personal information

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH04120651A (en) * 1990-09-12 1992-04-21 Toshiba Corp Medical information processing system
US5867688A (en) * 1994-02-14 1999-02-02 Reliable Transaction Processing, Inc. Data acquisition and retrieval system with wireless handheld user interface
US5890492A (en) * 1995-06-07 1999-04-06 Elmaleh; David R. System for controlling the spread of HIV/AIDS and other infectious diseases
US5897989A (en) * 1996-07-23 1999-04-27 Beecham; James E. Method, apparatus and system for verification of infectious status of humans
JPH09311902A (en) * 1996-05-22 1997-12-02 Setsuo Ogiso Clinical test information managing device
US6076166A (en) * 1997-01-17 2000-06-13 Philips Electronics North America Corporation Personalizing hospital intranet web sites
JPH1166168A (en) * 1997-08-20 1999-03-09 Nippon Telegr & Teleph Corp <Ntt> Customer information registration repeating system
KR19990017304A (en) * 1997-08-22 1999-03-15 구자홍 Telemedicine system
EP0917119A3 (en) * 1997-11-12 2001-01-10 Citicorp Development Center, Inc. Distributed network based electronic wallet
JP4006796B2 (en) * 1997-11-17 2007-11-14 株式会社日立製作所 Personal information management method and apparatus

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4315309A (en) * 1979-06-25 1982-02-09 Coli Robert D Integrated medical test data storage and retrieval system
US5325294A (en) * 1992-06-29 1994-06-28 Keene Sharon A Medical privacy system
US6073106A (en) * 1998-10-30 2000-06-06 Nehdc, Inc. Method of managing and controlling access to personal information

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
HROBJARTUR JONATANSSON: "Iceland's health sector database: A significant head start in the search for biological grail or an irreversible error?", AMERICAN JOURNAL OF LAW AND MEDICINE, vol. 26, no. 1, 2000, pages 31 - 67, XP002940045 *
See also references of EP1266322A4 *
WEBER DAVID O.: "Web sites of tomorrow: How the internet will transform healthcare", HEALTH FORUM JOURNAL, vol. 42, no. 3, June 1999 (1999-06-01), pages 40 - 45, XP002940046 *
WULLIANALLUR ET AL.: "Strategic uses of information technology in health care: A state-of-the-art survey", TOPICS IN HEALTH INFORMATION MANAGEMENT, vol. 20, no. 1, August 1999 (1999-08-01), pages 1, XP002940047 *

Cited By (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1329835A1 (en) * 2002-01-22 2003-07-23 Genonyme GmbH Method and system for anonymously administrating medical test results and user-enabled health risk assessment
WO2003063048A2 (en) * 2002-01-22 2003-07-31 Genonyme Gmbh Method and system for the analysis of medical and personal data
WO2003063048A3 (en) * 2002-01-22 2004-11-18 Genonyme Gmbh Method and system for the analysis of medical and personal data
WO2005034008A2 (en) * 2003-10-03 2005-04-14 Calabrese Charles A A method of anonymous medical testing and providing the patient with the test results
WO2005034008A3 (en) * 2003-10-03 2005-08-11 Charles A Calabrese A method of anonymous medical testing and providing the patient with the test results
US9846875B2 (en) 2009-07-02 2017-12-19 Biometric Payment Solutions Electronic transaction verification system with biometric authentication
US9141951B2 (en) 2009-07-02 2015-09-22 Biometric Payment Solutions Electronic transaction verification system with biometric authentication
US10304054B2 (en) 2009-07-02 2019-05-28 Biometric Payment Solutions Electronic transaction verification system with biometric authentication
US10664834B2 (en) 2009-07-02 2020-05-26 Biometric Payment Solutions Electronic transaction verification system with biometric authentication
US11138594B2 (en) 2009-07-02 2021-10-05 Biometric Payment Solutions, Llc Electronic transaction verification system with biometric authentication
US11783320B2 (en) 2009-07-02 2023-10-10 Biometric Payment Solutions, Llc Electronic transaction verification system with biometric authentication
WO2015183150A1 (en) * 2014-05-30 2015-12-03 Bodymarkers Ab A method and a system for performing a health test
WO2016007064A1 (en) * 2014-07-08 2016-01-14 Bodymarkers Ab A method and a system for performing a health test of an animal
CN110324318A (en) * 2019-06-10 2019-10-11 平安科技(深圳)有限公司 A kind of Intranet access method and relevant apparatus
US11514737B2 (en) 2020-07-20 2022-11-29 Abbott Laboratories Digital pass verification systems and methods
US11514738B2 (en) 2020-07-20 2022-11-29 Abbott Laboratories Digital pass verification systems and methods
US11574514B2 (en) 2020-07-20 2023-02-07 Abbott Laboratories Digital pass verification systems and methods

Also Published As

Publication number Publication date
JP2003525499A (en) 2003-08-26
AU4322101A (en) 2001-09-12
EP1266322A4 (en) 2004-12-15
KR100811706B1 (en) 2008-03-11
AU2001243221B2 (en) 2007-05-24
KR20020081348A (en) 2002-10-26
CN1426567A (en) 2003-06-25
CA2439396A1 (en) 2001-09-07
EP1266322A1 (en) 2002-12-18

Similar Documents

Publication Publication Date Title
US8577697B2 (en) Use of internet site as a registry for results of medical tests
US7725332B1 (en) Systems and methods for health care records access and notification
US7246067B2 (en) Secure online dating support system and method
US7353283B2 (en) Method for controlling access to internet sites
JP2001297153A (en) Sharing method and database terminal for personal medical information
US20170147783A1 (en) Prescription Verification System
US20090083073A1 (en) Home Healthcare Documentation Clearing House
US20010032215A1 (en) System for completing forms
WO2008141307A1 (en) System and method for providing services via a network in an emergency context
US20120136678A1 (en) System of Managing Healthcare Information and its Communication and Centralized Searching of Non-Centralized Data to Allow for Patient Control, Choice, and Empowerment
US20080312962A1 (en) System and method for providing services via a network in an emergency context
AU2001243221B2 (en) Use of internet site as a registry for results of medical tests
AU2001243221A1 (en) Use of internet site as a registry for results of medical tests
JP2002032611A (en) Procedure management system
US7363658B2 (en) Personal information intermediary method
WO2012078987A2 (en) Prescription verification system
JP2005196533A (en) Cooperative diagnostic device
JP3910402B2 (en) Data providing server device
JP2005165648A (en) Cooperative diagnostic system
US20020069087A1 (en) System and method for accessing medical or consulting services
JP2004078302A (en) Contents browsing permission system, browsing permission device used for the system, medium, and browsing permission data registration method
JP2002183455A (en) Insurance program sign-up system and its method
JP2003330889A (en) Identification system utilizing portable terminal
WO2009010868A2 (en) Method and system for transmitting and controlling data related to medical prescriptions
CA2335399C (en) System and method for accessing medical or consulting services

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 1020027011038

Country of ref document: KR

WWE Wipo information: entry into national phase

Ref document number: IN/PCT/2002/1355/CHE

Country of ref document: IN

ENP Entry into the national phase

Ref document number: 2001 564063

Country of ref document: JP

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2001243221

Country of ref document: AU

WWE Wipo information: entry into national phase

Ref document number: 2001916164

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 01808673X

Country of ref document: CN

WWP Wipo information: published in national office

Ref document number: 1020027011038

Country of ref document: KR

WWP Wipo information: published in national office

Ref document number: 2001916164

Country of ref document: EP

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

WWE Wipo information: entry into national phase

Ref document number: 2439396

Country of ref document: CA

WWG Wipo information: grant in national office

Ref document number: 2001243221

Country of ref document: AU