WO2001055949A1

WO2001055949A1 - System and method for on-line medical file administration

Info

Publication number: WO2001055949A1
Application number: PCT/NL2000/000057
Authority: WO
Inventors: Wim Rauwerdink; Jan Eli Hendrik Mijnhardt
Original assignee: Medlook Nv
Priority date: 2000-01-28
Filing date: 2000-01-28
Publication date: 2001-08-02
Also published as: AU2000224679A1

Abstract

A server arrangement comprising processor means (21) and memory means (18-22) connected to the processor means (21), the memory means (18-22) comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterized in that said medical records are provided with a validation field for indicating that an authorized person has validated said medical in said medical records.

Description

System and method for on-line medical file administration

Field of the invention

The present invention relates to a server arrangement comprising processor means and memory means connected to the processor means, the memory means comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of the sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with the living being.

Prior art

Such a server arrangement is known from a publication on the Internet (World Wide Web address: http://my.webmd.com/my_health record and the links following this page), which discloses a system that keeps record of personal medical data for users.

The known system has the following purposes:

1) to store a number of pre-defined medical data for a specific user in a record of a database,

2) to allow input of additional information by the user into that record,

3) to provide output from the user^'s medical record in some usable form.

The known system is available to users through the Internet as a web-based application, and provides a storage facility for personal medical records to a user. The user is allowed to enter a number of data, relevant to medical records, into the system by answering simple pre-defined questions in a number of overview forms presented by a web browser (e.g. Internet Explorer ®) on the user's computer. After completion of the forms the entered data are returned over the network to the system which extracts the results and stores them in the user's record. Relevant data are personal data (e.g., name, age, address, and contact information in case of an emergency), and health related information (yet: allergies, major illnesses, condition).

Output is provided in several forms: a general medical history for personal record keeping, a summary record as a means of information to medical workers (physicians. specialists, etc.), and an alert card containing contact information needed in case of emergencies.

The user controls the access permissions to his personal medical records on both the input and output level. It is envisaged that, in the future it will be possible to grant selected medical workers direct access to enter information into the medical records. In the known system the validity of the medical file may often be questionable, due to the absence of a validation procedure. Checking of records generated by the known system, may show that the information of the records is not up-to-date, or even that the information is incomplete and/or incorrect. It is an object of the present invention to provide a server arrangement in which users may keep full control over the content of medical records but in which the correctness of medical data in those medical records is better guaranteed.

This object is obtained in a server arrangement as defined in the outset in which the medical records are provided with a validation field for indicating that an author- ized person has validated the medical data in the medical records.

With such a server arrangement, the user can be sure that his/her medical records are held update by his/her own actions. Thus, if the user wishes, the contents of the medical records may always comprise at least some data relevant in emergency cases. Moreover, anybody consulting the database with medical data can always check whether or not the medical data has been validated by an authorized person e.g., a medical worker, which might be even more relevant in emergency cases.

Moreover, by such a server arrangement it is still the user who can do most of the job related to completing the medical database. The medical worker concerned need not do more than sending either a positive or negative reply to the request to validate the medical data as send to the server by the user. Therefore, the additional work to be done for the medical worker concerned need not be much. Of course, if the medical worker wishes to do so he may correct or add medical data if the user allows him/her to do so.

In order to let an authorized person validate the medical data the server arrange- ment is arranged to carry out the following steps:

(a) receiving from a first person medical data for a medical record;

(b) transmitting the medical data and a request to validate the medical data to a second person worker by means of an e-mail message, the second person being the authorized person associated with the medical record;

(c) receiving the medical data back from the authorized person as well as a reply to the request to validate the medical data;

(d) storing the medical record and the reply as received from the authorized person in the memory means.

The invention also relates to a data structure for storing data in memory means of a server arrangement, comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of the sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with the living being, characterized in that the medical records are provided with a validation field for indicating that an authorized person has validated the medical data in the medical records.

Moreover, the invention relates to a method to be carried out by a server arrangement comprising processor means and memory means connected to the proces- sor means, the memory means comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of the sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with the living being, the medical records being provided with a validation field for indicating that an authorized medical worker has validated the medical data in the medical records, including the following steps:

(a) receiving from a first person medical data for a medical record;

(b) transmitting the medical data and a request to validate the medical data to a second person by means of an e-mail message, the second person being the authorized per- son associated with the medical record;

(d) storing the medical record and the reply as received from the authorized second person in the memory means. Moreover, the invention relates to a computer program product to be loaded by a server arrangement comprising processor means and memory means connected to the processor means, after being loaded allowing the server arrangement to store in the memory means one or more personal records and at least one set of one or more medi- cal records, each personal record being associated with one of the sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with the living being, the medical records being provided with a validation field for indicating that an authorized medical worker has validated the medical data in the medical records, and allowing the server arrangement to carry out the following steps:

(a) receiving from a first person medical data for a medical record;

(d) storing the medical record and the reply as received from the authorized person in the memory means. Finally, the invention relates to a data carrier provided with a computer program product as defined above.

Brief description of the drawings

Below, the invention will be explained with reference to some drawings, which are intended for illustration purposes only and not to limit the scope of protection as defined in the accompanying claims.

Figure 1 shows a general overview of a network system to illustrate the invention;

Figure 2 shows a schematic overview of a server system of this invention; Figure 3 shows a block diagram of a method for a user lo maintain medical records on the server system;

Figures 4a and 4b show schematic overviews of the arrangement of user medical records as they appear to the user (fig. 4a), and to the medical worker (fig. 4b). respectively; Figure 5 shows a block diagram of a method for a user to process data in his personal medical records;

Figure 6 shows a block diagram for a validation procedure by the medical worker of a record generated by and related to a specific user, through a method of a hyperlink; Figure 7 shows a block diagram for a procedure of direct entry of a data record by a medical worker, related to a specific user and on behalf of that user, followed by a validation procedure of the data record.

Detailed description of preferred embodiment

Figure 1 shows a general overview of the system according to this invention. A server 1 , comprising a processor 21 is connected to a network 2 by an input output (I/O) connection 3. The communication network 2 may be the Public Switched Telephone Network (PSTN), or any other network suitable for data transmission. For in- stance it may be a Local Area Network (LAN), Wide Area Network (WAN), etc. The server 1 can be distributed over more than one processor means. A plurality of personal computers 4. 6 of which two are shown in figure 1 , is connected to the network 2, via suitable I/O means 5, 7. In stead of (or, in addition to) personal computers, any other type of telecommunication unit capable of communicating with server 1 through net- work 2, like a mobile telephone 8 arranged with a WAP (Wireless Application Protocol) feature, may be provided. Below, it will be assumed that personal computer 4 is associated with a user (a "patient") and personal computer 6 with a medical worker (e.g., a physician, a dentist, a medical specialist, a pharmacist, etc.)

Figure 2 shows a schematic overview of the server 1 comprising processor means 21 with peripherals. The processor means 21 is connected to memory units 18, 22, 23, 24 which store instructions and data, an I/O connection 3 which connects the processor means to the network 2, one or more reading units 25 (to read, e.g., floppy disks 19, CD ROM's 20, DVD's, etc.), a keyboard 26 and a mouse 27 as input devices, and as output devices, a monitor 28 and a printer 29. The memory units shown comprise RAM 22, EEPROM 23, ROM 24 and hard disk 18. However, it should be understood that there may be provided more and/or other memory units known to persons skilled in the art. Moreover, one or more of them may be physically located remote from the processor means 21. if required. The processor means 21 are shown as one box, however, they may comprise several processing units functioning in parallel or controlled by one main processor, that may be located remote from one another, as is known to persons skilled in the art. Moreover, other input/output devices than those shown (i.e., 26, 27, 28, 29) may be provided. The personal computers 4, 6 have similar arrangements as the server 1 shown in figure 2, as is known to persons skilled in the art.

The server 1 contains the personal medical data records of users in its memory, preferably, in its hard disk 18. Users accessing the server 1 can process these records to keep them up-to-date. The server 1 enables users to request selected other parties (medical workers, e.g. physicians, specialists, dentists, etc.) to validate these records (and if needed, to modify them first). Moreover, users can authorise selected medical workers to enter medical data directly to the user's data records on behalf of the user. Through a validation procedure, the medical data records are certified. This will all be explained in detail below. In this invention the interaction between the server 1 and a user, or representatives of the user, is preferably, through the World Wide Web (WWW) using the Internet protocol. Communication between parties is facilitated by web-based applications, which are known as web servers (on the system's side) and web browsers (on the user^'s side). Data on the server system is made available by a web server, which transmits these data in a displayable form (as defined by the code incorporated in the data) to a user, who receives the data by means of a web browser. Actions taken by the user through the web browser are also generated by the code incorporated in the originally received data. Actions are transmitted to the server 1 and translated into operations, which are executed on the server 1. Figure 3 displays a block diagram of a method for a user to maintain personal medical records on the server 1. In step 31. the server is accessed by a user through the network 2. The server 1 allows access by a login procedure 32, in which the user enters his access code and PIN code (personal identification number). When the access code and PIN code are valid, a selection menu 33 is presented to the user, in which the sys- tem offers a user options for management of his personal medical records as stored in the server 1. The selection menu may contain as options: processing of data in user personal record, step 34, processing of data in user medical records, step 35, as related to specific medical workers, and an optional step 37 to select the medical workers that a user visits as a patient. In addition, an optional step 38 to exit the system is provided for. By selecting option 34 to process data in user personal records, the server 1 starts a procedure 39 for entry, modification, and/or display of one or more user personal records. After completion, the server 1 (re)stores the user personal records in its database. Through selection of option 35, the server 1 initiates a procedure 41. which is described in detail in figure 5. When option 37 is selected, the server 1 displays to the user a list of registered medical workers. From this list a user can choose medical workers to be authorised to access the user's medical records. The user can give permission for accessing only parts of the records (e.g., the records specifically related to the medical worker), but also permission for accessing the complete medical records may be possible. The medical workers on the list have been registered in the server's database in a separate earlier procedure where medical workers have been acknowledged by the system as certified medical professionals. Since certification of medical workers is crucial, in that procedure the identity of the medical worker must be established. For instance, the registration data of the medical worker are compared with the data available in the official register of the medical profession (in a given country). Moreover, users may be encouraged to invite a medical worker who is not yet recognised as a certified medical professional in the database of server 1. to register to the system in order to use the on-line medical file administration system (to the mutual benefit of user and medical worker). It is to be understood that a medical worker can keep records of his patients in a similar way, by using the system of this invention to create records for each of his patients individually.

A user can make a choice in option 37 to add a medical worker to user medical records when the user is under treatment by that medical worker. In procedure 42, the server 1 adds a data record for the newly selected medical worker to the user medical records.

Figures 4a and 4b show schematic overviews of possible arrangements of user medical records on the system as they appear to the user (fig. 4a) and to the medical worker (fig. 4b) respectively. The medical records are divided into a number of data records, which are preferably stored on hard disk 18.

The data records shown in figure 4a, are a record 401 with an identification data field 402 (related to an access code), and data fields 403-405 containing personal data of the user. In principle, the user's medical records are anonymous. For reasons of privacy and security, the records are only identified by an identification code, but optionally the user's personal data records may contain any data the user wishes to store (e.g. name, address, contact information, age. etc.). One or more (number not limited) records 406, 420 are related to a specific medical worker (e.g., physician, specialist, etc.) as indicated by an identification data field 407, 421 . These data records 406, 420 contain data fields 408-411, 422-425 to store the user^'s medical data, and validation data fields 412-415. 426-429 which are used to register whether or not the information in the records 406, 420 is validated by the medical worker related to the specific data record. The medical data fields 408-411, 422-425 and the validation data fields 412-415, 426-429 are related to each other: for each medical data field a corresponding validation data field is present. For instance, medical data field 408 is linked with validation data field 412, medical data field 422 with validation data field 426.

Figure 4b shows the overview of the arrangement of user medical records as it appears to the medical worker, who validates or enters data into the user's records. Only the relevant data record 451 related to the medical worker, with a file label 452 identifying the user, data fields 453-456 and validation fields 457-460, as reserved by the user for the medical worker are visible and accessible to the medical worker concerned. All other records, depicted in figure 4b by blocks with dashed lines, are hidden from the medical worker at this stage. This can be accomplished by any suitable mechanism known in the art, e.g., by using passwords.

Figure 5 shows a block diagram of a procedure for a user to process data in his medical data record. The procedure is accessed from the higher level menu 35, which is schematically depicted in figure 3. In step 51, the server 1 displays a selection menu list of selected medical workers available to the user. This menu list enables the user to access an existing data record related to a specific type of medical worker. In step 52, the server 1 offers a selection menu list with options for processing of the data in this selected data record (e.g., display of the data record, modification of the data record, entry of new data in the data record, deletion of data in the record, or any other possible processing of the data). According to the choices made in step 51 and step 52, in step 53 the server 1 extracts the requested data record 406 for a user from its memory and performs according to the action chosen in step 52. In step 54, after performing operations that modify the data record 406 (e.g., by entry of new data, or modification of existing data) the server 1 runs a procedure to process the data record and to store the data record. Subsequently, the server 1 offers a user a validation request procedure 55 to ask the specific medical worker related to the data record 406 for validation of one data field (e.g., from the range 408-411) as is enabled by one of the data fields 412-415 as shown in figure 4a. If the user affirms that he wishes to start a validation procedure, in step 56 the server 1 creates a hyperlink to the processed records and sends to the spe- cific medical worker an e-mail message which contains the request to validate a data field from the range 408-41 1 of data record 406. Before the data field 408-411 in data record 406 is validated by the specific medical worker, the validation data field 412- 415 of the corresponding data field 408-41 1 in data record 406 contains a default code that indicates the medical data field is not validated (yet).

The e-mail message contains the hyperlink for direct access by the medical worker to the data field in the data record to be validated. At the end of the block diagram, the system returns a user to the higher level menu 33. In case the data field in the data record is displayed or deleted (step 57), the server 1 processes the medical data fields without the validation request procedure and returns to the higher level menu 33.

Figure 6 shows a block diagram for a validation procedure by the medical worker of a data field in a data record, generated by and related to a specific user, through a hyperlink, issued and authorised by an e-mail message of that user. The system of this invention has generated an e-mail message to the mailbox of the computer system 6 of the medical worker, with the request to validate a data field in a medical data record related to a patient who is a user on the server 1. By opening the hyperlink through suitable e-mail client software, a web browser application opens the web address of the hyperlink. The server 1 now starts a login procedure 61 for the medical worker using access codes, which the medical worker obtained through an earlier registration procedure. After the system has authorised the medical worker's login, the system automatically shows in step 62 the data record 406 containing the data field (e.g., 409) to be validated on the medical worker's computer monitor. Records of the user related to other medical workers, are inaccessible and invisible in this procedure. In a validation procedure 63, the server 1 asks the medical worker to confirm the content of a data field (e.g. data field 409 as shown in figure 4a). If the content is in agreement with the findings of the medical worker, he sends affirmation to that effect to the server 1. Then, the data record is validated by the server 1 by storing a validation confirmation code in the validation data field (e.g. 413) of the data record 406 containing the corresponding data field (e.g., 409). The server 1 now restores the validated data record in the data- base. If the medical worker does not affirm the content of the data field, the status of the validation data field remains at the default value ("not validated"). The system now ends validation procedure 63 and returns the medical worker to a higher level menu.

Figure 7 shows a block diagram for the procedure of direct entry of a data record by a medical worker, related to a specific user and on behalf of that user, followed by a validation procedure of the data record. The server 1 is accessed through a web browser over the network 2. The server 1 presents a login procedure 71 to the medical worker using access codes. After login, a selection menu 72 is presented in which options are given for data processing (e.g. entry of data records, modification of data records, or other possible data processing operations) and an option to exit the procedure. If an option for data processing is chosen, the server 1 starts a procedure 73 to identify the user on whose behalf the data records are to be processed. The server 1 requests the user's medical data records code and an authorisation code, before opening a data proc- essing procedure. In the subsequent data processing procedure, the server 1 lets the medical worker work on the user's data records, as related to that medical worker. Records of the user related to other medical workers are inaccessible and invisible in this procedure. After processing of the data, the server 1 starts a validation procedure in which the processed data records are validated by the server 1 by storing a validation confirmation code in the validation data field of the data record. Finally, the server 1 extracts the information entered in the data processing and validation procedures and stores the information into its database located in its memory, preferably hard disk 18. Then the server 1 returns the medical worker to the menu 72.

It should be understood that the server arrangement as described above, may have other usage in which a validation procedure of data records is essential (for reasons of e.g., privacy, safety and security). For instance, the server arrangement may be used by veterinarians to keep validated medical records of animals together with information records supplied by the animal's owner. The animals may be uniquely identified by means of transponder, chip, etc., applied to them in any way known in the art.

Claims

1. A server arrangement comprising processor means (21) and memory means (18- 22) connected to the processor means (21), the memory means (18-22) comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterized in that said medical records are provided with a validation field for indicating that an authorized person has validated said medical data in said medical records.

2. A server arrangement according to claim 1 , characterized in that said processor means (21) are controlled by computer software stored in said memory means (18-22) to carry out the following steps: a) receiving from a first person medical data for a medical record; b) transmitting said medical data and a request to validate said medical data to a second person by means of an e-mail message, said second person being the authorized person associated with said medical record; c) receiving said medical data back from said authorized person as well as a reply to the request to validate said medical data; d) storing said medical record and said reply as received from said authorized person in said memory means (18-22).

3. A server arrangement according to claim 2, characterized in that said e-mail mes- sage is provided by said server arrangement with a hyperlink to said server arrangement in order to facilitate retransmission of said medical record by said authorized medical worker to said server arrangement.

4. A server arrangement according to claims 1, 2 or 3, characterized in that each of said sets of medical records is associated with one medical worker.

5. A server arrangement according to any of the preceding claims, characterized in that access to each of said personal records is protected by means of a user access code.

6. A server arrangement according to any of the preceding claims, characterized in that access to medical data in each of said sets of medical records associated with one personal record is protected by means of an access code associated with said medical worker authorized to validate said medical data.

7. A data structure for storing data in memory means (18-22) of a server arrangement, comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterized in that said medical records are provided with a validation field for indicating that an authorized person has validated said medical data in said medical records.

8. A method to be carried out by a server arrangement comprising processor means (21) and memory means (18-22) connected to the processor means (21), the memory means (18-22) comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, said medi- cal records being provided with a validation field for indicating that an authorized person has validated said medical data in said medical records, including the following steps: a) receiving from a first person medical data for a medical record; b) transmitting said medical data and a request to validate said medical data to a second person by means of an e-mail message, said second person being the authorized person associated with said medical record; c) receiving said medical data back from said authorized person as well as a reply to the request to validate said medical data; d) storing said medical record and said reply as received from said authorized person in said memory means (18-22).

9. A computer program product to be loaded by a server arrangement comprising processor means (21 ) and memory means (18-22) connected to Ihe processor means (21), after being loaded allowing said server arrangement to store in the memory means (18-22) one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, said medical records being provided with a validation field for indicating that an authorized person has validated said medical data in said medical records, and allowing said server arrangement to carry out the following steps: a) receiving from a first person medical data for a medical record; b) transmitting said medical data and a request to validate said medical data to a second person by means of an e-mail message, said second person being the authorized person associated with said medical record; c) receiving said medical data back from said authorized person as well as a reply to the request to validate said medical data; d) storing said medical record and said reply as received from said authorized person in said memory means (18-22).

10. A data carrier provided with a computer program product as claimed in claim 9.

AMENDED CLAIMS

[received by the International Bureau on 23 May 2001 (23.05.01) original claim 2 cancelled; original claim 1 amended; original claims 3 - 10 renumbered as, claims 2-9; remaining claims unchanged (3 pages)]

1. A server arrangement comprising processor means (21) and memory means (18- 22) connected to the processor means (21), the memory means (18-22) comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterized in that

- said medical records are provided with a validation field for indicating that an authorized person has validated said medical data in said medical records; and

- said processor means (21) are controlled by computer software stored in said memory means (18-22) to carry out the following steps: a) receiving from a first person medical data for a medical record; b) transmitting said medical data and a request to validate said medical data to a second person by means of an e-mail message, said second person being the authorized person associated with said medical record; c) receiving said medical data back from said authorized person as well as a reply to the request to validate said medical data; d) storing said medical record and said reply as received from said authorized person 0 in said memory means ( 18-22).

2. A server arrangement according to claim 1, characterised in that said e-mail message is provided by said server arrangement with a hyperlink to said server arrangement in order to facilitate retransmission of said medical record by said authorized medical 5 worker to said server arrangement.

3. A server arrangement according to claims 1 or 2, characterised in that each of said sets of medical records is associated with one medical worker.

0 4. A server arrangement according to any of the preceding claims, characterized in that access to each of said personal records is protected by means of a user access code.

5. A server arrangement according to any of the preceding claims, characteπzed in that access to medical data in each of said sets of medical records associated with one personal record is protected by means of an access code associated with said medical worker authorized to validate said medical data.

6. A data structure for storing data in memory means (18-22) of a server arrangement, comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterized in that said medical records are provided with a validation field for indicating that an authorized person has validated said medical data in said medical records.

7. A method to be carried out by a server arrangement comprising processor means (21) and memory means ( 18-22) connected to the processor means (21), the memory means (18-22) comprising one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterised in that

- said method comprises the following steps: a) receiving from a first person medical data for a medical record; b) transmitting said medical data and a request to validate said medical data to a second person by means of an e-mail message, said second person being the authorized person associated with said medical record; c) receiving said medical data back from said authorized person as well as a reply to the request to validate said medical data; d) storing said medical record and said reply as received from said authorized person in said memory means (18-22).

8. A computer program product to be loaded by a server arrangement comprising processor means (21) and memory means (18-22) connected to the processor means (21), after being loaded allowing said server arrangement to store in the memory means (18-22) one or more personal records and at least one set of one or more medical records, each personal record being associated with one of said sets of medical records and containing personal information of a living being, each set of medical records comprising medical data associated with said living being, characterised in that - said medical records are provided with a validation field for indicating that an authorized person has validated said medical data in said medical records; and - said computer program product allows said server arrangement to carry out the following steps: a) receiving from a first person medical data for a medical record; b) transmitting said medical data and a request to validate said medical data to a second person by means of an e-mail message, said second person being the authorized person associated with said medical record; c) receiving said medical data back from said authorized person as well as a reply to the request to validate said medical data; d) storing said medical record and said reply as received from said authorized person in said memory means (18-22).

A data carrier provided with a computer program product as claimed in claim 8.