EP0237529A1 - Systeme de donnees reparties pour archives medicales - Google Patents

Systeme de donnees reparties pour archives medicales

Info

Publication number
EP0237529A1
EP0237529A1 EP86902262A EP86902262A EP0237529A1 EP 0237529 A1 EP0237529 A1 EP 0237529A1 EP 86902262 A EP86902262 A EP 86902262A EP 86902262 A EP86902262 A EP 86902262A EP 0237529 A1 EP0237529 A1 EP 0237529A1
Authority
EP
European Patent Office
Prior art keywords
storage means
individual
information
access
file
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
EP86902262A
Other languages
German (de)
English (en)
Inventor
Yoram Palti
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
INSERPHON GmbH
LANDA Efraim E
Original Assignee
INSERPHON GmbH
LANDA Efraim E
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by INSERPHON GmbH, LANDA Efraim E filed Critical INSERPHON GmbH
Publication of EP0237529A1 publication Critical patent/EP0237529A1/fr
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K13/00—Conveying record carriers from one station to another, e.g. from stack to punching mechanism
    • G06K13/02—Conveying record carriers from one station to another, e.g. from stack to punching mechanism the record carrier having longitudinal dimension comparable with transverse dimension, e.g. punched card
    • G06K13/08—Feeding or discharging cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/08—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code using markings of different kinds or more than one marking of the same kind in the same record carrier, e.g. one marking being sensed by optical and the other by magnetic means
    • G06K19/10—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code using markings of different kinds or more than one marking of the same kind in the same record carrier, e.g. one marking being sensed by optical and the other by magnetic means at least one kind of marking being used for authentication, e.g. of credit or identity cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/08—Methods or arrangements for sensing record carriers, e.g. for reading patterns by means detecting the change of an electrostatic or magnetic field, e.g. by detecting change of capacitance between electrodes
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
    • G07C9/23—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder by means of a password
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/27—Individual registration on entry or exit involving the use of a pass with central registration

Definitions

  • the invention pertains generally to a system for storing the medical records of individuals and is more specifically directed to a medical record system comprising a distributed data system wherein the means for storing the data base is adapted for transportation on the person of those individuals having records in the base.
  • the medical histories of a population form a large and generally diverse and nonsystematized data base. This large data base is very difficult to access comprehensively with accuracy because of its nonstandardization and storage at various locations.
  • records are kept and handled by various organizations and personnel at any number of different locations. At any one time an individual may have a portion of his overall medical records at a hospital, at the office of one or several doctors, at his home or office, with his employer or elsewhere. These records may be in different sizes and formats on different media and have varying degrees of accuracy. The lack of accuracy or completeness at any particular location of a record can be attributed to a loss of information, the lack of recent updating, or mistakes in the recording of the information in the initial record. Further, these records are not generally transportable or transferable.
  • the invention provides a distributed data system for medical records, such as patient records, which is secure from alteration by unauthorized sources and at least part of which is available only to designated persons of authorized sources.
  • the system provides a distributed data base by providing a personal storage means for each individual which is adapted for transportation on the person of that individual.
  • the personal storage means can store the personal information unique to an individual relating to his medical records in the form of coded areas of which at least a portion are normally decodeable only by a personal password known to the individual.
  • the advantages of such a system are the portability of the data and the availability of a complete medical record from a single source.
  • the system provides a means for reading from the personal storage means and for writing to the personal storage means.
  • the reading and writing means is under the 'control of a control means preferably in the form f a programmable terminal which has a plurality of user selectable functions.
  • the terminal is adapted to decode the stored information in response to a password or user code from an operator and is adapted to encode stored information for writing on the personal storage means in response to the password.
  • the personal storage means includes general, emergency, and private data files that are coded such that normally only a personal password from the individual can be used to unlock the information stored therein.
  • the emergency data file may be critical for emergency use, the system codes the emergency file such that a emergency key or password can be used to unlock the data in these situations.
  • the emergency password would be authorized for use and known by a small select group such as the physician in charge of an emergency section of a hospital, or optionally, by those in charge of rescue vehicles, etc.
  • The, general file which contains the complete medical records of the patient is also coded such that senior hospital physicians, perhaps only the highest hospital echelon, have the ability to access the file with a master password. This may be necessary where the patient is unable to give the personal password or whenever it is legal and medically expedient to overrule the patient's decision not to give his password.
  • the private data file is not accessible without the personal password.
  • the personal storage means comprises a generally rectangular sheetlike member having a " data storage medium covering at least one portion of at least one side.
  • the data storage medium is a magnetic ⁇ surface capable of being written on and read by commercially available magnetic recording heads.
  • the ' ⁇ fcfrmat of the storage means is useful in that it is of a shape and size which is readily recognizable as an object that is carried on the person, such as a credit card or drivers license. This is to advantage because a person will readily accept such a size and shaped object to either carry in a wallet or somewhere else on his person.
  • the magnetic storage medium could be applied on the rectangular surface as a circular area and the tracks provided as concentric recording areas with guard bands between each one.
  • the magnetic medium could be applied to the rectangular surface as an arcuate shaped area which has tracks of arcuate curvature equal to that of the major and minor arcs of the sector.
  • the personal storage means may use both sides of the generally rectangular sheet.
  • FIGURE 3 is a system block diagram showing the linkage of a plurality of hospital based record systems illustrated in FIGURE 2;
  • FIGURES 4, 5, and 6 are pictorial representations of different embodiments of the personal storage means
  • FIGURE 7 is a illustrative representation of the format for the storage of records on the personal storage means shown in FIGURES 4, 5, and 6;
  • FIGURE 8 is a plan view of an apparatus for reading and writing on the personal storage means illustrated in FIGURES 4, 5, and 6;
  • FIGURE 9 is a cross sectional view along section line 9-9 of the reader/writer apparatus illustrated in FIGURE 8;
  • FIGURE 10 is a cross sectional view of along section line 10-10 of the reader/writer apparatus illustrated in FIGURE 8;
  • FIGURE 11 is an enlarged fragmented isometric view of the marking and detecting means for the reader/writer apparatus illustrated in FIGURE 8;
  • FIGURES 12A, 12B, and 12C together comprise a system flow chart of the software which controls a terminal such as the one illustrated in FIGURE 1; and FIGURE 13A and FIGURE 13B together comprise a system flow chart for the subroutine USER R/w called from the software illustrated in FIGURES 12A, 12B, and 12C.
  • the distributed data system for medical information includes a number of programmable data devices one of which is shown to advantage in FIGURE 1. Generally, the system is configured around these devices or user terminals 10 which perform the operations of reading data from a personal storage means 26 and writing data to the personal storage means.
  • a microprocessor based communications apparatus which includes a reader/writer 14 to read and store' information on the personal storage means and elements 18, 20 to communicate the operation desired by an authorized person to a microprocessor 12.
  • the device for reading and storing information on the personal storage means is a magnetic card reader/writer which will be explained more fully hereinafter.
  • the personal storage means used in the implementation shown is magnetic card 26 which is capable of having digital information stored thereon in the format of medical records. The format and protective coding of the information stored on the magnetic card 26 will also be discussed more fully hereina ter.
  • the means for communicating with the system and indicating a desired operation are embodied by a video monitor or CRT 18 and a keyboard 20.
  • the microprocessor 12 controls the readers/writer 14 for specific operations on the personal storage means.
  • the CRT 18 is able to display messages- which assist the . ser in control of the modes and operational capabilities of the system.
  • the operator through keyboard messages may select a printer function which causes a hard copy output on a printer 24.
  • the operator may choose a hard copy output on a disk drive 16 which produces storage on a floppy disk 22.
  • FIGURE 2 shows another embodiment of the system which has been expanded into a user subsystem 28.
  • the user subsystem includes 1,2,3...N, user terminals 10 connected through separate interfaces 32 to a host or central computer 34.
  • the terminals 10 are identical to the terminal described in connection with FIGURE 1 which would further include the interface 32 as a separate peripheral device.
  • the purpose of networking over a local area such as a hospital user is to allow access of the central medical record data base of the hospital by all the terminals 10. This capability will allow the distribution of the recorded information of the user onto the personal storage means afterwhich it can be erased.from the central data base. Further, the network would allow a convenient method for distributing medical data to the personal storage means from other sources. Hard copies of records from files and other data from noncomputer sources can be key punched or converted into computer readable form and stored in the hospital central computer memory until they can be distributed to a personal storage means.
  • any one of the subsystems is thereby accessible by any other subsystem so that an individual wanting to unify his medical records from any of the data bases would find it easy to accomplish the same.
  • this embodiment provides another aid to the distribution of data from the present medical recordation system where as hospital files are down loaded to an individual personal storage means, such as magnetic card 26', they could be eliminated from the various subsystems 28 at which they were previously stored.
  • the system of FIGURE 3 provides means for consolidating records separated by great distances.
  • digital data may be stored in tracks situated parallel to each other along the longitudinal axis of the rectangular card but could just as well be stored in tracks parallel to the lesser axis of the card along the surface.
  • these tracks can be written in groups of serialized bit strings forming characters and other data from the medical records of an individual.
  • the code format for the character strings can be standard, ' such as ASCII, or another more specialized character code.
  • the characters of a bit string are in a standard character code, the strings are coded such that they are not readable without a code key.
  • the alignment mark can be used as an additional means for protection from unauthorized users in the following way: the actual data string begins a predetermined number of bytes away from the mark. This number, for any particular card, will be made available to the user. To properly read the card, this code number will have to be given to the system in order to correctly align the reading head. This alignment mark will not prevent unauthorized users of terminals made for the system, but will prevent others which do not have access to these terminals from easily reading the information on the cards with other types of magnetic card readers.
  • FIGURE 6 still another embodiment of the magnetic card implementation for the personal storage means is illustrated which is similar to the embodiment illustrated in FIGURE 4.
  • a sheet like base 112 of insulative material is used to underlay a magnetic storage medium area 116 which covers at least a portion of at least one side of the card.
  • the difference between the implementations is that the area 116 is arcuate in shape and the data tracks 114 follow the arcuate sectors of the area.
  • Mark 122 corresponds to mark 105
  • marks 124, 126 correspond to marks 107.
  • FIGURE 7 illustrates an advantageously formated personal storage means.
  • the storage area is partitioned basically into four files, an identification file, an emergency file, a private file, and a general file. Portions of the private, emergency, and general file are in fixed and free format which causes them to be variable in length, whereas the identification file is a fixed format file of constant length.
  • the identification file which is uncoded and thus readable by anyone who can access the system with the user code, contains digital data concerning the physical attributes of the individual. Representative examples of such data include his name, address, sex, birth date, height, weight, eye and hair color, race and person to notify in case of emergency.
  • This file is a basic screen to determine whether the person having the card in his possession is the individual whose records are stored on the personal storage means.
  • the general file which is partially in fixed and partially in free format is coded where users with access to a terminal and either a master password or the personal password will be able to use it.
  • the general file contains complete medical data which provides a basic medical history of the patient without disclosing any particular data he would feel uncomfortable about making generally known. Representative examples of the information contained in this file include diagnoses, allergies, medications, contraindications, lab tests, special tests, physical exam, hospitalizations, history of illnesses, and treatments.
  • An emergency file containing information useful in emergency situations is then provided in fixed and free format.
  • Information which is exemplary, but not exclusive for this file, can be diagnoses, allergies, medications, and contraindications, etc. It is noted that generally, but not necessarily, this file will be an included subset of the general file.
  • the file may be accessed by a person having a user code and either the personal password or an emergency password.
  • An emergency password would be provided to emergency staff of hospital emergency wards and optionally to .paramedics or the like in emergency vehicles.
  • FIGURE 8 shows a top or plan view of the reader/writer 14 where a personal storage means 26 has been inserted into a receiver assembly of the reader/writer. As better seen in FIGURES 9 and 10 the personal storage means is received into the apparatus through. an aperture 206 which forms a slot. When inserted through the slot the storage means 26 has peripheral edges 207 and 208 which constrain the card to travel in channels 210 and 212. Spring clips 214 and 216 bias the card downward in the channels 210 and 212 against the upward pressure of a drive roller 218.
  • the drive roller 218 is driven by a motor 220 such that when the card is inserted into the slot 206, pressure on the card by the roller and by the bias members 214 and 216 will cause the card to be propelled along the channels until it abuts a mating surface particularly designed to receive special cut out portions on the end of the card.
  • the photo detector 226 and LED 228, respectively, are connected such that a circuit path is maintained between the two in the absence of the blockage of the light emitted by the LED. These signals communicate with the R/W control 224 via a signal line 230 to allow the control 224 to detect whether the circuit is open or closed.
  • the read/write control 224 can read these signals from the photodetector and the LED and command the R/W control 224 to produce the drive roller control signal which turns the drive motor 220 on or off.
  • the drive roller motor 220 is usually in an off state, and the photodetector 226 and the LED 228 are indicating a closed circuit, where current is being drawn by the LED and transferred across the gap between the LED and photodectector in the form of light.
  • the circuit is broken and the R/W control 224 starts the motor 220 to turn the drive roller 218. This loads the card until the front surface of the card abuts the specially shaped projections, afterwhich the motor 220 is stopped.
  • the R/W control 224 is able to determine when the card has been fully loaded because the open circuit condition caused by inserting the card becomes a closed circuit condition once again after the trailing edge of the card leaves the gap between the LED 228 and the photodetector 226.
  • the process is reversed, where the R/W control 224 has remembered that it has a card contained therein.
  • the control 214 at an appropriate time commanded by the terminal, reverses the polarity of the drive signal to the motor 220.
  • the reversal is needed for 'disengaging the card after an operation is completed. For example, after a read/write operation has been completed, a closed circuit between LED 228 -and the photodetector 226 indicates to the system that the card is still in the reader. Therefore, the R/W control 224 reverses the drive direction of the motor 220 and begins to propel the card 26 from the slot 206.
  • the control recognizes the output operation by the polarity of the drive signal and an open condition of the LED and detector.
  • the R/W control 224 recognizes that the card has been output by a closed circut and the motor can be shut off.
  • the memory contained, thereon may be written to or read from by means of a conventional magnetic read/write head 234.
  • the head 234 is mounted on a transport member 232 adapted for carrying the head 234 within a predetermined distance of the storage medium on the card. By scanning the head 234 over any X-Y position all the bit locations on the card are readily accessible.
  • the head 234 communicates with the R/W control 224 via the signal information line 236 with information from the terminal 10.
  • the read/write head 234 can supply digital information to the control 224 or write information on the media.
  • the digital information read from or written onto the personal storage means 26 enters and leaves the read/write control 224 via the transmitter receiver connection of the control with the microprocessor.
  • An X-Y positioning assembly is illustrated for the reader/writer apparatus 14 whereby the head carrier 232 slides along the top of a support bar 238 which has a channel 240 cut in the center ⁇ thereof along its longitudinal axis.
  • the read/write head 234 protrudes through the channel 240 such that any bit position of the X coordinate direction can be redd or written to by sliding the head carrier along the top of the support bar 238. Movement in this direction of the head carrier 232 is provided by a X position stepper motor- 242 which has its armature connected to a pivotable arm 244 which is inserted through a bore 246 in the carrier 232.
  • An upper portion of the head carrier 232 connected by the arm 244 to the stepping motor 242, is additionally pivotable around the read/write head 234.
  • the head carrier 232 When the stepping motor 242 is energized, via control lines 248 from signals of the R/W control 224, the head carrier 232 will move in the longitudinal direction of the support bar 238.
  • the read/write control 224 can position the head carrier 232 and thus the read/write ' head 234 at any X position along the card by knowing the angular position of the motor 242.
  • the positional information of the motor 242 is fed back to the R/W control 224 via the signal line 250.
  • the microprocessor 12 of the terminal 10 can control the R/W control 224 to position the read/write head 234 in any X coordinate position on the memory that is desired.
  • the R/W control 224 is then able either to read a bit from the memory location or to write a bit to that memory location via the signal line 236.
  • the reader/writer apparatus 14 includes a Y position stepper motor 252 which communicates with the R/W control 224 via a control line 254 and a feedback position signal line 256. Signals from the R/W control 224 control the angular position of the motor armature via the signal line 254 and the control receives signals from the motor 252 via line 256 to indicate its actual position.
  • the armature of the Y position stepper motor 252 is connected to a drive block 260 fixed to the support bar 238 by means of a lead screw 258.
  • roller bearings 262 permit the support bar to move in the Y direction as seen in FIGURE 8.
  • the R/W control 224 may position the support bar 238 at any position along the Y axis of the personal storage member 26.
  • FIGURE 11 An enlargement of a mounting assembly 268 for the LED 226 and photodetector 228 is illustrated in FIGURE 11.
  • the mounting assembly is disposed on the top portion of the support bar such that a circuit is connected by the light between the LED and the photodetector.
  • a punch mechanism 270 which is adapted to cut a notch or hole in the end of the- personal storage means. This notch can be cut at any track position along the Y axis of the personal storage means and thus forms an indication that the adjacent or N following tracks are write protected. This indication may be detected by a second LED and photodetector pair . 272 and 274, respectively which are open circuited in the absence of a notch or hole cut by the punch 270.
  • FIGUESs 12A, 12B, and 12C and in combination with FIGURES 13A, 13B there is illustrated a system flow chart for the program stored within the microprocessor 12 of the terminal 10.
  • the flow chart is a functional description of the software and can be implemented by those skilled in art in many programming languages depending upon the particular microprocessor and other hardware used.
  • the program starts out in a functional block A10 with an initialization and start up routine which sets the constants and variables of the system to initial values and permits the system to begin in a running state.
  • the program displays a message on the CRT indicating that the operator may start the program by striking the "S" key.
  • the input buffer for the keyboard is checked until a correct character is found before continuing in Block A16. If no character is input or the correct character is not found then the program loops through the message and test block until the terminal is shut off.
  • the system prints out an identifier message which asks for a user code, the date, hour and the name of the facility which may then be input by the keyboard.
  • the program thereafter sequences to block A20 where the password input from the user ' is tested to determine if it is legal. If not the system outputs a message that the user code is invalid and will then cycle back to block A16. This sequence continues until a valid user code is input to pass the test in block A20.
  • the user code restricts access of the system terminals to those who are authorized to operate them. As in any data processing system these passwords may be changed frequently to maintain the security of the system.
  • Block A28 is representative of the insertion of the card 26 in the reader and its subsequent positioning by the automatic feed mechanism. This operation was described previously with respect to the description relating to the loading and unloading of the personal storage means with the reader/writer apparatus 14.
  • the system checks to determine if the position of -the card is proper in block A30. If the position is incorrect, this problem is communicated to the user by means of a message printed on the CRT in block A26. This loop continues until the user has inserted 1 the card correctly and the test in block A30 is passed.
  • the control electronics which activate the read/write head 234 are turned on in block A32 in order that the reader/writer apparatus 14 can scan the personal storage means 26 for a software or hardware coded initial position. After the scanning of the card has taken place, a test is performed in block A36 to determine whether a hardware coded position has been found. If the answer is affirmative, then the read/write head 234 is positioned to the appropriate starting position in block A46.
  • the identification file information is read in block A48.
  • the system outputs a message to the user on the CRT which requests an input password if the user wants to read the emergency file or read/write any of the protected records in the private file or the general file.
  • the keyboard input from the user is received in block A56 and in the next three blocks A58, A64 and A66 the system decodes that user input.
  • the input password is that used by the hospital to access cards of a similar type, it is ⁇ termed a master code, and an affirmative path in block A64 transfers program control to block A60.
  • the system decodes the general reference file in block A80 and matches it against the reference text in block A82. If the reference match is passed, as tested in block A84, then the subroutine USER R/W is called in block A86. If the ' reference match fails, the negative branch of block A84 causes the program to output a CRT message that the reference is invalid in block A62. After generating an invalid reference message the program transfers control back to block A54 where the user may once again initiate the protected read/write file accessing loop.
  • the program After the emergency file has been output, the program produces a CRT message which requests the operator to strike a key for additional data. If a key representing an affirmative response is struck, as indicated in block A96, the program continues to a point in the program which leads to block A54. If the user does not desire additional data, then the negative path from block A96 causes the program to revert to the starting point in block A12.
  • An input code word that is the personal code causes a program branch to block A57 where a message is output asking the user to " select the file which he wishes to access. Since the personal code word allows access to any file, the user may input in block A59 a request for the general file, the emergency file, or the private file.
  • Blocks A61, A63, and A65 decode this input to provide branches to the respective software loops which handle the specific files.
  • An affirmative response to the test in block A61 that the user desires the general file will cause a branch to the path beginning with block a60 which was previously explained.
  • An affirmative response to the test in block A63 indicating that the user desires the emergency file will cause a branch to the path beginning with block A70 which was previously explained.
  • the USER R/W routine is called as a subroutine of the main loop and is entered in block A200 of FIGURE 13A and 13B where the program asks the user by means of the CRT to enter the mode desired.
  • the user via the keyboard (block A202) enters a command for a mode of a search, a display or an input operation.
  • the next three blocks A204, A206 and A208 determine which mode is requested. If a display mode is requested, in block A204 the program control is transferred to block A210. If a search mode is requested, in block A206 the program control is transferred to block A228. Similarly, if an input mode is requested, in block A208 the program control is transferred to block A246.
  • a message inquiring whether the user is done is output in block A220.
  • the input from the keyboard at block A222 is tested in block A224 to determine the answer of the user. If the answer is negative indicating that the user wishes to continue either a search, display, or input mode, then the program path returns to block A200. If the answer to the test is affirmative which indicates that the user is done with the search, display, and input modes, then the subroutine returns to the start of the program via block A12.
  • the program When finished with either a category or chronological search, and after outputting the recovered data to the CRT, the program returns to block A212 where an inquiry is made of the user via a message on the CRT about whether he desires a hard copy of the found data. The inquiry is handled as previously described with respect to blocks A214, A216 and A218. Thereafter, a message from block A220 is output on the CRT screen inquiring whether the user is done. Again the response to this inquiry is handled by blocks A222 and A224 which either return the user to the beginning of the program in block A12 or allow him to enter another request for a search, display, or input mode in block A200.
  • the program requests the user to designate the input source that will be used for data via a CRT message.
  • either the keyboard or an external source can be designated by the input block A248.
  • the external source as mentioned previously with respect to FIGURE 2 and FIGURE 3 can be another terminal in a user subsystem or another entirely different subsystem.
  • the program tests to determine the choice of the user via block A252 and block A254. If keyboard input is requested, the program waits in block A256 until all keyboard input has been received. If, however, an external source has been designated, as indicated by an affirmative branch from block A254, then the program will wait in block A258 until a file from the external source has been received. If neither the keyboard nor an external source is designated, a invalid source message will be output to the user via the CRT in block A250 prior to returning to block A246. The return to block A246 provides the user with another chance to pick a valid input source.
  • the system After the input file has been stored, the system outputs a message to the user which requests him to select the area in which he wants the input data stored.
  • the choice of the file area on the personal storage means is made by the keyboard in block A262.
  • the choice of the area is tested in block A264 to determine whether it is write protected and cannot be written to. If the area is protected, the CRT will output a message in block A266 indicating such is the case.
  • the program will then cycle back to block A260 where the select area request is again printed. However, if after a decision has been made that the area to be written on is not write protected, a message is output to the user on the CRT requesting him to enter whether the correction is in addition to the material already in the file or a correction to that material.
  • the user inputs in block A270 an indication of whether the material is to be written in a particular file is a correction or is an addition according to the program test in block A272. If the new material is a correction, then in block A286 the old file is erased and the new file written in its place in block A288.
  • the program branches to block A274 where the file to which the information is to be added is tested to determine whether it i-s full. If the file is not full, then the addition is written on the available space in block A276.
  • a file full indication transfers program control to block A278 where ahother test is accomplished to determine whether the entire personal storage means is full. If the ieritire personal storage means is full, an affirmative branch of the program transfers control to block A280 where a message to the user concerning the lack of file space is output. If the card is full the program will return to block A200 such that the search and display modes can be used to determine what other files may be available for deletion. If, however, in block A278 the personal storage means is not full then a new file area is formed in block A282 and the requested file written into that new area in block A284.
  • the program then inquires via block A220 whether the user is done with this portion of the program. In response to an affirmative answer the program returns to the start of the routine in block A12 and in response to a negative answer transfers control to the starting program sequence of the R/W program in block A200.

Landscapes

  • Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Artificial Intelligence (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Medical Informatics (AREA)
  • Databases & Information Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Storage Device Security (AREA)

Abstract

Les enregistrements de données concernant les personnes sont répartis sur des moyens de mémorisation personnels (26) qui peuvent être portés par la personne elle-même. De préférence, les moyens de mémorisation sont des supports en forme de carte présentant une surface de mémorisation magnétique permettant la lecture et l'écriture avec des têtes de lecture/écriture magnétiques d'un dispositif d'accès (14). Ce dernier est piloté par un terminal basé sur un microprocesseur (12) qui met en oeuvre un logiciel de base pour limiter l'accès à des fichiers particuliers sur les cartes suivant un code. Un opérateur utilisant un mot de passe utilisateur peut avoir accès à un fichier d'identification concernant les cartes tandis que l'on ne peut avoir accès à un fichier général, un fichier urgence, et un fichier privé en utilisant d'autres mots de passe. Un mot de passe personnel en général connu uniquement du porteur de la carte peut être utilisé pour accéder à des fichiers à accès réservé. Un mot de passe d'urgence est utilisé pour avoir accès aux fichiers urgence et est fourni aux personnes choisies assurant la liaison avec le public dans des situations d'urgence. Un mot de passe permanent est communiqué au personnel habilité de la communauté médicale pour leur permettre d'avoir accès au fichier général.
EP86902262A 1985-09-26 1985-09-26 Systeme de donnees reparties pour archives medicales Pending EP0237529A1 (fr)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/US1985/001717 WO1987002160A1 (fr) 1985-09-26 1985-09-26 Systeme de donnees reparties pour archives medicales

Publications (1)

Publication Number Publication Date
EP0237529A1 true EP0237529A1 (fr) 1987-09-23

Family

ID=22188832

Family Applications (1)

Application Number Title Priority Date Filing Date
EP86902262A Pending EP0237529A1 (fr) 1985-09-26 1985-09-26 Systeme de donnees reparties pour archives medicales

Country Status (2)

Country Link
EP (1) EP0237529A1 (fr)
WO (1) WO1987002160A1 (fr)

Families Citing this family (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4835377A (en) * 1987-06-10 1989-05-30 Brown Richard R Programmer for identification system
JPH02165290A (ja) * 1988-12-19 1990-06-26 Hitachi Maxell Ltd Ｉｃカード及びその動作方法
CA2008243C (fr) * 1989-01-25 2002-05-28 Morris H. Shamos Systeme d'identification des malades
US5193855A (en) * 1989-01-25 1993-03-16 Shamos Morris H Patient and healthcare provider identification system
US5071168A (en) * 1989-01-25 1991-12-10 Shamos Morris H Patient identification system
KR920006865A (ko) * 1990-09-21 1992-04-28 정용문 메모리 카드사용에 의한 공동단말기 관리스템 및 관리방법
FR2702065B1 (fr) * 1993-02-24 1996-10-25 Angewandte Digital Elektronik Appareil à cartes réalisant une télétransmission décelable.
US5530235A (en) * 1995-02-16 1996-06-25 Xerox Corporation Interactive contents revealing storage device
JPH08272924A (ja) * 1995-03-29 1996-10-18 Mitsubishi Electric Corp Ｉｃカード
JP3688822B2 (ja) * 1996-09-03 2005-08-31 株式会社東芝 電子カルテシステム
US5766075A (en) * 1996-10-03 1998-06-16 Harrah's Operating Company, Inc. Bet guarantee system
DE102004013814A1 (de) * 2004-03-20 2005-10-13 B. Braun Medizintechnologie Gmbh Verfahren zur Gestattung von Bedienereingaben an einem medizinischen Gerät

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3471654A (en) * 1967-01-13 1969-10-07 Ibm Transducer driving arrangement for recording and reproducing apparatus
US3679875A (en) * 1970-09-21 1972-07-25 Searle Medidata Inc Medical test data entry terminal
US3716678A (en) * 1970-11-09 1973-02-13 M Staar Apparatus for controlling advance of a record support and transverse displacement of a sensing head
US4357529A (en) * 1980-02-04 1982-11-02 Atalla Technovations Multilevel security apparatus and method
US4485300A (en) * 1982-03-18 1984-11-27 Visa U.S.A., Inc. Loss control system
DE3318101A1 (de) * 1983-05-18 1984-11-22 Siemens AG, 1000 Berlin und 8000 München Schaltungsanordung mit einem speicher und einer zugriffskontrolleinheit

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO8702160A1 *

Also Published As

Publication number Publication date
WO1987002160A1 (fr) 1987-04-09

Similar Documents

Publication Publication Date Title
CN1623167B (zh) 安全许可卡,读取安全许可卡的系统和方法
US20070226791A1 (en) Method for securely supporting password change
EP1524838B1 (fr) Manipulation de collections de documents
US5490217A (en) Automatic document handling system
US6772943B2 (en) System and method for document storage management
US6473861B1 (en) Magnetic optical encryption/decryption disk drive arrangement
EP1667008A2 (fr) Procédé de protection de données pour un support de stockage amovible et dispositif de stockage l'utilisant
EP0237529A1 (fr) Systeme de donnees reparties pour archives medicales
JP4129586B2 (ja) 情報処理システム
WO1994019884A1 (fr) Agenda electronique individuel
US20130030838A1 (en) Unified Medical Record Retrieval
NO994337L (no) Automatisert system for bildeaktivering
KR20050037471A (ko) 의료 정보 관리 시스템
CA1329657C (fr) Methode et appareil de protection d'informations enregistrees
JP4986382B2 (ja) 固有情報記録装置を用いたデータ検出システム
JPH06290251A (ja) 電子ファイル装置の文書画像処理方法
WO2004038630A1 (fr) Procede securise pour identifier et recuperer des informations concernant des patients
JP4462911B2 (ja) 出入管理システム
JP2011060136A (ja) 携帯可能電子装置、および、携帯可能電子装置におけるデータ管理方法
JP2008186473A (ja) 個人情報管理システムおよび個人情報管理プログラム
JPH05134863A (ja) 記録媒体上の資料の保護方法及びそのための装置
US20070025604A1 (en) Method for creating a portable archive of personal medical information
JP4058547B2 (ja) 情報処理システム
JP2000163532A (ja) 指紋登録装置及びｉｃカード
WO1990010919A1 (fr) Carte de commande et unite de lecture associee

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE CH DE FR GB IT LI LU NL SE

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

RIN1 Information on inventor provided before grant (corrected)

Inventor name: PALTI, YORAM