KR20020081348A - Use of internet site as a registry for results of medical tests - Google Patents

Abstract

The results of medical tests for sexually infectious diseases (STDs) or other medical conditions such as drug use are described in a registry accessible by the subscriber or subscriber-certified guest. The results of the medical test are recorded when the test sample is obtained by a testing lab affiliated with the registry site and associated with proof of identity of the subscriber, which may be the driver's license number or other identification evidence. The results of the tests performed by the testing laboratory are automatically written to the registry site, along with the subscriber's preassigned customer ID and proof of identity of the subscriber. Subsequently, the subscriber and authorized guest can access the subscriber's proof of identity and the subscriber's test results by entering a predetermined password or other access code, so that the guest, who may be a future sex partner, has been claimed by the subscriber. Allows you to verify the condition.

Description

USE OF INTERNET SITE AS A REGISTRY FOR RESULTS OF MEDICAL TESTS}

Sexual contact with an infected partner has greatly changed our attitudes toward indiscriminate sex in our society, fearing that we may be infected with life-threatening diseases such as human immunodeficiency virus (HIV or AIDS) or are currently incurable. While some means may reduce the risk of sexually infectious diseases from one person to another, while many believe that the risk is too great to justify sexual relations with others. As long as the prospective sex partner can mitigate the consequences of reducing anxiety about infecting such a disease from another partner and minimize the risk, the first step is that each partner is currently screened for at least a life-threatening or currently incurable disease. It is to ensure that it receives and displays a negative result.

In most cases, a verbal confirmation from a sex partner who is expected to have been tested for diseases such as HIV, genital herpes, hepatitis B, and hepatitis C is insufficient for other partners to have sex. This is because the test may not be tested or the test may be positive for the disease. Proof of testing is particularly difficult to provide, if the prospective sexual group is accompanied by accidental encounters or under circumstances that are not easy to prove, such as documentation of medical treatment results. Clearly, an easily accessible registry representing evidence of recent negative test results for sexually infected diseases (STDs) for each partner will significantly reduce the risk of infecting such a disease from sexual deception, The corroboration provided by making the proof accessible clearly reduces both parties' concerns about the occurrence of such risks.

The Internet has made the site free and extensively accessible to all types of information, provides an ideal medium for medical test results to be easily accessed by the parties who have been examined and to authenticate test results that should be recorded in an accessible registry. Done. The registry in which such test results are stored can be accessed from virtually anywhere in the world, through any computer or other computing device connected to the Internet. Alternatively, the registry can be accessed by telephone. Other requirements required by the Registry to provide the intended functionality are that the access to an individual's inspection results should be securely restricted to the inspected party or other access provided by that party, and that the inspected party, instead of deleting the results, It should be possible to prevent the modification of the loaded test results. Clearly, it is important that the prospective sex partner be based on such test results to the extent that the test was properly performed by an approved test laboratory.

The ability to access test results for STDs in an accessible registry does not mean that a sexually intimate person does so without protective measures such as the use of condoms. In fact, it is desirable to provide training on safe sex at the same site as the registry where test results are stored and accessed in order to encourage individual risk awareness and accountability and safety in handling STDs. The registry site contains information about, or is secure in, areas of social interest, in addition to providing test results to ensure that other prospective parties have been examined and found to be free of STDs, at least among the types of life threatening or incurable. Links to information about the practice of sexual life can be provided.

It is also desirable to employ a registry accessible through the Internet (or other public network, including public telephone networks) where test results for other types of medical tests can be stored and accessed by the person and / or authorized medical personnel. do. While many other types of test results can be accessed, to measure blood glucose (for diabetics), which are examples of such tests, to measure protimes (blood clotting factor), troponin (heart Tests), such as meyoglobin (heart function), or creatinine (for channel function) will be performed. The use of a registry to store these results minimizes paper work and minimizes errors in reporting these results.

It is also desirable to store the results of home medical examinations in an internet registry site, so that the individual being examined and the doctor of that person can access the results. In conjunction with a home inspection, it is desirable to provide an interface between an automated inspection device and a personal computer designed to perform the inspection to process the inspection results and send them to the registry for storage. By way of example, the test device may be connected to a personal computer through a universal serial port (USB) or a serial or parallel port. Some tests require sophisticated analysis to be performed to determine the level of density in an individual's blood or other physical fluid or in a physical sample (e.g., serum, plasma, trauma, saliva, hair, etc.). It is more easily performed by a personal computer. This result can be automatically communicated to the registry site for storage and access by an individual's physician or for use in appropriate medication, treatment, or prolactic measures. Alternatively, the test data may be analyzed by a registry site or a familiar lab and the results may be available at the registry site for access by the subscriber or other authorized person or subscriber.

Another possible application of the invention is the safe storage of test results for leisure and illegal medicines (e.g. marijuana, cocaine, opiates, pensiridine, amphetamine, barbiturates, benzodiazepines, methadone, propoxypin and alcohols). On the registry site. Such a site is an employment requirement in such prosecutors, ie by law, the necessary prosecutors of judicial and narcotics rehabilitation facilities or athletes, which may be used, for example, by employers and employees or prospective employees.

Thus, it becomes clear that the provision of a secure site for storing medical test results accessible via a network (such as the Internet) has many applications. At present, no site exists that provides evidence of the identity of the individual being examined and allows secure access to the results of the examination.

The present invention relates generally to methods and systems for reporting medical test results over a network, and more particularly to providing a registry in which a subscriber's medical test results can be accessed by a subscriber over a public telecommunication network.

1 is a schematic diagram of the components of the present invention;

2 is a schematic flow diagram illustrating the steps implemented in the present invention.

3 is a flow chart illustrating the steps implemented in the subscriber's online registration in the present invention.

4 is a flow chart showing the steps implemented in the subscriber's mail or telephone registration in the present invention.

5 is a flow chart illustrating the steps implemented when a subscriber is registered with a kiosk.

6 is a flow chart showing the steps for verifying the identity of a subscriber with a driver's license.

FIG. 7 is a flow diagram illustrating the steps involved when taking a digital photo of a subscriber to prove their identity.

8 is a flow chart listing steps for automatic publication of test results by a laboratory.

9 is a flow diagram illustrating the steps involved when a subscriber reviews the test results and decides to publish them on their site.

10 is a flow chart showing the steps taken to manually publish the test results on a web site.

11 is a block diagram showing the main functional components of a personal computer suitable for implementing the present invention.

In accordance with the present invention, a method is defined for registering a result of a medical test performed on a subscriber such that the medical test result is accessible only to authorized parties via the communication network and can be provided as evidence of the medical condition of the subscriber. The method includes receiving the results of the medical examination of the subscriber from the laboratory that performed the medical examination, along with an indication of the identity of the subscriber. In the present specification and claims, the terms "test laboratory", "test laboratory" and "test laboratory" refer to facilities where blood, other physical fluids, or physical samples are collected, along with facilities where actual testing / analysis is performed. It should be noted. Collection facilities and inspection / analysis facilities may be located at the same site or at different sites. The results of the subscriber's medical examination are stored at the registry site provided by the Participant Services. Based on the results of the medical examination, the subscriber can easily access the indication of the identity of the subscriber and the results of the medical examination at the registry site through the communication network to provide evidence to the other party about the medical condition of the subscriber.

In one preferred embodiment of the invention, the medical test is a test for an STD, more preferably a test for a potentially life-threatening or currently incurable STD. In addition, in a preferred application, the other party may be the expected sex partner of the subscriber. To ensure the safety of the medical test results, the subscriber is provided with an access code that includes a password and a user name that must be provided to gain access to the results of the medical test that must be stored at the registry site.

The method also includes requiring the subscriber to approve the transfer of the results of the medical test from the laboratory to the registry site as a condition for and prior to receiving the results from the laboratory. If the laboratory is authorized to do so, it automatically sends the results of the medical examination to the registry site.

History of the results of medical examinations performed on subscribers at different times is maintained at the registry site. This test history includes the date each medical test was performed and can only be accessed by an authorized party, such as a test.

The subscription service may optionally charge a fee for providing a subscriber's access to the results of a medical test at a registry site and / or a fee for receiving and storing the results of a medical test.

Links on the registry site may be provided to different sites (maintained by other parties) that provide information about the subscriber's potential interests. Fees may be charged to other parties for subscribers accessing different sites through links at the registry site for subscription services.

The registry site provided by the subscription service is intended to display an advertisement and charge a fee for displaying the advertisement.

The subscriber may optionally access the results of the medical examination through an electronic data communication link to the registry site. As used herein and in the claims, the terms “electronic data communication”, “communication network” and “communication channel” are intended to include all types of wired and wireless communications, and communicate between computing devices over local and wide area networks. , All types of network access devices, telephones, communications using facsimile machines, and all types of electrical and electronic communications between remote sites.

In one embodiment, the subscription service designates a laboratory that receives part of the fee charged to the member by a laboratory for providing medical examination of the member and performing the medical examination. Optionally, the laboratory will provide a discount to the subscriber using the laboratory designated by the subscription service.

The subscriber can delete the entire history of the results of the medical examination from the registry site. In addition, the subscriber will be able to determine whether to have access to the results of the medical test stored at the registry site. The subscriber can also restrict the guest's access to certain portions of the data stored at the registry site.

Another aspect of the invention provides for limited access to the results of medical tests performed on a subscriber such that the results are accessible only to authorized parties via the electronic communication network and can serve as evidence of the medical condition of the subscriber. It relates to a system for doing so. The system includes a server that stores the results of the medical examination in a manner consistent with the steps of the method described above and makes the results available to authorized parties.

The above advantages and many intended advantages of the invention will be better appreciated in conjunction with the accompanying drawings, as better understood with reference to the following detailed description.

The present invention utilizes an Internet web site to serve as a registry or cleaning house for STD test results. Registration of domain names for such sites has already been secured and five are InformedPartner.com. This website provides Participants with secure access to personal information of a very sensitive nature, so that the information is inaccessible by unauthorized parties and is not altered to alter the results of medical tests performed on Participants. Implement high water safety to ensure. The service is only available to subscribers registered on the web site, which web site is referred to as a "registry site" in the following description and claims.

Subscriber registration provided by this registry site will have the option of having its STD inspection results listed at the registry site, along with independent proof of the subscriber's identity, referred to in the claims and "indication of the subscriber's identity" below. . In addition, the subscriber may also list test results not associated with the subscriber's proof of identity. In this case, the registry site will provide a repository for such data, create a history database of medical test results that may be of benefit to the subscriber, and instruct that the identity of the individual examined in connection with such data has not yet been proved. . However, the primary purpose of the services provided to the subscriber by the registry site is to provide proof of medical status to the prospective partner of the subscriber based on the results of one or more medical tests performed on the subscriber by a testing laboratory affiliated with the registry site. To be able. Participant medical information is only securely accessible by an authorized party by an internet connection or other electronic communication connection. The results and other personal data of your medical examination may be entered into any other party or subscriber authorized by you by entering the correct username and password (and / or customer ID number assigned to the examination). Can be accessed and displayed. The examination may select or be assigned a unique password and may select or be assigned a guest password and / or guest ID number for each party authorized by the subscriber to access the selected portion of the personal data of the inspection. Thus, based on the password and / or guest ID number entered by the other party, which the subscriber will provide to the other party, it is possible to set access rights to restrict the particular data of the subscriber that can be accessed by the other party. Guest permissions may optionally be valid for a single user only. If a guest uses a secret (guest password and / or guest ID number) to access a subscriber's specific data, that secret expires, and any guest or any party who is not authorized to access the information on the website can access it. It is impossible.

The data maintained by the registry site includes personally identifiable information for each subscriber that is a record of the type of medical test performed on the subscriber, the date of the test and the test results, all of which are associated with the customer ID originally assigned to the customer. This information is conveyed in a format suitable for display on various types of Internet or telecommunications access equipment.

In FIG. 1, the system comprises several configurations of a preferred system for implementing the invention, including providing for maintenance of the data at the registry site and accessing that data by the subscriber (or other party authorized by the subscriber). Illustrate the element. Currently, in most cases, subscribers are connected to the registry site using a personal computer (PC) 20 on which a browser program is executed. Examples of browsing programs suitable for execution on the PC 20 include Microsoft's INTERNET EXPLORER and Netscape's NAVIGATOR browser program. However, it is also intended that other devices, such as an Internet accessible PDA 22 or cell phone 24, could alternatively be used to access the subscriber's other personal information and medical test results maintained at the registry site. Appropriate formats for data maintained at the registry site are provided for a particular internet or electronic communication device employed to access that data. Thus, the PC 20 can be displayed using a complete browser graphical user interface, while only a textual representation of the data is displayed on the cell phone 24. Details such as the type of Internet access employed by the subscriber, such as a modem, cable modem, access via conventional telephone lines using a high speed digital subscriber line or access via a satellite access line of the Internet 28, are not shown in FIG. This is because these details are not relevant to the present invention. However, as can be seen by the inclusion of the PDA 22 and the cell phone 24, various wired and wireless connections to the Internet 28 may be used for electronic data communication with the registry site where the subscriber's test results are maintained. Can be used.

Customers who wish to subscribe to the services provided by the registry site 30 may initially contact the registry site via the Internet 28 using the PC 20, PDA 22, or cell phone 24 (the service To register as a subscriber), the registry site may be called by telephone, mail or fax transmission. Alternatively, a customer who wishes to subscribe to the service may first know when they are exposed to an advertisement associated with the information kiosk 26 or when the customer visits a testing lab that should be inspected for the STD. Each test lab associated with the registry site will include one or more test lab kiosks 32 connected to the registry via the Internet 28. Information kiosks 26 are provided in the same place as a single bar, where customers interested in becoming subscribers to the services provided by the registry site become frequent and there they can meet prospective sex partners. Information kiosks or inspection lab kiosks provide links to registry sites that allow customers to become subscribers of the service. Alternatively, these kiosks can be used to connect to the registry site for access to the subscriber's test results. Thus, at Daning Bar and other locations where people meet with people who may be interested in having a sexual connection, information kiosks can be employed to provide evidence of the medical condition of the subscriber and thus, for STD In the event of a final inspection, it may be possible to provide proof that the results of the examination as claimed by the subscriber. Clearly, in most cases, prospective sex partners will be subscribers, so each can provide proof of medical condition that other prospective parties are desirable.

Import Model for Registry Sites

As shown in FIG. 1, the Internet 28 is the most likely channel for a subscriber (or a customer who wishes to register as a subscriber) to access the registry site 30. Prior to using the services provided by the registry site 30, the customer must register and thus become a subscriber; Details of the registration process are described below. The annual annual subscription fee is charged to the subscriber to provide the services described herein. In addition to paying periodic subscription fees, each subscriber is charged each time a test result of a medical test performed on the subscriber is sent to a registry site for storage, and a smaller claim is charged to the test result and the subscriber's personal data on the Internet. Charged every time it is accessed via 28. The registry site is also intended to display links to other web sites that provide information of interest to the subscriber. By way of example, a link may be provided to a website selling birth control products or a link may be provided to a site discussing newly developed treatment drugs for STDs. The registry site may be charged to the other web site whenever a link to the other web site is activated, or may be charged a fixed fee for simply including the link. In addition, the registry site may display advertising components and banner advertisements for web sites executed by others. Typical fees for displaying such advertisements at the registry site are charged to the advertisement port in such a manner as above.

Another source of revenue for the registry site is derived from a registry site that specifies a test lab affiliated with the registry site. Some of the medical examination fees charged by such laboratory are collected by the operator of the registry site. Since the services of the registry site may be at least domestic and, more preferably, international, the inspection laboratories required for the service of all subscribers of the registry site will be distributed to the national or national host countries. Optionally, the inspection lab recognizes that the increased volume resulting from the reference provided by the registry site will be more than compensated for the inspection lab for a portion of the fees returned to the registry site; And any discounts offered to subscribers of the registry site.

Secure access to subscriber data

The main aspect of the service provided by the registry site 30 is the security in which the personal information of each subscriber is maintained. The security of personal information and test result data is protected by requiring each subscriber to enter a username and unique password before access to the subscriber's data is allowed. In addition, each subscriber may be provided or assigned a guest, counterpart ID number and / or password which must be entered in order for the guest to gain access to the results of the test the subscriber has granted access to and a portion of the subscriber's personal information. have. The subscriber can control access to this data and information by setting permissions for each particular guest or counterpart ID number. Such permission allows one to determine the information displayed on the guest and the level of protection provided. By way of example, a subscriber may (1) if a guest needs a guest ID number and a second password; (2) whether the guest was allowed to see only certain types of tests (eg, tests for STD, but not for drugs); (3) specify whether the guest ID number and / or password are valid for single use or multiple access to the subscriber's information and test results. The guest ID numbers are not sequential, but instead are generated out of order to prevent anyone from "estimating" the more current guest ID based on the previous guest ID.

The web site optionally includes a digital certificate that provides a verifiable form of identification that the web site being accessed is actually a real registry site or that the web site can provide other means to prove its authenticity as a registry site. can do. For example, a registry site may have an incorrect or incorrect listing on a fraudulent site by a prospective party who is a subscriber of the registry site to access their inspection data using a customer ID number and / or password, directly from the subscriber's displayed information. Fraudulent test results can eliminate the risk of being displayed to an unknown and unknown counterpart. To eliminate the possibility of a third party accessing the subscriber's displayed test results without the subscriber's permission, the browser is set to play after a short time and then automatically display a non-secret page within the registry site (eg, a guest login page). . All web-based communications accessing subscriber's data and personal information maintained at the registry site 30 are made through a secure socket layer (SSL) encrypted internet connection to the registry site 30 and through a firewall 34. do. Firewall 34 isolates sensitive information from subscribers by preventing unauthorized access by third parties. Communication from the Internet 28 through the firewall 34 is generally connected to the load balancer 36, which distributes the Internet traffic evenly among the plurality of web servers 38a-38d, to provide personal information and test results to subscribers. Minimize delays in access for authorized guests. Firewall 34 also restricts access to each web service of the web server and ensures that no external traffic arrives directly at the web server.

Application servers 40a and 40b form an intermediate layer in the structure of registry site 30 and are separated from the Internet by firewall 34 and load balancer 36. Only applications running on the application server can enable access by authorized parties to subscriber data maintained on the database server 42. Business logic for the web-based application that allows subscribers to access their individual test results and other personal information is hosted by an application server. The application server also generates dynamic content based on the data extracted from the database held on the database server 42. Any query coming from the web servers 38a through 38d is sent to the application server, which performs the appropriate query on the data and extracts the required information when all the requirements are met for secure access. The application server also maps the returned data in an appropriate form to the client Internet access device that queried the registry site 30, so that the form is appropriate and is used by the subscriber to the PC, PDA, cell phone, or other Internet. Or to an electronic access device. The output produced from the query of the database server 42 is returned to the requesting web server under the control of an application running in one of the application servers.

Another important aspect of maintaining the security and integrity of inspection result data would be the use of a virtual private network (VPN) 60, which is connected to each associated inspection laboratory workstation 58. Several different methods are intended for entering test results into database server 42. One approach is to fully automate the process of reading test results from medical tests performed on subscribers and to automatically batch load test results into data at registry site 30 via VPN 60 and thus to mediate any person. Nor is it necessary to translate the test results. Automating this process should minimize the risk of unknowingly introducing errors in the reported and stored results for any subscriber. Alternatively, test results from the subscriber's medical test may be entered in the appropriate form at the test lab workstation by personnel trained at the test lab. It is preferable that no personnel at the registry site 30 be included in the processing of the check box or to input the test result to the data held in the database server 42. By limiting human interactions in the process to personnel only at the testing laboratory, any flammability of entering the test results into the registry or registry site for errors in the results or the ability of the medical test is prevented by the registry site. The transmission of inspection results via the VPN 60 in encrypted form (automated batch load or manual translation entry for the form) ensures that the results cannot be intercepted by a third party. In addition, since the application servers 40a and 40b interact with the test lab workstation 58 to provide test results and input into the database maintained at the database server 42, they transmit the test results. Provide automated proof of receipt of inspection results by registry site to inspection laboratory.

Strict administrative control enhances the security of the application servers and applications that host the applications that enable access to subscriber data. All subscriber data contained within the sensitive nature of the database server 42 is encrypted and only accessible by administrative level personnel at the registry site, and because of the encrypted form of the data, the personnel of that level are sensitive to the subscribers contained in the data. It is not possible to display and read information directly.

Additional support system 44 may be provided to facilitate administration and administration of registry site 30. Examples of these support systems include reporting server 46, email server 48, ad server 50, management server 52, billing server 54, and system monitor 56. Other support systems are provided as necessary to administer and manage the operation of the registry server's business regarding controlling access to sensitive data maintained in database server 42 and servicing subscriber needs.

If the laboratory registers the test results for the subscriber with the registry server for inclusion of the data retained therein, the subscriber may automatically or manually register the test results to the subscriber by email, by facsimile transmission or by telephone call. It can be notified that it has been uploaded to the server and can be accessed by the subscriber. These test results can then be examined by the subscriber. Preferably, the subscriber cannot selectively withhold the display of test results from a similar group of test results if the test results are sent to the registry without terminating the subscription to the registry, thereby destroying the test data history of the subscriber and Override the additional use of the subscriber's primary username and password. If the subscriber adjusts the test results for STDs and drug use that must be stored in the registry server, the guest can access the subscriber's prospective partner to prove the medical condition of the member based on the results of the lab test. It is intended to be enabled to select the type of test results to be included (ie, drug use test results or STD test results in this example) among the existing data. Subscriber's automatic notification by e-mail or facsimile transmission, informing the subscriber that the test results are available on the registry server, can be optimized by a particular test lab to meet the test lab's specific trademark branding needs, but is not secure. Such messages that are transmitted over the channel and can be accessed by third parties, will not contain actual test results or any personal information. When the registry site receives a test result from the test lab, an automated proof email message is sent from the registry site to the test lab, providing proof that the registry site has received such a result from the test lab. Alternatively, the registry site generates automatic notification of the subscriber that the test results are available for review on the registry site.

As an alternative to automated uploading of test results to the registry site, the subscriber may choose to have the test results pushed to them from the test lab via telephone or in a more conventional manner, which is a personal email. When the subscriber receives and reviews the test results, the subscriber then requires the test lab to list the results on the registry site. Only after receiving any permission from the subscriber, the test laboratory will, by the guest or prospective party, validate the identification information for the subscriber to serve as proof of the subscriber's identity if the test results are accessed at the registry site. Together, the results of the test are sent.

It is also intended that the subscriber may choose to use one or more kits to perform a medical test at home or to have a medical test performed by an unaffiliated testing laboratory. In addition, some home test kits must be mailed to the test laboratory to determine the results of the test. The subscriber has the option of manually listing such a camera on the registry site. However, test results that are not provided by an affiliated testing laboratory that did not derive test samples from unsubscribed subscribers and are not manually listed have no benefit of validating the identity of the subscriber, and thus the medical care of the subscriber. It cannot serve as proof of status. The guest or prospective counterpart who accesses the listed results without the benefit of validating the subscriber's identity is explicitly alerted to the display of results whose registry site lists the results as a service to the subscriber, without proof of the subscriber's identity. . The guest is therefore given caution that the test results do not serve as evidence of the subscriber's medical condition because they are fictitious or other than the actual subscriber.

One advantage of allowing a subscriber to list medical test results without proof of identity and from sources other than an affiliated test laboratory is to maintain a history of tests that are easily accessible by the subscriber. In addition, listing such test results is beneficial for facilitating the reconciliation between you and your doctor because you and your doctor can access the test results at the same time. Assuming the doctor has provided the guest password and / or guest ID and permission).

Summary of Procedures Used in the Invention

2 illustrates the steps involved in the overall use of the registry site to receive, list and enable access to test results that serve as proof of a subscriber's medical condition and to register a subscriber. Following the start block, block 100 directs the registration of the customer as a subscriber to the registry site (eg InformedPartner.com). As part of the registration process, even if the subscriber is optionally required to provide an indication of identity (eg, a passport photo or digital copy of a valid driver's license), the indication of identity may be by credit or debit card or other non-cash card. May be required to verify the identity of the subscriber for non-payment purposes. As noted above, registration can be accomplished with different types of devices that can access the registry site, including the information kiosk 26, and the test lab kiosk 32, via the Internet. By registering with the Registry Site, Subscriber agrees to be financially responsible for any other fees and subscription fees associated with the Subscriber's use of the Registry Site. As noted above, such charges include the charges billed each time a subscriber's personal information and data is accessed and the charges billed for medical test results that must be listed on the registry site. In block 102, the subscriber visits an affiliated test laboratory, coordinated for the test laboratory, to derive a sample to perform the test required by the subscriber. Appointments to visit a laboratory may be made through a registry site, but alternatively may be made during a visit to the laboratory in advance or by telephone. For purposes of exemplary applications of the present invention, medical tests may be for STDs and may be limited to potentially life-threatening or currently incurable types of STDs.

Examples of the types of tests that can be performed on potentially life-threatening and currently incurable STDs include Elisa Immunosary (EIA), Western blot or other confirmation tests for HIV, Hepatitis B surface antigen, and; Hepatitis C antibody test; And herpes simlex virus type 2 (HSV 2) -specific serological test. Further tests for treatable sexually infectious diseases include culture ligase chain reaction (LCR) and polymerase chain reaction (PCR) assays for Chlamydia trachomatis and Nigeria gonorrhea; Fast plasma regain (RPR), urethral disease research institute for Cyphilis (VDSR) or other confirmatory tests; And tests for Epstein-Barr virus (EBV), cytomegalovirus (CMV) and varicella-zoster virus (VZV). Of course, other types of tests may be performed within the scope of the present invention, and other tests for medical conditions that are not sexually infected and / or test types for diseases or medical conditions that are not curable or potentially life-threatening. Include them.

In block 104, the laboratory derives a sample from the subscriber and verifies the identity of the subscriber. The identification of the subscriber may be based on the presentation by the subscriber for legally acceptable photo identification, such as a driver's license, passport or other legal indication of identity. However, in most cases, you will present a photographic driver's license as your identification. The laboratory will access Gakya's identifying information on the registry site (e.g. with a medical laboratory provider) if such identifying information was previously provided by the subscriber to the registry site to match that presented with the proof of identity. Only at the level of access required for interaction). Block 104 instructs the subscriber to provide the inspection lab with the customer ID obtained from the registry site, so that the customer ID can be associated with the test result and subscriber identification data. Optionally, such customer ID can be verified by the testing lab by accessing the registry site. Although various types of identification data are intended, the simplest verification data for identification of a subscriber is the driver's license number.

In block 108, the inspection laboratory records the customer ID and the customer ID certificate associated with the inspection laboratory on the application form. At block 110, the laboratory obtains the medical care requested by the subscriber, obtaining the results (automatically or manually) listed at the registry site, along with the customer ID and proof of identification data, as indicated at block 112. Complete the inspection. As noted above, it is intended to alternatively select to receive and verify the test results before the test lab requires them to be listed on the registry site.

Block 114 instructs the test lab or registry site to notify that the test results are listed at the registry site. Notification may be automated as described above. Subscribers typically use a browser to access information to verify lab results and personal information on registry sites. Of course, the results of the check can be accessed by the subscriber after the subscriber has entered a username and password previously assigned to the subscriber. In addition, block 116 provides for setting the guest access rights to the subscriber, and in detail defines pseudo data accessible to the guest or expected sex counterpart. It is not possible for a subscriber to deny a guest or prospective party's access to selected test results included in the subscriber's test history, other than the type of test results, as described above. Thus, as an example, a subscriber may not grant access to only a portion of the STD test results for a subscriber while excluding the guest's access to the subscriber's drug use test results or vice versa.

Typically, at some point in time, the subscriber may interact with the expected sex counterpart. To show proof of a medical condition that satisfies the prospective surname, the subscriber will provide the prospective surname with a guest password and / or guest ID number or customer ID for the subscriber as indicated in block 118. As indicated at block 120, the prospective surname counterpart may use the guest password and / or guest ID number or the subscriber's customer ID to access authorized data for the subscriber on the registry site. Block 122 instructs the guest or prospective counterpart to review the subscriber's test results and verify the identity of the individual (subscriber) against the identification verification data included with the subscriber's test result data on the registry site. Assuming that the identification verification data confirms that the identity of the subscriber being examined is the person asserting the medical condition, the prospective party is at least guaranteed that the results shown at the registry site are valid at the time of the medical examination. Naturally, such test results can no longer be applied. The longer the time interval between the date of the medical test and the current data, the less guaranteed it is to be an expected party by reviewing the subscriber's test results. For this reason, subscribers should be examined more frequently than otherwise and should assist in detecting STD-infected subscribers earlier. In addition, the registry site provides information about STDs, including copies or references to the most recent scientific literature on dermatology, therapeutic infections, diagnosis, treatment, and topics of potential interest to the subscriber, and any type of STD. In order to minimize the risk of infection, ensure that subscribers and guests have a safe sex life.

An alternative embodiment of the invention relates to a registry site intended to be accessed by telephone. The subscriber accesses the registry site through a telephone access number and enters their customer ID and password through an alphanumeric keypad. A subscriber can provide a guest customer ID and guest password and / or ID number to a guest or prospective counterpart, and through similar use of the alphanumeric keypad, can access the information of the inspection on the registry site. The guest or expected party is allowed to hear an automated listing of the inspection history of the inspection. The automated response may include identification information that may be matched to the corresponding information presented by the subscriber and the driver's license number of the identification claiming party or party claiming to be the subscriber. If the registry site is accessed by phone, if both parties are located together and the guest and expected party are subscribers to the registry site (ie, "party party"), the party subscriber does not need to call and redial the customer ID. And passwords so that accessing the other subscriber's inspection history and verifying the automated response previously heard were generated by the registry site and are not fraudulent automated responses from other sources. The other subscriber may allow the subscriber to hear the automated listing of the other subscriber's inspection history and identify the information.

Details for registration as a subscriber

Further details taken by the customer to register with the registry site as a check are illustrated in FIGS. These figures show three different approaches that can be used. 3 illustrates the steps beginning at block 150, including registering with a registry site via the Internet. In block 152, a customer considering becoming a subscriber to the service provided by the registry site accesses the site using a web browser. In block 154, the customer selects a registration option provided on the web page of the registry site to subscribe to the service. By selecting this option, block 156 displays the registration form in the customer's browser, thereby instructing the subscriber to provide personal information. Such information may include birth date, last name, postal code, telephone number, email address, and the like. The subscriber selects the primary username and password, as indicated in block 158. In addition, as indicated at block 160, the subscriber selects a guest password and / or a guest ID number and establishes an associated guest access right. In most cases, the subscriber may not choose to display all test results to the guest, but may limit the guest's access to the results of recent tests for STDs. A subscriber cannot deny a guest's or prospective party's access (eg, access to a portion of an STD test result) to a selected test result from the subscriber's test history for a particular type of test.

Block 162 provides a payment method, in which the subscriber selects a subscription option and is typically a credit card. The information required to accept payment by credit card includes the type of credit card, card number, card expiration date, billing address, etc., and is provided by the subscriber at that time. Other forms of payment are also intended, including payments by debit card, other financial instruments, including personal checks. If this information is established at the registry site via an SSL connection, block 164 indicates that the subscriber has been assigned a unique customer ID, which is provided to the subscriber for use in referring to the subscriber's personal information and test results on the registry site. do.

Alternatively, the customer may choose to register over the telephone with the registry site as indicated in block 170. If so, block 172 provides the customer to call the customer service for the registry site. In block 174, the customer service responding to this call collects personal information from the customer, explains the invitation to the customer, and responds to any other query the customer may have. In block 176, the customer selects a subscription option and selects a payment method. Again, various conventional methods for paying registry sites for the services shown include credit and debit cards and other monetary tools. At block 178, the subscriber selects a primary username and password, while at block 180, the subscriber selects a guest password and / or guest ID number and establishes associated access rights for the guest. Finally, at block 182, the subscriber is assigned a unique customer ID number given to the customer over the telephone.

5 initiates registration from an inspection kiosk (or an information kiosk that may be found at a location that will be frequented by a person interested in services provided by the registry site), except as shown in block 190. Steps similar to those shown in FIG. 3 are shown. Block 192 visits the inspection lab in this case, where the customer has already adjusted for the inspection done on one or more STDs without knowledge or instructions from the registry site. During the visit, the customer learns that the service provided by the registry site is available and uses the kiosk to access the registry site. In block 194 the customer again selects the registration option provided on the homepage of the registry site to subscribe to the provided service. The remaining blocks 196-204 of FIG. 5 correspond to (blocks 156-164 of FIG. 3, respectively).

Verification of subscriber identification

6 and 7 illustrate two alternative methods for verifying the identity of a subscriber when the subscriber appears in a "test to be examined" test study and then when the test results are accessed by a guest or prospective partner on the registry site. do. For FIG. 6, the procedure begins with block 210 where a subscriber's driver's license (or other indication of identification) is used as a criterion to verify identity. Thus, at block 212 the inspection laboratory reviews the driver's license of the subscriber to see if the picture shown there corresponds to the appearance of the individual from whom the inspection sample was derived. In addition, the testing laboratory may access subscriber identification information on the registry site (but only for the level of access required for interaction with the medical testing provider) to verify that the identity of the subscriber matches that of the individual under test. Based on the determination that the person appears to be an individual identified by the driver's license (and, if accessed, matches an identification mark on the registry site), block 214 indicates that the inspection laboratory has established STDs (or other types of inspection). To record the driver's license number associated with the inspection ordered by the subscriber for; The recorded identification marks accompany the inspection sample electronically through the inspection process of the sample. According to block 216, the test laboratory derives the sample from the identified subscriber and completes the test using standard test procedures. At block 218, as described above, the subscriber also provides the test lab associated with the test results with a high ID obtained from the registry site when the subscriber is registered. In block 218, the test laboratory records the customer ID and driver's license number for the subscriber with the test results obtained upon completion of the test or analysis.

Block 222 further provides optional verification of identity verification that may be provided by scanning an image (photo) of the subscriber included in the driver's license using a conventional scanner. The scanned image may be listed with a test result at the registry site and reviewed by a guest accessing the test result with the subscriber's permission as additional evidence of identifying the subscriber in association with the test result. At block 218, the test results, accessible at the registry site, are linked to the driver's license number (and possibly to a scanned image of the driver's license number submitted by the subscriber).

An alternative to provide verification of the identity shown in FIG. 7 begins at block 230. At block 232, the inspection laboratory takes a digital picture of the subscriber using any readily available digital camera. The digital photograph generated by the camera is appended to the inspection request by the inspection laboratory at block 234 and is accompanied by the sample electronically through the inspection process of the sample. At block 236, the test laboratory derives the sample from the subscriber and completes the test required by the subscriber at block 238. As indicated at block 240, when a test result is listed at the registry site, a digital photograph is included and associated with the test result. Thus, as provided at block 242, the inspection results can be reviewed at the registry site and linked to the digital picture. Thus, the subscriber's image is displayed on the registry site in association with the test results as proof of the subscriber's identity and thus digital photographs and tests of the medical condition claimed by the subscriber, as confirmed by the test results. Evidence is provided to the guest who is authorized by the subscriber to access the results.

It is intended that other types of identification may be employed as an alternative to the driver's license number, the scanned image of the driver's license, and the subscriber's digital photograph. By way of example, a subscriber's lifetime measurement data is taken when a test sample is derived from a subscriber and includes the test results listed at the registry site. Verification of the identity of the subscriber may be accomplished by the guest accessing the test results as to whether the party claiming to be the subscriber has already submitted lifetime measurement data corresponding to the registry site. The registry site may indicate whether the lifetime measurement data submitted when a subscriber is registered at this site matches the lifetime measurement data recorded when the inspection was inspected by a testing laboratory, in which case the inspected subscriber is in fact inspected. Confirm that the person claims the medical condition identified by the outcome. In addition, lifetime measurement data to be compared to that involving the test results can be sent in the presence of the guest, thus confirming that the identity of the examined subscriber matches that of the party claiming the medical condition identified by the test results. . Lifetime measurement data may be retinal scan, digital fingerprint scan, face scan, voice recording, and the like. Input devices for scanning different types of life measurement data may ultimately be commonly used, making this alternative more practical.

In some cases, a subscriber would want to be listed and allow access by their guest or prospective party to their screening even if the results confirm that the member has been tested positive for STD. By way of example, the prospective party may decline sexual relations with the subscriber because of fear of infecting the subscriber if the prospective party was tested positive for HSV-2. In this case, the prospective party wants to confirm that the subscriber has been tested positive for HSV-2, thus alleviating the risk of infecting each other to some extent.

The subscriber cannot change the test results listed at the registry site, and the subscriber cannot deny the guest or prospective party access to the test selected from the subscriber's test history. However, at any time, the subscriber can delete the entire history of medical tests from the database of the registry site, terminate the subscription to that site and invalidate his or her customer ID number.

Additional details about the process

Further details of the overall process shown in FIG. 2 are illustrated in FIGS. 8 to 10. By way of example, FIG. 8 begins with block 250 where the step of listing the results of the test in an automated manner is performed by the test laboratory. Block 250 provides that the check has been completed to determine the chaff. At block 254, the test secret registers the test result at the registry site via an SSL encrypted link, over a VPN, to ensure that the test result has not been intercepted by any third party. If these test results are listed at the registry site without interference by any person at the registry site, the potential for causing errors in listing the results is minimized. Although the registry site cannot check the accuracy of the tests performed by the inspection laboratory, the process employed to automatically list the results of the tests on the registry site ensures that no additional errors have occurred. As indicated at block 256, the test result includes the customer account ID, thereby inspecting the subscriber's identification, such as the driver's license number, the subscriber's identity, or the subscriber's digital photo, and the particular subscriber's identity. Relate the results.

With reference to FIG. 9, block 260 initiates an alternative process that allows a subscriber to review the results of the inspection prior to listing them at the registry site. At block 262, the test results are produced by the test lab as required by the subscriber. Block 264 provides the test lab to notify the subscriber of the test results in telephone, mail or other relatively secure format. After reviewing the test results, the subscriber has the option to require the test lab to list the results at the registry site, as indicated in block 266. Assuming that the subscriber has such a request, block 268 instructs the test lab to register the test results at the registry site for access by any guest and subscriber authorized by the subscriber. In addition, as shown at block 270, the test result is associated with a verification of the subscriber's identity, such as the subscriber's driver's license number, the scanned image of the subscriber's driver's license, or a digital photograph taken of the subscriber and the registry site. Associated with the customer account ID provided to the subscriber.

10 illustrates the steps taken to manually register test results at the registry site, where these results are for the purpose of assuring the prospective sex party that the medical condition for which the subscriber was examined and claimed has been determined by the subscriber's examination. It is understood that they do not serve as evidence of medical conditions. At block 280, a step is initiated for manually listing scan results to a registry site. Block 282 may be based on a sample submitted by a test lab after the test results are produced by the test lab, or as a sample from a subscriber submitted to a test lab that is not affiliated with the registry site. To be calculated. At block 284, the test laboratory notifies the subscriber of the test results. The subscriber enters the test results manually into the registry site, for example, by entering into a browser displayed form provided to the registry site, as indicated at block 286. However, as indicated at block 288, the test results entered are not associated with any evidence of the subscriber's identity, and thus evidence of a medical condition if presented to a guest approved by the test to review the results. Can't act as

FIG. 11 shows the basic components of PC 20, which is currently the most commonly used device for connecting to a registry site via the Internet. These components include a CPU 300 coupled to communicate with memory 302, including read-only memory (ROM) and random access memory (RAM). The memory 302 is loaded with machine instructions stored on the hard drive 304. The machine instructions consist of program modules and other software components, such as a browser, executed by the CPU 300. Thus, the CPU may execute a browsing program used to review information about the subscriber and access the registry site, including the results of verification and inspection of the identity of the subscriber. CPU 300 is coupled to display interface 306 and drives display 308 on which the browser displays information obtained by access to the registry site. In order to connect to the registry site, data via the network interface 312 in both directions is responsive to command input in use via the user input device 30, which may include a keyboard and / or pointer control device (or mouse). Receive and transmit. Network interface 312 includes a network interface or modem that is connected to a data communication port on a network where a registry site is accessed via the Internet, as shown schematically in FIG.

Although the present invention has been described in connection with a preferred form of carrying it out, those skilled in the art will understand that various modifications may be made within the scope of the claims. Accordingly, the scope of the present invention is not limited by the above description, whereas, on the whole, it is determined based on the following claims.

Claims (55)

A method for registering the results of a medical test for a subscriber so that the results of the medical test are accessible only to authorized parties via a communication network as evidence of the medical condition of the subscriber. (a) receiving the results of the medical examination of the subscriber from the testing organization that performed the medical examination, together with a confirmation of the identity of the subscriber or an indication of the identity of the subscriber; (b) storing the results of the subscriber's medical examination in a registry site provided by the subscription service; And (c) allow the subscriber and any other party authorized by the subscriber to access the indication of the subscriber's identity and the results of the medical examination at the registry site via the communication network, and based on the results of the medical examination; Providing evidence to the counterpart of the medical condition. The method of claim 1, wherein the medical test is a test for a sexually transmitted disease and the counterpart approved by the subscriber is the expected sex counterpart of the subscriber. The method of claim 1, wherein the medical test is a test relating to drug use. The method of claim 1, wherein the indication of the identity of the subscriber consists of the subscriber's image. The method of claim 1, wherein the indication of the identity of the subscriber consists of the driver's license number of the subscriber. The method of claim 1, wherein the making access includes providing the subscriber with an access code that must be provided to obtain an indication of the identity of the subscriber stored at the registry site and access to the results of the medical examination. How to feature. The method of claim 1, further comprising the step of requiring the subscriber to approve the transfer of the results from the testing institution to the registry site as a receiving condition and prior to receiving the results of the medical examination from the testing organization. How to. The method of claim 1, wherein said receiving comprises sending a result of a medical test to a registry site by a testing organization. The method of claim 1, further comprising maintaining a history of results by medical tests performed on subscribers at different times for access by authorized parties, wherein the history is the date on which each medical test was performed. Method comprising a. The method of claim 1, further comprising the subscription service charging the subscriber for a fee for providing access by the subscriber to the results of a medical test at the registry site. The method of claim 1, further comprising the subscription service billing the subscriber for a fee for receiving and storing the results of the medical test. The method of claim 1, (a) including links on registry sites to different sites provided by different parties with information that may be important to the subscriber; And (b) billing the other party about the subscriber's access to the different site via a link on the registry site of the subscription service. The method of claim 1, (a) displaying an advertisement on a registry site provided by a subscription service; And (b) billing the subscription service for displaying the advertisement. The method of claim 1, further comprising enabling the subscriber to access the results of the medical examination to the registry site via an electronic data communication link. The method of claim 1, (a) identifying the affiliated testing organization from which the subscription service will provide the medical test of the subscriber; And (b) the subscription service further comprising receiving a portion of the fee charged to the member by the affiliated testing agency that performs the medical test. 16. The method of claim 15, further comprising the affiliated testing laboratory providing a discount to the subscriber for using the affiliated testing laboratory that was specified by the subscription service. 2. The method of claim 1, further comprising allowing the subscriber to delete the results of the medical examination from the registry site, thereby terminating the subscription relationship between the subscriber and the registry site. The method of claim 1, further comprising allowing a subscriber to determine who has access to the results of a medical test stored at a registry site. 2. The method of claim 1, further comprising allowing a subscriber to restrict access by the other party to specific data of the subscriber stored at the registry site. 2. The method of claim 1, further comprising allowing a subscriber to specify access rights associated with at least one of a guest password and a guest identification number provided to the other party by the subscriber. The method of claim 1, wherein the subscriber and the other party authorized by the subscriber access the indication of the subscriber's identity and the results of the medical examination via a telephone link with the registry site. In a method of enabling one person to provide evidence of a medical condition of one person based on the results of a medical test previously performed on one person, (a) obtaining an indication of a person's identification in connection with identifying the person's identity; (b) when a medical test is performed, associating an indication of one's identity and one's identification with the results of the medical test; (c) causing the result to be transmitted to a registry site stored in association with an indication of a person's identity and identification; And (d) allow one person and a third party authorized by that person to access the indication and the results of identification at the registry site via a communication channel link linked to the registry site, but the third party may access the results. Precluding access to the other person, wherein the other person is authorized by one person to access the results to provide the other person with evidence of the medical condition. 23. The method of claim 22, wherein the indication of identification consists of an image of a person. The method of claim 22, wherein the medical condition relates to the use of a drug. 23. The method of claim 22, wherein said one and the other are expected sex partners and said medical condition relates to a sexually infectious disease. 27. The method of claim 25, wherein the results provide evidence that, when a medical test is performed, one person has not been found to be positive for a sexually infectious disease. 27. The method of claim 25, wherein the results provide evidence that, when a medical test is performed, one person has been found to have a sexually infectious disease. 23. The method of claim 22, further comprising providing the person with an access code that should be employed to access the result over a communication channel. 23. The method of claim 22, wherein causing the result to be sent includes obtaining permission from the person to send the result to a registry site. 23. The method of claim 22, further comprising sending the result to a registry site. 23. The method of claim 22, wherein the communication channel comprises at least one of the Internet, a wireless communication link, a telephone communication link, and a wired communication link, and wherein the registry site includes a subscriber site accessed by the person via a communication channel. How to feature. 23. The method of claim 22, wherein the communication channel comprises at least one of the Internet, a wireless communication link, a telephone communication link, and a wired communication link, and wherein the registry site includes a subscriber site accessed by the other person via a communication channel. How to feature. 23. The method of claim 22, further comprising billing the person for accessing the results of a medical test on a registry site. 23. The method of claim 22, further comprising billing the person for a subscription fee that allows the result to be stored by a registry site. 23. The method of claim 22, further comprising maintaining a history of the results of medical examinations performed on one person at different times for access by any other party authorized by the one person, each of which is a history. And a date when the medical examination was performed. 23. The method of claim 22, further comprising the step of discounting the cost of a medical test paid by the person if the person uses a testing agency affiliated with a registry site to perform the medical test on the person. Characterized in that the method. 23. The method of claim 22, wherein the indication of the identity and the results of the medical examination are accessible by a telephone link with a registry site after entering an access code assigned to the person. 23. The method of claim 22, further comprising performing steps (a) through (d) to perform the medical test of the other person, wherein the indication of the identification of the other person and the medical test of the other person are performed. Access to the results of the other person is limited to the other person and any other party authorized by the other person, and the other person is placed on the registry site to provide the person with evidence of the medical condition of the other person. And authorizing said one person to access an indication of another person's identification and the results of a medical test on said other person. A system for enabling limited access to the results of a medical test performed on a subscriber so that the results of the medical test are accessible only to authorized parties via a communication network, to serve as evidence of the medical condition of the subscriber. , (a) a server; And (b) includes an interface to the communication network through which the subscriber accesses an indication of the identity of the subscriber and the results of the medical examination; The server is: (i) a memory in which a plurality of machine instructions are stored; And (ii) a processor coupled to the memory and executing machine instructions, wherein execution of the machine instructions by the processor causes the processor to: (1) storing, in the memory, an indication of the identity of the subscriber received from the testing organization that performed the medical examination and the results of the medical examination of the subscriber; And (2) provide limited access to the indication of the identity of the subscriber stored in memory and to the results of the medical examination, limited to the subscriber and any other party authorized by the subscriber, the result being indicative of the identity of the subscriber and Together, providing the other party with evidence of the medical condition of the subscriber. 40. The system of claim 39, wherein the machine instructions cause the processor to display the results on an EB page with an indication of the identity of the subscriber when the results are accessed via the communication network by the subscriber and any other party authorized by the subscriber. Display the system. 40. The system of claim 39, wherein a predetermined access code must be entered to enable access to the results of a medical test for the subscriber and an indication of the subscriber's identity. 40. The system of claim 39, wherein the medical condition relates to a disease that can be sexually infected and the counterpart approved by the subscriber is the expected sex counterpart of the subscriber. 40. The system of claim 39, wherein the medical condition is about drug use. 40. The system of claim 39, wherein said result is sent to a server via a communication network from a testing organization after being approved by a subscriber. 40. The system of claim 39, wherein the results are displayed to the subscriber on a web page that includes links to different sites on the communication network where information about the medical condition is accessible. 40. The system of claim 39, wherein the results of the medical examination are accessed via an electronic data communication link by the subscriber and the other party authorized by the subscriber. A system for enabling one person to provide evidence to another of a medical test based on a result of a medical test previously performed on one person, (a) a memory having stored thereon an indication of the identity of the person and a result of a medical examination associated with the indication of the identity of the person; And (b) a processor that communicates with memory and executes machine instructions to make the indication of the person's identity and the result accessible to the person via a communication network linked to a processor, wherein the person Approve an indication of one person's identity and access by the other person to the results to provide proof of the medical condition of the one person to another person. 48. The method of claim 47, wherein the processor sends the results of the medical test via a communication channel to the web page adapted to be displayed to the one and the other on a browser if access to the web page is authorized by the one. System. 48. The system of claim 47, wherein the web page includes a link to a registry site provided with information that may be important to the person. 48. The system of claim 47, wherein the web page includes an advertisement. 48. The method of claim 47, wherein the medical test relates to a disease that can be sexually infected and the results of the test are positive for the disease that can be sexually infected by the one person when the medical test is performed on the one person. A system characterized by confirming that it has not been found. 48. The method of claim 47, wherein the medical condition relates to a disease that can be sexually infected, and the results of the test indicate that the medical person has a disease that can be sexually infected if the medical test is performed on the person. System characterized in that it confirms. 48. The system of claim 47, wherein said one accesses said result via a communication network using an electronic data communication link. 48. The system of claim 47, wherein the indication of the identity of the person consists of an image of the person. 48. The system of claim 47, wherein the indication of a person's identity consists of the person's driver's license number.