Information record infrastructure, system and method

Claim 1

A method for controlling access to a medical record of a patient hosted by at least one medical record repository, comprising a plurality of record portions, each record portion having associated different patient-controlled access control criteria, comprising: (a) receiving, by an intermediary, a request for a medical record from a requestor, said request comprising a medical record identifier, a requestor identifier, requestor authentication information, and patient-provided access control authorization; (b) providing an automated processor adapted for automatically processing, by the intermediary, the request for the medical record to authenticate the requestor and determine sufficiency of the patient-provided access control authorization to meet the patient-controlled access control criteria for each respective record portion encompassed by the request; and (c) selectively communicating, through an automated communication network, from the intermediary to the at least one medical record repository, an identification of each record portion for which patient-controlled access control criteria are determined to be sufficient for access by the requestor; and (d) generating an electronic payment authorization associated with the request, for compensation of at least one of the intermediary and the at least one medical record repository.

Claim 2

A method for controlling access to a medical record of a patient hosted by at least one medical record repository, comprising a plurality of record portions, each record portion having associated different patient-controlled access control criteria, comprising: (a) receiving, by an intermediary, a request for a medical record from a requestor, said request comprising a medical record identifier, a requestor identifier, requestor authentication information, and patient-provided access control authorization; (b) providing an automated processor adapted for automatically processing, by the intermediary, the request for the medical record to authenticate the requestor and determine sufficiency of the patient-provided access control authorization to meet the patient-controlled access control criteria for each respective record portion encompassed by the request; and (c) selectively communicating, through an automated communication network, from the intermediary to the at least one medical record repository, an identification of each record portion for which patient-controlled access control criteria are determined to be sufficient for access by the requestor; and (d) generating an electronic payment authorization associated with the request, for compensation of at least one of the intermediary and the at least one medical record repository.

Claim 8

A system adapted to control access to a patient medical record hosted by at least one medical record repository comprising a plurality of record portions, each record portion being associated with different patient-controlled access control criteria, said system comprising an automated processor, a database adapted to store information for authenticating requestors, a database adapted to store information for determining patient-controlled access control criteria for respective record portions of a patient medical record, and a computer network interface, said processor being controlled by instructions stored on a computer readable storage medium to: (a) receive a request for a medical record from a requestor, said request comprising a medical record identifier, a requestor identifier, requestor authentication information, and patient-provided access control authorization; (b) process the request for the medical record, to authenticate the requestor and determine sufficiency of the patient-provided access control authorization to meet the patient-controlled access control criteria for each respective record portion encompassed by the request; (c) selectively communicate through the computer network interface to the at least one medical record repository, an identification of each record portion for which access control criteria are determined to be sufficient for access by the requestor; and (d) generating an electronic payment authorization associated with the request, for compensation of at least one of said system and the at least one medical record repository.

Claim 9

A system adapted to control access to a patient medical record hosted by at least one medical record repository comprising a plurality of record portions, each record portion being associated with different patient-controlled access control criteria, said system comprising an automated processor, a database adapted to store information for authenticating requestors, a database adapted to store information for determining patient-controlled access control criteria for respective record portions of a patient medical record, and a computer network interface, said processor being controlled by instructions stored on a computer readable storage medium to: (a) receive a request for a medical record from a requestor, said request comprising a medical record identifier, a requestor identifier, requestor authentication information, and patient-provided access control authorization; (b) process the request for the medical record, to authenticate the requestor and determine sufficiency of the patient-provided access control authorization to meet the patient-controlled access control criteria for each respective record portion encompassed by the request; (c) selectively communicate through the computer network interface to the at least one medical record repository, an identification of each record portion for which access control criteria are determined to be sufficient for access by the requestor; and (d) generating an electronic payment authorization associated with the request, for compensation of at least one of said system and the at least one medical record repository.

Claim 15

A method for controlling access to a medical record of a patient hosted by at least one medical record repository, comprising: (a) receiving, by an intermediary, a request for a medical record comprising a plurality of record portions, each record portion having an associated different patient-controlled access control criteria, from a requestor, said request comprising a medical record identifier, a requestor identifier, and requestor authentication information; (b) automatically processing, by an automated processor associated with the intermediary, the request for the medical record to authenticate the requestor; (c) receiving, by the intermediary, a patient-provided access control authorization associated with a request for a medical record from a requestor; (d) automatically processing, by the automated processor associated with the intermediary, the request for the medical record, to further determine sufficiency of the patient-provided access control authorization to meet the patient-controlled access control criteria for each respective record portion encompassed by the request; (e) selectively communicating through an automated communication network, from the intermediary to the at least one medical record repository, an authenticated request for access to the medical record by the requestor and an identification of each record portion for which access control criteria are determined to be sufficient for access by the requestor; and (f) generating an electronic payment message associated with the request, relating to compensation of at least one of the intermediary and a medical record repository.

Claim 16

A method for controlling access to a medical record of a patient hosted by at least one medical record repository, comprising: (a) receiving, by an intermediary, a request for a medical record comprising a plurality of record portions, each record portion having an associated different patient-controlled access control criteria, from a requestor, said request comprising a medical record identifier, a requestor identifier, and requestor authentication information; (b) automatically processing, by an automated processor associated with the intermediary, the request for the medical record to authenticate the requestor; (c) receiving, by the intermediary, a patient-provided access control authorization associated with a request for a medical record from a requestor; (d) automatically processing, by the automated processor associated with the intermediary, the request for the medical record, to further determine sufficiency of the patient-provided access control authorization to meet the patient-controlled access control criteria for each respective record portion encompassed by the request; (e) selectively communicating through an automated communication network, from the intermediary to the at least one medical record repository, an authenticated request for access to the medical record by the requestor and an identification of each record portion for which access control criteria are determined to be sufficient for access by the requestor; and (f) generating an electronic payment message associated with the request, relating to compensation of at least one of the intermediary and a medical record repository.