System, method and computer program product for controlling access to protected personal information

摘要

A computer-based system, method and computer program product for controlling access to protected personal information is disclosed. Protected personal information that is accessible by an information management application program is stored in a computer memory. In response to a request from an authenticated user for information, which includes protected personal information, information is displayed indicating that user has requested protected personal information, but the protected personal information is not displayed. In response to receiving user input requesting access to the protected personal information, a determination is made as to whether the user is authorized to access the requested protected personal information. If so, requested protected personal information is displayed to the user and information is stored relating to the user's access to protected personal information. Otherwise, requested protected personal information is not displayed to the user and information relating to the user's access to protected personal information is not stored.

主权项

1. A method of controlling access to protected personal information stored in a memory, the method comprising:
receiving at a processor associated with the memory a request from a user to access information stored in the memory; determining whether the information requested includes the protected personal information, and, if so, then displaying an indication that the information requested includes the protected personal information without displaying the requested protected personal information; displaying an image via a graphical user interface to receive user input via a user input device for toggling between a first state in which the protected personal information is not accessible to the user through search and display capabilities and a second state in which protected personal information is accessible to the user through search and display capabilities; determining whether the user is authorized to access the requested protected personal information, and, if so, then displaying the protected personal information; and storing information indicating that the user accessed the protected personal information, and identifying the protected personal information accessed.