Medical professional application integration into electronic health record system

摘要

Embodiments relate to integrating data collection and productivity applications with an EHR system. To integrate a patient's data collection application with the EHR system, an EHR server provides API calls to (i) retrieve patient information, (ii) post data to the patient's account, and (iii) post data to the medical professional's account. To integrate a medical professional's productivity application with the EHR system, an EHR server provides API calls to (i) retrieve practice information, (ii) retrieve patient information, and (iii) post data to the medical professional's account. Embodiments securely provide these APIs to third party providers.

主权项

1. A computer-implemented method for integrating a practice productivity application into an electronic health records (EHR) system with an EHR server, comprising:
prompting a medical professional for authorization information indicating whether the medical professional authorizes the practice productivity application to retrieve the medical professional's patient data from the medical records database; storing the authorization information at the EHR server; receiving, from the practice productivity application, an application programming interface (API) call to retrieve patient data from a medical records database on the EHR system, the API call including a persistent security token for the medical professional and a persistent security token for a developer of the practice productivity application; in response to receipt of the API call: authenticating the persistent security token for the medical professional and the persistent security token for the practice productivity application; retrieving the stored authorization information at the EHR server; determining, at the EHR server, whether the retrieved authorization information stored on the EHR server indicates that the medical professional has authorized the practice productivity application to retrieve the medical professional's patient data from the medical records database; and based on the authenticating step, indicating that the medical professional's and developer's security tokens are determined to be authentic and the authorization information indicating that the authorization information indicates that the practice productivity application is authorized, sending, to the practice productivity application, the patient data such that the practice productivity application provides a user experience customized according to the patient data.