System, method and computer program product for controlling access to protected personal information

摘要

A computer-based system, method and computer program product for controlling access to protected personal information is disclosed. Protected personal information that is accessible by an information management application program is stored in a computer memory. In response to a request from an authenticated user for information, which includes protected personal information, information is displayed indicating that user has requested protected personal information, but the protected personal information is not displayed. In response to receiving user input requesting access to the protected personal information, a determination is made as to whether the user is authorized to access the requested protected personal information. If so, requested protected personal information is displayed to the user and information is stored relating to the user's access to protected personal information. Otherwise, requested protected personal information is not displayed to the user and information relating to the user's access to protected personal information is not stored.

主权项

1. A computer implemented method of controlling access to protected personal information by a user of an information management application program that has access to the protected personal information, the method comprising:
storing in a computer memory the protected personal information that is accessible by the information management application program; authenticating the user of the information management application program; receiving a first request from the authenticated user to access information accessible by the information management application program; determining whether the information requested by the user is comprised of the protected personal information; if the information requested by the user is comprised of the protected personal information, displaying information indicating that the information requested by the user is comprised of the protected personal information, but not displaying the requested protected personal information; in response to displaying information indicating that the information requested by the user is comprised of the protected personal information, receiving from the user input requesting access to the protected personal information; determining whether the user is authorized to access the requested protected personal information; if the user is authorized to access the requested protected personal information, displaying the requested protected personal information to the user; storing information i) indicating that the user accessed the requested protected personal information, and ii) identifying the protected personal information accessed by the user; providing a graphical user interface for receiving user input requesting access to the protected personal information; and displaying a button via the graphical user interface for receiving user input via a user input device for toggling between a first state in which protected personal information is not accessible to the user through search and display capabilities and a second state in which protected personal information is accessible to the user through search and display capabilities.