Managing secure sharing of private medication information across security domains

摘要

A method of granting a user in a first organization access to private medication information stored within an authorization profile of a second organization, an access agreement between the two organizations is formed. Authorization is requested for the user, the authorization profile is retrieved, and authorization to private information is granted if authorized by the access agreement.;In a method of authorizing access by users to private medication information stored by an organization as associated with a program, three types of caseloads are defined. The first authorizes access to medication information of a first individual of a first program, the second authorizes access to medication information of a second individual of all programs, and the third authorizes access to medication information of all individuals of a second program.;Authorization for access is requested and granted for the user to access one or more of the caseloads.

主权项

1. A method of sharing medication information among at least a first organization and a second organization, the method comprising:
(a) receiving by one or more physical nodes a first request for authorization for a user in the first organization to access one or more individual's medication information in the second organization, wherein the first organization is associated with a first security domain, the second organization is associated with a second security domain, the second organization has an access profile associated with the first security domain, the user is associated with one or more roles and one or more caseloads each of the one or more individual's medication information in the second organization has at least one type, the one or more roles includes access privilege information for one or more users, and the one or more caseloads includes access privilege information for at least one individual or medical services program; (b) logging by the one or more physical nodes, in an activity log associated with at least the first organization or the second organization, the user's first request for authorization for the user in the first organization to access the individual's medication information in the second organization; (c) determining by the one or more physical nodes whether the user in the first organization is authorized to access the one or more individual's medication information in the second organization, wherein the determination is based on at least the access profile, the one or more caseloads and the one or more roles associated with the user and the type of the one or more individual's medication information in the second organization; (d) responsive to determining that the user in the first organization is authorized to access the one or more individual's medication information in the second organization:
(d)(i) transferring by the one or more physical nodes the one or more individual's medication information in the second organization to the user in the first organization;(d)(ii) logging by the one or more physical nodes, in the activity log, the transferring of the one or more individual's medication information in the second organization to the user in the first organization.