CONTROLLING ACCESS TO MEDICAL RECORDS

摘要

A method for controlling the access of healthcare providers to the medical records of a patient held in a medical record database. A patient controls the access of healthcare providers to the patient's medical records held in a medical record database. The patient determines access rights to be granted to the healthcare provider and generates an access authorisation message which specifies the access rights. The access authorisation message is transmitted from the patient to one or more healthcare providers. The healthcare provider transmits the access authorisation message together with a request for access to the patient's medical records to the medical record database. The medical record database verifies that the access authorisation message originated from the patient before granting the healthcare provider access to the patient's medical records in accordance with the access authorisation message.