| 摘要 |
A method for controlling the access of healthcare providers to the medical records of a patient held in a medical record database. A patient controls the access of the healthcare providers to the patient's medical records held in a medical record database. The patient determines access rights to be granted to the healthcare provider and generates an access authorization message which specifies the access rights. The access authorization message is transmitted from the patient to one or more healthcare providers. The healthcare provider transmits the access authorization together with a request for access to the patient's medical records to the medical record database. The medical record database verifies that the access authorization message originated from the patient before granting the healthcare provider access to the patient's medical records in accordance with the access authorization message. |
