Researchers Submit Patent Application, “Self-Controlled Digital Authorization Over Communication Networks”, for Approval (USPTO 20210182425)

2021 JUL 02 (NewsRx) -- By a News Reporter-Staff News Editor at Insurance Daily News -- From Washington, D.C., NewsRx journalists report that a patent application by the inventor Shah, Shahid N. (Silver Spring, MD, US), filed on February 24, 2021, was made available online on June 17, 2021.

The patent’s assignee is Netspective Communications LLC (Silver Spring, Maryland, United States).

News editors obtained the following quote from the background information supplied by the inventors: “

“Technical Field

“The embodiments herein generally relate to electronic records systems, and, more particularly, to storage, access and authorization of electronic records for access over a communication network.

“Description of the Related Art

“Generally, several types of services such as financial services, healthcare services or information services or others, and associated parameters, attributes and responses related to the services are documented by entities such as physicians, doctors, hospitals or other service providers, analysts, specialists, and others dealing in information management. At times, information holders or owners such as patients may also document their information or data. With the advent of new technologies, such types of documented information can be stored electronically which is generally referred to as electronic records.

“Electronic records are user or owner specific and are generally kept as confidential by the owner of the information or the records. In modern days, these records can be deposited and secured in a central database that is connected over a networked platform such as through an internet that can be accessible by the owner easily.

“In certain conditions, an external device other than the patient such as a general consumer of the information or records may be interested in the electronic records and may want to access them. However, as per the conditions prescribed by several authorities and standards such as the Health Insurance Portability and Accountability Act (HIPPA) meant for health-related information and several others, it is imperative and important to gain authorization from an owner for accessing his electronic records. The process of authorization can be fairly simple if the records are limited. An external device or a consumer may directly approach the owner for authorization. However, as the data contained within the records increase to a large extent, the task of identifying relevant data and gaining access and authorization becomes complex and difficult.”

As a supplement to the background information on this patent application, NewsRx correspondents also obtained the inventor’s summary information for this patent application: “The embodiments herein provide a distributed architecture-based system for digitally authorizing access to computerized records. The system includes at least one server. The server includes at least one computerized records data-store storing multiple computer executable files associated with a subject and containing subject data in a digital format and associated with a subject identifier that identifies association of the subject with its respective computer executable file. The system includes an external device communicatively linked to the at least one server. The system includes a scanner operatively linked to the external device. The system includes a communication network communicatively linking at least two of the subject, the server, the external device, and the scanner.

“The system includes a contextual authorization device for authorizing access to the external device. The contextual authorization device includes a database storing a set of custom rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information. The contextual authorization device further includes a Global Positioning System (GPS)-based tracking device for tracking a geo-location of the external device such that the custom rules define different rights for different location types as identified from the geo-location of the external device. The different rights define either one of an outright denial or approval of the access or limiting the access to one or more types of digital records based on the location types. The contextual authorization device further includes a credentialing engine to determine a crowdsourced credentialing score associated with an entity associated with the external device. The crowdsourced credentialing score is determined based on credentialing of a digital profile of the entity by a plurality of respondents such that the crowdsourced credentialing score is indicative of a trust of the external device. The custom rules are defined to allow authorization of the external device only when the entity associated with the external device possesses at least a minimum threshold score. The contextual authorization device further includes a user behavior analytics engine to compare dynamically changing contextual details associated with the entity with a set of past requests indicative of historical behavior and determine an index of normality such that the custom rules are defined to allow the access only when a minimum predefined threshold of normality is noted about the external device and the associated entity.

“The contextual authorization device further includes an access module that processes authorization of the external device for access of the computerized records based on an input received from the GPS-based tracking device, credentialing engine, and the user behavior analytics engine. The contextual authorization device further includes a processing component that creates the computerized records based on the authorization by the access module. The processing component transforms the authorized computerized records into a digital data structure readable by the scanner.

“The system may include an interface unit for providing a graphical user interface to the subject and the external entity associated with the external device to respectively update the computerized records of the subject and view or extract the computerized records as authorized by the contextual authorization device. The system may include a communication channel allowing transfer of the computerized records through at least one of a wired and wireless transmission technique to a destination identified by the external device, upon successful authorization of the access by the contextual authorization device. The system may include an input module configured to receive binary values relating authorization access such that the custom rules may be used in association with the input for providing access to the external device by the contextual authorization device. The contextual authorization device may be configured to select a real time automated manner of access authorization for the computerized records based on the custom rules stored in the database.

“The system may include a document usage system which may include one or more document computer systems in communication with a network of devices including the external device and having a machine-accessible medium storing a plurality of program modules configured to determine document utilization information providing an indication of usage of computerized records as authorized to be accessed by the external device associated with the entity. The usage comprises an amount of time that the associated entity or the external devices has accessed particular sections of the authorized computerized records. The computerized records may be classified into discrete types. The system may include a monetization engine configured to associate a price value with the authorized computerized records based on the usage by the external device and based on the classification of authorized computerized records as accessed by the external device are classified into. The digital data structure may include a QR (quick response) code readable by the scanner.

“The embodiments herein provide a portable device for encapsulating computerized records of multiple types. The portable device includes a plurality of memory segments, wherein each of the plurality of memory segments stores a specified type of computerized records and is accessible by an external device upon successful authorization. The portable device includes an access module that processes authorization to access the computerized records by the external device based on certain inputs received from external components to the portable device. The portable device includes a processing component that creates the computerized records based on the authorization by the access module, wherein the processing component transforms the authorized computerized records into a digital data structure readable by a scanner communicatively connected with the external device.

“The portable device is communicatively connected with a remote server. The remote server includes a contextual authorization device for generating the certain inputs for use by the access module in authorizing access to the external device for the computerized records. The contextual authorization device includes a database storing a set of custom rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information. The contextual authorization device includes a Global Positioning System (GPS)-based tracking device for tracking geo-location of the external device such that the custom rules define different rights for different location types as identified from the geo-location of the external device. The different rights define either one of an outright denial or approval of the access or limiting the access to one or more types of computerized records based on the location types. The portable device includes a user interface with a plurality of single-click configurable menu options defined to provide authorization request in a single click such that a single-click configurable menu option of the plurality of single-click configurable menu options is defined to authenticate only a particular type of computerized record with a particular level of access. The level of access includes one of a full access, limited access, and no access, wherein the level of access is defined based on geo-location of the external system and the portable device.

“The portable device includes a communication terminal configured to establish a communication link between the portable device and the external device as soon as any of the plurality of single-click configurable menu options is pressed by a user. The access module is allowed to authorize the access of the computerized records either based on the certain inputs received from the remote server without any manual intervention or alternatively based on single click manual authorization using one of the plurality of single-click configurable menu options to allow access of the computerized records of a particular type defined for a particular context.

“The contextual authorization device may include a credentialing engine to determine a crowdsourced credentialing score associated with an entity associated with the external device. The crowdsourced credentialing score may be determined based on credentialing of a digital profile of the entity by a plurality of respondents such that the crowdsourced credentialing score is indicative of a trust of the external device. The custom rules may be defined to allow authorization of the external device only when the entity associated with the external device possesses at least a minimum threshold score. The contextual authorization device may include a user behavior analytics engine to compare dynamically changing contextual details associated with the entity with a set of past requests indicative of historical behavior and determine an index of normality such that the custom rules may be defined to allow the access only when a minimum predefined threshold of normality is noted about the external device and the associated entity.”

There is additional summary information. Please visit full patent to read further.”

The claims supplied by the inventors are:

“1. A distributed architecture-based system for digitally authorizing access to computerized records, the system comprising: at least one server comprising at least one computerized records data-store storing multiple computer executable files associated with a subject and containing subject data in a digital format and associated with a subject identifier that identifies association of the subject with its respective computer executable file; an external device communicatively linked to the at least one server; a scanner operatively linked to the external device; a communication network communicatively linking at least two of the subject, the server, the external device, and the scanner; and a contextual authorization device for authorizing access to the external device, the contextual authorization device comprising: a database storing a set of custom rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information; a Global Positioning System (GPS)-based tracking device for tracking a geo-location of the external device such that the custom rules define different rights for different location types as identified from the geo-location of the external device, wherein the different rights define either one of an outright denial or approval of the access or limiting the access to one or more types of computerized records based on the location types; a credentialing engine to determine a crowdsourced credentialing score associated with an entity associated with the external device, wherein the crowdsourced credentialing score is determined based on credentialing of a digital profile of the entity by a plurality of respondents such that the crowdsourced credentialing score is indicative of a trust of the external device, wherein the custom rules are defined to allow authorization of the external device only when the entity associated with the external device possesses at least a minimum threshold score; a user behavior analytics engine to compare dynamically changing contextual details associated with the entity with a set of past requests indicative of historical behavior and determine an index of normality such that the custom rules are defined to allow the access only when a minimum predefined threshold of normality is noted about the external device and the associated entity; an access module that processes authorization of the external device for access of the computerized records based on an input received from the GPS-based tracking device, credentialing engine, and the user behavior analytics engine; and a processing component that creates the computerized records based on the authorization by the access module, wherein the processing component transforms the authorized computerized records into a digital data structure readable by the scanner.

“2. The system of claim 1, further comprising an interface unit for providing a graphical user interface to the subject and the external entity associated with the external device to respectively update the computerized records of the subject and view or extract the computerized records as authorized by the contextual authorization device.

“3. The system of claim 1, further comprising a communication channel allowing transfer of the computerized records through at least one of a wired and wireless transmission technique to a destination identified by the external device, upon successful authorization of the access by the contextual authorization device.

“4. The system of claim 1, further comprising an input module configured to receive binary values relating to authorization access, wherein the custom rules are used in association with the input module for providing access to the external device by the contextual authorization device.

“5. The system of claim 4, wherein the contextual authorization device is configured to select a real-time automated manner of access authorization for the computerized records based on the custom rules stored in the database.

“6. The system of claim 1, further comprising a document usage system which includes one or more document computer systems in communication with a network of devices including the external device and having a machine-accessible medium storing a plurality of program modules configured to determine document utilization information providing an indication of usage of computerized records as authorized to be accessed by the external device associated with the entity, wherein the usage comprises an amount of time that the associated entity or the external device has accessed particular sections of the authorized computerized records.

“7. The system of claim 6, wherein the computerized records are classified into discrete types, and wherein the system further comprising a monetization engine configured to associate a price value with the authorized computerized records based on the usage by the external device and based on the classification of authorized computerized records as accessed by the external device.

“8. The system of claim 1, wherein the digital data structure comprises a QR (quick response) code readable by the scanner.

“9. A system for digitally authorizing access to computerized records, the system comprising: a server comprising multiple computer executable files associated with a subject and containing digital subject data related to a subject identifier that identifies association of the subject with its respective computer executable file, wherein the server comprises a port that provides a communicative link to an external device; a database comprising custom rules digitally dictating access rights and levels for the external device based on static information associated with the external device and based on dynamically changing contextual information; a Global Positioning System (GPS)-based tracker that identifies geo-location data of the external device, wherein the custom rules define different rights for different location types as identified from the geo-location data, and wherein the different rights define either a denial or approval of the access or a limited access to one or more types of computerized records based on the location types; a credentialing engine that determines a crowdsourced credentialing score associated with an entity associated with the external device, wherein the crowdsourced credentialing score is indicative of a trust factor of the external device, and wherein the custom rules set an authorization to access the computerized records upon the crowdsourced credentialing score comprising a minimum threshold score; a user behavior analytics engine that (i) compares dynamically changing contextual details associated with the entity with a set of past requests indicative of historical behavior, and (ii) determines an index of normality such that the custom rules are defined to allow the access when a minimum predefined threshold of normality is identified; and a processing component that transforms the computerized records into a digital data structure for access through the external device.

“10. The system of claim 9, further comprising a graphical user interface that displays the computerized records that are authorized for access.

“11. The system of claim 9, wherein the port provides any of a wired and wireless link to the external device and to another device identified by the external device upon authorization of the access of the computerized records.

“12. The system of claim 9, further comprising an input module that receives binary values for authorization access of the computerized records, wherein the custom rules are used in association with the input module to provide access to the external device.

“13. The system of claim 12, wherein the processing component provides for a real-time automated access for the computerized records based on the custom rules stored in the database.

“14. The system of claim 9, further comprising a document usage system comprising a machine-accessible medium storing a plurality of program modules that determine document utilization information providing an indication of usage of the computerized records as authorized to be accessed by the external device associated with the entity, wherein the usage comprises an amount of time that the external device has accessed particular sections of the authorized computerized records.

“15. The system of claim 14, further comprising a monetization engine that associates a price value with the authorized computerized records based on the usage by the external device and based on a classification of the authorized computerized records as accessed by the external device.

“16. The system of claim 9, comprising a scanner operatively connected to the external device, wherein the digital data structure comprises a QR (quick response) code readable by the scanner.”

There are additional claims. Please visit full patent to read further.

For additional information on this patent application, see: Shah, Shahid N. Self-Controlled Digital Authorization Over Communication Networks. Filed February 24, 2021 and posted June 17, 2021. Patent URL: https://appft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PG01&p=1&u=%2Fnetahtml%2FPTO%2Fsrchnum.html&r=1&f=G&l=50&s1=%2220210182425%22.PGNR.&OS=DN/20210182425&RS=DN/20210182425

(Our reports deliver fact-based news of research and discoveries from around the world.)