DE102018005746A1 - Medical emergency data access arrangement - Google Patents

Abstract

The invention relates to a medical emergency data access arrangement, comprising a mobile data terminal (1), a remote data connection (2) and a central server unit (3), the mobile data terminal (1) being a recording unit (4) for biometric features of a patient, by means of which biometic features can be recorded as biometric data, and has an authentication data generation unit (5), by means of which authentication data can be generated, and wherein the biometric data and the authentication data can be transmitted from the mobile data terminal, the biometric data and the authentication data from the mobile being able to be transmitted by means of the remote data connection (2) Data terminal (1) can be transmitted to the central server unit (3), the central server unit (3) having an authentication module (6), by means of which authentication can be carried out using the authentication data and, if authentication has taken place, access for it r the mobile data terminal can be released, the central server unit having an identification module (7) by means of which the patient is identified on the basis of the biometric data, the central server unit having a database module (8) in which a patient emergency data record is stored, of which central server unit (3), the patient emergency data record, which is assigned to the patient according to the identification, can be called up and transferred, whereby the patient emergency data record can be transferred to the mobile data terminal (1) by means of remote data transmission (2), and wherein the mobile data terminal (1 ) the patient emergency data record can be received from the central server unit (3) via the remote data connection (2), and wherein the mobile data terminal (1) has a data output unit (9) by means of which patient emergency data of the patient emergency data record can be output.

Description

The invention relates to a medical emergency data access arrangement with which patient data relevant to medical emergencies can be output via a mobile data terminal.

Methods are known from the prior art in which objects worn on the body, such as bracelets or necklaces, carry data such as patient numbers or login data. This data is used to access patient data in an emergency.

In DE 10 2007 032 477 A1 describes an emergency system for worldwide personal identification, which contains a highly robust stainless steel data carrier in the form of a tag or a card. The robust design should protect the stored data even after exposure to fire, moisture, acid, decay or excessive force. The data contained include special identifying features for access to an Internet database or personal data, which are also used in emergency identification cards, in order to be able to optimally treat the patient or identify them in the event of death. The user enters their data in an Internet database beforehand and can update it at any time or block data access for third parties.

The object of the invention is to provide an arrangement by means of which emergency patient data of an emergency patient can be made available, even if the patient's identity cannot be communicated by the patient or is otherwise known to the emergency personnel.

The object is achieved by the features listed in claim 1. Preferred further developments result from the subclaims.

According to the invention, the medical emergency data access arrangement has a mobile data terminal, a remote data connection and a central server unit as basic components.

According to the invention, the mobile data terminal has a detection unit for biometric features of an emergency patient, an authentication data generation unit and a data output unit. The emergency patient is also referred to below as the patient.

The registration unit for biometric features of a patient is designed to record biometric features of a patient. After recording, these are available as biometric data. For the purposes of the invention, biometric features are understood to be those features of the human body that permit unambiguous identification. For example, the detection unit can be designed to detect faces, fingerprints, handprints and footprints, a coloration of the retina, a shape of the pinna, DNA or a voice sample. For this purpose, the detection unit can have various sensors, which can differ according to the measuring principle and space requirement. The detection unit is preferably designed as an image camera, so that in particular the biometric features of a face can be detected. Another advantageous embodiment is a fingerprint scanner.

According to an optional further development, the recording unit for biometric features of an emergency patient can at the same time also record biometric features of a user and transmit his user biometric data to the authentication data generation unit in order to identify the user.

The mobile data terminal can preferably be designed as a smart phone, which usually has a camera for digital recordings. The smart phone also preferably has functions such as eye tracking and a semi-automatic or automatic fingerprint scanner. It is also possible to record a combination of different biometric features, which enables the reliability and security of the later identification of the emergency patient to be improved.
Tablet, laptops and PDA (personal digital assistants) are also understood as mobile data terminals.

Furthermore, the mobile data terminal has an authentication data generation unit. The authentication data generation unit generates authentication data which are intended to authorize the user with respect to the central server unit.

The authentication data preferably contain data about both the identity of the user and the identity of the mobile data terminal. The data on the identity of the user is preferably generated by a login process on the mobile data terminal. The login process takes place in particular through manual data entry (for example PIN, password or individual pattern), through the use of the biometric characteristics of the user or through a combination of both ways. The data for the identity of the mobile data terminal result from a number assigned to the device, preferably from the International Mobile Station Equipment Identity (IMEI). By This authentication data ensures that only authorized users, such as in particular emergency doctors or other medical emergency personnel, have access to the patient emergency data. In addition, an increased security standard is achieved through the data on the identity of the mobile data terminal.

According to the invention, the mobile data terminal provides the biometric data obtained by means of the detection unit and the authentication data generated by means of the authentication data generation unit in a transferable manner. The biometric data and the authentication data can thus be transmitted to the central server unit via the remote data connection.

The remote data connection is designed bidirectionally according to the invention. Specifically, it is designed so that it can transmit biometric data and authentication data from the mobile data terminal to the central server unit and vice versa the patient emergency data from the central server unit to the mobile data terminal.

The remote data connection is preferably implemented wirelessly. It is also implemented, for example, using one of the known mobile radio standards (for example UMTS, HSPA, HSPA +, LTE, 5G). The remote data connection can be particularly secured due to the transmission of sensitive data. The backup can be done, for example, by end-to-end encryption (E2EE).

According to the invention, the central server unit has an authentication module, an identification module and a database module.

The central server unit is designed as a computer and is preferably housed in a data center, which is particularly suitable for handling sensitive data.

After the transmission, the authentication module receives the authentication data and checks it for compliance with previously stored access authorizations. The previously stored access authorizations contain the users for whom access has been released.
If the authentication data match a stored access-authorized user, the authentication has taken place and the user has been identified.

The prior storage of access authorizations can also take place on the basis of biometric characteristics of the user or through a login process.

If the authentication data are recognized by the authentication module as correct, that is to say as corresponding to a stored access authorization, the biometric data are forwarded to the identification module of the central server unit.

The identification module is designed to recognize an identity of an emergency patient on the basis of the biometric data.

For this purpose, data records of patients are created in the database module, the data records also containing biometric data of the patients, hereinafter referred to as stored biometric data. Furthermore, the data records have identity data of the patient.
In addition to the identity data and biometric data, the data records stored in the database module also contain medical data of the patient concerned. In the present case, medical data are understood to be all data which are related to the state of health. In particular, this can be data on the patient's medical history, the treatments performed or the prescription of medication. Further medical data can be, for example, living wills, close relatives to be notified, organ donation and implant ID cards or information about the treating doctor or health insurance or billing data. The medical data are also referred to below as electronic patient files.

Some of the medical data are medical emergency data of the patient, which are also referred to below as patient emergency data. The patient emergency data can be, in particular, information on the blood group, previous illnesses, drug intolerance, living will, organ donation order.

The patient emergency data preferably have technical distinguishing features in order to be able to distinguish them from the other medical data. In this way, a determination can be made as to which data is treated as patient emergency data in the sense of the present invention and is made available to a user, in particular an emergency doctor.

It is also possible for the central server unit to be distributed in terms of device technology. In particular, there may be an outsourced database module.

The identification module checks the received biometric data with the stored biometric data for agreement. Put that Identification module determines a match, the identity data to which the stored biometric data are assigned is retrieved. The identity of the emergency patient is thus established.

Furthermore, the patient emergency data, which are assigned to the identity data, are then called up from the database module. According to the invention, the central server unit provides the patient's emergency data from the database module in a transferable manner. This patient emergency data is converted into a data format which can be transmitted via the remote data connection.

The central server unit sends the patient emergency data to the mobile data terminal via the remote data connection.

The mobile data terminal is designed such that it receives the patient emergency data from the central server unit via the remote data connection.

According to the invention, the mobile data terminal has a data output unit. According to the invention, the patient emergency data can be output via the data output unit. All devices with which data can be output, in particular as numbers and characters, are to be understood as data output unit. In addition to output via a display, output via a printer is also conceivable.
Printers have the advantage that they can create documents that, for example, document meta data such as location (e.g. GPS, Gallileo, GLONASS, BEIDOU), the time of the query or the identity of the user to document access to the server include in a printout. Data output by a printer offers the advantage of archivable documentation.

The functions on the mobile data terminal are controlled, for example, by a program, hereinafter also referred to as an app. The mobile data terminal can be designed differently in terms of device technology. In one variant, it is possible that all components, including the data output unit, are combined in one device, as can be the case with a smart phone if the display of the smart phone shows the data output unit. In another variant, the mobile data terminal can also be constructed in several parts in terms of device technology, for example if the detection unit is the camera of a smart phone and the data output unit is a printer which is connected to the smart phone.

According to a special training, the authentication method can contain two or more security levels. According to this special training, a distinction is made, for example, as to whether the patient could only be identified using exclusively biometric features, as is typically the case with an unconscious or impaired patient. In this case, the scope of the patient emergency data output is limited. It is planned to only release further contents of the patient file with the patient's additional consent. This additional consent can be given, in particular, by means of a signature, for example on a display of the mobile data terminal designed for this purpose, by a login process with a personal password, by entering a pin or by another method to be carried out consciously by the patient.

According to this development, further authentication security levels can also be provided, which differ, for example, according to occupational group or other special qualifications of the users. For example, the patient emergency data displayed for a fire service or police officer could differ from that for an emergency doctor.

Different security levels are also conceivable within a professional group. For example, an extended range of patient emergency data or other data can be made available for certain doctors, for example for a treating doctor, for whom special powers have been assigned in advance by an order or authorization from the patient and which has been stored in the electronic patient file.

One of the particular advantages of the invention is that patient emergency data can also be made available if the patient cannot participate due to his state of health, in particular if he is unconscious, and in particular cannot provide any information about his identity.

Another advantage is that a special identity data carrier is not required. Neither an electronic identity carrier such as an RFID, nor any other physical carrier, for example an identity number or the like, is required.

It is also advantageous that the solution shown is associated with low costs and has a high level of reliability.

In addition, it is advantageous that the solution shown accesses an already existing central data storage of an electronic patient record, so that at most there is little additional effort for data maintenance.

According to an advantageous development, the data output unit of the mobile data terminal is designed as a display. A display according to the current state of the art offers a multitude of possibilities for the input and output of data. It is possible to enter the required authentication data using the on-screen keyboard or by writing with a suitable pen on a touch-sensitive display, also known as a touchscreen.

The data output can thus be made clearer than a pure output by inserting interactive elements such as fold-out texts, tabs and the like. This makes navigation quick and easy, which is particularly important in emergency situations. The display can be part of a smartphone.

According to an advantageous development, the detection unit for biometric features of a patient is designed as a camera on a smartphone.
The camera of a smartphone has the advantage that it can capture a majority of the biometric features. It is suitable for recording faces, auricle shapes or finger, hand and footprints and provides digital information that can be easily converted into biometric data on the recorded biometric features.
Furthermore, the camera of a smartphone is controlled with an operating system and it can be controlled via additional programs, which makes it particularly suitable for use in the arrangement according to the invention.

This means that hardware that is often already available can be used, which is inexpensive and facilitates further instruction in the operation of the mobile data terminal.

• 1 Schematische Darstellung einer medizinischen Notfalldatenzugangsanordnung

näher erläutert.The invention is used as an exemplary embodiment on the basis of

• 1 Schematic representation of a medical emergency data access arrangement

explained in more detail.

The 1 shows a schematic structure of an embodiment of the medical emergency data access arrangement.

The medical emergency data access arrangement has a mobile data terminal 1 , a remote data connection 2 and a central server unit 3 on.

The mobile data terminal 1 has a registration unit for this 4 for biometric features, a patient, an authentication data generation unit 5 and a data output unit 9 on. In this embodiment, the mobile data terminal is 1 running as a smartphone.

The mobile data terminal 1 is over the remote data connection 2 with the central server unit 3 connected.

The authentication data generation unit 5 generates authentication data based on the user name and password entered by the user, an emergency doctor.

The registration unit 4 for a patient's biometric features captures the patient's biometric features and converts them to biometric data using the capture unit 4 is designed as a camera of the smartphone for biometric features of a patient in this exemplary embodiment. Here, a photo of the patient is created using the built-in camera of the smartphone.

The biometric data together with the authentication data of the authentication data generation unit 5 via the remote data connection 2 to the central server unit 3 transfer.

The remote data connection 2 is designed in this exemplary embodiment as a secure Internet connection and transmits the biometric and authentication data from the mobile data terminal 1 to the central server unit 3 ,

The central server unit 3 has an authentication module 6 , an identification module 7 and a database module 8th on.

The central server unit 3 receives the authentication and biometric data from the mobile data terminal 1 , The authentication data is sent to the authentication module 6 directed. The authentication module 6 performs authentication procedures. For this purpose, it is checked whether the data for the user are stored and whether the user is registered as being entitled to receive patient emergency data.

If the authentication process has been successfully completed, the patient's biometric data is sent from the central server unit 3 to the identification module 7 directed. The identification module 7 compares the patient's biometric data with that in the database module 8th stored biometric data in the electronic patient files. If the biometric data match, the patient emergency data is taken from the Database Engine 8th release and from the central server unit 3 via the remote data connection 2 to the mobile data terminal 1 transfer.

The mobile data terminal receives the patient emergency data and outputs it on the data output unit 9 out. In this exemplary embodiment, the data output unit is designed as a display of the smartphone.

LIST OF REFERENCE NUMBERS

1

mobile data terminal

2

Remote data connection

3

central server unit

4

acquisition unit

5

Authentication data generation unit

6

authentication module

7

identification module

8th

Database Engine

9

Data output unit

QUOTES INCLUDE IN THE DESCRIPTION

This list of documents listed by the applicant has been generated automatically and is only included for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Patent literature cited

• DE 102007032477 A1 [0003]

Claims (3)

Medical emergency data access arrangement, comprising a mobile data terminal (1), a remote data connection (2) and a central server unit (3), wherein the mobile data terminal (1) has a recording unit (4) for biometric features of a patient, by means of which biometic features can be recorded as biometric data, and an authentication data generation unit (5), by means of which authentication data can be generated, and wherein the biometric data from the mobile data terminal and the authentication data can be provided in a transferable manner, wherein the biometric data and the authentication data can be transmitted from the mobile data terminal (1) to the central server unit (3) by means of the remote data connection (2), The central server unit (3) has an authentication module (6), by means of which authentication can be carried out using the authentication data and, if authentication has taken place, access to the mobile data terminal can be enabled, the central server unit having an identification module (7), by means of which the Biometric data is identified by the patient, the central server unit having a database module (8) in which a patient emergency data record is stored, the patient emergency record which is assigned to the patient according to the identification and which can be called up and transferred from the central server unit (3) . wherein the patient emergency data record can be transmitted to the mobile data terminal (1) by means of the remote data transmission (2), and the mobile data terminal (1) is used to receive the patient emergency data record from the central server unit (3) via the remote data connection (2), and wherein the mobile data terminal (1) has a data output unit (9) by means of which patient emergency data of the patient emergency data record can be output. Device after Claim 1 , characterized in that the data output unit (9) is designed as a display of the mobile data terminal (1). Device after Claim 1 and 2 , characterized in that the detection unit (4) for biometric features of a patient is designed as a camera of a smartphone.

Images