Secure on-line authentication system for processing prescription drug fulfillment

Abstract

A method of processing drug prescriptions via a communications network includes registering doctors, pharmacies and patients as participants such that each registered participant's identity is uniquely defined and determinable. Registered doctors from which prescriptions are received via the communications network have their identities authenticated. Each of the received prescriptions indicates a respective registered patient's identity for whom the prescription is intended. Registered patients from which orders are received via the communications network also have their identities authenticated. Each of the received orders indicates the prescription being ordered. The method also includes forwarding the orders to registered pharmacies via the communications network.

Having thus described the preferred embodiments, the invention is now claimed to be:  
     
         1 . A method of processing drug prescriptions via a communications network, said method comprising: 
 (a) registering doctors, pharmacies and patients as participants such that each registered participant's identity is uniquely defined and determinable;    (b) authenticating registered doctors' identities from which prescriptions are received via the communications network, each of said prescriptions indicating a respective registered patient's identity for whom the prescription is intended;    (c) authenticating registered patients' identities from which orders are received via the communications network, each of said orders indicating the prescription being ordered; and,    (d) forwarding orders to registered pharmacies via the communications network.    
     
     
         2 . The method according to    claim 1   , further comprising: 
 (e) receiving, via the communications network, confirmation from pharmacies to which orders were forwarded, each of said confirmations indicating that at least one of the following has occurred: the pharmacy has received the order, the pharmacy has accepted the order, the pharmacy is filling the order and the pharmacy has completed filling the order.    
     
     
         3 . The method according to    claim 2   , further comprising: 
 (f) forwarding, via the communications network, the received confirmations to at least one of the patient from which the corresponding order was received and the doctor from which the correspond prescription was received.    
     
     
         4 . The method according to    claim 1   , further comprising: 
 notifying registered patients via the communications network when prescriptions are received therefor.    
     
     
         5 . The method according to    claim 1   , wherein the authentication performed in steps (b) and (c) is at least two factor authentication.  
     
     
         6 . The method according to    claim 1   , wherein prescriptions and orders are not accepted from doctors and patients, respectively, which do not have their identities authenticated.  
     
     
         7 . The method according to    claim 1   , wherein the identity of at least one of the doctor and the patient is withheld from the pharmacy to which the order is forwarded.  
     
     
         8 . A prescription drug fulfillment system comprising: 
 a computer connected to a communications network;    means for registering doctors, pharmacies and patients as participants such that each registered participant's identity is uniquely defined and determinable;    a central database accessible by the computer, said central database containing accounts created by the registering means for each registered participant, said accounts including identifying data collected by the registering means;    means for authenticating registered participants' identities, said authentication means collecting authentication data from participants via the communications network and comparing it to corresponding data from account records in the central database such that when there is a match the participant providing the authentication data is deemed to be the registered participant to which the account relates;    means for receiving, via the communications network, prescriptions from authenticated doctors, each of said prescriptions indicating a respective registered patient's identity for whom the prescription is intended;    means for receiving, via the communications network, orders from authenticated patients, each of said orders indicating the prescription being ordered; and,    means for forwarding orders to registered pharmacies via the communications network.    
     
     
         9 . The prescription drug fulfillment system according to    claim 8   , wherein the communications network is the Internet.  
     
     
         10 . The prescription drug fulfillment system according to    claim 8   , further including means for receiving, via the communications network, confirmation from pharmacies to which orders were forwarded, each of said confirmations indicating that at least one of the following has occurred: the pharmacy has received the order, the pharmacy has accepted the order, the pharmacy is filling the order and the pharmacy has completed filling the order.  
     
     
         11 . The prescription drug fulfillment system according to    claim 10   , further including means for forwarding, via the communications network, the received confirmations to at least one of the patient from which the corresponding order was received and the doctor from which the correspond prescription was received.  
     
     
         12 . The prescription drug fulfillment system according to    claim 8   , further including means for notifying registered patients via the communications network when prescriptions are received therefor.  
     
     
         13 . The prescription drug fulfillment system according to    claim 8   , wherein the authentication means employs at least two factor authentication.  
     
     
         14 . The prescription drug fulfillment system according to    claim 8   , wherein the means for receiving prescriptions and orders does not accept prescriptions and orders from doctors and patients, respectively, which do not have their identities authenticated.  
     
     
         15 . The prescription drug fulfillment system according to    claim 8   , wherein the means for forwarding orders withholds at least one of the doctor's identity and the patient's identity from the pharmacy to which the order is forwarded.  
     
     
         16 . A method of regulating access via a communications network to medical/pharmaceutical data maintained by a record holder having a presence on the communications network, said method comprising: 
 (a) providing access controls which are selectively set by an account holder, said account holder having medical/pharmaceutical data related thereto maintained by the record holder, said access controls specifying a level of authorization to be granted to identified requestors seeking access to medical/pharmaceutical data;    (b) receiving, via the communications network, a contact from a requestor seeking access to the medical/pharmaceutical data maintained by the record holder;    (c) authenticating the requestor's identity; and,    (d) granting the identified requester the specified level of authorization determined from the access controls.    
     
     
         17 . The method according to    claim 16   , wherein the provided access controls specify the level of authorization to be granted to a whole class of requesters.  
     
     
         18 . The method according to    claim 16   , wherein a determined level of authorization permits a requestor to carry out at least one of the following: writing prescriptions for the account holder, ordering prescriptions for the account holder, filling a prescription for the account holder, receiving the medical/pharmaceutical data from the record holder, and modifying the medical/pharmaceutical data maintained by the record holder.  
     
     
         19 . The method according to    claim 16   , wherein the identity of the requester is not revealed to the record holder.