Patent ID: 8185411

Claim:
A computer-implemented method of permitting controlled access to medical information of a patient, the method comprising: supplying medical information of the patient to a central repository by the patient and any medical providers who have treated the patient; storing and maintaining the medical information of the patient in the central repository; accessing the medical information by the patient from an access device using a unique patient identifier and a patient PIN; controlling by the patient an authorization and a scope of access to the medical information by modifying an access control list within the patient's profile when the patient is connected to the central repository, wherein the access control list lists each authorized user and the assigned role of each authorized user, wherein the scope of access includes which items of medical information are available to an assigned role and how that information will be viewed; assigning each authorized user with a unique authorized user ID and an authorized user PIN; and tracking and notifying the patient of an identity of a user who accessed the medical information, information that was accessed by the user, and when the user accessed the information.