JP2004287774A - Medical information management system, method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To disclose only necessary items to other physicians and other medical institutes and not disclose items not desired by the patient oneself to be disclosed regarding medical care information such as an electronic medical chart created in a prescribed medical institute. <P>SOLUTION: Medical care information 100 including a plurality of items 101 is stored into a storage means. Members possible to refer the medical care information are registered, items 101 possible to be disclosed among the information 100 stored in the storage means for registered each member, and the members logged in are authenticated and specified. The medical care information of the items 101 managed that it is possible to be disclosed to the authenticated members is extracted, and make it possible for the extracted medical care information to be referred only by the authenticated and specified members. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a system for managing medical information managed by a medical institution.
[0002]
[Prior art]
Currently, medical charts created at medical institutions are being digitized. This electronic medical record is transmitted over the network and can be referred to elsewhere in the medical institution or at other medical institutions, and this can be used for quick and more accurate diagnosis. Can be done. However, in the transmission of electronic medical records using such a network, various people at the transmission destination see the medical records.
[0003]
Therefore, a doctor in a medical institution possesses an IC card, encrypts the medical chart using the encryption key recorded on the IC card, and decrypts the medical chart unless it is an authorized key owner. There is something that tried to be transmitted safely so that it could not. Although this is effective for preventing a doctor who has an IC card from seeing the medical chart, it cannot exclude the leakage of the medical chart that the patient does not want to disclose personally. Therefore, there is a system that provides a method for confirming the patient's intention and gives permission to access patient information from another medical institution only when the patient's consent is obtained. (For example, Patent Document 1)
[0004]
[Patent Document 1]
[Patent Document 1] Japanese Patent Application Laid-Open No. 11-143958
[Problems to be solved by the invention]
However, even in the above-described system, once consent is obtained from the patient, all of the medical information is disclosed, and information that the patient does not want to be disclosed is seen by other doctors and other medical institutions.
[0006]
Therefore, in view of this problem, the present invention discloses only necessary information in the medical chart to other doctors and other medical institutions, and does not disclose items that the patient himself / herself does not wish to disclose. It is an object to provide a system capable of performing the above.
[0007]
[Means for Solving the Problems]
The medical information management system of the present invention includes storage means for storing medical information consisting of a plurality of items about a patient for a plurality of patients,
Member registration means for registering a member that can refer to the medical information together with authentication information for authenticating the member;
For each member registered by the registration means, a public management means for designating items that can be disclosed for each member among the items of medical information stored in the storage means;
A member authentication unit for authenticating and identifying the member who desires to refer to the medical information based on the member authentication information registered in the member registration unit;
Reference that allows the member identified by the member authenticating means to extract and refer to the medical information of the item designated as publicly accessible to the member by the public managing means from the storage means And a permission unit.
[0008]
The medical information management method of the present invention stores medical information consisting of a plurality of items about a patient for a plurality of patients,
Registering members who can refer to the medical information together with authentication information for authenticating the members,
The medical information of the items that can be disclosed among the medical information consisting of a plurality of items for the plurality of stored patients is designated for each registered member,
The member who wishes to refer to the medical information is authenticated based on the registered member authentication information, specified,
The medical information of an item designated as publicly available to the authenticated and identified member is extracted from the stored medical information and can be referred to the authenticated member. It is what.
[0009]
The program of the present invention is stored in a computer.
A procedure for storing medical information consisting of a plurality of items about a patient for a plurality of patients;
A procedure for registering a member who can refer to the medical information together with authentication information for authenticating the member;
A procedure for designating, for each registered member, medical information of an item that can be made public among medical information consisting of a plurality of items for the plurality of stored patients;
A procedure for identifying and identifying the member who wishes to refer to the medical information based on the registered member authentication information;
The authentication, a procedure for extracting the medical information of an item designated to be disclosed to the identified member from the stored medical information and making it referable to the authenticated member. To be executed.
[0010]
The “medical information” includes various patient information such as patient information such as the patient's name, sex, and age, examination information such as the results of examination of the patient, findings at the time of examination, prescriptions for drugs and treatment, etc. Information (medical chart) at the time of medical treatment is included, and this medical care information is recorded so that the information can be divided into several items and extracted.
[0011]
“Member authentication information” can uniquely identify and authenticate a user such as a user ID and password, identification information recorded on an IC card, or biometric information such as fingerprints, fundus blood vessels, voice prints, and irises. Information.
[0012]
In addition, the reference permission unit may set a flag, for example, so that only the extracted item can be referred to among the stored medical information, or the medical information of the extracted item is displayed in a predetermined public area. The medical information recorded in the public area may be referred to the authenticated member.
[0013]
The “public area” is an area that can be accessed from the terminal by a user using the computer, among the storage areas managed by the computer, and “record medical information in the public area” is an item to be disclosed. The medical information is recorded in a public area from a non-public area that the user cannot access from the terminal so that the user can access it.
[0014]
The reference permission means may make it possible to refer to the medical information of the items that can be made public recorded in the public area only for a predetermined period, and to delete the medical information after the elapse of the referenceable period.
[0015]
The member authentication information registered in the member registration unit may be biometric information, and the member authentication unit may collate using the biometric information.
[0016]
【The invention's effect】
According to the medical information management system of the present invention, members who disclose medical information are registered, and only necessary information is disclosed to each member by managing disclosure / non-disclosure for each item of medical information. It is possible to prevent disclosure of items that the patient does not wish to disclose.
[0017]
If the medical information items are recorded in the public area and made public, the original data can be prevented from being accessed by the user in the non-public area, so that the safety of the medical information is improved.
[0018]
Further, if the information is deleted from the public area after being disclosed in the public area for a predetermined period, the information is released only for a predetermined period, so that it is possible to prevent outflow of patient information due to unauthorized access.
[0019]
Furthermore, by using biometric information, unauthorized access is less likely to occur.
[0020]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, a first embodiment will be described with reference to the drawings. FIG. 1 is a diagram for explaining a medical information management system for sharing medical information among a plurality of terminals in a medical institution.
[0021]
The medical information management system 1 of the present embodiment is configured by connecting a medical information storage device 2 that stores medical information 100 to be shared and a plurality of terminals 3 that refer to the medical information 100 via a network 4.
[0022]
Input to the terminal 3 is information such as an input device such as a keyboard and a mouse, a biometric information reader that recognizes fingerprints, fundus blood vessels, voiceprints, irises, etc., and an IC card reader. Equipment. The terminal 3 may be placed in a different medical institution.
[0023]
The network 4 can use various networks such as a dedicated line, a VPN (Virtual Private Network), the Internet, a LAN (Local Area Network), a WAN (Wide Area Network), and a point-to-point. It is preferable to use a highly confidential network.
[0024]
The medical information storage device 2 is a computer or the like having a server function, and includes a large-capacity storage device such as a hard disk having a sufficient capacity for storing medical information.
[0025]
As shown in FIG. 2, the medical information storage device 2 includes a storage unit 20 (hereinafter referred to as a medical information database) that stores medical information 100 of a plurality of patients, a doctor that can refer to the medical information 100, and the like. The member registration means 21 for registering the member authentication information 110, the public management means 22 for managing items that can be disclosed in the medical information 100 for each registered member, and the logged-in member are authenticated. , Member authentication means 23 for identifying a member in order to confirm the access right of the authenticated member, extraction means 24 for extracting items of medical information 100 that can be disclosed to the authenticated member, and extracted medical information Reference permitting means 25 that allows 100 items to be logged in and referred to an authenticated member.
[0026]
As shown in FIG. 3, the medical information 100 includes a plurality of items including patient information items related to patients, examination information items obtained by examining the patients, findings at the time of examination, prescription items related to medicines and treatments, and the like. Item 101 is included.
[0027]
In the member registration means 21, as member authentication information 110 for members who can refer to medical information, a member database includes a user name, a user ID, biometric information such as fingerprints, fundus blood vessels, voice prints and irises, identification information recorded on an IC card, and the like. Register at 210. If the biometric information is registered and the member authentication means 23 performs authentication using the biometric information, it is difficult to impersonate another person and the safety becomes high.
[0028]
In the public management means 22, management is performed in accordance with the designation of which member 101 is disclosed to each item 101 of the medical information 100, and the disclosure level indicating how far each item 101 is disclosed is confirmed by confirming the patient's intention. Settings may be managed. For example, the disclosure level is set for each item 101 such that only the item name of each item 101 is disclosed, only the outline of the item 101 is disclosed, and the detailed contents of the item 101 are disclosed. The items 101 to be disclosed and the disclosure level can be set for each patient's medical information 100, or can be set for each member that can be referred to. Alternatively, disclosure / non-disclosure may be managed in units of medical institutions.
[0029]
As described above, it is also possible to determine by combining various public / private settings. For example, to which medical institution to disclose, to which doctor in that medical institution, to which doctor to disclose which item at which disclosure level, etc. It is possible to manage hierarchically.
[0030]
The member authentication means 23 authenticates the member by collating the member logged in from the terminal 3 connected to the medical information storage device 1 based on the member authentication information 110. At this time, the user name, user ID input from the terminal 3, the biometric information read from the fingerprint reading device or the like, or the identification information recorded on the IC card read from the IC card reading device is received from the terminal 3. And authenticate.
[0031]
The extraction unit 24 extracts, from the medical information 100 of each patient stored in the medical information database 20, the item 101 of the medical information 100 that can be disclosed to the members who are logged in and authenticated. Further, the items 101 that can be disclosed in the extracted medical information 100 of each patient newly create and record the items 101 that can be disclosed to each member as a record for disclosure.
[0032]
Therefore, the reference permission means 25 transmits the public record created for each patient's medical information so that it can be displayed on the terminal where each member is logged in.
[0033]
In addition, among the storage devices that store the medical information managed by the medical information storage device 2, a public area that can be accessed by the logged-in member and a non-public area that can be accessed only by the administrator are divided into those for public use. If the record for disclosure is recorded and published in the area and the original medical information 100 is stored in a non-public area, there is a risk that the original medical information 100 may be destroyed or leaked due to unauthorized access. Less. Furthermore, if the public area is provided in another public server computer, further safety is ensured.
[0034]
Further, the record for disclosure is encrypted and recorded so that the member authentication information 110 (may be a part) of the member to be referenced becomes a decryption key, and is decrypted using the member authentication information 110 of the logged-in member. If sent to the logged-in terminal 3, if the member is not a logged-in member, the contents of the public record cannot be decrypted, and if the public record is read by unauthorized access, the contents are decrypted. I can't. Alternatively, if the public record is encrypted with an encryption key corresponding to each member and stored in the public area, the decrypted information recorded on the IC card or the like possessed by each member at each terminal 3 logged in The content cannot be decrypted without decryption using the key. Further, the above-described encryption method and authentication method can be used in combination.
[0035]
Therefore, with respect to the operation of the present embodiment, the case where the medical information management system 1 refers to the medical information 100 from the terminal 3 of each medical institution as an example when public / private is set as shown in FIG. The flow will be described.
[0036]
Each item 101 of the medical information 100 is set to open / closed as shown at 221, open / closed to each medical institution as shown at 222, and 223 to doctors. It is assumed that public / private is set as shown in. In addition, a case will be described in which the doctor A is a fingerprint, the doctor B is a voiceprint, the doctor C is a fundus blood vessel, and the doctor D is a fingerprint registered in the member database 210 as the member authentication information 110 of each doctor.
[0037]
Therefore, consider a case where Doctor A refers to the medical information 100 of patient X in the medical information database 20 from the terminal 3 of hospital a.
[0038]
First, when the doctor A logs in, the member authentication means 23 authenticates the fingerprint read from, for example, a mouse or the like provided with the fingerprint reading function of the terminal 3 at hospital a.
[0039]
When the fingerprint is authenticated, the medical information 100 of the patient X can be referred to since the hospital a and the doctor A are given permission for disclosure from 222 and 223. The item 101 of the medical information 100 is set to be disclosed at a level as indicated by 221. Therefore, the extraction means 24 creates the public record 120 by extracting all the patient information from the item 101 of the medical information 100 of the patient X according to the setting of 221, extracting only the item of examination information, and extracting only the summary of the findings. (The shaded area in the figure represents the part of the item that was not extracted). The reference permission unit 25 transmits the public record 120 in a format that can be displayed on the terminal 3.
[0040]
On the other hand, let us consider a case where Dr. D tries to access the medical information 100 of patient X from b clinic. When Dr. D logs in from the terminal 3 of clinic b, the member authentication means 23 can authenticate from the read fingerprint, but is open to the clinic b from 222 and 223. Since the information is not disclosed, a message indicating that the reference permission unit 25 cannot refer to the information is transmitted to the terminal 3 of the clinic b.
[0041]
The management method for disclosure / nondisclosure of medical information described above is an example, and it is possible to manage hierarchically by combining various methods.
[0042]
As explained above, each patient's medical information can be managed as open / closed for each item and can be specified according to the members that can be referred to, so only the information required according to the patient's wishes can be specified. Can be disclosed.
[0043]
The medical information management system 1 of the second embodiment is substantially the same as the configuration of the first embodiment, but as shown in FIG. 5, the medical information storage device 2a of the second embodiment. Is configured to include a designation unit 26 that designates a period during which the item 101 of the publicly available medical information 100 recorded in the public area of the medical information storage device 2 according to the first embodiment can be referred to.
[0044]
Therefore, the reference permission unit 26 of the present embodiment publishes the public record 120 recorded in the public area, and after the designated reference period has elapsed, the items of the medical information 100 recorded in the public area. 101 is deleted so that it cannot be referenced from the terminal 3.
[0045]
Thereby, since it is made public only for a predetermined period, it is possible to prevent unauthorized access and prevent patient information from leaking out.
[0046]
Further, in each of the above-described embodiments, the access history is managed, and the medical information in which unauthorized access frequently occurs may be determined not to be disclosed because it is determined that any unauthorized activity is about to be performed. . This makes it possible to prevent information leakage due to unauthorized access.
[0047]
Furthermore, a program having the function of the above-described medical information storage device may be recorded on a recording medium such as a CD-ROM and installed in a server computer to function. Alternatively, this program can be downloaded and installed via a network.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram of a medical information management system according to the present invention. FIG. 2 is a block diagram of a medical information storage device according to a first embodiment. FIG. 3 is an example of medical information. FIG. 5 is a block diagram of the medical information storage device according to the second embodiment.
DESCRIPTION OF SYMBOLS 1 Medical information management system 2 Medical treatment information storage device 3 Terminal 4 Network 20 Storage means 21 Member registration means 22 Public management means 23 Member authentication means 24 Extraction means 25 Reference permission means 26 Specification means 100 Medical information 101 Item 110 Member authentication information 120 Public record

Claims (6)

Storage means for storing medical information about a plurality of patients for a plurality of patients;
Member registration means for registering a member that can refer to the medical information together with authentication information for authenticating the member;
For each member registered by the registration means, a public management means for designating items that can be disclosed for each member among the items of medical information stored in the storage means;
A member authentication unit for authenticating and identifying the member who desires to refer to the medical information based on the member authentication information registered in the member registration unit;
Reference that allows the member identified by the member authenticating means to extract and refer to the medical information of the item designated as publicly accessible to the member by the public managing means from the storage means A medical information management system comprising a permission unit. The reference permission means reads the medical information of the extracted item from the storage means and records it in a predetermined public area, and stores the medical information of the item recorded in the public area for the authenticated member. The medical information management system according to claim 1, wherein the medical information management system can be referred to. The reference permission unit is configured to make it possible to refer to the medical information of the items that can be made public recorded in the public area only for a predetermined period, and to delete the medical information after the period that can be referred to has elapsed. The medical information management system according to claim 2. The medical information management system according to any one of claims 1 to 3, wherein the member authentication information is biometric information. Store medical information consisting of multiple items about patients for multiple patients,
Registering members who can refer to the medical information together with authentication information for authenticating the members,
The medical information of the items that can be disclosed among the medical information consisting of a plurality of items for the plurality of stored patients is designated for each registered member,
The member who wishes to refer to the medical information is authenticated based on the registered member authentication information, specified,
The medical information of an item designated as publicly available to the authenticated and identified member is extracted from the stored medical information and can be referred to the authenticated member. Medical information management method. On the computer,
A procedure for storing medical information consisting of a plurality of items about a patient for a plurality of patients;
A procedure for registering a member who can refer to the medical information together with authentication information for authenticating the member;
A procedure for designating, for each registered member, medical information of an item that can be made public among medical information consisting of a plurality of items for the plurality of stored patients;
A procedure for identifying and identifying the member who wishes to refer to the medical information based on the registered member authentication information;
The authentication, a procedure for extracting the medical information of an item designated to be disclosed to the identified member from the stored medical information and making it referable to the authenticated member. A program to be executed.

Images