JP2005100454A - Health information management server and program - Google Patents

Abstract

【Task】
Provided is a health information management server for sharing health information among a plurality of medical institutions while protecting user privacy.
[Solution]
The health information management server 20 that receives and manages health information related to the health of the user stores the health information in association with the user identification information and the user's biometric information for authenticating the user, When the user uses the medical institution, the user identification information and the biological information are received from the medical institution terminal of the medical institution, and the received user identification information and the biological information are stored in association with the health information database. A health determining unit 204 for determining whether or not the health information is transmitted to the medical institution terminal when the user determining unit determines that the received user identification information and biometric information are stored in association with each other. And an information transmission unit 206.
[Selection] Figure 2

Description

  The present invention relates to a health information management server and a program. In particular, the present invention relates to a health information management server and program for receiving and managing health information related to user health.

  Conventionally, when a user visits a medical institution for the first time, he or she explains his health condition verbally or enters his / her health information on a questionnaire by hand. In recent years, electronic medical records and electronic receipts are becoming widespread, and user health information has begun to be shared among medical institutions affiliated with each other.

  When a user explains health information verbally or when hand-filling health information on a medical questionnaire, the user may remember the health information by mistake or make an incorrect entry. You may not be able to convey health information. Furthermore, if the medical condition is bad, it may be difficult to explain or fill in verbally. In addition, sharing health information such as an electronic medical record between medical institutions affiliated with each other may involve a problem of user privacy.

  Then, an object of this invention is to provide the health information management server and program which can solve said subject. This object is achieved by a combination of features described in the independent claims. The dependent claims define further advantageous specific examples of the present invention.

  That is, according to the first aspect of the present invention, a health information management server that receives and manages health information related to the health of the user, and authenticates the user's health information, user identification information for identifying the user, and the user A health information database stored in association with the IC card information indicating the user's biometric information and the IC card owned by the user, and the user's health information together with the IC card information and the user identification information, and received from the user terminal When the IC card information is stored in association with the user identification information in the health information database, the health information receiving unit that stores the received health information in the health information database, and when the user uses a medical institution, The user identification information and biometric information provided by the user are received from the medical institution terminal of the medical institution, and the received user identification is received. A user determination unit that determines whether information and biometric information are stored in association with the health information database, and the received user identification information and biometric information are stored in association with the health information database. A health information transmitting unit that extracts health information stored in association with the user from the health information database and transmits the health information to the medical institution terminal.

  The health information database encrypts the received health information with the first encrypted health information encrypted with the first key and the second key different from the first key. The encrypted health information is stored in association with the user identification information, and a first decryption key for decrypting the first encrypted health information and a second decryption key for decrypting the second encrypted health information The user terminal further includes a key transmission unit that transmits to the user terminal, and the user terminal transmits the received second decryption key to the trustee, and receives the fact that the user is in an emergency from the medical institution terminal. The health information transmission unit further acquires the user identification information from the trustee when the user is notified from the medical institution terminal that the user is in an emergency. The second darkness stored in association with the user identification information The user identification information and the biometric information received by the user determination unit are associated with the health information database when the health information is transmitted to the trustee and the user is not receiving an emergency message from the medical institution terminal. The first encrypted health information may be transmitted to the medical institution terminal only when it is determined that the information is stored.

  The trustee is an insurance company that provides the insurance that the user has subscribed to, and the emergency notification section informs the medical institution terminal whether to pay the insurance money based on the health information transmitted by the health information transmission section. In order to do so, the trustor may be notified that the user is in an emergency.

  The health information database further includes a level storage unit that stores the item information indicating the health information item in association with the level indicating the importance level of the health information, and the health information database receives the health information together with the item information indicating the health information item. The health information is stored in association with the item information, and the health information transmission unit receives the level of the health information requested for transmission from the medical institution terminal, and associates the item with the item information corresponding to the received level and the user. The stored health information may be extracted from the health information database and transmitted to the medical institution terminal.

  You may further provide the disclosure item setting part which receives item information and a level from a user terminal, and stores it in a level storage part.

  The level storage unit stores the item information and the level in association with the user, the disclosure item setting unit receives the item information and the level together with the user identification information and the biological information, and the received user identification information and the biological information are health information. When stored in association with the database, the level storage unit may be updated based on the received item information and level.

  The level storage unit further stores the health information input means in association with the level, and the health information database stores the health information when the health information is received by the input means stored in the level storage unit. Also good.

  The level storage unit may further store the health information output unit in association with the level, and the health information transmission unit may transmit the health information to the medical institution terminal using the output unit corresponding to the extracted level. .

  The health information may be medical chart data for the user. The health information may be allergy information indicating the user's allergy.

  The health information includes drug information indicating the medicine taken by the user, acquires information indicating the side effect of the drug, and if the risk of the acquired side effect is equal to or greater than a certain value, the health information is stored in the user terminal possessed by the user. You may further provide the risk transmission part which transmits the information which shows a risk.

  Based on the health information stored in the health information database when the exercise information indicating that the user is exercising is received from the exercise institution terminal possessed by the exercise institution equipped with the device for causing the user to perform physical exercise An exercise amount transmitting unit that calculates an exercise amount suitable for the user and transmits the exercise amount to the exercise engine terminal may be further provided.

  When the information indicating that the user has exercised an amount of exercise equal to or greater than the amount of exercise transmitted by the exercise amount transmission unit is received from the exercise engine terminal, warning information is transmitted to the exercise engine terminal so as to stop the exercise for the user. A part may be further provided.

  The health information database stores the IP address of the IC card owned by the user as IC card information, and the user determination unit receives the user identification information and the IP address of the IC card from the medical institution terminal, and receives the received user identification. It is determined whether the information and the IP address are stored in association with the health information database, and the health information transmitting unit stores the received user identification information and the IP address in association with the health information database. If the user determination unit determines that the health information is present, the health information may be transmitted to the medical institution terminal via the IC card.

  According to a second aspect of the present invention, there is provided a computer program for receiving and managing health information related to a user's health, for authenticating the user's health information, user identification information for identifying the user, and the user. The health information management function for managing the user's biometric information and the IC card information indicating the IC card owned by the user, and the user's health information are received from the user terminal together with the IC card information and the user identification information, and received. When the IC card information is stored in association with the user identification information in the health information management function, the health information receiving function for storing the received health information in the health information function, and when the user uses a medical institution The user identification information and the biometric information provided by the user are received from the medical institution terminal of the medical institution, and the received user identification information and When it is determined that the user determination function for determining whether the body information is managed in association with each other and the received user identification information and biological information are stored in association with the health information database, A health information transmission function for extracting the health information stored in association with the user and transmitting the health information to the medical institution terminal;

  The above summary of the invention does not enumerate all the necessary features of the present invention, and sub-combinations of these feature groups can also be the invention.

  As is apparent from the above description, according to the present invention, correct health information can be shared among a plurality of medical institutions while protecting user privacy.

  The present invention will be described below through embodiments of the invention. However, the following embodiments do not limit the invention according to the claims, and all combinations of features described in the embodiments are described below. However, this is not always essential for the solution of the invention.

  FIG. 1 is a schematic diagram showing the entire health information management system 100 according to the present embodiment. The health information management system 100 accumulates user medical chart data and the like, and provides the accumulated health information to a medical institution or the like as necessary.

  The health information management system 100 includes a health information management server 20 that accumulates and manages user health information, a user terminal 30 and a medical institution terminal 50 that transmit health information to the health information management server 20 via the network 10, When a user exercises in a sports club as an example of an athletic institution, a sports club terminal (exercise institution terminal) 64 that transmits the fact to the health information management server 20 via the network 10 and an emergency such as an unconscious user In this case, an insurance company terminal 40 that can receive the health information of the user from the health information management server 20 is provided.

  The sports club 60 is provided with a sports club terminal 64 and an exercise device 62 that can be used by the user. The sports club terminal 64 is connected to the exercise device 62, and can transmit the usage status to the health information management server 20 when the user uses the exercise device 62. The medical institution terminal 50 is installed in a medical institution. The medical institution may be an inspection institution equipped with a medical device such as a medical scan device, an ambulance, or any institution that engages in medical treatment. The medical institution terminal 50 can transmit health information such as examination results to the health information management server 20. Further, when the user is brought into a medical institution by an ambulance or the like in an emergency such as unconsciousness, the medical institution terminal 50 can notify the health information management server 20 to that effect.

  Thereby, the health information management server 20 accumulates the health information received from the user terminal 30 and the medical institution terminal 50 and provides it to the medical institution terminal 50 and the insurance company terminal 40, so that the user's health status and the user can You can manage your insurance coverage.

  FIG. 2 is a block diagram showing a functional configuration of the health information management server 20. The health information management server 20 has a health information database 220 that stores health information. The health information database 220 also functions as a level storage unit, and includes an authentication file 222 and a health information file 224. The authentication file 222 stores biometric information indicating the characteristics of the user's biometric, IC card information indicating an IC card possessed by the user, and the like in association with the user identification information. The health information file 224 stores user health information in association with user identification information.

  The health information management server 20 receives the health information from the user terminal 30 together with the user's IC card information and user identification information, and the received IC card information is stored in the authentication file 222 in association with the user identification information. The health information receiving unit 202 that stores the received health information in the health information file 224, and when the user uses the medical institution, the user's biometric information and user identification information are received from the medical institution terminal 50 and received. If it is determined that the biometric information is stored in the authentication file 222 in association with the user identification information, and the user determination unit 204 determines that the received biometric information is stored in the authentication file 222, the health information Is transmitted to the medical institution terminal 50.

  As described above, the health information management server 20 can store the received health information when it is determined that the received IC card information is the same as the IC card information stored in the authentication file 222 in advance. it can. The health information management server 20 can provide the medical institution terminal 50 when the received biometric information and the biometric information stored in the authentication file 222 in advance are biometric information of the same person. .

  Also, the health information management server 20 receives item information indicating items of health information to be provided to the medical institution from the user terminal 30 for each usage purpose level of the medical institution and stores it in the authentication file 222. 200.

  Thereby, the health information management server 20 can select and transmit the health information to be transmitted to the medical institution terminal 50 according to the purpose of the user who uses the medical institution.

  In addition, when the health information stored in the health information file 224 includes information indicating the medicine taken by the user, the health information management server 20 acquires information indicating the side effect of the drug from the network 10 and acquires the acquired side effect. The risk level transmission unit 208 further transmits information indicating the risk level of a side effect to the user terminal 30 when the risk level is equal to or greater than a certain value.

  In addition, when the health information management server 20 receives the fact that the user is exercising from the sports club terminal 64, the health information management server 20 calculates an exercise amount suitable for the user based on the health information stored in the health information file 224. When the exercise amount transmitting unit 210 that transmits to the sports club terminal 64 and information indicating that the user has exercised an amount of exercise that is equal to or greater than the amount of exercise transmitted by the exercise amount transmitting unit 210 is received from the sport club terminal 64, the user is exercised. A warning information transmission unit 212 is further provided for transmitting warning information to the sports club terminal 64 so as to be stopped.

  Thereby, the health information management server 20 prompts the user to perform an appropriate amount of exercise in the sports club, and can transmit warning information to the sports club terminal 64 when the user performs excessive exercise.

  The health information management server 20 stores a key for encrypting the health information in the authentication file 222 in association with the user identification information, and receives the key for decrypting the encrypted health information from the user terminal 30 as the trustee. In order to transmit to the insurance company terminal 40 of the insurance company, when the key transmission unit 216 that transmits to the user terminal 30 and the medical institution terminal 50 that the user is in an emergency such as unconsciousness, the fact is It further has an emergency notification unit 214 that notifies the company terminal 40.

  At this time, when the health information transmission unit 206 receives a request for the user's health information from the insurance company terminal 40 that has notified that the situation is an emergency, together with the user identification information, the health information is received using the key stored in the authentication file 222. The encrypted data is transmitted to the insurance company terminal 40. The insurance company terminal 40 can decrypt the encrypted health information using the key received from the user terminal 30.

  Thereby, even when the user is in an emergency and the user's biometric information cannot be acquired, the insurance company terminal 40 can browse the health information by receiving the key from the user in advance. On the other hand, the health information management server 20 does not transmit health information to the insurance company terminal 40 when the user is not in an emergency. Therefore, the health information management server 20 can prevent unnecessary leakage of health information.

  In addition, the insurance company terminal 40 can determine whether or not the insurance premium paid by the user is paid based on the health information by browsing the health information when the user is in an emergency. The insurance company terminal 40 can transfer health information to the medical institution terminal 50.

  The recording medium 22 includes a disclosed item setting unit 200, a health information receiving unit 202, a user determining unit 204, a health information transmitting unit 206, a risk level transmitting unit 208, an exercise amount transmitting unit 210, a warning information transmitting unit 212, and an emergency situation notifying unit 214. , And a program for causing the key transmission unit 216 to operate. As another method, the health information management server 20 may acquire such a program via a communication line.

  FIG. 3 shows an example of the data format of the authentication file 222. The authentication file 222 includes information indicating a key for encrypting health information, user biometric information, IC card information indicating an IC card possessed by the user, input settings for inputting health information, and information for outputting health information. The output setting and information indicating the insurance company that provides the insurance to which the user is subscribed are stored in association with the user identification information.

  Normally, the health information management server 20 transmits health information only when the user's biological information is received. However, when the medical institution or the insurance company cannot acquire the user's biometric information because the user is in an emergency such as unconsciousness, the health information management server 20 does not receive the biometric information. Health information can be encrypted and transmitted only to trustees who have been previously authorized by the user.

  The key for encrypting the health information is a key for encrypting and transmitting the health information to a trustee such as an insurance company that has previously obtained permission from the user. Since the insurance company terminal 40 has received the key for decrypting the encrypted health information from the user terminal 30 in advance, the insurance company terminal 40 can decrypt and view the encrypted health information. The insurance company terminal 40 can transfer the decrypted health information to the medical institution terminal 50.

  The biometric information of the user is information indicating physical characteristics unique to each individual such as a fingerprint, retina, and human phase, and biometric authentication is performed by collating with the biometric information received by the health information management server 20 from the medical institution terminal 50. .

  The IC card information is the same information stored in the IC card possessed by the user, and the health information management server 20 stores the IC card information received from the user terminal 30 and the authentication file 222. The user is authenticated when the existing IC card information is the same.

  The IC card information may be an IP address of the IC card. The medical institution terminal 50 connects to the health information management server 20 using the IP address of the IC card. In this case, the health information management server 20 holds the IP address of the IC card, and transmits health information only when accessed from an IC card having the same IP address as the held IP address. be able to. The medical institution terminal 50 receives health information from the health information management server 20 via the IC card. The IC card may hold a key for decrypting the encrypted health information. For example, the IC card obtains health information using an IP address. When the health information is encrypted, the IC card decrypts the health information and sends image information indicating the health information to the medical institution terminal 50. The medical institution terminal 50 displays the received image information. In this way, the IC card can acquire health information using the CPU and application of the IC card itself. Accordingly, it is possible to prevent the medical institution terminal 50 from registering a decryption key for decrypting the encrypted health information and a browsing application for browsing the health information.

  The input setting field stores item information indicating items of health information and means for inputting health information in association with input levels indicating importance of health information. The input setting field stores item information and input means set by the user in association with the input level.

  For example, when the user determines that the importance of “marketed medicine”, “drinking amount”, “visit history”, “vitamin”, and “slight illness and injury” in the item information is normal. The item information is stored in association with level 1. In addition, when the importance of “examination information” and “allergy” in the item information is slightly higher, that is, when the user desires disclosure only at the time of a somewhat important medical practice, these item information is level 2 Are stored in association with each other. Further, when the importance of the “medical record” of the item information is the highest, that is, when the user desires to disclose only at the most important medical practice, the “medical record” is stored in association with the level 3. The

  Next, the input means will be described. For example, when “PDA”, “encrypted mail”, and “IC card authentication” are stored as input means corresponding to level 1, the health information management server 20 includes items of health information corresponding to level 1 Only the health information transmitted from the PDA terminal as encrypted mail and subjected to IC card authentication is stored in association with level 1.

  The output setting field stores the item information and health information output means in association with the output level indicating the importance of the health information. The output setting field stores item information and output means set by the user in association with output levels. The setting of the item information in the output setting field is the same as the setting of the item information in the input setting field, and thus the description thereof is omitted.

  The output means will be described. For example, when “encrypted mail” and “IC card authentication” are stored as output means corresponding to level 1, the health information management server 20 converts the health information of the item corresponding to level 1 into encrypted mail, The IC card authentication of the medical institution that requested the health information is performed and transmitted only to the authenticated medical institution terminal 50.

  As described above, the health information management server 20 can extract the health information to be transmitted for each level, and can select and transmit the output means for each level.

  Further, by storing the information indicating the insurance company in the authentication file 222, the health information management server 20 immediately notifies the insurance company that is the trustor of the user when the user is in an emergency such as unconsciousness. can do. In addition, when the insurance that the user subscribes to is nursing care cost insurance or sleeping insurance, the user himself / herself may forget that he / she has also joined the insurance. Therefore, when the authentication file 222 stores the insurance company, the health information management server 20 can contact the insurance company when an unaccompanied elderly person enters an emergency such as unconsciousness.

  The authentication file 222 may further store not only the insurance company but also the type of insurance and insurance premiums. Thereby, the health information management server 20 can provide information on the insurance to which the user is subscribed immediately in response to an inquiry from the user. The health information management server 20 can prompt the insurance company to pay the insurance premium.

  FIG. 4 shows an example of the data format of the health information file 224. The health information file 224 stores health information in association with user identification information. The health information is information indicating contents such as medical record data, allergies, screening information, medicine information, sports club information, medical history, alcohol consumption, presence / absence of smoking, minor injuries and diseases. The medical record data includes, for example, image data such as CT, MRI, and PET, and digital data such as an electrocardiogram.

  The screening information is a result when the user performs a medical checkup such as a health checkup. The drug information may be information indicating a commercially available drug or a prescription. Sports club information is a record of exercise performed by the user in the sports club, such as the amount of exercise the user exercised in the sports club and the physical fitness rank indicating the degree of physical fitness of the user measured in the sports club. Information received from the user terminal 30 may be used.

  As described above, the health information file 224 stores the health information in association with the user identification information, so that the health information management server 20 can transmit the health information to the medical institution terminal 50.

  FIG. 5 is a flowchart showing the operation of the health information management server 20 when setting items associated with each level. The disclosure item setting unit 200 receives IC card information, user identification information, and setting contents from the user terminal 30 (S100). Here, the setting contents are contents of input setting or output setting. In the case of input setting, item information, input means, and input level. In the case of output setting, item information, output means, and output. Is a level.

  When the received IC card information is the same as the IC card information stored in the authentication file 222 in association with the received user identification information, the disclosed item setting unit 200 corresponds to the user identification information. Then, it is stored in the authentication file 222 (S101).

  Next, the key transmission unit 216 stores a key for encrypting health information in the authentication file 222, and transmits a key for decrypting the encrypted health information to the user terminal 30 (S102).

  Through the above operation, the health information management server 20 can perform initial input settings and output settings. That is, the user can issue an IC card at a partner sports club or partner medical institution of the health information management server 20, and can make an initial setting using the issued IC card.

  Next, when the disclosure item setting unit 200 receives the level, item information, user identification information, and biometric information (S104), the biometric information stored in the authentication file 222 in association with the received user identification information is received. It is determined whether the biometric information matches (S106). Next, when the user is authenticated by determining that the biometric information stored in the authentication file 222 matches the received biometric information, the disclosed item setting unit 200 associates the item information with the received level. The authentication file 222 is updated by storing in the authentication file 222 (S108).

  Thus, the disclosed item setting unit 200 can update the setting contents of the authentication file 222. Here, since the disclosure item setting unit 200 performs user authentication, it is possible to prevent a third party from impersonating the user and updating the setting contents.

  Next, when the health information receiving unit 202 receives item information, health information, user identification information, and biometric information from the user terminal 30 (S110), the health information receiving unit 202 stores them in the authentication file 222 in association with the received user identification information. It is determined whether or not the biological information matches the received biological information. The health information receiving unit 202 extracts the input means stored in the authentication file 222 in association with the received item information, and determines whether the health information has been transmitted by the extracted input means (S112).

  When the health information receiving unit 202 determines that the biometric information stored in the authentication file 222 matches the received biometric information and the health information has been transmitted by the extracted input means, the health information is received. Then, it is stored in the health information file 224 in association with the received user identification information and item information (S114).

  As described above, the health information receiving unit 202 can store the health information by storing it in the health information file 224. Further, since the health information receiving unit 202 authenticates the user using the biometric information, it is possible to prevent a third party from impersonating the user and transmitting the health information.

  FIG. 6 is a flowchart showing the operation of the health information management server 20 when transmitting health information. When the user determination unit 204 receives the user identification information, the output level, and the biological information from the medical institution terminal 50 together with the request for health information (S200), the user determination unit 204 is stored in the authentication file 222 in association with the received user identification information. It is determined whether or not the existing biometric information matches the received biometric information (S202). Here, the output level indicates the level of the purpose of use of the medical institution. The purpose of use of the medical institution is, for example, any one of normal medical examination, medical checkup, medical checkup, hospitalization, and surgery, and each purpose of use is associated with a level in advance.

  When the user determining unit 204 determines that the biometric information stored in the authentication file 222 in association with the received user identification information matches the received biometric information, the health information transmitting unit 206 receives the received output level. The health information corresponding to the item information stored in the authentication file 222 in association with is extracted from the health information file 224 (S204). Next, the health information transmitting unit 206 transmits the health information to the medical institution terminal 50 using the output means stored in the authentication file 222 in association with the received output level (S206).

  As described above, when the health information management server 20 authenticates the user using the biometric information, the health information is transmitted. Therefore, it is possible to prevent the medical institution from acquiring the health information without the user's permission. The health information transmission unit 206 transmits the health information using an output unit corresponding to the output level. Therefore, the health information transmitting unit 206 can transmit the health information using an output unit with high safety according to the importance of the health information. As described above, the health information management server 20 can provide health information to a plurality of medical institutions while protecting the privacy of the user.

  Moreover, since the medical institution can acquire the accumulated health information, it is possible to acquire health information that cannot be explained by the user, such as detailed contents of medical record data. Therefore, the medical institution can prevent misdiagnosis and duplicate diagnosis, and can provide more appropriate medical care to the user.

  FIG. 7 is a flowchart showing the operation of the health information management server 20 when acquiring the side effects of the medicine taken by the user. The risk transmission unit 208 periodically refers to the health information file 224, and retrieves and obtains a web page describing side effects of the medicine specified by the stored medicine information from the Internet (S300).

  Next, the risk level transmission unit 208 determines the risk level of the side effect based on the character string included in the acquired description of the side effect. Specifically, the risk transmission unit 208 determines the risk level to be a high value when a character string indicating a high-risk symptom is included in the side effect description. Next, when the determined risk level is equal to or greater than a certain value (S302), the risk level transmission unit 208 transmits information indicating the risk level to the user terminal 30 (S304).

  As described above, when the risk level of the side effect of the medicine taken by the user is high, the risk level transmission unit 208 can notify the user to that effect. The health information management server 20 may acquire information indicating medical treatment suitable for the user based on health information other than the medicine information and notify the user terminal 30 of the information. For example, when the user has allergic symptoms, the health information management server 20 may acquire advice from the allergy specialist and transmit it to the user terminal 30. The health information management server 20 may acquire not only drug information and allergies, but also information related to improvement in medical history and physical strength, and type of insurance coverage, and may transmit the information to the user terminal 30.

  FIG. 8 is a flowchart showing the operation of the health information management server 20 when the user has received information that he / she has started exercising at a sports club. When the exercise amount transmission unit 210 of the health information management server 20 receives from the sports club terminal 64 that the user has started exercising along with the type of exercise together with the user identification information (S400), the exercise information in the sports club information field of the health information file 224 The physical fitness rank is referred to, and the amount of exercise suitable for the user is calculated based on the referenced physical fitness rank and the type of exercise received, and transmitted to the sports club terminal 64 (S402).

  For example, a sports club terminal 64 is installed in a sports club exercise device 62, and the sports club terminal 64 informs the health information management server 20 that the exercise has started when the user inputs user identification information and starts exercise. An automatic transmission system may be used. Thereby, the health information management server 20 can prompt the user to perform an appropriate amount of exercise according to the type of exercise.

  Next, when the exercise amount transmitting unit 210 receives from the sports club terminal 64 that the user has exercised an exercise amount equal to or greater than the transmitted exercise amount (S404), warning information is sent to the sports club terminal 64 to stop the user from exercising. Transmit (S406).

  Thereby, the health information management server 20 can transmit warning information to the sports club terminal 64 when the user performs excessive exercise. The health information management server 20 may exchange data with the user terminal 30 instead of the sports club terminal 64.

  FIG. 9 is a flowchart showing the operation of the health information management server 20 when it is received that the user's state is an emergency. When the user is notified that the user is in an emergency such as unconsciousness (S500), the emergency notification unit 214 notifies the insurance company by transmitting the fact to the insurance company terminal 40 (S502). Next, when the health information transmission unit 206 receives a request for health information from the insurance company terminal 40 together with the user identification information (S504), the health information transmission unit 206 uses the key stored in the authentication file 222 in association with the received user identification information. It is used to encrypt the health information (S506). Next, the health information transmitting unit 206 transmits the encrypted health information to the insurance company terminal 40 (S508).

  As described above, the health information management server 20 can transmit encrypted health information that can be decrypted only to the insurance company that is the trustee of the user when the user is in an emergency such as unconsciousness.

  As a result, the insurance company as a trustor who is entrusted with being involved in the health of the customer for a lifetime such as long-term care insurance, the health information accumulated by the user via the health information management server 20 as needed. You can browse. In other words, an insurance company cannot normally browse health information without the user's permission, but can only browse health information using a key in the case of an emergency situation where the user is moribund. .

  Here, for example, the health information management server 20 encrypts the health information using the public key (first key) when the user has not received an emergency from the medical institution terminal 50, that is, normally The converted first encrypted health information is transmitted to the medical institution terminal 50. Here, the health information management server 20 receives the user's public key from the user in advance. The medical institution terminal 50 decrypts the first encrypted health information using, for example, a secret key (first decryption key) stored in the IC card and corresponding to the public key. As described above, the health information management server 20 normally performs mutual authentication using, for example, PKI (public key encryption technology) with high security, so that the health information can be prevented from being wiretapped.

  On the other hand, when the user receives an emergency message from the medical institution terminal 50, the health information management device 20 encrypts the health information using the secret key, and receives the encrypted second encrypted health information. To the insurance company terminal 40. The insurance company terminal 40 uses the private key (second decryption key) received from the user terminal 30 to decrypt the second encrypted health information. Here, the secret key is not stored in the user terminal 30 or the IC card. Therefore, the user himself / herself cannot decrypt the health information encrypted using the secret key. When the health information is input from the user terminal 30, the health information management server 20 temporarily stores all the health information using the PKI, and secretly stores some health information that can be viewed by the insurance company terminal 40 in an emergency. Encrypt with key and save further.

  FIG. 10 shows an example of a display screen of the user terminal 30 when the user inputs setting contents in S100 of FIG. When receiving the initial setting request from the user terminal 30, the health information management server 20 causes the user terminal 30 to display the screen illustrated in FIG.

  FIG. 10A displays a plurality of input levels, a plurality of output levels, and radio buttons corresponding to the respective levels. The user selects a radio button 32 corresponding to one level (here, “input level 1”) for which setting contents are desired to be input from the input level and output level displayed in FIG. Information is entered into the field 36 and the send button 34 is clicked.

  Next, the user terminal 30 displays the screen shown in FIG. FIG. 10B displays item information and input means that can be selected by the user. Here, the user sets the terminal and security as input means. The user displays a plurality of items in the field 38, a plurality of terminals, a plurality of security means, and check boxes corresponding thereto. The user clicks a check box corresponding to a terminal desiring to input health information at input level 1 among the terminals described in the “terminal setting” range.

  Next, the user clicks a check box corresponding to a desired security measure when receiving health information from the terminal at the input level 1 among the security measures described in the “security setting” range. For example, when it is desired to transmit health information by encrypted mail, the user clicks a check box corresponding to the encrypted mail.

  Next, the user clicks the check box corresponding to the item of health information that the user desires to input as the input level 1 among the items described in the “item setting” range.

  When the user completes all the above operations and clicks the send button 34, the user terminal 30 transmits the setting contents shown in FIG. 10B to the health information management server 20.

  Fig.11 (a) shows the example of a screen which the user terminal 30 displays, when a user inputs the content of the prescription as an example of health information. The user can select a prescription date and time, a drug code, and a quantity from the drop-down menu, and enter a comment if necessary. The user terminal 30 transmits the described health information to the health information management server 20.

  FIG. 11B shows a display screen example of the medical institution terminal 50 for the health information transmitted by the health information management server 20. The medical institution terminal 50 can display medical history, allergies, examination information, and the like so that the doctor and the user can view the health information.

  FIG. 12 shows a display screen example of the user terminal 30 for the health information transmitted by the health information management server 20. The health information management server 20 can periodically acquire advice on the health of the user based on the health information, and can transmit the information shown in FIG. 12 to the user terminal 30 for display.

  As mentioned above, although this invention was demonstrated using embodiment, the technical scope of this invention is not limited to the range as described in the said embodiment. Various changes or improvements can be added to the above embodiment. It is apparent from the description of the scope of claims that embodiments with such changes or improvements can be included in the technical scope of the present invention.

It is the schematic which shows the whole health information management system 100 which concerns on this Embodiment. 3 is a block diagram showing a functional configuration of a health information management server 20. FIG. It is a figure which shows an example of the data format of the authentication file 222. FIG. It is a figure which shows an example of the data format of the health information file. It is a flowchart which shows operation | movement of the health information management server 20 at the time of setting the item matched with each level. It is a flowchart which shows operation | movement of the health information management server 20 at the time of transmitting health information. It is a flowchart which shows operation | movement of the health information management server 20 at the time of acquiring the side effect of the medicine which the user took. It is a flowchart which shows operation | movement of the health information management server 20 at the time of receiving that the user started the exercise in a sports club. It is a flowchart which shows operation | movement of the health information management server 20 at the time of receiving that the state of a user is an emergency. It is a figure which shows the example of a display screen of the user terminal 30 at the time of a user inputting setting content in S100 of FIG. FIG. 10A displays a plurality of input levels, a plurality of output levels, and radio buttons corresponding to the respective levels. FIG. 10B displays item information and input means that can be selected by the user. FIG. 11A is a diagram illustrating an example of a screen displayed by the user terminal 30 when the user inputs the contents of a prescription as an example of health information. FIG. 11B is a diagram showing an example of a display screen of the medical institution terminal 50 for the health information transmitted by the health information management server 20. It is a figure which shows the example of a display screen of the user terminal 30 of health off which the health information management server 20 transmitted.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Network 20 Health information management server 22 Recording medium 30 User terminal 40 Insurance company terminal 50 Medical institution terminal 60 Sports club terminal 200 Disclosure item setting part 202 Health information receiving part 204 User judgment part 206 Health information transmitting part 208 Risk degree transmitting part 210 Exercise amount transmission unit 212 Warning information transmission unit 214 Emergency notification unit 216 Key transmission unit 216
220 Health information database 222 Authentication file 224 Health information file

Claims (15)

A health information management server that receives and manages health information related to user health,
A health information database that stores the health information of the user in association with user identification information for identifying the user, biometric information of the user for authenticating the user, and IC card information indicating an IC card owned by the user When,
When the health information of the user is received from a user terminal together with the IC card information and the user identification information, and the received IC card information is stored in association with the user identification information in the health information database, A health information receiving unit for storing the received health information in the health information database;
When the user uses a medical institution, the user identification information provided by the user and the biological information are received from a medical institution terminal of the medical institution, and the received user identification information and the biological information are , A user determination unit for determining whether or not stored in association with the health information database;
When the user determination unit determines that the received user identification information and the biological information are stored in association with the health information database, the health information stored in association with the user is A health information management server comprising: a health information transmission unit that extracts from the health information database and transmits to the medical institution terminal. The health information database encrypts the received health information using a first encrypted health information encrypted using a first key and a second key different from the first key. 2 encrypted health information in association with the user identification information,
A key transmission unit for transmitting a first decryption key for decrypting the first encrypted health information and a second decryption key for decrypting the second encrypted health information to a user terminal;
The user terminal transmits the received second decryption key to the trustee,
When receiving from the medical institution terminal that the user is in an emergency, further comprising an emergency notification unit to notify the trustee of the user to that effect,
The health information transmission unit
When the user receives an emergency message from the medical institution terminal, the user identification information is acquired from the trustee, and the second encryption stored in association with the acquired user identification information Send health information to the trustee,
The user identification information and the biological information received by the user determination unit when the user has not received an emergency from the medical institution terminal are stored in association with the health information database. The health information management server according to claim 1, wherein the first encrypted health information is transmitted to the medical institution terminal only when it is determined. The trustee is an insurance company that provides insurance to which the user has subscribed,
The emergency notification unit notifies the trustee that the user is in an emergency state so that the medical institution terminal can tell whether or not to pay the insurance money based on the health information transmitted by the health information transmission unit. The health information management server according to claim 2, wherein the health information management server is notified. A level storage unit that stores the item information indicating the item of the health information in association with the level indicating the importance of the health information;
The health information database receives the health information together with item information indicating items of the health information, stores the health information in association with the item information,
The health information transmitting unit receives the level of health information requested to be transmitted from the medical institution terminal, and stores the health information stored in association with the item information corresponding to the received level and the user. The health information management server according to claim 1, wherein the health information management server is extracted from an information database and transmitted to the medical institution terminal. The health information management server according to claim 4, further comprising a disclosure item setting unit that receives the item information and the level from a user terminal and stores the received item information and the level in the level storage unit. The level storage unit stores the item information and the level in association with a user,
The disclosure item setting unit receives the item information and the level together with the user identification information and the biological information, and the received user identification information and the biological information are stored in association with the health information database. The health information management server according to claim 5, wherein the level storage unit is updated based on the received item information and the level. The level storage unit further stores the health information input means in association with the level,
The health information management server according to claim 4, wherein the health information database stores the health information when the health information is received by the input means stored in the level storage unit. The level storage unit further stores the health information output means in association with the level,
The health information management server according to claim 4, wherein the health information transmission unit transmits the health information to the medical institution terminal using an output unit corresponding to the extracted level. The health information management server according to claim 1, wherein the health information is medical chart data for the user. The health information management server according to claim 1, wherein the health information is allergy information indicating allergy of the user. The health information includes drug information indicating a drug taken by the user,
Risk information that acquires information indicating the side effect of the medicine and transmits the information indicating the risk level of the medicine to the user terminal possessed by the user when the risk level of the acquired side effect is a certain value or more. The health information management server according to claim 1, further comprising a unit. The health information stored in the health information database when receiving exercise information indicating that the user is exercising from an exercise institution terminal possessed by an exercise institution equipped with a device that causes the user to perform physical exercise The health information management server according to claim 1, further comprising an exercise amount transmission unit that calculates an exercise amount suitable for the user based on the information and transmits the exercise amount to the exercise engine terminal. When the information indicating that the user has exercised an amount of exercise equal to or greater than the amount of exercise transmitted by the exercise amount transmitting unit is received from the exercise engine terminal, warning information is provided to the user to stop the exercise. The health information management server according to claim 12, further comprising a warning information transmission unit that transmits the information to the health information management server. The health information database stores an IP address of an IC card owned by the user in association with the user identification information as the IC card information,
The user determination unit receives the user identification information and the IP address of the IC card from the medical institution terminal, and stores the received user identification information and the IP address in association with the health information database. To determine whether or not
The health information transmission unit uses the IC card to store the health information when the user determination unit determines that the received user identification information and the IP address are stored in association with the health information database. The health information management server according to claim 1, wherein the health information management server transmits the information to the medical institution terminal. A computer program for receiving and managing health information related to user health,
Health information for managing the health information of the user in association with user identification information for identifying the user, biometric information of the user for authenticating the user, and IC card information indicating an IC card owned by the user Management functions,
When the health information of the user is received from a user terminal together with the IC card information and the user identification information, and the received IC card information is stored in association with the user identification information in the health information management function A health information receiving function for storing the received health information in the health information function;
When the user uses a medical institution, the user identification information and the biological information provided by the user are received from a medical institution terminal of the medical institution, and the received user identification information and the biological information are: A user determination function for determining whether or not they are managed in association with each other;
When it is determined that the received user identification information and the biological information are stored in association with the health information database, the health information stored in association with the user is extracted, and the medical information is extracted. A program comprising a health information transmitting function for transmitting to an institution terminal.

Images