JP2002032473A - System and program storage medium for medical information processing - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a program storage medium for medical information processing which is effective in protecting patient's privacy. SOLUTION: This system is equipped with a patient property information storage means 11 which stores patient property information on a name, an address, etc., a medical information storage part 12 which stores medical information of clinical cards, inspection histories, etc., of patients, a medical information processing part 13 which performs information processing by accessing the patient property information and medical information, a patient property information acquisition part 14 which obtains and passes patient property information specified by input information to the medical information processing part 13, a ciphering part 15 which generates 2nd patient specification information by ciphering 1st patient property information of the patient property information obtained by the acquisition part 14, and a medical information acquisition part 16 which acquires and passes medical information on the patient specified by the input information to the medical information processing part 13 according to 2nd patient specification information generated by the ciphering part 15.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a medical information processing system and a medical information processing program storage medium effective for protecting privacy of a patient.

[0002]

2. Description of the Related Art In recent years, medical information of each patient is digitized and stored in a database of a computer system, and medical treatment is supported using the digitized medical information stored in the database. The so-called medical information processing system is spreading.

[0003] Such a medical information processing system includes information on the patient's own name, date of birth, medical history, family members and other important information as medical information, and such medical information is illegally taken out. If so, the privacy of the patient may be violated.

[0004] From the viewpoint of privacy protection, Japanese Patent Application Laid-Open No. Hei 6-83847 discloses that patient attribute information such as name, date of birth, and address and medical information are separately managed so that patient privacy can be maintained. Methods for preventing infringement are disclosed. According to this method, even if only medical information is illegally obtained, patient privacy is protected because the medical information has no information on the attributes of the patient, and it is not known who the medical information is. Things.

[0005]

However, in this method, if the patient attribute information can be obtained by the same means as the medical information is obtained, the patient attribute information and the medical information are matched. Thus, it is not impossible to specify which medical information belongs to which patient, and it is not a very effective method for preventing privacy infringement.

The present invention has been made in view of the above circumstances, and has as its object to provide a medical information processing system and a medical information processing program storage medium that are effective in protecting patient privacy.

[0007]

A medical information processing system according to the present invention that achieves the above object has a patient attribute information storage unit that stores patient attribute information of each patient, and a medical information storage unit that stores medical information of each patient. A medical information processing system having a unit and a medical information processing unit for performing information processing by accessing the patient attribute information stored in the patient attribute information storage unit and the medical information stored in the medical information storage unit; The medical information for each patient stored in the medical information storage unit is
Among the patient attribute information stored in the patient attribute information storage unit, first patient identification information including at least a part including information for identifying a patient includes encrypted second patient identification information. A patient attribute information acquisition unit that acquires patient attribute information of the patient specified by the input information based on the input information that identifies the patient, and passes the acquired patient attribute information to the medical information processing unit; An encryption unit that generates the second patient identification information by encrypting the first patient identification information among the patient attribute information obtained by the attribute information acquisition unit; and a second encryption unit that generates the second patient identification information. A medical information acquisition unit that acquires medical information of the patient identified by the second patient identification information based on the patient identification information, and passes the acquired medical information to the medical information processing unit. I do.

Here, the encryption unit adopts a fixed-length character string specifying a patient as the first patient specifying information,
The fixed-length character string may be encrypted.

[0009] The encryption unit may employ the patient attribute information itself or a part thereof as the first patient identification information, and encrypt the patient attribute information.

[0010] Further, the encryption section may generate the second patient identification information by encrypting the first patient identification information using a key.

The medical information processing system further includes a decryption unit that decrypts the second patient identification information included in the medical information for each patient stored in the medical information storage unit using a key. May be used.

Further, the encryption section may encrypt the first patient identification information using a one-way encryption function.

Further, the patient attribute information for each patient stored in the patient attribute information storage section is the second patient identification information of the medical information for each patient stored in the medical information storage section. May further include encrypted third patient identification information.

Further, a medical information processing program storage medium of the present invention for achieving the above object has a patient attribute information storage unit for storing patient attribute information of each patient, and a medical information storage unit for storing medical information of each patient. A medical information processing system having a medical information processing section for performing information processing by accessing the patient attribute information stored in the patient attribute information storage section and the medical information stored in the medical information storage section. In the medical information processing program storage medium storing the medical information processing program to be formed, the medical information for each patient stored in the medical information storage unit may be one of the patient attribute information stored in the patient attribute information storage unit. Wherein the first patient identification information comprising at least a portion including the patient identification information includes the encrypted second patient identification information. A patient attribute information obtaining unit that obtains patient attribute information of a patient specified by the input information based on the input information specifying the patient, and passes the obtained patient attribute information to the medical information processing unit; An encryption unit that generates the second patient identification information by encrypting the first patient identification information of the patient attribute information obtained by the acquisition unit, and a second patient identification generated by the encryption unit A medical information acquisition system that acquires medical information of a patient identified by the second patient identification information based on the acquired information and passes the acquired medical information to the medical information processing unit. The medical information processing program formed above is stored.

[0015]

Embodiments of the present invention will be described below.

FIG. 1 is a diagram showing a part of a computer system in which each embodiment of the medical information processing system of the present invention is constructed.

Here, server machines 100 and 200 provided with a medical information database and three client machines 300, 400 and 500 constituting the medical information processing system of each embodiment are illustratively shown. Server machines 100 and 200 and client machine 30
0, 400, and 500 are LAN (Local AreaN)
network, etc., via a communication line 600.

The two server machines 100 and 200 are generally constituted by a high-speed and large-capacity computer system such as a workstation. Further, the three client machines 300, 400, and 500 are composed of relatively small computer systems such as personal computers.

Each server machine 100, 200 and each client machine 300, 400, 500 have a CPU
(Central processing unit), RAM (random access memory), hard disk, communication board, etc., in accordance with instructions from main units 101, 201, 301, 401, 501, and main units 101, 201, 301, 401, 501. Display screens 102a, 202a, 302a, 402
a, display unit 10 for displaying images and character strings on 502a
2, 202, 302, 402, 502, server machine 1
00, 200 and client machines 300, 40
Keyboard 103, 203, 303, 403, 503 for inputting user's instruction at 0,500, display screen 1
02a, 202a, 302a, 402a, 502a, by specifying an arbitrary position, the mouse 104, 204, 304, 404, 504 for inputting an instruction corresponding to the icon or the like displayed at that position at the time of the specification is displayed. Have.

The two server machines 100 and 200
A database in which medical information and patient attribute information of patients are stored on the hard disk of each client is provided, and each medical worker is provided with client machines 300, 400, and 500.
From the server machines 100 and 20 via the communication line 600
0 can access the database.

Main units 101 and 201 of each server machine
Has a floppy (registered trademark) disk (not shown) and floppy disk drives 101a and 201a in which a CD-ROM 700 is mounted; and CD-ROM drives 101b and 201b. These drives 101a, 201a; 101b,
Floppy disk loaded from 201b, CD-R
A floppy disk driver and a CD-ROM driver for driving the OM700 are also incorporated.

Similarly, the main unit 3 of each client machine
01, 401, and 501 are floppy disks (not shown) and floppy disk drives 301a, 401a, and 501a on which a CD-ROM 700 is loaded;
CD-ROM drives 301b, 401b, and 501b are provided, and the drives 30
1a, 401a, 501a; 301b, 401b, 50
Floppy disk and CD-ROM loaded from 1b
Floppy disk driver to drive 700, C
A D-ROM driver is also built in.

FIG. 2 is a hardware configuration diagram of a computer system having the appearance shown in FIG.

In this hardware configuration diagram, the CPU 11
1, RAM 112, hard disk controller 11
3. Floppy disk driver 114, CD-ROM
Driver 115, mouse controller 116, keyboard controller 117, display controller 11
8, and a communication board 119, which are interconnected by a bus 110.

Floppy disk driver 114, CD
The ROM driver 115 includes the floppy disk 710 and the CD-RO as described with reference to FIG.
M700 loaded, loaded floppy disk 7
10. It drives the CD-ROM 700.

The communication board 119 is connected to the communication line 600.

FIG. 2 shows the hard disk 12 accessed by the hard disk controller 113.
0, a mouse 104 controlled by a mouse controller 116, a keyboard 103 controlled by a keyboard controller 117, and a CRT display 102 controlled by a display controller 118.

Next, a medical information processing system according to the first embodiment of the present invention will be described.

FIG. 3 is a schematic configuration diagram of the medical information processing system according to the first embodiment.

As shown in FIG. 3, the medical information processing system 10 of the first embodiment has a patient attribute information storage 1
1, a medical information storage unit 12, a medical information processing unit 13,
A patient attribute information acquisition unit 14, an encryption unit 15, and a medical information acquisition unit 16 are provided.

The patient attribute information storage unit 11 stores patient attribute information such as the name, address, date of birth, and gender of each patient.

The medical information storage unit 12 stores a chart of each patient,
It stores medical information such as medical history, examination history, and drug history.

The medical information processing section 13 accesses the patient attribute information stored in the patient attribute information storage section 11 and the medical information stored in the medical information storage section 12 to perform information processing.

The patient attribute information acquiring section 14 acquires the patient attribute information of the patient specified by the input information based on the input information specifying the patient, and transfers the acquired patient attribute information to the medical information processing section 13.

The encryption unit 15 generates the second patient identification information by encrypting the first patient identification information of the patient attribute information obtained by the patient attribute information acquisition unit 14.

The medical information acquiring section 16 acquires medical information of the patient specified by the input information based on the second patient identifying information generated by the encrypting section 15 and converts the acquired medical information into a medical information processing section. Hand over to 13.

Here, the medical information for each patient stored in the medical information storage unit 13 includes at least a part of the patient attribute information stored in the patient attribute information storage unit 11 that includes information for specifying the patient. The first patient identification information includes encrypted second patient identification information.

The encryption section 15 may employ a fixed-length character string for specifying a patient as the first patient specifying information and encrypt the fixed-length character string. The patient attribute information itself may be adopted as the first patient identification information, and the patient attribute information may be encrypted. Alternatively, the second patient identification information may be encrypted by using a key. May be generated.

The medical information processing system further includes a decryption unit 17 for decrypting the second patient identification information included in the medical information for each patient stored in the medical information storage unit 12 using a key. It may be something.

FIG. 4 is a schematic configuration diagram in a case where the first embodiment is provided with a decoding unit.

As shown in FIG. 4, a medical information processing system 10 'of this embodiment has a configuration in which a decoding unit 17 is added to the medical information processing system 10 shown in FIG.
In the case of this configuration, the encryption unit 15 is configured to generate the second patient identification information by encrypting the first patient identification information using a key, and to decrypt the first patient identification information.
Is configured to decrypt the second patient identification information included in the medical information for each patient stored in the medical information storage unit 12 using a key. With this configuration, the patient attribute information 31 of the patient can be associated with the medical information 32 of the patient, and the medical information 32
Can be associated with the patient attribute information 31 of the patient in the medical information. That is, the patient attribute information 31 and the medical information 32 can be correlated bidirectionally.

Next, the configuration of the medical information processing program storage medium corresponding to the first embodiment will be described.

FIG. 5 is a configuration diagram of a medical information processing program storage medium corresponding to the first embodiment.

As shown in FIG. 5, the medical information processing program storage medium 20 includes a patient attribute information storage unit 11 and
Medical information storage unit 12, medical information processing unit 13, patient attribute information acquisition unit 14, encryption unit 15, medical information acquisition unit 1
6 is stored on a computer system.

The patient information storing unit 11, the medical information storing unit 12, the medical information processing unit 13, the patient attribute information obtaining unit 14, the encrypting unit 15, and the medical information obtaining unit 16 constituting the medical information processing system 10 are shown in FIG. As described with reference to FIG.

This medical information processing program storage medium 20
The type of storage medium used for the storage is not particularly limited, and any storage medium that can store the medical information processing program 21 may be used. For example, hard disk, CD-ROM, CD-R / R
A desired storage medium such as W, MO (magneto-optical disk), or floppy disk can be used.

Such a storage medium, for example, a CD-ROM
700 (see FIG. 1) to the above-mentioned medical information processing program 2
1 for storing a medical information processing program storage medium 20
Is a CD-R of server machines 100, 200 and client machines 300, 400, 500 (see FIG. 1).
OM drives 101b, 201b, 301b, 401
b, 501b (see FIG. 1), the medical information processing program 21 is installed in a storage device in each server machine and each client machine, and a medical information processing system is constructed on this client server system.

Next, the principle of encryption of the medical information processing system 10 according to the first embodiment will be described.

FIG. 6 is an explanatory diagram of the encryption in the first embodiment.

FIG. 6 shows a patient attribute information storage unit 11 (FIG. 3).
1), the first patient specifying information 31a for specifying the patient among the patient attribute information 31 of each patient, and the medical examination history constituting the medical information 32 for each patient stored in the medical information storage unit. 32_1, medical record 32_2, and medical history / test history / medicine history etc. The state in which the patient attribute information 31 and the medical information 32 of the patient are related by the second patient identification information 32a included in each of 32_3 is shown. The first patient identification information 31a uniquely identifies each patient among the patient attribute information of a plurality of patients stored in the patient attribute information storage unit.
2a uniquely specifies the medical information of a plurality of patients stored in the medical information storage unit. The second patient identification information 32a is converted by the encryption unit 15 into the first patient identification information 31a.
Is encrypted.

In the conventional electronic medical record system, since both the patient attribute information and the medical information are specified by the same patient specifying information, if the medical information is illegally taken out, it is temporarily set as the patient specifying information. For example, even if the patient attribute information and the patient attribute information are brought out together, even if the information is described in symbolized patient identification information such as “Patient ID1: ABC12345” in FIG. 6, the two can be easily associated with each other. So patient privacy is easily violated.

On the other hand, in the first embodiment,
The patient attribute information 31 is specified by first patient specifying information 31a, and the patient's medical information 32 is specified by the first patient specifying information 3a.
1a is specified using the encrypted second patient specifying information 32a.

The second patient identification information 32a is stored in the
Is uniquely associated with the first patient identification information 31a, the encryption unit 15 automatically converts the first patient identification information 31a into the second patient identification information 32a inside the system. Can be associated.

However, since the first patient specifying information 31a and the second patient specifying information 32a cannot be associated with each other outside this system, even if both the patient attribute information and the medical information are illegally taken out, Unless the encryption logic inside the encryption unit 15 is known, the correspondence between the patient attribute information and the medical information is unknown and the patient cannot be specified, and the privacy of the patient is protected. In addition, when the number of patients is extremely small, if both the patient attribute information and the medical information are illegally taken out, it is not impossible to associate the two, but even in small hospitals and clinics such as private hospitals. If the number of operating days extends over a long period of time, the number of patients and the amount of information increase, making it virtually impossible to associate the two, and privacy is almost completely protected.

The encrypting unit 15 stores the first patient identification information 3
As 1a, a fixed-length character string identifying a patient is adopted,
The fixed-length character string may be encrypted.
For example, as shown in FIG.
If a is described as an ID consisting of a character string of eight characters such as "ABC12345", this character string is encrypted using a predetermined encryption function or the like, thereby obtaining the data shown in FIG. As described above, the second patient identification information 3 including a character string of 8 characters such as “* @! #% & +”
Convert to 2a.

Further, the encryption section 15 may adopt the patient attribute information itself as the first patient specifying information 31a and encrypt the patient attribute information. For example,
Patient name information such as “Name: Taro Fujitsu Patient ID1: ABC12345 Address: XX City XX Date of birth: **** Gender: Male Insurance:……” shown in FIG. Is encrypted using a predetermined encryption function or the like, as shown in FIG. 6, “Patient ID 2: * @! #% &
Second patient identification information 3 consisting of a character string such as "+"
2a.

Further, the encryption section 15 may generate the second patient identification information 32a by encrypting the first patient identification information 31a using the key 15k.

Further, the medical information processing system includes a decryption unit 17 for decrypting the second patient specifying information 32a included in the medical information for each patient stored in the medical information storage unit 12 using the key 17k. It may be provided. Here, the key 15k used in the encryption unit 15 and the key 17k used in the decryption unit 17 may be a system using the same key or a system using different keys. With this configuration, the patient attribute information 31 of the patient and the medical information 32 of the patient can be associated in both directions.

Next, the first embodiment will be described.
This will be described with reference to a second embodiment.

FIG. 7 is a diagram showing a medical information processing system common to the first and second embodiments.

FIG. 7 shows that the patient attribute information of the patient specified by the input information is obtained based on the input information specifying the patient, and the obtained patient attribute information is stored in the medical information processing section 1.
3, an encryption unit 15 for generating second patient identification information by encrypting the first patient identification information of the patient attribute information obtained by the patient attribute information acquisition unit 14, The medical information of the patient specified by the input information is acquired based on the second patient identification information generated by the encryption unit 15, and the acquired medical information is stored in the medical information processing unit 1.
3, a medical information acquisition unit 16, a decoding unit 17 for converting the second patient identification information into the first patient identification information, and a patient attribute information and medical information database 34 stored in a patient attribute information database 33. A medical information processing unit 13 that accesses the processed medical information and performs information processing is shown.

Here, the patient attribute information database 33 in this embodiment corresponds to the patient attribute information storage section according to the present invention, and the medical information database 34 in this embodiment corresponds to the medical information database according to the present invention. It corresponds to an information storage unit.

The medical information processing section 13, the patient attribute information obtaining section 14, and the medical information obtaining section 16 among the above-mentioned sections are usually provided by the client machine 30 shown in FIG.
0, 400, 500, the patient attribute information database 33, the medical information database 34, the encryption unit 15,
And the decoding unit 17 is usually the server machine 1 shown in FIG.
00,200500.

First, as a first embodiment, a procedure for accessing the medical information 32 from the patient attribute information 31 (see FIG. 6) will be described with reference to FIGS. 7 and 8.

FIG. 8 is a flowchart of the first embodiment.

First, the medical information processing section 13 (see FIG. 7)
Starts the patient attribute information acquisition unit 14 (step S1).
1) The user (doctor) selects a patient to be treated.
The user directly inputs the patient identification information or searches by the patient's name or other search conditions and selects from the results, so that the patient attribute information obtaining unit 14 obtains the first patient identification information (step S1). S12), access the patient attribute information database 33 and obtain the patient attribute information 31 (see FIG. 6).
Is acquired (step S13).

Next, the medical information acquisition section 16 is activated (step S14). The medical information acquisition unit 16 acquires medical information identification information such as a medical information type, creation date / time, and the like from the user input information (step S15).

Next, the encryption unit 15 converts the first patient specifying information into the second patient specifying information (step S16).

Thus, the medical information processing section 13 starts accessing the patient's chart, examination history, drug history, etc. in the medical information database 34 based on the medical information identification information and the second patient identification information. (Step S17).

Next, as a second embodiment, the medical information 32
The procedure for accessing the patient attribute information 31 from (see FIG. 6) will be described with reference to FIGS. 7 and 9.

FIG. 9 is a flowchart of the second embodiment.

First, the medical information processing section 13 activates the medical information acquisition section 16 (step S21). The medical information acquisition unit 16 acquires medical information identification information such as a medical information type, creation date / time, and the like from information input by a user (doctor) (step S22). Then, a list of relevant medical information, that is, information such as a medical record, a test history, and a drug history is created and displayed (step S23). Next, the second patient specifying information of the selected medical information is obtained from the user input information (step S24).

Next, the decoding unit 17 converts the second patient specifying information into the first patient specifying information (step S25).

Thus, the medical information processing section 13 can access the patient attribute database 33 based on the first patient specifying information and acquire the patient attribute information (step S26).

Next, a second embodiment of the present invention will be described.

In the second embodiment, irreversible encryption using a one-way encryption function is performed instead of the reversible encryption in the first embodiment.

FIG. 10 is an explanatory diagram of the encryption in the second embodiment.

In FIG. 10, the patient attribute information 31 of each patient stored in the patient attribute information storage unit 11 (see FIG. 3) is used by the first one-way encryption unit 25 using a one-way encryption function. In this case, the patient attribute information 31 is related to the medical information 32 of the patient by obtaining the second patient identification information 32a by encryption.

As the one-way encryption function, a hash function, a message digest function, or the like is used.
Since the one-way encryption function does not require a key, there is an advantage that key management can be omitted, and a higher security than that of the first embodiment can be obtained.

Further, the information such as the patient's name, date of birth, address, etc., which can uniquely identify the patient without any duplication, is used as the second information.
Can be calculated. However, since the inverse operation is not possible, it is necessary to encrypt the second patient specifying information again to generate the third patient specifying information and embed it in the patient attribute information. Therefore, the second embodiment is applied to a case where the patient attribute information for each patient stored in the patient attribute information storage unit 11 (see FIG. 3) is used as the medical information for each patient stored in the medical information storage unit 12. Of these, the second patient identification information may be configured to include third patient identification information that is further encrypted.

Next, the second embodiment will be described with reference to third and fourth examples.

FIG. 11 is a diagram showing a medical information processing system common to the third and fourth embodiments.

FIG. 11 shows patient attribute information acquisition for acquiring the patient attribute information of the patient specified by the input information based on the input information for specifying the patient and passing the acquired patient attribute information to the medical information processing section 13. A first one-way encryption unit 25 that generates second patient identification information using the one-way encryption function for the patient attribute information obtained by the unit 14, the patient attribute information acquisition unit 14, or a part thereof, One one-way encryption unit 25
Based on the second one-way encryption unit 27 that generates the third patient identification information using the one-way encryption function, the second patient identification information generated by the second patient identification information, The medical information acquisition unit 16 that acquires medical information of the patient specified by the input information and passes the acquired medical information to the medical information processing unit 13, and the patient attribute information and medical information database 34 stored in the patient attribute information database 33 1 shows a medical information processing unit 13 that accesses medical information stored in the medical information processing unit and performs information processing.

Next, as a third embodiment, a procedure for accessing the medical information 32 from the patient attribute information 31 (see FIG. 10) will be described with reference to FIGS. 11 and 12.

FIG. 12 is a flowchart of the third embodiment.

First, the medical information processing section 13 (see FIG. 10)
Starts the patient attribute information acquisition unit 14 (step S3).
1). The patient attribute information acquisition unit 14 accesses the patient attribute information database 33 based on the information input by the user (doctor), and acquires the patient attribute information 31 (see FIG. 10) (Step S32).

Next, the medical information acquisition section 16 is activated (step S33). The medical information acquisition unit 16 acquires medical information identification information such as medical information type, creation date / time, and the like from the user input information (step S34).

Next, the first one-way encryption unit 25 converts the patient attribute information or a part thereof into the second patient identification information using the first one-way encryption function (step S35).

Next, the second one-way encryption unit 27
Is converted into third patient specifying information by the second one-way encryption function (step S36).

In this way, the medical information processing section 13 starts accessing the medical record, examination history, drug history, etc. of the patient in the medical information database 34 based on the medical information identification information and the second patient specifying information. (Step S37).

Next, as a fourth embodiment, a procedure for accessing the medical information 32 from the patient attribute information 31 (see FIG. 10) will be described with reference to FIGS. 7 and 13.

FIG. 13 is a flowchart of the fourth embodiment.

First, the medical information processing section 13 activates the medical information acquisition section 16 (step S41). The medical information acquisition unit 16 acquires medical information identification information such as a medical information type, creation date / time, and the like from information input by a user (doctor) (step S42). Then, a list of relevant medical information, that is, information such as medical records, examination histories, and drug histories is created and displayed (step S43). Next, the second patient specifying information of the selected medical information is obtained from the user input information (step S44).

Next, the second one-way encryption unit 27
The second patient specifying information is converted to the third patient specifying information using the one-way encryption function (step S45).

Thus, the medical information processing section 13 can access the patient attribute database 33 based on the third patient specifying information and acquire the patient attribute information (step S46).

Hereinafter, various aspects of the present invention will be additionally described.

(Supplementary Note 1) Patient attribute information storage unit for storing patient attribute information of each patient, medical information storage unit for storing medical information of each patient, and patient attribute information stored in the patient attribute information storage unit And in a medical information processing system having a medical information processing unit that performs information processing by accessing medical information stored in the medical information storage unit, medical information for each patient stored in the medical information storage unit, Among the patient attribute information stored in the patient attribute information storage unit, the first patient identification information including at least a part including the information for identifying the patient includes the encrypted second patient identification information. Obtaining patient attribute information of the patient specified by the input information based on the input information specifying the patient, and transferring the obtained patient attribute information to the medical information processing unit Unit, an encryption unit that generates the second patient identification information by encrypting the first patient identification information of the patient attribute information obtained by the patient attribute information acquisition unit, and an encryption unit that generates the second patient identification information. A medical information acquisition unit that acquires medical information of a patient identified by the second patient identification information based on the obtained second patient identification information, and passes the acquired medical information to the medical information processing unit. A medical information processing system.

(Supplementary note 2) The encryption unit employs a fixed-length character string specifying a patient as the first patient specifying information, and encrypts the fixed-length character string. 2. The medical information processing system according to claim 1, wherein

(Supplementary Note 3) The supplementary feature that the encryption unit employs the patient attribute information itself or a part thereof as the first patient identification information, and encrypts the patient attribute information. 1. The medical information processing system according to 1.

(Supplementary Note 4) The encryption unit encrypts the first patient identification information using a key, thereby obtaining the second patient identification information.
2. The medical information processing system according to claim 1, wherein the patient information is generated.

(Supplementary Note 5) A decoding unit is provided for decoding the second patient identification information included in the medical information for each patient stored in the medical information storage unit using a key. The medical information processing system according to attachment 4.

(Supplementary note 6) The medical information processing system according to supplementary note 1, wherein the encryption unit encrypts the first patient identification information using a one-way encryption function.

(Supplementary Note 7) The patient attribute information for each patient stored in the patient attribute information storage unit is the second patient out of the medical information for each patient stored in the medical information storage unit. The medical information processing system according to claim 5, wherein the specific information includes third patient specific information further encrypted.

(Supplementary Note 8) A patient attribute information storage unit for storing patient attribute information of each patient, a medical information storage unit for storing medical information of each patient, and a patient attribute information stored in the patient attribute information storage unit A medical information processing program for forming, on a computer system, a medical information processing system having a medical information processing unit for performing information processing by accessing medical information stored in the medical information storage unit; In the storage medium, medical information for each patient stored in the medical information storage unit, of the patient attribute information stored in the patient attribute information storage unit,
A first part comprising at least a part including information for identifying a patient;
Wherein the patient identification information includes the encrypted second patient identification information, and acquires the patient attribute information of the patient identified by the input information based on the input information identifying the patient; A patient attribute information acquisition unit that passes attribute information to the medical information processing unit; and a second patient patient information by encrypting first patient identification information of the patient attribute information obtained by the patient attribute information acquisition unit. An encryption unit that generates the identification information, and acquires the medical information of the patient identified by the second patient identification information based on the second patient identification information generated by the encryption unit. A medical information processing program storing a medical information processing program for forming, on a computer system, a medical information processing system having a medical information acquisition unit to be passed to the medical information processing unit憶媒 body.

[0105]

As described above, according to the medical information processing system of the present invention, the patient attribute information of the patient specified by the input information is obtained based on the input information specifying the patient, and the obtained patient information is obtained. A patient attribute information acquisition unit that passes the attribute information to the medical information processing unit; and a second patient identification information by encrypting the first patient identification information of the patient attribute information obtained by the patient attribute information acquisition unit. An encryption unit to be generated,
A medical information acquisition unit that acquires medical information of the patient identified by the input information based on the second patient identification information generated by the encryption unit, and passes the acquired medical information to the medical information processing unit Accordingly, a medical information processing system effective for protecting patient privacy can be realized.

Further, according to the medical information processing program storage medium of the present invention, it is possible to obtain a medical information processing program storage medium capable of easily constructing the above medical information processing system on a computer system.

[Brief description of the drawings]

FIG. 1 is a diagram showing a part of a computer system in which each embodiment of a medical information processing system of the present invention is constructed.

FIG. 2 is a hardware configuration diagram of a computer system having the appearance shown in FIG.

FIG. 3 is a schematic configuration diagram of a medical information processing system according to the first embodiment.

FIG. 4 is a schematic configuration diagram in a case where a decoding unit is provided in the first embodiment.

FIG. 5 is a configuration diagram of a medical information processing program storage medium corresponding to the first embodiment.

FIG. 6 is an explanatory diagram of encryption in the first embodiment.

FIG. 7 is a diagram showing a medical information processing system common to the first and second embodiments.

FIG. 8 is a flowchart of the first embodiment.

FIG. 9 is a flowchart of the second embodiment.

FIG. 10 is an explanatory diagram of encryption in the second embodiment.

FIG. 11 is a diagram showing a medical information processing system common to the third and fourth embodiments.

FIG. 12 is a flowchart of the third embodiment.

FIG. 13 is a flowchart of the fourth embodiment.

[Explanation of symbols]

10, 10 'medical information processing system 11 patient attribute information storage unit 12 medical information storage unit 13 medical information processing unit 14 patient attribute information acquisition unit 15 encryption unit 15k key 16 medical information acquisition unit 17 decryption unit 17k key 20 medical information processing program Storage medium 21 Medical information processing program 25 First one-way encryption unit 27 Second one-way encryption unit 31 Patient attribute information 31a First patient identification information 32 Medical information 32a Second patient identification information 32_1 Consultation history 32_2 Medical record 32_3 medical history / test history / medicine history etc. 33 Patient attribute information database 34 Medical information database 100, 200 Server machine 101, 201, 301, 401, 501 Main body 101a, 201a, 301a, 401a, 501a
Floppy disk drives 101b, 201b, 301b, 401b, 501b
CD-ROM drive 102, 202, 302, 402, 502 Display unit 102a, 202a, 302a, 402a, 502a
Display screen 103, 203, 303, 403, 503 Keyboard 104, 204, 304, 404, 504 Mouse 110 Bus 111 CPU 112 RAM 113 Hard disk controller 114 Floppy disk driver 115 CD-ROM driver 116 Mouse controller 117 Keyboard controller 118 Display controller 119 Communication board 300, 400, 500 Client machine 600 Communication line 700 CD-ROM 710 Floppy disk

Claims (2)

[Claims] 1. A patient attribute information storage unit that stores patient attribute information of each patient, a medical information storage unit that stores medical information of each patient, and the patient attribute information stored in the patient attribute information storage unit. A medical information processing system having a medical information processing unit for accessing and processing medical information stored in the medical information storage unit, wherein the medical information for each patient stored in the medical information storage unit is the patient The first patient identification information, which is at least part of the patient attribute information stored in the attribute information storage unit and includes the information for identifying the patient, includes the encrypted second patient identification information. A patient attribute information acquisition unit that acquires patient attribute information of the patient specified by the input information based on the input information that identifies the patient, and passes the acquired patient attribute information to the medical information processing unit; By encrypting the first patient identification information of the patient attribute information obtained by the patient attribute information acquisition unit,
An encryption unit that generates the patient identification information, and medical information of the patient identified by the second patient identification information based on the second patient identification information generated by the encryption unit. A medical information processing system, comprising: a medical information acquisition unit that passes information to the medical information processing unit. 2. A patient attribute information storage unit for storing patient attribute information of each patient, a medical information storage unit for storing medical information of each patient, and the patient attribute information stored in the patient attribute information storage unit. A medical information processing program storage medium storing a medical information processing program for forming, on a computer system, a medical information processing system having a medical information processing section for accessing and processing medical information stored in a medical information storage section In the first aspect, the medical information for each patient stored in the medical information storage unit includes at least a part of the patient attribute information stored in the patient attribute information storage unit that includes information for specifying a patient. Wherein the patient identification information includes the encrypted second patient identification information, and the patient identification information is identified by the input information based on the input information identifying the patient. A patient attribute information acquisition unit that acquires the patient attribute information of the above and passes the acquired patient attribute information to the medical information processing unit; and first patient identification information among the patient attribute information acquired by the patient attribute information acquisition unit. An encryption unit that generates the second patient identification information by encrypting the second patient identification information, and a patient identified by the second patient identification information based on the second patient identification information generated by the encryption unit. A medical information processing program for forming a medical information processing system having a medical information acquisition unit for acquiring medical information and passing the acquired medical information to the medical information processing unit on a computer system is stored. Medical information processing program storage medium.