JP2007072693A - Information presentation device and information presentation program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To present necessary information appropriately while preventing unnecessary leakage of personal information. <P>SOLUTION: An external interface part 14 of the device acquires each of first and second certification keys. A processor 11 sets one or a plurality of patients as the permitted patients responding to the acquired first certification information responding to that the first and second certification keys are acquired together. The processor 11 presents personal information about individuals established as the permitted objects by indication by a display 16 for example. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an information presentation apparatus for presenting personal information such as patient information managed by a hospital information system, and an information presentation program for causing a computer to function as such an apparatus.

  In medical institutions, personal information of patients (hereinafter referred to as patient information) is often managed in a database. Patient information managed in the database is presented by a medical device, a testing device, a diagnostic device, an image capturing device, or the like.

  Normally, if the device is logged in by a legitimate user, presentation of patient information on the device is allowed. The above login is generally performed by user authentication.

In addition, the technique which restrict | limits the information shown according to the terminal which performs information presentation is known (for example, refer patent document 1).
JP 2003-323496 A

  Allowing presentation of patient information on a device logged in by a legitimate user as described above may also present personal information that is unrelated to medical practice, which may result in insufficient protection of personal information. is there.

  Therefore, it is conceivable to limit the information presented according to the logged-in user. For example, when a doctor is logged in, it is allowed to present only patient information about a patient for whom the doctor is in charge. However, if this is done, or if the technique of Patent Document 1 is used, for example, the user sees necessary information in a non-normal time when a patient who is in charge of another doctor must be examined temporarily. Will not be able to.

  The present invention has been made in view of such circumstances, and the purpose of the present invention is to enable the proper presentation of necessary information while preventing unnecessary leakage of personal information. There is.

  In order to achieve the above object, the present invention provides an information presentation apparatus accessible to storage means for storing a plurality of personal information relating to each of a plurality of individuals, and means for acquiring first and second authentication information, respectively. Setting means for setting one or a plurality of individuals according to the acquired first authentication information as permissible objects in response to the acquisition of both the first and second authentication information; And means for presenting the personal information related to the individual determined as an allowable target.

  In order to achieve the above object, the present invention provides a computer capable of accessing storage means for storing a plurality of pieces of personal information relating to each of a plurality of individuals, means for obtaining first and second authentication information, Setting means for setting one or a plurality of individuals according to the acquired first authentication information as an allowable object in response to the acquisition of both the first and second authentication information; An information presentation program is configured to function as a means for presenting the personal information related to the individual defined as a target.

  According to the present invention, it is possible to appropriately present necessary information while preventing unnecessary leakage of personal information.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram of a configuration of an information presentation device 1 according to the present embodiment.

  The information presentation device 1 is used in a medical institution and presents patient information to a medical institution worker such as a doctor. Patient information is held in the database 2. Each patient information is composed of a combination of information of a plurality of information types as shown in FIG. The information presentation apparatus 1 can access the database 2 via the network 3. The information presentation device 1 can also communicate with the monitoring server 4 via the network 3. The monitoring server 4 monitors what authentication key is used by the information presentation apparatus 1 that accesses the database 2. The monitoring server 4 can monitor the viewer who is browsing the patient information according to the authentication key for using the information presentation device 1. When a plurality of information presentation devices 1 are connected to the network 3, the monitoring server 4 can monitor fraud in which a plurality of information presentation devices 1 are simultaneously used with the same authentication key.

  Authentication key input devices 5 and 6 are connected to the information presentation device 1. The authentication key input devices 5 and 6 can be loaded with a card storing the authentication key, and input the authentication key from the loaded card. As the authentication key input devices 5 and 6, other types of information input devices such as a barcode reader, a wireless tag reader, or a keyboard can be applied. The authentication key input devices 5 and 6 may be incorporated in the information presentation device 1.

  The information presentation device 1 includes a processor 11, a main memory 12, a hard disk device 13, an external interface unit 14, an input device 15, a display 16, and a network interface unit 17. These units are connected to each other via a bus 18.

  The processor 11 performs various control processes by executing software processes in accordance with programs stored in the hard disk device 13.

  The main memory 12 temporarily stores software extracted from the hard disk device 13 for the processor 11 to actually use. The main memory 12 is used as a work area for the processor 11.

  The hard disk device 13 stores an operating system program used by the processor 11. In addition, the hard disk device 13 stores various programs and other data. The data stored in the hard disk device 13 includes an information presentation program.

  Authentication key input devices 5 and 6 are connected to the external interface unit 14. The external interface unit 14 acquires authentication keys output from the authentication key input devices 5 and 6, respectively. For example, a well-known USB (universal serial bus) interface circuit can be used as the external interface unit 14.

  The input device 15 receives various instruction inputs from the operator. As the input device 15, for example, a known device such as a keyboard, a mouse, and a touch panel can be used.

  The display 16 displays an image for presenting various information to the operator.

  The network 3 is connected to the network interface unit 17. The network interface unit 17 performs communication processing via the network 3. As the network interface unit 17, for example, a well-known LAN (local area network) interface circuit can be used.

  By the way, as this information presentation apparatus 1, a general purpose computer can be used, for example. In this case, the information presentation program 13a is not initially installed. Therefore, as part of the introduction work of the information presentation device 1, the information presentation program 13 a stored in a removable storage medium such as a CD-ROM is installed in the hard disk device 13. Or you may install the information presentation program 13a downloaded via the network 3. FIG.

  By performing processing based on the information presentation program 13a, the processor 11 realizes two functions. One function sets the allowable patient and the allowable type based on the authentication key acquired by the external interface unit 14. Another function presents only the information applicable to the acceptable patient and the acceptable type.

  Next, the operation of the information presentation apparatus 1 configured as described above will be described.

  FIG. 3 is a flowchart showing a processing procedure of the processor 11 based on the information presentation program 13a.

  In step Sa <b> 1, the processor 11 waits for the card to be attached to both the authentication key input devices 5 and 6. Whether or not a card is attached is notified from the authentication key input devices 5 and 6. If the card is attached to both of the authentication key input devices 5 and 6, the processor 11 proceeds from step Sa1 to step Sa2. In step Sa <b> 2, the processor 11 acquires the authentication key recorded on each of the loaded cards via the external interface unit 14. In step Sa3, the processor 11 checks whether one of the two acquired authentication keys is the first authentication key and the other is the second authentication key.

  Each authentication key is different depending on the person to whom it is assigned. In addition, each authentication key belongs to the first authentication key or the second authentication key. The first authentication key is assigned to a patient or a manager in a medical institution (a hospital director, a department manager, an information manager, etc.). The second authentication key is assigned to a patient information viewer (doctor, engineer, office worker, etc.).

  If the first authentication key and the second authentication key have been acquired, the processor 11 proceeds from step Sa3 to step Sa4. In step Sa4, the processor 11 sets a patient corresponding to the acquired level of the first authentication key as an allowable patient. In the present embodiment, the level of the first authentication key is determined as shown in FIG. That is, the authentication key assigned to the director is level A, and all patients are the corresponding patients. The authentication key assigned to the department manager is level B, and all patients belonging to the department in charge of the department manager are the target patients. The authentication key assigned to the information manager is level C, and all patients are the corresponding patients. The authentication key assigned to the patient is level A, and only the corresponding patient is the corresponding patient. Thus, in step Sa4, for example, if the first authentication key is level A, the processor 11 sets all patients as allowable patients. If the first authentication key is level D, the processor 11 sets only the corresponding patients as allowable patients. Set.

  Subsequently, in step Sa5, the processor 11 sets the information type corresponding to the acquired second authentication key level as an allowable type. In the present embodiment, the level of the second authentication key is determined as shown in FIG. That is, the authentication key assigned to the doctor is level A, and all information types are the corresponding information types. The authentication key assigned to the engineer is level B, and the patient ID, name, gender, date of birth, age, doctor in charge, and requested department are the target information types. The authentication key assigned to the clerk is level C, and the name, gender, and age are the target information types. Thus, in step Sa5, for example, if the second authentication key is level A, the processor 11 sets all information types as allowable types, but if it is level C, only the name, gender and age are set. Is set to an acceptable type.

  In steps Sa6 and Sa7, the processor 11 waits for the operator to request presentation of patient information or to remove the card attached to the authentication key input devices 5 and 6. If presentation of patient information is requested, the processor 11 proceeds from step Sa6 to step Sa8. In step Sa8 and step Sa9, the processor 11 confirms whether or not the requested information relates to an allowable patient and is an allowable type information. If the requested information satisfies the above condition, the processor 11 proceeds from step Sa9 to step Sa10. In step Sa10, the processor 11 presents the requested patient information. If only a part of the requested patient information satisfies the above conditions, only the corresponding information is presented. This presentation is performed, for example, by display on the display 16 under the control of the processor 11. The processor 11 may acquire and present only the information to be presented from the database 2, or may obtain information to be presented from the patient information previously obtained from the database 2 and stored in the hard disk device 13 or the main memory 12. You may choose to present. After that, the processor 11 returns to the standby state of steps Sa6 and Sa7.

  If the requested information does not satisfy the above condition, the processor 11 returns from step Sa8 or step Sa9 to the standby state of step Sa6 and step Sa7. When one of the cards attached to the authentication key input devices 5 and 6 is removed, the processor 11 returns from step Sa7 to step Sa1. On the other hand, when the authentication keys recorded on the two cards mounted are not the first authentication key and the second authentication key, the processor 11 returns from step Sa3 to step Sa1. In these cases, patient information is not presented. If patient information is not presented in this way, the operator may be informed that the card is not correctly installed or that information cannot be presented due to lack of access rights. good.

  In this way, the patient information is presented only when the card that records the first authentication key and the card that records the second authentication key are both attached to the authentication key input devices 5 and 6. . Which patient is allowed to present patient information is set according to the level of the first authentication key. Thus, when the doctor examines a specific patient, if the card of the patient to be examined and the card of the doctor are attached to the authentication key input devices 5 and 6, the information presenting apparatus 1 presents only patient information regarding the patient to be examined. . Therefore, the doctor can confirm the patient information of the patient to be examined, which can be used for the examination. However, it is not possible to view patient information relating to patients not related to other examinations, and the personal information of such patients is protected.

  At conferences, there are often no patients on the spot. It may be necessary to refer to information about other patients. In such a case, the director / director's card and the doctor's card are attached to the authentication key input devices 5 and 6. Then, the information presentation apparatus 1 presents patient information regarding a plurality of patients. Therefore, the doctor can hold the conference in the above situation while browsing the patient information by the information presentation device 1.

  As described above, according to the present embodiment, it is possible to present flexible information while protecting personal information.

  According to the present embodiment, the information to be presented can be limited from among a plurality of types of information included in the patient information according to the level of the second authentication key. By presenting information, personal information can be protected more reliably.

This embodiment can be variously modified as follows.
The information to be presented is not limited to patient information at medical institutions, but may be other various personal information.
It is also possible to provide the above-described functions realized by the information presentation apparatus 1 in a medical device, a testing device, a diagnostic device, an image capturing device, and the like.
The present invention can also be applied when presenting information stored in a built-in storage medium such as the main memory 12 or the hard disk device 13.
A login restriction using a password associated with the authentication key may be further added.
The authentication key may be input only at the time of login, and the authentication key may be valid until the user is logged out.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the components without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment.

The block diagram of the structure of the information presentation apparatus 1 which concerns on one Embodiment of this invention. The figure which shows the information contained in patient information. The flowchart which shows the process sequence of the processor 11 based on the information presentation program 13a. The figure which shows an example of the level setting regarding a 1st authentication key. The figure which shows an example of the level setting regarding a 2nd authentication key.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Information presentation apparatus, 2 ... Database, 3 ... Network, 4 ... Monitoring server, 5, 6 ... Authentication key input device, 11 ... Processor, 12 ... Main memory, 13 ... Hard disk drive, 13a ... Information presentation program, 14 ... External interface unit, 15 ... input device, 16 ... display, 17 ... network interface unit, 18 ... bus.

Claims (4)

Access to storage means for storing a plurality of personal information relating to each of a plurality of individuals,
Means for obtaining first and second authentication information, respectively;
A setting means for setting one or a plurality of the individuals according to the acquired first authentication information as permissible objects in response to the acquisition of the first authentication information and the second authentication information;
An information presentation apparatus comprising: means for presenting the personal information related to the individual determined as the permissible object. The personal information includes a plurality of types of information,
The setting unit sets, in the permissible information, information of a type corresponding to the acquired second authentication information among the personal information related to the individual determined as the permissible object. Item 4. The information presentation device according to Item 1. A computer accessible to storage means for storing a plurality of personal information relating to each of a plurality of individuals;
Means for obtaining first and second authentication information, respectively;
A setting means for setting one or a plurality of the individuals according to the acquired first authentication information as permissible objects in response to the acquisition of the first authentication information and the second authentication information;
An information presentation program that functions as means for presenting the personal information related to the individual determined as the permissible object. The personal information includes a plurality of types of information,
The said setting means shall set the information according to the acquired said 2nd authentication information to the said permissible information among the said personal information regarding the said individual determined as the said permissible object in the said permissible information. Information presentation program described in 1.

Images