JP2016071654A - Information service system and information service method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide information for a suitable disclosure destination while maintaining security.SOLUTION: A disclosure source terminal comprises: an input part which receives input; an authentication information reception part which receives authentication information for acquiring disclosure data from a disclosure destination terminal; an authentication part which determines whether to provide the disclosure data based upon the authentication information that the authentication information reception part receives when the input part receives predetermined input; and a disclosure data transmission part which transmits the disclosure data to the disclosure destination terminal when the authentication part determines that the disclosure data is provided. The disclosure destination terminal comprises an authentication information transmission part which transmits the authentication information to the disclosure source terminal and a disclosure data reception part which receives the disclosure data.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information providing system and an information providing method.

  As a technology for providing information to a third party who cannot be set as an information provision target in advance while maintaining security, there is a technology for providing information through an authority (server 1) such as a fire department. For example, in the technology described in Patent Document 1, the server 1 that has received the report provides information necessary for information acquisition to an appropriate information providing destination (second information terminal) as an information disclosure destination. For example, “ambulance”, “transportation destination medical institution”, “transportation destination candidate medical institution”, and the like are assumed as the information providing destination. Thereby, it is possible to prevent information leakage from the server 1 to an untrusted terminal.

JP 2013-77326 A

  However, the technology described in Patent Document 1 does not consider providing information to other than the above-mentioned information providing destinations. For example, even if a “doctor who happens to pass by” tries to confirm medical information about a patient for emergency treatment, There was a problem that it was not possible to browse quickly. If medical information can be quickly viewed in an emergency, appropriate first aid can be provided and the survival rate will increase. However, confidentiality is important for providing medical information, and it is necessary to avoid leakage to unnecessary or malicious third parties.

  The present invention has been made in view of the above points, and an object of the present invention is to provide an information providing system and an information providing method capable of providing information to an appropriate disclosure destination while maintaining security.

  (1) The present invention has been made to solve the above problems, and a first aspect of the present invention is an information providing system having a first information terminal and a second information terminal, The first information terminal receives an input, an authentication information receiving unit that receives authentication information for obtaining disclosure data from the second information terminal, and the input unit receives a predetermined input. The authentication information receiving unit receives the authentication information based on the authentication information received, and the authentication unit determines whether to provide the disclosure data, and the authentication unit determines to provide the disclosure data, the disclosure A disclosed data transmitting unit that transmits data to the second information terminal, wherein the second information terminal transmits an authentication information to the first information terminal, and the disclosed data. Receive disclosure data reception When is an information providing system characterized in that it comprises.

  (2) According to a second aspect of the present invention, there is provided an information providing method in an information providing system having a first information terminal and a second information terminal, wherein the second information terminal receives disclosed data. An authentication information transmitting process for transmitting authentication information for acquisition to the first information terminal; an authentication information receiving process for receiving the authentication information from the second information terminal by the first information terminal; An authentication process for determining whether or not to provide the disclosed data based on the authentication information received by the authentication information receiving process when the input unit that receives the input receives a predetermined input; A disclosure data transmission process for transmitting the disclosure data to the second information terminal when the first information terminal determines that the authentication process provides the disclosure data; and , The disclosed data And it discloses a data receiving process of receiving a data providing method characterized in that it comprises a.

  According to the present invention, it is possible to provide information to an appropriate disclosure destination while maintaining security.

It is a block diagram which shows the structure of the information provision system which concerns on the 1st Embodiment of this invention. It is a hardware block diagram which shows an example of the hardware configuration of the disclosure source terminal which concerns on 1st Embodiment. It is an image figure which shows an example of the emergency call screen which the disclosure origin terminal which concerns on 1st Embodiment displays. It is an image figure which shows an example of the confirmation screen which the disclosure destination terminal which concerns on 1st Embodiment displays. It is a sequence diagram which shows operation | movement of the information provision process in the information provision system which concerns on 1st Embodiment. It is a block diagram which shows the structure of the information provision system which concerns on the 2nd Embodiment of this invention. It is an image figure which shows an example of the notification screen which the disclosure destination terminal which concerns on 2nd Embodiment displays. It is a block diagram which shows the structure of the information provision system which concerns on the 3rd Embodiment of this invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
(First embodiment)
First, a first embodiment of the present invention will be described.
FIG. 1 is a block diagram showing a configuration of an information providing system 1 according to the present embodiment. As shown in the figure, the information providing system 1 includes a disclosure source terminal 100 (first information terminal), a disclosure destination terminal 200 (second information terminal), an authentication server 300, and an OCSP (Online Certificate Status Protocol). ) A responder 400, a qualification management server 500, and a browsing record management server 600 are included. The information providing system 1 is a system that provides medical information (disclosure data) related to a patient who is a user of the disclosure source terminal 100 to medical personnel who are users of the disclosure destination terminal 200.

  The disclosure source terminal 100 and the disclosure destination terminal 200 are information terminals such as a smartphone, a mobile phone, a tablet terminal, and a personal computer. The disclosure source terminal 100 is an information terminal held by a patient, and is an information terminal that provides patient disclosure data. The disclosure source terminal 100 includes a control unit 101, a storage unit 102, an input unit 103, a display unit 104, and a communication unit 105.

  The control unit 101 controls the disclosure source terminal 100 in an integrated manner. The control unit 101 includes an authentication information receiving unit 1011, an authentication unit 1012, an encryption unit 1013, and a disclosed data transmission unit 1014. When the input unit 103 receives an input of a predetermined action, the authentication information receiving unit 1011 transmits an advertisement to the disclosure destination terminal 200 in the vicinity via the communication unit 105 by BLE (Bluetooth (registered trademark) Low Energy). . The predetermined action is, for example, 119 call or pressing a button for searching for a nearby doctor. The advertisement is for requesting an electronic certificate (authentication information) from a nearby disclosure destination terminal 200. The authentication information receiving unit 1011 receives an electronic certificate from the disclosure destination terminal 200 and outputs the received electronic certificate to the authentication unit 1012.

  When the electronic certificate is input from the authentication information receiving unit 1011 (when the input unit 103 receives an input of a predetermined action), the authentication unit 1012 transmits the disclosure data based on the electronic certificate. Whether to provide to 200 is determined. Specifically, the authentication unit 1012 transmits the input electronic certificate to the authentication server 300 via the communication unit 105 and receives the result from the authentication server 300. Based on the result received from the authentication server 300, the authentication unit 1012 determines whether to provide the disclosed data. For example, if the result received from the authentication server 300 is “invalid”, the authentication unit 1012 determines not to provide the disclosed data to the disclosure destination terminal 200. On the other hand, when the result received from the authentication server 300 is “valid”, the authentication unit 1012 determines to provide the disclosed data to the disclosure destination terminal 200. If the authentication unit 1012 determines to provide the disclosure data, the authentication unit 1012 determines the disclosure range of the disclosure data based on the electronic certificate input from the authentication information reception unit 1011. Specifically, the authentication unit 1012 sets the disclosure range added to the result received from the authentication server 300 as the disclosure range of the disclosure data. The authentication unit 1012 outputs the determined disclosure range and the electronic certificate input from the authentication information receiving unit 1011 to the encryption unit 1013.

  When the disclosure range and the electronic certificate are input from the authentication unit 1012, the encryption unit 1013 encrypts the disclosure data in the disclosure range using the public key of the input electronic certificate. Specifically, the encryption unit 1013 reads the disclosure data from the storage unit 102, and encrypts only the input disclosure range in the read disclosure data. Then, the encryption unit 1013 outputs the encrypted disclosure data to the disclosure data transmission unit 1014. When disclosure data is input from the encryption unit 1013, the disclosure data transmission unit 1014 transmits the input disclosure data to the disclosure destination terminal 200 via the communication unit 105. That is, when the authentication unit 1012 determines to provide the disclosure data, the disclosure data transmission unit 1014 transmits only the disclosure range determined by the authentication unit 1012 to the disclosure destination terminal 200 among the disclosure data. Further, the disclosed data transmission unit 1014 transmits the browsing information to the browsing record management server 600. The browsing information includes information specifying the disclosure source terminal 100, information specifying the disclosure destination terminal 200, disclosure date and time, disclosure contents, and disclosure location.

  The storage unit 102 stores disclosure data of a user (patient) of the disclosure source terminal 100. The input unit 103 receives an input. The display unit 104 displays various information. The communication unit 105 communicates with other devices (such as the disclosure destination terminal 200 and the authentication server 300).

  The disclosure destination terminal 200 is an information terminal held by medical personnel, and is an information terminal that acquires and displays patient disclosure data. The disclosure destination terminal 200 includes a control unit 201, a storage unit 202, an input unit 203, a display unit 204, and a communication unit 205.

  The control unit 201 controls the disclosure destination terminal 200 in an integrated manner. The control unit 201 includes an authentication information transmission unit 2011, a disclosed data reception unit 2012, a decryption unit 2013, and a display control unit 2014. When receiving the advertisement from the disclosure source terminal 100, the authentication information transmission unit 2011 notifies the display control unit 2014 of the reception of the advertisement and causes the display unit 204 to display a confirmation screen. The confirmation screen is a screen for notifying the reception of the advertisement and requesting approval for transmission of the electronic certificate. The authentication information transmission unit 2011 reads the electronic certificate from the storage unit 202 and receives the read electronic certificate via the communication unit 205 when the input unit 203 accepts an operation input that approves the transmission of the electronic certificate on the confirmation screen. Is returned to the disclosure source terminal 100.

  Disclosure data reception unit 2012 receives disclosure data from disclosure source terminal 100 via communication unit 205, and outputs the received disclosure data to decryption unit 2013. The decryption unit 2013 decrypts the input disclosure data with the secret key and outputs the decrypted data to the display control unit 2014. When the disclosure data is input from the decryption unit 2013, the display control unit 2014 displays the input disclosure data on the display unit 204. In addition, when the reception of advertisement is notified from the authentication information transmission unit 2011, the display control unit 2014 displays a confirmation screen on the display unit 204.

  The storage unit 202 stores an electronic certificate of a user (medical person) of the disclosure destination terminal 200. The electronic certificate is issued and managed by a trusted certificate authority. For example, a certificate authority is set up for each hospital and the doctors belonging to the hospital are appropriately managed. The input unit 203 receives an input. The display unit 204 displays various information. The communication unit 105 communicates with other devices (such as the disclosure source terminal 100).

  The authentication server 300 performs authentication of an electronic certificate and determination of a disclosure range of disclosure data. Specifically, when receiving the electronic certificate of the disclosure destination terminal 200 from the disclosure source terminal 100, the authentication server 300 transmits a validity inquiry including the received electronic certificate to the OCSP responder 400, and results of the validity inquiry Receive. If the result received from the OCSP responder 400 is “invalid”, the authentication server 300 transmits the result to the disclosure source terminal 100. On the other hand, when the result received from the OCSP responder 400 is “valid”, the authentication server 300 transmits a qualification inquiry including the received electronic certificate to the qualification management server 500 and receives a result of the qualification inquiry. The result of the qualification inquiry is, for example, a qualification category such as “doctor” or “nurse”. The authentication server 300 determines a disclosure range of disclosure data to be disclosed to the disclosure destination terminal 200 based on the result received from the qualification management server 500. For example, the authentication server 300 determines to disclose the entire range when the qualification category is “doctor”, and determines to disclose part of the disclosure data when the qualification category is “nurse”. The authentication server 300 adds the disclosure range to the result “valid” received from the OCSP responder 400 and transmits the result to the disclosure source terminal 100.

  When the OCSP responder 400 receives a validity inquiry including an electronic certificate from the authentication server 300, the OCSP responder 400 verifies the received electronic certificate using PKI (Public Key Infrastructure) or the like. The verification includes a process for confirming revocation of the electronic certificate. Then, the OCSP responder 400 returns the verified result (valid or invalid) to the authentication server 300. The qualification management server 500 manages the qualifications of medical personnel. For example, the qualification management server 500 holds a database in which each user of the disclosure destination terminal 200 is associated with a qualification category. Upon receiving the qualification inquiry from the authentication server 300, the qualification management server 500 returns a qualification category corresponding to the received qualification inquiry to the authentication server 300. The browsing record management server 600 holds a database that stores browsing information of disclosure data. Upon receiving browsing information from the disclosure source terminal 100 or the authentication server 300, the browsing record management server 600 writes and records the received browsing information in a database.

FIG. 2 is a hardware configuration diagram illustrating an example of a hardware configuration of the disclosure source terminal 100 according to the present embodiment.
The disclosure source terminal 100 includes a CPU 1001, a storage medium 1002, a drive unit 1003, an input unit 1004, an output unit 1005, a ROM 1006 (Read Only Memory: ROM), a RAM 1007 (Random Access Memory: RAM), an auxiliary A storage unit 1008 and a communication unit 1009 are provided.
The CPU 1001, the drive unit 1003, the input unit 1004, the output unit 1005, the ROM 1006, the RAM 1007, the auxiliary storage unit 1008, and the communication unit 1009 are connected to each other via a bus B (bus line).

  The CPU 1001 reads out and executes a program stored in the auxiliary storage unit 1008 and various data stored in the ROM 1006 and the RAM 1007, and controls the disclosure source terminal 100. Further, the CPU 1001 reads out and executes various data stored in the storage medium 1002 via the drive unit 1003 and controls the disclosure source terminal 100. The storage medium 1002 is a portable storage medium such as a magneto-optical disk, a flexible disk, or a flash memory, and stores various data. The drive unit 1003 is a reading device for a storage medium 1002 such as an optical disk drive or a flexible disk drive. The input unit 1004 is an input device such as a mouse, a keyboard, or a touch panel. The output unit 1005 is an output device such as a display unit or a speaker. The ROM 1006 and the RAM 1007 temporarily store various data. The auxiliary storage unit 1008 is a hard disk drive, a flash memory, or the like, and stores a program and various data for operating each functional unit of the disclosure source terminal 100 described above. The communication unit 1009 has a communication interface and is connected to the network NW by wire or wireless.

  The hardware configuration of the disclosure-destination terminal 200 is the same as the configuration of the disclosure-source terminal 100 shown in FIG. The control unit 101 and the control unit 201 are a CPU 1001. The storage unit 102 and the storage unit 202 are a ROM 1006 or a RAM 1007. The input unit 103 and the input unit 203 are the input unit 1004. The display unit 104 and the display unit 204 are an output unit 1005. The communication unit 105 and the communication unit 205 are the communication unit 1009.

Next, an information providing method in the information providing system 1 according to the present embodiment will be described.
FIG. 3 is an image diagram illustrating an example of an emergency call screen displayed by the disclosure source terminal 100 according to the present embodiment. On the emergency call screen, a call button for making an emergency call (119 call) and a button B1 for searching for a nearby doctor are displayed. The disclosure source terminal 100 transmits an advertisement to the disclosure destination terminal 200 when the 119 call or the button B1 is pressed.

  FIG. 4 is an image diagram illustrating an example of a confirmation screen displayed by the disclosure destination terminal 200 according to the present embodiment. When receiving the advertisement from the disclosure source terminal 100, the disclosure destination terminal 200 displays the confirmation screen. On the confirmation screen, a message “<Emergency> Emergency patient is nearby. Please start the procedure if you want to view patient information.” Button B2 for approving transmission) is displayed. When the button B2 is pressed, the disclosure destination terminal 200 transmits an electronic certificate to the disclosure source terminal 100 in order to acquire disclosure data.

FIG. 5 is a sequence diagram showing the operation of the information providing process in the information providing system 1 according to the present embodiment.
When the input unit 103 receives an input of a predetermined action, the authentication information receiving unit 1011 of the disclosure source terminal 100 owned by the patient transmits the advertisement to the disclosure destination terminal 200 around by BLE (step S101).

  When receiving the advertisement from the disclosure source terminal 100, the display control unit 2014 of the disclosure destination terminal 200 owned by the medical staff displays a confirmation screen on the display unit 204 and notifies the user (step S102). When the input unit 203 receives an operation input for pressing the button B2 on the confirmation screen, the authentication information transmission unit 2011 transmits a connection request to the disclosure source terminal 100 (step S103), and establishes communication connection with the disclosure source terminal 100 (step S103). S104). At this time, the disclosure source terminal 100 and the disclosure destination terminal 200 are connected by BLE with the disclosure source terminal 100 as a peripheral and the disclosure destination terminal 200 as a central.

  Subsequently, the authentication information transmission unit 2011 reads the electronic certificate from the storage unit 202 and transmits the read electronic certificate to the disclosure source terminal 100 (step S105). When receiving the electronic certificate from the disclosure destination terminal 200, the authentication unit 1012 of the disclosure source terminal 100 transmits the received electronic certificate to the authentication server 300 (step S106).

  Upon receiving the electronic certificate from the disclosure source terminal 100, the authentication server 300 transmits a validity inquiry including the electronic certificate to the OCSP responder 400 (step S107). When receiving the validity inquiry, the OCSP responder 400 verifies the validity of the received electronic certificate and transmits the verified verification result to the authentication server 300 (step S108).

  Upon receiving the verification result from the OCSP responder 400, the authentication server 300 transmits a qualification inquiry of the disclosure destination terminal 200 to the qualification management server 500 when the received verification result is “valid” (step S109). Upon receiving the qualification inquiry, the qualification management server 500 returns a qualification category corresponding to the received qualification inquiry to the authentication server 300 (step S110).

  Upon receiving the qualification category from the qualification management server 500, the authentication server 300 determines the disclosure range of the disclosure data based on the received qualification category (step S111). Then, the authentication server 300 transmits the verification result “valid” and the determined disclosure range to the disclosure source terminal 100 for notification (step S112).

  When the disclosure range is notified from the authentication server 300, the encryption unit 1013 of the disclosure source terminal 100 encrypts the disclosure data of the notified disclosure range using the public key of the electronic certificate of the disclosure destination terminal 200. (Step S113). Subsequently, the disclosure data transmission unit 1014 of the disclosure source terminal 100 transmits the encrypted disclosure data to the disclosure destination terminal 200 (step S114). At this time, the connection between the disclosure source terminal 100 and the disclosure destination terminal 200 may be switched to WiFi (Wireless Fidelity) according to the amount of disclosed data to be transmitted. Then, the disclosed data transmission unit 1014 transmits the browsing information to the browsing record management server 600 (step S115). Upon receiving browsing information from the disclosure source terminal 100, the browsing record management server 600 records the received browsing information.

  When receiving the encrypted disclosure data, the decryption unit 2013 of the disclosure destination terminal 200 decrypts the received disclosure data with the secret key (step S116). Then, the display control unit 2014 of the disclosure destination terminal 200 displays the decrypted disclosure data on the display unit 204.

  Thus, according to the present embodiment, the information providing system 1 includes the disclosure source terminal 100 and the disclosure destination terminal 200. The disclosure source terminal 100 receives an electronic certificate for obtaining disclosure data from the disclosure destination terminal 200, and when the input unit 103 receives an input of a predetermined action, the authentication information reception unit 1011 An authentication unit 1012 that determines whether to provide disclosure data based on the received authentication information, and disclosure data that transmits the disclosure data to the disclosure destination terminal 200 when the authentication unit 1012 determines to provide the disclosure data A transmission unit 1014. The disclosure destination terminal 200 includes an authentication information transmission unit 2011 that transmits an electronic certificate to the disclosure source terminal 100 and a disclosure data reception unit 2012 that receives disclosure data. Thereby, the information provision system 1 can provide information to a third party who cannot be set as an information provision destination in advance while maintaining security. In other words, it is possible to provide information promptly to an appropriate disclosure destination while preventing unnecessary information leakage to a malicious third party.

  Moreover, according to this embodiment, since the browsing record management server 600 stores the browsing information of the disclosure data, the browsing of unnecessary disclosure data by medical personnel is suppressed, and abuse of authority by medical personnel is prevented. Can be prevented.

(Second Embodiment)
Next, a second embodiment of the present invention will be described.
FIG. 6 is a block diagram showing the configuration of the information providing system 1a according to this embodiment. The information providing system 1a in the present embodiment includes an emergency notification server 700 in addition to the configuration of the information providing system 1 in the first embodiment. The information providing system 1a includes a disclosure source terminal 100a instead of the disclosure source terminal 100. A disclosure destination terminal 200a is provided instead of the terminal 200, and an authentication server 300a is provided instead of the authentication server 300.

  In situations such as situations where there is an urgent need in an emergency, it may be necessary to view data outside the business authority of the user of the disclosure destination terminal 200. However, in the first embodiment, the user of the disclosure destination terminal 200 cannot browse disclosure data outside the disclosure range. Therefore, the information providing system 1a according to the present embodiment includes the emergency notification server 700 that determines the necessity of temporarily expanding the disclosure range, so that the disclosure range can be temporarily expanded in an emergency.

  The disclosure source terminal 100a includes a control unit 101a in place of the control unit 101 of the disclosure source terminal 100 in the first embodiment. The control unit 101a includes a disclosed data transmitting unit 1014a instead of the disclosed data transmitting unit 1014 in the first embodiment. The disclosure data transmission unit 1014a adds the data name of disclosure data that can be browsed (within the disclosure range) and the data name of disclosure data that cannot be browsed (out of the disclosure range) to the encrypted disclosure data. Send. Further, based on the determination in the emergency notification server 700, the disclosure data transmission unit 1014a temporarily expands the disclosure range for the disclosure destination terminal 200a and transmits the disclosure data. Specifically, when the expanded disclosure range is notified from the authentication server 300a, the disclosure data of the expanded disclosure range is encrypted and transmitted to the disclosure destination terminal 200a. Since the other configuration of the disclosure source terminal 100a is the same as the configuration of the disclosure source terminal 100 in the first embodiment, the description thereof is omitted.

  The disclosure destination terminal 200a includes a control unit 201a instead of the control unit 201 of the disclosure destination terminal 200 in the first embodiment. The control unit 201 a includes an enlargement request unit 2015 in addition to the configuration of the control unit 201, and includes a display control unit 2014 a instead of the display control unit 2014. When the decrypted disclosure data is input from the decryption unit 2013, the display control unit 2014a displays a notification screen on the display unit 204. The notification screen is a screen that notifies disclosure data that can be browsed and disclosure data that cannot be browsed. When the input unit 203 receives an operation input requesting expansion of the disclosure range of disclosure data (browsing of disclosure data outside the disclosure range), the expansion request unit 2015 notifies the expansion request data requesting expansion of the disclosure range in an emergency. To the server 700. Since the other configuration of the disclosure destination terminal 200a is the same as the configuration of the disclosure destination terminal 200 in the first embodiment, the description thereof is omitted.

  When the emergency notification server 700 receives the expansion request data from the disclosure destination terminal 200a, the emergency notification server 700 determines the necessity of expanding the disclosure range based on the received expansion request data. The expansion request data includes an electronic certificate and text describing the situation. For example, the emergency notification server 700 makes an inquiry to the OCSP responder 400 based on the received electronic certificate to confirm the identity of the user of the disclosure destination terminal 200a. Then, when the electronic certificate is valid, the emergency notification server 700 determines whether or not it is necessary to expand the disclosure range of the disclosure data based on the text describing the situation. Alternatively, the emergency notification server 700 may make a voice call with the disclosure destination terminal 200a to confirm the situation verbally. When the emergency notification server 700 determines that the disclosure range needs to be expanded, the emergency notification server 700 transmits expansion notification data indicating the received expansion request data and the expanded disclosure range to the authentication server 300a.

  When the authentication server 300a receives expanded notification data from the emergency notification server 700 in addition to the function of the authentication server 300 in the first embodiment, the authentication server 300a displays the expanded disclosure range based on the received expanded notification data. Notify the terminal 100a. When notified of the expanded disclosure range, the disclosure source terminal 100a encrypts the disclosure data of the expanded disclosure range and transmits it to the disclosure destination terminal 200a. Since the other structure of the information provision system 1a is the same as that of the information provision system 1 in 1st Embodiment, the description is abbreviate | omitted.

  FIG. 7 is an image diagram illustrating an example of a notification screen displayed by the disclosure destination terminal 200a according to the present embodiment. When receiving the disclosure data from the disclosure source terminal 100a, the disclosure destination terminal 200a displays the notification screen. On the notification screen, a message indicating the disclosure data that can be browsed, “information with viewing authority is as follows. AA, BB, CC, DD”, a button B11 for browsing the disclosure data that can be browsed, A message indicating possible disclosure data “There are EE and FF as unauthorized information” and a button B12 requesting expansion of the disclosure range are displayed. In the button B11, a message “Open information that you can view” is described. In addition, the button “B12” includes a message “Requesting emergency viewing”.

  In the example shown in this figure, AA, BB, CC, and DD are disclosure data that can be browsed, and EE and FF are disclosure data that cannot be browsed. The user presses the button B11 when browsing AA, BB, CC, or DD. When the input unit 203 receives an operation input for pressing the button B11, the display control unit 2014a displays AA, BB, CC, and DD on the display unit 204. On the other hand, the user presses the button B12 when browsing the EE and FF is desired. The enlargement request unit 2015 transmits the enlargement request data to the emergency notification server 700 when the input unit 203 receives an operation input for pressing the button B12. Upon receiving the expansion request data, the emergency notification server 700 determines whether or not to expand the disclosure range based on the received expansion request data. If the emergency notification server 700 determines to expand the disclosure range, the emergency notification server 700 notifies the authentication server 300a of the expanded disclosure range. The authentication server 300a notifies the disclosure source terminal 100a of the notified disclosure range. When the disclosure range is notified, the disclosure source terminal 100a encrypts the disclosure data of the notified disclosure range and transmits it to the disclosure destination terminal 200a.

  As described above, according to the present embodiment, the information providing system 1a includes the emergency notification server 700 that determines the necessity of expanding the disclosure range in addition to the configuration of the information providing system 1 in the first embodiment. . The disclosure destination terminal 200a includes an expansion request unit 2015 that transmits expansion request data requesting expansion of the disclosure range. The disclosure source terminal 100a includes a disclosure data transmission unit 1014a that temporarily expands the disclosure range for the disclosure destination terminal 200a based on the determination in the emergency notification server 700 and transmits the disclosure data. Thereby, according to the present embodiment, in addition to the effects in the first embodiment, when it is necessary to view data outside the business authority of the user of the disclosure destination terminal 200a in a scene where the time is contending in an emergency, etc. It is possible to request the emergency notification server 700 to “temporarily expand the disclosure range”.

(Third embodiment)
Next, a third embodiment of the present invention will be described.
FIG. 8 is a block diagram showing the configuration of the information providing system 1b according to this embodiment. An information providing system 1b according to the present embodiment includes a user information server 800 in addition to the configuration of the information providing system 1 according to the first embodiment. The information providing system 1b includes a disclosure source terminal 100b instead of the disclosure source terminal 100. The disclosure destination terminal 200 b is provided instead of the authentication server 200, and the authentication server 300 b is provided instead of the authentication server 300.

  In the first embodiment and the present embodiment, the disclosure source terminal 100 holds disclosure data in the first embodiment, whereas in the present embodiment, the user information server 800 uses each of the disclosure source terminal 100b. It differs in that it holds the disclosure data of the person (patient). The disclosure source terminal 100b according to the present embodiment notifies the disclosure destination terminal 200b of the access destination of the disclosure data. The disclosure destination terminal 200b accesses the user information server 800 based on the notified access destination and acquires the disclosure data.

  The disclosure source terminal 100b includes a control unit 101b in place of the control unit 101 of the disclosure source terminal 100 in the first embodiment. The control unit 101b includes an authentication information reception unit 1011, an authentication unit 1012, and an access destination transmission unit 1015. When it is determined that the authentication unit 1012 provides the disclosure data, the access destination transmission unit 1015 transmits the access destination data indicating the access destination for acquiring the disclosure data to the disclosure destination terminal 200b via the communication unit 105. . Since the other configuration of the disclosure source terminal 100b is the same as the configuration of the disclosure source terminal 100 in the first embodiment, the description thereof is omitted.

  The disclosure destination terminal 200b includes a control unit 201b instead of the control unit 201 of the disclosure destination terminal 200 in the first embodiment. The control unit 201b includes a disclosed data receiving unit 2012b instead of the disclosed data receiving unit 2012. Disclosure data reception unit 2012b receives access destination data from disclosure source terminal 100b via communication unit 205. Subsequently, the disclosure data receiving unit 2012b transmits request data requesting the disclosure data to the user information server 800 indicated by the received access destination data via the communication unit 205, and receives the disclosure data from the user information server 800. . Then, the disclosed data receiving unit 2012b outputs the received disclosed data to the decrypting unit 2013. Since the other configuration of the disclosure destination terminal 200b is the same as the configuration of the disclosure destination terminal 200 in the first embodiment, the description thereof is omitted.

  In addition to the function of the authentication server 300 in the first embodiment, the authentication server 300b transmits the determined disclosure range and the public key of the electronic certificate of the disclosure destination terminal 200b to the user information server 800. The user information server 800 holds a database that stores disclosure data of each user (patient). Upon receiving the request data from the disclosure destination terminal 200b, the user information server 800 encrypts the disclosure data within the disclosure range using the public key of the disclosure destination terminal 200b received from the authentication server 300b. Then, the user information server 800 transmits the encrypted disclosure data to the disclosure destination terminal 200b. Since the other structure of the information provision system 1b is the same as that of the information provision system 1 in 1st Embodiment, the description is abbreviate | omitted.

  As described above, according to the present embodiment, the information providing system 1b includes the user information server that holds the disclosure data of each user of the disclosure source terminal 100b in addition to the configuration of the information providing system 1 in the first embodiment. 800. The disclosure data receiving unit 2012b of the disclosure destination terminal 200b acquires the disclosure data from the user information server 800. Thereby, according to this embodiment, in addition to the effect in 1st Embodiment, it becomes unnecessary for the disclosure origin terminal 100b to hold | maintain disclosure data.

  In addition, a part of the disclosure source terminals 100, 100a, 100b, the disclosure destination terminals 200, 200a, 200b, the authentication servers 300, 300a, 300b in the above-described embodiment, for example, the control units 101, 101a, 101b, the control unit 201, 201a and 201b may be realized by a computer. In that case, the program for realizing the control function may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be read by a computer system and executed. Here, the “computer system” is a computer system built in the apparatus, and includes hardware such as an OS and peripheral devices. The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” is a medium that dynamically holds a program for a short time, such as a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line, In such a case, a volatile memory inside a computer system serving as a server or a client may be included and a program that holds a program for a certain period of time. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  As described above, the embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to the above, and various design changes and the like can be made without departing from the scope of the present invention. It is possible to

  For example, in the embodiment described above, the authentication server 300 and the OCSP responder 400 verify the electronic certificate of the disclosure destination terminal 200. However, the disclosure source terminal 100 does not limit the electronic certificate of the disclosure destination terminal 200. You may verify. In the above-described embodiment, the authentication server 300 determines the disclosure range of the disclosure data. However, the disclosure source terminal 100 may determine the disclosure range. Alternatively, the disclosure source terminal 100 may have the function of the authentication server 300.

  In the above-described embodiment, the disclosure source terminal 100 transmits notification (advertisement) to all the disclosure destination terminals 200 in the vicinity at the time of a predetermined action. The notification may be transmitted only to a certain disclosure destination terminal 200. As an example of the operation in this case, first, the disclosure destination terminal 200 distributes (advertises) the electronic certificate (or the address to the electronic certificate) of the device itself to the disclosure source terminal 100 in the vicinity. . The disclosure source terminal 100 verifies the received electronic certificate of the disclosure destination terminal 200 at a predetermined action, and the disclosure destination terminal 200 of a medical person with a valid electronic certificate among the disclosure destination terminals 200 present in the surroundings. Send connection request only to. When receiving the connection request, the disclosure destination terminal 200 displays a confirmation screen and accepts the user's approval. The disclosure source terminal 100 and the disclosure destination terminal 200 establish a communication connection when approved on the confirmation screen. At this time, the disclosure source terminal 100 operates as a central, and the disclosure destination terminal 200 operates as a peripheral. The disclosure source terminal 100 transmits the disclosure data to the disclosure destination terminal 200 when connected to the disclosure destination terminal 200.

  In the above-described embodiment, the disclosure source terminal 100 encrypts the disclosure data with the public key of the disclosure destination terminal 200. However, the disclosure data may be encrypted with a common key. In this case, the disclosure source terminal 100 generates a common key. Then, the disclosure destination terminal 200 encrypts the common key with its own public key. Then, the disclosure source terminal 100 and the disclosure destination terminal 200 share a common key. The disclosure source terminal 100 encrypts the disclosed data using the common key and transmits the encrypted data to the disclosure destination terminal 200.

  In the embodiment described above, the browsing record management server 600 stores the browsing information of the disclosure data. However, the present invention is not limited to this, and notifies the user of the disclosure source terminal 100 that the disclosure data has been browsed. Also good. For example, when transmitting the disclosure data, the disclosure source terminal 100 may display an icon indicating that the disclosure data has been browsed. Alternatively, the browsing record management server 600 may notify that the disclosed data has been browsed to a user's registered mail address. As a result, when the disclosed data is browsed based on the judgment of the medical staff when the patient is in a conscious cloudy state, the patient can know that the disclosed data has been browsed.

  In the above-described embodiment, the disclosed data is the medical information of the patient, but the disclosed data is not limited to this. For example, information associated with paper material may be provided according to the authority of the user. As an operation example in this case, a QR (Quick Response) code (registered trademark) indicating an ID for identifying a moving image (disclosure data) is arranged in a newspaper, and a moving image corresponding to the QR code (registered trademark) is displayed. The service to be provided will be described as an example. In this example, a case where the authentication server 300 is the disclosure source terminal 100 will be described. First, the disclosure destination terminal 200 captures a QR code (registered trademark), reads the ID, and transmits the read ID and its own electronic certificate to the authentication server 300. The authentication server 300 verifies the received electronic certificate, and transmits the moving image access destination to the disclosure destination terminal 200 when the electronic certificate is valid. Also, the authentication server 300 transmits the determined disclosure range and the public key of the disclosure destination terminal 200 to the related information management server that provides the moving image. Based on the access destination received from the disclosure source terminal 100, the disclosure destination terminal 200 accesses the related information management server and requests a moving image. The related information management server encrypts the moving image within the disclosure range using the public key of the disclosure destination terminal 200 and transmits the encrypted moving image to the disclosure destination terminal 200. Thereby, the user of the disclosure destination terminal 200 can view a moving image corresponding to the QR code (registered trademark) arranged in the newspaper. In other words, since identity authentication can be performed using an electronic certificate, restrictions such as “change video to be presented according to age” or “paid member” can be applied in a service that provides moving images.

  (1) An information providing system having a first information terminal and a second information terminal, wherein the first information terminal receives an input unit for receiving an input and authentication information for obtaining disclosure data in a second Authentication information receiving unit received from the information terminal, and an authentication unit for determining whether or not to provide disclosure data based on the authentication information received by the authentication information receiving unit when the input unit receives a predetermined input A disclosure data transmission unit that transmits the disclosure data to the second information terminal when the authentication unit determines to provide the disclosure data, and the second information terminal transmits the authentication information to the first information An information providing system comprising: an authentication information transmitting unit that transmits to a terminal; and a disclosed data receiving unit that receives disclosed data.

(2) The authentication unit determines the disclosure range of the disclosure data based on the authentication information, and the disclosure data transmission unit transmits only the disclosure range determined by the authentication unit among the disclosure data to the second information terminal. (1) The information providing system according to (1).
(3) The second information terminal includes an expansion request unit that transmits expansion request data requesting expansion of the disclosure range, and the disclosure data transmission unit of the first information terminal is temporarily based on the expansion request data. The information providing system according to (2), wherein the disclosure data for the second information terminal is expanded to transmit the disclosure data.
(4) The authentication unit transmits authentication information to an authentication server that performs authentication, and determines whether to provide disclosure data based on a result of authentication in the authentication server. 3) The information providing system according to any one of the above.

  (5) An information providing method in an information providing system having a first information terminal and a second information terminal, wherein the second information terminal obtains authentication information for obtaining disclosure data from the first information terminal. Authentication information transmission process, the first information terminal receives the authentication information from the second information terminal, and the first information terminal receives an input from the input unit. And receiving the authentication information based on the authentication information received by the authentication information receiving process, and determining that the authentication process provides the disclosed data by the first information terminal. In this case, an information providing method comprising: a disclosed data transmission process for transmitting disclosed data to a second information terminal; and a disclosed data receiving process for receiving the disclosed data by the second information terminal.

1, 1a, 1b ... Information providing system, 100, 100a, 100b ... Disclosure source terminal, 101, 101a, 101b ... Control unit, 102 ... Storage unit, 103 ... Input unit, 104 Display unit 105 Communication unit 200 200a 200b Disclosure destination terminal 201 201a 201b Control unit 202 Storage unit 203 Input unit 204: Display unit, 205: Communication unit, 300, 300a, 300b ... Authentication server, 400 ... OCSP responder, 500 ... Qualification management server, 600 ... Browsing record management server, 700 ... emergency notification server, 800 ... user information server, 1011 ... authentication information receiving unit, 1012 ... authentication unit, 1013 ... encryption unit, 1014, 1014a ... open Data transmission unit, 1015 ... access destination transmission unit, 2011 ... authentication information transmission unit, 2012, 2012b ... disclosure data reception unit, 2013 ... decryption unit, 2014, 2014a ... display control unit , 2015 ... Enlargement request section

Claims (5)

An information providing system having a first information terminal and a second information terminal,
The first information terminal is
An input unit that accepts input;
An authentication information receiving unit for receiving authentication information for obtaining disclosure data from the second information terminal;
An authentication unit that determines whether to provide the disclosed data based on authentication information received by the authentication information receiving unit when the input unit receives a predetermined input;
A disclosure data transmission unit for transmitting the disclosure data to the second information terminal when the authentication unit determines to provide the disclosure data;
With
The second information terminal is
An authentication information transmitting unit for transmitting the authentication information to the first information terminal;
A disclosure data receiving unit for receiving the disclosure data;
An information providing system characterized by comprising: The authentication unit determines a disclosure range of disclosure data based on the authentication information,
2. The information providing system according to claim 1, wherein the disclosure data transmitting unit transmits only the disclosure range determined by the authentication unit to the second information terminal. The second information terminal includes an expansion request unit that transmits expansion request data requesting expansion of the disclosure range to an emergency notification server that determines necessity of expansion of the disclosure range,
The disclosure data transmission unit of the first information terminal temporarily expands the disclosure range for the second information terminal based on the determination in the emergency notification server, and transmits the disclosure data. The information providing system according to claim 2. The authentication unit transmits the authentication information to an authentication server that performs authentication, and determines whether to provide the disclosure data based on a result of authentication in the authentication server. 3. The information providing system according to any one of items 3. An information providing method in an information providing system having a first information terminal and a second information terminal,
An authentication information transmission process in which the second information terminal transmits authentication information for obtaining disclosure data to the first information terminal;
An authentication information receiving process in which the first information terminal receives authentication information from the second information terminal;
Authentication in which the first information terminal determines whether to provide the disclosed data based on authentication information received in the authentication information receiving process when an input unit that receives input receives a predetermined input Process,
A disclosure data transmission process of transmitting the disclosure data to the second information terminal when the first information terminal determines that the authentication process provides the disclosure data;
Disclosure data receiving process in which the second information terminal receives the disclosure data;
An information providing method characterized by comprising:

Images