JP2020080178A - Information processing apparatus and program - Google Patents

Abstract

To realize control of access to document data with respect to each group of disclosure source of the document data.SOLUTION: An access control information generating unit 20 generates access control information which is an access control information indicating access control to document data and is different from each other with respect to each group of disclosure sources of the document data. An access control unit 28 controls access to the document data by using the access control information. The group includes a plurality of users of the disclosure source and is different from a second group including at least one user of the disclosure source other than the plurality of users.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an information processing device and a program.

  Access to document data may be controlled.

  Patent Document 1 describes a system for controlling access right to medical chart data.

  Patent Document 2 describes a system that permits browsing of medical information and extends the publication period according to the medical institution that requested the browsing, the patient to be browsed, the disclosure period, and the clinical department of the disclosure destination.

JP-A-2002-24386 JP, 2014-16923, A

  By the way, in the medical field, it is sometimes desired to control access to document data such as medical information for each group such as a medical institution or a clinical department. For example, even when setting access control to the same document data, access control information may be managed so that the access control information set by its own group is not changed by other groups. May be desired.

  An object of the present invention is to realize access control to the document data for each group of the publication source of the document data.

  The invention according to claim 1 is storage means for storing document data, and creation means for creating access control information indicating access control to the document data, wherein different access is provided for each group of the publication source of the document data. And a control unit that controls access to the document data using the access control information, wherein the group includes a plurality of users who are publishing sources, and the group includes The information processing apparatus is a group different from the second group including at least one user of the publication source other than the plurality of users.

  The invention according to claim 2 is the information processing apparatus according to claim 1, wherein the document data is data relating to medical care, and the group is a medical institution or a medical department in the medical institution.

  The invention according to claim 3 is characterized in that the creating means creates the access control information so as to permit access to the document data corresponding to a specific document type. 2 is the information processing device.

  In the invention according to claim 4, the access control information includes information indicating a period during which access to the document data is permitted, and the control unit permits access to the document data during the period, The information processing apparatus according to claim 1, wherein access to the document data outside the period is prohibited.

  In the invention according to claim 5, the access control information includes information indicating a disclosure destination of the document data, and is accompanied by a change of at least one of a disclosure source group, the document data to be accessed, and a disclosure destination. The information processing apparatus according to any one of claims 1 to 4, wherein the information processing apparatus is updated.

  The invention according to claim 6 is characterized in that the publication source group is plural, and the creating means creates different access control information for each individual group included in the plurality of groups. The information processing apparatus according to any one of claims 1 to 5.

  The invention according to claim 7 is the information processing apparatus according to claim 6, wherein the document data is data shared by the plurality of groups.

  In the invention according to claim 8, the creating means creates the access control information of the document data in response to a request from at least one of the plurality of users of the group, and creates the access control information from the second group. 9. The information processing apparatus according to claim 1, wherein the second access control information of the document data is created in response to the second request.

  In the invention according to claim 9, a request from at least one of the plurality of users of the group indicates at least a first publication destination that can access the document data, and a second request from the second group is The information processing apparatus according to claim 8, wherein at least a second disclosure destination that can access the document data is indicated, and the second disclosure destination is different from the first disclosure destination.

  According to a tenth aspect of the present invention, the first list of the first plurality of document data including the document data is set in accordance with the access control information and in response to a request from the first publication destination for the first list. Means for providing to the first publication destination, and a second list of the second plurality of document data including the document data, in response to the request from the second publication destination for the second list according to the second access control information. Accordingly, the means for providing to the second publication destination, and the selection of the document data from one of the first list and the second list provided to one of the first publication destination and the second publication destination. 10. The information processing apparatus according to claim 9, further comprising: a unit that provides the document data to one of the first publication destination and the second publication destination.

  In the invention according to claim 11, a plurality of access control information other than the group and the second group, which allows at least one of the plurality of users of the group of the publication source to access the document data, Different groups are selected, the plurality of different groups include a plurality of individual medical institutions, and the group and the second group are different from the plurality of individual medical institutions in the same medical institution. The information processing apparatus according to claim 1, wherein the information processing apparatus includes one of the individual medical departments.

  According to a twelfth aspect of the present invention, a computer having a storage unit for storing document data is a creation unit for creating access control information indicating access control to the document data, and each group is a publication source group of the document data. Functioning as a creating unit that creates different access control information, a control unit that controls access to the document data using the access control information, and the group includes a plurality of users who are publishing sources. , A program that is a group different from the second group including at least one user of the publishing source other than the plurality of users.

  According to the invention of claims 1-12, access control to the document data is realized for each group of the publication source of the document data.

It is a block diagram showing a medical information management system concerning an embodiment of the present invention. It is a block diagram which shows the medical information management apparatus which concerns on this embodiment. It is a block diagram which shows a terminal device. It is a figure for explaining an outline of processing in a medical information management system. It is a figure which shows an example of a medical institution management table. It is a figure which shows an example of access control information. It is a figure which shows the correspondence of document data and access control information. It is a sequence diagram which shows the process in a medical information management system.

  FIG. 1 shows an example of a medical information management system as an information processing system according to the embodiment of the present invention. The medical information management system includes, for example, a medical information management device 10 as an information processing device and terminal devices 12 and 14. The medical information management device 10 and the terminal devices 12 and 14 are connected to a communication path N such as a network.

  The medical information management device 10 has a function of managing document data as medical information and providing the document data in response to a request. The medical information is, for example, an electronic medical chart (electronic medical chart), information showing a letter of introduction of a medical institution, medical images (for example, X-ray CT images and X-ray images), information showing medical expense statements, and the like. is there. For example, electronic medical record data, referral data, medical image data, medical expense statement data, and the like are managed as document data. When a medical chart, a letter of introduction, a statement of medical expenses, and the like are created on paper, the image on the paper may be read by a scanner, and the document data (image data) generated thereby may be managed. .

  The terminal devices 12 and 14 are devices such as PCs (personal computers), tablet PCs, smartphones, and mobile phones, and have a function of transmitting and receiving data to and from other devices. The terminal devices 12 and 14 are installed in medical institutions such as university hospitals, clinics, clinics, and private hospitals. The terminal device 12 is, for example, a device used at the publication source of document data, and the terminal device 14 is a device used at the publication destination of document data. In FIG. 1, three terminal devices 12 and three terminal devices 14 are connected to the communication path N, but this is merely an example. One terminal device 12 and one terminal device 14 may be connected to the communication path N, or two or more terminal devices 12 and two or more terminal devices 14 may be connected to the communication path N. ..

  In the medical information management system according to the present embodiment, a user such as a doctor uses the terminal device 12 to specify document data to be disclosed and a disclosure destination of the document data. The medical information management apparatus 10 creates access control information for controlling access to the document data according to the designation. When a user such as a doctor uses the terminal device 14 to request access to the document data, the medical information management apparatus 10 uses the access control information to control access to the document data.

  Hereinafter, the configuration of the medical information management apparatus 10 will be described in detail with reference to FIG. FIG. 2 shows the configuration of the medical information management device 10.

  The communication unit 16 is a communication interface, and has a function of transmitting data to another device and a function of receiving data from another device.

  The medical information DB (medical information database) 18 is a storage device such as a hard disk. Document data as medical information is stored in the medical information DB 18. Document management information for managing the document data is associated with the document data. The document management information is, for example, document identification information (for example, document ID) for identifying document data, information indicating a version of document data (for example, version number), document type information (for example, document type code) indicating the type of document. , Information indicating the title of the document, information indicating the creation date of the document data, and the like. Patient information is associated with the document data. The patient information includes, for example, patient identification information (for example, name and patient ID) for identifying the patient, information indicating the sex of the patient, information indicating the birth date of the patient, information indicating the age of the patient, and the like. For example, each time document data such as an electronic medical record is created, the document data is stored in the medical information DB 18. The document data stored in the medical information DB is shared by the publisher, for example. That is, the document data stored in the medical information DB is data that the terminal device 12 is permitted to access.

  In addition, the medical information DB 18 stores medical institution information regarding medical institutions registered in the medical information management system. The medical institution is a medical institution that is a candidate for the publication destination of document data. The medical institution information includes, for example, medical institution identification information (for example, facility name or facility ID) for identifying the medical institution. The medical institution information may be stored in another storage device.

  Note that the medical information DB 18 is not provided in the medical information management device 10 and may be provided in another device connected to the communication path N.

  The access control information creating unit 20 has a function of creating access control information that is access control information indicating access control to the document data to be disclosed and that is different for each group of the publication source of the document data. The access control information creation unit 20 creates access control information for each document data, for example. One access control information may be created for one document data, or a plurality of access control information may be created for one document data. For example, when access control is set for one document data by one publishing source group, one access control information is created for the document data. On the other hand, when access control is set for a certain document data set by a plurality of publisher groups, a plurality of access control information items are created for the document data set. In this case, access control information is created for each publication source group, and as a result, the same number of access control information pieces as the publication source groups are created.

  The access control information includes, for example, publication source information regarding a publication source group, document management information regarding publication target document data, patient information associated with the document data, and publication destination information regarding a publication destination. .. The group of the disclosure source and the disclosure destination are, for example, medical institutions, clinical departments in medical institutions, areas such as prefectures, municipalities, and the like.

  The publisher information is, for example, publisher identification information (for example, publisher name or publisher ID) for identifying a group of publishers, and publisher setting information (for example, publisher name or publisher name) for identifying a publisher. Publisher user ID), etc. are included. When the unit of the publishing source group is a medical institution such as a hospital, clinic, clinic, etc., the publishing source information includes, as publishing source identification information, medical institution identification information (for example, a medical institution name) for identifying the medical institution. And medical institution ID) are included. When the unit of the publication source group is the medical department, the publication source information includes, as the publication source identification information, medical institution identification information for identifying the medical institution to which the medical department belongs (for example, a medical institution name or a medical institution ID). And medical department identification information (for example, medical department name or medical department ID) for identifying the medical department. When the unit of the publishing source group is an area, the publishing source information includes area identifying information (for example, an area name or an area ID) for identifying the area as the publishing source identifying information. The publication source information may be transmitted to the medical information management apparatus 10 from the terminal device 12 used by the publication source group during the publication process, or may be stored in advance in the medical information DB 18 of the medical information management apparatus 10. May be.

  The disclosure destination information includes, for example, disclosure destination identification information (for example, disclosure destination name or disclosure destination ID) for identifying the disclosure destination. When the unit of disclosure destination is a medical institution such as a hospital, clinic, clinic, etc., the disclosure destination information includes, as disclosure destination identification information, medical institution identification information for identifying the medical institution (for example, a medical institution name or a medical institution). Institution ID) is included. When the unit of the disclosure destination is a medical department, the disclosure destination information includes medical institution identification information (for example, a medical institution name or a medical institution ID) for identifying a medical institution to which the medical department belongs, as disclosure destination identification information. Medical department identification information (for example, medical department name or medical department ID) for identifying the medical department is included. When the unit of the publication destination is an area, the publication destination information includes area identification information (for example, area name or area ID) for identifying the area as the publication destination identification information. The disclosure destination information is transmitted from the disclosure destination to the medical information management device 10 in advance and is stored in advance in the medical information DB 18 of the medical information management device 10. For example, when registering a medical institution or a clinical department of the disclosure destination in the medical information management system, the disclosure destination information is transmitted from the disclosure destination to the medical information management device 10 and stored therein.

  For example, when a user such as a doctor in the publication source group uses the terminal device 12 to specify the publication target document data and the publication destination of the document data, the access control information creation unit 20 responds to the specification. Access control information for controlling access to the document data is created.

  As described above, the access control information includes the patient information and the publisher information. The access control information creation unit 20 permits the change of the access control information by the group indicated by the publication source information included in the access control information, and prohibits the change of the access control information by the group other than the group indicated by the publication source information. To do. For example, when the publisher information included in the access control information includes the medical department identification information indicating the medical department A, the doctors belonging to the medical department A are allowed to change the access control information and other than the medical department A. It is prohibited to change the access control information by a doctor who belongs to the medical department. For example, when a user such as a doctor uses the terminal device 12 to input access to the access control information by inputting the patient information and the disclosure source information, the access control information creating unit 20 uses the input patient information and the access information. The access control information including the publisher information and the access control information are permitted to be changed, and the access control information is permitted to be changed. On the other hand, the access control information creation unit 20 prohibits access to access control information that does not include the input patient information and disclosure source information, and prohibits modification of the access control information. In this way, the access control information is managed individually for each group.

  The disclosure processing unit 22 has a function of registering document data to be disclosed and access control information about the document data in association with each other. The document data and the access control information are associated with each other and stored in the public information DB (public information database) 24.

  The public information DB 24 is a storage device such as a hard disk. In the public information DB 24, document data to be published and access control information for the document data are stored in association with each other.

  The control unit 26 has a function of controlling the operation of each unit of the medical information management device 10. The control unit 26 also includes an access control unit 28.

  The access control unit 28 has a function of controlling access to the document data using the access control information. For example, when a user such as a doctor uses the terminal device 14 to request access to the document data, the access control unit 28 displays the access control information associated with the document data that is the target of the access request. It is used to control access to the document data. When the access request is an access request from the publication destination, access to the document data is permitted. On the other hand, if the access request is not an access request from the publication destination, access to the document data is prohibited.

  Hereinafter, the configurations of the terminal devices 12 and 14 will be described in detail with reference to FIG. FIG. 3 shows the configuration of the terminal device 12. The terminal device 14 has the same configuration as the terminal device 12. The communication unit 30 is a communication interface, and has a function of transmitting data to another device and a function of receiving data from another device. The storage unit 32 is a storage device such as a hard disk. The UI unit 34 is a user interface and includes a display unit and an operation unit. The display unit is a display device such as a liquid crystal display. The operation unit is an input device such as a touch panel or a keyboard. The control unit 36 controls the operation of each unit of the terminal device 12.

  Hereinafter, with reference to FIG. 4, an outline of processing in the medical information management system will be described. FIG. 4 shows a diagram for explaining the outline of the processing.

  The terminal devices 12A, 12B, and 12C are examples of the terminal device 12, and are, for example, terminal devices used in a medical institution (for example, a university hospital) that is a disclosure source. Cardiology and geriatric hypertension are examples of clinical departments in university hospitals, and correspond to examples of the publishing group. The terminal devices 12A and 12B are terminal devices used in cardiology departments in university hospitals, and the terminal device 12C is a terminal device used in geriatric hypertension departments in the same university hospital.

  The terminal devices 14Y, 14T, and 14W are examples of the terminal device 14 and are terminal devices used in a medical institution at the disclosure destination. More specifically, the terminal device 14Y is a terminal device used in the X clinic as a medical institution, and the terminal device 14T is a terminal device used in the S clinic as a medical institution. The device 14W is a terminal device used in a V clinic as a medical institution. Disclosure information (medical institution information) about the X clinic, S clinic, and V clinic is stored in advance in the medical information DB 18 of the medical information management device 10.

  For example, it is assumed that medical treatment or the like is performed on the patient P, and the cardiac CT image 38, the operation record information 40, the discharge summary information 42, and the sample test report 44 are created as document data (medical information). The cardiac CT image 38, the operation record information 40, the discharge summary information 42, and the sample test report 44 are stored in the medical information DB 18 in association with the patient information of the patient P. These pieces of document data are, for example, data shared in university hospitals, and are data permitted to be accessed from the terminal devices 12A, 12B, 12C.

  The cardiac CT image 38, the operation record information 40, and the discharge summary information 42 are document data belonging to the public document group 46, and the discharge summary information 42 and the sample test report 44 are document data belonging to the public document group 48. is there.

  The document data belonging to the public document group 46 is data designated as public document data by the doctors A and B belonging to the internal medicine department. The document data belonging to the public document group 48 is the document data designated as the public document data by the doctor C belonging to the geriatric hypertension department. In the example shown in FIG. 4, the discharge summary information 42 belongs to both the public document group 46 and the public document group 48. That is, the discharge summary information 42 is designated as the document data to be disclosed by both the cardiovascular physician and the geriatric hypertensive physician.

  Doctors A and B belonging to the Department of Cardiology have designated the X Clinic and S Clinic as medical institutions to which they are disclosed. Therefore, the document data belonging to the open document group 46 is the data permitted to be accessed from the X clinic (terminal device 14Y) and the S clinic (terminal device 14T).

  In addition, the doctor C who belongs to the department of geriatric hypertension designates the V Clinic as a medical institution to which the information is disclosed. Therefore, the document data belonging to the public document group 48 is data that the V clinic (terminal device 14W) is permitted to access.

  As described above, the disclosure source medical department, the publication target document data, and the disclosure destination medical institution are associated with each other, and the publication target document data and the disclosure destination medical institution are associated with each disclosure source medical department. And are set individually.

  Hereinafter, the medical information management device 10 will be described in more detail.

  An example of a medical institution registered in the medical information management system will be described with reference to FIG. FIG. 5 shows an example of the medical institution management table. This medical institution management table is an example of medical institution information, and its data is created in advance and stored in the medical information DB 18, for example. The disclosure department is an example of a group of disclosure sources of document data. For example, cardiology and geriatric hypertension are registered as medical departments that have been published. The cardiology department and the geriatric hypertension department are, for example, clinical departments in the same university hospital. The medical institutions that are candidates for disclosure are medical institutions that are candidates for disclosure of document data. As an example of a medical institution that is a candidate for disclosure, an X clinic, an S clinic, a Z heart clinic, and a V clinic are registered in advance. In the example shown in FIG. 5, the cardiology department is associated with the X clinic, the S clinic, and the Z heart clinic, and the geriatric hypertension department is associated with the V clinic. That is, the X clinic, the S clinic, and the Z heart clinic are registered as medical institutions that are candidates for disclosure of document data published by users such as doctors of cardiology, and doctors of geriatric hypertension and the like are registered. The V clinic is registered as a medical institution that is a candidate for the disclosure destination of the document data released by the user. When selecting the medical institution to be published, the user belonging to the cardiology department selects the medical institution to be published from among the X clinic, the S clinic, and the Z heart clinic. A user belonging to the department of geriatric hypertension will select the V Clinic as the medical institution to which it is disclosed.

  Hereinafter, the access control information will be described in detail with reference to FIG. FIG. 6 shows an example of access control information (ACL: Access Control List). The access control information is created according to the instruction of the user who is the disclosure source, and is stored in the disclosure information DB 24. Different access control information is created for each publishing source group. When the unit of the disclosure source group is a medical department, different access control information is created for each medical department. In the example shown in FIG. 6, the user belonging to the cardiology department of the publication source designates the cardiac CT image 38, the surgery record information 40, and the discharge summary information 42 as the document data to be published by the patient P, and the publication destination The X clinic and S clinic are designated as medical institutions. As a result, in the access control information created according to the instruction of the user who belongs to the cardiology department, the patient information of the patient P, the disclosure source information of the cardiology department, and the document data (cardiac CT image 38, surgery record) to be disclosed. The document management information about the information 40 and the discharge summary information 42) is associated with the publication destination information of the medical institutions (X clinic and S clinic) of the publication destination. Further, the user belonging to the geriatric hypertension internal medicine of the publication source designates the discharge summary information 42 and the sample test report 44 as the document data of the patient P to be published, and the V clinic as the medical institution of the publication destination. ing. As a result, in the access control information created according to the instruction of the user who belongs to the geriatric hypertension department, the patient information of the patient P, the disclosure source information of the geriatric hypertension department, and the document data to be disclosed (the discharge summary information 42 and the sample). The document management information regarding the inspection report 44) and the disclosure destination information of the medical institution (V clinic) of the disclosure destination are associated with each other. In this way, different access control information is created for the cardiology and geriatric hypertension. The access control unit 28 controls access to the document data from the medical institution at the disclosure destination by referring to these access control information.

  FIG. 7 shows an example of a correspondence relationship between document data and access control information (ACL). Access control information is created for each document data to be published, and the document data and access control information are stored in the public information DB 24 in association with each other.

  For example, the cardiac CT image 38 and the ACL 50 for controlling access to the cardiac CT image 38 are stored in the public information DB 24 in association with each other. The ACL 50 includes the patient information of the patient P, the disclosure source information of the cardiology department of the disclosure source, the document management information of the cardiac CT image 38, and the disclosure destination information of the medical institutions (X clinic and S clinic) of the disclosure destination. ,including.

  Similarly, the surgery record information 40 and the ACL 52 for controlling access to the surgery record information 40 are stored in the public information DB 24 in association with each other. The ACL 52 includes the patient information of the patient P, the publisher information of the cardiology internal medicine of the publisher, the document management information of the surgery record information 40, and the publisher information of the medical institutions (X clinic and S clinic) of the publisher. ,including.

  Similarly, the discharge summary information 42 and the ACLs 54 and 56 for controlling access to the discharge summary information 42 are stored in the public information DB 24 in association with each other. As described with reference to FIGS. 4 and 6, the discharge-time summary information 42 is designated as the document data to be disclosed by both the cardiovascular physician and the geriatric hypertensive physician. Therefore, the ACL 54 for cardiology and the ACL 56 for geriatric hypertension are created. The ACL 54 is the patient information of the patient P, the publisher information of the cardiology department of the publisher, the document management information of the discharge summary information 42, and the publisher information of the medical institution (X clinic and S clinic). And, including. Further, the ACL 56 includes the patient information of the patient P, the disclosure source information of the geriatric hypertension internal medicine of the disclosure source, the document management information of the discharge summary information 42, the disclosure destination information of the medical institution (V clinic) of the disclosure destination, including.

  The ACLs 54 and 56 may be included in the same ACL. In this case, in one ACL, the part in which the ACL 54 is described is permitted to be accessed by the user belonging to the internal medicine department, and the modification of the part is permitted. On the other hand, in one ACL, the part in which the ACL 56 is described is permitted to be accessed by the user who belongs to the geriatric hypertension department, and the modification of the part is permitted.

  Similarly, the sample test report 44 and the ACL 58 for controlling access to the sample test report 44 are stored in the public information DB 24 in association with each other. The ACL 58 includes the patient information of the patient P, the publisher information of the geriatric hypertension, which is the publisher, the document management information of the specimen test report 44, and the publisher information of the recipient medical institution (V clinic). ..

  Hereinafter, the processing in the medical information management system will be described in detail with reference to FIG. FIG. 8 shows a sequence diagram showing the processing.

  First, the disclosure source user logs in to the medical information management apparatus 10 using the terminal device 12 (S01). For example, it is assumed that the doctor A of the cardiology department logs in to the medical information management apparatus 10 by using the user ID and password for the cardiology department. Authentication at the time of login is performed by the control unit 26 of the medical information management apparatus 10, for example. When the user ID and password registered in advance in the medical information management device 10 and the user ID and password input from the terminal device 12 match, login is permitted. If they do not match, login is not allowed.

  Next, the disclosure source user (doctor A of the cardiology department) uses the terminal device 12 to specify the document data to be disclosed (S02). For example, a list of the document data stored in the medical information DB 18 is displayed on the UI unit 34 of the terminal device 12, and the user (doctor A of the cardiology department) designates the document data to be disclosed from the list. To be done.

  Further, the disclosure source user (doctor A of the cardiology department) uses the terminal device 12 to specify the disclosure destination (S03). For example, the medical institution to which the information is to be disclosed is designated from the medical institution group registered in the medical information management system. When the user of the disclosure source is doctor A of the cardiology department, the disclosure destination medical institution is designated from the group of disclosure candidate medical institutions corresponding to the cardiology department. In the example shown in FIG. 5, the X clinic, the S clinic, and the Z heart clinic are registered as medical institutions that are candidates for disclosure corresponding to cardiology. For example, a list of medical institutions that are candidates for disclosure is displayed on the UI unit 34 of the terminal device 12, and the user (doctor A of the cardiology department) designates the medical institutions to be disclosed from the list.

  Next, the disclosure source user (doctor A of cardiology) uses the terminal device 12 to instruct the disclosure of the document data (S04).

  In the medical information management device 10, the access control information creation unit 20 creates access control information (ACL) (S05). For example, as shown in FIG. 6, the doctor A of the cardiology department designates the cardiac CT image 38, the operation record information 40, and the discharge summary information 42 as the document data to be disclosed. Assume that X clinic and S clinic are designated as medical institutions. In this case, the access control information creation unit 20 creates access control information for the cardiac CT image 38, access control information for the surgery record information 40, and access control information for the discharge summary information 42. For example, as shown in FIG. 7, an ACL 50 is created for the cardiac CT image 38, an ACL 52 is created for the surgery record information 40, and an ACL 54 is created for the discharge summary information 42.

  The disclosure processing unit 22 stores the document data to be disclosed and the access control information for the document data in association with each other in the disclosure information DB 24 (S06).

  Even when the document data is published by the doctor C of geriatric hypertension, the same processing as above is executed. As a result, access control information for geriatric hypertension is created. For example, as shown in FIG. 6, the doctor C of geriatric hypertension designates the discharge summary information 42 and the sample test report 44 as the document data to be published, and regarding each document data, as the medical institution to which the information is published, It is assumed that the V Clinic has been designated. In this case, the access control information creation unit 20 creates the access control information for the discharge summary information 42 and the access control information for the sample test report 44. For example, as shown in FIG. 7, an ACL 56 is created for the discharge summary information 42, and an ACL 58 is created for the sample test report 44.

  When the disclosure destination user accesses the document data, the disclosure destination user logs in to the medical information management apparatus 10 using the terminal device 14 (S07). For example, it is assumed that doctor Y of X clinic logs in to the medical information management apparatus 10 using the user ID and password. Authentication at the time of login is performed by the control unit 26 of the medical information management apparatus 10, for example. If the user ID and password registered in advance in the medical information management device 10 match the user ID and password input from the terminal device 14, login is permitted. If they do not match, login is not allowed.

  Next, the disclosure destination user (doctor Y of X clinic) uses the terminal device 14 to request a list of the document data permitted to be browsed by the user (S08). At this time, the disclosure destination information is transmitted from the terminal device 14 to the medical information management device 10. The disclosure destination information includes medical institution identification information (for example, the name and ID of the X clinic) for identifying the X clinic.

  In the medical information management device 10, the access control unit 28 interprets the access control information (ACL) stored in the public information DB 24 (S09). As a result, the access control unit 28 identifies the document data that the user of the disclosure destination (doctor Y of the X clinic) is permitted to browse. Specifically, the access control unit 28 refers to the access control information including the medical institution identification information transmitted from the terminal device 14 as the publication destination information, and retrieves the document data associated with the medical institution identification information, It is specified as the document data that the user at the publication destination is allowed to browse. Next, the access control unit 28 transmits, to the terminal device 14, the data of the list of the document data that the user of the publication destination is permitted to browse (S10). The UI unit 34 of the terminal device 14 displays a list of document data that is permitted to be browsed (S11).

  For example, as shown in FIG. 6, a cardiac CT image 38, surgery record information 40, and discharge summary information 42 are open to the X clinic. Therefore, access to the cardiac CT image 38, the operation record information 40, and the discharge summary information 42 is permitted. In this case, the access control unit 28 transmits the data of the list of the document data permitted to be published to the X clinic to the terminal device 14. As a result, a list of the cardiac CT image 38, the surgery record information 40, and the discharge summary information 42 is displayed on the UI unit 34 of the terminal device 14 of the X clinic.

  Next, the user of the disclosure destination (doctor Y of the X clinic) uses the terminal device 14 to specify the document data to be acquired from the list of document data displayed on the UI unit 34, and the document data is acquired. Is requested (S12). As a result, the information for identifying the document data designated by the user is transmitted from the terminal device 14 to the medical information management device 10.

  In the medical information management device 10, the access control unit 28 acquires the document data to be acquired specified by the user from the public information DB 24 and transmits the document data to the terminal device 14 (S13). In the terminal device 14, the document data is displayed on the UI unit 34 (S14).

  For example, when the heart CT image 38 is designated by the doctor Y of the X clinic, the data (document data) of the heart CT image 38 is transmitted from the medical information management device 10 to the terminal device 14, and the UI unit 34 of the terminal device 14 is transmitted. A heart CT image 38 is displayed at.

  Even when the doctor T at the S clinic and the doctor W at the V clinic are users at the disclosure destination, the same processing as above is executed. For example, when the doctor T of the S clinic requests the acquisition of the document data, the UI unit 34 of the terminal device 14 displays the cardiac CT image 38, the surgery record information 40, and the surgery record information 40 as a list of the document data permitted to be viewed. A list of discharge summary information 42 is displayed. When the doctor W of the V clinic requests the acquisition of the document data, the UI unit 34 of the terminal device 14 displays a list of the document data permitted to be viewed as a list of the discharge summary information 42 and the sample test report 44. Is displayed.

  As described above, in the present embodiment, different access control information is generated for each group of disclosure sources, and access to the document data is controlled based on the access control information. The access control information is managed individually for each group, and access to the access control information set by the own group from other groups is prohibited. Thereby, the access control information set by its own group is not changed by other groups. Therefore, access control to the document data is realized for each group of the publication source of the document data.

  For example, access control information set by a doctor who belongs to his/her own medical department is not changed by a doctor who belongs to another medical department. As a result, access control to the document data is realized for each medical department that publishes the document data. For example, in the case where each medical department is independent in the same hospital, even if the same medical information management system is used, the independence of each medical department is ensured in the access control to the document data.

  In the above example, the clinical department is a group that publishes, and access control information is created for each individual medical department. However, even if the group that publishes is a medical institution or area, etc. Similarly, with respect to access control for document data, independence of each group is secured. For example, when multiple medical institutions are registered in the medical information management system as a disclosure source group, access control information is created for each individual medical institution, and the access control information set by its own medical institution is Not changed by any medical institution. As a result, even if the same medical information management system is used, the independence of each medical institution is ensured with respect to the access control to the document data.

  When the disclosure source group is a medical institution or area, the medical information management system according to the present embodiment is expected to be applied to regional medical care. In this case, by using the medical information management system according to this embodiment, access control for medical information is realized in regional medicine.

  According to this embodiment, the access control to the document data is changed by updating the access control information without updating the document data itself. For example, when a plurality of publisher groups set access control for the same document data according to the convenience of each group, the access control information is adjusted according to the convenience of each group without updating the document data itself. All you have to do is create or update.

  Hereinafter, modified examples will be described. When applying the publication process to the document data stored in the medical information DB 18, a template called a default publication document type may be used. The default public document type is the type of document data to be published, and the type is shown in the template. For example, when a user who belongs to the publication source group logs in to the medical information management device 10 and instructs the application of the publication process, the access control information creation unit 20 refers to the template to determine the type of document data to be published. Specify and treat the document data corresponding to the default public document type as the public target. The document management information of the document data includes a document type code indicating a document type. The type of document data is specified by referring to the document type code. The access control information about the group of the publication source includes the document management information of the document data corresponding to the default publication document type and the publication destination information of the publication destination designated by the user who belongs to the publication source group. As a result, access from the publication destination to the document data corresponding to the default publication document type is permitted. For example, when the default public document type is an electronic medical record, the electronic medical record is treated as a public target. By using the default public document type, the work of the user regarding the public processing becomes easier as compared with the case where it is not used. Furthermore, for example, when "Documents classified as inspection records" is set as the default public document type, the documents of the inspection records such as blood test, gastric endoscopy, chest X-ray examination, etc. will be published. Treated

  As another modification, a template called an automatically published document type may be used when the publication process is applied to document data registered in the medical information DB 18 in the future. The automatically published document type is the type of document data to be published, and the template shows the type. When the document data is newly stored in the medical information DB 18, the access control information creation unit 20 identifies the type of document data to be disclosed by referring to the template. When the type of the newly registered document data corresponds to the open document type, the access control information creation unit 20 handles the document data as a disclosure target. In this case, the access control information includes the document management information of the document data. By using the automatic publication document type, the work of the user regarding the publication process becomes easier as compared with the case where it is not used.

  Further, the publication period of the document data may be set. The publication period is a period in which access to the document data is permitted from the publication destination. The access control unit 28 permits access to the document data from the publication destination during the publication period and prohibits access to the document data from the publication destination outside the publication period. Information indicating the publication period is included in the access control information. The access control unit 28 controls access by the publication period by referring to the information. As a result, access to the document data is automatically prohibited after the publication period has passed, and the publication source user does not have to perform the publication suspension work.

  In this embodiment, when at least one of the publication source group, the publication target document data, and the publication destination state is changed, the access control information related to the change is updated, or a new access is made. Control information is created. For example, the publication flag of document data, publication period, publication destination (medical institution, department, area, etc.), publication destination permitted to be published by the publishing group, publication destination facility master, automatic publication document type, automatic publication Period, default published document type in the publishing group, document type permitted to be published in the publishing group, defined document type, clinical department, patient/user, document data, document data version, document data disclosure When the status of the tag, document type, etc. is changed, the access control information related to the status change is updated or new access control information is created. Other access information not related to the above state change is not affected and is not updated with the state change. In other words, each access control information is independent of other access information, and even if the status related to one access control information is changed, other access control information is not affected and the status change is not affected. Not updated accordingly.

  When the publication of the document data is stopped, the publication-targeted document data may be deleted from the public information DB 24 and the access control information associated with the document data may be left in the public information DB 24. As a result, the leakage of the document data to be suspended can be prevented, and information on access control can be provided to the disclosure destination.

  The medical information management device 10 described above is realized by cooperation of hardware resources and software, for example. Specifically, the medical information management device 10 includes a processor such as a CPU (not shown). The function of each unit of the medical information management apparatus 10 is realized by the processor reading and executing a program stored in a storage device (not shown). The program is stored in the storage device via a recording medium such as a CD or a DVD, or via a communication path such as a network. Alternatively, each unit of the medical information management device 10 may be realized by a hardware resource such as a processor or an electronic circuit. A device such as a memory may be used in the realization thereof. As another example, each unit of the medical information management device 10 may be realized by a DSP (Digital Signal Processor), an FPGA (Field Programmable Gate Array), or the like.

  10 medical information management device, 12, 14 terminal device, 18 medical information DB, 20 access control information creation unit, 22 disclosure processing unit, 24 disclosure information DB, 26 control unit, 28 access control unit.

Claims (12)

Storage means for storing document data,
Creating means for creating access control information indicating access control to the document data, the creating means creating different access control information for each group of the publication source of the document data;
Control means for controlling access to the document data using the access control information;
Have
The group includes a plurality of users who are publishers,
The group is a group different from a second group including at least one user who is a publisher other than the plurality of users,
Information processing device. The document data is medical data,
The group is a medical institution or a clinical department in a medical institution,
The information processing apparatus according to claim 1, wherein: The creating means creates the access control information so as to permit access to the document data corresponding to a specific document type,
The information processing apparatus according to claim 1 or 2, characterized in that. The access control information includes information indicating a period during which access to the document data is permitted,
The control means permits access to the document data during the period and prohibits access to the document data outside the period,
The information processing apparatus according to any one of claims 1 to 3, wherein: The access control information includes information indicating a disclosure destination of the document data, and is updated with a change of at least one of a publication source group, the document data to be accessed, and a publication destination.
The information processing apparatus according to any one of claims 1 to 4, wherein: The publication source group is plural,
The creating means creates different access control information for each group included in the plurality of groups,
The information processing apparatus according to any one of claims 1 to 5, characterized in that: The document data is data shared by the plurality of groups,
The information processing apparatus according to claim 6, characterized in that. The creating means creates the access control information of the document data in response to a request from at least one of the plurality of users in the group, and in response to a second request from the second group, Creating second access control information of the document data,
The information processing apparatus according to any one of claims 1 to 7, characterized in that. A request from at least one of the plurality of users of the group indicates at least a first publication destination to which the document data can be accessed;
The second request from the second group indicates at least a second publication destination that can access the document data,
The second publication destination is different from the first publication destination,
The information processing apparatus according to claim 8, wherein Means for providing a first list of a first plurality of document data including the document data to the first publication destination according to the access control information and in response to a request from the first publication destination for the first list. When,
Providing a second list of a second plurality of document data including the document data to the second publication destination according to the second access control information and in response to a request from the second publication destination for the second list. Means to do
According to the selection of the document data from one of the first list and the second list provided to one of the first publication destination and the second publication destination, the first publication destination and the second publication destination Means for providing the document data to one of the
Further having,
The information processing apparatus according to claim 9, characterized in that. The access control information indicates that at least one of the plurality of users of the group of the publication source has selected a plurality of different groups other than the group and the second group that can access the document data. Shows,
The plurality of different groups includes a plurality of individual medical institutions,
The group and the second group include one of individual medical departments in the same medical institution, which is different from the plurality of individual medical institutes.
The information processing apparatus according to claim 1, wherein: A computer having a storage means for storing document data,
Creating means for creating access control information indicating access control to the document data, and creating different access control information for each group of the publication source of the document data,
Control means for controlling access to the document data using the access control information;
Function as
The group includes a plurality of users who are publishers,
The group is a group different from a second group including at least one user who is a publisher other than the plurality of users,
program.

Images