JP5875047B2 - Electronic medical record transmission method and system using quantum key distribution - Google Patents

Description

  The present invention relates to an electronic medical record transmission method and system using quantum key distribution.

  Electronic charts are now permitted in medical settings. For this reason, it is assumed that medical records and test results will be exchanged electronically between hospitals and between inspection facilities and hospitals in the future. In addition, it is assumed that the electronic medical record includes information that is desirably kept secret in the electronic medical record, such as genetic information.

  On the other hand, a communication system using a quantum key distribution system is known. For example, the quantum key distribution system can create a quantum key using a single photon and share it to perform highly confidential encryption communication (Japanese Patent Laid-Open No. 2011-182283).

JP 2011-182283 A

  An object of the present invention is to provide an electronic medical record transmission method and system with improved secrecy in the transfer of electronic information between hospitals and between medical systems such as between an inspection organization and a hospital.

  In the present invention, a quantum key distribution device distributes a first random number such as a wine time pad cipher to a server and a client terminal of a neighboring hospital. The server encrypts the inspection result using the wine time pad encryption and password. Then, the client of the neighboring hospital receives the encrypted test result. When a user receives a test result at a nearby hospital, the test result can be decrypted and displayed only when there is a user password in addition to the above wine time pad encryption. By doing in this way, communication between buildings can be made highly confidential using wine time pad encryption or the like. Furthermore, since the examination result can be decrypted only after the user exists in the neighboring hospital, the confidentiality of information such as an electronic medical record can be improved.

  The first aspect of the present invention relates to an electronic medical record transmission system including a quantum key distribution device 11 and a server 12. Electronic medical record transmission systems include not only those that transmit electronic medical records themselves, but also those that transmit the contents of electronic medical records. An example of the contents of an electronic medical record is a result of examination, diagnosis, or analysis by a medical institution (these are called “test results”). An example of the test result is gene information which is a result of gene analysis.

  The quantum key distribution device 11 is a device for generating a quantum key or a common random number that is a first random number. The quantum key distribution device 11 is known.

  The server 12 includes a first random number acquisition unit 13 that receives a first random number from the quantum key distribution device 11 and a first password acquisition unit that receives a password input by the user or a password that is information derived from the user's terminal. 14, an inspection result acquisition unit 15 that receives a user's inspection result, an encryption unit 16 that encrypts the inspection result acquired by the inspection result acquisition unit 15 using a password and a first random number, and an encryption unit 16 And an output unit 18 for outputting the encrypted inspection result to the client terminal 17.

  The first random number acquisition unit 13 may read the first random number stored in the storage unit of the server 12. Further, the first random number acquisition unit 13 may acquire the first random number output from the quantum key distribution device 11. An example of the first random number is one-time pad encryption.

  The first password acquisition unit 14 may read the first password stored in the storage unit of the server 12. The first password acquisition unit 14 may be configured to acquire the first password input from the server 12 or a terminal that can exchange information with the server 12. Examples of user terminals are computers and portable terminals. The user terminal may be a terminal having a SIM card. In that case, the information derived from the user's terminal may be a SIM card number.

  The encryption unit 16 is an element that encrypts the inspection result using the password and the first random number. Since this encryption is already known in the quantum key distribution technology, a known method may be adopted as appropriate.

  The client terminal 17 includes an encrypted inspection result acquisition unit 21 that acquires an encrypted inspection result, a second password acquisition unit 22 that receives a password, a second random number acquisition unit 23 that receives a first random number, Using a password and a first random number, the decryption unit 24 decrypts the encrypted test result, and the display unit 25 displays the test result decrypted by the decryption unit 24.

  An example of the client terminal 17 is a computer in a nearby hospital designated by the user in advance.

  The encrypted inspection result acquisition unit 21 acquires, for example, an encrypted inspection result transmitted by the server 12.

  The second password acquisition unit 22 receives, for example, a password that is input by the user by an input of the input unit or a password that is information derived from the user's terminal. The second password acquisition unit 22 may acquire the password by reading the password stored in the storage unit of the client terminal 17. If the user terminal has a SIM card, the SIM card number may be read out by a SIM card reader.

  The second random number acquisition unit 23 is an element for receiving the first random number. For example, the second random number acquisition unit 23 may receive a quantum key or a common random number that is a first random number from the quantum key distribution device 11.

  The decryption unit 24 is an element for decrypting the encrypted inspection result using the password and the first random number.

  An example of the display unit 25 is a monitor. You may use the display part of a user's portable terminal as a monitor.

  The second aspect of the present invention relates to an electronic medical chart transmission method.

  In this method, the quantum key distribution device 11 distributes a quantum key or a common random number, which is a first random number, to the server 12 and the client terminal 17.

  The server 12 receives a password entered by the user or a password that is information derived from the user's terminal. Then, the server 12 encrypts the user inspection result using the password and the first random number. Next, the server 12 outputs the encrypted inspection result to the client terminal 17.

  The client terminal 17 acquires the encrypted inspection result. The client terminal 17 receives the password and the first random number. The client terminal 17 decrypts the encrypted inspection result using the password and the first random number. Thereafter, the client terminal 17 displays the inspection result decrypted by the decryption unit 24.

  ADVANTAGE OF THE INVENTION According to this invention, the transmission method and system of the electronic medical record which improved confidentiality can be provided in transfer of electronic information between medical systems, such as between hospitals or between an inspection organization and a hospital.

FIG. 1 is a block diagram showing an electronic medical record transmission system according to the first aspect of the present invention. FIG. 2 is a flowchart of an electronic medical chart transmission method according to the second aspect of the present invention. FIG. 3 is a block diagram illustrating a preferred mode of use of the present invention.

  The present invention will be described below with reference to the drawings. The present invention is not limited to the following description, and includes modifications appropriately made within the scope obvious to those skilled in the art.

  FIG. 1 is a block diagram showing an electronic medical record transmission system according to the first aspect of the present invention. As shown in FIG. 1, the electronic medical record transmission system of the present invention includes a quantum key distribution device 11 and a server 12. The quantum key distribution device 11 and the server 12 are connected so as to exchange information with the client terminal 17.

  Each element used in this system appropriately includes elements that a normal computer has. Examples of elements that a normal computer has are an input unit, an output unit, a calculation unit, a control unit, and a storage unit. Each device may implement each command by hardware. Further, for example, each command may be realized by reading information stored in the storage unit as appropriate based on a command from a program stored in a storage medium or a main memory and performing a calculation in the calculation unit.

  The quantum key distribution device 11 is a device for generating a quantum key or a common random number that is a first random number. The quantum key distribution device 11 is a device for distributing quantum keys. The quantum key distribution device may be any device that can generate a quantum key and transmit it to a predetermined device. Examples of quantum key distribution devices include those disclosed in Japanese Patent Application Laid-Open No. 2011-182283 (Patent Document 1), Japanese Patent Application Laid-Open No. 2008-205993, Japanese Patent Application Laid-Open No. 2007-318445, and Japanese Patent Application Laid-Open No. 2012-4955. It is disclosed in the publication. Since it is already known, a known quantum key distribution device can be used as appropriate in the present invention. A method of encrypting information using a quantum key as a random number is also known.

  The quantum cryptography device disclosed in Japanese Patent Application Laid-Open No. 2008-205993 is a quantum cryptography device using an asymmetric Mach-Zehnder interferometer (AMZI). This quantum cryptography device can achieve the maximum drowning state of the polarization mode and the time-bin mode. This quantum cryptography device mainly carries information on the degree of freedom of a time bin pulse and propagates it through a transmission line such as a fiber. The operating principle of this quantum key distribution device is disclosed in Japanese Patent Laid-Open No. 2008-205993. Therefore, those skilled in the art can obtain the quantum key distribution device used in the present invention based on this publication.

  A quantum key distribution device disclosed in Japanese Patent Application Laid-Open No. 2007-318445 includes a light source that generates a entangled photon pair and a generated quantum entangled photon pair in two bands, a high frequency band and a low frequency band at the center frequency. There are those having a band separation filter that separates them. This device is a first communication device that receives separated high-frequency band light, and divides the high-frequency band light into a plurality of wavelength channels, and measures the high-frequency band light in each wavelength channel. Have. Furthermore, this device is a second communication device that receives the separated low frequency band light, and divides the low frequency band light into a plurality of wavelength channels and measures the low frequency band light in each wavelength channel. Have a device to do. The operating principle of this quantum key distribution device is disclosed in Japanese Patent Application Laid-Open No. 2007-318445. Therefore, those skilled in the art can obtain the quantum key distribution device used in the present invention based on this publication.

  The quantum key distribution device disclosed in Japanese Patent Application Laid-Open No. 2012-4955 generates two types of photon pairs having different wavelengths, and enters each of them into an asymmetric Mach-Zehnder interferometer to make a time-bin drowning state. . The photon pair having two types of wavelengths has a wavelength suitable for optical fiber transmission and a wavelength suitable for free space transmission and photon detection. This quantum key distribution system can achieve quantum key distribution (QKD) over a long distance by performing swapping using a plurality of pairs of twisted photon pairs having two wavelengths. The operating principle of this quantum key distribution device is disclosed in Japanese Patent Application Laid-Open No. 2012-4955. Therefore, those skilled in the art can obtain the quantum key distribution device used in the present invention based on this publication.

  The quantum key in this specification may be a quantum key generated by a quantum key distribution device. The quantum key distribution device includes a genuine random number generator or a pseudo random number generator, and is generated by these random number generators. It may be a key such as a random number.

  The first random number generated by the quantum key distribution device may be a so-called “one-time pad encryption”. One-time pad encryption is, for example, encrypting data using a random number having the same length as that of the data to be encrypted as an encryption key, and never using the random number once used again. In the present invention, for example, a random number that is “one-time pad encryption” is shared by quantum key distribution, and data is encrypted by a one-time pad encryption method using the shared random number as an encryption key. Since the server encrypts the data and the client terminal decrypts the data, it is possible to reliably prevent eavesdropping on the route. By setting the client terminal to erase immediately after using the encryption key, even if a call was recorded in the section between the server and the client terminal, there is no encryption key, so past communication data It cannot be deciphered.

  The server 12 includes a first random number acquisition unit 13, a first password acquisition unit 14, an inspection result acquisition unit 15, an encryption unit 16 that performs encryption, and an output unit 18. The server 12 may be, for example, a computer in a large hospital or a computer in an examination facility. Further, the server 12 may be a server connected so that information can be exchanged with a computer into which the inspection result is input in the inspection organization.

  The first random number acquisition unit 13 is an element for receiving a first random number from the quantum key distribution device 11. The first random number acquisition unit 13 may be an input / output unit of a server. Since the quantum key distribution device 11 and the server 12 are connected so as to be able to exchange information, the input / output unit of the server receives the first random number distributed by the quantum key distribution device 11. Then, the server 12 temporarily stores the first random number as appropriate in a storage unit in the server and uses it for the next encryption process. In addition, the first random number acquisition unit 13 may read the first random number stored in the storage unit of the server 12. Further, the first random number acquisition unit 13 may acquire the first random number output from the quantum key distribution device 11. An example of the first random number is one-time pad encryption.

  The 1st password acquisition part 14 is an element for receiving the password which is the information input from the password input by the user, or a user's terminal. The first password acquisition unit 14 may be configured to acquire the first password input from the server 12 or a terminal that can exchange information with the server 12. For example, the user inputs a password to a terminal connected to the server 12. Then, the first password acquisition unit 14 receives the password input by the user. In this way, the server 12 acquires the user's password. Moreover, the 1st password memorize | stored in the memory | storage part of the server 12 may be read.

Examples of user terminals are computers and portable terminals. Examples of mobile terminals are mobile phones and mobile terminals. The user's terminal is a SIM (Subscriber Identity).
It may be a terminal having a (Module) card. In that case, the information derived from the user's terminal may be a SIM card number. In this case, for example, the SIM reader may read the SIM card number and transmit it to the server 12, and the input / output unit of the server 12 may receive the SIM card number.

  The encryption unit 16 is an element that encrypts the inspection result using the password and the first random number. Since this encryption is already known in the quantum key distribution technology, a known method may be adopted as appropriate. For example, the encryption unit 16 converts the inspection result using a password. Then, the encryption unit 16 further encrypts the inspection result converted using the password, using the first random number.

  The output unit 18 is an element for outputting the inspection result encrypted by the encryption unit 16 to the client terminal 17.

  The client terminal 17 includes an encryption inspection result acquisition unit 21, a second password acquisition unit 22, a second random number acquisition unit 23, a decryption unit 24, and a display unit 25. An example of the client terminal 17 is a nearby hospital computer terminal designated by the user in advance.

  The encrypted inspection result acquisition unit 21 is an element for acquiring an encrypted inspection result. The encrypted inspection result acquisition unit 21 acquires, for example, an encrypted inspection result transmitted by the server 12. For example, the input / output unit of the client terminal 17 functions as the encryption inspection result acquisition unit 21.

  The second password acquisition unit 22 is an element for receiving a password. For example, the second password acquisition unit 22 receives a password input by the user by an input of the input unit of the client terminal 17 or a password that is information derived from the user's terminal. The second password acquisition unit 22 may acquire the password by reading the password stored in the storage unit of the client terminal 17. If the user terminal has a SIM card, the SIM card number may be read out by a SIM card reader.

  The second random number acquisition unit 23 is an element for receiving the first random number. For example, the second random number acquisition unit 23 may receive a quantum key or a common random number that is a first random number from the quantum key distribution device 11. Further, the client terminal 17 receives the first random number and stores it in the storage unit of the client terminal 17, and the second random number acquisition unit 23 stores the storage unit when decrypting the encrypted inspection result. The first random number may be read from. In this case, the client terminal 17 may perform a process of deleting the read first random number from the storage unit.

  The decryption unit 24 is an element for decrypting the encrypted inspection result using the password and the first random number. For example, the inspection result can be decrypted by releasing the quantum key from the encrypted inspection result using the first random number and then releasing the password using the password. The calculation process by the decoding unit 24 can be executed by the control unit receiving an instruction from the main program, appropriately reading out information from the storage unit, and causing the calculation unit to perform a calculation for decoding.

  An example of the display unit 25 is a monitor. You may use the monitor of a user's terminal as the display part 25. FIG. The inspection result decrypted by the decryption unit 24 is displayed on the display unit 25 of the client terminal 17. In this way, the user can see the test results.

  FIG. 2 is a flowchart of an electronic medical chart transmission method according to the second aspect of the present invention. In FIG. 2, S means a step (process).

  As shown in FIG. 2, this method includes a distribution step (S101), a first password acquisition step (S102), an encryption step (S103), and an output step (S104). This method further includes an encryption inspection result acquisition step (S105), a second random number acquisition step (S106), a second password acquisition step (S107), a decryption step (S108), and a display step ( S109).

  The distribution step (S101) is a step in which the quantum key distribution device 11 distributes the quantum key or the common random number that is the first random number to the server 12 and the client terminal 17. The quantum key distribution device 11 generates a first random number. The quantum key distribution device 11 receives the address information of the client terminal 17 from the server 12. For this reason, the quantum key distribution device 11 distributes the quantum key or the common random number to the server 12 and the client terminal 17. Then, the server 12 acquires the distributed first random number. On the other hand, the client terminal 17 also acquires the first random number.

  The first password acquisition step (S102) is a step in which the server 12 receives a password input by the user or a password that is information derived from the user's terminal. For example, the user inputs a password using an input device of a terminal connected to the server 12. Then, the server 12 acquires a password. Further, the user holds the terminal 27 including the SIM card over the SIM reading device connected to the server 12. Then, information unique to the terminal such as the SIM card number is read from the terminal 27 and output to the server 12. The server obtains information specific to this terminal 27. The server may use information unique to the terminal 27 as a password.

  The encryption step (S103) is a step in which the server 12 encrypts the user inspection result using the password and the first random number. For example, the inspection result is stored in the server 12 in advance. This test result is a test result of a user obtained by an analysis device in a medical field such as a gene analysis device. The analysis device itself may function as the server 12. Further, the server 12 may receive the inspection result from the analysis device 28. The test result may include genetic information, SNIPs, blood type, height, weight, predetermined measurement values, and user personal information.

  The output step (S104) is a step in which the server 12 outputs the encrypted inspection result to the client terminal 17. For example, the user specifies the address of the user who wants to view the test result or a hospital that exists in the vicinity of the user's workplace. The designation information is input to the server 12. The server 12 transmits the encrypted test result to the client terminal 17 using the address of the client terminal existing in the hospital.

  The encrypted inspection result acquisition step (S105) is a step in which the client terminal 17 acquires the encrypted inspection result. As described above, for example, since the server 12 transmits the encrypted inspection result using the address of the client terminal 17, the client terminal 17 can receive the encrypted inspection result. .

  The second random number acquisition step (S106) is a step in which the client terminal 17 acquires the first random number. Since the first random number is transmitted to the client terminal 17, the client terminal 17 can release the encryption using the first random number. After receiving the encrypted inspection result, the client terminal 17 cancels encryption based on the first random number using the first random number, and displays the inspection result that has been decrypted using the first random number. You may remember it. However, in the state where no user exists, the client terminal 17 has not acquired the user's password or the like, and therefore the inspection result obtained by releasing the encryption using the first random number cannot be decrypted.

  The second password acquisition step (S107) is a step in which the client terminal 17 acquires a password. For example, after an encrypted test result is transmitted to a client terminal of a neighboring hospital, the user goes to the neighboring hospital. For example, the user inputs a password from an input unit (for example, a keyboard, a mouse, a touch panel, and a SIM reading device) of the client terminal 17.

  In the decrypting step (S108), the client terminal 17 decrypts the encrypted inspection result using the password and the first random number. As described above, after the encryption by the first random number is canceled from the encrypted inspection result, the inspection result may be decrypted by releasing the password.

  The display step (S109) is a step in which the client terminal 17 displays the inspection result decrypted by the decryption unit 24. After the arithmetic unit of the client terminal 17 performs the decryption process, the inspection result that has been decrypted is stored in the storage unit of the client terminal 17. And the control part of a client terminal displays the test result memorize | stored in the memory | storage part on a display part. The display unit may be a display unit of the client terminal or a display unit of the user terminal 27.

  Next, a preferred embodiment of the present invention will be described. This aspect is a system for effectively eliminating stray light from a medical device. The quantum key distribution apparatus of the present invention normally uses a single photon. Single photons are delivered to the target terminal using an optical fiber. In single photon communication, information is exchanged using photons. On the other hand, in medical institutions, there are extremely strong light sources such as medical lighting. For this reason, the situation where the photon and light which originate from medical illumination penetrate | invade into an optical fiber, and impede the precision of single photon communication may arise. For this reason, in the preferred system of the present invention, the quantum key is distributed using the photons in the wavelength region that is not affected by the stray light, ascertaining the wavelength with much stray light on the client terminal side.

  FIG. 3 is a block diagram illustrating a preferred mode of use of the present invention. As shown in FIG. 3, the laid optical fiber has a first optical fiber 31 through which photons emitted from the light source 30 propagate. This system includes a stray light detection device 33 and a photon wavelength determination device 34. The single photon communication system is a system for performing information communication using a single photon. An example of a transmission path for propagating photons of this system is an optical fiber. An example of a single photon communication system is a quantum key distribution system. Quantum key distribution systems using single photons are disclosed in, for example, Japanese Patent Application Laid-Open Nos. 2011-184283, 2011-309502, 2011-66497, Japanese Patent No. 4625907, and Japanese Patent No. 4724035. As it is already known. This specification is incorporated by reference in its entirety.

  In this system, since the stray light detection device 33 measures stray light and the photon wavelength determination device 34 can determine a wavelength that is less affected by stray light, light (photons) having a wavelength less affected by such stray light is used. The used information communication can be performed.

  The stray light detection device 33 detects stray light that leaks from the second optical fiber 32 and enters the first optical fiber 31 or stray light that enters from the medical device on the client terminal side into the first optical fiber 31. It is a device for doing. An example of the stray light detection device 33 includes a variable wavelength narrow band filter 41 and a single photon detector 42. The variable wavelength narrow band filter 41 is an optical filter that can change the wavelength region of the transmitted light. The light transmission region of the tunable narrowband filter 41 may be a region that covers the wavelength of light propagating in the adjacent optical fiber. Since the wavelength tunable narrowband filter itself is already known, a known wavelength tunable narrowband filter can be appropriately used in the present invention. On the other hand, the wavelength tunable narrowband filter 41 of the present invention is preferably connected to a computer 50 to be described later so as to be able to control the transmitted wavelength region. The single photon detector 42 is a device that can measure the number of photons, for example. Then, the stray light detection device 33 selects a wavelength by the variable wavelength narrow band filter 41. A single photon detector 42 then counts the number of photons at the selected wavelength. In this way, the stray light detection device 33 can measure the wavelength and intensity (count number) of stray light that has entered the first optical fiber 31. That is, the tunable narrowband filter 41 sweeps, for example, a wavelength region including an optical wavelength region used for communication in an adjacent optical fiber or a wavelength region of light included in medical illumination, and a single photon detector. By detecting photons output from the first optical fiber 31, the stray light spectrum obtained by summing up the wavelength and the count number of the stray light can be obtained. For this reason, the photon wavelength determination device 34 can select a wavelength region with less influence of stray light from a wavelength region where a single photon can be output, using information on the stray light spectrum.

  The photon wavelength determination device 34 is a device for obtaining the wavelength of a photon used in the first optical fiber 31 using information on stray light detected by the stray light detection device 33. The photon wavelength determination device 34 stores, for example, a wavelength region of photons that can be output to the first optical fiber 31, and in the stored wavelength region of photons, the wavelength region where the intensity of stray light received from the stray light detection device 33 is the smallest or The wavelength of a photon used in the first optical fiber 31 is obtained by obtaining a wavelength region smaller than a predetermined threshold. The photon wavelength determination device 34 is connected so that it can receive the output from the stray light detection device 33, for example. The photon wavelength determination device 34 is connected to, for example, a computer 50 that controls the operation of the stray light detection device 33. This computer has an input / output unit, a control unit, a calculation unit, and a storage unit, and appropriately reads out a control program from the storage unit based on the input information, and the control unit can cause the calculation unit to perform a predetermined calculation. it can. For this reason, the photon wavelength determination device 34 receives information on the stray light detected by the stray light detection device 33 and grasps the wavelength region where the stray light count is small. The computer 50 receives the output from the photon wavelength determination device 34 and adjusts the wavelength of the single photon output by the single photon generator that is the light source 30. In this way, this system can automatically determine the wavelength of a photon that is less affected by stray light and output such a photon by using a computer.

  A preferred embodiment of this system further includes a quantum key distribution device 11 that generates a quantum key using a photon having a wavelength obtained by the photon wavelength determination device 34 and outputs the quantum key to the first optical fiber 31. Since the system of this aspect can generate a quantum key having a photon wavelength with little influence of stray light, it functions as an extremely accurate quantum key communication system. Since a quantum key distribution device using a single photon is known, a known quantum key distribution device can be used.

  In a preferred embodiment of the system of the present invention, the above stray light detection is performed at a predetermined frequency, and the wavelength of a single photon used for communication is automatically changed. On the other hand, in single photon communication, in addition to stray light, accurate communication may not be possible due to attacks from third parties. Therefore, a preferred embodiment of this system further includes a bit error rate measuring device 43 for measuring the bit error rate. That is, the system of this aspect measures the bit error rate at a predetermined frequency, and determines that the user is under attack when the bit error rate exceeds a predetermined threshold. Then, when the system is under attack, for example, the single photon communication is interrupted.

  The stray light that has entered the first optical fiber 31 is detected. The information on the stray light detected in the stray light detection step is used to determine the wavelength of the photon used in the first optical fiber 31. Then, by outputting photons having the determined wavelength to the first optical fiber 31, single photon communication can be performed using photons having a wavelength that is less affected by stray light. However, in the present invention, the stray light detection and the photon wavelength determination are repeatedly performed, the wavelength region where the influence of the stray light is small is grasped in real time, and the photon having the wavelength with the little influence of the stray light is output to the first optical fiber 31. preferable. Furthermore, it is preferable that the bit error rate described above is also measured in real time to control the photons output to the first optical fiber 31.

  The present invention can be used in the field of information communication.

DESCRIPTION OF SYMBOLS 11 Quantum key distribution apparatus; 12 Server; 13 1st random number acquisition part; 14 1st password acquisition part; 15 Inspection result acquisition part; 16 Encryption part; 17 Client terminal; 18 Output part; 22 second password acquisition unit; 23 second random number acquisition unit; 24 decryption unit; 25 display unit

Claims (6)

An electronic medical record transmission system including a quantum key distribution device (11) and a server (12),
The quantum key distribution device (11) is a device for generating a quantum key or a common random number which is a first random number,
The server (12)
A first random number acquisition unit (13) for receiving the first random number from the quantum key distribution device (11);
A first password acquisition unit (14) for receiving a password entered by a user or a password that is information derived from the user's terminal;
An inspection result acquisition unit (15) for receiving the inspection result of the user;
An encryption unit (16) for encrypting the inspection result acquired by the inspection result acquisition unit (15) using the password and the first random number;
An output unit (18) for outputting the inspection result encrypted by the encryption unit (16) to the client terminal (17);
Have
The client terminal (17)
An encrypted inspection result acquisition unit (21) for acquiring the encrypted inspection result;
A second password acquisition unit (22) for receiving the password;
A second random number acquisition unit (23) for receiving the first random number;
A decryption unit (24) for decrypting the encrypted inspection result using the password and the first random number;
A display unit (25) for displaying the inspection result decoded by the decoding unit (24);
Have
Electronic medical record transmission system. The electronic medical record transmission system according to claim 1,
The first random number generated by the quantum key distribution device (11) is a one-time pad cipher.
Electronic medical record transmission system. The electronic medical record transmission system according to claim 1,
The user terminal is a terminal having a SIM card;
The information derived from the user's terminal is a SIM card number.
Electronic medical record transmission system. The electronic medical record transmission system according to claim 1,
The test results include genetic analysis results,
Electronic medical record transmission system. The electronic medical record transmission system according to claim 1,
The client terminal (17) is a terminal in a hospital.
Electronic medical record transmission system. A distribution step in which the quantum key distribution device (11) distributes a quantum key or a common random number as a first random number to the server (12) and the client terminal (17);
A first password acquisition step in which the server (12) receives a password entered by a user or a password that is information derived from the user's terminal;
An encryption step in which the server (12) encrypts the user test result using the password and the first random number;
An output step in which the server (12) outputs the encrypted inspection result to the client terminal (17);
The client terminal (17) obtains an encrypted inspection result, and an encrypted inspection result acquisition step;
A second random number acquisition step in which the client terminal (17) receives the first random number;
A second password acquisition step in which the client terminal (17) receives the password;
A decrypting step in which the client terminal (17) decrypts the encrypted inspection result using the password and the first random number;
A display step in which the client terminal (17) displays the inspection result decrypted in the decryption step;
including,
Electronic medical record transmission method.

Images