KR20180076910A - A method of transferring medical records to the third part in an emergency - Google Patents

Abstract

The present invention relates to a method of providing emergency medical information to a third party in an emergency in which when a patient receives treatment in a third-party medical institution in an emergency, if the patient requests to transmit his/her emergency medical information through a mobile app, the patient′s medical information is allowed to be read by the third party such as a medical institution or the like. The method comprises the steps of: (a) accessing a service app by a patient; (b) allowing the service app to receive a third party contact and an emergency medical information provision agreement and request an emergency medical service server to provide medical information on the patient; (c) allowing the emergency medical service server to generate a reading address for reading the emergency medical information on the patient and a one-time password (OTP) for authenticating a reading authority; (d) allowing the emergency medical service server to transmit the reading address and the OTP to a third party terminal using the third party contact; (e) allowing the emergency medical service server to request and receive the OTP and perform the OTP authentication on the received OTP if the third party terminal contacts the reading address; and (f) allowing the emergency medical service server to provide the emergency medical information on the patient to the third party terminal if the OTP authentication is successful. According to the method as described above, if the patient agrees via the mobile app in an emergency situation, the medical information on the patient is provided to the third party such as a medical institution so that even in emergency situation, the patient′s medical history can be quickly tracked and accurate diagnosis can be performed, thereby taking the most appropriate emergency measures.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for providing emergency medical information to a third party in an emergency,

In a case where a patient is treated in a third party including a medical institution in an emergency, when a patient requests to transmit his / her emergency medical information through a mobile app, the user is allowed to view the patient's medical information at a third party medical institution The present invention relates to a method for providing emergency medical information to a third party in an emergency.

In general, a medical information system introduced into a medical institution includes an electronic medical record (EMR), an order communication system (OCS), and a picture archiving communication system (PACS). These medical information systems have been introduced into computer systems at medical institutions such as hospitals, and medical records created and transmitted at medical institutions have been digitized. In other words, the medical records previously stored by hand by physicians such as doctors are digitized into electronic documents, recorded and permanently stored in the medical information system.

The electronic medical record (EMR) is a digitalization of a chart of a paper document in which physicians, such as physicians in the past, recorded the contents of the patient's manual, and the prescription delivery system (OCS) digitizes a prescription of a paper document It is. In addition, the medical image storage and transmission system (PACS) is a digitalization of image films taken by medical imaging equipment such as CT or MRI in the past. Therefore, the medical contents of these patients, doctor's prescriptions, and medical image data are digitized, stored in the medical information system in the medical institution, permanently preserved, and transmitted to the necessary places through the network.

Therefore, a doctor or a patient can easily access medical records of a patient by accessing a server of the medical institution whenever necessary at a computing terminal connected to the Internet such as a PC or a smart phone. For example, when the health checkup management server authenticates a terminal such as a patient (user), an agent, an administrator, a medical staff, an external institution (National Health Insurance Corporation, etc.) in cooperation with the EMR server, Technology has been proposed [Patent Document 1, 2, 3].

However, most of the above-mentioned medical information systems are installed in a single medical institution, such as a hospital, so they are incompatible with other medical institutions. Thus, standardization works are being actively carried out to smoothly transfer medical records between medical institutions.

In order to transfer medical data between the other medical institutions or exchange them with each other, intermediary servers, an integrated server, a shared server, and the like have been proposed to relay between the medical institutions [Patent Documents 4 and 5]. The above prior arts can be achieved by encrypting the medical data between the second medical institutions in the first medical institution and simply relaying the transmission of the medical data or receiving and storing the medical data from the respective medical institutions in the integrated server and the shared server, Technologies are proposed.

However, the prior art has a problem that the medical data is stored or managed by the third organization. In other words, since medical records generated by medical institutions such as hospitals are very important personal information, there is a great possibility that privacy will be seriously inflicted when the patient is disclosed to third parties in an unwanted manner. Thus, without explicit consent of the patient, the third party is prohibited from reading, or the place outside of the hospital is restricted, and the law is strictly protected. In other words, the patient's medical records can be taken out to other organizations or third parties only if they are subjected to complicated procedures such as strict identification, power of attorney, or submission of informational consent.

In particular, under the Medical Law, "medical records are prohibited to be read without the consent of the patient". However, the medical institution may allow the medical records to be read when the patient proves his or her consent or kinship. In addition, if the consciousness of the patient is unconscious or the patient can not receive consent because of an emergency, the medical record can be sent if requested by another medical institution.

However, there are many problems in emergency situations where urgent measures are needed, because rescue personnel or medical personnel take a long time to contact the frequently visited hospital and receive medical information. As a result of emergency medical treatment, the medical staff are exposed to tuberculosis as well as the medical staff themselves.

Korean Patent Laid-Open No. 10-2009-0001965 (published on 09.01.2009) Korean Patent Laid-Open No. 10-2014-0060918 (published on May 21, 2014) Korean Patent Laid-Open Publication No. 10-2013-0001500 (published on April 1, 2014) Korean Registered Patent No. 10-0696708 (published on March 20, 2007) Korean Unexamined Patent Application Publication No. 10-2012-0093560 (published on Aug. 23, 2012)

SUMMARY OF THE INVENTION An object of the present invention is to solve the above-mentioned problems, and it is an object of the present invention to provide an emergency medical treatment system, And to provide a method of providing emergency medical information to a third party in an emergency, allowing third parties to view the patient's medical information.

In particular, an object of the present invention is to provide a method and apparatus for transmitting an access information and a disposable password (OTP) of a website for medical information inquiry of a patient to a terminal of a third party upon receiving an emergency medical information provision agreement from a mobile app, And providing the emergency medical information of the patient by authenticating the user when the user accesses the emergency medical information.

In order to achieve the above object, according to the present invention, there is provided a service providing system for a patient, which is installed in a smart terminal of a patient, a third party terminal of a third party performing emergency treatment of a patient, and an emergency medical care server providing emergency medical information of a patient, To a third party in an emergency, the method comprising: (a) connecting the service app by a patient; (b) receiving the emergency medical information provision agreement with the third party contact and requesting the emergency medical service server to provide the patient's medical information; (c) generating a disposable password (OTP) for authenticating a viewing address and a viewing right for reading the emergency medical information of the patient; (d) the emergency medical service server transmitting the browsing address and the disposable password to the third party terminal; (e) when the third party terminal accesses the browse address, the emergency medical service server requests and receives a disposable password, and performs OTP authentication on the received disposable password; And (f) if the OTP authentication is successful, the emergency medical service server provides the emergency medical information of the patient to the third party terminal.

Further, the present invention provides a method for providing emergency medical information to a third party in an emergency, wherein the third party contact is an e-mail address or a mobile communication telephone number.

Further, the present invention provides a method for providing emergency medical information to a third party in an emergency situation, wherein the step (b) performs authentication of the patient when receiving the emergency medical information provision agreement.

Further, the present invention provides a method for providing emergency medical information to a third party in an emergency, wherein the address is a web site or a uniform resource locator (URL) of a web page.

According to another aspect of the present invention, there is provided a method of providing emergency medical information to a third party in an emergency, the method comprising the steps of: setting an expiration period of the disposable password; .

According to another aspect of the present invention, there is provided a method of providing emergency medical information to a third party in an emergency situation, the method comprising: when the expiration period of the disposable password has elapsed, the web site or web page displaying the emergency medical information by the browse address is expired .

According to another aspect of the present invention, there is provided a method of providing emergency medical information to a third party in an emergency situation, wherein in the step (f), the emergency medical service server obtains emergency medical information of a patient from a resource server holding the patient's medical information And provides it to the third party terminal.

As described above, according to the emergency medical information providing method for a third party in the emergency situation according to the present invention, when the patient agrees with the mobile application through the mobile application in the emergency situation, by providing the patient's medical information to a third party such as a medical institution, Even in an emergency, the patient's medical history can be quickly tracked and accurate diagnosis can be performed, thereby obtaining the most appropriate first-aid measures.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram of an entire system for implementing the present invention. FIG.
2 is a flowchart illustrating a method for providing emergency medical information to a third party in an emergency situation according to an embodiment of the present invention.
FIG. 3 is an exemplary view of a screen for providing emergency medical information according to an embodiment of the present invention; FIG.
4 is an exemplary view of an e-mail received by a third-party terminal according to an embodiment of the present invention;
5 is an exemplary screen for receiving a disposable password according to an embodiment of the present invention.
FIG. 6 is an exemplary screen of an emergency medical information website according to an embodiment of the present invention; FIG.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the drawings.

In the description of the present invention, the same parts are denoted by the same reference numerals, and repetitive description thereof will be omitted.

First, a configuration of an overall system for carrying out the present invention will be described with reference to FIG.

As shown in FIG. 1, the overall system for implementing the present invention comprises a patient service application 20 installed in a smart terminal 10 of a patient and requesting emergency medical information of a patient in an emergency, A terminal of a third party medical institution, that is, a third party terminal 30, and an emergency medical server 40 that provides medical information of a patient through a web site in response to an emergency medical information request. Further, the authentication server 60 may be configured to perform authentication of the patient's identity, or a resource server 50 that stores and manages the patient's medical information.

First, the patient smart terminal 10 is a smart terminal having ordinary computing functions such as a smart phone, a tablet, and a tablet PC as a mobile terminal used by a user or a patient. In particular, the smart terminal 10 is a terminal to which an application or a mobile application (or an app or an application) can be installed and executed. Hereinafter, a description of a user performing an operation is an operation performed through a program (or an app) installed in the smart terminal 10 or the smart terminal 10.

Next, the patient service application 20 is a mobile application (or app, application) installed in the smart terminal 10 and is a program system requesting to provide emergency medical information according to a command of a user or a patient .

The patient service app 20 is an app that receives services from a server of a medical institution, an insurance company, and a healthcare service provider. The patient is authenticated by the service provider, accesses the service application 20, inputs an e-mail address or mobile phone number of a third party who has allowed his or her medical information to be read, and then gives an " emergency medical information providing consent ".

That is, the patient service application 20 has a function of authenticating the user of the patient, authenticating the user, and the like. The user authentication can use various authentication means such as ID, password and biometric authentication. In addition, the identity authentication can be performed through the identity authentication server 60. [

In addition, the patient service app 20 receives the emergency contact information providing consent and the emergency contact information providing consent to provide emergency medical information, and provides emergency medical information to the emergency medical care server 40 together with the input information Can be requested.

Next, the third-party terminal 30 is a terminal used by a third party for emergency treatment of a patient, and is a terminal having ordinary computing functions such as a PC, a smart phone, a tablet PC, and a pavilion. In particular, the third-party terminal 30 has a function of receiving short text service (SMS) or receiving e-mail, and has a function of accessing and browsing a web site.

A third party is a medical facility for emergency treatment of a patient, such as a doctor, a rescue staff, or a medical institution such as a hospital. The third-party terminal 30 may be a portable terminal such as a smart phone of a medical staff, or a computer terminal or a client installed in a medical institution such as a hospital. Hereinafter, a description of a medical staff or a medical institution to perform a job is an operation performed through the third-party terminal 30. [

The third party terminal 30 can receive the mail or the short message sent from the emergency medical care server 40 and access the emergency medical care server 40 through the received mail or the URL of the URL in the short text. Also, the third-party terminal 30 can receive the authentication of the emergency medical care server 40 using the one-time password (OTP) in the mail or short text, and can view the patient's medical information provided by the emergency medical care server 40 have.

Next, the emergency medical care server 40 is a server for providing medical information of a patient upon receiving a request for provision of emergency medical information of the patient.

That is, when the emergency medical service server 40 receives the third-party contact information together with the patient's emergency medical information provision agreement from the patient service application 20, the emergency medical service server 40 transmits the third- And a one-time password (OTP) that can authenticate the viewing authority. Preferably, the message is transmitted through a third party's mail or a text message.

That is, a request for provision of emergency medical information from the patient service application 20 and a dynamic URL and a one-time password for receiving a third party's e-mail or mobile phone number and inquiring the patient's medical care information . Then, the patient's identification information and OPT are mapped and stored.

At this time, since OTP has set the expiration period, even if OTP is requested to access the website after the expiration period, OTP can not access the website and access the patient information because OTP has no effect.

In addition, the emergency medical care server 40 provides a web site for browsing the emergency medical information of the patient, and authenticates the user who accesses the web site (or the viewing address) with a one-time password. When the authentication is passed, the user (or a third party) is allowed to view the patient's emergency medical information. The emergency medical website is a web site or a web page where a third party accesses the URL issued by e-mail, authenticates with the OTP, acquires the access right, and then displays the patient's medical information.

 Preferably, the URL of the web site that can inquire the patient's medical care information is not fixed, and if it is generated dynamically, it may be more advantageous for security. That is, when the expiration period of the OTP is set equal to the URL and the browse address, and the expiration period elapses, the medical information web page is destroyed.

In addition, the emergency medical care server 40 may be provided with an SMTP or SMS server in order to transmit the e-mail or text message to the third party terminal 30. The SMTP or SMS server sends the URL and OTP to the email or cell phone number of the third party, such as the generated URL.

Next, the resource server 50 is a server operated by a hospital, a nursing home, a medical examination center, an EMR (Health Information System), an insurance company, a health care service provider, And transmits the medical information of the patient according to the request of the patient. That is, the resource server 50 is a server of an institution that substantially holds medical information of a patient.

On the other hand, the emergency medical care server 40 previously receives and stores the emergency medical information of the patient stored in the resource server 50, and provides the emergency medical information to the third party terminal 30 in response to the emergency request of the patient .

In particular, the emergency medical care server 40 can summarize or process only the medical information required for emergency out of the medical information of the patient stored in the resource server 50, and provide it to the third-party terminal 30 as emergency medical information.

Next, the principal authentication server 60 is a server that performs authentication (or real name authentication) of the patient or the user and is operated by an external organization separate from the emergency medical care server 40. [ The identity authentication server 60 is a server such as a mobile communication company that performs mobile phone authentication, a principal authentication agent that performs i-PIN (Internet personal identification number) authentication, and a public authentication center that processes authentication of a public key certificate. In addition, any server that performs authentication of the user or real name authentication can be applied to any server.

Next, a method for providing emergency medical information to a third party in an emergency in accordance with an embodiment of the present invention will be described with reference to FIG.

As shown in FIG. 2, first, the service application 10 is connected (S10).

That is, an emergency occurs and the patient or the user receives emergency treatment at a third party or a third party medical institution. At this time, the patient or the user executes and connects the patient service application 20 installed in the smart terminal 10 of his / her own. At this time, the patient service app 20 is a patient app provided by a medical institution or an insurance company, a digital health-related service provider, etc.,

At this time, the patient or the user performs user authentication in the service application 20. Or when automatic login is performed, the user authentication can be performed automatically. Preferably, the user authentication is performed by the user ID and the password in the service app 20. In addition, various user authentication means such as biometric authentication can be used.

Next, the service application 20 receives the emergency medical information provision agreement with the third party contact and requests the emergency medical service server 40 to provide the patient's medical information (S20).

That is, the service application 20 receives the contact information of a third party or a third party medical institution to which the emergency medical information of the patient is to be transmitted (S21). Preferably, the contact is an email address or a mobile communication telephone number (or cell phone number). In particular, the mobile communication telephone number is a telephone number of a communication company capable of receiving a message such as a short message (SMS) or a multimedia message.

In addition, the service app 20 receives the emergency medical information provision agreement (S22), which agrees to provide the emergency medical information of the patient to the third party. At this time, preferably, the user authentication is performed and it is confirmed that the user is the identity of the information providing agreement (S23). In FIG. 2, it is shown that the user authentication is performed after the information provision agreement, but after the user authentication is performed first, the third party contact input or the information provision agreement can be performed.

Specifically, the user or the patient agrees to provide the emergency medical information to the third party corresponding to the contact through the service application 20, and at this time, the user or the patient goes through the authentication certificate or the authentication process of the mobile phone. A screen of the emergency medical information provision agreement is illustrated in FIG.

Further, the service application 20 receives data necessary for authentication of the user from the user or the patient, transmits the data to the authentication server 60, and receives the result. Personal authentication can be applied to a variety of authentication methods such as authentication through mobile communication companies, Ipin authentication, and authentication of authorized certificates.

Then, the service application 20 transmits the contents of the third party contact information and the emergency medical information providing agreement, or additionally, the result of the authentication of the individual who will prove it to the emergency medical service server 40.

Next, the emergency medical care server 40 generates a viewing address for reading the emergency medical information of the patient and a disposable password (OTP) for authenticating the reading right (S30).

When the patient's emergency medical information providing consent request is transmitted to the emergency medical care server 40 serving as a server of a provider providing a patient application such as a medical institution or an insurance company, the emergency medical care server 40 can view the patient's medical information And generates a browse address such as a web page URL. That is, the browse address is a uniform resource locator (URL) of a web page from which a patient's clinical summary can be browsed.

In addition, the emergency medical care server 40 generates a one-time password. The generated one-time password (or one-time password) is a password temporarily issued for use by a third party who permits the patient to view his / her medical record, to access the medical information browsing web page.

Next, the emergency medical service server 40 transmits the browse address and the OTP to the third party terminal 30 (S40).

That is, a URL of a website that allows the patient to view emergency medical information such as a patient's medical record summary (Clinical Summary) using an e-mail address or a cell phone number of a third party input by an app, Send one-time password (one-time password, OTP) to use. In this case, the third party receives e-mail in a form similar to FIG. This email may include a safety mark that is not a phishing site.

Next, when the third-party terminal 30 accesses the browse address, the emergency medical server 40 requests and receives the disposable password, and performs OTP authentication on the disposable password (S50).

A third party that the patient has agreed to view his or her medical information will receive an email or text and then click on the URL of the transmitted website to access the website. The third party then enters the one-time pass which is also e-mailed or textually received from the connected web site and is authenticated. An exemplary screen for inputting the disposable password is shown in Fig.

Next, the emergency medical service server 40 provides the medical information of the patient to the third party terminal 30 (S60). The emergency medical service server 40 displays the emergency medical information of the patient on the web page and the third party terminal 30 browses the web page to view the displayed information of the web page.

That is, when the authentication is completed with the one-time password (one-time password), the third party can view the emergency medical information such as the clinical summary of the patient implemented on the web. Emergency medical information, such as the clinical summary, may include basic patient information, illness, treatment history, and medical imaging. Preferably, the emergency medical information is information recorded by summarizing the medical information to be referred to at the time of performing other situations, rather than recording all the medical information of the patient. An example screen of the emergency medical information is shown in Fig.

Although the present invention has been described in detail with reference to the above embodiments, it is needless to say that the present invention is not limited to the above-described embodiments, and various modifications may be made without departing from the spirit of the present invention.

10: Patient smart terminal 20: Patient service app
30: Third-party terminal 40: Emergency medical service server
50: resource server 60:
80: Network

Claims (7)

A patient service application installed in the smart terminal of the patient, a third party terminal of the third party performing the emergency treatment of the patient, and an emergency medical server providing the emergency medical information of the patient are connected to the network, A method for providing emergency medical information to a person,
(a) connecting the service app by a patient;
(b) receiving the emergency medical information provision agreement with the third party contact and requesting the emergency medical service server to provide the patient's medical information;
(c) generating a disposable password (OTP) for authenticating a viewing address and a viewing right for reading the emergency medical information of the patient;
(d) the emergency medical service server transmitting the browsing address and the disposable password to the third party terminal;
(e) when the third party terminal accesses the browse address, the emergency medical service server requests and receives a disposable password, and performs OTP authentication on the received disposable password; And
(f) if the OTP authentication is successful, the emergency medical service server provides the emergency medical information of the patient to the third party terminal.
The method according to claim 1,
Wherein the third party contact is an e-mail address or a mobile communication telephone number.
The method according to claim 1,
The method of claim 1, wherein, in step (b), authentication of the patient is performed when the emergency medical information provision agreement is input.
The method according to claim 1,
Wherein the browse address is a website or a uniform resource locator (URL) of a web page.
The method according to claim 1,
Wherein the disposable password is set to an expiration period, and when the expiration period has elapsed, even if the OTP authentication is requested, the validity is expired and the authentication is not performed.
6. The method of claim 5,
When the expiration period of the disposable password has elapsed, a web site or a web page displaying the emergency medical information by the browse address disappears, and a method for providing emergency medical information to a third party in an emergency.
The method according to claim 1,
Wherein, in the step (f), the emergency medical service server fetches the emergency medical information of the patient from the resource server holding the medical information of the patient and provides the information to the third party terminal in the emergency situation. Methods of providing medical information.

Images