JP2001175795A - Medical treatment record generator authenticating system, medical treatment record storage device, generator authenticating device and medical treatment record generator authenticating method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a medical treatment record generator authenticating system authenticating a medical treatment record generator based on a physical feature which is not robbed by others, making the whereabouts of the responsibility of medical treatment record generation to be clear and by which the falsification of a medical treatment record is recognized. SOLUTION: When the input operation of the medical treatment record is terminated and the medical treatment record is determined, the control part 2 of the medical treatment record storage device 1 detects fingerprint information on an inputting person by a fingerprint input device 6. The control part 2 transmits fingerprint information and the medical treatment record to a generator authenticating device 21. A control part 22 collates fingerprint information which is previously stored in a storage device 23 with the received fingerprint information. When they are matched, electronic signature information on the medical treatment record is added to the medical treatment record and the medical treatment record is transmitted to the medical treatment record storage device 1 together with identification information such as the seal of the inputting person. When outputting the medical treatment record, electronic signature information is decoded and it is recognized that the medical treatment record is not falsified. Then, the medical treatment record and identification information are outputted to an output device 7.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a medical record creator authentication system and a medical record creator authentication method for authenticating a medical record creator and storing the medical record after defining the creator. The present invention relates to a medical record storage device and a creator authentication device applied to the medical record creator authentication system.

[0002]

2. Description of the Related Art With the recent advance in information processing technology, doctors not only create medical records, which are records of medical events, but also create electronic records as electronic data.
If the medical record is created as electronic data, there is an advantage that not only characters and figures but also moving images and sounds can be recorded. On the other hand, electronic data has a problem that it is difficult to clearly recognize who created the electronic data and input it to the storage device. Further, even if the electronic data is tampered between the time it is stored in the storage device and the time it is output, there is another problem that it is difficult to recognize that the tampered data has been tampered.

[0003] Medical records are data that play a very important role in medical care. If false data is deliberately input by a malicious person or the stored medical records are falsified, the health of the person is affected. And seriously affect life.

Therefore, in April 1999, a guideline regarding the storage of medical records and the like on an electronic medium was notified, and when storing medical records on an electronic medium, it was required that the standards of authenticity be satisfied. became. In other words, it became necessary to clarify who created the medical record. The guidelines also require that the standards of readability (recognition of contents of medical records) and storability (capability of storage in electronic media) be satisfied.

[0005] In order to clarify a person who has created a medical record and input it to a storage device, a conventional medical record creator authentication system includes:
A person who has input a valid user ID and password is authenticated as a medical record creation manager, and the creation and input of a medical record are permitted. Also, in order to clarify the responsible person, a technique has been used in which a medical record creator retains his / her own image data such as a seal and a signature and adds the image data to the medical record.

[0006]

However, in such a conventional technique, the user ID of a person who is responsible for preparing a medical record is
If the password or the password is known to others or the image data such as a seal is stolen and abused, the medical record creator authentication system cannot correctly authenticate the medical record creator.
Further, even when the medical record creator is correctly authenticated and the medical record is stored, even if the stored medical record is output, the medical record is falsified and the like by referring to the falsified medical record. There is a risk of performing medical treatment.

The present invention authenticates a medical record creator based on physical characteristics that are not stolen by others, clarifies the responsibility for preparing the medical record, and confirms falsification of the medical record. It is an object of the present invention to provide a medical record creator authentication system that can perform the medical record creator authentication system, a medical record storage device, a creator authentication device, and a medical record creator authentication method that constitute the medical record creator authentication system.

Although the invention is not related to the preparation of a medical record, the invention having the same object is disclosed in Japanese Patent Application Laid-Open No. 11-19 / 1999.
There is an invention described in Japanese Patent No. 5120. However, in the invention, although the creator of the document can be clarified based on the physical characteristic information, even if tampering is performed between the time when the document is created and the time when the document is referred to, the fact is confirmed. There was a problem that it was not possible.

[0009]

The medical record creator authentication system according to the present invention comprises identification information for storing in advance physical characteristic information of each input person of a medical record, identification information corresponding to each input person, and a secret key. Storage means, medical record input means for inputting a medical record, physical characteristic information input means for inputting physical characteristic information of the input person of the medical record, and input physical characteristic information and identification information storage means Authentication means for verifying the input person corresponding to the input physical characteristic information by collating with the physical characteristic information, and converting the electronic signature information obtained by encrypting the medical record with a secret key corresponding to the authenticated input person into a medical record Electronic signature means to be added, identification information associating means for associating medical records with identification information corresponding to the authenticated input person, and medical records to which electronic signature information is added and identification information associated with the medical records A medical record storage means for 憶, characterized in that an information output means for outputting the medical record and the identification information to confirm that the medical record decrypts the electronic signature information has not been changed.

A medical record creator authentication system according to the present invention is a medical record creator authentication system comprising a medical record storage device for inputting and storing medical records and a creator authentication device for authenticating a user of the medical record. In the medical record storage device, the medical record and the physical characteristic information of the input person of the medical record are transmitted to the creator authentication device, and the electronic signature information of the medical record with the secret key is added from the creator authentication device. Receiving and storing the medical record and the identification information associated with the medical record, decrypting the electronic signature information, confirming that the medical record has not been changed, and outputting the medical record and the identification information, Receiving the medical record and the physical characteristic information of the input person of the medical record from the medical record storage device, authenticating the input person based on the physical characteristic information, and electronically storing the medical record with a secret key corresponding to the authenticated input person. Examine signature information It was added to the record, associating the authentication was corresponding identification information inputting person and the medical records, and transmits the medical record and the identification information in the medical record storage. By adopting a configuration in which the medical record storage device and the creator authentication device are separated from each other, it is possible to authenticate each input person present in a plurality of places at one place.

The medical record storage device is, for example, a medical record input means for inputting a medical record, a physical characteristic information input means for inputting physical characteristic information of a person who inputs the medical record, a medical record input and a physical record input. A medical record and physical characteristic information transmitting means for transmitting the characteristic information to the creator authentication device, and a medical record to which electronic signature information of the medical record is added with a secret key and identification information associated with the medical record with the creator authentication device A medical record and identification information receiving means received from the creator authentication device, a medical record storage means for storing the medical record and identification information received from the creator authentication device, and decrypting the electronic signature information to confirm that the medical record has not been changed. And information output means for outputting medical records and identification information.

The creator authentication device includes, for example, identification information storage means for storing in advance physical characteristic information of each input person of the medical record, identification information corresponding to each input person, and a secret key, and a medical record storage device. Medical record and physical characteristic information receiving means for receiving medical record and physical characteristic information, and receiving by comparing physical characteristic information received from the medical record storage device with physical characteristic information stored in the identification information storage means Authentication means for authenticating an input person corresponding to the obtained physical characteristic information;
Electronic signature means for adding electronic signature information obtained by encrypting a medical record with a secret key corresponding to the authenticated input person to the medical record, and identification information associating means for associating the medical record with identification information corresponding to the authenticated input person; A medical record to which the electronic signature information of the medical record is added, and a medical record and identification information transmitting means for transmitting identification information associated with the medical record to the medical record storage device.

Further, the physical characteristic information input means inputs the physical characteristic information of the input person of the medical record, the authentication means authenticates the input person, the electronic signature means adds the electronic signature information to the medical record, and identifies the medical record. After the information associating unit associates the medical record with the identification information, the medical record storage unit stores the medical record and the identification information. According to such a configuration, it is possible to clarify the input person who completes the input operation and finalizes the medical record, and clarifies the place of responsibility in the event of false input, data rewriting, erasing, mixing, etc. can do.

The medical record input means starts input of the medical record after the physical characteristic information input means inputs the physical characteristic information of the input person and the authentication means authenticates the input person. According to such a configuration, since only the authenticated person can start inputting the medical record, input by a person who is not responsible for creating or inputting the medical record can be eliminated.

The physical characteristic information is, for example, fingerprint information. According to such a configuration, the input person can easily input the physical characteristic information to the medical record creator authentication system.

Further, the medical record storage device according to the present invention comprises: a medical record input means for inputting a medical record; a physical characteristic information input means for inputting physical characteristic information of a person who inputs the medical record; A medical record and physical characteristic information transmitting means for transmitting medical characteristic and physical characteristic information to the creator authentication device, and generating a medical record and identification information associated with the medical record with the electronic signature information of the medical record using a secret key added Means for receiving medical records and identification information received from the authenticator authentication device, medical record storage means for storing the medical records and identification information received from the creator authentication device, and that the electronic signature information is decrypted and the medical record is not changed And an information output means for outputting the medical record and identification information after confirming the information.

Further, the creator authentication apparatus according to the present invention comprises: identification information storage means for storing in advance physical characteristic information of each input person of the medical record, identification information corresponding to each input person, and a secret key; A medical record and physical characteristic information receiving means for receiving the medical record and physical characteristic information from the storage device, and comparing the physical characteristic information received from the medical record storage device with the physical characteristic information stored in the identification information storage means Authentication means for authenticating the input person corresponding to the received physical characteristic information, and electronic signature means for adding electronic signature information obtained by encrypting the medical record with a secret key corresponding to the authenticated input person to the medical record, Identification information associating means for associating the medical record with the identification information corresponding to the authenticated input user; and examining the medical record to which the electronic signature information of the medical record is added and the identification information associated with the medical record. Characterized by comprising a medical record and identification information transmitting means for transmitting to the recording memory.

Further, the medical record creator authentication method according to the present invention stores in advance the physical characteristic information of each input person of the medical record, the identification information and the secret key corresponding to each input person, and inputs the medical record. Inputting the physical characteristic information of the input person of the medical record, collating the input physical characteristic information with the physical characteristic information stored in the identification information storage means, and inputting the input person corresponding to the input physical characteristic information. Authenticates, adds the electronic signature information obtained by encrypting the medical record with the secret key corresponding to the authenticated input user to the medical record, associates the medical record with the identification information corresponding to the authenticated input user, and adds the electronic signature information The medical record and the identification information associated with the medical record are stored, the electronic signature information is decrypted, and it is confirmed that the medical record has not been changed, and the medical record and the identification information are output.

Also, in the medical record creator authentication method according to the present invention, a medical record is input in a medical record storage device, and physical characteristic information of a user of the medical record is input in the medical record storage device. The medical record and the physical characteristic information input in the above are transmitted to the creator authentication device, and the creator authentication device previously transmits the physical characteristic information of each input person of the medical record and the identification information and secret key corresponding to each input person. The creator authentication device receives the medical record and the physical characteristic information from the medical record storage device in the creator authentication device, and the creator authentication device compares the physical characteristic information received from the medical record storage device with the previously stored physical characteristic information. An electronic device that authenticates the input user corresponding to the received physical characteristic information by collation and encrypts the medical record with a secret key corresponding to the input user authenticated by the creator authentication device. Name information is added to the medical record, the medical record is associated with the identification information corresponding to the authenticated input person in the creator authentication device, and the electronic signature information of the medical record is added in the creator authentication device, and the medical record and the medical record are added. The identification information associated with the medical record storage device is transmitted to the medical record storage device, and in the medical record storage device, the medical record to which the electronic signature information of the medical record with the private key is added and the identification information associated with the medical record are transmitted from the creator authentication device. Receiving and storing the medical record and identification information received from the creator authentication device in the medical record storage device, decrypting the electronic signature information in the medical record storage device and confirming that the medical record has not been changed, It is characterized by outputting identification information. Since the input is performed by the medical record storage device and the authentication is performed by the creator authentication device, it is possible to authenticate each input person present in a plurality of places at one place.

[0020]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing one embodiment of a medical record creator authentication system according to the present invention. In the medical record creator authentication system shown in FIG. 1, the medical record storage device 1 and the creator authentication device 21 are connected by a bus 41, and the medical record storage device 1 and the second medical record storage device 31 are connected by a LAN 42. Configuration.

The medical record storage device 1 inputs the fingerprint information of the input person at the start of the input of the medical record, and transmits the fingerprint information to the creator authentication device 21. The creator authentication device 21 authenticates the input person based on the fingerprint information, and transmits an input permission signal to the medical record storage device 1. The medical record storage device 1 receives the input of the medical record after receiving the input permission signal.

When the medical record is determined by ending the input operation, the medical record storage device 1 inputs the fingerprint information of the input person again, and transmits the medical record and the fingerprint information to the creator authentication device 21. The creator authentication device 21 authenticates the input person based on the fingerprint information, and adds the electronic signature information of the medical record to the medical record. Further, the medical information is associated with the identification information corresponding to the authenticated input person. The identification information is information indicating who is the person who input the medical record by being associated with the medical record, and is, for example, electronic data such as a seal, a sign, a name, and a face photograph of each input person. . Creator authentication device 21
Transmits the medical record to which the electronic signature information is added and the identification information associated with the medical record to the medical record storage device 1.
The medical record storage device 1 receives and stores a medical record and identification information from the creator authentication device 21.

The medical record storage device 1 transmits the stored medical record and identification information associated with the medical record to the second medical record storage device 31, and the second medical record storage device 31 The identification information is stored. FIG. 1 illustrates a case where the number of medical record storage devices 1 is one, but the medical record creator authentication system may have a configuration including a plurality of medical record storage devices 1. The second medical record storage device 31 stores and manages medical records transmitted from one or more medical record storage devices 1.

When outputting a medical record, the medical record storage device 1
With regard to the medical record stored in the medical record storage device 1 or the second medical record storage device 31, the electronic signature information is decrypted and compared with the medical record to confirm that there is no falsification or the like and to output. The medical record storage device 1 clarifies a person who has input the medical record by outputting identification information such as a seal together with the medical record. Further, by comparing the decrypted electronic signature information with the medical record, it is possible to confirm that the medical record has not been tampered with from the input to the output.

The medical record creator authentication system may have a plurality of second medical record storage devices 31. In addition, the medical record storage device 1 and the second medical record storage device 31 are used not only for input / output and storage of medical records, but also for LAN.
It may be configured to have other functions such as giving a medical instruction to devices in other departments in the hospital connected to 42.

Next, the configuration of the medical record storage device 1 will be described. The control unit 2 controls each unit according to a program stored in the storage device 3. The storage device 3 is configured by a single unit such as a magnetic disk unit, an optical disk unit, a ROM, a RAM, an IC card, a magnetic tape, or a combination of a plurality of units. Further, it may be configured as a large-capacity storage device operated by a changer or the like. The storage device 3 stores identification information such as a medical record and a seal in addition to the program.

The input unit 4 includes a medical record input device 5 and a fingerprint input device 6. The medical record input device 5 receives a medical record from a doctor or the like. There are various types of medical records, for example, doctor's findings, text information such as technician's reports, radiographs, pathological images, graphs showing changes in blood pressure, body temperature, etc., image information such as tables, and the inside of the body and There are moving image information such as external states and movements, diagnosis results by ultrasonic diagnosis, and voice information such as voices and heart sounds. Medical record input device 5
Inputs all or a part of these various medical records.
The medical record input device 5 receives medical record input start information when a doctor or the like starts inputting a medical record, and inputs the medical record input information when the doctor or the like finishes the operation of inputting the medical record and fixes the medical record. The medical record confirmation information is input. When a doctor or the like refers to a medical record, a medical record output command is input.

The medical record input device 5 includes, for example, a keyboard, a numeric key switch, a mouse, a trackball, an input pen, an input tablet, a data glove, an OCR device,
The configuration includes any one of an image scanner, a microphone, a camera, and the like. The medical record input device 5 may be configured to input a medical record already digitized by another device via an external storage device or the like. The medical record input device 5 may include only one type of the above input device or a plurality of types.

The fingerprint input device 6 inputs the fingerprint information of the input person of the medical record. The fingerprint input device 6 is configured to detect fingerprint information from a finger of an input person pressed on the fingerprint input device 6, for example.

The output device 7 outputs identification information such as a medical record and a seal stored in the storage device 3. The output device 7
For example, the configuration includes at least one display output device such as a display, a data scope, and a printer. Depending on the data, a sound output device such as a speaker, a headphone, an earphone, and a headset is provided.

The communication interface unit 8 and the LAN interface unit 9 are physically connected to the bus 41 and the LAN 42, respectively, and transmit and receive data via the bus 41 and the LAN 42. The bus 41 is, for example, RS-232C
Bus, SCSI, ATA, PCI bus and the like.

Next, the configuration of the creator authentication device 21 will be described. The control unit 22 controls each unit according to a program stored in the storage device 23. The storage device 23
In addition to the program, the fingerprint information of each input person of the medical record, the identification information corresponding to each input person, and the secret key are stored in advance. The secret key corresponding to each input person creates the electronic signature information of the medical record. The configuration of the storage device 23 is the same as the configuration of the storage device 3, and the configuration of the communication interface unit 24 is the same as the configuration of the communication interface unit 8.

The control unit 22 stores the fingerprint information received from the medical record storage device 1 and the storage device 23 when the input user starts inputting the medical record and when the input operation is completed and the medical record is determined. Is compared with the fingerprint information stored in advance in the memory.

Further, the control unit 22 adds the electronic signature information of the medical record with the secret key to the medical record received from the medical record storage device 1, and compares the medical record and the identification information stored in advance in the storage device 23. Associate.

Next, the configuration of the second medical record storage device 31 will be described. The control unit 32 controls each unit according to a program stored in the storage device 33. Storage device 33
Stores the medical record received from the medical record storage device 1 and identification information associated with the medical record, in addition to the program. The configuration of the storage device 33 is the same as the configuration of the storage device 3, and the configuration of the LAN interface unit 34 is
The configuration is the same as that of the interface unit 8.

Next, the operation of the control unit 2 and the control unit 22 when the medical record storage device 1 starts inputting the medical record will be described. FIG. 2 is a flowchart showing an example of control from the input of the medical record input information by the medical record storage device 1 to the input of the medical record.

When the control unit 2 of the medical record storage device 1 receives the medical record input start information from the input person such as a doctor via the medical record input device 5 (step S50), it requests the input person to input fingerprint information. Then, fingerprint information is obtained via the fingerprint input device 6 (step S51). The input of the fingerprint information is performed, for example, by displaying the screen shown in FIG. 3 on a display and detecting the fingerprint information from the finger pressed against the fingerprint input device 6. The control unit 2 transmits the fingerprint information to the creator authentication device 21 via the communication interface unit 8 (Step S52).

Upon receiving the fingerprint information (step S53), the control unit 22 of the creator authentication device 21 authenticates the received fingerprint information by comparing the received fingerprint information with the fingerprint information of each input person stored in the storage device 23 in advance. (Step S54), it is determined whether or not the fingerprint information matches (Step S55).
If they match, the control unit 22
Then, an input permission signal is transmitted to the medical record storage device 1 via the server 4 (step S56). The control unit 2 of the medical record storage device 1
When the input permission signal is received (step S57), the reception of the medical record input from the input person is started (step S5).
8). If the fingerprint information does not match, an abnormal process is performed (step S59). For example, the control unit 22
Information indicating that the fingerprint information does not match is transmitted to the medical record storage device 1, and the control unit 2 of the medical record storage device 1 notifies the input user that input is not permitted by the output device 7.

Next, the operation of the control unit 2 and the control unit 22 when the medical record storage device 1 determines and stores the medical record at the end of the input operation will be described. FIG. 4 is a flowchart showing an example of control from the input of the medical record determination information by the medical record storage device 1 to the storage of the determined medical record.

Upon receiving the medical record confirmation information from the input person via the medical record input device 5 (step S60), the control unit 2 of the medical record storage device 1 requests the input person to input fingerprint information and inputs the fingerprint. The fingerprint information is obtained via the device 6 (step S61). For example, as in the case shown in FIG.
Is displayed, and fingerprint information is detected from the finger pressed against the fingerprint input device 6. FIG. 5 also shows the input medical record. The control unit 2 transmits the fingerprint information and the medical record to the creator authentication device 21 via the communication interface unit 8 (Step S62).

Upon receiving the fingerprint information and the medical record (step S63), the control unit 22 of the creator authentication device 21 compares the received fingerprint information with the fingerprint information of each input person stored in the storage device 23 in advance. Perform authentication (step S
64), it is determined whether the fingerprint information matches (step S65). If they match, the control unit 22 creates the electronic signature information of the received medical record using the secret key corresponding to the input person, and adds it to the medical record. In addition, the identification information corresponding to the input person is associated with the medical record (step S66). Here, date and time information may be added to the identification information. Subsequently, the control unit 22 checks the medical record to which the electronic signature information is added,
The identification information associated with the medical record and information indicating that the fingerprint information matches are transmitted to the medical record storage device 1 (step S67). The control unit 2 of the medical record storage device 1
The medical record, the identification information, and the information indicating that the fingerprint information is matched are received, and the medical record and the identification information are stored in the storage device 3 (step S68).

If the fingerprint information does not match in step S65, abnormal processing is performed (step S69). For example, the control unit 22 transmits information indicating that the fingerprint information did not match to the medical record storage device 1, and the control unit 2 of the medical record storage device 1 outputs a message that the storage of the medical record is not permitted by the output device 7.
To tell the input person.

In step S68, the storage device 3
Is transmitted to the second medical record storage device 31 and stored in the storage device 33 of the second medical record storage device 31. The transmission of the medical record and the identification information to the second medical record storage device 31 is automatically performed, for example, after step 68 is completed. Further, the transmission may be performed when the control unit 2 receives a transmission command from a doctor or the like via the medical record input device 5 or the like. Second medical record storage device 31
Manages medical records transmitted from one or more medical record storage devices 1.

Next, the operation of the control unit 2 and the control unit 32 when the medical record storage device 1 outputs a medical record will be described.
FIG. 6 is a flowchart illustrating an example of control from the reception of the medical record output command by the medical record storage device 1 to the output of the medical record.

Upon receiving a medical record output command from a doctor or the like via the medical record input device 5 (step S70), the control unit 2 of the medical record storage device 1 stores the medical record requested by the input person in the storage device 3. It is determined whether or not the information is stored (step S
71). If the requested medical record is stored in the storage device 3, the access right of the doctor and the like and the falsification of the medical record are confirmed (step S72). Confirmation of the access right is performed, for example, by requesting input of fingerprint information and using the fingerprint information.
Alternatively, the access right may be confirmed by assigning an ID number to a doctor or the like in advance and having the user input the ID number. Confirmation of alteration of the medical record is performed by decrypting the electronic signature information added to the medical record and comparing it with the stored medical record.

The control unit 2 confirms that there is no problem in the result of confirming whether there is access right, falsification, or the like (step S7).
3) The medical record and the identification information are acquired from the storage device 3 (Step S74) and output to the output device 7 (Step S74). FIG. 7 shows an output example of a medical record and identification information. In FIG. 7, the identification information is electronic data of a seal and a name. Further, information on the date when the medical record was stored is also added to the identification information. If there is no access right or if the medical record has been tampered with, the control unit 2 performs an abnormal process (step S76). For example, the output device 7 notifies the input user that the output of the medical record is not permitted or that tampering has occurred.

If the storage unit 3 does not store the requested medical record at step S71, the control unit 2 acquires the medical record and identification information from the second medical record storage unit 31 (step S77). For example, the control unit 2 transmits the medical record transmission command to the control unit 32 of the second medical record storage device 31, and the control unit 32 that has received the medical record transmission command transmits the medical record transmission command to the storage device 3.
The medical record and the identification information stored in 3 are transmitted to the control unit 2. The control unit 2 stores the received medical record and identification information in the storage device 3 (Step S78). Thereafter, the same operation as in step S72 is performed.

In this medical record creator authentication system, when the medical record is determined, the input person is identified by the fingerprint and the identification information such as the seal of the input person is associated with the medical record, so who is the input person? Can be clarified. Furthermore, since fingerprints, which are not stolen by others, are used, the input person can be identified with high reliability. In addition, since the person who created the medical record generally performs the input, it is possible to clarify the responsibility of who created the medical record. Even when the creator performs an input operation on behalf of the creator, the creator can be clarified and false input, rewriting, erasing, and mixing of data can be prevented.

Further, since the medical record has the electronic signature information added thereto, the medical record storage device 1 decrypts the electronic signature information and alters the data from the storage of the medical record to the output of the medical record. Can be confirmed.

In the above embodiment, one creator authentication device 21 is connected to one or more medical record storage devices 1, but one medical record storage device 1 is provided for each medical record storage device 1. May be connected.

Also, a creator authentication device having a storage device 23 for storing only fingerprint information, identification information, and a secret key of an input person in each specific department, and a fingerprint information, identification information, And storage device 2 for storing secret keys
3 may be provided. When the fingerprint information does not match in the creator authentication device corresponding to a specific department, the process of identifying the input person by collating the fingerprint information with the creator authentication device that stores the information of the input person in the entire hospital Can be speeded up.

Although the medical record and identification information stored in the storage device 3 are transmitted to the second medical record storage device 31, the medical record and identification information are not provided without the second medical record storage device 31. A configuration in which the information is stored only in the storage device 3 may be used.

The medical record storage device 1 and the second medical record storage device 31 may be connected by a public line instead of a dedicated line such as a LAN. Where the leased line,
The public line includes not only a case where a wired connection is made but also a case where a wireless line system is adopted. Further, these lines do not need to be always available, but may be any lines that can be used during communication. The medical record storage device 1 and the second medical record storage device 31 may be connected by a bus.

The medical record storage device 1 and the creator authentication device 21 are not buses but a dedicated line such as a LAN or a public line such as a connection between the medical record storage device 1 and the second medical record storage device 31. May be connected.

FIG. 8 is a block diagram showing another embodiment of the present invention. 8, the control unit 2, the storage device 3, the medical record input device 5, the output device 7, and the control unit 2 of the medical record storage device 1.
The configurations of the LAN interface unit 9 and the second medical record storage device 31 are the same as those shown in FIG. In FIG. 8, the fingerprint input device 6 includes a creator authentication device 21.

The medical record creator authentication system according to this embodiment differs from the medical record creator authentication system in that the creator authentication device 21 receives fingerprint information directly from the fingerprint input device 6 and that the control unit 2 and the creator authentication device 21 communicate with each other through the communication interface unit. This embodiment differs from the embodiment shown in FIG. 1 in that data such as an input permission signal, medical record, identification information, etc. is transmitted and received without passing through. In other respects,
The same operation as in the embodiment shown in FIG. 1 is performed.

In each of the above embodiments, the case where the input person is authenticated by using the fingerprint information has been described. However, the input person may be authenticated by using the voice print information and the pupil information.

[0058]

According to the present invention, the input person of the medical record is identified based on the physical characteristic information of each input person, and the electronic signature information using the secret key is added to the medical record, and the medical record and the identification information are added. Because it is possible to clarify who is the input of the medical record, it is also necessary to decrypt the electronic signature information when outputting the medical record and confirm that no alteration has been performed. Can be.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an embodiment of a medical record creator authentication system according to the present invention.

FIG. 2 is a flowchart illustrating an example of control when receiving input of a medical record by a doctor or the like;

FIG. 3 is an explanatory diagram showing an example of a fingerprint input screen in the fingerprint input device.

FIG. 4 is a flowchart illustrating an example of control when storing a medical record.

FIG. 5 is an explanatory diagram showing an example of a fingerprint input screen when a medical record is determined.

FIG. 6 is a flowchart illustrating an example of control when outputting a medical record.

FIG. 7 is an explanatory diagram showing an example of outputting a medical record and identification information.

FIG. 8 is a block diagram showing another embodiment of the medical record creator authentication system according to the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 medical record storage device 2 control unit 3 storage device 5 medical record input device 6 fingerprint input device 7 output device 8 communication interface unit 21 creator authentication device 22 control unit 23 storage device 24 communication interface unit

 ──────────────────────────────────────────────────続 き Continuation of the front page (72) Norihiro Hazumi, Inventor 5-7-1 Shiba, Minato-ku, Tokyo Inside NEC Corporation (72) Inventor Toshio Kawamoto 5-7-1 Shiba, Minato-ku, Tokyo NEC Corporation (72) Inventor Yasushi Takahashi 1-4-4 Shiromi, Chuo-ku, Osaka City, Osaka Prefecture Kansai NEC Software Corporation F-term (reference) 5B017 AA03 BA07 BB09 CA16 5B085 AE13 AE23 AE25 AE29 AE29

Claims (11)

[Claims] An identification information storage means for storing in advance physical characteristic information of each input person of a medical record, identification information and a secret key corresponding to each input person, a medical record input means for inputting a medical record, Physical characteristic information input means for inputting physical characteristic information of the input person of the medical record, and physical characteristic information inputted by collating the inputted physical characteristic information with the physical characteristic information stored in the identification information storage means Authentication means for authenticating the input person corresponding to the medical record, electronic signature means for adding the electronic signature information obtained by encrypting the medical record with the secret key corresponding to the authenticated input person to the medical record, Identification information associating means for associating corresponding identification information; medical record to which electronic signature information is added; and medical record storage means to store identification information associated with the medical record; Medical record creator authentication system characterized by comprising an information output means for outputting the medical record and the identification information to confirm that the record has not changed. 2. A medical record creator authentication system comprising a medical record storage device for inputting and storing a medical record, and a creator authentication device for authenticating an input of the medical record, wherein the medical record storage device comprises The physical characteristics information of the person who entered the medical record and the medical record is transmitted to the creator authentication device, and the electronic signature information of the medical record with the secret key is added from the creator authentication device to the medical record and the identification information associated with the medical record Receiving and storing the medical signature, decrypting the electronic signature information, confirming that the medical record has not been changed, and outputting the medical record and identification information. The creator authentication device reads the medical record and the medical record from the medical record storage device. Received the physical characteristic information of the input person, authenticated the input person based on the physical characteristic information, added the electronic signature information of the medical record with the secret key corresponding to the authenticated input person to the medical record, and authenticated Identification information corresponding to the input person And associating the medical record, the medical record and medical record creator authentication system and transmits the identification information to the medical record storage. 3. The medical record storage device includes: medical record input means for inputting a medical record; physical characteristic information input means for inputting physical characteristic information of a person who inputs the medical record; A medical record and physical characteristic information transmitting means for transmitting the characteristic information to the creator authentication device, and a medical record to which the electronic signature information of the medical record is added by a secret key and identification information associated with the medical record with the creator authentication device Means for receiving medical records and identification information received from the medical device, medical record storage means for storing medical records and identification information received from the creator authentication device, and decrypting the electronic signature information to confirm that the medical record has not been changed. 3. A medical record creator authentication system according to claim 2, further comprising information output means for outputting a medical record and identification information. 4. The creator authentication device includes: identification information storage means for storing in advance physical characteristic information of each input person of the medical record, identification information corresponding to each input person, and a secret key; A medical record and physical characteristic information receiving means for receiving the medical record and physical characteristic information; and a collation and reception of the physical characteristic information received from the medical record storage device and the physical characteristic information stored in the identification information storage means Authentication means for authenticating the input person corresponding to the authenticated physical characteristic information, electronic signature means for adding the electronic signature information obtained by encrypting the medical record with the secret key corresponding to the authenticated input person to the medical record, Identification information associating means for associating identification information corresponding to the authenticated input person; and a medical record to which the electronic signature information of the medical record is added and identification information associated with the medical record to the medical record storage device. Medical record and claim 2 or claim 3 medical record creator authentication system according is characterized in that an identification information transmission means signals for. 5. The physical characteristic information input means inputs physical characteristic information of the input person of the medical record, the authentication means authenticates the input person, the electronic signature means adds the electronic signature information to the medical record, and identifies the medical record. The medical record creator authentication system according to claim 1 or 4, wherein the medical record storage means stores the medical record and the identification information after the information associating means associates the medical record with the identification information. 6. The medical record input means starts inputting a medical record after the physical characteristic information input means inputs physical characteristic information of the input person and the authentication means authenticates the input person. The medical record creator authentication system according to claim 1, 4, or 5. 7. The medical record creator authentication system according to claim 1, wherein the physical characteristic information is fingerprint information. 8. A medical record storage device applied to a medical record creator authentication system together with a creator authentication device, comprising: a medical record input means for inputting a medical record; and physical characteristic information of an input user of the medical record. Means for inputting physical characteristic information to be input; means for transmitting medical record and physical characteristic information for transmitting the input medical record and physical characteristic information to the creator authentication device; and electronic signature information of the medical record using a secret key. Medical record and identification information receiving means for receiving the medical record and identification information associated with the medical record from the creator authentication device; medical record storage means for storing the medical record and identification information received from the creator authentication device; A medical record storage device, comprising: information output means for decrypting the electronic signature information, confirming that the medical record has not been changed, and outputting the medical record and identification information. 9. A creator authentication device applied to a medical record creator authentication system together with a medical record storage device, comprising: physical characteristic information of each input person of a medical record, identification information corresponding to each input person; Identification information storage means for storing a secret key; medical record and physical characteristic information receiving means for receiving medical record and physical characteristic information from the medical record storage device; and physical characteristic information received from the medical record storage device. Authentication means for verifying the input person corresponding to the received physical characteristic information by comparing the physical characteristic information stored in the identification information storage means, and encrypting the medical record with a secret key corresponding to the authenticated input person Electronic signature means for adding electronic signature information to the medical record, identification information associating means for associating the medical record with identification information corresponding to the authenticated input person, and electronic signature information of the medical record added. A medical record and identification information transmitting means for transmitting the registered medical record and identification information associated with the medical record to the medical record storage device. 10. A medical record is stored in advance, storing physical characteristic information of each input person of the medical record, identification information and a secret key corresponding to each input person, and inputting the medical record, and physical characteristic information of the medical record input person. And authenticates the input user corresponding to the input physical characteristic information by comparing the input physical characteristic information with the physical characteristic information stored in the identification information storage means, and outputs a secret corresponding to the authenticated input user. Electronic signature information obtained by encrypting a medical record with a key was added to the medical record, the medical record was associated with identification information corresponding to the authenticated input person, and the medical record with the electronic signature information added and the medical record were associated A medical record creator authentication method characterized by storing identification information, decrypting the electronic signature information, confirming that the medical record has not been changed, and outputting the medical record and the identification information. 11. A medical record is input in a medical record storage device, physical characteristic information of a person who inputs the medical record is input in the medical record storage device, and the medical record and physical characteristic information input in the medical record storage device are input. The information is transmitted to the creator authentication device, and the creator authentication device previously stores the physical characteristic information of each input person of the medical record, the identification information and the secret key corresponding to each input person, and stores the medical record in the creator authentication device. Receives medical records and physical characteristic information from the device, matches the physical characteristic information received from the medical record storage device with the previously stored physical characteristic information in the creator authentication device, and responds to the received physical characteristic information Authenticator who authenticates the creator, adds the digital signature information obtained by encrypting the medical record with the secret key corresponding to the authenticated creator in the creator authentication device to the medical record, The medical record is associated with the identification information corresponding to the authenticated input person in the device, and the medical record to which the electronic signature information of the medical record is added in the creator authentication device and the identification information associated with the medical record are stored in the medical record storage device. The medical record storage device receives the medical record to which the electronic signature information of the medical record with the secret key is added and the identification information associated with the medical record from the creator authentication device, and the creator authentication device in the medical record storage device. Storing the medical record and identification information received from the medical record, decrypting the electronic signature information in the medical record storage device, confirming that the medical record has not been changed, and outputting the medical record and identification information. Author authentication method.