JP2001350847A - Medical information collating system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a medical information collating system capable of normally keeping private medical information secret, and providing the contents of necessary medical information to an object person who requires necessary and sufficient information when treatment is required. SOLUTION: A medical information collating system 1 is constituted of a registering and updating server 2 and a medical information server 5, and the user registers and stores medical information in a medical information DB 55 through the registering and updating server 2 with a personal ID and a user password. The user carries a charm card 10 being a collation password holding means, and when the user receives treatment in a registered hospital in an emergency, the registered hospital performs access to the medical information server 5 by using the personal ID and the collation password described in the charm card 10 in order to obtain the medical information of the user stored in the medical information DB, and to use it for treatment.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a medical information inquiry system, and more particularly, to a medical information inquiry system, in which private medical information is normally concealed normally and medical treatment or medical treatment is required when medical treatment or treatment is required. The present invention relates to a medical information inquiry system in which the content of information is provided to a required subject.

[0002]

2. Description of the Related Art When an individual receives medical treatment at a medical institution such as a hospital or clinic (hereinafter referred to as a hospital) at the first consultation, the patient is currently undergoing treatment in order to carry out safe and optimal medical actions suited to the individual. It is common for the hospital to report medical information such as illness, administered medicine, idiosyncratic constitution, allergy status, and past medical history (history). However, there are cases where the individual cannot sufficiently declare medical information.
For example, the name of a drug currently administered is often not known correctly even by the patient being administered, and the hospitalization history and the like often do not remember the exact time. In addition, in the case of infants and elderly people, even if their consciousness is clear, they may not be able to fully understand medical information and may only obtain inaccurate medical information. If the individual's consciousness is impaired due to an accident or the like, it may be difficult to extract such medical information from the individual or even to identify the individual. In such cases, serious side effects due to drug interactions or incorrect information such as blood group incompatibility due to incorrect blood types can have serious consequences. In addition, immediate treatment may be necessary, such as a heart attack. Especially when transported to a hospital other than the primary hospital at the time of emergency, such medical information cannot be obtained, so even in situations where hospitals need to take urgent treatment, various types of medical information are kept for safety. Various inspections and the like to obtain it had to be redone. As a result, the start of treatment may be delayed even in an emergency. It should be noted that since medical records other than the home hospital are not made public, it is desirable that the individual himself / herself records medical information and the like in advance and prepares the medical information so that it can be shown to medical personnel.

[0003]

However, the medical information is information relating to privacy, and the medical information is brought together in a document or the like, or the WW of the Internet.
If it is made public on a site on the W (World Wide Web), a third party can easily read the documents or access the homepage to know the contents, and privacy cannot be protected. On the other hand, if these are kept confidential, medical personnel etc. cannot use them for medical treatment, especially in emergency and serious situations where the individual has lost consciousness, because medical information can not be obtained. ,
There was a problem that the precious medical information records could not be utilized.

The present invention has been made to solve the above-mentioned problems, and it is intended to securely conceal private medical information under normal circumstances and to provide necessary medical information when medical treatment or treatment is required. The purpose of the present invention is to provide a medical information inquiry system provided to a healthy subject.

[0005]

In order to achieve this object, a medical information inquiry system according to the present invention comprises a personal ID as an identification symbol for identifying an individual, and an identification symbol associated with the personal ID. A personal identification information database storing a user password, a hospital ID for identifying a hospital,
A hospital identification information database that stores a hospital password associated with the hospital ID, and medical information of an individual registered in the personal identification information database is stored in the personal ID.
A medical information database stored in association with, and the hospital ID stored in the hospital identification information database;
A hospital communication permitting means for permitting communication by inputting a hospital ID and a hospital password that match the hospital password, and a portable memory storing the personal ID and an inquiry password associated with the personal ID. When the personal ID recorded in the inquiry password holding unit, which is an information recording medium, and the personal ID and the inquiry password that match the inquiry password are input, medical care from a hospital to which communication has been permitted by the hospital communication permission unit. Receiving means for receiving an information inquiry request; and the individual stored in the medical information database at a hospital identified by the inputted hospital ID based on the medical information inquiry request received by the receiving means. A transmission unit that transmits the medical information of the individual specified by the ID. Therefore, the hospital registered in the hospital identification information database communicates with the medical information inquiry system using the hospital ID and the hospital password by using the two passwords, the hospital password and the inquiry password, and is further recorded in the inquiry password holding means. Only when the personal ID and the inquiry password associated with the personal ID are known, the personal medical information can be transmitted.

[0006] The medical information inquiry system of the present invention comprises:
The individual I stored in the personal identification information database
D and user communication permitting means for permitting communication by inputting a personal ID and a user password corresponding to the user password associated with the personal ID, and the medical information database based on the input personal ID. Update permission means for permitting update of the medical information specified by the personal ID stored in the personal information. Therefore, the registered user can update his / her medical information, and the medical information of the individual specified by the personal ID stored in the medical information database can always be updated. There is.

Further, in the medical information inquiry system according to the present invention, the medical information inquiry system includes a medical information server and a registration / update server. The medical information server includes the medical information database, Only when the update server inputs the personal identification information database, the personal ID recorded in the personal identification information database, and the user password associated with the personal ID, the personal ID stored in the medical information database.
Update information input means for permitting and inputting update information for updating the medical information specified by D, update information storage means for temporarily storing the input update information, and update information storage means Update information transfer means for transferring the stored update information to the medical information server. Therefore, the update information input by the user is temporarily stored in the update information storage unit and then transferred to the medical information database. Therefore, the entire medical information does not exist in the registration / update server. Even if a third party invades the registration / update server from the server, the medical information is not known, and the medical information is safely protected from the intrusion.

[0008] In the medical information inquiry system according to the present invention, the update information storage means of the registration / update server includes:
The update information transfer means is configured as a mail server, and the request is sent from the medical information server via a public line, and the registration / update server and the medical information server are regularly or irregularly connected via the public line. Connect only at the time of transfer and transfer the update information as an e-mail, and after transferring the update information, delete the update information stored in the mail server, and the medical information server transmits the update information as an e-mail. The data of the medical information database is updated based on the update information. Therefore, the registration / update server and the medical information database are not always connected, and even if a third party enters the registration / update server from outside,
Further, it is extremely difficult to invade the medical information database, and the medical information can be protected more safely than intrusion from the registration / update server.

[0009] The medical information inquiry system of the present invention comprises:
The transfer information is transferred to the medical information server by inputting the personal ID and the user password to the registration update server and specifying a hospital registered in the hospital identification information database. The information server transfers the medical information specified by the personal ID based on the transfer information to the designated hospital. Therefore, there is an effect that the user can transfer the medical information to the hospital to which the user wants to transfer the medical information.

The inquiry password holding means of the present invention can be used in a medical information inquiry system, and records the personal ID used for medical information inquiry and the inquiry password associated with the personal ID. A portable information recording medium. Therefore, when the user carries the inquiry password holding means, even if the registered hospital does not have the consciousness of the user himself, the hospital can refer the user's medical information using the personal ID and the inquiry password. Has the effect that the user's medical information can be known.

Further, the inquiry password holding means of the present invention includes image information relating to a photograph of the face of the individual specified by the personal ID. Therefore, it is possible to easily determine whether or not the person carrying the inquiry password holding unit is the individual specified by the personal ID, and it is possible to prevent medical malpractice.

Further, in the inquiry password holding means of the present invention, information is recorded by engraving or printing so that the information recording medium can be visually read. Therefore, in the hospital, the inquiry password held in the inquiry password holding means can be easily known without any special device.

[0013] Further, the inquiry password holding means of the present invention may be characterized in that the information recording medium includes a magnetic recording medium and the information is magnetically recorded. With such an inquiry password holding means, the inquiry password is not known to anyone who does not have means for reading magnetic data.

[0014] The inquiry password holding means of the present invention may be characterized in that the information recording medium has information recorded in a bar code. With such an inquiry password holding means, the inquiry password is not known to anyone who does not have means for reading the barcode.

[0015] The inquiry password holding means of the present invention may be characterized in that the information recording medium includes electronic data storage means capable of storing electronic data, and information is recorded by electronic data. . With such an inquiry password holding means, the inquiry password is not known to anyone who does not have means for reading the electronic data.

Further, the inquiry password holding means of the present invention includes a protection means for covering the information recorded on the information recording medium in an unreadable manner, and records the information on the information recording medium unless the protection means is irreversibly destroyed. It may be configured such that the read data cannot be read.
With such an inquiry password holding unit, the data recorded on the recording medium cannot be read unless the protection unit is irreversibly destroyed, so that the data recorded on the recording medium cannot be read in a normal state, and If the data is read, the protection means is destroyed, so that the user can easily recognize that the data has been read.

[0017]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A medical information inquiry system according to the present invention will be described below with reference to the accompanying drawings, using a medical information inquiry system 1 as a preferred embodiment.

First, the configuration of the medical information inquiry system 1 will be outlined with reference to the drawings. FIG. 1 shows the outline of the system configuration of the medical information inquiry system 1 and the flow of the information. The medical information inquiry system 1 includes a registration / update server 2 and a medical information server 5
And the main configuration.

The registration / updating server 2 includes a WWW / SSL server 22, a media server 23, a DNS server 24, a mail server 25, and a plurality of CPUs, a RAM, and a ROM that constitute a known computer. Is done. Further, the WWW / SSL server 22 has a personal identification information database (hereinafter abbreviated as DB as appropriate) 26.
Alternatively, the program file 27 is connected. In addition, these servers are connected to a LAN (Local Area Network)
or routers 21 and 28 and connected to the Internet or a public line. These are all configured as WWW sites. In the present embodiment, since the registration / update server 2 is configured as a portal site, a media server 23 that stores and supplies moving image data and audio data, and a DNS for converting a domain name into an IP address. A server 24 is provided, but is not directly used in the present invention.

In the WWW on the Internet, a registration / update server 2 is connected by a router 21, while
The user terminal 3 is connected by a modem 31, and TCP / IP (Transmission) is executed by browser software of the user terminal 3 (for example, Netscape Navigator (registered trademark) or Internet Explorer (registered trademark)).
on Control Protocol / Inter
A predetermined IP address or a URL (Uniform Resource) using a protocol of the Internet Protocol (net Protocol).
Locator), the connection to the WWW / SSL server 22 of the registration / update server 2 is established.
Of course, in addition to the user terminal 3, clients, which are a large number of users (not shown), are connected to the WWW.

Note that the registration / updating server 2 uses an SSL for protecting transmitted / received data in order to sufficiently enhance security.
(Secure Socket Layer). The user terminal 3 uses an HTML (Hype)
rtext Markup Language) is transmitted to the registration / update server 2 via the WWW in an encrypted state.

The user terminal 3 uses a browser to access http
Connect using a special URL starting with s :. Router 2
1, the data from the user terminal 3 is transmitted to the WWW / S by the port 443 by the URL starting with https :.
Transfer to the SL server 22. WWW / SSL server 22
Receives the data from the user terminal 3 and sends back the digital signature. When the browser of the user terminal 3 determines that the returned digital signature is valid, the browser generates a random number to generate a master key, and transmits it to WWW / SS.
WWW / SS encrypted using public key of L server 22
Send to L server 22. WWW / SSL server 22 decrypts the master key with the corresponding private key. In this way, the master key is shared between the user terminal 3 and the WWW / SSL server 22. Further, the user terminal 3 and W
The WW / SSL server 22 generates a session key based on the master key and the random number, respectively, and shares the same session key. Then, the user terminal 3 and W
Communication with the WW / SSL server 22 is performed at high speed using the session key. It should be noted that the transmission from the user terminal 3 to the registration / update server 2 does not necessarily need to use SSL, and may be transferred using a normal HTTP protocol.

Then, the WWW / SSL server 22
GI (Common Gateway Interface)
ce) The registration program 2 stored in the program file 27 in response to the request from the user terminal by the script
71, an update program 272, a transfer program 273, and the like, and perform predetermined processing with them. In addition,
The operating system of the WWW / SSL server 22 uses Unix and a CGI script. The operating system includes Unix (registered trademark), Linux, Windows NT, and Wind, respectively.
ows2000 (the above-mentioned registered trademark) or any other type. Further, in addition to CGI using Pearl (registered trademark) or the like, programming may be performed using Visual Basic (registered trademark), C ++ (registered trademark), or the like. The received information from the user terminal 3 is stored in the WWW / SSL server 2
2 generates an e-mail and sends it to the SMPT (Simpl
e Mail Transfer Protocol)
Mail server 25 from the port number 25 with the protocol
Is forwarded to The mail server 25 is a medical information server 5
POP3 (Pos) only when there is a mail request from
t Office Protocol Version
An e-mail is transmitted to the medical information server 5 via the public line 7 according to the protocol 3). In the case where image data or the like is included, another protocol may be used.

In the medical information inquiry system according to the present embodiment, a firewall or a proxy server is not provided for connection from the Internet 6 because the configuration is simplified for convenience of explanation. A server may be provided.

The medical information server includes a server 53 and a router 5
1, program file 52, hospital identification information DB 54,
The medical information DB 55 is provided. The server 53
It is composed of a well-known computer having a CPU, a RAM, and a ROM.
2. It includes a hospital identification information DB 54, a medical information DB 55, an input device and a display device (not shown). The program file 52 includes a registration program 521, an update program 5
22, a transfer program 523, and an inquiry program 524 are stored. When the server 53 receives the data by e-mail from the registration / update server 2, the server 53 analyzes the data and calls a necessary program from the program file 52 to perform processing.

The hospital identification information DB 54 includes a hospital ID,
The hospital password associated with this hospital ID is stored. If there is a communication from the registered hospital terminal 8 and the hospital ID and the hospital password input from the registered hospital terminal 8 match those stored in the hospital identification information DB 54, the communication is permitted. The hospital identification information D
In B54, the data of the hospital contracted in advance is input by the operator. When the information on the medical condition is received from the user, if the hospital is not specified, the hospital to be visited is specified by the medical information inquiry system 1 (FIG. 3: S202). And the address of the hospital are stored in association with the hospital ID. Then, as a search condition, for example, a registered hospital corresponding to the municipalities that are the same as or adjacent to the address of the user stored in the medical information DB 55 and a subject to be examined that matches the medical condition of the user are extracted as search conditions, The most appropriate registered hospital is designated as the designated hospital.

The medical information DB 55 stores a registered user's personal ID, medical information of the user specified by the personal ID, and the like. The storage of medical information in the medical information DB 55 is performed in advance by the following procedure. First, a user who is not registered in the personal identification information DB 26 specifies a predetermined URL using the browser of the user terminal 3 and connects to the WWW / SSL server 22 of the registration / update server 2. The WWW / SSL server 22 activates the CGI and interacts with the user. If the communication from the user requires new registration, the WWW / SSL server 22 calls the registration program 271 from the program file 27, and registers with the user in an interactive manner. The user is required to input necessary data. When the required data is input, the personal ID and user password of the user are registered in the personal identification information DB 26. Then, the input individual I
The information of the new registration request is added to D and the medical information, generated as an electronic mail, and transferred to the mail server 25. When there is a mail request from the medical information server 5, the mail server 2
5 transfers the personal ID and the medical information to the medical information server 5 as an electronic mail. The server 53 of the medical information server 5, which has received the e-mail, analyzes the contents of the e-mail and, when judging that it is the information of the request for new registration, invokes the registration program 521 of the program file 52 and starts it. The medical information data included in the electronic mail is stored in the medical information DB 55 in association with the personal ID, and an inquiry password is generated and stored in association with the medical information. The operator 56 creates the amulet card 10 based on the inquiry password and the personal ID generated here and sends it to the user. Further, the server 53 generates an electronic mail for notification of the completion of the registration, transfers the electronic mail to the mail server 25, and transfers the electronic mail to the user terminal 3 from here.

Here, FIG. 2 is a diagram conceptually showing the medical information stored in the medical information DB 55. Medical information DB
In 55, a personal ID 5501 for specifying the user is stored, for example, as “123456”. This personal ID 5
The following information is stored in association with 501. The inquiry password 5502 is a character string for performing authentication of communication from the registered hospital terminal 8. The name 5503 is the name of the user. The address 5504 is a user's address. The date of birth 5505 is the date of birth of the user. Photo 5506
Stores a photograph of the user as digital data in, for example, a jpeg format. The blood type 5507 is, for example, “ABRh
+ ". The blood pressure 5508 stores the minimum blood pressure and the maximum blood pressure as “80 to 120”. The presence or absence of allergic reaction 5509 stores various allergies, for example, as “cedar pollinosis +”. Medical history 5510,
For example, “high blood pressure” is stored, but it is preferable to store all the past medical histories and hospitalization histories in more detail. By memorizing the medical history in detail here, accurate information can be obtained in a short time at the hospital to be treated, not only when the user is unconscious due to illness or accident, but also when the user is an infant or demented elderly. Can be provided to the treatment staff. In addition, even if the user is a normal adult and the state of consciousness is clear, it is rare that the user himself / herself accurately remembers all medical histories. By accurately transmitting the information to the doctor, medical treatment can be started at an early stage.

The medicinal drug name 5511 is accurately stored, for example, as "hypertensive agent xx pharmaceutical xx", thereby preventing side effects due to the combined action of the drugs. In particular, by entering the description in the prescription at the hospital into the ordinary medicine name 5511, it is possible to inform the treatment staff of the exact medicine name that is usually difficult to memorize and the amount of the prescribed medicine, so that the accident can be anticipated. Can be prevented.

The name of the hospital 5512 visiting the hospital includes, for example, a hospital name such as “XX Clinic” and “last hospital visit 2
For example, "001.31" is stored.
Of course, when going to a plurality of hospitals, it is preferable to store all the information. The consultation ticket number 5513 stores the number of the consultation ticket of the hospital to which this hospital is attended, such as “9876”. By storing the consultation ticket number in this manner, the treatment staff can obtain information from the chart of the user of the visiting hospital.

The physical feature 5514 is stored in the form of, for example, “burns in the center of the back”, so that it is difficult to confirm whether or not the individual is identified by the personal ID in the face photograph. However, it is easy to confirm that the person is the person. In the presence or absence 5515 of the intention to donate an organ, it is easy to confirm the intention to donate an organ by describing, for example, “provide an organ (with electronic authentication)”. Life insurance number 5516
Is, for example, "○○○ life accident insurance 123456789-
No. 012 "is stored so that the subscribed insurance can be specified. If there is an inquiry or transfer of medical information,
The server 53 automatically notifies the relevant insurance company of necessary information by facsimile, telephone by voice synthesis, e-mail, or the like. Health insurance number 5517,
By storing the number of the subscribed health insurance, national health insurance, etc., such as “Nagoya symbol Aiu number 123”, it is possible to confirm the insurance subscribed even if the user does not have an insurance card. Can be facilitated. Dental information 551
8 is stored as “XX dental final visit history 2000.5.1”. The fingerprint 5519, the fundus photograph 5520, and the X-ray photograph 5521 can be stored as, for example, digital data in a jpeg format, and can be used as a reference for treatment or a specific reference for the individual.

The emergency contact number 5522 is “Yamao Huo 05
2-123-XXXX "and store the telephone number and telephone number to be contacted in case of emergency, and when the server 53 requests medical information inquiry or transfer of medical information, it is determined that it is an emergency, The contact information described in the emergency contact information 5522 is automatically notified by facsimile, telephone by voice synthesis, e-mail, or the like.

The update record 5523 includes "200
The reliability of this medical information can be shown by storing the date when this medical information was updated and its contents, as in “0.1.31 visit history”. Other 5524 and special notes 5
In 525, items that cannot be stored in the storage area are appropriately stored. The medical information described above is an example, and it goes without saying that other information can be included or unnecessary information can be deleted.

The registration / update server 2 and the medical information server 5 are connected by a public line 7. In connection, the server 53 of the medical information server 5 requests the mail server 25 of the registration / update server 2 to receive an e-mail,
The mail server 25 verifies whether the request is valid, and if the request is authenticated, the registration information,
The update information and the transfer information are transmitted as electronic mail to the server 53 of the medical information server 5 via the router 28, the public line 7, and the router 51. After the transmission, the contents of the transmitted e-mail are not left in the registration / update server 2. When the reception of the registration information, update information, and transfer information by the e-mail is completed, the medical information server 5 disconnects the line. Therefore, except when the registration information, update information, and transfer information are transmitted by e-mail, the line is disconnected, and it is extremely difficult to invade from outside. If the request for receiving the e-mail from the medical information server 5 to the mail server 25 of the registration / update server 2 is made irregular, it becomes more difficult to invade through the registration / update server 2. Therefore, confidentiality of personal medical information is easily maintained.

From the registered hospital terminal 8, a hospital ID and a hospital password are input to the server 53 of the medical information server 5 via the modem 81, the public line 7, and the router 51. When the communication is permitted, the inquiry request is accepted only when the personal ID of the individual who wants to inquire of the medical information and the inquiry password recorded only in the inquiry password holding means are input. The medical information server 5 that has received the inquiry request transmits the inquiry result to the registered hospital terminal 8 via the router 51, the public line 7, and the modem 81. According to the inquiry password, the medical information of the registered individual can be disclosed, but the update of the medical information DB 55 is not permitted, and the update of the registered individual is prohibited. Therefore, falsification of the medical information by a person other than the user is prevented.

When the registered hospital terminal 8 makes an inquiry request to the medical information server, the medical information server 5 determines that an emergency has occurred to the registered individual, The registered contact information is automatically transmitted to the emergency contact 57 by telephone, facsimile, electronic mail, or the like. Note that the router 51 is configured to enable such transmission.

On the other hand, in an unregistered hospital, the hospital ID,
Because you do not have a hospital password, you cannot communicate online. If the inquiry password can be decrypted only at the registered hospital, the inquiry password cannot be known. Therefore, the medical information of the registered individual cannot be known. However, registered individuals may be in an emergency. In such a case, the phone number 105 (see FIG. 6) of the operator 56 is described in the amulet card 10 serving as an inquiry password holding unit as an emergency contact by telephone so that it can be read by the naked eye. The operator 56 is contacted from the telephone 92 of the operator. When the operator 56 determines that the request is a genuine and legitimate request, the operator 56 directly operates the medical information server 5 to provide medical information to the telephone 92 of a non-registered hospital, a facsimile, or the like. The medical information is provided to the registered hospital terminal 9 by e-mail or the like. By adopting the manual operation in this way, the medical information inquiry system 1 can be used in an emergency.
Thus, even when medical information is not automatically distributed, registered medical information of an individual can be used in an unregistered hospital.

Here, the inquiry password holding means is:
The amulet card 10 will be described. Amulet card 10
Is information recording means worn by a user who has registered medical information. The recorded contents are a personal ID, an inquiry password, a telephone number of the operator 56 who is an emergency contact, and other descriptions. The personal ID is a symbol or number for identifying a registered individual, and is used by the user to register and update the server 2.
Personal identification information DB used when accessing
26 is the same ID as the personal ID registered. Of course, the personal ID of the talisman card 10 may be a different symbol from the personal ID accessing the registration / update server 2.

As a first example of a recording method, there is a printing method. FIG. 6 is a diagram showing the talisman card 10 recorded by printing. In this method, the personal ID 10
1. An inquiry password 102, a message 104, and an emergency contact 105 are printed on the card 100,
Is affixed. This face photograph 103 indicates that the person holding the talisman card 10
It is for confirming whether or not it is the owner.
This amulet card 10 has the advantage that the contents can be immediately understood by the naked eye. The card 100 as a recording medium in this case includes paper, a plastic plate such as polypropylene, a metal plate such as aluminum, and the like. Characters and images are recorded on these recording media by transferring ink by offset printing or the like.

As a second example of the recording method, there is a method by engraving. This method has the advantage that it can be confirmed with the naked eye and the record does not easily disappear. The recording medium in this case is a plastic plate such as polypropylene or PET,
Metal plates such as aluminum and copper plates are exemplified. These are deformed by a press or the like to record characters and the like.

As a third example of the recording method, there is a method using magnetism. FIG. 7 is a diagram illustrating the talisman card 110 on which the inquiry password is recorded by the magnetic stripe. In this method, since the inquiry password is magnetically recorded on the magnetic stripe 111, the contents cannot be seen with the naked eye,
No inquiry password is known except when needed.
On the other hand, a registered hospital requires a reader dedicated to an inquiry password (not shown). With this reader, magnetic stripe 1
The inquiry password recorded in 11 is read out and input to the registered hospital terminal 8. In this case, the recording medium may be paper,
Examples include a plate made of plastic such as polypropylene.
A magnetic layer is provided in a stripe shape on a part or the whole of such a card-shaped member, or the front surface of one side is covered with a magnetic layer, and recording is performed on the magnetic body by the residual magnetism.

As a fourth example of the recording method, there is a method using a bar code. FIG. 8 is a diagram showing the talisman card 120 in which the inquiry password is recorded by a barcode. In this method, the inquiry password is a bar code 12
Because it is recorded as 1, the content is not visible to the naked eye,
No inquiry password is known except when needed.
On the other hand, registered hospitals require a barcode reader dedicated to the inquiry password. The inquiry password recorded in the barcode 121 is read out by the barcode reader and input to the registered hospital terminal 8. In this case, examples of the recording medium include paper, a plastic plate such as polypropylene, and a metal plate such as aluminum. The barcode is
Two-dimensional or three-dimensional ones can be used.

As a fifth example of the recording method, there is a method using electronic data. FIG. 9 is a diagram showing the talisman card 130 in which the inquiry password is electronically recorded. The amulet card 130 electronically records data on a recording medium made of a semiconductor, for example. Specifically, an IC card, a flash memory, a smart media (registered trademark), or the like can be used. Of course, various other forms are conceivable. Here, a connector is connected to the terminal 131, an inquiry password recorded electronically inside is read out, and is input to the registered hospital terminal 8. A registered individual's face photograph may be recorded as digital data. If there is sufficient storage capacity, a part of medical information, for example, a blood type, may be recorded in advance. Even if the hospital terminal 8 cannot communicate with the medical information server 5,
The minimum required information can be obtained only by the registered hospital terminal 8.

In addition, various recording media such as a magneto-optical recording medium, an optical recording medium, and an electrostatic recording medium can be used. Further, various combinations of the above-described methods may be recorded. These recording methods are selected from the most appropriate methods in consideration of the balance between the ease of confirmation in an emergency and the securing of confidentiality in normal times, or the amount of information to be recorded.

The amulet card 10 includes a message 104 for requesting a telephone call to a human operator 56 of the medical information server 5 shown in FIG. 1 when an individual registered in an unregistered hospital is transported or the like. The emergency contact information 105 is described as shown in FIG. 6, and even in the case of an unregistered hospital that does not use the medical information inquiry system 1, a response is made by the human operator 56. The same applies to the amulet cards 110, 120, and 130. FIG.
FIG. 3 is a view showing another surface of the amulet card 10. Here, the registered hospital uses the medical information inquiry system 1
Since there is a case where the medical information of the individual already registered in the registered hospital terminal 8 can be already received as an e-mail, the message 1 indicating that this medical information is to be received immediately is provided.
06 is described.

In the talisman card 10, the inquiry password 102 is described by printing as shown in FIG. Therefore, the referral password is known only at a glance of the third party at a glance of the talisman card, and medical information can be referenced. Therefore, it is preferable to protect the inquiry password 102 from being read in a normal case. FIG. 11 is a view showing a protective bag 11 of the talisman card 10. As shown in FIG.
Is stored in an opaque bag 11 simulating an amulet bag of a shrine whose interior is not visible, and a seal 12 is applied to an open portion of the bag 11 so as not to be opened. The seal 12 is made of thin paper, resin, or the like so that the bag 11 cannot be opened without breaking. In addition, a message such as, for example, “Medical personnel should immediately open and check the contents.” Is written on the surface of the bag 11 to urge the user to check the contents in an emergency. Here, if the third party sees the talisman card 10, the seal 12 is always destroyed, so it can be recognized that the third party saw the talisman card 10, and in that case,
It is possible to take measures such as changing the inquiry password.

FIG. 12 is a diagram showing the amulet card 10 in which the inquiry password 102 is coated with an opaque thin film 13 containing metal powder or the like. As shown in FIG. 12, by covering the inquiry password 102 with an opaque thin film 13 made of a base containing a metal powder such as aluminum used for a so-called scratch card, the inquiry password 102 is usually read. Become impossible.
The thin film 13 is peeled off when it is scratched with a nail or a coin, so that the thin film 13 is peeled off when the inquiry password 102 is to be viewed. Once the thin film 13 is peeled off, it does not adhere to the talisman card 10 again. Therefore, if a third party sees the inquiry password 102 of the talisman card 10, the thin film 13 is always peeled off. Can see that the person saw the talisman card 10,
In this case, it is possible to take measures such as changing the inquiry password.

FIG. 13 is a view showing a bag 14 for protection of the talisman card 10. As shown in FIG. 13, the protective bag 14 is made of opaque paper or resin film, and is configured so that the inquiry password of the amulet card 10 entered therein cannot be seen. If the user wants to see the inquiry password written on the amulet card 10, the user can see it by destroying the protective bag 14. Once the protective bag 14 is broken, the amulet card 10 cannot be re-wrapped once it is destroyed.
Since the bag 14 is always destroyed, it is possible to know that a third party has seen the talisman card 10, and in that case, it is possible to take measures such as changing the inquiry password.

FIG. 14 is a diagram in which the surface of the amulet card 10 is covered with a release paper 15. The release paper 15 has a thermosetting adhesive applied to its surface, and
The adhesive is hardened by heating and pressure bonding over the surface of the amulet card 10 and adheres to the surface of the talisman card 10. Specifically, for example, Hakuri Rami (registered trademark) manufactured by Japan Office Laminator
Etc. can be suitably used. Then, when it is desired to see the inquiry password written on the amulet card 10, the release paper 15 can be peeled off by hand to see the inquiry password, but once peeled off, the thermosetting adhesive becomes Since it has already been cured, it does not adhere to the surface of the amulet card 10 again. Therefore, if a third party has a charm card 1
When the user sees the inquiry password 102 of No. 0, the release paper 15 is always peeled off, so that it is possible to know that a third party has seen the talisman card 10. Will be possible.

Note that this amulet card 10 and the like
As shown in FIG. 5, in addition to the personal ID 101 and the inquiry password 102, necessary information such as names, various messages 104 necessary for understanding the medical information inquiry system 1, and emergency contact information 105 which is the telephone number of the operator are appropriately described. However, it goes without saying that various changes such as addition or deletion of other matters can be made according to the purpose.

Although the form of the inquiry password holding means is described here as the card-shaped amulet card 10, it is not limited to this. FIG. 15 is a diagram showing a pendant type inquiry password holding unit. For example, a pendant-type inquiry password holding means as shown in FIG. 15 may be put on the plate 16a from the neck with a chain, a string 16c, or the like so as to be held by an infant or a demented elderly person. FIG. 16 is a diagram showing the surface of the plate 16a of the pendant type inquiry password holding means 16. FIG. 17 is a diagram showing the back surface of the plate 16a of the pendant type inquiry password holding means 16. In the pendant type inquiry password holding means 16, the plate 16
A personal ID, an inquiry password, and the like are engraved on a. The material of the plate 16a is preferably a metal such as titanium, gold, stainless steel or the like, which is hard to change, or a resin such as polypropylene. Particularly, a titanium alloy such as titanium oxide has a high antibacterial property when worn for a long time. But it can be used comfortably because it does not hurt the skin. Further, it is also preferable to form a border 16b around the periphery with a soft resin or rubber to soften the feel. Also, as shown in FIG. 17, a name or the like is stamped on the back surface of the plate 16a.

FIG. 18 is a diagram showing the rocket-type inquiry password holding means 17 in a sealed state. FIG. 19 is a diagram showing the rocket-type inquiry password holding means 17 in the open state. As shown in FIG. 18, the rocket-type inquiry password holding means 17 includes an openable door 17 c and a seal 17 a.
Sealed by. The seal 17a is formed of a thin film of paper or resin, and the door 17c can be opened by breaking the seal. When the door 17c is opened, a photograph, a personal ID, an inquiry password 17b, and the like can be identified.
When the seal 7c is opened, the seal 17a cannot be sealed again.
Since 7a has been destroyed, it can be known that a third party has seen. Alternatively, a structure such as a bracelet or an anklet that wraps around a wrist or an ankle with a chain may be used.

FIG. 20 is a diagram showing the sticker-type inquiry password holding means 18. The inquiry password holding means may be a sticker type as shown in FIG. First, a small sticker on which a personal ID, an inquiry password, and the like are written may be created and attached to the mobile phone 19. Alternatively, it may be one that is attached to the back of a wristwatch or the like. The sticker-type inquiry password holding means 18 may be such that the surface is covered with the release paper 15 described above. By doing so, the individual I
D and the inquiry password can be effectively concealed.
Also, a plurality of sticker-type inquiry password holding means 1
By preparing a number 8 and sticking it on a bag or umbrella that is normally used, it is possible to prevent forgetting the form of the inquiry password holding means. Furthermore, put it on a so-called donor card,
It may be easier for medical personnel to see.

The medical information inquiry system 1 configured as described above is operated as follows. Here, FIG.
It is a flowchart which shows the whole flow of medical information including the medical information inquiry system 1. In FIG. 3, the user,
The medical information inquiry system 1, taxis, registered hospitals, and unregistered hospitals are indicated by dotted lines. The solid line indicates the flow of the procedure, and the broken line indicates the flow of information. First, when a registered individual (user) attempts to use the medical information inquiry system 1 (start), it is determined whether the state of the user is urgent or not (step (hereinafter abbreviated as S)).
1). If it is urgent (S101: YES), the patient or another person will receive medical treatment earlier than anything else.
According to the ninth report (S102), an ambulance is arranged and the user is transported to the hospital (S103). Thus, the process on the user side is completed (END). When the user is transported by an ambulance, the amulet card 10 is transported to the registered hospital together with the user. Subsequent processing shifts to processing at the registered hospital. At the registered hospital, the user obtains the personal ID and the inquiry password from the talisman card 10 carried by the user and makes an inquiry request (S402). Upon receiving the inquiry request, the medical information inquiry system 1 receives the information (S201) and performs processing according to the content of the information. In addition,
The hospital to be transported is preferably a hospital registered in the medical information inquiry system 1, but may be any hospital in an emergency. When transported to a registered hospital or an unregistered hospital, the amulet card 10 is processed at that hospital. The details of the process when transported to a registered hospital or an unregistered hospital will be described later.

On the other hand, when the state of the user is not urgent (S101: NO), the user himself / herself sends the personal information and the user password from the user terminal 3 (see FIG. 1) to the registration / update server 2 together with the designated hospital or medical condition. If necessary, a transfer request is sent to notify the taxi dispatch request (S
104). On the other hand, the registration / update server 2 receives the information from the user (S201). If there is no designated hospital, the registration / update server 2 reads out the address of the user from the personal identification information DB 26 based on the personal ID, and is notified by the user. A hospital having a department corresponding to the medical condition is identified by the hospital identification information DB 54.
A search is made from among the hospitals registered in (see FIG. 1), an optimal hospital that satisfies these conditions is picked up, and a designated hospital to which the user should go is determined (S202). Medical information is created based on the personal ID, medical condition, and designated hospital notified by the user (S205). Then, the user receives the designated hospital and medical information (S105). The details will be described later.

Here, whether or not to use a taxi can be determined from the fact that the information (S201) received from the user includes a taxi dispatch request when the user wants to use a taxi. If the access is from a hospital, such as an inquiry request (S402) (S203: YES), it is determined that a taxi is not required because the user is already at the hospital, and the process proceeds to S205. On the other hand, if the access is not from a hospital (S203: NO), it is determined whether or not a taxi is necessary (S204). If it is determined that a taxi is used (S204: YES), the medical information inquiry system 1 The taxi company will be contacted,
After the address is confirmed, the vehicle is dispatched (S301). If the user needs a taxi (S106: YES), the user waits for the allocated taxi, gets on the taxi, and goes to the selected or designated registered hospital (S107). When a taxi is not used (S106: NO, S204: N
O), a request for dispatch to a taxi company (S301) is not made. The user also moves to the selected or designated registered hospital by a private car or the like without waiting for a taxi to be dispatched (S108). If the user moves to the hospital by taxi or private car, the user's processing is completed (EN
D).

Although not described in this flowchart, in an emergency, the user can also access the telephone by directly calling the operator 56 of the medical information server 5, and transfer the personal ID, the user password, and the medical information. By notifying the registered hospital to be transferred, the medical information can be transferred from the operator 56 to the designated hospital. Thus, even in a situation where the user cannot operate the user terminal 3, the user can use the medical information inquiry system 1 at any time by the operator 56 following.

In this way, the WWW / SSL server 22 of the registration / update server 2 of the medical information inquiry system 1 which has received the information such as the personal ID from the user (S201) (FIG. 1)
), The CGI calls the transfer program 273 in accordance with the information, creates a necessary request as an e-mail, and transfers it to the mail server 25. The mail server 25 transfers the e-mail from the router 51 of the medical information server 5 to the server 53 via the router 28 and the public line 7.

FIG. 4 shows a medical information inquiry system 1.
Executed by the registration / update server 2 by the transfer program 273 and the transfer program 5 of the medical information server 5
23 is a flowchart showing a process executed by the H.23. Note that S202, S203, S204 in FIG.
Is omitted here. In FIG. 3, information from the user is received (S201 in FIG. 3). If this information is a transfer request from the user, the registration / update server 2
Starts the transfer program 273 and executes the process (FIG. 4: START). First, the user operates the WWW / S of the registration / update server 2 from the user terminal 3 via the Internet.
When the user accesses the SL server 22 (S501), a protocol is established between the user terminal 3 and the WWW / SSL server 22, and data is input in a secret state by encryption (S502). Next, WWW / SSL server 2
From 2, the e-mail generated based on the data from the user is transferred to the mail server 25 (S 503). Here, the e-mail transferred from the user is temporarily stored in the mail server 25 (S504).

Then, it waits for a mail request from the medical information inquiry server 5 (S505: NO → S505), and if there is a mail request from the medical information server 5 (S505: YE)
S), the electronic mail is transferred to the medical information server 5 via the public line 7 (S506). The forwarded email will be
It is input to the server 53 of the medical information server 5 (S50
7) The server 53 analyzes the contents and determines that this is a medical information transfer request.
The second transfer program 523 is started, and transfer medical information is created based on this data (S508). Note that S508 corresponds to S205 in FIG. At this time,
The user terminal 3 and the hospital designated by the user or the designated hospital determined from the user's medical condition or the like are set as destinations of the e-mail. This completes the creation of the medical information for transfer (END). Here, returning to FIG. 3 and continuing the description, the created medical information is (FIG. 3: S205, FIG. 4: S205).
508), from the server 53 of the medical information server 5 to the router 5
The electronic mail is transferred as an e-mail to the registered hospital terminal 8 and the user terminal 3 of the designated hospital via the public line 7 via the public line 7.

The e-mail is received by the user (FIG. 3: 105). This e-mail includes the name of the selected hospital or the designated hospital, and the medical information transferred to the designated hospital. Therefore, the user can check the medical information to be transferred to the designated hospital, and if the wrong medical information is transferred or the content is incomplete, the user can respond at this stage. Note that taxi dispatch information is also included in this e-mail.

The e-mail is received by the designated registered hospital terminal 8 (S401 in FIG. 3), and the registered hospital determines the registered hospital based on information such as the consultation ticket number (see FIG. 2: 5513).
Before the user visits the hospital, the patient can prepare medical records.

Here, the inquiry request (S402) at the registered hospital in FIG. 3 will be described in detail. FIG. 5 is a flowchart showing a procedure of medical information inquiry by the hospital. In FIG. 5, the emergency contact 57, the medical information inquiry system 1, and the hospital are indicated by dotted lines. The solid line indicates the flow of the procedure, and the broken line indicates the flow of information. When a user is transported to a hospital without requesting the medical information inquiry system 1 to transfer medical information in advance, the processing is performed in the following procedure. First, when the transported hospital is not the hospital registered in the hospital identification information DB 54 (S601: NO), the medical information server 5 cannot be accessed, and the medical treatment is performed based on the telephone number written on the amulet card 10 from the hospital. The operator 56 of the information server 5 is called and the operator 5 is called.
6 and human beings.

On the other hand, if the hospital is a registered hospital (S6
01: YES), an inquiry request, which is a request for transfer of medical information from the registered hospital, is made (FIG. 3: S402). The registered hospital terminal 8 is connected to the medical information server 5 of the medical information inquiry system 1 via the public line 7 (S602). The medical information server 5 connected from the registered hospital (S701)
Hospital ID and hospital password (S
603) is confirmed (S702). Here, the entered hospital ID, hospital password, and hospital identification information DB 54
If the hospital ID and the hospital password stored in the same are not the same (S703: NO), an error message is sent to the registered hospital, and the entered hospital ID is re-entered.
And the hospital password are confirmed (S702). The registered hospital terminal 8 receiving the error message determines that the entered hospital ID and hospital password are not OK (S60).
4: NO), enter the hospital ID and the hospital password again (S603). In this way, if the hospital information and the hospital password are determined to be OK by the medical information server 5 (S60)
4: YES, S703: YES), individual I at the registered hospital
D and the inquiry password are input (S605).

The personal ID and the inquiry password input from the registered hospital are confirmed in the medical information server 5 (S
704). Here, the input personal ID and inquiry password, and the personal ID 5501 stored in the medical information DB 55
If the password does not match the inquiry password 5502,
If not (S705: NO), an error message is sent to the registered hospital, and the entered personal ID and inquiry password are confirmed again (S704). On receiving the error message, the registered hospital terminal 8 determines that the input personal ID and inquiry password are not OK (S606: NO), and inputs the personal ID and inquiry password again (S60).
5). Thus, if the medical information server 5 determines that the personal ID and the inquiry password are OK (S606: YE
(S, S705: YES), analyzing the communication content from the registered hospital and determining that the request is an inquiry request, the server 53 of the medical information server 5 activates the inquiry program 524 of the program file 52 and transfers it as an inquiry result. The medical information to be created is created, and the inquiry result is transferred to the registered hospital terminal 8. The registered hospital terminal 8 receives the inquiry result (S607), thereby obtaining the user's medical information.

When a registered hospital requests a medical information inquiry, it is determined that an emergency has occurred to the user.
An emergency contact is made to the emergency contact 57 (S706, S80)
1). In this case, the server 53 creates transmission data by voice synthesis, and makes a voice call to the emergency contact 57 by telephone. It should be noted that instead of voice, a means of communication such as communication by facsimile or e-mail may be used, and a telegram may be automatically applied.
In this way, by automatically contacting the emergency contact 57, when the user's own consciousness is lowered, or when the user is an infant or a demented elderly person, the emergency contact support is promptly obtained. be able to.

As described above, in the registered hospitals and the unregistered hospitals to which the medical information has been transferred by the medical information inquiry system 1, the user who is a patient is treated based on the medical information. Therefore, the user can receive the most effective treatment extremely safely without giving detailed explanation to the treatment staff.

The medical information inquiry system 1 according to the embodiment of the present invention has the above-described configuration and operation.
The following effects are obtained. That is, by using two passwords, a user password and an inquiry password,
The user registered in the personal identification information database can communicate with the medical information inquiry system using the personal ID and the user password that the user can know, while the hospital registered in the hospital identification information database has the hospital ID and the hospital ID. The personal ID recorded in the inquiry password holding means by communicating with the medical information inquiry system using a password
By knowing the personal ID and the inquiry password associated with the personal ID, the medical information of the individual can be transmitted.

Further, the registered user can update his / her medical information, so that the personal medical information specified by the personal ID stored in the medical information database can always be updated. Has the effect of becoming

Further, the update information input by the user is temporarily stored in the mail server 25, then transferred to the medical information server 5, and stored in the medical information DB 55, so that it is connected to the Internet 6. The registration / update server 2 does not have any medical information, or has only the update information, and has the effect that even if a third party enters the registration / update server from outside, the entire medical information cannot be known. is there.

In particular, since the registration / update server 2 and the medical information server 5 are connected to the public line 7 by dial-up, they are not always connected, and a third party from outside enters the registration / update server 2 from outside. However, it is extremely difficult to invade the medical information DB 55 of the medical information server 5, and there is an effect that the medical information is protected more safely.
Furthermore, since the connection is basically made only when the medical information server 5 goes to the mail server 25 of the registration / update server 2 to retrieve an e-mail, the access to the medical information DB from outside is extremely difficult from this point. This has the effect of making it difficult.

By the way, the user password and the reference password may be the same password. In this case,
At the registered hospital, the medical information can be updated similarly to the user. Therefore, medical information discovered at the stage of treatment,
Newly generated items can be changed at the registered hospital. In this case, it is desirable to save the log file or clarify the update history to clarify who updated the data and when.

As described above, the medical information inquiry system of the present invention
Although the medical information inquiry system 1 according to one embodiment has been described, the present invention is not limited to the above embodiment. For example, the registration / update server 2 and the medical information server 5 constitute a separate server for security. However, they may be integrally configured. And user terminal 3
The connection with the registered hospital terminal 8 is not limited to the Internet 6 or the public line 7, but may be any type of communication such as a dedicated line. The user terminal 3 is not limited to a so-called personal computer.
Any terminal can be used as long as it can communicate with the medical information inquiry system 1, such as a mobile communication body such as a mobile phone having an i-mode provided by T-docomo. It goes without saying that various modifications and improvements can be made by those skilled in the art without departing from the scope of the claims.

[0074]

As is evident from the above description, the medical information inquiry system of the present invention securely confidentially protects private medical information in normal times, and provides necessary information when medical treatment or medical treatment is required. There is an effect that the contents of the medical information are provided to a necessary target person.

[Brief description of the drawings]

FIG. 1 shows an outline of a system configuration of a medical information inquiry system 1 and a flow of information thereof.

FIG. 2 is a diagram conceptually showing medical information stored in a medical information DB 55.

FIG. 3 is a flowchart showing the entire flow of medical information including the medical information inquiry system 1.

FIG. 4 is a registration / update server 2 of the medical information inquiry system 1
Is a flowchart showing processing executed by the transfer program 273 and processing executed by the transfer program 523 of the medical information server 5.

FIG. 5 is a flowchart showing a procedure of medical information inquiry by a hospital.

FIG. 6 is a diagram showing the talisman card 10 recorded by printing.

FIG. 7 is a diagram showing an amulet card 110 on which an inquiry password is recorded by a magnetic stripe.

FIG. 8 is a diagram showing an amulet card 120 on which an inquiry password is recorded by a bar code.

FIG. 9 is a diagram showing the talisman card 130 on which an inquiry password is electronically recorded.

FIG. 10 is a diagram showing another surface of the talisman card 10;

FIG. 11 is a view showing a protective bag 11 of the talisman card 10;

FIG. 12 is a diagram showing an inquiry password 102 of an amulet card 10 coated with an opaque thin film 13 containing metal powder or the like.

FIG. 13 is a view showing a protective bag 14 of the talisman card 10;

FIG. 14 is a diagram in which the surface of the amulet card 10 is covered with a release paper 15;

FIG. 15 is a diagram showing a pendant type inquiry password holding unit.

FIG. 16 shows a pendant type inquiry password holding means 16;
It is a figure showing the surface of plate 16a.

FIG. 17 shows a pendant type inquiry password holding means 16;
It is a figure showing the back of plate 16a.

FIG. 18 is a diagram showing a rocket-type inquiry password holding unit 17 in a sealed state.

FIG. 19 is a view showing a rocket-type inquiry password holding means 17 in an open state.

FIG. 20 is a sticker type inquiry password holding means 18.
FIG.

[Explanation of symbols]

 1 Medical Information Inquiry System 2 Registration / Update Server 3 User Terminal 5 Medical Information Server 8 Registered Hospital Terminal 10 Amulet Card (Inquiry Password Holding Means) 55 Medical Information DB

Claims (12)

[Claims] 1. An individual ID which is an identification symbol for identifying an individual
And a personal identification information database storing a user password which is an identification symbol associated with the personal ID, a hospital ID storing a hospital ID identifying a hospital, and a hospital password associated with the hospital ID. An information database, a medical information database storing personal medical information registered in the personal identification information database in association with the personal ID, and the hospital I stored in the hospital identification information database.
D, a hospital communication permitting means for permitting communication by inputting a hospital ID and a hospital password that match the hospital password, the personal ID, and an inquiry password associated with the personal ID. Said personal ID recorded in an inquiry password holding means which is a portable information recording medium;
Receiving means for receiving a request for inquiry of medical information from a hospital permitted to communicate by the hospital communication permitting means when a personal ID and an inquiry password matching the inquiry password are input; Transmitting means for transmitting the medical information of the individual identified by the personal ID stored in the medical information database to the hospital identified by the input hospital ID based on the request for the inquiry of the medical information. A medical information inquiry system comprising a computer. 2. A user communication permitting means for permitting communication by inputting said personal ID stored in said personal identification information database and a personal ID and a user password corresponding to a user password associated with said personal ID. And an update permitting means for permitting update of medical information specified by the personal ID stored in the medical information database based on the input personal ID. Medical information inquiry system described in. 3. The medical information inquiry system includes a medical information server and a registration / update server, wherein the medical information server includes the medical information database, and the registration / update server includes the personal identification information database. And the personal ID stored in the personal identification information database
And an update information input for permitting and inputting update information for updating medical information specified by the personal ID stored in the medical information database only when the user password associated with the personal ID is input. Means, update information storage means for temporarily storing the input update information, and update information transfer means for transferring the update information stored in the update information storage means to the medical information server. The medical information inquiry system according to claim 1, characterized in that: 4. The update information storage means of the registration / update server is configured as a mail server, and the update information transfer means is periodically or irregularly requested by the medical information server via a public line. The registration / update server and the medical information server are connected only via transfer via the public line to transfer the update information as e-mail, and after the transfer of the update information, the information is stored in the mail server. 4. The medical information inquiry system according to claim 3, wherein the medical information server updates the data of the medical information database based on the update information transferred as an electronic mail. 4. 5. The transfer information is transmitted to the medical information server by inputting the personal ID and the user password to the registration update server and specifying a hospital registered in the hospital identification information database. 5. The medical information server according to claim 1, wherein the medical information server transfers the medical information specified by the personal ID based on the transfer information to the designated hospital. 6. The described medical information inquiry system. 6. The personal ID used for medical information inquiry
2. An inquiry password holding means used in the medical information inquiry system according to claim 1, further comprising a portable information recording medium in which said inquiry password associated with said personal ID is recorded. 7. The image processing apparatus according to claim 6, further comprising image information relating to a photograph of the face of the individual identified by the individual ID.
Inquiry password holding means described in 1. 8. The inquiry password holding means according to claim 6, wherein the information recording medium has information recorded thereon by engraving or printing so that the information can be visually read. 9. The inquiry password holding means according to claim 6, wherein said information recording medium includes a magnetic recording medium and information is recorded by magnetism. 10. The inquiry password holding unit according to claim 6, wherein the information recording medium records information by a bar code. 11. The information recording medium according to claim 6, wherein the information recording medium includes an electronic data storage unit capable of storing electronic data, and the information is recorded by the electronic data. Inquiry password holding means. 12. A data processing apparatus comprising: a protection unit that unreadablely covers information recorded on the information recording medium so that data recorded on the information recording medium cannot be read unless the protection unit is irreversibly destroyed. The inquiry password holding means according to any one of claims 6 to 11, wherein the inquiry password is held.