JP2003216496A - Medical image registering and referring method, medical image registering and referring system, server for contents registration, server for contents reference, program and its recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide disclosure control of medical image information responding to authority of a user referring to a medical image. <P>SOLUTION: In the contents registering server 3, the medical image is separated into an image body and attendant information, disclosure object attendant information is separated from the attendant information, the image body and the disclosure object attendant information are saved separately, and the disclosure object attendant information is registered in a database 5 by adding disclosure conditions, disclosure not eligible attendant information and a save place information of the image body are attached to the disclosure object attendant information. In the contents referring server 4, on the basis of the disclosure conditions from the database 5, the disclosure object attendant information available for reference in response to the authority of the user is read, and if it is attached with the save place information, the disclosure not eligible attendant information and the image body are coupled with the disclosure object attendant information and presented to the user. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a medical image registration reference service, and in particular, the authority of a medical image reference person (doctor, nurse, technician, patient) who has accessed from a terminal according to a disclosure condition added by a medical image registrant from a terminal. The present invention relates to a medical image registration reference method and system, a content registration server, a content reference server, a program, and a recording medium thereof, which are suitable for controlling disclosure of medical image information according to the above.

[0002]

2. Description of the Related Art In recent years, digitization of medical images and patient information has been promoted with the improvement of computer and its peripheral equipment technology. By digitizing this medical image, the medical image and patient information that had been closed in the hospital until now can be shared, and the network can be used in external hospitals for the purpose of assisting medical work and improving the quality of medical care. It has become possible to transfer the necessary information. Further, due to the increase in capacity of networks, large capacity data such as medical images have also been transferred.

The DICOM format, which is a standard for medical images, is divided into image body information and accompanying information. As shown in FIG. 16, this accompanying information includes a lot of personal information such as examination ID information, patient information, collection information, related information, image display information, image data information, and the image diagnosis result should be saved. Is also possible. Note that FIG.
Shows just one example of incidental information in a medical image (DICOM file).

By the way, if the DICOM format is registered or referred to as it is, there is a risk that all related persons or even unrelated persons will steal patient information (personal information) regardless of the authority of the user. There is a need for security as a countermeasure against that leakage.

As a conventional measure against leakage, there is a medical image transfer provided with an encryption technique. This is a method of performing encryption processing on the entire medical image, but in this method, all medical image information is disclosed when decrypted, so detailed disclosure that only necessary information is disclosed to necessary people It is impossible to control.

On the other hand, in order to control the disclosure of fine medical image information using encryption, there has been proposed a method of performing encryption processing only on a specific item for a medical image. This processing method is described in DICOM Addendum 55 (Publ
ic Comment), after encrypting the specific incidental information in the medical image, a pseudo value is put in the incidental information part, and the encrypted incidental specific information is encrypted. It is a form that is newly added to the medical image as a set. With this processing method, when there are multiple users, it is necessary to perform encryption processing for multiple people and add encrypted data sets for multiple people to the medical image and save them. .

When the authority (attribute) of a certain user is changed while only the specific items of this medical image are being encrypted, the encrypted data set used until then is deleted. , Depending on the user whose attribute has been changed again, after performing encryption processing for specific incidental information in the medical image, put a pseudo value in the incidental information part and renew the encrypted data set to the medical image. Need to be added to
It's very troublesome.

Even if the authority of the user is changed, the authority can be flexibly changed.
As described in JP-A-37323, according to the database for storing the content, the content registration server for adding the disclosure condition to the content and registering the content, and the authority of the user who accesses the content, There is an information registration reference system including a content reference server and the like that can refer only to information that can be disclosed in content.

FIG. 22 shows an overall block diagram of such an information registration reference system, where 1 is a user terminal,
Reference numeral 2 is an authentication management unit, 3 is a content registration server, 4 is a content registration server, and 5 is a database device.
Here, the database device 5 includes a database main body to which the disclosure condition is added for each content 501 and a disclosure control unit 503. Upon receiving the content registration request from the user terminal 1, the content registration server 3 authenticates the content registrant by the authentication management unit 2 and then changes the content 501 depending on the authority of the referrer to be used. After adding disclosure condition 502,
Register in the database. Further, when the content registration server 4 receives the content reference request from the user terminal 1, the authentication management unit 2 authenticates the content reference user, and thereafter instructs the disclosure control unit 503 to set the authority of the user. Based on the disclosure condition 502 added to the content 501, disclosure control of information in the content 501 is performed,
Only the information that can be disclosed in 1 is sent to the user terminal 1.

According to this structure, even if the authority of the content user is changed, the content registrant can deal with the content user only by rewriting the disclosure condition added to the content existing in the database. It will be possible. The above-mentioned disclosure condition is a conditional statement for controlling such that a certain item in the content is disclosed to Mr. A but not disclosed to Mr. B.

However, this Japanese Patent Laid-Open No. 2001-67323 does not describe information disclosure control in registration and reference of medical images. Medical images have a very large amount of information, and if the medical images were stored in the content database as they were, there was a problem that a large capacity disk was required for the content database, and it is preferable to put them in the content database for operation. Absent.

[0012]

DISCLOSURE OF THE INVENTION An object of the present invention is to enable disclosure in contents depending on the authority of a content registration server for adding disclosure conditions to contents and registering the contents and a user who accesses the contents. In an information registration reference system composed of a content reference server that allows only information to be referred, when applying it to the registration and reference of a medical image containing personal information, the registrant who registers the medical image can register the medical image. According to the authority of the user who refers to, it is possible to perform detailed disclosure control capable of performing disclosure control that does not show specific accompanying information included in the medical image.

[0013]

A medical image registration method according to the present invention separates medical image information into image body information and incidental information when a method of requesting registration of a medical image, and separates the image body information. Save, separate the disclosure target incidental information from the incidental information, and separately save other incidental information as non-disclosure related incidental information, the disclosure condition incidental information and the storage location of the non-disclosure related incidental information When the content registration step of adding information and the storage location information of the image body information to the database and registering it in the database and requesting the reference of the medical image, it is possible to refer from the database according to the authority of the user based on the disclosure condition. The disclosure target incidental information is read, and if the disclosure target incidental information does not include the non-disclosure subject incidental information or the storage location information of the image body information, the disclosure subject appending information is added. A content reference step of presenting information to the user and, if the storage location information is added, combining the non-disclosure target accompanying information and the image body information with the disclosure target accompanying information and presenting it to the user The main feature is to have and.

Further, the present invention is a medical image registration reference system comprising a user terminal, a content registration server, a content reference server, and a content storage database, wherein the content registration server is the utilization Means for receiving a content registration request from a person terminal, means for separating medical image information to be registered into image body information and incidental information, and separately storing the image body information, and disclosure target incidental information from the incidental information Means for separately storing other incidental information as non-disclosure incidental information, disclosure conditions in the disclosure object incidental information, storage location information of the non-disclosure incidental information, and storage location of the image body information. And a means for adding the information and registering in the database, wherein the content reference server refers to the content from the user terminal. A means for receiving a request, a means for receiving referenceable disclosure target incidental information according to the authority of the user from the database in response to the content reference request, and a disclosure target for the disclosure object incidental information. A means for sending the disclosure target incidental information to the user terminal when the external incidental information or the storage location information of the image body information is not added, and the disclosure target when the storage location information is added The main feature of the present invention is to include a means for combining the non-disclosure related information and the image body information with the accompanying information and sending it to the user terminal.

Further, according to the present invention, in a content registration server for registering content with disclosure conditions, the means for determining whether or not the registration target is medical image information, and the medical image information as associated information. Means for separating the image body information and separately storing the image body information; means for separating the disclosure target incidental information from the incidental information and separately saving other incidental information as non-disclosure incidental information; Means for converting target incidental information into a file format of a database, and means for adding storage location information of non-disclosure accompanying information and storage location information of image body information to the disclosure object incidental information converted to the database file format In addition, the disclosure condition is added to the disclosure target incidental information to which the non-disclosure target incidental information and the storage location information of the image main body information are added to the database. And key; and a means for recording.

Further, according to the present invention, in the content reference server that can refer only to the information that can be disclosed in the content according to the authority of the user who accesses the content, the image main body is added to the disclosure accompanying information transmitted from the database. Analyzing whether or not the storage location information of the information is written, and when the storage location information of the image body information is written, a means for acquiring the image body information from the storage location information and the disclosure accompanying information are disclosed. When the storage location information of the non-target incidental information is written, the means for obtaining the non-disclosure incidental information by the storage location information and the disclosure incidental information transmitted from the database are written in the non-disclosure incidental information. , Means for converting to a medical image format, and a means for combining the acquired image body information and the reference incidental information converted to the medical image format. To mainly characterized in that it has and.

The present invention is not limited to the above-mentioned medical image registration reference method, medical image registration reference system, content registration server, and content reference server.
Various modifications are possible as described in the claims.

[0018]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the drawings. [Embodiment 1] FIG. 1 is a block diagram showing the overall configuration of a medical image registration reference system according to Embodiment 1 of the present invention. In FIG. 1, 1 is a user terminal, 2 is an authentication management unit,
Reference numeral 3 is a content registration server, 4 is a content reference server, 5 is a database device, 6 is a non-disclosure accompanying information storage unit, and 7 is an image body information storage unit. User terminal 1
Is actually a plurality (a large number) of terminals connected to the content registration server 3 and the content reference server 4 via a network, one of which is a content registrant terminal and the other of which is a content referencer. Is a terminal,
Furthermore, some terminals are both terminals. The user terminal 1 in FIG. 1 is a general term for these terminals. The configuration of the database device 5 is basically the same as that of FIG. 22, but in the present embodiment, the user information for authentication and the like are also included in the database device 5.
Is held. This also applies to Embodiments 2 and 3 described later. . The non-disclosure associated information storage unit 6 stores the non-disclosure associated information. The image body information storage unit 7 stores the image body information.

FIG. 2 is a block diagram showing a detailed configuration of the content registration server 3 for carrying out medical image registration according to the first embodiment of the present invention. In FIG. 2, reference numeral 300 denotes a transmission / reception interface unit for transmitting / receiving various information to / from the user terminal 1, 301 is a medical image determination unit for determining whether or not a file to be registered is a medical image, and 302 is a medical image for ancillary information and an image body. A medical image separation unit that separates the image body information into the image body information storage unit 7 and stores the image body information in the image body information storage unit 7, and 303 separates the disclosure target incidental information from the separated incidental information, and excludes other than the disclosure target incidental information as the disclosure target incidental information. Accompanying information storage unit 6
The disclosure target incidental information separation unit 304 stores a disclosure target incidental information into a database storage format, and the file format conversion unit 305 stores the non-disclosure target incidental information stored in the non-disclosure target incidental information storage unit 6. Non-disclosure related information storage location information adding unit for adding information to disclosure target incidental information, and 306 is an image body storage location for adding image storage location information of image body information stored in the image body information section 7 to disclosure target incidental information An information addition unit, 307 is a disclosure condition addition unit that adds disclosure conditions to disclosure target incidental information, and 308 is a disclosure condition acquisition unit that reads out disclosure conditions added to disclosure target content information from the database device 5 at the request of the content registrant. Reference numerals 309 denote disclosure condition changing units that change the disclosure condition according to an instruction from the content registrant.

FIG. 3 is a block diagram showing a detailed configuration of the medical image reference server 4 for performing medical image reference according to the first embodiment of the present invention. In FIG. 3, reference numeral 400 denotes a transmission / reception interface unit that transmits / receives various kinds of information to / from the user terminal 1, 401 is a medical image combining unit that combines reference accompanying information and image body information, and 402 is disclosure related information that is not subject to disclosure. The medical image format conversion unit 403 inserts the non-disclosure related information extracted from the storage unit 6 into the reference related information in the medical image format, and 403 indicates the storage location of the non-disclosure related information described in the disclosure related information. A non-disclosure associated storage location information acquisition unit for reading and acquiring the intended non-disclosure associated information in the non-disclosure associated information storage unit 6, 404 reads the image body storage location information described in the disclosure accessory information, An image main body storage location information acquisition unit that acquires the desired image main body information in the image main body information storage unit 7, 405 indicates whether or not the disclosure additional information includes the image main body storage location information. Image body storage location information determination section to either check, 406 content information received from the database apparatus 5 is determined medical image determining unit whether the information relating to the medical image.

FIG. 4 is a flow chart showing the flow of processing for performing medical image registration according to the first embodiment of the present invention. The procedure for registering a medical image will be described below with reference to FIG.

First, a content registration request is transmitted from the user terminal 1 (s100). In addition to the content (medical image file) to be registered, the content registration request includes items to be disclosed of additional information, disclosure conditions, and the like. The transmission / reception interface unit 300 of the content registration server 3 receives the content registration request, the authentication management unit 2 performs authentication (s101, s102), and the authentication result is O.
In the case of K, a content registration request is sent from the transmission / reception interface unit 300 to the medical image determination unit 301 (s10).
3). In the case of NG, the connection disabled message is returned from the transmission / reception interface unit 300 to the user terminal 1 (s104), and registration is disabled.

In the medical image judging section 301, it is checked whether the content is a medical image (s10).
5) In the case of a medical image, the medical image separation unit 302 separates the medical image into incidental information and image body information, sends the separated image body information to the image body information storage unit 7 and stores it (s106). In the DICOM format of the medical image, each data element is divided by a tag, and the medical image separation unit 302 follows the tag in the content (medical image file) and separates the incidental information and the image body. Next, in the disclosure target incidental information separating unit 303, based on the disclosure target item of the incidental information designated by the content registrant, only the disclosure target incidental information to be disclosed is further separated from the incidental information separated in the medical image separating unit 302. Then, the incidental information other than the incidental information to be disclosed is sent to the incidental information not to be disclosed and stored as the incidental information not to be disclosed (s10).
7).

The file format conversion unit 304 converts the disclosure target incidental information separated by the disclosure target incidental information separating unit 303 into the file format of the database (s10).
8). Next, the non-disclosure incidental information storage location information adding unit 3
In 05, the storage location information of the non-disclosure related information is received from the non-disclosure related information storage unit 6, and the non-disclosure related information stored in the non-disclosure related information storage unit 6 in the disclosure target related information after the file format conversion. Information on the storage location of information is added (s109). In addition, in the image body storage location information adding unit 306, the storage location information of the image body information is received from the image body information storage unit 7, and the storage location of the image body information stored in the image body information storage unit 7 in the disclosure target incidental information. Information is added (s110). After that, the disclosure condition adding unit 306 adds the disclosure condition designated by the content registrant, and registers the disclosure target incidental information with the disclosure condition in the database device 5 (s111).

After that, if the content (medical image file) to be registered remains, the procedure is repeated from step s105 by the same procedure, and if it does not remain, the registration ends (s112). If the content to be registered is not a medical image in the medical image determination unit 301, the target content is converted into the file format of the database system (s113), and after the conversion, the disclosure condition designated by the content registrant. Will be added to register the disclosure target content in the database device 5 (s11).
1).

When changing the disclosure conditions, the content registrant transmits a disclosure condition change request from the user terminal 1. When the transmission / reception interface unit 300 of the content registration server 3 receives the disclosure condition change request, the authentication management unit 2 authenticates, and when the authentication is OK, the disclosure condition to be changed is changed from the transmission / reception interface unit 300 to the disclosure condition acquisition unit 3
Sent to 08. In the disclosure condition acquisition unit 308, the disclosure condition added to the disclosure target content information requested to be changed is read from the database device 5, and the disclosure condition changing unit 309 changes the disclosure condition and re-reads it in the database device 5. To write.

FIG. 5 is a flow chart showing the flow of processing for performing medical image reference according to the first embodiment of the present invention. The procedure for referring to the medical image will be described below with reference to FIG.

First, a content reference request is transmitted from the user terminal 1 (s120). When the transmission / reception interface unit 400 of the content reference server 4 receives the content reference request, the authentication management unit 2 authenticates the user (s121, s122), and when the authentication result is OK, the content reference request is transmitted / received. It is sent from the interface unit 400 to the database device 5. In the database apparatus 5, the disclosure control unit 503 checks the disclosure condition 502 added to the target content 501 stored in the database (s123), and only the content information that can be disclosed to the user is the content reference server. 4 (s124). When the authentication result is NG, the connection / disconnection message is returned from the transmission / reception interface unit 300400 to the user terminal 1 (s125).

The medical image determination unit 406 determines whether the content information received from the database device 5 is information regarding medical images (s126). When the user requests the reference of the medical image, the medical image determination unit 406 receives the disclosure accompanying information that may be disclosed from the database device 5 as the information regarding the medical image. FIG. 17 is an example of the disclosure target incidental information sent from the database device 5. The medical image determination unit 406 sends the disclosure incidental information to the image body storage location information determination unit 405.
The image body storage location information determination unit 405 checks whether the received disclosure accompanying information includes image body storage location information (s127), and if there is image body storage location information, the image body storage location information acquisition unit 404. At, the designated image body information is acquired from the image body information storage unit 7 (s12).
8). If the image data storage location information is not included in the disclosure accompanying information, only the disclosure accompanying information is transmitted / received by the transmission / reception interface unit 4.
From 00, the information will be disclosed to the user terminal 1 hundred million times (s132).

After acquisition of the image body information, the non-disclosure accompanying information storage location information acquisition unit 403 uses the non-disclosure accompanying information storage section 6 based on the non-disclosure accompanying information storage location information described in the disclosure accompanying information. More objective non-disclosure related information is acquired (s129). After acquiring the non-disclosure related information, the medical image format conversion unit 402 writes the disclosure related information in the non-disclosure related information and converts it into reference related information in the medical image format (DICOM format) (s130).
Then, in the medical image combining unit 40, the reference accompanying information in the medical image format and the image main body information acquired from the image main body information storage unit 7 are combined and returned to the medical image (s131), and the transmission / reception interface unit 400 causes the user terminal 1 To the user and disclose it to the user (s132).

As a result, the user refers to the content of only the information that can be disclosed according to the attribute of the user (s133). When the user requests to refer to medical information other than the medical image, the information to be disclosed transmitted from the database device 5 is sent from the transmission / reception interface unit 400 to the user terminal 1 and the user To refer to the disclosed content as it is (s13).
3).

Here, the number of items of incidental information included in the medical image is very large (FIG. 16). It is also possible to add disclosure conditions to all the items and register them in a database having disclosure control. However, if all the items of incidental information are registered in the database, there is a problem that the response at the time of reference will be delayed, and that all the items included in the incidental information are not items that identify the patient. Paying attention to (some items are meaningless to the user), the disclosure target incidental information items registered in the database with disclosure control have a high degree of confidentiality, can identify individuals, and are meaningful and useful to the user. Information. Specifically, it is examination ID information, patient information, collection information, additional information of related information and storage location information, and the like. Other incidental information is incidental information that is not subject to disclosure.

The non-disclosure accompanying information is stored in the non-disclosure accompanying information storage unit 6 in the medical image format. The non-disclosure related information is image information necessary for restoring the medical image (DICOM file), information that is meaningless to the user, and the like.

If there is no image body storage location information in the disclosure incidental information controlled by the authority of the user, the incident information not subject to disclosure is not used and the database system 5 is not used.
Only the disclosure associated information output from is presented to the user. However, if there is image main body storage location information, in order to restore it to a medical image (DICOM file), reference additional information is created by embedding the disclosure additional information in the non-disclosure additional information and the reference additional information and the image. The body information is combined and the medical image is presented.

Although the present invention has been described in detail based on the first embodiment, the present invention is not limited to the examples, and it goes without saying that various modifications can be made without departing from the easiness thereof.

[Second Embodiment] FIG. 6 shows a second embodiment of the present invention.
1 is a block diagram showing the overall configuration of a medical image registration reference system according to the present invention. In FIG. 6, 1 is a user terminal, 2 is an authentication management unit, 3 is a content registration server, 4 is a content reference server, 5 is a database device, 6 is a non-disclosure accompanying information storage unit, and 7 is image body information. A storage unit, 8 is a key generation unit, and 9 is a key management unit. Here, the key generation unit 8 generates a key for encrypting the image body information, and the key management unit 9 manages the key obtained by encrypting the image body information. Other than this, it is basically similar to FIG.

FIG. 7 is a block diagram showing the detailed structure of the content registration server 3 for carrying out medical image registration according to the second embodiment of the present invention. In FIG. 7, 300 is a transmission / reception interface unit that transmits and receives various information to / from the user terminal 1, 301 is a medical image determination unit that determines whether the file to be registered is a medical image, 302 is a medical image associated information, and an image body A medical image separation unit 303 for separating information into information is a disclosure target incidental information separation unit that separates the disclosure target incidental information from the separated incident information and saves the rest as non-disclosure incidental information in the non-disclosure incidental information storage unit 6. , 304 is a file format conversion unit that converts the disclosure target incidental information into a database storage format, and 305 is a non-disclosure target incidental information storage unit
The storage location information of the non-disclosure related information to be added to the storage location information of the non-disclosure related information to be stored in the image storage area information addition section 306 is the storage location information of the image body information stored in the image body information section 7. Is added to the disclosure target incidental information, 307 is a disclosure condition adding unit that adds a disclosure condition to the disclosure subject accompanying information, and 308 is a disclosure that is added to the disclosure target content information at the request of the content registrant. The disclosure condition acquisition unit that reads the conditions from the database device 5, 309 is the disclosure condition changing unit that the content registrant changes the disclosure condition, and 310 is the medical image separation unit 30.
This is an image body information encryption unit that encrypts the image body information separated in 2.

FIG. 8 is a block diagram showing the detailed arrangement of a medical image reference server for performing medical image reference according to the second embodiment of the present invention. In FIG. 8, reference numeral 400 denotes a transmission / reception interface unit that transmits and receives various information to and from the user terminal 1, 401 is a medical image combining unit that combines reference accompanying information and image body information, and 402 is disclosure accompanying information that is not subject to disclosure. The medical image format conversion unit 403 inserts the non-disclosure related information extracted from the storage unit 6 into the reference related information in the medical image format, and 403 indicates the storage location of the non-disclosure related information described in the disclosure related information. A non-disclosure associated storage location information acquisition unit that reads out and extracts the intended non-disclosure associated information in the non-disclosure associated information storage unit 6, 404 reads the image body storage location information described in the disclosure accessory information,
An image body storage location information acquisition unit 405 that retrieves the desired image body storage location information from the image body information storage unit 7, 405 is an image body storage location information determination unit that checks whether the disclosure incidental information includes image body storage location information, and 406 is A medical image determination unit that determines whether the content information received from the database device 5 is information related to a medical image, and 407 is an image body information decryption unit that decrypts the encrypted image body information.

FIG. 9 is a flow chart showing the flow of processing for executing medical image registration for improving the safety when saving image body information according to the second embodiment of the present invention. Less than,
A procedure for registering a medical image will be described with reference to FIG.

First, a content registration request is transmitted from the user terminal 1 (s200). Content registration server 3
The transmission / reception interface unit 300 receives the content registration request, and the authentication management unit 2 authenticates (s201, 2
02), if the authentication result is OK, the content registration request is sent from the transmission / reception interface unit 300 to the medical image determination unit 30.
1 (s203). In the case of NG, the connection impossible message is returned from the transmission / reception interface unit 300 to the user terminal 1 to make registration impossible (s20).
4).

In the medical image judging section 301, it is checked whether the content is a medical image (s20).
5) In the case of a medical image, the medical image separation unit 302 separates the medical image into incidental information and image body information (s2).
06). The key generation unit 8 generates an encryption key for encrypting the separated image body information (s207), and the image body information encryption unit 310 encrypts the image body information (s20).
8). Then, the encrypted image body information is stored in the image body information storage unit 7 (s209). Further, the encryption key obtained by encrypting the image body information is stored in the key management unit 9 (s21).
0). 18 and 19 show examples of correspondence between the image body information file name and the encryption key information in the key management unit 9. In the disclosure target incidental information separating unit 303, only the disclosure target incidental information to be disclosed is further extracted from the incident information separated by the medical image separating unit 302, and the non-disclosure incidental information other than the disclosure object incidental information is the non-disclosure incidental information. It is transmitted to the storage unit 6 and stored (s211).

The file format conversion unit 304 converts the disclosure target incidental information separated by the disclosure target incidental information separating unit 303 into the file format of the database (s21).
2). Next, the non-disclosure incidental information storage location information adding unit 3
At 05, the storage location information of the non-disclosure related information stored in the non-disclosure related information storage unit 6 is added to the disclosure target related information after the file format conversion (s213). Further, the image body storage location information adding unit 306 similarly adds the storage location information of the encrypted image body information stored in the image body information storage unit 7 to the disclosure target accompanying information (s214). Thereafter, the disclosure condition adding unit 306 adds the disclosure condition, and registers the disclosure target incidental information with the disclosure condition in the database device 5 (s215).

If content remains in the medical image determination unit 301, the procedure is repeated from step s205, and if it does not remain, the registration is completed.

If the stored content is not a medical image in the medical image judging section 301, the target content is converted into a database file format (s217), and the disclosure condition is added after the conversion. Then, the disclosure target content is registered in the database device 5 (s215).

FIG. 10 is a flow chart showing the flow of processing for performing medical image reference according to the second embodiment of the present invention. The procedure for referring to the medical image will be described with reference to FIG.

First, a content reference request is transmitted from the user terminal 1 (s220). When the transmission / reception interface unit 400 of the content reference server 4 receives the content reference request, the authentication management unit 2 authenticates the user (s221, s222), and when the authentication result is OK, the content reference request is transmitted. It is sent from the transmission / reception interface unit 400 to the database device 5. Database device 5
Then, in the disclosure control unit 503, the disclosure condition 502 added to the target content 501 stored in the database is checked (s223), and only the content information that can be disclosed to the user is checked by the content reference server 4
To (s224). If the authentication result is NG, the connection / disconnection message is returned from the transmission / reception interface unit 400 to the user terminal 1 (s225).

The medical image determination unit 406 determines whether the content information received from the database device 5 is information related to medical images (s226). When the user requests the reference of the medical image, the medical image determination unit 406 receives the disclosure incidental information (FIG. 17) that may be disclosed from the database device 5 as the information regarding the medical image. The medical image determination unit 406 sends the disclosure incidental information to the image body storage location information determination unit 405. The image body storage location information determination unit 405 checks whether the received disclosure accompanying information includes image body storage location information (s
227), if there is image body storage location information, the image body storage location information acquisition unit 404 acquires the designated image body information from the image body information storage unit 7 (s228).
If the image data storage location information is not included in the disclosure accompanying information, only the disclosure accompanying information is transmitted / received by the transmission / reception interface unit 400.
It is sent to the user terminal 1 and presented to the user (s234).

After obtaining the image body information, a decryption key for decryption is obtained from the key management unit 9 (s229), and the image body information decryption unit 405 decrypts the image body information with the obtained decryption key ( s230). After the image body information is decrypted, the non-disclosure accompanying information storage location information acquisition unit 403 uses the non-disclosure accompanying information storage location 6 based on the non-disclosure accompanying information storage location information described in the disclosure accompanying information. The non-disclosure related information is acquired (s231). After acquisition of the non-disclosure related information, the medical image format conversion unit 402 writes the disclosure related information in the non-disclosure related information,
It is converted into reference accompanying information in the medical image format (s232).
Then, in the medical image combining unit 401, the reference accompanying information in the medical image format and the image body information decoded by the image body information decoding unit 310 are combined and returned to the medical image (s23
3), the data is sent from the transmission / reception interface unit 400 to the user terminal (s234).

As a result, the user terminal 1 refers to the content of only the information that can be disclosed according to the attribute of the user (s235). Also, the database device 5
When the disclosed content transmitted from the device is not a medical image (s226), the transmitted / received interface unit 400 sends the disclosed content as it is to the user terminal for the user to refer to it (s234).

In the second embodiment, the image body information stored in the image body information storage unit 7 is encrypted, so that the security at the time of storage in the image body information storage unit 7 is improved as compared with the first embodiment. To do. Also in the case of the first embodiment, if the user does not know the image body storage location information in the disclosure target incidental information stored in the database device 5, the image body information is not disclosed, but a malicious user may Directly
It is possible to access the image body information storage unit 7 and steal the image body information. Although the image body information has a low degree of confidentiality, it is one of the pieces of information that can identify an individual. Therefore, it is necessary to ensure the safety of the image body information.

In the key generation unit 8, the image body information encryption unit 3
An encryption key for encrypting the image body information is generated at the request of No. 10, and the key management unit 9 transmits a decryption key for decrypting the image body information at the request of the image body information decryption unit 405. As shown in FIG. 18 and FIG. 19, the key management unit 9 has a corresponding dictionary in which the image body information name and the encryption key information are written, whereby the decryption key information corresponding to the image body information is decrypted. It can be transmitted to the conversion unit 405.

Although the present invention has been described in detail based on the second embodiment, it is needless to say that the present invention is not limited to the embodiments and various modifications can be made without departing from the easiness thereof.

[Third Embodiment] FIG. 11 is a block diagram showing the overall configuration of a medical image registration / reference system according to a third embodiment of the present invention. In FIG. 11, 1 is a user terminal, 2
Is an authentication management unit, 3 is a content registration server, 4 is a content reference server, 5 is a database device, 6 is a non-disclosure accompanying information storage unit, and 7 is an image body information storage unit. This is basically the same as in FIG.

FIG. 12 is a block diagram showing the detailed structure of a content registration server for carrying out medical image registration according to the third embodiment of the present invention. In FIG. 12, 300 is a transmission / reception interface unit that transmits and receives various information to / from the user terminal 1, 301 is a medical image determination unit that determines whether the registered file is a medical image, and 302 is a medical image associated information and image. Medical image separation unit that separates body information, 3
Reference numeral 03 denotes a disclosure target incidental information separating unit that separates the disclosure target incidental information from the separated incident information and saves the other information as non-disclosure target incidental information in the non-disclosure target incidental information storage unit 3;
Reference numeral 04 is a file format conversion unit that converts the disclosure target incidental information into a database storage format, and 305 is a disclosure that adds the storage location information of the non-disclosure target incidental information stored in the non-disclosure target incidental information storage unit 6 to the disclosure target incidental information. A non-target incidental information storage location information adding unit, 306 is an image body saving location adding unit that adds the storage location information of the image body information stored in the image body information unit 7 to the disclosure target incidental information, and 307 is the disclosure target incidental information. A disclosure condition addition unit for adding a disclosure condition, 308 is a disclosure condition acquisition unit for reading the disclosure condition added to the disclosure target content information from the database device 5 at the request of the content registrant, and 309 is a disclosure condition according to the instruction of the content registrant. A disclosure condition changing unit for changing the image body information, and 310 is image body information for encrypting the image body information separated by the medical image separating unit 302. Goka unit, 311 encryption key generation unit for generating an encryption key for encrypting the image body information, 312
Is an encryption key information addition unit that adds encryption key information to the disclosure target incidental information.

FIG. 13 is a block diagram showing the detailed arrangement of the medical image reference server 4 for performing medical image reference according to the third embodiment of the present invention. In FIG. 13, reference numeral 400 is a transmission / reception interface unit for transmitting / receiving various information to / from the user terminal 1, 401 is a medical image combining unit that combines reference accompanying information and image body information, and 402 is disclosure accompanying information that is not subject to disclosure. A medical image format conversion unit that inserts the non-disclosure related information extracted from the storage unit and converts it into reference related information in the medical image format, and 403 reads out the storage location of the non-disclosure related information described in the disclosure related information. , A non-disclosure associated storage location information acquisition unit that extracts the target non-disclosure associated information stored in the non-disclosure associated information storage unit 6, and 404 reads out the image body storage location information described in the disclosure associated information, and the image body An image body storage location information acquisition unit 405 that extracts the desired image body information in the information storage unit 7, and 405 indicates whether the disclosure incidental information includes image body storage location information. The image main body location information judging unit 406 checks, the medical image judging unit 406 judges whether the content information received from the database device 5 is information related to the medical image, and 407 decrypts the encrypted image main body information. An image body information decryption unit 408 is an encryption key information extraction unit that extracts the encryption key information described in the disclosure accompanying information and transmits the encryption key information to the image body information decryption unit 407.

FIG. 14 is a flow chart showing the flow of processing for carrying out medical image registration for improving the safety at the time of saving image body information according to the third embodiment of the present invention. The procedure for registering a medical image will be described below with reference to FIG.

First, a content registration request is transmitted from the user terminal 1 (s300). Content registration server 3
The transmission / reception interface unit 300 receives the content registration request, and the authentication management unit 2 authenticates (s301, s
302), if the authentication result is OK, the content registration request is sent from the transmission / reception interface unit 300 to the medical image determination unit 3
01 (s303). In the case of NG, the connection disabled message is returned from the transmission / reception interface unit 300 to the user terminal 1 to disable registration. (S30
4).

In the medical image judging section 301, it is checked whether the content is a medical image (s30).
5) In the case of a medical image, the medical image separation unit 302 separates the medical image into incidental information and image body information (s30).
6). An encryption key for encrypting the separated image body information is generated by the encryption key generation unit 311, and the encryption key is acquired by the image body information encryption unit 310 (s307), and the image body information is encrypted (s308). The encrypted image body information is stored in the image body information storage unit 7 (s309). The disclosure target incidental information separating unit 303 separates only the disclosure target incidental information to be disclosed from the incident information separated by the medical image separating unit 302, and the non-disclosure related incidental information other than the disclosure target incidental information is excluded from the disclosure target. It is transmitted to the information storage unit 6 and stored (s310).

The file format conversion unit 304 converts the disclosure target incidental information separated by the disclosure target incidental information separating unit 303 into the file format of the database (s31).
1). Next, the non-disclosure incidental information storage location information adding unit 3
In 05, the storage location information of the non-disclosure related information saved in the non-disclosure related information storage unit 6 is added to the disclosure target related information after the file format conversion (s312). In addition, the image body storage location information addition unit 306 adds the storage location information of the encrypted image body information stored in the image body information storage unit 7 to the disclosure target incidental information (s3).
13). After the storage location of the image body information is added, the encryption key information obtained by encrypting the image body information is added to the disclosure accompanying information (s314). Thereafter, the disclosure condition is added by the disclosure condition adding unit 306, and the disclosure target incidental information with the disclosure condition is registered in the database device 5 (s315).

Hereinafter, if the medical image determination section 301 has contents remaining, the process is repeated from step s305 in the same procedure, and if not, the registration is completed. Also,
In the medical image determination unit 301, if the stored content is not a medical image, the target content is converted into the file format of the database (s31
7) After the conversion, the disclosure condition is added and the disclosure target content is registered in the database device 5 (s31).
5).

FIG. 15 is a flow chart showing the flow of processing for performing medical image reference according to the third embodiment of the present invention. The procedure for referring to medical images will be described below with reference to FIG.
This will be described using 5.

First, a content reference request is transmitted from the user terminal 1 (s320). When the transmission / reception interface unit 400 of the content reference server 4 receives the content reference request, the authentication management unit 2 authenticates the user (s321, s322), and when the authentication result is OK, the content reference request is transmitted. It is sent from the transmission / reception interface unit 400 to the database device 5. Database device 5
Then, in the disclosure control unit 503, the disclosure condition 502 added to the target content 501 stored in the database is checked (s323), and only the content information that can be disclosed to the user is checked by the content reference server 4
It is transmitted (s324). When the authentication result is NG, the connection / disconnection message is returned from the transmission / reception interface unit 400 to the user terminal 1 (s325).

The medical image determination unit 406 determines whether the content information received from the database device 5 is information regarding medical images (s326). In the medical image determination unit 406, when the user requests the reference of the medical image, the disclosure accompanying information that may be disclosed from the database device 5 as the information regarding the medical image (FIGS. 20 and 21).
Will receive. The medical image determination unit 406 sends the disclosure incidental information to the image body storage location information determination unit 405. The image body storage location information determination unit 405 checks whether the received disclosure accompanying information has image body storage location information (s327).
The image storage location information acquisition unit 404 acquires the designated image body information from the image body information storage unit 7 (s328). When the image storage location information is not included in the disclosure accompanying information (s
327), only the disclosure accompanying information is sent from the transmission / reception interface unit 400 to the user terminal 1 and disclosed to the user (s334).

After obtaining the image body information, the encryption key information extraction unit 4
In 08, the decryption key for decryption is extracted from the disclosure accompanying information (s329), and the image body information decryption unit 407
At, the image body information is decrypted with the extracted decryption key (s330). After the image body information is decrypted, the non-disclosure accompanying information storage location information acquisition unit 403 uses the non-disclosure accompanying information storage location 6 based on the non-disclosure accompanying information storage location information described in the disclosure accompanying information. The non-disclosure related information of is acquired (s331). After acquiring the non-disclosure related information, the medical image format conversion unit 402 writes the disclosure related information in the non-disclosure related information and converts it into reference related information in the medical image format (s332). Then, in the medical image combination unit 401, the reference accompanying information in the medical image format and the image body information decoded by the image body information decoding unit 407 are combined and returned to the medical image (s333), and the transmission / reception interface unit 400 sets the user It is sent to the terminal 1 and disclosed to the user (s334).

As a result, the user terminal refers to the content of only the information that can be disclosed according to the attribute of the user (s335). If the disclosed content transmitted from the database device 5 is not a medical image (s326), the user terminal 1 will refer to the disclosed content as it is (s334).

In the third embodiment, the image body information stored in the image body information storage unit 7 is encrypted, so that the security at the time of storage in the image body information storage unit is improved as compared with the first embodiment. . Also in the case of the first embodiment, if the image storage location information in the disclosure target information stored in the database system 5 is unknown to the user, the image body information is not disclosed, but a malicious user may directly It is possible that the body information storage unit 7 is accessed to steal the image body information. The image body information has low confidentiality,
Since it is one of the information that can identify an individual, it is necessary to secure the safety of the image body information.

Since the encryption key information is very important information, it needs to be stored safely. In the second embodiment,
Although the encryption key information is stored and managed by the key management unit 9, it is operationally troublesome if the disclosure target incidental information that can identify an individual and the encryption key information are managed separately. In the third embodiment, the encryption key information is centrally managed in the highly secure database in the same manner as the personal information, and the disclosure condition is also attached to the encryption key, so that the security at the time of saving the encryption key can be expected to be improved.

In the item of the disclosure target incidental information in the database system, the storage location information of the image body information and the encryption key information obtained by encrypting the image body information are described in the same element so that the encryption key information of the image body information can be obtained. Correspondence can be taken. By disclosing the above elements with disclosure conditions and controlling the disclosure, the storage location of the image body information and the encryption key information are known when disclosure is possible to the user, and conversely when the disclosure is not possible to the user It means that you do not know the storage location or the encryption key information.

Although the present invention has been described in detail based on the third embodiment, the present invention is not limited to the embodiments, and it goes without saying that various modifications can be made without departing from the easiness of the invention.

In each embodiment, the authentication management unit 2
Was attached to the content registration server 3 and the content reference server 4, but it can be installed at a remote place as a so-called certificate authority.

Further, some or all of the processing functions of each unit of the content registration server and the content reference server in each embodiment are configured by a computer program,
It is needless to say that the present invention can be realized by executing the program using a computer, or that the processing procedure shown in each processing flow can be configured by a computer program and the computer can be caused to execute the program. . Then, a program for realizing the processing function on a computer, or
A program for causing a computer to execute the processing procedure, a computer-readable recording medium,
For example, floppy disk (registered trademark), MO, R
The program can be recorded in an OM, a memory card, a CD, a DVD, a removable disk, etc., and saved or provided, and the program can be distributed through a network such as the Internet.

[0072]

The effects obtained by the typical ones of the present invention will be briefly described as follows. (1) If specific accompanying information included in the medical image is encrypted according to the user's authority and the encrypted data set is added to the medical image, the user's authority is changed. When it happens, it is necessary to perform the encryption process again, which is troublesome.Therefore, by adding the disclosure condition according to the user's authority to the disclosure target incidental information included in the medical image, Even if the information is changed, it is possible to flexibly deal with it by only changing the disclosure conditions, not the disclosure target incidental information itself.

(2) The number of items of incidental information included in a medical image is extremely large, and if all items are stored in the database with disclosure conditions, the disclosure incidental information in the database format is stored in the medical image. It takes time and effort to convert to a format, and the response at the time of referring to a medical image may be delayed. Therefore, by adding disclosure conditions only to the disclosure target incidental information, which is highly confidential information that can identify an individual among the incidental information, and saves it in the database, it is possible to prevent personal information from leaking and improve safety while at the same time It can be expected to improve response when referencing images.

(3) The image body information stored in the image body information storage unit has low confidentiality, but has the possibility of identifying an individual. The storage location information of the image body information is stored in the database with the disclosure condition added, but there is a possibility that the image body information storage unit may be directly snooped on. Therefore, encryption processing is performed and the image is stored in the image body information storage unit, so that the safety at the time of storage is improved.

(4) By adding the encryption key information used in the encryption processing of the image body information as one element of the disclosure target incidental information, it is possible to manage it in a highly secure database as well as highly confidential information. As a result, the security at the time of storing the encryption key information is improved, and at the same time, the centralized management of the highly confidential personal information and the encryption key information facilitates the operation.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration example of a medical image reference system according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a detailed configuration of a content registration server that performs medical image registration according to the first embodiment of the present invention.

FIG. 3 is a block diagram showing a detailed configuration of a content reference server that performs medical image reference according to the first embodiment of the present invention.

FIG. 4 is a flowchart showing a flow of processing for carrying out medical image registration according to the first embodiment of the present invention.

FIG. 5 is a flowchart showing a flow of processing for performing medical image reference according to the first embodiment of the present invention.

FIG. 6 is a block diagram showing a configuration example of a medical image registration reference system according to a second embodiment of the present invention.

FIG. 7 is a block diagram showing a detailed configuration of a content registration server that performs medical image registration according to Embodiment 2 of the present invention.

FIG. 8 is a block diagram showing a detailed configuration of a content reference server that performs medical image reference according to Embodiment 2 of the present invention.

FIG. 9 is a flowchart showing a flow of processing for carrying out medical image registration according to the second embodiment of the present invention.

FIG. 10 is a flowchart showing a flow of processing for performing medical image reference according to the second embodiment of the present invention.

FIG. 11 is a block diagram showing a configuration example of a medical image registration reference system according to a third embodiment of the present invention.

FIG. 12 is a block diagram showing a detailed configuration of a content registration server that performs medical image registration according to Embodiment 3 of the present invention.

FIG. 13 is a block diagram showing a detailed configuration of a content reference server that performs medical image reference according to Embodiment 3 of the present invention.

FIG. 14 is a flow chart diagram showing a flow of processing for performing medical image registration according to the third embodiment of the present invention.

FIG. 15 is a flowchart showing a flow of processing for performing medical image reference according to the third embodiment of the present invention.

FIG. 16 is a diagram illustrating an example of accompanying information of a medical image (DICOM file).

FIG. 17 is an example of disclosure accompanying information disclosed by the database system according to the first embodiment of the present invention.

FIG. 18 is an example of a corresponding dictionary of image body information file names and encryption key information in the key management unit 9 according to the second embodiment of the present invention.

FIG. 19 is an example of a corresponding dictionary of image body information folder names storing image body information files which are a series of continuous images in the key management unit 9 according to the second embodiment of the present invention and encryption key information.

FIG. 20 is a diagram showing an example of disclosure accompanying information (an example in which encryption key information is entered for each image body information) disclosed from the database according to the third embodiment of the present invention.

FIG. 21 is an example of disclosure accompanying information disclosed from the database according to the third embodiment of the present invention (an example in which one piece of encryption key information is entered for the entire series of continuous image body information).
Is.

FIG. 22 is a block diagram showing a configuration example of a conventional content registration reference system having a content disclosure control function.

[Explanation of symbols]

1 user terminal 2 Authentication management department 3 Content registration server 4 Content reference server 5 Database device 6 Non-disclosure incidental information storage section 7 Image body information storage section 8 Key generator 9 Key management department

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06T 1/00 200 G06T 1/00 200B (72) Inventor Yuichi Fujino 2-3 Otemachi, Chiyoda-ku, Tokyo No. 1 Nihon Telegraph and Telephone Corporation (72) Inventor Toshiaki Tsuboi 3-3-1 Otemachi, Chiyoda-ku, Tokyo No. 1 Nihon Telegraph and Telephone Corporation (72) Inventor Harumi Kawashima 2-chome, Otemachi, Chiyoda-ku, Tokyo No. 3 No. 1 F-Term in Nippon Telegraph and Telephone Corporation (reference) 5B017 AA07 BA06 BA07 CA16 5B050 AA02 BA10 BA12 BA16 CA07 CA08 DA02 DA10 EA20 FA02 FA13 FA19 5B082 AA13 GA11 HA08

Claims (14)

[Claims] 1. When requesting registration of a medical image, medical image information is separated into image body information and incidental information, the image body information is stored separately, and disclosure target incidental information is separated from the incidental information. Then, other accompanying information is separately stored as non-disclosure related information, and the disclosure condition accompanying information is added with the disclosure condition, the non-disclosure related information storage location information, and the image body information storage location information. At the content registration stage of registering in the database by the user, and at the time of requesting the reference of the medical image, based on the disclosure condition, referenceable disclosure target incidental information according to the authority of the user is read out, and the disclosure target incidental information is set. When the non-disclosure related incidental information or the storage location information of the image body information is not added, the disclosure target incidental information is presented to the user, and the storage location information is added. If you are a medical image registration reference method characterized by having a content reference phase to be presented to the user by combining the disclosure excluded incidental information and the image body information to the disclosure object associated information. 2. The medical image registration reference method according to claim 1, wherein in the content registration step, the image body information is encrypted and stored using an encryption key, and in the content reference step, the encrypted image information is encrypted. A method for referring to a medical image, comprising: decrypting image body information using a decryption key; and combining the decrypted image body information with accompanying information. 3. The medical image registration reference method according to claim 1, wherein, in the content registration step, the image body information is encrypted and stored using an encryption key, and the disclosure target incidental information includes the disclosure condition, The encryption key information is added together with the storage location information and registered in the database. At the content reference step, the encrypted image body information is decrypted using the encryption key information added to the disclosure target incidental information as a decryption key. A method for referring to medical image registration, which comprises converting the decoded image body information into associated information. 4. A medical image registration reference system comprising a user terminal, a content registration server, a content reference server, and a content storage database, wherein the content registration server stores content from the user terminal. Means for receiving a registration request, means for separating medical image information to be registered into image body information and incidental information, and means for separately storing the image body information, and means for separating disclosure object incidental information from the incidental information. A means for separately storing other accompanying information as non-disclosure related information, and adding disclosure conditions, the storage location information of the non-disclosure related information, and the storage location information of the image body information to the disclosure target additional information. And a means for registering in a database, the content reference server receives a content reference request from the user terminal. And means for receiving referenceable disclosure target incidental information according to the authority of the user from the database in response to the content reference request, and the disclosure target incidental information, and the non-disclosure target incidental information. Means for sending the disclosure target incidental information to the user terminal when the storage location information of the image body information is not added; A medical image registration reference system comprising: means for combining non-disclosure related information and the image body information to send to the user terminal. 5. The medical image registration reference system according to claim 4, wherein the content registration server generates a cryptographic key for encrypting the image body information, and the image body information is the encryption key. Means for encrypting and saving using
The content reference server includes means for managing the generated encryption key, and means for decrypting the encrypted image body information using the encryption key as a decryption key, and the decrypted image body information. And a means for combining the image main body information with the accompanying information, the medical image registration reference system. 6. The medical image registration reference system according to claim 4, wherein the content registration server generates an encryption key for encrypting the image body information, and the image body information is encrypted by the encryption key. Means for encrypting and saving using
Means for adding the disclosure condition, the storage location information, and the encryption key information to the disclosure target incidental information and registering it in the database, wherein the content registration server is the encryption added to the disclosure object incidental information. A means for decrypting the encrypted image body information using the key information as a decryption key, and a means for combining the decrypted image body information with accompanying information
A medical image reference system characterized by the following. 7. A content registration server for registering content with disclosure conditions added, means for determining whether or not a registration target is medical image information, and the medical image information as ancillary information and image body information. And a means for separately storing the image body information, a means for separately disclosing the disclosure target incidental information from the incidental information, and separately storing other incidental information as non-disclosure incidental information, and the disclosure object incidental information. A means for converting to a database file format; a means for adding storage location information of non-disclosure related information and storage location information of image body information to the disclosure target incidental information converted to the database file format; A means for adding disclosure conditions to the disclosure target incidental information in which the non-target incidental information and the storage location information of the image main body information are added and registering in the database. Server content registration and having. 8. A storage location of image main body information in disclosure accompanying information transmitted from a database in a content reference server that enables reference to only disclosing information in content according to the authority of a user who accesses the content. Analyzing whether or not the information is written, and when the storage location information of the image body information is written, a means for acquiring the image body information from the storage location information, and the disclosure-related additional information that is not subject to disclosure If the storage location information is written, the means for obtaining the non-disclosure related information based on the storage location information and the disclosure related information transmitted from the database are written in the non-disclosure related information to obtain a medical image format. And means for combining the acquired image body information and the reference incidental information converted into the medical image format. A server for content reference characterized by. 9. A content registration server for registering content with disclosure conditions added, a means for determining whether or not a registration target is medical image information, and the medical image information as ancillary information and image body information. Means for separating, means for generating an encryption key for encrypting the image body information, means for encrypting and storing the image body information using the encryption key, managing the generated encryption key A means for storing, a means for further separating the disclosure target incidental information from the separated incidental information, and a means for separately storing other incidental information as non-disclosure incidental information, and a database file for the separated disclosure object incidental information. A means for converting the format, a storage location information of the non-disclosure related information to the disclosure target additional information converted to the file format of the database, and the image body information And a means for adding storage condition information, and means for adding a disclosure condition to the disclosure target incidental information to which the non-disclosure target incidental information and the storage location information of the image body information are added and registering it in the database. A server for content registration. 10. The storage location of the image main body information in the disclosure accompanying information transmitted from the database in the content reference server that enables only the information that can be disclosed in the content to be referred to according to the authority of the user who accesses the content. A unit for analyzing whether or not the information is written, and when the storage location information of the image body information is written, means for obtaining the encrypted image body information by the storage location information, and the obtained encrypted image body A means for managing a decryption key for decrypting the information, a means for decrypting the encrypted image body information using the decryption key, and a storage location information of the non-disclosure associated information in the disclosure associated information. In the case where it is described, the storage location information is used to acquire the incidental information that is not subject to disclosure, and the incidental information that is transmitted from the database is not subject to disclosure. A server for content reference, comprising: means for writing to the associated information and converting it to a medical image format; and means for combining the decoded image body information and the reference accompanying information converted to the medical image format. . 11. A content registration server for registering a content with disclosure conditions added, a means for determining whether or not the registration target is medical image information, and the medical image information as ancillary information and image body information. Means for separating, means for generating an encryption key for encrypting the separated image body information, means for encrypting and storing the image body information using the encryption key, and the separated accompanying information Means for further separating the disclosure target incidental information and separately storing other incidental information as non-disclosed incidental information, means for converting the separated disclosure object incidental information into a database file format, and the file format In addition to the disclosure target incidental information, the storage location information of the non-disclosure subject incidental information, the storage location information of the encrypted image body information, and the encryption key information. And a means for adding a disclosure condition to the disclosure target incidental information to which the non-disclosure related incidental information, the storage location information of the encrypted image body information and the encryption key information are added, and registering in the database. A server for content registration characterized by. 12. In a content reference server that enables reference only to information that can be disclosed in the content according to the authority of the user who accesses the content, the disclosure accompanying information transmitted from the database includes encrypted image body information. Analyzing whether or not the storage location information is written, and when the storage location information of the encrypted image body information is written, means for obtaining the encrypted image body information from the storage location information, and the above-mentioned obtained Means for extracting a decryption key for decrypting the encrypted image body information from the non-disclosure accompanying information, means for decrypting the encrypted image body information using the decryption key, and the disclosure accompanying information. When the storage location information of the non-disclosure related information is described, a means for acquiring the non-disclosure related information based on the storage location information and a transmission from the database. Means for writing the disclosed disclosure incidental information in the non-disclosure incidental information and converting it to a medical image format, and means for combining the decoded image body information and the reference incidental information converted to the medical image format. A server for content reference, which comprises: 13. A program for causing a computer to execute the functions of the content registration server and / or the content reference server according to claim 7. 14. A recording medium recording a program for causing a computer to execute the functions of the content registration server and / or the content reference server according to claim 7.