JP2003308386A - Medical information transmitting device, medical information receiving device, medical information transmitting method and medical information receiving method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a medical information transmitting device, medical information receiving device, medical information transmitting method and medical information receiving method capable of preventing the information leak to a third party when transmitting and receiving medical information by use of a communication network. <P>SOLUTION: A medical institute terminal 11 which acquires medical insurance assured card information of a patient 2 from an IC card 21 performs the determination of a communication identifier used in transmission and receipt of medical information with an assurer terminal 41. The medical institute terminal 11 claims the medical fee for the patient 2 by transmitting a computized medical receipt every fixed period to the assurer terminal 41. At this time, the medical institute terminal 11 substitutes the identification information for specifying an individual included in the medical receipt to the above communication identifier followed by transmitting to the communication network 3. The assurer terminal 41 receives the medical receipt transmitted from the medical institute 1a, restores the identification information of the patient 2 substituted by the communication identifier, and pays the medical fees to the medical institute 1a that is the claim. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a medical information transmitter and a medical information receiver for transmitting and receiving medical information using a communication network, a medical information transmitter and a medical information receiver.

[0002]

2. Description of the Related Art Conventionally, medical treatment fees for insurance medical treatment performed in medical institutions such as hospitals and clinics, and drug dispensing compensation for insurance medical treatment dispensed to patients by a pharmacy and delivered to patients, will be paid at a later date. The pharmacy charges the insurer, such as the health insurance association to which the patient belongs, and the insurer pays. Therefore, each medical institution or each pharmacy
Submit a medical fee statement or a pharmacy fee statement called a receipt that records medical information such as the name of injury or illness for each patient and medical information for each month and the drug dispensed to each insurer in a paper or electronic medium, Claim medical fees or dispensing fees. The receipt includes, for example, a portion in which personal information and issuer information of the receipt are described, a specific medical content portion, and a bill portion for the medical content. on the other hand,
Each insurer who receives the receipt inspects the medical information written in each receipt, determines the settlement amount, and pays the medical fee or the dispensing amount of the amount determined for each medical institution or each pharmacy. Make a payment.

In the above method, the number of receipts submitted by each medical institution or each pharmacy and gathered by each insurer is classified for each patient or each medical institution or pharmacy.
There will be a large number for each insurer. Therefore, if the receipt is submitted in a paper medium or an electronic medium, there is a problem that it takes a great deal of time to transport each medical institution or each pharmacy to each insurer, or to store and manage each insurer. Therefore, in order to improve the efficiency of business, the receipt submitted by each medical institution or each pharmacy to each insurer by paper or electronic medium is transferred to a computer network including the Internet or a communication network (transmission network) such as a telephone line. It is possible to send and receive as communication data depending on the medium.

As described above, a system for transmitting and receiving medical information such as a receipt as communication data through a communication network such as a computer network or a telephone line is disclosed in, for example, Japanese Patent Laid-Open No. 11-45304 or 2000-29360.
No. 3, as well as those described in JP 2001-306691 A. In these systems, a patient is identified by an ID number uniquely assigned to the patient, and when transmitting and receiving medical information about the patient on a communication network,
By encrypting medical information using an encryption means such as a public key or a private key, leakage of information on a communication network, impersonation of an individual, or falsification of information is prevented.

[0005]

However, in transmitting and receiving the medical information encrypted as described above, although the content of the medical information cannot be easily obtained by the encryption, the code is once decrypted. If it does, there is a problem that the medical information associated with the individual patient is leaked to the third party from the communication network. In particular, the receipt contains not only general personal information such as the individual address, name, and age of the patient, but also high-level personal information including medical information such as the patient's personal injury / illness name, medical treatment contents, and drug prescription contents. Therefore, if this is leaked from the communication network to a third party, the privacy of the patient is seriously infringed, which is a very problematic problem.

The present invention has been made in view of the above problems, and when medical information is transmitted and received using a communication network,
An object of the present invention is to provide a medical information transmitting device and a medical information receiving device, and a medical information transmitting method and a medical information receiving method, which can prevent leakage of medical information to a third party.

[0007]

In order to solve the above problems, a medical information transmitting apparatus according to the invention of claim 1 transmits medical information for delivering medical information to a predetermined recipient via a communication network. In the device, the identification information for identifying the patient included in the medical information is replaced with a communication identifier that can be uniquely associated with the identification information for a predetermined period, and the medical information is sent to the recipient. Medical information transmission means for transmitting (for example, the medical information transmission processing unit 2 of the embodiment)
3) is provided. The medical information transmitting apparatus having the above configuration is for communication in which, when medical information including identification information for identifying a patient is input, the identification information can be uniquely associated with the identification information for a predetermined period. The medical information replaced with the identifier can be generated and sent to the communication network.

A medical information transmitting apparatus according to a second aspect of the present invention is the medical information transmitting apparatus according to the first aspect, which transmits identification information for identifying a patient to the recipient (for example, implementation). And an identification information transmission processing unit 13) for receiving a communication identifier that is generated by the recipient side and that can be uniquely associated with the identification information for a predetermined period from the recipient. Means (for example, communication identifier reception processing unit 1 of the embodiment)
8), and the communication identifier management means for storing the received communication identifier in the communication identifier storage means (for example, the communication identifier storage unit 20 of the embodiment) in association with the identification information transmitted to the recipient. (For example, the communication identifier management unit 19 of the embodiment), the identification information is extracted from the medical information, the communication identifier corresponding to the identification information,
A communication identifier selecting unit that selects from the stored communication identifiers (for example, the communication identifier selecting processing unit 22 of the embodiment), and the medical information transmitting unit includes the identification information included in the medical information. Is replaced with the selected communication identifier, and the medical information is transmitted to the recipient. When the medical information including the identification information for identifying the patient is input, the medical information transmitting apparatus having the above configuration is replaced with the medical information in which the identification information is replaced with the communication identifier generated on the receiver side. Generate information.
Then, the medical information, which cannot easily identify the individual patient on the communication network, can be transmitted to the recipient, and the recipient can receive the medical information by using the communication identifier generated by the recipient himself.

The medical information transmitting apparatus according to the invention of claim 3 is the medical information transmitting apparatus according to claim 1, wherein a communication identifier that can be uniquely associated with identification information for identifying a patient for a predetermined period is provided. Communication identifier generation means to be generated (for example, the communication identifier generation processing unit 63 of the embodiment), and the generated communication identifier are associated with the corresponding identification information, and the communication identifier storage means (for example, the embodiment). Communication identifier management unit (for example, the communication identifier management unit 19 of the embodiment) stored in the communication identifier storage unit 20) and the generated communication identifier to the recipient together with the corresponding identification information. A communication identifier transmitting means for transmitting (for example, the communication identifier transmission processing unit 65 of the embodiment) and the identification information extracted from the medical information,
Communication identifier selecting means for selecting the communication identifier corresponding to the identification information from the stored communication identifiers (for example, the communication identifier selection processing unit 22 of the embodiment).
The medical information transmitting means replaces the identification information included in the medical information with the selected communication identifier and transmits the medical information to the recipient. When the medical information including the identification information for identifying the patient is input, the medical information transmission apparatus having the above configuration is a medical information in which the identification information is replaced with the communication identifier generated on the sender side. Generate information. Then, the medical information, which cannot easily identify the individual patient on the communication network, can be transmitted to the recipient, and the recipient can receive the medical information by using the communication identifier previously sent by the sender.

A medical information transmitting apparatus according to a fourth aspect of the present invention is the medical information transmitting apparatus according to any one of the first to third aspects, wherein the identification information includes at least information regarding the name of the patient. Characterize. The medical information transmitting apparatus having the above configuration can transmit the medical information from which the information regarding the name of the patient has been deleted to the transmission network.

A medical information transmitting apparatus according to a fifth aspect of the present invention is the medical information transmitting apparatus according to any one of the first to third aspects, wherein the identification information is uniquely given to at least a patient. It is characterized in that it includes information about the insured person identification number. The medical information transmitting apparatus having the above configuration can transmit the medical information from which the information regarding the medical insurance insured person identification number uniquely given to the patient is deleted onto the transmission network.

A medical information transmitting apparatus according to a sixth aspect of the present invention is the medical information transmitting apparatus according to any one of the first to fifth aspects, wherein the communication identifier is randomly generated. To do. The medical information transmitting apparatus having the above configuration transmits the medical information managed by the communication identifier generated so that the correspondence with the identification information for identifying the patient cannot be easily estimated to the communication network. be able to.

A medical information receiving apparatus according to a seventh aspect of the present invention is a medical information receiving apparatus for receiving medical information from a predetermined sender via a communication network, and is included in the received medical information. , A medical information receiving unit that replaces a communication identifier that can be uniquely associated with identification information for identifying a patient for a predetermined period with the identification information corresponding to the communication identifier and outputs the medical information ( For example, the medical information reception processing unit 54) of the embodiment is provided. The medical information receiving device having the above configuration, by replacing the communication identifier of the medical information received from the sender with the identification information corresponding to the communication identifier, before transmitting and receiving via the communication network The original medical information can be restored.

A medical information receiving apparatus according to an eighth aspect of the present invention is the medical information receiving apparatus according to the seventh aspect, in which identification information receiving means for receiving identification information for identifying a patient from the sender (for example, implementation) Identification information reception processing unit 45) and a communication identifier generation unit that generates a communication identifier that can be uniquely associated with the received identification information for a predetermined period (for example, the communication identifier generation processing unit of the embodiment). 49) and the corresponding identification information associated with the generated communication identifier in the identification information storage unit (for example, the identification information storage unit 52 in the embodiment), the identification information management unit (in the embodiment, for example). Identification information management unit 5
1), a communication identifier transmitting unit that transmits the generated communication identifier to the sender (for example, the identification information transmission processing unit 50 of the embodiment), and extracts the communication identifier from the received medical information. And the identification information selecting unit (for example, the identification information selection processing unit 53 of the embodiment) that selects the identification information corresponding to the communication identifier from the stored identification information, and the medical information receiving unit. Replaces the communication identifier included in the received medical information with the selected identification information, and outputs the medical information. The medical information receiving apparatus having the above configuration causes the sender to send medical information in which the identification information for identifying the patient is replaced with the communication identifier generated on the recipient side. Then, by replacing the communication identifier of the medical information received from the sender with the identification information previously acquired from the sender, the original medical information before transmission / reception via the communication network can be restored.

A medical information receiving apparatus according to a ninth aspect of the present invention is the medical information receiving apparatus according to the seventh aspect, wherein the medical information receiving apparatus is generated on the sender side and has identification information for identifying a patient and a predetermined period. A communication identifier receiving unit (for example, the communication identifier reception processing unit 72 of the embodiment) that receives a communication identifier that can be uniquely associated with the corresponding identification information from the sender, and the received communication identifier. In association with the corresponding identification information, identification information storage means (for example, the identification information storage unit 52 of the embodiment)
And an identification information management unit (for example, the identification information management unit 73 of the embodiment) stored in, and the communication information is extracted from the received medical information, and the identification information corresponding to the communication identifier is stored. An identification information selecting unit (for example, an identification information selection processing unit of the embodiment) for selecting from the identification information, and the medical information receiving unit selects the communication identifier included in the received medical information. Further, the medical information is output while being replaced with the identification information. The medical information receiving apparatus having the above configuration causes the sender to transmit medical information in which the identification information for identifying the patient is replaced with the communication identifier generated on the sender side. Then, by replacing the communication identifier of the medical information received from the sender with the identification information previously acquired from the sender, the original medical information before transmission / reception via the communication network can be restored.

A medical information receiving apparatus according to the invention of claim 10 is a medical information receiving apparatus for receiving medical information from a predetermined sender via a communication network, and is provided with identification information for identifying a patient. Identification information receiving means (for example, the identification information reception processing unit 45 of the embodiment) received from the sender,
Communication identifier generation means for generating a communication identifier that can be uniquely associated with the received identification information only for a predetermined period (for example, the communication identifier generation processing unit 4 of the embodiment).
9), a communication identifier transmitting unit that transmits the generated communication identifier to the sender (for example, the communication identifier transmission processing unit 50 of the embodiment), and the received medical information, the generated medical information It is characterized by comprising a communication identifier and a medical information output means (for example, a medical information output processing unit of the first embodiment: not shown) that outputs together with the identification information corresponding to the communication identifier. The medical information receiving apparatus having the above configuration causes the sender to send medical information in which the identification information for identifying the patient is replaced with the communication identifier generated on the recipient side. Then, by receiving the medical information received from the sender together with the identification information previously acquired from the sender and the communication identifier generated from this identification information, the information is received from the sender outside the medical information receiving device. It is possible to replace the communication identifier of the medical information with the identification information previously acquired from the sender to restore the original medical information before transmission / reception via the communication network.

A medical information receiving apparatus according to the invention of claim 11 is a medical information receiving apparatus for receiving medical information from a predetermined sender via a communication network, and is generated by the sender side. , A communication identifier receiving unit that receives a communication identifier that can be uniquely associated with identification information for identifying a patient for a predetermined period together with the corresponding identification information from the sender (for example, the communication identifier of the embodiment). A reception processing unit 72), and medical information output means for outputting the received medical information together with the received communication identifier and the identification information corresponding to the communication identifier (for example, the medical information of the second embodiment). And an output processing unit (not shown). The medical information receiving apparatus having the above configuration causes the sender to transmit medical information in which the identification information for identifying the patient is replaced with the communication identifier generated on the sender side. Then, by outputting the medical information received from the sender together with the identification information previously acquired from the sender and the communication identifier, the communication identifier of the medical information received from the sender is external to the medical information receiving device. Can be replaced with the identification information previously acquired from the sender to restore the original medical information before transmission / reception via the communication network.

A medical information receiving apparatus according to a twelfth aspect of the present invention is the medical information receiving apparatus according to any one of the seventh to eleventh aspects, wherein the identification information includes at least information regarding the name of the patient. Characterize. The medical information receiving apparatus having the above configuration can receive the medical information from which the information regarding the patient's name has been deleted from the communication network and restore the original medical information.

A medical information receiving apparatus according to a thirteenth aspect of the present invention is the medical information receiving apparatus according to any one of the seventh to eleventh aspects, wherein the identification information is uniquely given to at least a patient. It is characterized in that it includes information about the insured person identification number. The medical information receiving device having the above configuration is capable of receiving medical information from which the information related to the medical insurance insured identification number uniquely assigned to the patient is deleted from the communication network and restoring the original medical information. You can

A medical information receiving apparatus according to a fourteenth aspect of the present invention is characterized in that, in the medical information receiving apparatus according to any one of the seventh to thirteenth aspects, the communication identifier is randomly generated. To do. The medical information receiving device having the above configuration receives from the communication network the medical information managed by the communication identifier generated so that the correspondence with the identification information for identifying the patient cannot be easily estimated. The original medical information can be restored.

A medical information transmitting method according to a fifteenth aspect of the present invention is a medical information transmitting method for delivering medical information to a predetermined recipient via a communication network, wherein a patient included in the medical information is specified. The identification information for doing so is replaced with a communication identifier that can be uniquely associated with the identification information for a predetermined period, and the medical information is transmitted to the recipient.

A medical information receiving method according to a sixteenth aspect of the present invention is a medical information receiving method for receiving medical information from a predetermined sender via a communication network, and is included in the received medical information. , Replacing the communication identifier that can be uniquely associated with the identification information for identifying the patient for a predetermined period with the identification information corresponding to the communication identifier, and outputting the medical information. .

The medical information receiving method according to the invention of claim 17 is a medical information receiving method for receiving medical information from a predetermined sender via a communication network, wherein identification information for identifying a patient is provided. Received from the sender, generate a communication identifier that can be uniquely associated with the received identification information only for a predetermined period, send the generated communication identifier to the sender, and receive the received medical information. , The generated communication identifier and the identification information corresponding to the communication identifier are output together.

[0024] A medical information receiving method according to the invention of claim 18 is a medical information receiving method for receiving medical information from a predetermined sender via a communication network, and is generated by the sender. , A communication identifier that can be uniquely associated with identification information for identifying a patient for a predetermined period of time is received from the sender together with the corresponding identification information, and the received medical information is used for the received communication information. It is characterized in that the identifier and the identification information corresponding to the communication identifier are output together.

[0025]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. (First Embodiment) FIG. 1 is a schematic diagram showing an outline of a medical information transmitting / receiving system according to a first embodiment of the present invention. First, the outline of the medical information transmission / reception system according to the present embodiment will be described with reference to FIG.
It is a medical institution such as hospitals and clinics that provide insurance medical treatment. The pharmacy 1b is a pharmacy that dispenses a drug prescribed to the patient 2 in the medical institution 1a. In addition, the insurer 4 pays the medical treatment fee for the medical treatment performed to the patient 2 and the dispensing fee of the medicine for the insurance medical treatment dispensed at the pharmacy to the medical institution 1a or the pharmacy 1b. Insurers such as unions.

As shown in FIG. 1, the medical information transmitting apparatus and the medical information receiving apparatus used in the medical information transmitting / receiving system of the present embodiment, as shown in FIG. Dispensing receipt (dispensing fee statement) for connecting to the insurer 4 and transmitting a medical receipt (medical fee statement) for requesting medical fee at the medical institution 1a or requesting dispensing fee at the pharmacy 1b.
Is used to send to the insurer 4,
Medical institution side terminal 1 provided in medical institution 1a or pharmacy 1b
1 or in the insurer side terminal 41 provided on the insurer 4 side. Note that there are a plurality of medical institutions 1a, pharmacies 1b, and insurers 4.

In the medical institution side terminal 11, the patient 2
If you have an IC card 31 that has a medical insurance insured card function and a consultation ticket function, and you want to receive medical treatment at the medical institution 1a or request dispensing at the pharmacy 1b, the IC
Medical information entered by the medical institution 1a and pharmacy 1b while obtaining medical insurance insured identification information and medical examination ticket information from the card 31 and confirming the insured qualification of the patient 2 to the insurer side terminal 41 Information about the receipt and the dispensing receipt is stored as electronic data. On the other hand, the insurer side terminal 41 transmits the insured person information to the medical institution side terminal 11 or from the medical institution side terminal 11 in response to the confirmation request of the insured qualification received from the medical institution side terminal 11. The medical receipt and the dispensing receipt which are converted into electronic data are received, and the invoiced receipt is inspected to confirm whether the receipt is defective or not, and the name identification is performed to calculate the medical expenses for each patient 2. The medical institution side terminal 11 and the insurer side terminal 41
Are connected to the communication network 3 by the number of medical institutions 1a, pharmacies 1b, and insurers 4 who use the medical information transmission / reception system of this embodiment.

Further, the IC card 31 has personal information such as the address, name and age of the patient 2 as medical insurance insured identification information, an insurer number, and further an insured identification symbol / number or medical information. An insurance insured identification number is stored, and the examination ticket number for each medical institution is stored as the examination ticket information.
However, dependents etc. may not be uniquely identified by the conventional medical insurance insured identification number. Therefore, a new IC
When the card 31 is used as a medical insurance insured identification card, the individual is uniquely identified as the medical insurance insured identification information, such as identification information that can uniquely identify the people currently under consideration. The identification information for this will be introduced as the ID number of the medical insurance person insured for all patients including dependents.

Further, the IC card 31 includes an IC including a processor capable of making a simple decision only within the card in order to store the medical insurance insured identification information and the examination ticket information.
Is installed. Further, the reading / writing method of the stored contents is not limited to the non-contact and contact reading / writing methods.
Holds stored medical insurance card identification information and consultation ticket information, such as magnetic cards and mobile phones with built-in IC chips.
Any recording medium may be used as long as it can be freely read and written from the outside.

The communication network 3 is a communication network for connecting the above-mentioned medical institution side terminal 11 and insurer side terminal 41, for example, WAP (Wireless Application Protocol).
) Wireless communication, the Internet using WWW (World Wide Web), or PSTN (Public Swi)
tch Telephone Network) and ISDN (Integrated Serv)
Information is sent and received by wire communication via public network such as ices Digital Network).

Next, the flow of processing in the present embodiment will be briefly described with reference to FIG.
When carrying the medical examination of the medical institution 1a with the card 31 ((1) medical examination), for example, the staff member of the medical institution 1a provides the medical insurance insured identification information of the patient 2 stored in the IC card 31 to the medical institution side. Since it is read by the terminal 11, the medical institution side terminal 11 confirms the insured qualification of the patient 2 with the insurer side terminal 41 via the communication network 3, and at the same time, the medical institution side terminal 11 and the insurance The communication identifier used when transmitting and receiving medical information to and from the person-side terminal 41 is determined ((2) Insured qualification confirmation / communication identifier determination).

Here, the communication identifier is, for example, the name of the patient 2 or the patient 2 when the medical information is sent to the communication network 3.
Identification information that can uniquely identify the individual patient 2 included in the medical information, such as a medical insurance insured identification number uniquely assigned to An identifier that is replaced with the identification information included in the medical information so that the identification information is not transmitted to the communication network 3. Further, it is desirable that the correspondence with the identification information is randomly generated so that the correspondence with the communication identifier cannot be easily deciphered. In addition, even if the correspondence between the communication identifier and the identification information is once decoded,
In order to minimize information leakage damage, it is desirable that the communication identifier is generated so that it can be uniquely associated with the identification information for a predetermined period. The details of the transmission and reception of information using the communication identifier will be described later.

The medical institution side terminal 11 of the medical institution 1a
Stores electronic information related to the medical care receipt input by the staff of the medical institution 1a as electronic data and transmits the electronic data to the insurer side terminal 41 via the communication network 3 at regular intervals,
Claim the medical fee for the patient 2 ((3) Send medical department receipt). At this time, the medical institution side terminal 11 replaces the identification information for identifying an individual included in the medical department receipt with the above-mentioned communication identifier, and then transmits the communication information to the communication network 3.

Similarly, in the pharmacy 1b, the patient 2
If the pharmacy 1b possesses the C card 31 and requests the pharmacy 1b to dispense the medicine instructed by the medical institution 1a ((4) Dispensing request), for example, the staff of the pharmacy 1b stores the medical insurance for the patient 2 stored in the IC card 31. Since the insured person identification information is read by the medical institution side terminal 11, the medical institution side terminal 11 confirms the insured qualification of the patient 2 with the insurer side terminal 41 via the communication network 3. At the same time, the communication identifier used when transmitting and receiving medical information between the medical institution side terminal 11 and the insurer side terminal 41 is determined ((5) Insured qualification confirmation / communication identifier determination). . Then, the medical institution side terminal 11 of the pharmacy 1b also stores, as electronic data, information relating to the dispensing receipt input by the staff of the pharmacy 1b, and transmits this information to the insurer side terminal 41 at regular intervals to dispense the patient 2. Claim compensation ((6) Dispensing receipt transmission). At this time, the medical institution side terminal 11 transmits the communication information to the communication network 3 after replacing the identification information for identifying the individual included in the dispensing receipt with the above-mentioned communication identifier, as in the medical reception.

On the other hand, at the insurer side terminal 41, the medical institution 1
The medical receipt sent from a and the dispensing receipt sent from the pharmacy 1b are received, the identification information of the patient 2 replaced with the communication identifier is restored, and the receipt is inspected to check whether the receipt is defective. The medical expenses for each patient 2 are calculated by checking the presence or absence and performing name identification ((7)
Inspection, name identification). The name identification may be performed using the name of the patient 2, or may be performed using identification information such as a medical insurance insured person identification number uniquely assigned to the patient 2. Further, in the insurer side terminal 41, if the received medical department reception or dispensing reception is inspected and the contents are found to be deficient, the medical reception or dispensing reception received as a return is returned to the medical care department that once transmitted the reception. Return to the institution 1a or the pharmacy 1b ((8), (9) return). If no deficiency is found in the received medical or pharmacy receipt, the medical fee or the pharmacy fee is paid to the medical institution 1a or the pharmacy 1b as requested.

Next, the medical information transmitting apparatus and the medical information receiving apparatus according to this embodiment will be specifically described with reference to the drawings. In addition, as shown in ((8) and (9) Return in FIG. 1), the insurer side terminal 41 to the medical institution side terminal 1
In the case of transmitting the receipt to No. 1, the arrangement of the medical information transmitting apparatus and the medical information receiving apparatus may be arranged opposite to the arrangement when transmitting the receipt from the medical institution side terminal 11 to the insurer side terminal 41. Therefore, in the present embodiment, as an example, the configuration in the case of transmitting the receipt from the medical institution side terminal 11 to the insurer side terminal 41 will be mainly described.

First, the medical institution side terminal 11 including the medical information transmitting apparatus will be described. FIG. 2 is a block diagram showing the configuration of the medical institution side terminal 11 including the medical information transmitting apparatus according to the present embodiment.
Is reading medical care insured person ID information from the IC card 31 presented when the doctor is going to receive medical treatment from the medical institution 1a or when the prescribed drug is dispensed at the pharmacy 1b, and medical information about the patient 2 In order to generate an IC card read / write unit 12 for writing and a communication identifier for transmitting medical information of the patient 2 to the insurer side terminal 41 on the insurer side terminal 41 side, the name of the patient 2 is written. And an identification information transmission processing unit 13 that transmits identification information for identifying the patient 2, such as a medical insurance insured identification number, to the insurer side terminal 41.

The medical institution side terminal 11 is provided with a transmission / reception interface 14 for encrypting and transmitting all information when transmitting / receiving information to / from the insurer side terminal 41. Insurer terminal 4
1. When transmitting information to 1, the medical institution 1 that creates a confidential information using the public key of the insurer 4 who receives the information and transmits the information
Confidentiality to attach a signature using the private key of a or pharmacy 1b
When receiving information from the signature message creation processing unit 15 and the insurer side terminal 41, the signature confirmation is performed using the public key of the insurer 4 transmitting the information, and the medical institution 1 receiving the information.
It includes a confidential / signature message opening processing unit 16 that performs parent expansion and sealing using the secret key of a or the pharmacy 1b. Therefore, the identification information transmitted by the above-mentioned identification information transmission processing unit 13 is also encrypted and transmitted to the insurer side terminal 41. It is generally known that public and private keys are managed and distributed by a public third party organization.

Further, the medical institution side terminal 11 transmits the identification information for identifying the patient 2, and thus the insured person such as the insurance medical treatment qualification information received from the insurer side terminal 41 via the transmission / reception interface 14. Based on the information, the insured qualification confirmation processing unit 17 for confirming the qualification of the patient 2 as the insured, and the communication generated by the insurer side terminal 41 by transmitting the identification information for specifying the patient 2 From the insurer side terminal 41 to the transmission / reception interface 14
It is provided with a communication identifier reception processing unit 18 that receives a medical examination via the medical examination, and a communication identifier management unit 19 that stores the received communication identifier in association with the identification information of the corresponding patient 2. The communication identifier received and the identification information corresponding to the communication identifier are stored in the communication identifier storage unit 20.

Further, the medical institution side terminal 11 stores the computerized receipt storage unit 21 which stores the computerized receipt inputted from the outside for transmission to the insurer side terminal 41.
And the patient 2 included in the electronic receipt to be transmitted in order to transmit the electronic receipt to the insurer-side terminal 41.
Identifying information for identifying the communication identifier, and selecting a communication identifier corresponding to the identification information from the communication identifiers stored in the communication identifier storage unit 20, The identification information for identifying the patient 2 included in the receipt is replaced with the selected communication identifier, and the electronic receipt is transferred to the transmission / reception interface 1
4 and the medical information transmission processing unit 23 for transmitting to the insurer side terminal 41 via the communication terminal 4.

In this embodiment, in the medical institution side terminal 11, the identification information transmission processing unit 13, the communication identifier reception processing unit 18, the communication identifier management unit 19, and the communication identifier storage unit 20 are provided. , Communication identifier selection processing unit 22
And the medical information transmission processing unit 23 constitute a medical information transmission device.

The communication identifier storage unit 20 and the computerized receipt storage unit 21 are a nonvolatile memory such as a hard disk device, a magneto-optical disk device, a flash memory, or a volatile memory such as a RAM (Random Access Memory). Memory, or a computer-readable / writable recording medium using a combination thereof. Further, in particular, if the computerized receipt storage unit 21 updates the medium itself when the stored contents are updated, C
A read-only recording medium such as a D-ROM can be used.

Further, the IC card read / write unit 12, the identification information transmission processing unit 13, the transmission / reception interface 14,
Confidentiality / signature message creation processing unit 15, confidentiality / signature message opening processing unit 16, and insured qualification confirmation processing unit 1
7, the communication identifier reception processing unit 18, the communication identifier management unit 19, the communication identifier selection processing unit 22, and the medical information transmission processing unit 23 are configured by a memory and a CPU (central processing unit), and The function may be realized by loading a program for realizing the function of each unit in the memory and executing the program, or may be realized by dedicated hardware.

Next, the insurer side terminal 41 including the medical information receiving device will be described. FIG. 3 is a block diagram showing the configuration of the insurer side terminal 41 including the medical information receiving apparatus according to the present embodiment, and when the insurer side terminal 41 transmits / receives information to / from the medical institution side terminal 11, A transmission / reception interface 42 for encrypting and transmitting / receiving information of the medical institution 1 is provided, and the transmission / reception interface 42 receives the information when transmitting the information to the medical institution side terminal 11.
a or the pharmacy 1b public key is used to create a confidential information, and the confidential key of the insurer 4 who transmits the information is used to sign and attach the confidential / signature message creation processing unit 43, and the medical institution side terminal 1
1. A medical institution that sends information when receiving information from 1.
It includes a confidentiality / signature message opening processing unit 44 that performs signature confirmation using the public key of a or the pharmacy 1b and performs parent expansion using the private key of the insurer 4 who receives the information.

Further, in the insurer side terminal 41, the medical institution side terminal 11 provides insurance in order to generate a communication identifier on the insurer side terminal 41 side and for the medical institution side terminal 11 to acquire insured person information. An identification information reception processing unit 45 that receives identification information for identifying the patient 2, such as the name of the patient 2 and the medical insurance insured identification number, which are transmitted to the person-side terminal 41, via the transmission / reception interface 42, Based on the identification information received, the insured information such as the insurance medical treatment qualification information of the patient 2
The insured person information reference processing unit 46 is acquired from the stored insured person information. The insured information such as the insurance medical treatment qualification information of all the insureds managed by the insurer 4 is assumed to be stored in the insured information storage unit 47.

The insurer side terminal 41 transmits the insured person information of the patient 2 acquired by the insured person information reference processing section 46 to the medical institution side terminal 11 via the transmission / reception interface 42. When the insured person information of the patient 2 is acquired by the information transmission processing section 48 and the insured person information reference processing section 46, the identification information of the patient 2 included in the medical information transmitted and received via the communication network 3 is replaced. In order to do so, a communication identifier that can be uniquely associated with the identification information only for a predetermined period is generated so that the correspondence between the identification information and the communication identifier is random.
9, the communication identifier transmission processing unit 50 that transmits the generated communication identifier to the medical institution side terminal 11 via the transmission / reception interface 42, and stores the corresponding identification information in association with the generated communication identifier. Identification information management unit 51
It has and. The generated communication identifier and the identification information corresponding to the communication identifier are stored in the identification information storage unit 52.
Memorized in.

Further, the insurer side terminal 41 extracts the communication identifier from the computerized receipt received from the medical institution side terminal 11 via the transmission / reception interface 42, and identifies the identification information corresponding to the communication identifier. The identification information selection processing unit 53 that selects from the identification information stored in the information storage unit 52, and the communication identifier included in the computerized receipt are replaced with the selected identification information, and the computerized receipt is output. For the medical information reception processing unit 54 and the electronic receipt output by the medical information reception processing unit 54, a confirmation is made as to whether or not there is a deficiency in the receipt, and a medical fee or dispensing fee is paid as requested, and a medical fee or dispensing fee is paid. And a receipt inspection processing unit 55 for classifying the payment decision of the above into a pending receipt.

The insurer-side terminal 41 also stores a payment decision receipt storage unit 56 for storing a receipt for paying medical fees or dispensing fees as requested, and a receipt for which a decision to pay medical fees or dispensing fees is withheld. The pending receipt storage unit 57 and the receipt that pays the medical treatment fee or the dispensing fee as requested are compared with each other to calculate the total medical expenses of the two patients for a predetermined period.
An aggregate / settlement processing unit 58 for calculating settlement information such as the number of receipts for which medical fees or dispensing fees are paid as requested, the number of receipts for which payment of medical fees or dispensing fees has been suspended, and the amount of payment, and a medical institution side terminal The identification information storage unit 5 that stores the correspondence between the communication identifier and the identification information until the billing period of the medical treatment fee or the dispensing fee of the insurance medical treatment expires, even after the reception and transmission of the receipt with the terminal 11 is completed.
9 and 9. Here, the processing of storing the correspondence between the communication identifier and the identification information is performed by the identification information management unit 51.

In the present embodiment, the insurer side terminal 4
1, the identification information reception processing unit 45, the communication identifier generation processing unit 49, the communication identifier transmission processing unit 50, the identification information management unit 51, the identification information storage unit 52, and the identification information selection processing unit 53. The medical information receiving processing unit 54 constitutes a medical information receiving device.

Further, the insured person information storage unit 47, the identification information storage unit 52, the payment decision receipt storage unit 56, the holding receipt storage unit 57, and the identification information storage unit 59 are the hard disk device and the magneto-optical disk device. , Non-volatile memory such as flash memory, RAM (Random Access Mem
mory) such as a volatile memory, or a computer readable and writable recording medium using a combination thereof. Further, particularly for the insured person information storage unit 47, if the medium itself is updated when the stored contents are updated, a read-only recording medium such as a CD-ROM can be used.

Further, the transmission / reception interface 42, the confidential / signature message creation processing section 43, the confidential / signature message opening processing section 44, the identification information reception processing section 45, the insured person information reference processing section 46, and the insured. Personal information transmission processing unit 48, communication identifier generation processing unit 49, communication identifier transmission processing unit 50, identification information management unit 51, identification information selection processing unit 53, medical information reception processing unit 54, and reception The inspection processing unit 55 and the totalization / settlement processing unit 58 are composed of a memory and a CPU (central processing unit), and load the programs for realizing the functions of the above-mentioned respective units into the memory to execute the functions. It may be realized, or may be realized by dedicated hardware.

Next, regarding the operation and processing procedure of the medical information transmitting / receiving system of the present embodiment, the communication identifier assigning process will be described first with reference to the drawings. FIG. 4 is a flowchart showing a communication identifier assigning process of the medical information transmitting / receiving system of the present embodiment. In FIG. 4, for example, the staff member of the medical institution 1a or the pharmacy 1b provides the medical insured person identification information of the patient 2 stored in the IC card 31 to the medical institution terminal 1
When read by 1, the medical institution side terminal 11 displays the identification information for identifying the patient 2 such as the name of the patient 2 and the medical insurance insured identification number, and the information of the insurer 4 to which the patient 2 belongs. It is acquired (step S1). Next, the communication identifier stored in the communication identifier storage unit 20 is searched for the communication identifier corresponding to the identification information (step S2). Then, it is determined whether or not the communication identifier corresponding to the identification information is stored in the communication identifier storage unit 20 (step S3), and when the communication identifier corresponding to the identification information is stored ( (YES in step S3), the communication identifier assigning process of the medical institution side terminal 11 is ended without doing anything.

On the other hand, if the communication identifier corresponding to the identification information is not stored in the communication identifier storage unit 20 in step S3 (NO in step S3), the communication identifier is assigned to the identification information. It has been read from the IC card 31 because the valid period of the communication identifier has expired or the patient 2 corresponding to the identification information is using the medical institution 1a or the pharmacy 1b for the first time since the predetermined time has passed. In order to transmit the identification information of the patient 2 to the insurer side terminal 41, the confidentiality / signature message creation processing unit 15 creates a confidentiality of the identification information using the public key of the insurer 4 to which the patient 2 belongs. , Attaches a signature using his / her private key (step S4). Then, the transmission / reception interface 14 transmits the confidential / signature message of the created identification information to the insurer side terminal 41 (step S5).

Further, the confidential / signature message of the identification information of the patient 2 is received from the medical institution side terminal 11 by the transmission / reception interface 42 (step S6), the insurer side terminal 4
In 1, the confidential / signature message opening processing unit 44
The signature is confirmed using the public key of the medical institution 1a or the pharmacy 1b that has transmitted the information, and the parent deployment seal is performed using the private key of the user (step S7). Next, the identification information reception processing unit 4
5, the identification information of the patient 2 transmitted from the medical institution side terminal 11 is confirmed, and the insured person information storage unit 47 stores the insured person side terminal 41 via the insured person information reference processing unit 46. The insured information such as the insurance medical treatment qualification information of the corresponding patient 2 is acquired from all the insured information managed by (step S8). Furthermore, when the insured person information of the corresponding patient 2 exists, the communication identifier generation processing unit 49 can uniquely associate the identification information of the patient 2 transmitted from the medical institution side terminal 11 for a predetermined period. The communication identifier is generated so that the correspondence between the identification information and the communication identifier is random (step S9).

When the communication identifier is generated, the identification information management unit 51 stores the corresponding identification information in the identification information storage unit 52 in association with the generated communication identifier (step S10) and is insured. Person information storage unit 47
In order to transmit the insured person information of the corresponding patient 2 and the communication identifier acquired from the medical institution side terminal 11,
The confidential / signature message creation processing unit 43 creates a confidential of these pieces of information using the public key of the medical institution 1a where the patient 2 received the medical treatment or the pharmacy 1b who requested the dispensing,
Attach a signature using your own private key (step S1)
1). Then, the transmission / reception interface 42 transmits the created confidentiality / signature message of the insured person information and the communication identifier to the medical institution side terminal 11 (step S1).
2) The communication identifier allocation process of the insurer side terminal 41 is ended.

On the other hand, the medical institution side terminal 11 receives the confidential / signature message of the insured person information and the communication identifier transmitted from the insurer side terminal 41 through the transmission / reception interface 14 (step S13), and the confidential / signature message is received. The unsealing processing unit 16 confirms the signature using the public key of the insurer 4 who has transmitted the information, and performs the parent expansion sealing using the private key of the insurer 4 (step S14). Then, the insured person qualification confirmation processing unit 17 confirms the insured person qualification of the patient 2 based on the insured person information of the patient 2 received from the insurer side terminal 41 (step S15), and at the same time, the communication identifier management unit. 19, the communication identifier received from the insurer side terminal 41 is stored in the communication identifier storage unit 20 in association with the corresponding identification information of the patient 2 (step S16), and the communication institution terminal 11 communication identifier is assigned. The process ends.

Next, the receipt transmission / reception processing of the medical information transmission / reception system of this embodiment will be described with reference to the drawings. FIG. 5 is a flowchart showing the receipt transmission / reception processing of the medical information transmission / reception system of this embodiment. In FIG. 5, for example, when a staff member of the medical institution 1a or the pharmacy 1b inputs a medical department receipt or a dispensing receipt to the medical institution side terminal 11 and creates an electronic receipt in the electronic receipt storage unit 21 (step S21), the medical institution side In order to transmit the electronic receipt to the insurer-side terminal 41, the terminal 11 selects from the electronic receipt created by the communication identifier selection processing unit 22,
Identification information for identifying the patient 2, such as the name of the patient 2 and the medical insurance insured identification number associated with the electronic receipt, is detected (step S22).

Then, the communication identifier selection processing unit 22 detects the patient 2 detected from the electronic receipt to be transmitted to the insurer side terminal 41 from the communication identifiers stored in the communication identifier storage unit 20. A communication identifier corresponding to the identification information is extracted (step S23). Next, patient 2
When the communication identifier corresponding to the identification information of No. 1 can be extracted, the medical information transmission processing unit 23 acquires the computerized receipt stored in the computerized receipt storage unit 21 and specifies the patient 2 included therein. The communication identification information is replaced with the communication identifier selected by the communication identifier selection processing unit 22 (step S24).

When the medical information transmission processing unit 23 replaces the identification information of the patient 2 included in the computerized receipt with the communication identifier, a confidential / signature message is created in order to transmit the computerized receipt to the insurer side terminal 41. The processing unit 15 creates a confidential of the computerized receipt using the public key of the insurer 4 to which the patient 2 belongs, and attaches the signature using his own private key (step S25). Then, the transmission / reception interface 14 transmits the created confidential reception / signature message of the electronic receipt to the insurer side terminal 41 (step S26), and the reception transmission / reception process of the medical institution side terminal 11 ends.

On the other hand, the insurer side terminal 41 receives the confidential / signature message of the computerized receipt transmitted from the medical institution side terminal 11 by the transmission / reception interface 42 (step S27), and the confidential / signature message opening processing section 44.
Thus, the signature is confirmed using the public key of the medical institution 1a or the pharmacy 1b that has transmitted the information, and the parent deployment seal is performed using the private key of the user (step S28). Next, the identification information selection processing unit 53 detects the communication identifier included in the computerized receipt of the patient 2 transmitted from the medical institution side terminal 11 (step S29), and the identification stored in the identification information storage unit 52 is detected. The identification information of the patient 2 corresponding to the communication identifier is acquired from the information (step S30). And
The medical information reception processing unit 54 replaces the communication identifier included in the computerized receipt with the identification information selected by the identification information selection processing unit 53, and outputs the computerized receipt to the receipt inspection processing unit 55 ( Step S3
1).

Further, in the receipt inspection processing unit 55 to which the electronic receipt, in which the communication identifier has been replaced with the corresponding identification information of the patient 2 and which has been restored to the original state,
For the input electronic receipt, confirm whether there is a deficiency of the receipt, and separate it into a receipt that pays medical fees or dispensing fees as requested, and a receipt that has a decision to pay medical fees or dispensing fees, respectively. The payment decision receipt storage unit 56 and the hold receipt storage unit 57 store the payment decision receipt storage unit 56 (step S31). Then, the totaling / settlement processing unit 58 performs name identification on the receipt that pays the medical treatment fee or the dispensing fee as requested, calculates the total medical expenses for a predetermined period for each of the two patients, and pays the medical treatment fee or the dispensing fee as requested. Settlement information such as the number of receipts, the number of receipts for which payment of medical fees or dispensing fees has been suspended, and the amount of payment are calculated (step S
32), the receipt transmission / reception process of the insurer side terminal 41 is ended.

Next, the communication identifier releasing process of the medical institution side terminal of the present embodiment will be described with reference to the drawings. Figure 6
It is a flowchart which shows the communication identifier cancellation | release process of the medical institution side terminal of this Embodiment. In FIG. 6, first, the communication identifier management unit 19 of the medical institution side terminal 11 extracts the communication identifier from the communication identifier storage unit 20 at a predetermined timing (step S41) and identifies the communication identifier. A predetermined time has passed since the information was assigned,
It is determined whether the valid period has expired (step S
42). In step S42, a predetermined time has passed since the communication identifier was assigned to the corresponding identification information,
If the valid period has expired (Y in step S42)
ES), the communication identifier management unit 19 deletes the communication identifier from the communication identifier stored in the communication identifier storage unit 20 (step S43), and proceeds to step S44.

On the other hand, in step S42, if the predetermined time has not passed since the communication identifier was assigned to the corresponding identification information and the valid period has not expired (NO in step S42), the communication identifier is used. The management unit 19 does nothing and proceeds to step S44. And step S4
In step 4, it is determined whether the valid periods of all the communication identifiers stored in the communication identifier storage unit 20 have been determined (step S44). If the valid periods of all the communication identifiers have not been determined, (NO in step S44), step S
Returning to step 41, the above processing is repeated. On the other hand, step S
If it is determined in 44 that the valid periods of all the communication identifiers have been determined (YES in step S44), the communication identifier releasing process of the medical institution side terminal 11 ends.

Next, the identification information canceling process of the insurer side terminal of this embodiment will be described with reference to the drawings. FIG. 7 is a flow chart showing the identification information cancellation processing of the insurer side terminal of the present embodiment. In FIG. 7, first, the insurer side terminal 41
The identification information management unit 51 of the above extracts the identification information from the identification information storage unit 52 at a predetermined timing (step S5).
1) It is determined whether or not a predetermined time has passed since the identification information was assigned to the corresponding communication identifier and the valid period of the correspondence relationship has exceeded (step S52).

In step S52, when a predetermined time has elapsed since the identification information was assigned to the corresponding communication identifier and the valid period of the correspondence has exceeded (YES in step S52), the identification information management unit 51. Holds the correspondence relationship between the communication identifier and the identification information until the billing period for the medical treatment fee or the dispensing fee for insurance medical treatment expires, even if the reception and transmission of the receipt with the medical institution side terminal 11 are completed. Then, the correspondence between the identification information and the communication identifier is stored in the identification information storage unit 59 (step S53). Then, the identification information management unit 51 erases the identification information from the identification information stored in the identification information storage unit 52 (step S54), and proceeds to step S55.

On the other hand, in step S52, if the predetermined time has not passed since the identification information was assigned to the corresponding communication identifier and the valid period of the corresponding relationship has not exceeded (NO in step S52), The identification information management unit 51 does nothing and proceeds to step S55. Then, in step S55, it is determined whether or not the valid period of the correspondence relationship between all the identification information stored in the identification information storage unit 52 and the communication identifier has been determined (step S55), and all the identification information If the validity period of the correspondence relationship with the communication identifier has not been determined (NO in step S55), the process returns to step S51 and the above process is repeated. On the other hand, if it is determined in step S55 that the valid period of the correspondence relationship between all the identification information and the communication identifier has been determined (YES in step S55), the identification information canceling process of the insurer side terminal 41 ends.

In the present embodiment, the settlement information such as the number and amount of receipts for paying medical fees or dispensing fees as requested, and the number of receipts for which the decision to pay medical fees or dispensing fees is withheld is provided to the medical institution side terminal. In order to prevent the identification information for identifying the patient 2 from being leaked to a third party in the communication network 3 when transmitting to 11 or when returning a defective receipt to the medical institution 1a or the pharmacy 1b. Is the communication identifier selection processing unit 22 described above,
A medical information transmission device including the medical information transmission processing unit 23 is provided in the insurer side terminal 41, and a medical information reception device including an identification information selection processing unit 53 and a medical information reception processing unit 54 is provided in the medical institution side terminal 11. Depending on the correspondence relationship between the identification information used when the receipt is transmitted from the medical institution side terminal 11 to the insurer side terminal 41 and the communication identifier, or the correspondence relationship between the newly created identification information and the communication identifier. Similarly to the case where the medical institution side terminal 11 transmits the receipt to the insurer side terminal 41, the identification information for identifying the patient 2 may be replaced with the communication identifier and transmitted / received.

Further, in the present embodiment, in the medical institution side terminal 11, the identification information transmission processing unit 13, the communication identifier reception processing unit 18, the communication identifier management unit 19, and the communication identifier storage unit 20 are provided. , Communication identifier selection processing unit 22
, And the medical information transmission processing section 23 constitutes the medical information transmitting apparatus, but the constituent elements constituting the medical information transmitting apparatus are not limited to this, and a part of the constituent elements of the medical institution side terminal 11 , Or all of them may be included. Similarly, in the insurer side terminal 41, an identification information reception processing unit 45, a communication identifier generation processing unit 49, a communication identifier transmission processing unit 50, an identification information management unit 51, an identification information storage unit 52, Although it has been described that the identification information selection processing unit 53 and the medical information reception processing unit 54 configure the medical information receiving device, the constituent elements that configure the medical information receiving device are not limited to this, and the insurer side terminal 41. Any component may be included as long as it includes some or all of the components. Therefore, without using the communication identifier reception processing unit 18, the communication identifier generation processing unit 49, and the communication identifier transmission processing unit 50, the negotiation between the sender and the receiver regarding the identification information corresponding to the communication identifier is performed. Alternatively, an offline medium such as mail or FAX may be used.

Further, in the present embodiment, the insurer side terminal 4
1, when the medical information is received from the medical institution side terminal 11, the communication identifier included in the medical information is replaced with the corresponding identification information of the patient 2 by the medical information reception processing unit 54, and the medical information is changed to the original one. After being restored to the state, it is stored in the payment decision receipt storage unit 56 and the hold receipt storage unit 57, but in the insurer side terminal 41, the identification information reception processing unit 45, the communication identifier generation processing unit 49, and the communication identifier. In addition to the transmission processing unit 50, medical information that outputs the medical information received via the transmission / reception interface 42 together with the communication identifier generated by the communication identifier generation processing unit 49 and the identification information corresponding to the communication identifier. A medical information receiving device is configured by an output processing unit (not shown), and is included in the received medical information when the medical information is received from the medical institution side terminal 11. That the communication identifier output without replacing the communication identifier contained in the medical information at an arbitrary timing, it may be replaced with the identification information of the corresponding patient 2.

As described above, in the medical information transmitting / receiving system of this embodiment, the communication identifier generated in the insurer side terminal 41 masks the identification information for identifying the patient individual of the receipt to be transmitted. As a result, it is possible to safely transmit and receive the receipt including the high-level personal information via the communication network 3. In particular, a plurality of medical institutions 1a
On the insurer 4 side that receives and collects the receipt from the pharmacy 1b or the pharmacy 1b, a communication identifier that replaces the identification information for identifying the patient 2 is generated. By using the communication identifier that can commonly manage the insured, the management of the insured can be made efficient.

(Second Embodiment) Next, the second embodiment of the present invention will be described.
The medical information transmitting apparatus and the medical information receiving apparatus used in the medical information transmitting / receiving system of the embodiment will be described.
In the medical information transmission / reception system of the first embodiment, the identification information that can identify the individual patient 2 included in the medical information is associated with the medical information such as the patient's 2 disease name, medical treatment content, and drug prescription content. When the identification information for identifying the individual patient 2 included in the medical information is replaced with the communication identifier so as not to be transmitted to the communication network 3 and is transmitted to the communication network 3, the communication information identifier is transmitted to the medical information receiving device side. While generating
In the second embodiment, a case will be described in which the communication identifier is generated on the medical information transmitting device side.

The schematic diagram showing the outline of the medical information transmitting / receiving system of the second embodiment is the same as the schematic diagram showing the outline of the medical information transmitting / receiving system of the first embodiment shown in FIG. Alternatively, the medical institution side terminal 11 used in the pharmacy 1b is the medical institution side terminal 61 described below, and the insurer side terminal 4 used by the insurer 4 is described.
1 is changed to an insurer-side terminal 71 described below, and other configurations are the same as those in FIG.

Next, the medical information transmitting apparatus and the medical information receiving apparatus according to this embodiment will be specifically described with reference to the drawings. Note that, also in the present embodiment, as in the first embodiment, as an example, a description will be given focusing on the configuration in the case of transmitting a receipt from the medical institution side terminal 61 to the insurer side terminal 71. First, the medical institution side terminal 61 including the medical information transmitting device will be described. FIG. 8 is a block diagram showing the configuration of the medical institution side terminal 61 including the medical information transmitting apparatus according to this embodiment. In FIG. 8, the constituent elements given the same reference numerals as those in FIG. 2 are the constituent elements described in the first embodiment, and the description thereof will be omitted.

Therefore, in FIG. 8, the components different from those in FIG. 2 will be described. The medical institution side terminal 11 of the first embodiment includes an insured person qualification confirmation processing unit 17 and a communication identifier reception processing unit 18. In contrast to the communication identifier management unit 19, the medical institution side terminal 61 including the medical information transmitting apparatus according to the present embodiment transmits the identification information for identifying the patient 2, Based on the insured information such as insurance medical treatment qualification information received from the insurer side terminal 71 via the transmission / reception interface 14, the qualification as the insured of the patient 2 is confirmed, and the generation of the communication identifier is instructed. An insurer qualification confirmation processing unit 62 is provided.

Further, when the insured person qualification confirmation processing unit 62 obtains the insured person information of the patient 2, the medical institution side terminal 61 informs the patient 2 of the patient 2 included in the medical information transmitted and received via the communication network 3. In order to replace the identification information, a communication identifier that can be uniquely associated with the identification information for a predetermined period is generated so that the correspondence relationship between the identification information and the communication identifier is random. Part 63,
With the communication identifier management unit 64 that stores the generated communication identifier in association with the identification information for specifying the corresponding patient 2, and the identification information for specifying the patient 2 that corresponds with the generated communication identifier The communication identifier transmission processing unit 65 for transmitting to the insurer side terminal 71 is provided. In addition,
The generated communication identifier and the identification information corresponding to the communication identifier are stored in the communication identifier storage unit 20.

In this embodiment, in the medical institution side terminal 61, the communication identifier generation processing unit 63, the communication identifier management unit 64, the communication identifier transmission processing unit 65,
Communication identifier storage unit 20 and communication identifier selection processing unit 2
2 and the medical information transmission processing unit 23 constitute a medical information transmission device. Also, the insured qualification confirmation processing unit 62
The communication identifier generation processing unit 63, the communication identifier management unit 64, and the communication identifier transmission processing unit 65 are composed of a memory and a CPU (central processing unit), and realize the functions of the above respective units. The function may be realized by loading the program into the memory and executing it, or may be realized by dedicated hardware.

Next, the insurer side terminal 71 including the medical information receiving device will be described. FIG. 9 is a block diagram showing the configuration of an insurer side terminal 71 including the medical information receiving apparatus according to this embodiment. In FIG. 9, the constituent elements given the same reference numerals as those in FIG. 3 are the constituent elements described in the first embodiment, and therefore description thereof will be omitted.

Therefore, in FIG. 9, the components different from those in FIG. 3 will be described. The insurer side terminal 41 of the first embodiment has a communication identifier generation processing unit 49, a communication identifier transmission processing unit 50, In contrast to the identification information management unit 51, the insurer side terminal 71 including the medical information receiving apparatus of the present embodiment uses the communication identifier generated by the medical institution side terminal 61 as the medical institution side terminal. From 61, a communication identifier reception processing unit 72 that receives the corresponding identification information through the transmission / reception interface 42, and an identification information management unit 73 that stores the corresponding identification information in association with the received communication identifier are provided. There is. The received communication identifier and the identification information corresponding to the communication identifier are stored in the identification information storage unit 52.

In the present embodiment, the insurer side terminal 7
1, the communication identifier reception processing unit 72, the identification information management unit 73, the identification information storage unit 52, the identification information selection processing unit 53, and the medical information reception processing unit 54 constitute a medical information receiving device. There is. Further, the communication identifier reception processing unit 72 and the identification information management unit 73 include a memory and a CPU.
(Central processing unit), and the function may be realized by loading the program for realizing the function of each of the above parts into a memory and executing it, or by a dedicated hardware. It may be realized.

Next, the operation and the processing procedure of the medical information transmitting / receiving system of the present embodiment will be described with reference to the communication identifier assigning process with reference to the drawings. The receipt transmission / reception process of the medical information transmission / reception system of this embodiment, the communication identifier release process of the medical institution side terminal, and the identification information release process of the insurer side terminal are the same as those in the first embodiment. Therefore, the description is omitted. FIG. 10 is a flowchart showing the communication identifier assigning process of the medical information transmitting / receiving system of the present embodiment. In FIG. 10, for example, when the staff of the medical institution 1a or the pharmacy 1b causes the medical institution side terminal 11 to read the medical insurance insured person identification information of the patient 2 stored in the IC card 31, the medical institution side terminal 11 The identification information for identifying the patient 2 such as the name of 2 and the medical insurance insured identification number and the information of the insurer 4 to which the patient 2 belongs are acquired (step S61).

Next, the communication identifier stored in the communication identifier storage unit 20 is searched for the communication identifier corresponding to the identification information (step S62). Then, it is judged whether or not the communication identifier corresponding to the identification information is stored in the communication identifier storage unit 20 (step S6).
3) If the communication identifier corresponding to the identification information is stored (YES in step S63), the communication identifier assigning process of the medical institution side terminal 61 is terminated without doing anything.

On the other hand, in step S63, when the communication identifier corresponding to the identification information is not stored in the communication identifier storage unit 20 (NO in step S63), the communication identifier is assigned to the identification information. After a predetermined time has passed, the validity period of the communication identifier has expired, or the patient 2 corresponding to the identification information is assigned to this medical institution 1a or pharmacy 1b.
Since it is the first time to use, the confidential / signature message creation processing unit 15 causes the insurer to which the patient 2 belongs to transmit the identification information of the patient 2 read from the IC card 31 to the insurer side terminal 71. The private key of the identification information is created using the public key of No. 4, and the signature is attached using the private key of the user (step S64). Then, the transmission / reception interface 14 transmits the confidential / signature message of the created identification information to the insurer side terminal 71 (step S6).
5).

Further, the confidential / signature message of the identification information of the patient 2 is received from the medical institution side terminal 61 by the transmission / reception interface 42 (step S66). The signature is confirmed using the public key of the medical institution 1a or the pharmacy 1b that has transmitted the information, and the parent deployment seal is performed using the private key of the user (step S67). Next, the identification information reception processing unit 45 confirms the identification information of the patient 2 transmitted from the medical institution side terminal 11, and the insured person information reference processing unit 46.
From among all the insured person information managed by the insured side terminal 71 stored in the insured person information storage unit 47 via
The insured information such as the insurance medical treatment qualification information of the corresponding patient 2 is acquired (step S68).

Next, the insured person information of the relevant patient 2 acquired from the insured person information storage unit 47 is obtained from the medical institution side terminal 6.
In order to send to 1, the confidential / signature message creation processing unit 43 creates a confidential information of the insured by using the public key of the medical institution 1a where the patient 2 received the medical treatment or the pharmacy 1b which requested the dispensing. , Attaches a signature using his / her private key (step S69). Then, the transmission / reception interface 42 transmits the created confidential / signature message of the insured information to the medical institution side terminal 61 (step S
70).

On the other hand, the medical institution side terminal 61 receives the confidential / signature message of the insured information transmitted from the insurer side terminal 71 through the transmission / reception interface 14 (step S71), and the confidential / signature message opening processing section 16 is executed. Thus, the public key of the insurer 4 who has transmitted the information is used to confirm the signature, and the private key of the insurer 4 is used to perform the parent expansion seal (step S72). Then, the insured person qualification confirmation processing unit 62 confirms the insured person qualification of the patient 2 based on the insured person information of the patient 2 received from the insurer side terminal 71 (step S73), and at the same time, generates a communication identifier. The unit 63 generates a communication identifier that can be uniquely associated with the identification information of the patient 2 read from the IC card 31 for a predetermined period such that the correspondence relationship between the identification information and the communication identifier is random ( Step S74).

Then, by the communication identifier management unit 64,
The communication identifier generated by the communication identifier generation processing unit 63 is stored in the communication identifier storage unit 20 in association with the identification information for specifying the corresponding patient 2 (step S75), and the generated communication identifier is used. In order to transmit the identifier and the corresponding identification information for identifying the patient 2 to the insurer side terminal 71, the confidential / signature message creation processing unit 15
By using the public key of the insurer 4 to which the patient 2 belongs,
The confidentiality of the identification information corresponding to the communication identifier is created, and the signature is attached using the own private key (step S76).
Then, the transmission / reception interface 14 transmits the confidential / signature message of the created identification information to the insurer side terminal 71 (step S77), and the communication identifier assigning process of the medical institution side terminal 61 ends.

Further, the communication identifier assigned to the patient 2 from the medical institution side terminal 61 and the confidential information of the identification information of the patient 2
In the insurer side terminal 71 that has received the signature message via the transmission / reception interface 42 (step S78), the confidentiality / signature message opening processing unit 44 confirms the signature using the public key of the medical institution 1a or the pharmacy 1b that has transmitted the information. Then, the parent expansion is performed using the private key of the user (step S79). Next, the identification information management unit 73 stores the received identification information in the identification information storage unit 52 in association with the received communication identifier (step S80), and ends the communication identifier allocation process of the insurer side terminal 71. To do.

Also in the present embodiment, settlement information such as the number and amount of receipts for paying medical fees or dispensing fees as requested, and the number of receipts for which decision to pay medical fees or dispensing fees is withheld is provided to the medical institution side. In order to prevent the identification information for identifying the patient 2 from being leaked to a third party in the communication network 3 when transmitting to the terminal 11 or when returning the defective receipt to the medical institution 1a or the pharmacy 1b. In the same manner as in the first embodiment, the communication identifier selection processing unit 22 and the medical information transmission processing unit 23 described above are included.
A medical information transmitting device including
The medical institution side terminal 61 is provided with a medical information receiving device including an identification information selection processing unit 53 and a medical information reception processing unit 54,
Depending on the correspondence relationship between the identification information used when the receipt was transmitted from the medical institution side terminal 61 to the insurer side terminal 71 and the communication identifier, or the correspondence relationship between the newly created identification information and the communication identifier, the medical Similarly to the case where the receipt is transmitted from the institution-side terminal 61 to the insurer-side terminal 71, the identification information for identifying the patient 2 may be replaced with the communication identifier and transmitted / received.

Further, in the present embodiment, in the medical institution side terminal 61, the communication identifier generation processing unit 63, the communication identifier management unit 64, the communication identifier transmission processing unit 65,
Communication identifier storage unit 20 and communication identifier selection processing unit 2
2 and the medical information transmission processing unit 23 have been described as constituting a medical information transmitting apparatus, but the constituent elements constituting the medical information transmitting apparatus are not limited to this, and one of the constituent elements of the medical institution side terminal 61. Any part or all may be included.
Similarly, in the insurer side terminal 71, the communication identifier reception processing unit 72, the identification information management unit 73, the identification information storage unit 52, the identification information selection processing unit 53, and the medical information reception processing unit 54 are used for medical treatment. Although it has been described that the information receiving device is configured, the components configuring the medical information receiving device are not limited thereto, and may include some or all of the components of the insurer side terminal 71. Therefore, as in the first embodiment, the communication identifier generation processing unit 63, the communication identifier transmission processing unit 65, and the communication identifier reception processing unit 72 are not used, and the identification information corresponding to the communication identifier is related. For the negotiation between the sender and the receiver, an offline medium such as mail or FAX may be used.

Further, in this embodiment, the insurer side terminal 7
In 1, when the medical information is received from the medical institution side terminal 61, the communication information included in the medical information is replaced with the corresponding identification information of the patient 2 by the medical information reception processing unit 54 to replace the original medical information. After being restored to the state, it is stored in the payment decision receipt storage unit 56 and the hold receipt storage unit 57, but in the insurer side terminal 71, in addition to the communication identifier reception processing unit 72, the transmission / reception interface 42
The medical information reception processing unit (not shown) that outputs the medical information received via the communication identifier reception processing unit 72 together with the communication identifier received by the communication identifier reception processing unit 72 and the identification information corresponding to the communication identifier. When the apparatus is configured to receive medical information from the medical institution side terminal 61, the communication identifier included in the received medical information is output without being replaced, and the communication identifier included in the medical information is output at an arbitrary timing. , May be replaced with the corresponding identification information of the patient 2.

As described above, in the medical information transmission / reception system of this embodiment, the communication identifier generated in the medical institution side terminal 61 masks the identification information for specifying the patient individual of the receipt to be transmitted. By that,
Through the communication network 3, it is possible to safely send and receive a receipt including highly personal information. In particular, the medical institution 1a or the pharmacy 1b, which has to send a receipt to a plurality of insurers 4, generates a communication identifier that replaces the identification information for identifying the patient 2. Therefore, the medical institution 1a or the pharmacy 1b.
However, the management of the patient 2 can be made efficient by using the communication identifier that can commonly manage the patient 2 who has been treated or dispensed at his / her own.

In the above-described first and second embodiments, the example of transmitting and receiving the receipt as the medical information via the communication network 3 is described, but the medical information transmitted and received via the communication network 3 is the receipt. The medical information is not limited to the above, and may be any medical information such as an electronic medical record as long as it is medical information including identification information for identifying the two patients. Further, the function realized by the IC card 31 includes not only the medical insurance insured person certificate such as national insurance but also the medical insurance insured person certificate by the government-controlled insurance, health insurance association, seafarers insurance, mutual aid association, etc. Further, the identification information for identifying the individual patient 2 to be replaced with the communication identifier is not limited to the name of the patient 2 and the medical insurance insured identification number uniquely assigned to the patient 2, and is unique to the patient 2. Any information can be associated with the.

Further, the medical institution side terminals 11 and 61 and the insurer side terminal 41 in the first and second embodiments described above,
A program for realizing the function of 71 is recorded in a computer-readable recording medium, and the program recorded in this recording medium is read into a computer system and executed to configure the function of each device, Medical information may be transmitted and received via the communication network 3.

The “computer system” mentioned here includes an OS and hardware such as peripheral devices. In addition, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used. Also,
"Computer-readable recording medium" means a flexible disk, a magneto-optical disk, a ROM, a CD-RO.
A portable medium such as M or a storage device such as a hard disk built in a computer system. Further, the "computer-readable recording medium" is a volatile memory (RAM) inside a computer system that serves as a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those that hold the program for a certain period of time are also included.

The above program may be transmitted from a computer system that stores the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the "transmission medium" for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. Further, the program may be a program for realizing some of the functions described above. further,
It may be a so-called difference file (difference program) that can realize the above-mentioned functions in combination with a program already recorded in the computer system.

[0096]

As described above, according to the medical information transmitting apparatus of claims 1 to 6 and the medical information transmitting method of claim 15, the medical information transmitting side or the receiving side With the generated communication identifier, it is possible to mask the identification information for identifying the individual patient of the medical information to be transmitted, and transmit the medical information to the communication network. Further, according to the medical information receiving device of claims 7 to 14 and the medical information receiving method of claims 16 to 18, identification information for identifying a patient individual included in the medical information. To
By substituting the communication identifier generated on the transmission side or the reception side of the medical information, the medical information sent to the communication network with the identification information masked can be received from the communication network. Therefore, even if the encryption of the medical information transmitted and received through the communication network is decrypted, the communication identifier replaced with the identification information for specifying the patient individual can identify the patient individual on the communication network. It is possible to prevent the leakage of the identification information, and even if the relationship between the identification information for identifying the patient and the communication identifier is leaked, by using the communication identifier that loses its effect in a predetermined period, The effect is that leakage damage can be minimized.

[Brief description of drawings]

FIG. 1 is a schematic diagram showing an outline of a medical information transmission / reception system according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of a medical institution side terminal including the medical information transmitting apparatus according to the embodiment.

FIG. 3 is a block diagram showing a configuration of an insurer-side terminal including the medical information receiving apparatus according to the same embodiment.

FIG. 4 is a flowchart showing a communication identifier assigning process of the medical information transmitting / receiving system of the same embodiment.

FIG. 5 is a flowchart showing a receipt transmission / reception process of the medical information transmission / reception system according to the same embodiment.

FIG. 6 is a flowchart showing a communication identifier releasing process of the medical institution side terminal of the embodiment.

FIG. 7 is a flowchart showing identification information cancellation processing of the insurer side terminal according to the same embodiment.

FIG. 8 is a block diagram showing a configuration of a medical institution side terminal including a medical information transmitting apparatus according to a second embodiment of the present invention.

FIG. 9 is a block diagram showing a configuration of an insurer-side terminal including the medical information receiving apparatus according to the same embodiment.

FIG. 10 is a flowchart showing a communication identifier assigning process of the medical information transmitting / receiving system of the same embodiment.

[Explanation of symbols]

1a ... medical institution, 1b ... pharmacy, 2 ... patient,
3 ... communication network, 4 ... insurer, 11 ... medical institution terminal, 12 ... IC card read / write unit, 13 ...
Identification information transmission processing unit, 14 ... Transmission / reception interface, 15 ... Confidential / signature message creation processing unit, 16
・ ・ ・ Confidentiality / signature message opening processing unit, 17 ・ ・ ・ Insured qualification confirmation processing unit, 18 ・ ・ ・ Communication identifier reception processing unit, 19 ・ ・ ・ Communication identifier management unit, 20 ・ ・ ・ Communication Identifier storage unit, 21 ... Electronic receipt storage unit, 2
2 ... Communication identifier selection processing unit, 23 ... Medical information transmission processing unit, 31 ... IC card, 41 ... Insurer side terminal, 42 ... Transmission / reception interface, 43 ...
Confidentiality / signature message creation processing unit, 44 ... Confidentiality / signature message opening processing unit, 45 ... Identification information reception processing unit, 46 ... Insured person information reference processing unit, 47 ... Insured person information Storage unit, 48 ... Insured person information transmission processing unit, 49 ... Communication identifier generation processing unit, 50 ... Communication identifier transmission processing unit, 51 ... Identification information management unit, 5
2 ... Identification information storage unit, 53 ... Identification information selection processing unit, 54 ... Medical information reception processing unit, 55 ... Reception check processing unit, 56 ... Payment decision receipt storage unit,
57 ... Pending receipt storage unit, 58 ... Aggregation / settlement processing unit, 59 ... Identification information storage unit, 61 ... Medical institution side terminal, 62 ... Communication identifier generation processing unit, 63 ...
..Communication identifier management unit, 64 ... communication identifier transmission processing unit, 71 ... insurer side terminal, 72 ... communication identifier reception processing unit, 73 ... identification information management unit

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Takato Mizuguchi             4-3-1 Toranomon, Minato-ku, Tokyo Stock market             Medical Data Communication             Inside (72) Inventor Junichi Gohara             2-2-2 Otemachi, Chiyoda-ku, Tokyo             Ceremony company NTT Thiemee (72) Inventor Tomoki Ishii             2-2-2 Otemachi, Chiyoda-ku, Tokyo             Ceremony company NTT Thiemee F-term (reference) 5B085 AE00 BA06 BG02

Claims (18)

[Claims] 1. A medical information transmitting device for delivering medical information to a predetermined recipient via a communication network, wherein identification information for identifying a patient included in the medical information is the identification information. A medical information transmitting apparatus, comprising: medical information transmitting means for substituting a communication identifier that can be uniquely associated only for a predetermined period and transmitting the medical information to the recipient. 2. Identification information transmitting means for transmitting identification information for identifying a patient to the recipient, communication generated by the recipient side and uniquely associated with the identification information for a predetermined period. Identifier receiving means for receiving a communication identifier from the recipient, and a communication identifier managing means for storing the received communication identifier in the communication identifier storage means in association with the identification information transmitted to the recipient. And a communication identifier selecting unit that extracts the identification information from the medical information and selects the communication identifier corresponding to the identification information from the stored communication identifiers. Replaces the identification information included in the medical information with the selected communication identifier, and transmits the medical information to the recipient. Medical information transmitting apparatus according to. 3. A communication identifier generating unit that generates a communication identifier that can be uniquely associated with identification information for identifying a patient only for a predetermined period, and the identification information that corresponds to the generated communication identifier. A communication identifier management unit that stores the communication identifier in association with the communication identifier storage unit; a communication identifier transmission unit that transmits the generated communication identifier together with the corresponding identification information to the recipient; A communication identifier selecting unit that extracts the identification information and selects the communication identifier corresponding to the identification information from the stored communication identifiers, wherein the medical information transmitting unit is the medical information. 2. The medical information is transmitted to the recipient while replacing the identification information included in the identification information with the selected communication identifier. Medical information transmission device. 4. The medical information transmitting apparatus according to claim 1, wherein the identification information includes at least information regarding a name of a patient. 5. The medical information transmission according to claim 1, wherein the identification information includes at least information regarding a medical insurance insured person identification number uniquely given to a patient. apparatus. 6. The medical information transmitting apparatus according to claim 1, wherein the communication identifier is randomly generated. 7. A medical information receiving device for receiving medical information from a predetermined sender via a communication network, the medical information receiving device being included in the received medical information and identifying information for identifying a patient. A medical information receiving device comprising a medical information receiving unit that replaces a communication identifier that can be uniquely associated only with a period with the identification information corresponding to the communication identifier and outputs the medical information. . 8. An identification information receiving means for receiving identification information for identifying a patient from the sender, and a communication identifier for generating a communication identifier which can be uniquely associated with the received identification information for a predetermined period. Generating means, identification information managing means for storing the corresponding identification information in the identification information storage means in association with the generated communication identifier, and communication for transmitting the generated communication identifier to the sender Identifier transmitting means, extracting the communication identifier from the received medical information,
Identification information selecting means for selecting the identification information corresponding to the communication identifier from among the stored identification information, wherein the medical information receiving means includes the communication identifier included in the received medical information. The medical information receiving apparatus according to claim 7, wherein the selected medical information is replaced with the selected identification information and the medical information is output. 9. A communication identifier, which is generated by the sender and can be uniquely associated with identification information for identifying a patient for a predetermined period, is received from the sender together with the corresponding identification information. Communication identifier receiving means, identification information managing means for storing the corresponding identification information in the identification information storage means in association with the received communication identifier, and extracting the communication identifier from the received medical information,
Identification information selecting means for selecting the identification information corresponding to the communication identifier from among the stored identification information, wherein the medical information receiving means includes the communication identifier included in the received medical information. The medical information receiving apparatus according to claim 7, wherein the selected medical information is replaced with the selected identification information and the medical information is output. 10. A medical information receiving device for receiving medical information from a predetermined sender via a communication network, and identification information receiving means for receiving identification information for identifying a patient from the sender. A communication identifier generation unit that generates a communication identifier that can be uniquely associated with the received identification information only for a predetermined period; and a communication identifier transmission unit that transmits the generated communication identifier to the sender, A medical information receiving device, comprising: the received medical information, and a medical information output means for outputting the generated communication identifier and the identification information corresponding to the communication identifier. 11. A medical information receiving device for receiving medical information from a predetermined sender via a communication network, wherein the medical information receiving device is generated by the sender side and has identification information for specifying a patient and a predetermined information. A communication identifier receiving unit that receives a communication identifier that can be uniquely associated only for a period together with the corresponding identification information from the sender, the received medical information, the received communication identifier, and the communication identifier A medical information receiving device, comprising: medical information output means for outputting together with the identification information corresponding to the identifier. 12. The medical information receiving device according to claim 7, wherein the identification information includes at least information regarding a name of a patient. 13. The medical information reception according to claim 7, wherein the identification information includes at least information regarding a medical insurance insured person identification number uniquely given to a patient. apparatus. 14. The medical information receiving device according to claim 7, wherein the communication identifier is randomly generated. 15. A medical information transmission method for delivering medical information to a predetermined recipient via a communication network, wherein identification information for identifying a patient included in the medical information is the identification information. A method for transmitting medical information, characterized by replacing with a communication identifier that can be uniquely associated only for a predetermined period, and transmitting the medical information to the recipient. 16. A medical information receiving method for receiving medical information from a predetermined sender via a communication network, wherein the medical information is included in the received medical information and identification information for identifying a patient and a predetermined information are included. A medical information receiving method, characterized in that a communication identifier that can be uniquely associated only for a period is replaced with the identification information corresponding to the communication identifier, and the medical information is output. 17. A medical information receiving method for receiving medical information from a predetermined sender via a communication network, wherein identification information for identifying a patient is received from the sender, and the received identification information is received. A communication identifier that can be uniquely associated with information for a predetermined period is generated, the generated communication identifier is transmitted to the sender, and the received medical information is transmitted to the generated communication identifier and the communication. A medical information receiving method, characterized in that the medical information is output together with the identification information corresponding to the business identifier. 18. A medical information receiving method for receiving medical information from a predetermined sender via a communication network, the identification information being generated by the sender side and identifying information for identifying a patient. A communication identifier that can be uniquely associated only for a period is received from the sender together with the corresponding identification information, and the received medical information is received as the communication identifier and the identification corresponding to the communication identifier. A medical information receiving method characterized by outputting together with information.