JP2006018817A - Medical image storage device, medical image device, medical image system and medical image information storage method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To avoid personal information on a patient from being acquired against the patient's intention after medical image information has been stored, and meanwhile to permit the use of image information without restrictions in a state excluding the personal information. <P>SOLUTION: A medical image storage device is provided with a reception means for receiving medical image information acquired from a medical image device, a table preparation means for preparing a table about relationship between predetermined personal information involved in the medical image information and image information prepared by excluding the predetermined personal information from the medical image information, a first storage means for storing the predetermined personal information, a second storage means for storing the image information, a first means for making the table unavailable, a second means for reacquiring the table, and an output means which reads out the predetermined personal information from the first storage means and the image information from the second storage means on the basis of the reacquired table to prepare and output the medical image information. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a medical image storage device that stores medical image information including personal information of a patient, a medical image device that generates and stores such medical image information, a medical image storage device, and a medical image system including the medical image device, The present invention also relates to a medical image information storage method for storing medical image information as described above.

  For example, medical image apparatuses such as an X-ray diagnostic apparatus, an X-ray tomography apparatus, a magnetic resonance imaging apparatus, an ultrasonic diagnostic apparatus, and a PET (Positron Emission Tomography) apparatus generate medical image information. The medical image information usually includes medical image data and incidental information, and is stored in a medical image storage device. The incidental information usually includes examination information and patient information. Therefore, the medical image information includes personal information that can identify the patient related to the image data, such as a patient name and patient identification information (for example, patient ID) included in the examination information. This means that medical image information is included in the category of personal privacy information and is protected by various related laws and regulations including the Doctoral Law.

  Medical image information should be strictly managed and protected from information leakage, but if medical image information is used for purposes other than medical practice, the possibility of leakage of personal information contained in medical image information is denied. I can't. For example, leakage may occur when medical image information is used for research of an image based on the medical image information or when medical image information is used during maintenance work of a medical image storage device.

  In order to solve this kind of problem, for example, an information disclosure procedure set in advance by a patient or a doctor of the patient is stored in the medical information management system, and reference to medical image information is permitted only by following this procedure. Therefore, a method is known in which medical image information is not disclosed against intention (see, for example, Patent Document 1).

  However, this method still allows the doctor to edit and process the medical image information regardless of the purpose of use of the information as long as the doctor is permitted to access the medical image information. Therefore, when medical image information is used for research purposes of images based on the medical image information or other purposes other than medical practice, it may be troublesome to remove personal information from the medical image information. It may occur that a part of the personal information included is leaked due to careless operation or the like.

  In addition, when a maintenance service person in charge maintains the medical image storage apparatus, if the person in charge is unfamiliar with the handling of personal information, a part of the personal information may be accidentally leaked.

  By the way, there is no way for a patient to know whether medical image information is strictly stored safely and used appropriately.

As a method of protecting personal information, the medical image information is divided into image data and incidental information, and when the medical image information is transmitted via the network, the incidental information is encrypted and the personal information included in the incidental information is included. It is also known not to be acquired by a third party during transmission (see, for example, Patent Document 2 or 3).
JP 2002-197186 A JP 2000-13614 A JP 2002-247026 A

  However, the above example is only protection during transmission, and the encrypted supplementary information is decrypted after receiving the medical image information. None of the above documents describes nor suggests that medical image information is once stored in a medical image storage device or the like to protect personal information and solve the above-mentioned problems.

  The present invention has been made in view of the above problems, and can avoid acquiring personal information of the patient against the will of the patient after storage of medical image information, but does not include the personal information It is an object of the present invention to provide a medical image storage device, a medical image device, a medical image system, and a medical image information storage method that can be used without restriction on image information.

  In order to achieve the above object, the medical image storage apparatus according to the first aspect of the present invention includes a receiving means for receiving medical image information obtained from the medical image apparatus, predetermined personal information relating to the medical image information, and the predetermined information. Table creating means for creating a table of the relationship with the image information created by removing the personal information from the medical image information, first storage means for storing the predetermined personal information, and the image information A second storage means for storing; a first means for making the table unavailable; a second means for reacquiring the table; and the second personal information from the first storage means. Output means for reading out the image information from the storage means based on the re-acquired table and creating and outputting the medical image information.

  In order to achieve the above object, the medical image apparatus of the present invention according to claim 31 is a photographing means for generating medical image information, predetermined personal information relating to the medical image information, and image information based on the medical image information, A table creating means for creating a table about the relationship, a first storage means for storing the predetermined personal information, a second storage means for storing the image information, and a first that makes the table unacceptable. And a second means for re-acquiring the table, the predetermined personal information from the first storage means, and the image information from the second storage means based on the re-acquired table Output means for creating and outputting the medical image information.

  In order to achieve the above object, a medical image system according to a thirty-second aspect of the present invention includes a medical image device and a medical image storage device, and these devices generate imaging means for generating medical image information, and include the medical image information in the medical image information. A table creating means for creating a table on the relationship between the predetermined personal information and the image information based on the medical image information; a first storage means for storing the predetermined personal information; and a first storage means for storing the image information. 2 storage means, first means for making the table unavailable, second means for reacquiring the table, and the second storage means for storing the predetermined personal information from the first storage means. Output means for reading out the image information from the table based on the reacquired table and generating and outputting the medical image information.

  In order to achieve the above object, a medical image storage method according to a thirty-third aspect of the present invention receives medical image information obtained from a medical image device, and receives predetermined personal information related to the medical image information and the predetermined personal information. Is created from the medical image information, a table is created regarding the relationship with the image information created, the predetermined personal information is stored, the image information is stored, and the table cannot be obtained. And

  In order to achieve the above object, the medical image storage method of the present invention according to claim 35 generates medical image information, and a relationship between predetermined personal information related to the medical image information and image information based on the medical image information. A table is created, the predetermined personal information is stored, the image information is stored, and the table cannot be obtained.

  According to the present invention, it is possible to avoid the acquisition of personal information of a patient against the will of the patient after storage of medical image information. The use of can be secured.

  Embodiments of the present invention will be described below with reference to the drawings.

Example 1
FIG. 1 is a block diagram showing an example of the configuration of a medical image storage apparatus according to Embodiment 1 of the present invention. For example, a medical image storage device 10 such as an image file server includes a receiving unit 1, a medical image information processing unit (hereinafter referred to as an image processing unit) 2, a storage unit 3, and a medical image information output unit (hereinafter referred to as an output unit). 4, including a table processing unit 5, an operation unit 6, and a control unit 7.

  The receiving unit 1 is a medical image of an X-ray diagnostic apparatus, an X-ray tomography apparatus (hereinafter referred to as an X-ray CT apparatus), a magnetic resonance imaging apparatus, a nuclear medicine diagnostic apparatus, an ultrasonic diagnostic apparatus, an endoscope apparatus, or the like. Connected to the device. In FIG. 1, an X-ray CT apparatus 80 is connected to the receiving unit 1 via a network such as a hospital LAN (Local Area Network). The receiving unit 1 receives medical image information including image data and accompanying information. The image data relates to X-ray CT image data generated by the X-ray CT apparatus 80. The image data may be X-ray CT image data subjected to image processing by the X-ray CT apparatus 80. The image data may be 2D image data or 3D image data. The image data may include shooting condition information such as shooting parameters and shooting time. The incidental information includes, for example, patient information and examination information related to the image data. Patient information includes, for example, patient name, patient identification information, patient date of birth, patient gender, etc., which can usually be treated as patient personal information. The examination information includes, for example, the examination date, the examination site of the patient, the type of medical imaging apparatus (here, X-ray CT apparatus), and the like. The image data and examination information may also include patient personal information. The personal information may be, for example, information that can identify a specific patient when the information itself is combined with other information of the patient.

  The image processing unit 2 includes a medical image information storage unit 21 and a medical image information division unit 22. The image processing unit 2 can correspond to “table creation means”.

  The medical image information storage unit 21 temporarily stores the medical image information received by the receiving unit 1. The stored medical image information, that is, the original medical image information is deleted from the medical image information storage unit 21 in accordance with predetermined conditions, so that doctors, radiographers, etc. (hereinafter referred to as users) are not permitted or patients It is made impossible to obtain original medical image information without help.

  As shown in FIG. 2, the medical image information dividing unit 22 divides the medical image information 210 into predetermined personal information 220 and image information 230. All or part of the personal information is determined as the predetermined personal information 220. The predetermined personal information 220 is extracted from the medical image information 210. The medical image information 210 from which the predetermined personal information 220 has been removed is handled as image information 230. The image information 230 may include dummy information instead of the removed predetermined personal information 220. Since the medical image storage apparatus can typically recognize where various types of information are stored, the medical image information dividing unit 22 can extract predetermined personal information. In particular, when the medical image information is stored in a manner compliant with the DICOM (Digital Imaging and Communication in Medicine) standard, the medical image information dividing unit 22 can extract the predetermined personal information from the tag information.

  The medical image information dividing unit 22 issues identification information (hereinafter referred to as a personal information ID) for predetermined personal information and identification information (hereinafter referred to as an image information ID) for image information. The personal information ID is given to the predetermined personal information, and the predetermined personal information given the personal information ID is transferred to the storage unit 3 as the predetermined personal information with ID. Similarly, the image information ID is given to the image information, and the image information given the image information ID is transferred to the storage unit 3 as image information with ID. The personal information ID is issued uniquely (uniquely) for each medical image information, so that predetermined personal information can be distinguished between examinations. Similarly, the image information ID is issued uniquely (uniquely) for each medical image information, so that the image information can be distinguished between examinations. Each of the patient information ID and the image information ID is not related to the issuing system in the table storage unit 52, and includes arbitrary numeric information and / or character information that is not displayed on the display unit 43.

  Further, the medical image information dividing unit 22 creates a table about the relationship between predetermined personal information and image information. For example, the medical image information dividing unit 22 creates a preliminary table including a personal information ID, an image information ID, and an examination date. The examination date is obtained from examination information included in the medical image information. As shown in FIG. 3A, the medical image information dividing unit 22 then adds the unique information to the preliminary table to create a table. Unique information is given or issued uniquely (uniquely) to each patient, such as patient health insurance insured card information, patient examination ticket information, password information set by the patient, etc. Any information can be used as long as it can be distinguished. This unique information can be input from the operation unit 6. The created table is transferred to the table processing unit 5.

  The storage unit 3 is composed of a nonvolatile storage device such as a magnetic disk, for example, and includes an image information storage unit 31 and a personal information storage unit 32. The image information storage unit 31 stores image information with ID. The personal information storage unit 32 stores predetermined personal information with ID. The image information storage unit 31 may correspond to “second storage means”, and the personal information storage unit 32 may correspond to “first storage means”.

  The output unit 4 includes a medical image information creation unit 41, an image information search unit 42, and a display unit 43. The medical image information creation unit 41 receives the table (decoded table) from the table decoding unit 53, and the image information storage unit 31 stores the ID-added image information with the ID corresponding to the image information ID obtained from the table. Search from. Further, the medical image information creation unit 41 searches the personal information storage unit 32 for ID-added personal information with an ID corresponding to the personal information ID obtained from the table. Further, the medical image information creation unit 41 creates medical image information by combining the searched image information and predetermined personal information, and transfers this medical image information to the display unit 43.

  The image information retrieval unit 42 retrieves image information (with ID) from the image information storage unit 31 in accordance with a request from the operation unit 6, and transfers this image information to the display unit 43.

  When the medical image information is transferred from the medical image information creation unit 41, the display unit 43 displays the medical image information. In this case, the display unit 43 displays image information and personal information included in the medical image information. The display unit 43 displays the image information when the image information is transferred from the image information search unit 42. In this case, the display unit 43 does not display personal information.

  The table processing unit 5 includes a table encryption unit 51, a table storage unit 52, and a table decryption unit 53. The table encryption unit 51 receives the table transferred from the medical image information division unit 22 and encrypts the table. The encrypted table is transferred to and stored in the table storage unit 52. The table encryption unit 51 may store the encryption key. In particular, if the encryption key is the patient's public key, it may be stored. Alternatively, the encryption key may be recorded on an IC (Integrated Circuit) card 81 that can be held and managed by the patient. In this case, the encryption key is read from the IC card 81 via the operation unit 6 and provided to the table encryption unit 51 via the control unit 7. As shown in FIG. 3B, when the table is encrypted, only the personal information ID and the image information ID are encrypted, and the examination date and the unique information can be used for searching the encrypted table. May be. The table encryption unit 51 may correspond to “first means for making the table unacceptable”.

  The table decryption unit 53 searches the encrypted table according to the unique information (and the inspection date), and decrypts the encrypted table. The decrypted table is transferred to the medical image information creation unit 41 as a table. In decryption, the table decryption unit 53 uses a decryption key. When the table encryption unit 51 uses a public key, the table decryption unit 53 uses a secret key corresponding to the public key as a decryption key. A decryption key such as a secret key is recorded on the IC card 81. Therefore, in this case, a decryption key such as a secret key is read from the IC card 81 via the investigation unit 6 and provided to the table decryption unit 53 via the control unit 7. The table decoding unit 53 may correspond to “second means for reacquiring the table”.

  The operation unit 6 includes an IC card reader 61, various switches, and input devices such as a keyboard, a trackball, a mouse, a magnetic card reader, and a barcode reader. When the external recording medium 8 is an IC card 81, an IC card reader 61 is used. When the external recording medium 8 is a magnetic card 82 or a bar code medium 83, a magnetic card reader or bar code reader is used. In the following description, the embodiment will be described taking the case where the IC card 81 is used as an example of the external recording medium 8 as an example. The external recording medium 8 is portable and may normally be held and managed by a patient. The operation unit 6 may operate as an interactive interface. The operation unit 6 is used for inputting unique information, various information and instructions, an encryption key, a decryption key, and the like. The unique information, the encryption key, and the decryption key may be input via the IC card reader 61.

  The control unit 7 includes a central processing unit (CPU) and a storage circuit. When the information, instruction, unique information, encryption key, and decryption key are input from the operation unit 6, the storage circuit temporarily stores them. These pieces of information are transferred to one or more appropriate units provided in the medical image storage apparatus 10 or used for controlling these units and for controlling the entire medical image storage apparatus 10.

  The medical image information storage operation will be described with reference to FIG. FIG. 4 is a flowchart showing an example of a flow of storing medical image information in the medical image storage apparatus 10 according to the first embodiment of the present invention.

  When the X-ray CT apparatus 80 generates CT image data and associated information as medical image information, the medical image information is transmitted to the medical image storage apparatus 10 via the hospital LAN. The transmitted medical image information is received by the receiving unit 1. The storage operation can be started in response to a user instruction from the operation unit 6. However, as long as the medical image storage device 10 is ready to receive and store the medical image information, the storage operation is typically performed for the medical image information. It starts according to reception (step S1).

  The received medical image information is temporarily stored in the medical image information storage unit 21 (step S2). Then, the medical image information is transferred to the medical image information dividing unit 22 (step S3) and divided into predetermined personal information and image information. That is, the predetermined personal information is created by extracting the predetermined personal information from the medical image information. Further, image information is created using the dummy information (step S4).

  The transfer of the medical image information from the medical image information storage unit 21 to the medical image information division unit 22 means that the process proceeds to the encryption process. Once encryption is performed, the user cannot obtain medical image information unless a decryption key managed by the patient is obtained. Since the user normally needs to specify the patient for interpretation and diagnosis of an image obtained from medical image information, the transfer may not be executed immediately. Or, even if it is transferred, the dividing operation may not be executed immediately.

  FIG. 5 is a flowchart showing a first example of a flow for delaying transfer or division according to the first embodiment of the present invention. Prior to imaging with the X-ray CT apparatus 80, the user makes a normal imaging plan (step S101). When the planning is completed, the control unit 7 starts measuring time (step S102). For example, the medical image storage apparatus 10 may be notified of the completion of the plan from the apparatus where the plan is performed. The photographing operation is executed according to the plan (step S103). After shooting, it is determined whether or not a predetermined time has elapsed from the start of timing (step S104). Since it is necessary to give the user sufficient time for interpretation, the predetermined time is set to a length sufficient for the user to perform interpretation after shooting. When determining that the predetermined time has elapsed, the control unit 7 controls the image processing unit 2, and as a result, the transfer or division operation is performed (step S105).

  The transfer or transfer to the division operation may be as shown in FIG. 6 instead. FIG. 6 is a flowchart showing a second example of a flow for delaying transfer or division according to the first embodiment of the present invention. When shooting (step S111) is completed, timing is started (step S112). For example, the control unit 7 may start timing in response to reception of medical image information by the receiving unit 1. When the control unit 7 determines that a predetermined time has elapsed (step S113), the control unit 7 controls the image processing unit 2, and as a result, the transfer or division operation is performed (step S114).

  As a further alternative example of timing, it may be as shown in FIG. FIG. 7 is a flowchart showing a third example of a flow for delaying transfer or division according to Embodiment 1 of the present invention. This is the case when timekeeping may be initiated in response to hospital accounting and payments. An example of this case is a case where a patient is hospitalized. After the patient is hospitalized (step S121), an imaging operation is performed on the patient (step S122). When the patient is discharged from the hospital (step S123), the patient usually has to pay. The payment information is input to the accounting system by the accounting staff (step S124). For example, completion of the accounting process may be notified from the accounting system to the medical image storage apparatus 10. In response to the information from the accounting system, the control unit 7 starts measuring time (step S125). When the control unit 7 determines that the predetermined time has elapsed (step S126), the control unit 7 controls the image processing unit 2, and as a result, the transfer or division operation is performed (step S127).

  According to such an example, the user can have sufficient time to interpret an image based on medical image information.

  Returning to FIG. After the operation of dividing and creating the predetermined personal information and image information in step S4, the medical image information dividing unit 22 issues a personal information ID for the predetermined personal information and issues an image information ID for the image information ( Step S5). Then, the medical image information dividing unit 22 gives the personal information ID to the predetermined personal information, and creates the predetermined personal information with ID. Further, the medical image information dividing unit 22 gives the image information ID to the image information, and creates image information with ID (step S6). The predetermined personal information with ID is stored in the personal information storage unit 32 (step S7). The image information with ID is stored in the image information storage unit 31 (step S8). After the storage in steps S7 and S8, the medical image information is deleted from the medical image information storage unit 21, and the user cannot acquire the medical image information without the decryption key (step S9).

  A timing example for the user's image interpretation work has been described with reference to FIGS. Instead of applying these timing examples to the determination of the shift to the operation such as division, the time measurement may be applied to the shift to the deletion operation in step S9. For example, step S105 in FIG. 5, step S114 in FIG. 6, or step S127 in FIG. 7 may be replaced with step S131 shown in FIG. That is, the deletion operation in step S9 may be executed only after a predetermined time has elapsed due to timing.

  The medical image information dividing unit 22 also creates a table about the relationship between predetermined personal information and image information. First, a preliminary table including a personal information ID, an image information ID, and an examination date is created (step S10). Next, as shown in FIG. 3A, the medical image information dividing unit 22 creates a table by combining the unique information with the spare table (step S11).

  The table is transferred to the table encryption unit 51 and encrypted (step S12). As described above, the table encryption unit 51 is a decryption key obtained from the IC card 81 via the IC card reader 61 or a public key stored in the table encryption unit 51 or another unit of the medical image storage device 10. Is used. If the encryption key is not stored as a public key, a request for input of the encryption key may be made through a request display on the display unit 43. In response to such a request display, the user inserts the IC card 81 into the IC card reader 61. To be precise, the user may ask the patient to insert the IC card 81 into the IC card reader 61. Even if the public key is not used as the encryption key, the table may be encrypted by reading the encryption key from the IC card 81 in advance. As shown in FIG. 3B, only the personal information ID and the image information ID may be encrypted in the table encryption unit 51.

  The timing example for user image interpretation may be applied to the encryption operation in step S12 instead of FIGS. For example, step S105 in FIG. 5, step S114 in FIG. 6, or step S127 in FIG. 7 may be replaced with step S141 shown in FIG. That is, the encryption operation in step S12 may be executed only after a predetermined time has elapsed due to timing.

  Next, the output operation of medical image information will be described with reference to the flowchart shown in FIG. FIG. 10 is a flowchart showing an example of a flow of outputting medical image information in the medical image storage apparatus 10 according to the first embodiment of the present invention. Since the medical image information is deleted from the medical image storage device 10, when the user wants to obtain the medical image information, it is necessary to decrypt the encrypted table to reproduce the medical image information based on the table. . The user inputs an instruction to start obtaining medical image information via the operation unit 6. Except for the case of image interpretation that has already been completed before encryption, the user may need to ask the patient to insert the IC card 81 into the IC card reader 61 in order to obtain and output medical image information. unknown. The user first inputs the unique information of the patient from the operation unit 6. Alternatively, if the unique information is recorded on the IC card 81, the patient is requested to insert the IC card 81 into the IC card reader 61 so that the unique information can be read from the IC card 81 (step S21).

  The unique information via the operation unit 6 is transferred to the table decoding unit 53. Since the unique information included in the encrypted table is not encrypted as shown in FIG. 3B, the table decrypting unit 53 encrypts the transferred unique information stored in the table storage unit 52. Compare with the unique information contained in the table. The table decryption unit 53 searches for one or more encrypted tables that contain unique information that matches or corresponds to the transferred unique information (step S22). After the search, a decryption key input request is made through a request display on the display unit 43 (step S23). In response to insertion of the IC card 81 into the IC card reader 61, the IC card reader 61 reads the decryption key from the IC card 81, and the table decryption unit 53 receives this decryption key (step S24).

  As described above, the decryption key may be the patient's private key. The table decryption unit 53 decrypts one or more encrypted tables using the decryption key to obtain one or more tables (step S25). When only one table is obtained in step S25 (step S26), the table is transferred to the medical image information creation unit 41 (step S27). If there are two or more tables obtained in step S25, the examination dates included in each table are displayed on the display unit 43 as an examination date list (step S28). When the user designates one of the listed examination dates using the operation unit 6 (step S29), a table corresponding to the designated examination date is transferred to the medical image information creation unit 41 (step S29). S30).

  The medical image information creation unit 41 searches for the predetermined personal information with ID stored in the personal information storage unit 32 according to the personal information ID included in the transferred table, and stores the image information according to the image information ID included in the transferred table. The ID-added image information stored in the unit 31 is searched (step S31). The medical image information creation unit 41 obtains predetermined personal information to which an ID that matches or corresponds to the personal information ID included in the transferred table is obtained. Similarly, the medical image information creation unit 41 obtains image information to which an ID that matches or corresponds to the image information ID included in the transferred table is obtained. By combining the obtained personal information and image information, the medical image information creation unit 41 creates and reproduces the medical image information (step S32). The medical image information is transferred to the display unit 43 (step S33) and displayed (step S34).

  When the user needs to use image data for the purpose of studying an image obtained from the image data, image information including the image data is used. The image information is also used when the maintenance service staff needs to use the image data to refer to the image based on the image data during the maintenance service. The image information stored in the image information storage unit 31 is also used for other purposes not directly related to the medical practice for the patient associated with the image data.

  FIG. 11 is a flowchart illustrating an example of an output flow of image information in the medical image storage apparatus 10 according to the first embodiment of the present invention. When a user, maintenance service person, or other person who needs to obtain an image (hereinafter referred to as an operator) wants to obtain an image, the operator inputs a search condition from the operation unit 6 (step S41). The search condition may be one or more of the types of medical image devices, imaging conditions, examination site information, and the like. Selectable items corresponding to these search conditions may be displayed on the display unit 43 in accordance with a predetermined operation by the operation unit 6. In this case, the operator may simply select a desired condition for the displayed item.

  In response to the input or selection, the image information search unit 42 searches the image information stored in the image information storage unit 31 based on the search condition (step S42). The searched image information is transferred to the display unit 43 (step S43). The image information is displayed as an image, the type of medical imaging device, imaging conditions, imaging site information, etc., but at this time, personal information is not displayed on the display unit 43 (step S44).

  The personal information is stored separately from the image information and cannot be checked against the image information without decrypting the encrypted table. An encrypted table can only be decrypted using a decryption key. The decryption key is managed by the patient. Thus, personal information is protected from the operator when the image is sought for purposes not directly related to the medical practice for the patient associated with the image. On the other hand, when the user needs to display medical image information including personal information, the user can display the medical image information using a decryption key managed by the patient. That is, for the patient, even if the personal information included in the medical image information is by the user, the patient cannot be referred to without the decryption key managed by the patient. This can mean that personal information is referenced only in front of the patient's eyes.

  In FIG. 1, the IC card reader 61 is included in the operation unit 6. Accordingly, the user may need to borrow the IC card 81 from the patient and bring the IC card 81 to the medical image storage apparatus 10 typically provided in a place where the patient is not allowed to enter the room. Otherwise, the patient may be asked to come to the medical image storage device 10 and be asked to insert the IC card 81 into the IC card reader 61. This is not practical. As one method, use of an IC card reader 61 that is remotely connected to the main body of the medical image storage apparatus 10 via a hospital LAN or a direct communication line can be applied. For example, while the card reader 61 is provided in an examination room where a patient is usually examined by a user, the card reader 61 still operates as a part of the operation unit 61.

  For example, as shown in FIG. 12, another practical method for receiving information recorded on the IC card 81 is conceivable. The operation unit 6 includes a second receiving unit 62 instead of the IC card reader 61 shown in FIG. The second receiving unit 62 is connected to the external IC card reader 11 via the hospital LAN. The external IC card reader 11 may be directly connected to the hospital LAN, or may be connected via a medical image display device such as a workstation. The external IC card reader 11 may be provided in the examination room. The second receiving unit 62 receives the unique information, the encryption key, and / or the decryption key read from the IC card 81 by the external IC card reader 11.

  Further, in FIG. 12, the output unit 4 includes a transmission unit 44 instead of the display unit 43 shown in FIG. The medical image information created by the medical image information creation unit 41 is transmitted to the external medical image display device 12 via, for example, a hospital LAN. Similarly, the image information retrieved by the image information retrieval unit 42 is also transmitted to the external medical image display device 12. The external medical image display device 12 may be the same as the medical image display device to which the external IC card reader 11 is connected. In this case, the external medical image display device 12 requests medical image information or image information. The requested information can be received.

  The other configuration of the medical image storage apparatus 10 is the same as that of the corresponding unit shown in FIG. 1, and detailed description thereof is omitted here.

(Example 2)
In the second embodiment, an example will be described in which a table is not encrypted, but the user or operator cannot obtain the table. FIG. 13 is a block diagram illustrating an example of the configuration of the medical image storage apparatus according to the second embodiment of the present invention. As shown in the figure, the medical image storage apparatus 20 does not include a table processing unit. The operation unit 6 does not include the IC card reader 61 but includes the IC card reader / writer 63. Other configurations of the medical image storage device 20 are the same as those included in the medical image storage device 10 shown in FIG. Therefore, a detailed description of the same configuration is omitted here.

  The IC card reader / writer 63 reads unique information from the IC card 81. Further, the IC card reader / writer 63 writes the table to the IC card 81 and reads the table from the IC card 81. The IC card reader / writer 63 can correspond to “first means” and “second means”.

  FIG. 14 is a flowchart showing an example of the flow of writing a table to the IC card 81 in the second embodiment of the present invention. A table is created in the medical image information dividing unit 22 according to steps S1 to S10 shown in FIG. 4 (step S51). The table is transferred to the IC card reader / writer 63 and written to the IC card 81 (step S52). Therefore, medical image information cannot be reproduced without the IC card 81. Since the patient-related table is recorded on the IC card 81 held and managed by the patient, the table may not include unique information as shown in FIG.

  FIG. 16 is a flowchart showing an example of a flow of outputting medical image information in the medical image storage apparatus 20 according to the second embodiment of the present invention. The user inputs an instruction to start obtaining medical image information via the operation unit 6. Except for the case of image interpretation that has already been completed before encryption, in order to obtain and output medical image information, the user needs to request the patient to insert the IC card 81 into the IC card reader / writer 63. might exist. The patient inserts the IC card 81 into the IC card reader / writer 63, and the IC card reader / writer 63 reads the table from the IC card 81 (step S61). The user may not need to enter the patient's unique information. After the table read from the IC card 81 is transferred to the medical image information creation unit 41, the medical image information is displayed on the display unit 43 according to steps S26 to S34 shown in FIG. 10 (step S62).

  As a modification of the operation unit 6, the operation unit 6 may include a disk drive unit 64 as shown in FIG. The disk drive unit 64 may correspond to “first means” and “second means”. FIG. 17 is a block diagram showing a modification of the configuration of the medical image storage apparatus 20 according to the second embodiment of the present invention. The disk drive unit 64 performs writing to and reading from the magneto-optical disk (MO) 84, DVD 85, or CD-R 86. MO84, DVD85, and CD-R86 are other examples of the above-described external recording medium 8, but applicable recordable discs are not limited to these examples.

  As shown in FIG. 18, the medical image storage apparatus 20 may include a transmission / reception unit 65 without including the IC card reader / writer 63. The transmission / reception unit 65 may correspond to “first means” and “second means”. The transmission / reception unit 65 is connected to the external IC card reader / writer 13 via the hospital LAN. The external IC card reader / writer 13 may be directly connected to the hospital LAN, or may be connected via a medical image display device such as a workstation. The external IC card reader / writer 13 may be provided in the examination room. The transmission / reception unit 65 transmits the table transferred from the medical image information division unit 22 to the external IC card reader / writer 13. The transmission / reception unit 65 receives a table read from the IC card 81 by the external IC card reader / writer 13.

  Further, in FIG. 18, the output unit 4 includes a transmission unit 44 instead of the display unit 43. The medical image information created by the medical image information creation unit 41 is transmitted to the external medical image display device 12 via, for example, a hospital LAN. Similarly, the image information retrieved by the image information retrieval unit 42 is also transmitted to the external medical image display device 12. The external medical image display device 12 may be the same as the medical image display device to which the external IC card reader / writer 13 is connected. In this case, the external medical image display device 12 uses the medical image information and image information. And request information can be received.

Example 3
In the first embodiment, the case where unique information is used to distinguish patients has been described. However, the unique information may be used to distinguish users. FIG. 19 is a block diagram illustrating an example of the configuration of the medical image storage apparatus according to the third embodiment of the present invention. As shown in FIG. 19, the operation unit 6 does not include an IC card reader, but the medical image storage apparatus 30 includes a key generation unit 66, an authentication unit 67, a user ID storage unit 68, a key storage unit 69, and a key input / output unit 70. Including.

  The key generation unit 66 generates an encryption key and a decryption key for each user. The encryption key and the decryption key may be the same key. The authentication unit 67 authenticates that the user is permitted to log in to the medical image storage device 30 based on authentication information such as a user ID and password input from the operation unit 6. In response to the authentication, the user logs in to the medical image storage device 30. The user ID storage unit 68 stores the user ID authenticated by the authentication unit 67. That is, the user ID stored in the user ID storage unit 67 relates to the user currently logged in to the medical image storage device 30. The key storage unit 69 stores an encryption key and a decryption key in association with a user ID for one or more users. The key input / output unit 70 acquires the user ID stored in the user ID storage unit 68 and searches the key storage unit 69 for an encryption key or a decryption key corresponding to the user ID. The key input / output unit 70 outputs an encryption key or a decryption key to the control unit 7. Thereby, the encryption key is transferred to the table encryption unit 51 when encryption is requested, and the decryption key is transferred to the table decryption unit 53 when decryption is requested.

  The other configuration of the medical image storage apparatus 30 is the same as that of the corresponding unit shown in FIG. 1, and detailed description thereof is omitted here.

  In the present embodiment, as shown in FIG. 20, the unique information included in the table is the user ID. As in the case of FIG. 3B, when the table is encrypted with the encryption key in the table encryption unit 51, this user ID is not encrypted.

  Next, the output operation of medical image information will be described with reference to the flowchart shown in FIG. FIG. 21 is a flowchart showing an example of a flow of outputting medical image information in the medical image storage apparatus 30 according to the third embodiment of the present invention.

  A user who needs to obtain medical image information about his / her patient inputs authentication information from the operation unit 6 (step S71). The authentication information is transferred to the authentication unit 67 and authenticated (step S72). If the authentication is successful (step S73), the user ID of the user corresponding to the authentication information or the user ID included in the authentication information is stored in the user ID storage unit 68 as the user ID of the current user (step S74). The user is allowed to log in to the medical image storage device 30 and starts using the medical image storage device 30.

  The user can make a request for obtaining medical image information via the operation unit 6 (step S75). In response to this request, the control unit 7 acquires the user ID from the user ID storage unit 68 (step S76), and transfers the user ID to the table decryption unit 53. The table decryption unit 53 searches for one or more encrypted tables including a user ID that matches the transferred user ID (step S77). Furthermore, the control unit 7 controls the key input / output unit 70 to search the key storage unit 69 for a decryption key corresponding to the user ID stored in the user ID storage unit 68 (step S78). After the search, the decryption key is transferred to the table decryption unit 53, and the medical image information is displayed on the display unit 43 according to steps S25 to S34 shown in FIG. 10 (step S79).

  According to the third embodiment, the user can obtain medical image information only for his / her patient. Accordingly, the personal information of the patient included in the medical image information is not necessarily referred to in front of the patient's eyes, but the patient can refer to his / her medical image information only by the user or at least the user's It can be guaranteed that it will not be referenced without intervention.

  The authentication information and the request may be input from an external input unit as shown in FIG. The operation unit 6 includes a second receiving unit 62. The second receiving unit 62 is connected to the external input unit 14 via, for example, a hospital LAN. The external input unit 14 may be directly connected to the hospital LAN, or may be connected as a part of a medical image display device such as a workstation. The external input unit 14 may be provided in the examination room. The second receiving unit 62 receives authentication information and requests input from the external input unit 14.

  Further, in FIG. 22, the output unit 4 includes a transmission unit 44 instead of the display unit 43. The medical image information created by the medical image information creation unit 41 is transmitted to the external medical image display device 12 via, for example, a hospital LAN. Similarly, the image information retrieved by the image information retrieval unit 42 is also transmitted to the external medical image display device 12. The external medical image display device 12 may be the same as the medical image display device equipped with the external input unit 14. In this case, the external medical image display device 12 requests medical image information and image information, and requests Information can be received.

  The other configuration of the medical image storage device 30 is the same as the corresponding unit shown in FIG. 19, and detailed description thereof is omitted here.

  In Example 3, the user ID was used as unique information. As an alternative example, information that distinguishes a department (clinical department) such as internal medicine or surgery provided in a hospital may be unique information.

Example 4
In Examples 1 to 3, medical image information is received from an X-ray CT apparatus, and is divided into personal information and image information by a medical image information dividing unit. In the fourth embodiment, the personal information is acquired separately from the medical image information, and there is no need to divide the medical image information.

  FIG. 23 is a block diagram showing an example of the configuration of a medical image storage apparatus according to Embodiment 4 of the present invention. As shown in the figure, the medical image storage device 40 is connected to a hospital information system and / or radiation information system (hereinafter referred to as HIS / RIS) 15 via, for example, a hospital LAN. The medical image storage device 40 may be further connected to one or more of the examination selection unit 16, the reservation information input unit 17, and the examination information input unit 18. The examination selection unit 16, the reservation information input unit 17, and the examination information input unit 18 may be provided in one or two or more external devices connected to the receiving unit 1 via, for example, a hospital LAN. The image processing unit 2 does not include a medical image information division unit, but includes a reservation information storage unit 23, a personal information creation storage unit 24, and a table creation unit 25 in addition to the medical image information storage unit 21.

  The receiving unit 1 receives medical image information from the X-ray CT apparatus 80 as described in the first embodiment. The received medical image information is transferred to the medical image information storage unit 21. The medical image information storage unit 21 removes predetermined personal information included in the medical image information according to a predetermined promise. Thereby, image information is created. Instead of the removed predetermined personal information, the image information may include dummy information.

  The receiving unit 1 further receives examination reservation information from the HIS / RIS 15. Typically, examination reservation information relating to an image examination to be performed is input to the HIS / RIS 15 to make a reservation for the image examination. The examination reservation information usually includes examinations to be performed in the future and various kinds of information about the patient to be examined. That is, the patient's personal information may also be included. The reservation information storage unit 23 stores examination reservation information received by the receiving unit 1. The personal information creation storage unit 24 extracts and creates predetermined personal information from the examination reservation information stored in the reservation information storage unit 23 according to a predetermined promise. The created predetermined personal information is stored in the personal information creation storage unit 24.

  The receiving unit 1 may receive examination selection information from the examination selection unit 16. The examination selection information is transferred to the reservation information storage unit 23, and the personal information creation storage unit 24 performs the above-described operation on the examination reservation information selected based on the examination selection information. The receiving unit 1 may further receive examination reservation information from the reservation information input unit 17. The examination reservation information received from the reservation information input unit 17 is stored in the reservation information storage unit 23 and can be handled in the same manner as the examination reservation information received from the HIS / RIS 15.

  The examination information received from the examination information input unit 18 is transferred to the personal information creation / storage unit 24. As described above, the personal information creation storage unit 24 extracts predetermined personal information from the examination reservation information, but in addition to the above-described extraction, the predetermined personal information may be extracted from the examination information received from the examination information input unit 18 as necessary. Instead, it may be extracted. One or more of examination reservation information, examination selection information, and examination information may correspond to “examination related information”.

  The table creation unit 25 issues a personal information ID and an image information ID. The personal information ID is given to predetermined personal information stored in the personal information creation / storage unit 24. The image information ID is given to the image information stored in the medical image information storage unit 21. The table creation unit 25 creates a table about the relationship between the predetermined personal information and the image information by the same method as described in the first embodiment.

  The other configuration of the medical image storage apparatus 40 is the same as that of the corresponding unit shown in FIG. 1, and detailed description thereof is omitted here.

  The storing operation of the predetermined personal information and image information will be described with reference to the flowchart shown in FIG. FIG. 24 is a flowchart showing an example of a flow of storing medical image information in the medical image storage apparatus 40 according to the fourth embodiment of the present invention.

  The storing operation can also be started in the same manner as Step 1 in FIG. However, the examination reservation information can be received from the HIS / RIS 15 by the receiving unit 1 before receiving the medical image information from the X-ray CT apparatus 80. When the receiving unit 1 receives examination reservation information from the HIS / RIS 15 and / or from the reservation information input unit 17, the examination reservation information is transferred to the reservation information storage unit 23. For example, the examination reservation information is stored in the examination information storage unit 23 until the reserved examination is completed or until the medical image information is received by the receiving unit 1 (step S81).

  When the receiving unit 1 receives medical image information from the X-ray CT apparatus 80, the medical image information is transferred to and stored in the medical image information storage unit 21 (step S82).

  The examination reservation information is transferred to the personal information creation storage unit 24 in response to, for example, medical image information received by the receiving unit 1. When the receiving unit 1 receives the inspection information from the inspection information input unit 18, the inspection information is also stored in the personal information creation storage unit 24. The personal information creation storage unit 24 extracts predetermined personal information that is included in the inspection reservation information and the inspection information and is appropriate to be combined with the image information. Predetermined personal information is created as a result of this extraction (step S83) and stored in the personal information creation storage unit 24 (step S84).

  In the medical image information storage unit 21, predetermined personal information is removed from the medical image information to create image information (step S85). The created image information is stored in the medical image information storage unit 21 (step S86).

  The table is created by the table creation unit 25, and the personal information ID and the image information ID are issued by the table creation unit 25 as described above, but the table is created in the same manner as shown in steps S5 to S13 in FIG. The encrypted medical image information cannot be obtained (step S87).

  The output operation of the medical image information can be achieved by the same method as shown in FIG.

(Example 5)
In the fifth embodiment, the patient's personal information is protected because the medical image information of the patient can be acquired only by one or more limited users or at least without the operation of the limited users. Plan.

  FIG. 25 is a block diagram showing an example of the configuration of a medical image storage apparatus according to Embodiment 5 of the present invention. The medical image storage device 50 does not include a table processing unit, but includes an authentication unit 67, a user ID storage unit 68, a table storage unit 71, a table output unit 72, a user authority storage unit 73, and a table use permission determination unit 74.

  The authentication unit 67 and the user ID storage unit 68 operate in the same manner as described in the third embodiment. The table storage unit 71 stores the table created in the medical image information division unit 22. The table output unit 72 outputs the table stored in the table storage unit 71 to the medical image information creation unit 41 in accordance with the table use permission determination unit 74. The user authority storage unit 73 stores a second table indicating whether the user is permitted to use the table. For example, the second table shows that users A and C (ie user IDs A and C) are allowed to use the table for a specific patient (ie specific unique information) but user B (ie user ID B) is Indicates that it is not allowed. The second table contains such information for one or more patients.

  Further, instead of such information, the user authority storage unit 73 may store a second table indicating which unique information the user is allowed to use the table. For example, the second table allows user A (ie, user ID A) to be allowed to use tables relating to patients A, B, and C (ie, unique information A, B, and C). B indicates that (i.e. user ID B) is allowed to use the table for patients A and B (i.e. unique information A and B). The second table may also indicate that user C (ie, user ID C) is not allowed to use any table, and that user C is not an authorized user for any table. For the purpose of meaning, information about the user C (that is, the user ID C) may not be included.

  The table use permission determination unit 74 determines whether or not the user who has logged into the medical image storage device 50 is permitted to use one or more tables based on the second table stored in the user authority storage unit 73. judge.

  The other configuration of the medical image storage apparatus 50 is the same as that of the corresponding unit shown in FIG. 1, and detailed description thereof is omitted here.

  FIG. 26 is a flowchart showing an example of the flow of storing medical image information in the medical image storage apparatus 50 according to the fifth embodiment of the present invention. In the medical image information storage operation, a table is created according to steps S1 to S10 shown in FIG. 4 (step S88). The table is stored in the table storage unit 71 (step S89). This table cannot be obtained by the user authority storage unit 73, the table use permission determination unit 74, and the table output unit 72. That is, the user authority storage unit 73, the table use permission determination unit 74, and the table output unit 72 can collectively correspond to “first means” and “second means”.

  The output operation of medical image information will be described with reference to the flowchart shown in FIG. FIG. 27 is a flowchart showing an example of the flow of outputting medical image information in the medical image storage apparatus 50 according to the fifth embodiment of the present invention.

  A user who needs to obtain medical image information for a specific patient inputs authentication information from the operation unit 6 (step S91). The authentication information is transferred to the authentication unit 67 and authenticated (step S92). If the authentication is successful (step S93), the user ID of the user corresponding to the authentication information or the user ID included in the authentication information is stored in the user ID storage unit 68 as the user ID of the current user (step S94). The user is allowed to log in to the medical image storage device 50 and starts using the medical image storage device 50.

  The user inputs unique information regarding a specific patient from the operation unit 6 (step S95). The unique information is transferred to the table use permission determination unit 74. The table use permission determination unit 74 acquires the current user ID from the user ID storage unit 68, and searches the user authority storage unit 73 for information on the second table related to the obtained user ID, for example (step S96).

  The table use permission determination unit 74 determines whether or not it is permitted to use the table for the unique information to which the current user ID has been transferred (step S97). If the table use permission determination unit 74 determines that the current user ID is permitted to use the table for the transferred unique information, the table output unit 72 uses one or more tables related to the unique information for medical use. It outputs to the image information creation unit 41 (step S98). The medical image information is displayed according to steps S26 to S34 shown in FIG. 10 (step S99).

  If the table use permission determination unit 74 determines in step S97 that the current user ID is not permitted to use the table for the transferred unique information, the control unit 7 controls the output unit 4 to display the display unit. 43 displays error information indicating that the user is not permitted to obtain medical image information of the patient related to the input unique information (step S100).

(Example 6)
The features of the medical image storage device described in the first to fifth embodiments may be implemented in the medical image device described in the first embodiment. Although two examples will be described below, any embodiment of the above embodiments or a combination between any embodiments can be applied to a medical image apparatus.

  FIG. 28 is a block diagram showing an example of the configuration of a medical image apparatus according to Embodiment 6 of the present invention. The medical image device 60 includes an imaging unit 75, an image processing unit 2, a storage unit 3, an output unit 4, a table processing unit 5, an operation unit 6, and a control unit 7. The external recording medium 8 is used for the operation unit 6.

  When the medical image apparatus 60 is an X-ray CT apparatus, the imaging unit 75 includes, for example, an X-ray tube, an X-ray detector, a data acquisition system, a reconstruction unit, an information creation unit, and the like. The X-ray tube generates X-rays for the patient, and the X-ray detector detects X-ray information resulting from the generated X-ray results. The detected X-ray information is collected by a data collection system and reconstructed to generate image data by a reconstruction unit. The information creation unit creates medical image information by combining the image data and the accompanying information. The incidental information is obtained from the operation unit 6 or from an external device (not shown) via, for example, a hospital LAN. The medical image information is transferred to the image processing unit 2. Since the image processing unit 2, the storage unit 3, the output unit 4, the table processing unit 5, the operation unit 6, and the control unit 7 can operate in the same manner as the corresponding units shown in FIG. 1, detailed description thereof is omitted here.

  A modification of the medical image device 60 will be described with reference to FIG. FIG. 29 is a block diagram showing a modification of the configuration of the medical image device 60 according to the sixth embodiment of the present invention. As shown in FIG. 29, the medical image apparatus 60 includes a receiving unit 1 connected to the HIS / RIS 15 via, for example, a hospital LAN. The image processing unit 2 may not include the medical image information division unit 22, but includes a reservation information storage unit 23, a personal information creation storage unit 24, and a table creation unit 25 in addition to the medical image information storage unit 21.

  The receiving unit 1 receives examination reservation information from the HIS / RIS 15 as in the fourth embodiment, and the received examination reservation information is stored in the reservation information storage unit 23 as described in the fourth embodiment. Further, as described in the fourth embodiment, the personal information creation storage unit 24 extracts predetermined personal information from the examination reservation information stored in the examination information storage unit 23, creates it, and stores it. The table creation unit 25 operates in the manner described in the fourth embodiment.

  The operation unit 6 includes an inspection selection unit 76, a reservation information input unit 77, and an inspection information input unit 78 in addition to the IC card reader 61. Exam selection unit 76 may be used to select one exam from the multiple scheduled exams listed. With this selection, the medical image device 60 performs imaging for the selected examination. The personal information creation storage unit 24 performs the above-described operation on the examination reservation information relating to the selected examination. The reservation information input unit 77 is provided for inputting examination reservation information stored in the reservation information storage unit 23, but may not be frequently used. The inspection information input unit 78 can be used to input inspection information. The inspection information input from the inspection information input unit 78 is transferred to the personal information creation storage unit 24. As described above, the personal information creation storage unit 24 extracts predetermined personal information from the examination reservation information, but may extract predetermined personal information from the examination information transferred as necessary or in place of the above.

  The photographing unit 75 operates as described with reference to FIG. However, the medical image information generated from the imaging unit 75 does not include personal information. Therefore, the medical image information storage unit 21 stores medical image information as image information.

  Other configurations of the medical image device 60 are the same as the corresponding units shown in FIG. 28, and detailed description thereof is omitted here. In FIG. 29, connection between the control unit 7 and other units is omitted.

(Example 7)
FIG. 30 is a block diagram showing an example of a medical image system according to Embodiment 7 of the present invention. The medical image system includes a medical image device 310, a medical image storage device 320, and a medical image display device 330, which are connected to each other via a hospital LAN. The medical image display device 330 may be connected to the IC card reader 340. The IC card reader 340 reads information recorded on the IC card 350.

  The medical image device 310 may be any type of medical image device as described in the first embodiment. The medical image device 310 is not limited to the following, but includes the imaging 311, table creation 312, table encryption 313, and encrypted table, image information with ID, and transmission of predetermined personal information with ID 314. (Function).

  The imaging function 311 can be executed in a unit such as the imaging unit 75, for example. The table creation function 312 can be executed in a unit such as the medical image information division unit 22. The table encryption function 313 may be performed in a unit such as the table encryption unit 51, for example. The transmission function 314 can be executed, for example, in a unit such as the transmission unit 44 in such a case if the transmission unit 44 is provided in the medical image apparatus 60 in the sixth embodiment.

  The medical image storage device 320 is, for example, a filing server, and is not limited to the following, but includes an encryption key storage 321, an encrypted table, ID-added image information, and ID-added predetermined personal information storage 322, It has features (functions) of table decoding 323, medical image information creation 324, image information search 325, and medical image information or image information transmission 326.

  The encryption key storage function 321 may be executed in a unit such as the control unit 7, for example. The storage function 322 may be executed in a unit such as the storage unit 3 or the table storage unit 52, for example. The table decryption function 323 may be performed in a unit such as the table decryption unit 53, for example. The medical image information creation function 324 can be executed in a unit such as the medical image information creation unit 41. The image information search function 325 may be executed in a unit such as the image information search unit 42, for example. Transmit function 326 may be performed in a unit such as, for example, transmit unit 44.

  The medical image display device 330 is, for example, a workstation, and is used for image interpretation in an interpretation room, image observation in an examination room, and image research in a conference room. The medical image display device 330 is not limited to the following, but includes features (functions) of a decryption key transmission 331, a medical image information request 332, an image information request 333, and a medical image information or image information display 334. ). The decryption key transmission function 331 can be executed, for example, in the transmission / reception unit. The medical image information request function 332 and the image information request function 333 may be executed in the input unit and the transmission / reception unit, for example. The display function 334 can be executed in the display unit, for example.

  The IC card 350 includes a decryption key 351 corresponding to the encryption key. When the encryption key stored in the medical image storage device 320 is the patient's public key, the decryption key 351 is a secret key corresponding to the public key. The IC card 350 can be held and managed by the patient.

  An exchange between the medical image device 310, the medical image storage device 320, the medical image display device 330, the IC card reader 340, and the IC card 350 will be briefly described below.

  When medical image information is generated by the photographing function 311, predetermined personal information and image information are created based on the medical image information. In addition, a table about the relationship between the predetermined personal information and the image information is created by the table creation function 312. Each of the predetermined personal information and image information is assigned an ID, and the assigned ID is included in the table. This table is encrypted by the table encryption function 313 using the encryption key. The encryption key can be obtained from the medical image storage device 320. The encrypted table is transmitted to the medical image storage device 320 by the transmission function 314. Also, the predetermined personal information with ID and the image information with ID are transmitted to the medical image storage device 320 by the transmission function 314.

  The transmitted encryption table, predetermined personal information with ID, and image information with ID are stored in the medical image storage device 320 by the storage function 322.

  When the user wants to obtain medical image information of a patient, the user requests medical image information, and this request is transmitted from the medical image display device 330 to the medical image storage device 320 by the medical image information request function 332. The user also asks the patient to insert the IC card 350 into the IC card reader 340. In response to the insertion, the IC card reader 340 reads the decryption key 351 from the IC card 350. The decryption key 351 is provided to the medical image display device 330 and is transmitted to the medical image storage device 320 by the decryption key transmission function 331. The medical image storage apparatus 320 decrypts the encrypted table using the decryption key 351 by the table decryption function 323. Based on the decrypted table, the medical image information is created and reproduced by the medical image information creation function 324. The medical image information is transmitted to the medical image display device 330 by the transmission function 326. In the medical image display device 330, medical image information is displayed by the display function 324.

  When the operator requests image information by the image information request function 333, the request is transmitted from the medical image display device 330 to the medical image storage device 320 by the image information request function 333. In the medical image storage apparatus 320, image information is searched by the image information search function 325. The image information is transmitted to the medical image display device 330 by the transmission function 326. In the medical image display device 330, image information is displayed by the display function 324.

  As described above, encryption and decryption are not necessarily performed by the same device. Also, the image request and display need not be performed in the device that encrypts and / or decrypts the table. Features (functions) described in one or more of the above-described embodiments may be executed in different apparatuses and may be achieved in a predetermined medical image system as a whole. The seventh embodiment described with reference to FIG. 30 is merely an example of such a system.

  The medical image system may be a system as shown in FIG. FIG. 31 is a block diagram showing another example of the medical image system according to the seventh embodiment of the present invention. As shown in the figure, the medical image storage apparatus 320 may include an encryption table transmission function 327 and a decryption table reception function 328 instead of the table encryption function 323. Further, the medical image display device 330 may include a table encryption function 335 and a decryption table transmission function 336 instead of the encryption key transmission function 331.

  In response to a request for medical image information by the medical image information request function 332 in the medical image display device 330, an encrypted table is transmitted from the medical image storage device 320 by the encryption table transmission function 327. . The decryption key 351 read by the IC card reader 340 is provided to the medical image display device 330, and the encrypted table is decrypted by the table decryption function 335 using the decryption key 351. The combined table is transmitted to the medical image storage device 320 by the combined table transmission function 336. The decrypted table is received by the decryption table reception function 328. Based on the decrypted table, the medical image information is created and reproduced by the medical image information creation function 324. The medical image information is transmitted to the medical image display device 330 by the transmission function 326. In the medical image display device 330, medical image information is displayed by the display function 324.

  When the decrypted table is transmitted from the medical image display device 330 to the medical image storage device 320, the decrypted table is, for example, SSL (Secure Socket Layer) or IP Sec. It may be transmitted via a network protected by the above.

  In the above-described embodiments in which the IC card 81 is used, the IC card 81 functions as a part of one of the devices 10 to 60 and 330, and as shown in FIG. 32, the memory 810 and the decoding function (unit ) 820 may be included. The memory 810 stores the decryption key. When the IC card 81 receives the encrypted table, the table is decrypted by the decryption function 820. The decrypted table is provided to the device. According to this example, since the decryption key itself is not transmitted via the network, it is protected. The decrypted table is, for example, SSL (Secure Socket Layer) or IP Sec. It may be sent to the apparatus via a network protected by the above.

  Furthermore, one or more of the first to seventh embodiments may be combined as another embodiment.

  The embodiments of the present invention described above are merely examples described for facilitating the understanding of the present invention, and are not intended to limit the present invention. Accordingly, each component and other elements disclosed in the embodiments of the present invention described above can be changed in design or modified to equivalents thereof without departing from the spirit of the present invention. Furthermore, any possible combinations of the same components and other elements are included in the scope of the present invention as long as the same effects as those obtained in the embodiment of the present invention described above can be obtained.

1 is a block diagram showing an example of the configuration of a medical image storage device according to Embodiment 1 of the present invention. FIG. 4 is a diagram illustrating an example of division of medical image information according to the first embodiment of the invention. FIG. 3 is a diagram illustrating an example of a table according to the first embodiment of the present invention. 3 is a flowchart showing an example of a flow of storing medical image information in the medical image storage apparatus according to the first embodiment of the present invention. 5 is a flowchart showing a first example of a flow for delaying transfer or division according to Embodiment 1 of the present invention. 9 is a flowchart showing a second example of a flow for delaying transfer or division according to Embodiment 1 of the present invention. 9 is a flowchart showing a third example of a flow for delaying transfer or division according to Embodiment 1 of the present invention. The figure which shows the example of the step which replaces the predetermined | prescribed step shown in FIG. The figure which shows another example of the step which replaces the predetermined | prescribed step shown in FIG. 5 is a flowchart illustrating an example of a flow of outputting medical image information in the medical image storage apparatus according to the first embodiment of the present invention. 5 is a flowchart illustrating an example of a flow of outputting image information in the medical image storage apparatus according to the first embodiment of the present invention. FIG. 4 is a block diagram illustrating an example of another configuration of the medical image storage apparatus according to the first embodiment of the present invention. FIG. 6 is a block diagram illustrating an example of a configuration of a medical image storage device according to a second embodiment of the invention. 9 is a flowchart illustrating an example of a flow of writing a table to an IC card according to the second embodiment of the present invention. The figure which shows the example of the table recorded on the IC card in Example 2 of this invention. 9 is a flowchart illustrating an example of a flow of outputting medical image information in the medical image storage apparatus according to the second embodiment of the present invention. FIG. 10 is a block diagram showing a modification of the configuration of the medical image storage apparatus according to the second embodiment of the present invention. The block diagram which shows another modification of the structure of the medical image storage apparatus which concerns on Example 2 of this invention. FIG. 9 is a block diagram illustrating an example of a configuration of a medical image storage device according to a third embodiment of the invention. The figure which shows the example of the table which concerns on Example 3 of this invention. 10 is a flowchart illustrating an example of a flow of outputting medical image information in the medical image storage apparatus according to the third embodiment of the present invention. FIG. 10 is a block diagram showing another example of the configuration of the medical image storage apparatus according to the third embodiment of the present invention. FIG. 9 is a block diagram illustrating an example of a configuration of a medical image storage device according to a fourth embodiment of the invention. 10 is a flowchart illustrating an example of a flow of storing medical image information in the medical image storage apparatus according to the fourth embodiment of the present invention. FIG. 10 is a block diagram illustrating an example of a configuration of a medical image storage apparatus according to a fifth embodiment of the invention. 10 is a flowchart illustrating an example of a flow of storing medical image information in the medical image storage apparatus according to the fifth embodiment of the present invention. 10 is a flowchart illustrating an example of a flow of outputting medical image information in the medical image storage apparatus according to the fifth embodiment of the present invention. FIG. 10 is a block diagram illustrating an example of a configuration of a medical image apparatus according to a sixth embodiment of the invention. FIG. 10 is a block diagram illustrating a modified example of the configuration of the medical image apparatus according to the sixth embodiment of the invention. FIG. 10 is a block diagram illustrating an example of a medical image system according to a seventh embodiment of the invention. FIG. 10 is a block diagram illustrating another example of a medical image system according to a seventh embodiment of the invention. The figure which shows the example of the IC card which concerns on an Example.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Reception unit 2 ... Medical image information processing unit 3 ... Storage unit 4 ... Medical image information output unit 5 ... Table processing unit 6 ... Operation unit 7 ... Control unit 8 ... External recording medium 10 ... Medical image storage device 21 ... Medical image information storage unit 22 ... Medical image information division unit 31 ... Image information storage unit 32 ... Personal information storage unit 41 ..Image information search unit 42 ... Medical image information creation unit 43 ... Display unit 51 ... Table encryption unit 52 ... Table storage unit 53 ... Table decryption unit 61 ... IC card Reader 81 ... IC card

Claims (37)

Receiving means for receiving medical image information obtained from the medical image device;
A table creating means for creating a table about a relationship between the predetermined personal information related to the medical image information and the image information generated by removing the predetermined personal information from the medical image information;
First storage means for storing the predetermined personal information;
Second storage means for storing the image information;
First means for making the table unavailable;
A second means for reacquiring the table;
Output means for reading out the predetermined personal information from the first storage means and reading out the image information from the second storage means based on the re-acquired table, and generating and outputting the medical image information. A medical image storage device characterized by the above.   The first means is an encryption means for encrypting the table, and the second means is a decryption means for decrypting the encrypted table. Medical image storage device.   A second receiving means for receiving a private key of the patient, wherein the encryption means further stores a public key corresponding to the private key, and the decryption means stores the encrypted table with the private key. The medical image storage apparatus according to claim 2, wherein the medical image storage apparatus performs decoding.   The medical image storage apparatus according to claim 3, wherein the secret key is managed by the patient.   4. The medical image storage apparatus according to claim 3, wherein the second receiving unit receives the secret key read from the external recording medium by the external information reading unit via a network.   4. The medical image storage apparatus according to claim 3, wherein the second receiving unit is an information reading unit that reads the secret key recorded on an external recording medium.   The medical image storage apparatus according to claim 6, wherein the external recording medium is an IC card.   And a second receiving means for receiving an encryption key and a decryption key, wherein the encryption means encrypts the table using an encryption key, and the decryption means uses the decryption key to encrypt the encryption. The medical image storage apparatus according to claim 2, wherein the converted table is decoded.   The medical image storage apparatus according to claim 8, wherein the encryption key and the decryption key are managed by a patient.   9. The medical image storage apparatus according to claim 8, wherein the second receiving unit receives an encryption key and a decryption key read from an external recording medium by an external information reading unit via a network.   9. The medical image storage apparatus according to claim 8, wherein the second receiving unit is an information reading unit that reads an encryption key and a decryption key recorded on an external recording medium.   The first storage means stores the predetermined personal information together with first identification information and the image information together with second identification information, and the table includes the first identification information and the second identification information. The medical image storage apparatus according to claim 1.   The first means is an encryption means for encrypting the table, and the second means is a decryption means for decrypting the encrypted table. Medical image storage device.   13. The medical image storage apparatus according to claim 12, wherein the table is combined with unique information and examination date information related to the medical image information.   The apparatus further comprises second receiving means for receiving second unique information about the patient recorded on the external recording medium, wherein the second means compares the second unique information with the unique information, and both are predetermined. The medical image archiving apparatus according to claim 14, wherein the table is reacquired when the correspondence relationship is satisfied.   The apparatus further comprises second receiving means for receiving second unique information about the user of the apparatus, wherein the second means compares the second unique information with the unique information, and the two correspond to a predetermined correspondence relationship. The medical image storage apparatus according to claim 14, wherein the table is acquired again at a certain time.   The apparatus further comprises second receiving means for receiving second unique information about the medical department, wherein the second means compares the second unique information with the unique information and the two are in a predetermined correspondence relationship. The medical image storage apparatus according to claim 14, wherein the table is acquired again.   The first means is information writing means for writing the table to an external recording medium, and the second means is information reading means for reading the table from the external recording medium. The medical image storage apparatus described.   19. The medical image storage apparatus according to claim 18, wherein the external recording medium is an IC card, the information writing unit is an IC card writer, and the information reading unit is an IC card reader.   19. The medical image storage apparatus according to claim 18, wherein the external recording medium is a recording disk, and the information writing unit and the information reading unit operate as a disk drive unit.   The first means transmits the table to an external information writing unit that writes the table to an external recording medium, and the second means receives the table from an external information reading unit that reads the table from the external recording medium. The medical image storage apparatus according to claim 1, wherein:   The medical image storage apparatus according to claim 1, wherein the table creating unit divides the medical image information into the predetermined personal information and the image information.   The medical image storage apparatus according to claim 1, wherein the receiving unit receives examination-related information related to imaging by the medical image apparatus and creates the predetermined personal information based on the examination-related information.   24. The medical image storage apparatus according to claim 23, wherein at least a part of the examination related information is received from an external information system via a network.   The first means and the second means operate as a table use permission judging means including a second table indicating whether a user of the apparatus is permitted to use the table. The medical image storage apparatus according to 1.   The first means and the second means include a second table that indicates which unique information of the unique information combined with the table is permitted for the user of the apparatus to use the table. The medical image storage apparatus according to claim 1, wherein the medical image storage apparatus operates as a table use permission determination unit.   The medical image storage apparatus according to claim 1, wherein the image information includes dummy information instead of the predetermined personal information.   The medical image storage apparatus according to claim 1, wherein the first unit does not operate for a predetermined period after imaging by the medical image apparatus.   2. The medical image storage apparatus according to claim 1, wherein the output unit outputs the image information stored in the first storage unit regardless of re-acquisition of the table in the second unit. .   The image information includes at least one condition information and image data of the type of the medical image apparatus, imaging conditions, and imaging area of the patient, and the output means searches the image information based on the condition information, and 30. The medical image storage apparatus according to claim 29, wherein the medical image storage apparatus outputs image data. Photographing means for generating medical image information;
Table creating means for creating a table about a relationship between predetermined personal information related to the medical image information and image information based on the medical image information;
First storage means for storing the predetermined personal information;
Second storage means for storing the image information;
First means for making the table unavailable;
A second means for reacquiring the table;
Output means for reading out the predetermined personal information from the first storage means and reading out the image information from the second storage means based on the re-acquired table and generating and outputting the medical image information. A medical image apparatus characterized by the above. Including a medical image device and a medical image storage device,
These devices have imaging means for generating medical image information,
Table creating means for creating a table about a relationship between predetermined personal information related to the medical image information and image information based on the medical image information;
First storage means for storing the predetermined personal information;
Second storage means for storing the image information;
First means for making the table unavailable;
A second means for reacquiring the table;
Output means for reading out the predetermined personal information from the first storage means and reading out the image information from the second storage means based on the re-acquired table and generating and outputting the medical image information. A medical image system characterized by Receiving medical image information obtained from a medical imaging device;
Creating a table about the relationship between the predetermined personal information relating to the medical image information and the image information created by removing the predetermined personal information from the medical image information;
Storing the predetermined personal information;
Storing the image information;
The medical image information storage method, wherein the table is not available. Reacquire the table,
The predetermined personal information is read from the first storage means and the image information is read from the second storage means based on the reacquired table,
Creating the medical image information,
The medical image information storage method according to claim 33, wherein the medical image information is output. Generate medical image information,
Creating a table about the relationship between the predetermined personal information related to the medical image information and the image information based on the medical image information;
Storing the predetermined personal information;
Storing the image information;
The medical image information storage method, wherein the table is not available. Reacquire the table,
The predetermined personal information is read from the first storage means and the image information is read from the second storage means based on the reacquired table,
Creating the medical image information,
36. The medical image information storage method according to claim 35, wherein the medical image information is output. The first means is an encryption means for encrypting the table, and the second means is an IC card including a decryption means for decrypting the encrypted table. The medical image storage apparatus according to 1.

Images