JP2007229116A - Health information collecting system and health monitor device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a healthy information collecting system safely accumulating the health conditions of many and unspecified users measured by a health monitor device while keeping reliability. <P>SOLUTION: The health monitor device 200 has a health information measuring section 201 measuring the user's health information, a biometric information input section 202 inputting the biometric information of the user, an identification ID generating section 203 generating an identification ID from the biometric information, a health information coding section 204 coding the health information using the biometric information as a key, a health information registering section 205 registering the identification ID and the coded health information in a database system 300, a health information searching section 206 searching the coded health information of the database system 300 using the identification ID, a health information decoding section 207 decoding the searched health information using the biometric information as a key, and a health information display section 208 displaying the decrypted health information to the user. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a health information collection system that collects user health information using biometric information, which is a biological characteristic unique to the user, such as a fingerprint, a palm print, an iris, and a voice print, and a health monitor device used therefor It is.

Conventionally, when a person performs self-management of his / her health, health information is measured using a so-called health monitor device such as a weight scale or a blood pressure monitor installed at home or the like.
Many of these health monitoring devices can measure the health information of an unspecified number of users, but do not support the subsequent recording of health information. When a plurality of family members perform their own health management at home, or when performing health management in a hospital or a nursing home, it is necessary to record health information separately for each person. Therefore, a person using the health monitor device (hereinafter referred to as a user) records health information with his / her hand or performs an operation for identifying the user (for example, pressing a button assigned to the user). There was a need to do.
However, with such a method, there is a possibility that the health information is registered by mistake (the measurement value is wrong, the operation of assigning the measurement value to the user is wrong), and the reliability of the accumulated health information cannot be maintained. It was.
Therefore, in the conventional system, many techniques for easily identifying an individual by using biometric information, an IC card, or the like have been proposed. For example, a system for simultaneously measuring health information and specifying a user using biometric information such as a fingerprint or a vein network has been proposed. (See Patent Document 1.)

JP 2003-235829 A (pages 3 to 11, FIG. 1)

However, in order to use the system using the biometric information of Patent Document 1, the user's own personal information and biometric information must be registered in the system in advance, and this initial registration is not easy. In addition, there is a high possibility that personal anonymity (privacy) cannot be ensured, for example, a person inside the system leaks personal information.
Further, in the method using an IC card or the like, it is necessary to carry the card and there is a possibility of impersonation due to loss, theft, etc., so that convenience and reliability cannot be pursued.
In this way, when an unspecified number of people use one health monitor device, the recording of health information and the initial setting of the user are complicated, the reliability of health information and personal privacy cannot be maintained. There was a problem of doing.

  The present invention has been made to solve the above-described problems, and collects health information that accumulates health information of an unspecified number of users measured by a health monitor device while maintaining safety and reliability. It aims at obtaining the system and the health monitor apparatus used for this.

In the health information collection system according to the present invention, there is provided a health monitor device that measures user health information, and a database system that is connected to the health monitor device via a network and collects health information measured by the health monitor device. Prepared,
The health monitoring device identifies a user from a health information measurement unit that measures user health information, a biometric information input unit that inputs user biometric information, and biometric information that is input from the biometric information input unit. An identification ID generating unit that generates an identification ID, a health information encryption unit that encrypts the health information measured by the health information measurement unit using biometric information as a key, and an identification ID generated by the identification ID generation unit And a health information registration unit that registers the health information encrypted by the health information encryption unit in the database system.

As described above, the present invention includes a health monitor device that measures user health information, and a database system that is connected to the health monitor device via a network and collects health information measured by the health monitor device. ,
The health monitoring device identifies a user from a health information measurement unit that measures user health information, a biometric information input unit that inputs user biometric information, and biometric information that is input from the biometric information input unit. An identification ID generating unit that generates an identification ID, a health information encryption unit that encrypts the health information measured by the health information measurement unit using biometric information as a key, and an identification ID generated by the identification ID generation unit And the health information registration unit that registers the health information encrypted by the health information encryption unit in the database system, the health information can be safely stored with reduced possibility of information leakage.

Embodiment 1 FIG.
A first embodiment of the present invention will be described below with reference to FIG.
FIG. 1 is a block diagram showing a health information collection system according to Embodiment 1 of the present invention.
In FIG. 1, the health information collection system includes a health monitor device 200, a database system 300, and a network 400 that connects the health monitor device 200 and the database system 300.
The health monitoring device 200 is provided with a biometric information reading device 210 that reads biometric information 100 which is a biological characteristic unique to each user such as a fingerprint, palm print, iris, voice print and the like. The biometric information reading device 210 may be built in the health monitor device 200, but may be provided outside and connected by a connection cable or the like.

FIG. 2 is an explanatory diagram showing an outline of implementation when registering health information in the health information collecting system according to Embodiment 1 of the present invention.
In FIG. 2, reference numerals 100, 200, 210, 300, and 400 are the same as those in FIG. FIG. 2 shows an outline of the implementation when the user 10 encrypts the health information 110 measured by the health monitor device 200 and registers it in the database system 300.
The health monitor device 200 acquires health information 110 such as weight. The health monitor device 200 generates a user identification ID 120 from the biometric information 100 by irreversible conversion, and uses the biometric information 100 as a key to generate encrypted health information 130 encrypted from the health information 110. Generate.
The identification ID 120, the measurement item, and the encrypted health information 130 are transmitted from the health monitoring device 200 to the database system 300 via the network. The database system 300 is provided with a health information table in which the measurement items for each user ID 140 and the encrypted health information 130 are used as a table, and a user information table in which the user ID 140 and the identification ID 120 are used as tables.

FIG. 3 is an explanatory diagram showing an implementation outline when referring to health information in the health information collecting system according to Embodiment 1 of the present invention.
3, 10, 100, 110, 120, 130, 140, 200, 210, 300, 400 are the same as those in FIG. FIG. 3 shows an implementation outline when the user 10 decrypts and refers to the encrypted health information 130 registered in the database system 300.

FIG. 4 is a block diagram showing a health monitor device according to Embodiment 1 of the present invention.
In FIG. 4, the health monitoring device 200 includes a biometric information reading device 210 for reading the biometric information 100 of the user 10 connected or built in, and includes 201 to 208.
The health information measuring unit 201 measures the health information 110 of the user 10. The biometric information input unit 202 receives the biometric information 100 of the user 10. The identification ID generation unit 203 generates an identification ID 120 from the biometric information 100. The health information encryption unit 204 encrypts the health information 110 measured by the user using the biometric information 100 as a key. The health information registration unit 205 registers the identification ID 120 and the encrypted health information 130 as a set in the database system 300.

  When it is desired to search the encrypted health information 130 registered in the database system 300, the health information search unit 206 inputs the biometric information 100 to the biometric information input unit 202, and the identification ID generation unit 203 performs identification. ID 120 is generated, and encrypted health information 130 corresponding to the identification ID 120 is searched from the database system 300. The health information decryption unit 207 decrypts the encrypted health information 130 retrieved by the health information retrieval unit 206 into the health information 110 using the biometric information 100 as a key. The health information display unit 208 displays the health information 110 decrypted by the health information decryption unit 207 to the user 10.

FIG. 5 is a flowchart showing a flow of health information registration in the health information collection system according to Embodiment 1 of the present invention.
FIG. 6 is a flowchart showing a flow when referring to health information in the health information collecting system according to the first embodiment of the present invention.

Next, the operation will be described.
First, the health information registration of FIG. 2 will be described.
The user 10 measures the health information 110 with the health monitor device 200. The user 10 who has measured the health information 110 (weight 64.3 kg in the example of FIG. 2) inputs the biometric information 100 (fingerprint A in the example of FIG. 2) to the biometric information reading device 210. As a result, a unique identification ID 120 and encrypted health information 130 are generated from the biometric information 100 in the health monitor device 200.

  The identification ID 120 is generated by performing a predetermined calculation based on the input biometric information 100. Since these biometrics information 100 differs depending on the individual, it is not the same as the identification ID 120 of another person. For example, as shown in the example of FIG. 2, the identification ID 120 looks like a character string having no apparent meaning such as “adRfd3”.

  The encrypted health information 130 is obtained by encrypting the health information 110 (weight 64.3 kg in the example of FIG. 2) measured by the user 10 using the input biometric information 100 as a key. As shown in the example of FIG. 2, for example, the encrypted health information 130 appears to be a seemingly meaningless character string such as “g1Fj9bfd”, and unless it is decrypted using the same biometric information 100, The value of 110 cannot be known.

The health monitoring device 200 registers the generated identification ID 120 and the encrypted health information 130 as a set in the database system 300. In the example of FIG. 2, this set is a set of identification ID: “adRfd3” and encrypted health information: “g1Fj9bfd”.
Thereby, it is not necessary to transmit any non-encrypted privacy information that identifies an individual to the database system 300, and the health information 110 can be registered.

Next, referring to health information will be described with reference to FIG.
When the user 10 refers to his / her health information 110 registered in the database system 300, first, as shown in FIG. 3, the biometric information 100 is input to the biometric information reading device 210. Then, a unique identification ID 120 is generated in the health monitor device 200. This identification ID 120 is the same as that used for health information registration.
Then, the health monitor device 200 searches the database system 300 using the generated identification ID 120 and receives the encrypted health information 130. The received encrypted health information 130 is decrypted using the biometric information 100 previously input as a key and displayed to the user 10.
Thereby, in the database system 300, it is not necessary to transmit any non-encrypted privacy information that identifies an individual, and the user can refer to the health information 110.

  Even if a third party illegally accesses the database system 300 and obtains data, the privacy information for identifying the individual is not included, and the health information is also encrypted, so the individual is identified. I can't.

Next, the operation when registering biometric information in FIG. 2 will be described with reference to FIG.
When the process is started in step S501, the process waits until the user 10 measures the health information 110 and inputs the biometric information 100 in step S502. When the biometric information 100 is input in step S502, an identification ID 120 is generated from the biometric information 100 of the user 10 in step S503. In step S504, based on the generated identification ID 120, it is searched whether or not the user 10 having the identification ID 120 is already registered in the database system 300.
If it is not registered in the database system 300, the process proceeds to step S505. If it is already registered in the database system 300, the process proceeds to step S508.

In step S505, the user 10 is notified that new biometric information 100 has been input. Here, a message to that effect may be displayed on the display on the health monitor device 200, or the lamp may blink. And it waits until it receives the response of whether to newly register from the user 10.
In step S506, when a response is received from the user 10 and the user 10 is newly registered, the process returns to step S507. When the user 10 does not register due to an input error of the biometric information, the process returns to step S502 and the biometric information 100 is input again. Prompt. Thereby, the erroneous input of the biometric information 100 is prevented, and the problem that the existing user is registered as a new user is solved.

In step S507, a user is newly registered. At this time, a new user ID is assigned and a set of the user ID 140 and the identification ID 120 is inserted into the user information table of the database system 300. Thus, when the same identification ID 120 is input from the next time onward, it is recognized as an existing user.
In step S508, the health information 110 measured by the user 10 is encrypted using the biometric information 100 as a key to generate encrypted health information 130. In step S509, when the generated identification ID 120 and encrypted health information 130 are transmitted to the database system 300, the database system 300 obtains the user ID 140 of the user 10 from the identification ID 120, and the set of the user ID 140 and the encrypted health information 130 is obtained. Registered in the health information table. In step S510, the process ends.

Next, the operation when referring to the biometric information in FIG. 3 will be described with reference to FIG.
When the process is started in step S601, the process waits until the user 10 inputs the biometric information 100 in step S602. When the biometric information 100 is input in step S602, the identification ID 120 is generated from the biometric information 100 of the user 10 in step S603.

Next, in step S604, based on the generated identification ID 120, the encrypted health information 130 of the user 10 having the identification ID 120 is retrieved from the database system 300 and acquired. Here, the encrypted health information 130 is acquired by accessing the database system 300, but the encrypted health information 130 acquired once may be cached in the health monitor device 200 and used. Absent. Caching can reduce the search time.
In step S605, the obtained encrypted health information 130 is decrypted using the biometric information 100 input in step S602 as a key. Finally, in step S606, the decrypted health information 110 is displayed to the user 10, and the process ends in step S607.

  According to the first embodiment, by using the identification ID 120 generated from the biometric information 100 input by the user 10 and the encrypted health information 130 encrypted using the biometric information 100 as a key, reliable and reliable Health information can be exchanged, and a secure network can be constructed with simple personal identification.

Embodiment 2. FIG.
In the second embodiment, the user 10 measures one piece of health information 110 with the health monitor device 200, and obtains another piece of health information 110 (second health information) by calculating using the health information of the measurement result. In this case, still another health information 110 (first health information) used for this calculation is obtained from the database system 300.
As a specific example, a case where body weight is measured, height information is acquired from the database system 300, and BMI (Body Mass Index) is calculated from the weight and height will be described below.

The second embodiment of the present invention will be described below with reference to FIG.
FIG. 7 is an explanatory diagram showing an outline of implementation in the health information collection system according to Embodiment 2 of the present invention.
7, 10, 100, 110, 120, 130, 140, 200, 210, 300, 400 are the same as those in FIG.

FIG. 8 is a block diagram showing a health monitor device according to Embodiment 2 of the present invention.
In FIG. 8, 201-208 and 210 are the same as those in FIG. In FIG. 8, there is an input from the health information decoding unit 207 to the health information measurement unit 201. That is, the encrypted health information used for the calculation of the health information is acquired from the database system 300, is decrypted by the health information decryption unit 207, and is used by the health information measurement unit 201 to obtain the health information (FIG. 7). In the example, BMI) is calculated.
FIG. 9 is a flowchart showing a flow of health information registration in the health information collecting system according to the second embodiment of the present invention.

Next, the operation will be described.
When the health information 110 (BMI in the example of FIG. 7) is measured by the health monitor device 200, the weight is actually measured and the height is obtained from the database system 300. Incidentally, BMI is calculated by weight / (height squared).
The user 10 inputs the biometric information 100 (fingerprint A in the example of FIG. 7) to the biometric information reading device 210. As a result, a unique identification ID 120 is generated from the biometric information 100 in the health monitor device 200.

  Then, using the identification ID 120, the encrypted health information 130 (height in the example of FIG. 7) necessary for calculating the health information 110 to be measured is retrieved and acquired from the database system 300. At this time, if the encrypted health information 130 is not in the database system 300, the health monitoring device 200 cannot calculate the health information 110 (BMI). In this case, the user 10 is notified accordingly. Note that the notification means may display the message on the display on the health monitor device 200, or may blink the lamp.

When the encrypted health information 130 (height) is acquired from the database system 300, the encrypted health information 130 is decrypted using the biometric information 100 of the user 10. As a result, the health information 110 (height: 174.5 cm in the example of FIG. 7) necessary for the calculation can be acquired.
The health monitor device 200 uses the health information 110 (weight) measured by the user 10 and the health information 110 (height) acquired from the database system 300 to generate new health information 110 (BMI: 21.15 in the example of FIG. 7). ).

The newly calculated health information 110 is encrypted using the biometric information 100 of the user 10 as a key, and the encrypted health information 130 is generated, as in the first embodiment. Then, the generated identification ID 120 and encrypted health information 130 are paired and registered in the database system 300. In the example of FIG. 7, the set includes an identification ID: “adRfd3”, encrypted health information (weight): “g1Fj9bfd”, and encrypted health information (BMI) “Hle37gnm”.
In the example of FIG. 7, the encrypted health information 130 of the weight used when calculating the BMI is also registered in the database system 300, but this need not be registered in the database system 300.

Next, the operation of FIG. 7 will be described in more detail with reference to FIG.
When the process is started in step S901, the process waits until the user 10 measures the health information 110 and inputs the biometric information 100 in step S902. When the biometric information 100 is input in step S902, the identification ID 120 is generated from the biometric information 100 of the user 10 in step S903.
In step S904, based on the generated identification ID 120, it is searched whether or not the user 10 having the identification ID 120 is already registered in the database system 300. If it is not registered in the database system 300, the process advances to step S905. If it is already registered in the database system 300, the process proceeds to step S908.

In step S905, the user 10 is notified that new biometric information 100 has been input. Here, a message to that effect may be displayed on the display on the health monitor device 200, or the lamp may blink. And it waits until it receives the response of whether to newly register from the user 10.
In step S906, in response to a response from the user 10, if the user 10 is newly registered, the process returns to step S907. If not registered, the process returns to step S902 to prompt the input of the biometric information 100 again. Thereby, the erroneous input of the biometric information 100 is prevented, and the problem that the existing user is registered as a new user is solved.
In step S907, the user 10 is newly registered. At this time, a new user ID 140 is numbered and a set of the user ID 140 and the identification ID 120 is inserted into the user information table. Accordingly, when the same identification ID 120 is input from the next time onward, it is recognized as an existing user.

In step S908, the encrypted health information 130 (height) used for calculating the health information 110 (BMI) is searched from the database system 300 using the identification ID 120 as a key. Here, if the necessary encrypted health information 130 does not exist in the database system 300, the health information cannot be calculated, so the process proceeds to step S909. On the other hand, if it exists, the process proceeds to step S910.
If the encrypted health information 130 does not exist, in step S909 that fact is displayed to the user 10 and the process is terminated.
If the encrypted health information 130 exists, the encrypted health information 130 is acquired in step S910. In step S911, the encrypted health information 130 acquired from the database system 300 is decrypted using the biometric information 100 as a key. Thereby, another health information 110 (height) necessary for calculating the health information 110 (BMI) can be obtained. In step S912, calculation is performed based on the health information 110 (height) acquired from the database system 300 and the health information 110 (weight) measured by the user 10, and the desired health information 110 (BMI) is generated.

In step S913, the health information 110 obtained by calculation is encrypted using the biometric information 100 as a key to generate encrypted health information 130. When the health information 110 (weight) measured by the user 10 is also registered in the database system 300, it is also encrypted.
When the generated identification ID 120 and encrypted health information 130 are transmitted to the database system 300 in step S914, the database system 300 obtains the user ID 140 of the user 10 from the identification ID 120, and sets the user ID 140 and the encrypted health information 130. Is registered in the health information table. In step S915, the process ends.

  According to the second embodiment, by obtaining the health information 110 necessary for calculating the health information 110 from the database system 300, the health information 110 calculated by the calculation can also be registered in the health information collection system.

Embodiment 3 FIG.
In the third embodiment, another biometric information 100 of the user 10 is encrypted and registered as the encrypted health information 130 in the health information table of the database system 300, so that a plurality of biometric information 100 of one user is linked. The health information can be decrypted by using any biometric information that is linked.

The third embodiment of the present invention will be described below with reference to FIGS.
FIG. 10 is an explanatory diagram showing an outline of the implementation when linking biometric information in the health information collection system according to Embodiment 3 of the present invention.
10, 10, 100, 120, 130, 140, 200, 210, 300, 400 are the same as those in FIG. In FIG. 10, a column of parent user ID 150 indicating a user ID to be linked is provided in the user information table, and the encrypted biometric information of the partner to be linked is registered in the encrypted health information column of the health information table. To do. The health monitor device 200 generates encrypted biometric information 160 registered in the health information table from the biometric information 100.
In the use of the encrypted biometric information 160, first, decryption is performed using the biometric information of the user ID linked to the encrypted biometric information 160 (the encrypted biometric information is registered) as a key, and then The health information corresponding to the decrypted biometric information is decrypted using the decrypted biometric information as a key. In other words, the associated biometric information is provided with the encrypted biometric information so that the health information can be decrypted by using the biometric information.

FIG. 11 is an explanatory diagram showing an implementation outline when referring to health information in the health information collecting system according to Embodiment 3 of the present invention.
11, 10, 100, 120, 130, 140, 150, 200, 210, 300, and 400 are the same as those in FIG. 10, and 110 is the same as that in FIG.
FIG. 12 is a flowchart showing a flow for biometric information linking in the health information collecting system according to Embodiment 3 of the present invention.
FIG. 13 is a flowchart showing a flow when referring to health information in the health information collecting system according to the third embodiment of the present invention.
The configuration of the health monitor device 200 of the third embodiment is the same as that of FIG. 8 of the second embodiment.

Next, the operation will be described.
First, a method of associating a plurality of biometric information 100 will be described with reference to FIG. 10 based on FIG.
In step S1201, the process is started, and in step S1202, two pieces of biometric information 100 (fingerprint A and fingerprint B in the example of FIG. 10) to be linked are registered in the health monitor device 200. The health monitor device 200 in this case may be a device in which a plurality of biometric information reading devices 210 are built in or connected to one health monitor device 200, or a dedicated terminal that does not have a function of measuring health information. I do not care. When a plurality of biometric information 100 (for example, the right hand thumb and index finger) can be read by one biometric information reading device 210 like a fingerprint, only one biometric information reading device 210 is built-in or connected. The health monitor device 200 may be used.

  When two pieces of biometric information 100 are input in step S1202, unique identification IDs 120 (“adRfd3” in the example of FIG. 10) are respectively obtained from the two pieces of biometric information 100 in the health monitor device 200 in step 1203. “FJgvsa”). The health monitoring device 200 sends the generated two identification IDs 120 as a set to the database system 300.

Compared to the first and second embodiments, a parent user ID 150 column is added to the user information table of the database system 300. In the database system 300, when the two identification IDs 120 transmitted using the two identification IDs 120 coincide with the identification IDs 120 of the existing users in step S1204, in step S1206, the corresponding user is identified from the user information table. The ID 140 (0002 and 0003 in the example of FIG. 10) and the parent user ID 150 (0001 and − (no parent user ID in the example of FIG. 10)) are searched and acquired.
In step S1207, if the parent user ID 150 exists at this time, in step S1208, a record in which the parent user ID 150 and the user ID 140 match is again searched in the user information table, and the corresponding user ID 140 (FIG. 10). In this example, 0001) is acquired. These user IDs 140 are to be linked (0001, 0002, 0003 in the example of FIG. 10).

In step S1209, using the user ID 140 to be linked, it is searched whether there is a record whose measurement item is biometric information in the health information table. If it exists, in step S1210, the encrypted biometric information is also acquired, and the database system 300 encrypts the user ID 140, the identification ID 120, the parent user ID 150 to be linked to the health monitor device 200, and is encrypted. The biometric information 160 (only when it exists in the health information table) is returned as a pair.
In step S1204, when there is no user 10 having the identification ID 120 input in the database system 300, in step S1205, the fact that the biometric information 100 to be linked does not exist is displayed to the user 10, and in step S1216, The process ends.

In step 1211, the health monitor device 200 decrypts the encrypted biometric information 160 if there is a user ID 140 (0001 in the example of FIG. 10) whose original biometric information 100 is unknown in the acquired set. Ask for this. (In FIG. 10, fingerprint C)
In this case, when the user ID 140 matches the parent user ID 150, the encrypted biometric information 160 held by the user ID 140 is decrypted using the biometric information 100 of the child user ID 140 as a key.
If the user ID 140 does not match the parent user ID 150, the encrypted biometric information 160 of the user ID 140 is decrypted using the biometric information 100 of the parent user ID 150 as a key.

In step S1212, one of the first input biometric information 100 is set as the parent biometric information 100 (fingerprint A in the example of FIG. 10), and in step S1213, the remaining biometric information 100 (in FIG. 10). In the example, fingerprint B and fingerprint C) are encrypted using parent biometric information 100 as a key, and encrypted biometric information 160 (“irSw2ddJ” and “kF4e3doi” in the example of FIG. 10) is generated.
Conversely, the parent biometric information 100 (fingerprint A in the example of FIG. 10) is encrypted using the remaining biometric information 100 (fingerprint B and fingerprint C in the example of FIG. 10) as keys, respectively. Encrypted biometric information 160 (“i38js3ds”, “W03shcom” in the example of FIG. 10) is generated.
In step S1214, the user ID 140, the parent user ID 150, and the encrypted biometric information 160 are all registered as a set in the database system 300, and the process ends in step S1215.

Next, a method for referring to the health information 110 when a plurality of pieces of biometric information 100 are linked will be described with reference to FIG.
When referring to the health information 110 linked by the user 10, the process is started in step S1301, and in step S1302, first, the biometric information 100 (in the example of FIG. 11) is sent to the biometric information reading device 210. , And input fingerprint B). In step S1303, a unique identification ID 120 (“fJgvsa” in the example of FIG. 11) is generated in the health monitor device 200. In step S1304, a search is performed in the user information table of the database system 300 using the generated identification ID 120, and a corresponding user ID 140 (0002 in the example of FIG. 11) is acquired. Furthermore, if the acquired user ID 140 holds the parent user ID 150 in step S1305, the record having this parent user ID 150 is searched again in step S1306 to obtain the user ID 140 (in the example of FIG. 11). , 0001, 0002). In step S1307, the health information table is searched with this user ID 140, and the corresponding encrypted health information 130 is acquired.

  If, in step S1308, the obtained encrypted health information 130 includes the unknown biometric information 100, the encrypted biometric information 160 is decrypted using the encrypted biometric information 160 in step S1309. Here, biometric information 100 (fingerprint C in the example of FIG. 11) that has been unknown is generated using the first input biometric information (fingerprint B in the example of FIG. 11) as a key.

  Now that the biometric information 100 corresponding to all the encrypted health information 130 has been found, the biometric information 100 is decrypted using each biometric information 100 as a key in step S1310, and displayed to the user 10 in step S1311. In step S1312, the process ends.

According to the third embodiment, it is possible to refer to health information 110 registered using different biometric information 100 by associating a plurality of biometric information 100.
As a result, even if one biometric information 100 cannot be input due to injury or the like, it can be replaced with another biometric information 100 previously linked, and more people You will be able to provide this system.

Embodiment 4 FIG.
FIG. 14 is a block diagram showing a health information collection system according to Embodiment 4 of the present invention.
In FIG. 14, reference numerals 200, 210, 300, and 400 are the same as those in FIG. In FIG. 14, a general information terminal 500 is connected to the network 400 so that health information can be referred to from the information terminal 500.

FIG. 15 is an explanatory diagram showing an outline of a health information table in the health information collection system according to Embodiment 4 of the present invention.
In FIG. 15, an attribute column indicating manual input or automatic input is provided in the health information table of the database system 300.

In the fourth embodiment, by connecting a general information terminal 500 to the network 400, the health information stored in the database system 300 can be referred to from the information terminal 500. The information terminal 500 may be a PC (personal computer) that is generally widely used.
Further, the health information 110 may be registered / corrected from the information terminal 500. If the health information 100 is freely registered / corrected by the information terminal 500, the reliability of the data may be lost. Therefore, an attribute column is added to the health information table of the database system 300, the “automatic input” health information 110 measured by the health monitor device 200, and the “manual input” registered / corrected from the information terminal 500. The health information 110 can be distinguished. When the health information measured by the health monitor device is corrected by the information terminal 500, the attribute is changed from “automatic input” to “manual input” as shown in FIG.

  This information terminal 500 needs to have a biometric information reading device 210 built-in or connected in advance. However, in the method of the third embodiment, instead of the biometric information 100, a normal password or an IC card key code may be encrypted and linked and registered. In that case, the biometric information reader 210 is not essential, but it must be taken into account that it is difficult to ensure privacy.

According to the fourth embodiment, by adding the information terminal 500 to the network 400, the types of terminals that can display the health information 110 can be increased.
Moreover, since the information terminal 500 has an original input device, the health information 110 can be easily corrected.

Embodiment 5 FIG.
FIG. 16 is a block diagram showing a health information collection system according to Embodiment 5 of the present invention.
In FIG. 16, reference numerals 200, 210, 300, and 400 are the same as those in FIG. In FIG. 16, the management terminal 600 is connected to the network.
FIG. 17 is an explanatory diagram showing an outline of a health information table in the health information collecting system according to the fifth embodiment of the present invention.
In FIG. 17, a device number column indicating the number of the health monitor device is added to the health information table of the database system 300.

In the fifth embodiment, the management terminal 600 is connected to the network 400 so that the usage status of each health monitor device 200 can be confirmed from the management terminal 600. For this purpose, a device number column that is the number of the health monitor device is added to the health information table of the database system 300.
Furthermore, the management terminal 600 performs a live check on each health monitor device 200 at regular intervals, and how often the health monitor device 200 is used from the device number registered in the database system 300. Analyze.

  According to the fifth embodiment, by adding the management terminal 600 to the network 400, it is possible to perform a live check of the health monitor device 200 installed in each place and detect a failure or wear of the health monitor device. At the same time, it is possible to access the database system 300 and analyze the usage frequency of the health monitor device.

It is a block diagram which shows the health information collection system by Embodiment 1 of this invention. It is explanatory drawing which shows the implementation outline | summary in the case of the health information registration in the health information collection system by Embodiment 1 of this invention. It is explanatory drawing which shows the implementation outline | summary in the case of the health information reference in the health information collection system by Embodiment 1 of this invention. It is a block diagram which shows the health monitor apparatus by Embodiment 1 of this invention. It is a flowchart which shows the flow in the case of the health information registration in the health information collection system by Embodiment 1 of this invention. It is a flowchart which shows the flow in the case of the health information reference in the health information collection system by Embodiment 1 of this invention. It is explanatory drawing which shows the implementation outline | summary in the health information collection system by Embodiment 2 of this invention. It is a block diagram which shows the health monitor apparatus by Embodiment 2 of this invention. It is a flowchart which shows the flow in the case of the health information registration in the health information collection system by Embodiment 2 of this invention. It is explanatory drawing which shows the implementation outline | summary in the case of the biometrics information stringing in the health information collection system by Embodiment 3 of this invention. It is explanatory drawing which shows the implementation outline in the case of the health information reference in the health information collection system by Embodiment 3 of this invention. It is a flowchart which shows the flow in the case of the biometric information stringing in the health information collection system by Embodiment 3 of this invention. It is a flowchart which shows the flow in the case of the health information reference in the health information collection system by Embodiment 3 of this invention. It is a block diagram which shows the health information collection system by Embodiment 4 of this invention. It is explanatory drawing which shows the outline | summary of the health information table in the health information collection system by Embodiment 4 of this invention. It is a block diagram which shows the health information collection system by Embodiment 5 of this invention. It is explanatory drawing which shows the outline | summary of the health information table in the health information collection system by Embodiment 5 of this invention.

Explanation of symbols

10 users, 100 biometric information, 110 health information,
120 identification ID, 130 encrypted health information, 140 user ID,
150 parent user ID, 160 encrypted biometric information,
200 health monitoring equipment, 201 health information measuring department,
202 biometrics information input unit, 203 identification ID generation unit,
204 health information encryption unit, 205 health information registration unit,
206 health information search unit, 207 health information decryption unit,
208 health information display unit, 210 biometric information reading device,
300 database system, 400 network, 500 information terminal,
600 Management terminal.

Claims (10)

A health monitoring device for measuring user health information, and a database system connected to the health monitoring device via a network and collecting health information measured by the health monitoring device;
The health monitor device includes a health information measurement unit that measures user health information, a biometric information input unit that inputs user biometric information, and the biometric information that is input from the biometric information input unit. An identification ID generation unit that generates an identification ID for identifying the health information, a health information encryption unit that encrypts the health information measured by the health information measurement unit using the biometric information as a key, and the identification ID generation unit A health information collection system comprising: a health information registration unit that registers the generated identification ID and health information encrypted by the health information encryption unit in the database system. The health monitoring device receives biometric information from the biometric information input unit, and searches for the encrypted health information in the database system using an identification ID generated from the input biometric information. A health information retrieval unit, a health information decryption unit that decrypts the encrypted health information retrieved by the health information retrieval unit using the biometric information as a key, and a decryption by the health information decryption unit The health information collection system according to claim 1, further comprising: a health information display unit that displays the converted health information to a user.   The health monitor device acquires first health information registered in the database system by the health information search unit, and uses the acquired first health information to generate a second health information by the health information measurement unit. The health information collection system according to claim 2, wherein the health information is calculated.   The biometric information input unit inputs two related biometric information, and the health monitoring device encrypts the two input biometric information, associates them, and registers them in the database system The health information collection system according to any one of claims 1 to 3, wherein   The health information collection system according to any one of claims 1 to 4, further comprising an information terminal connected to the network and displaying or correcting health information registered in the database system.   The health information collection system according to claim 1, further comprising a management terminal connected to the network and confirming a usage status of the health monitor device.   A health information measurement unit that measures the user's health information, a biometric information input unit that inputs the user's biometric information, and an identification ID that identifies the user from the biometric information input by the biometric information input unit An identification ID generation unit to generate, a health information encryption unit that encrypts the health information measured by the health information measurement unit using the biometric information as a key, an identification ID generated by the identification ID generation unit, and A health monitor device comprising: a health information registration unit that registers health information encrypted by the health information encryption unit in a database system.   A biometric information is input by the biometric information input unit, and a health information search unit that searches the encrypted health information of the database system using an identification ID generated from the input biometric information; The health information decryption unit that decrypts the encrypted health information retrieved by the health information retrieval unit using the biometric information as a key, and the health information decrypted by the health information decryption unit. The health monitor device according to claim 7, further comprising a health information display unit for displaying to a user.   The first health information registered in the database system is acquired by the health information search unit, and the second health information is calculated by the health information measurement unit using the acquired first health information. The health monitor device according to claim 8.   The biometric information input unit inputs two related biometric information, encrypts the two input biometric information, associates them, and registers them in the database system. The health monitor device according to any one of Items 7 to 9.

Images