JP2008083847A - Medical information processing system and medical information processing program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a medical information processing system allowing provision of high-accuracy market information about medicine, medical supplies or the like. <P>SOLUTION: In this medical information processing system, a medical receipt input means inputs medical receipt data including a patient name, a making-anonymous means makes at least the patient name inside the medical receipt data inputted by the medical receipt input means anonymous by a unidirectional function, an excluded patient making-anonymous means makes at least the patient name of the patient that is not a processing target anonymous by the unidirectional function, an exclusion means excludes the medical receipt data of the patient made to be anonymous by the excluded patient making-anonymous means from the medical receipt data made to be anonymous by the making-anonymous means, an encryption means excludes the medical receipt data becoming out of a target by the exclusion means from the medical receipt data made to be anonymous by the making-anonymous means and performs encryption, and a transmission means transmits the medical receipt data encrypted by the encryption means. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a medical information processing system and a medical information processing program.

Due to the recent increase in medical expenses, sluggish insurance premiums, and increased burden on health funding for the elderly, reduction of medical expenses through receipt inspection is required. On the other hand, it is also required to comply with the legal obligations such as the disclosure obligation of the receipt, the obligation of storage, and the Personal Information Protection Law, and the efficiency of these operations is also required.
As a technology related to these, for example, Patent Document 1 provides a medical information management method and system capable of performing prescription management and proper dispensing processing and payment examination simply and surely and quickly and having excellent processing efficiency. A prescription data reception step for receiving prescription data, a prescription data registration step for registering prescription data in a database in association with patient attribute information, and a prescription search request involving patient attribute information from a pharmacy terminal The request acceptance step that accepts the information, the prescription data extraction step that compares the attribute information in the database and extracts all the prescription data of the corresponding patient, and the information on the prescription medicine and the prescription amount contained in the extracted prescription data are restricted against the restriction table Prescription judgment step to judge whether it conflicts with matters And flop, performing a prescription sent file transmission step of sending at least one pharmacy terminal of the determination result and the prescription of correction instructions and prescription data obtained by correcting the prescription is disclosed.
JP 2003-196396 A

  The present invention has been made in the situation of such background art, and provides a medical information processing system and a medical information processing program that can provide highly accurate market information for pharmaceuticals, medical products, and the like. It is intended to provide.

The gist of the present invention for achieving the object lies in the inventions of the following items.
[1] A receipt input means for inputting receipt data including a patient name;
Anonymization means for performing anonymization by a one-way function for at least a patient name in the receipt data input by the receipt input means;
Excluded patient anonymization means for anonymizing with a one-way function for at least patient names of patients not to be processed,
Exclusion means for excluding from the subject the patient data anonymized by the exclusion patient anonymization means from the anonymization receipt data anonymization means,
Encryption means for encrypting the receipt data excluded by the exclusion means from the receipt data anonymized by the anonymization means,
A medical information processing system comprising: transmission means for transmitting the receipt data encrypted by the encryption means.

[2] receiving means for receiving encrypted receipt data including data relating to the pharmacy;
Decoding means for decoding the receipt data received by the receiving means;
Counting report means for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding means, and reporting the counting result to the pharmacy;
Masking processing means for masking data relating to the pharmacy in the receipt data decoded by the decoding means;
Structure converting means for converting the structure of the receipt data masked by the masking means;
A medical information processing system comprising storage means for storing the receipt data structurally converted by the structural conversion means so as to be accessible from the outside.

[3] A receipt input means for inputting receipt data including data on a patient name and a pharmacy;
Anonymization means for performing anonymization by a one-way function for at least a patient name in the receipt data input by the receipt input means;
Excluded patient anonymization means for anonymizing with a one-way function for at least patient names of patients not to be processed,
Exclusion means for excluding from the subject the patient data anonymized by the exclusion patient anonymization means from the anonymization receipt data anonymization means,
Encryption means for encrypting the receipt data excluded by the exclusion means from the receipt data anonymized by the anonymization means,
Transmitting means for transmitting the receipt data encrypted by the encryption means;
Receiving means for receiving receipt data transmitted by the transmitting means;
Decoding means for decoding the receipt data received by the receiving means;
Counting report means for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding means, and reporting the counting result to the pharmacy;
Masking processing means for masking data relating to the pharmacy in the receipt data decoded by the decoding means;
Structure converting means for converting the structure of the receipt data masked by the masking means;
A medical information processing system comprising storage means for storing the receipt data structurally converted by the structural conversion means so as to be accessible from the outside.

[4] A receipt input means for inputting receipt data including data on a patient name and a pharmacy;
Anonymization means for performing anonymization by a one-way function for at least a patient name in the receipt data input by the receipt input means;
Excluded patient anonymization means for anonymizing with a one-way function for at least patient names of patients not to be processed,
Exclusion means for excluding from the subject the patient data anonymized by the exclusion patient anonymization means from the anonymization receipt data anonymization means,
Transmitting means for transmitting the remaining receipt data excluded from the object by the exclusion means;
Receiving means for receiving receipt data transmitted by the transmitting means;
Counting report means for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data received by the receiving means, and reporting the counting result to the pharmacy;
A medical information processing system comprising masking processing means for masking data relating to a pharmacy in the receipt data decoded by the receiving means.

[5]
A receipt input function for inputting receipt data including a patient name;
An anonymization function for anonymizing by a one-way function for at least a patient name in the receipt data input by the receipt input function;
Excluded patient anonymization function that anonymizes by one-way function for at least patient name of patients not to be processed,
Exclusion function to exclude the patient's receipt data anonymized by the exclusion patient anonymization function from the anonymization reception data from the subject,
An encryption function for encrypting the receipt data excluded by the exclusion function from the reception data anonymized by the anonymization function;
A medical information processing program that realizes a transmission function of transmitting receipt data encrypted by the encryption function.

[6]
A receiving function to receive encrypted receipt data including data about the pharmacy;
A decryption function for decrypting the receipt data received by the reception function;
A count reporting function for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding function, and reporting the counting result to the pharmacy;
A masking process function for masking data related to the pharmacy in the receipt data decoded by the decoding function;
A structure conversion function for converting the structure of the receipt data masked by the masking function;
A medical information processing program for realizing a storage function of storing the receipt data subjected to structure conversion by the structure conversion function so as to be accessible from the outside.

[7]
A receipt input function for entering receipt data including patient name and pharmacy data;
An anonymization function for anonymizing by a one-way function for at least a patient name in the receipt data input by the receipt input function;
Excluded patient anonymization function that anonymizes by one-way function for at least patient name of patients not to be processed,
Exclusion function to exclude the patient's receipt data anonymized by the exclusion patient anonymization function from the anonymization reception data from the subject,
An encryption function for encrypting the receipt data excluded by the exclusion function from the reception data anonymized by the anonymization function;
A transmission function for transmitting the receipt data encrypted by the encryption function;
A reception function for receiving the receipt data transmitted by the transmission function;
A decryption function for decrypting the receipt data received by the reception function;
A count reporting function for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding function, and reporting the counting result to the pharmacy;
A masking process function for masking data related to the pharmacy in the receipt data decoded by the decoding function;
A structure conversion function for converting the structure of the receipt data masked by the masking function;
A medical information processing program for realizing a storage function of storing the receipt data subjected to structure conversion by the structure conversion function so as to be accessible from the outside.

[8]
A receipt input function for entering receipt data including patient name and pharmacy data;
An anonymization function for anonymizing by a one-way function for at least a patient name in the receipt data input by the receipt input function;
Excluded patient anonymization function that anonymizes by one-way function for at least patient name of patients not to be processed,
Exclusion function to exclude the patient's receipt data anonymized by the exclusion patient anonymization function from the anonymization reception data from the subject,
A transmission function for transmitting the remaining receipt data excluded from the target by the exclusion function;
A reception function for receiving the receipt data transmitted by the transmission function;
A count reporting function for counting the receipt data in the pharmacy according to the data about the pharmacy from the receipt data received by the receiving function, and reporting the counting result to the pharmacy;
A medical information processing program for realizing a masking processing function for masking data relating to a pharmacy in the receipt data decrypted by the receiving function.

  According to the medical information processing system according to the first aspect and the medical information processing program according to the fifth aspect, the patient to be excluded from the target cannot be specified as compared with the case where the configuration is not provided. , Prescription data excluding data on the patient can be transmitted.

  According to the medical information processing system according to claim 2 and the medical information processing program according to claim 6, the count result of the prescription data is reported to the pharmacy as compared with the case where this configuration is not provided. Data in which the pharmacy cannot be specified can be generated.

  According to the medical information processing system according to the third aspect and the medical information processing program according to the seventh aspect, the patient to be excluded from the target cannot be specified as compared with the case where the configuration is not provided. , Can send prescription data excluding data on the patient, report the prescription data count results to the pharmacy, and make the pharmacy unidentifiable and generate data converted to an external file format can do.

  According to the medical information processing system according to the fourth aspect and the medical information processing program according to the eighth aspect, the patient to be excluded from the target cannot be specified as compared with the case where the configuration is not provided. The prescription data excluding the data related to the patient can be transmitted, and the count result of the prescription data can be reported to the pharmacy, and the data in which the pharmacy cannot be specified can be generated.

Hereinafter, a preferred embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a conceptual module configuration diagram of the present embodiment. FIG. 2 shows a configuration example of the entire system.
The module generally refers to a component such as software or hardware that can be logically separated. Therefore, the module in the present embodiment indicates not only a module in a program but also a module in a hardware configuration. Therefore, the present embodiment also serves as an explanation of a program, a system, and a method. In addition, the modules correspond almost one-to-one with the functions. However, in mounting, one module may be composed of one program, or a plurality of modules may be composed of one program. A plurality of programs may be used. The plurality of modules may be executed by one computer, or one module may be executed by a plurality of computers in a distributed or parallel environment. Hereinafter, “connection” includes not only physical connection but also logical connection.
The system includes a configuration in which a plurality of computers, hardware, devices, and the like are connected via a network and the like, and includes a case where the system is realized by one computer, hardware, devices, and the like.

Terms used in this embodiment will be described.
In the Dispensing Pharmacy, based on the medical insurance system, a pharmacist dispenses ethical drugs according to a doctor's prescription. Generally, the patient himself bears 30%, and the remaining 70% is borne by the health insurance association and mutual aid association.
The receipt is a billing statement used when a dispensing pharmacy or medical institution charges dispensing funds and medical fees to a payment fund.
The payment fund is a corporation established in September 1948 based on the Social Insurance Medical Fee Payment Fund Act (a private corporation from October 1, 2003).
An electronic receipt is an electronic file of a receipt, and a payment fund defines a standard format. Most pharmacies have introduced processing using electronic receipt files.

The entire structure including the present embodiment has a structure as shown in FIG. Dispensing pharmacies are chain-operated, and stores 130 (store A, store B, store C, etc. in FIG. 2) and headquarters 150 (headquarter X, headquarter Y, headquarter Z in FIG. ), And each pharmacy system 100 in the headquarters 150 is connected to the medical information processing system 200. The pharmacy system 100 sends the receipt data subjected to certain processing to the medical information processing system 200. The medical information processing system 200 provides reports, data, and the like to the user system 300 possessed by the user (for example, a pharmaceutical company, an insurance company, a healthcare service provider, etc.) based on the received receipt data. The business process includes a pharmacy business by the pharmacy system 100, a service main business by the medical information processing system 200, and a user business by the user system 300.
More specifically, the patient 101 has a prescription 160, requests a dispensing action at the store 130, is dispensed by a pharmacist, and receives a medicine.
In the store 130, receipt data is generated from the prescription 160 and the like, anonymization 140 processing and the like are performed, and the headquarters 150 encrypts the receipt data and sends it to the medical information processing system 200.
In the medical information processing system 200, the receipt data sent from each headquarter 150 is collected 240, a report or the like is created based on the receipt data by the data processing module 220, and stored in the processing result DB 230. The data of the processing result DB 230 is provided to the user system 300 via the I / F 250.

As shown in FIG. 1, the present embodiment includes a pharmacy system 100 that inputs a receipt 110, a medical information processing system 200, and a user system 300. The pharmacy system 100 and the medical information processing system 200 and the medical information processing system 200 and the user system 300 are connected by a communication line such as the Internet. In addition to the communication line, a recording medium on which data is recorded may be sent and received. In addition, data to be exchanged may be encrypted.
The pharmacy system 100 includes a receipt file 111, an encrypted file 112, an anonymized encryption module 121, an excluded patient processing module 122, and an excluded patient list 113. 2 may have the pharmacy system 100, and each store 130 may have the pharmacy system 100.
The pharmacy system 100 receives the receipt 110 and creates a receipt file 111 once every month, for example. The data of the receipt 110 possessed by the dispensing pharmacy becomes business data for charging the dispensing fund to the payment fund. The data structure of the receipt file 111 will be described later with reference to FIG.

The anonymization encryption module 121 is connected to the excluded patient processing module 122, receives the receipt file 111, and outputs the encryption file 112. The anonymization encryption module 121 mainly performs anonymization processing, excluded patient processing, and encryption processing.
In the anonymization process, data obtained by combining a patient name, date of birth, and the like is converted with a hash function (one-way function) to generate a unique code. The data to be processed by the hash function may be at least a patient name (including an identifier for identifying a patient such as an insured person number), or a combination of a patient name, date of birth, address, etc. Also good. This unique code is always the same code for data that combines the same patient name, date of birth, etc., but it is very difficult to generate a patient name etc. from the unique code itself (in reality, it is Impossible).
Excluded patient processing is as follows. The patient can refuse to use secondary data about his prescription. In order not to send the prescription data of the patient to the medical information processing system 200, the record of the patient is excluded from the receipt file 111 according to the processing result by the excluded patient processing module 122. This exclusion process is performed based on the unique code. The data to be processed may be not only data related to the patient but also personal information related to the doctor.
In the encryption processing, the receipt file 111 is anonymized, and the encryption processing for sending to the medical information processing system 200 is performed on the data subjected to the excluded patient processing.

The excluded patient processing module 122 is connected to the anonymized encryption module 121 and the excluded patient list 113. If an excluded patient is stored in the excluded patient list 113, data related to the patient (for example, a unique code converted by a hash function with respect to data combining the patient name, date of birth, etc.) is generated and anonymous. To the encrypted encryption module 121. Note that the data to be processed by the hash function may be at least the patient name (identifier that can identify the patient), or may be a combination of the patient name, date of birth, address, and the like. However, the target data of the hash function in the anonymization encryption module 121 is the same as the hash function used.
The excluded patient list 113 stores data related to patients who refuse to use data related to their prescriptions for secondary use. That is, the patient name, date of birth, etc. regarding the patient. In addition, a unique code converted by a hash function may be stored for data combining a patient name, date of birth, and the like. In addition, data regarding patients to be excluded is passed to the exclusion processing module 228 of the medical information processing system 200. In that case, encryption processing is performed. If a unique code is stored in the excluded patient list 113, the data to be processed by the hash function may be at least the patient name (identifier that can identify the patient), and the patient name, date of birth Or a combination of addresses. However, the target data of the hash function in the anonymization encryption module 121 is the same as the hash function used.
The encrypted file 112 is a data file that has been subjected to processing such as encryption by the anonymization encryption module 121, and is sent to the medical information processing system 200.

  The medical information processing system 200 includes a reception processing module 221, a decryption module 222, a structure conversion module 223, a count, a mail sending module 224, a name identification processing module 225, a category assignment module 226, a mask processing module 227, an exclusion processing module 228, and a structure conversion. A module 229, a user management module 231, an access management module 232, a backup module 211, a facility master file 212, a processing result storage module 213, a public data storage module 214, and a user format file 215 are included.

The reception processing module 221 is connected to the decryption module 222, receives the encrypted file 112 generated by the pharmacy system 100, and passes the received data to the decryption module 222.
The decryption module 222 is connected to the reception processing module 221 and the structure conversion module 223, and when the encrypted data received by the reception processing module 221 has been prepared for each pharmacy, the encrypted data is decrypted. To do. Then, the decrypted data is transferred to the structure conversion module 223.
The structure conversion module 223 is connected to the decryption module 222 and the count / mail sending module 224, and converts the structure of the data decrypted by the decryption module 222 into records for each prescription. The converted data is counted and passed to the mail sending module 224.

The count / mail sending module 224 is connected to the structure conversion module 223, the backup module 211, the pharmacy system 100, and the name identification processing module 225, and counts the records of the data whose structure has been converted by the structure conversion module 223. To report to. Specifically, the number of receipt records for the month is sent to the pharmacy (pharmacy system 100) by e-mail. The reward to the pharmacy is calculated using the number of records received. Further, when all the monthly data is prepared, the data is stored in the backup module 211. The counted data is passed to the name identification module 225.
The name identification processing module 225 is connected to the count / mail sending module 224, the facility master file 212, and the category assignment module 226, and based on the facility master file 212 (the medical institution master etc.), the count / mail sending module The name identification process of the medical institution in the data received from 224 is performed. For example, when “ABC General Hospital” is registered in the facility master file, “ABC Hospital” or “ABC” may be described as data of the medical institution in the data sent by e-mail. These data are also processing for counting and regarding the data of “ABC General Hospital”. In addition, the maintenance process of the facility master file 212 is performed on the record that could not be identified. It should be noted that the operator makes a name identification decision such as adding a medical institution in the maintenance process for the facility master file 212. The data subjected to the name identification process is passed to the category assignment module 226.

The category assignment module 226 is connected to the name identification processing module 225, the facility master file 212, and the mask processing module 227, and assigns a category to each record based on the facility master file 212. Here, the category depends on hospital clinic distinction, number of beds, prescription area, dispensing area, and the like. This category is used when creating reports for users. For example, this is for deriving results such as the tendency of drugs to be used varies depending on the number of beds. The data to which the category is assigned is passed to the mask processing module 227.
The mask processing module 227 is connected to the category assignment module 226 and the processing result storage module 213, and performs masking processing (such as hiding the data) on the clinic name, pharmacy name, pharmacy code, and the like. Then, the data for which the masking process has been completed is stored in the process result storage module 213. The processing result storage module 213 is connected to the mask processing module 227, the exclusion processing module 228, the structure conversion module 229, and the public data storage module 214.
The exclusion processing module 228 is connected to the exclusion patient list 113 and the processing result storage module 213 of the pharmacy system 100. The exclusion patient list 113 is input, and if there is an exclusion patient list, it is stored in the processing result storage module 213. Exclusion processing is performed on the stored data.

The structure conversion module 229 is connected to the processing result storage module 213, the public data storage module 214, and the user format file 215, and the user system 300 can process the data stored in the processing result storage module 213. Structure conversion to format (including data item extraction processing requested by the user). In addition, a record count process is performed. Then, the structure-converted file is output as a user format file 215 and recorded on a recording medium. Further, the data is recorded in the public data storage module 214 which is a storage accessible from the external user system 300. The public data storage module 214 is connected to the processing result storage module 213, the structure conversion module 229, and the user system 300, and the user format file 215 is connected to the structure conversion module 229 and the user system 300. . For data that does not require structural conversion, data stored in the processing result storage module 213 may be stored in the public data storage module 214 as it is.
The user management module 231 registers and manages users who can access the data stored in the public data storage module 214.
The access management module 232 manages access from the user system 300 to the public data storage module 214 in conjunction with the user management module 231.

  The user system 300 is connected to the medical information processing system 200 and accesses the public data storage module 214 of the medical information processing system 200. Alternatively, a recording medium storing a user format file 215 of the medical information processing system 200 is received. Then, the data obtained by accessing the public data storage module 214 or the data of the user format file 215 is processed in the user system 300. In the user system 300, marketing information analysis combined with data unique to the user system 300 (such as user sales information) is performed.

Next, the function and operation (operation) will be described.
A processing example performed by the pharmacy system 100 will be described using the flowchart of FIG.
In step S301, the pharmacy system 100 inputs the receipt 110 and creates the receipt file 111. The data structure of the receipt file 111 (receipt file 6000) is shown in FIG.
(1) The receipt file 111 is one volume and one file for each pharmacy.
(2) The receipt file 111 is divided into a plurality of records by a 2-byte character string (hereinafter referred to as “line feed code”) indicating a record delimiter, and is configured by a combination of records.
(4) Receipt file 111 includes pharmacy information 6100 (pharmacy information record 6110), receipt 6200 (recept common record 6210, receipt information 6220, prescription information 6230, summary column record 6240 and basic fee / pharmaceutical management fee record 6250), and total. The pharmacy information 6100, the receipt 6200, and the total statement information 6300 are recorded in order for each insurance pharmacy.
(5) The receipt 6200 includes a receipt common record 6210, receipt information 6220 (plurality), prescription information 6230 (plurality), summary column record 6240 (plurality), and basic fee / pharmaceutical management fee record 6250 (plurality).
(6) The receipt information 6220 is composed of an insurer record 6221, an elderly person record 6222, a public expense record 6223 (plural), and a National Health Insurance Federation specific information record 6224, and records necessary for each receipt type are recorded.
(7) The prescription information 6230 is composed of a prescription basic record 6231, a dispensing information record 6232 (plurality), a pharmaceutical record or specific equipment record 6233 (plurality), and a comment record 6234 (plurality). Is recorded. The recording order within the same prescription content is recorded in the order of prescription basic record 6231, dispensing information record 6232 (plurality), pharmaceutical record or specific equipment record 6233 (plurality) and comment record 6234 (plurality).
(8) The receipt common record 6210 is recorded at the head of the receipt 6200. The receipt information 6220 is recorded either immediately after the receipt common record 6210 or at the end of the receipt 6200.

In step S302, the anonymization encryption module 121 anonymizes the personal information portion in the receipt file 111.
In step S303, the anonymized encryption module 121 determines whether there is an excluded patient. If there is an excluded patient, the process proceeds to step S304, and if there is no excluded patient, the process proceeds to step S305.
In step S304, the excluded patient data is excluded (deleted) from the anonymized data in step S302.
In step S305, the receipt file 111 from which the excluded patient data is excluded in step S304 or the reception file 111 in which there is no excluded patient is encrypted.
In step S306, the encrypted file 112 obtained by encrypting the receipt file 111 in step S305 is transmitted to the medical information processing system 200.
In step S307, the pharmacy system 100 confirms the completion of sending in step S306.

A processing example performed by the medical information processing system 200 will be described with reference to the flowchart of FIG.
In step S401, the reception processing module 221 receives the encrypted file 112 sent by the pharmacy system 100.
In step S402, it is determined whether or not data to be processed monthly is prepared for each pharmacy. If not, the process returns to step S401 and repeats until all of them are complete. If they are aligned, the process proceeds to step S403.
In step S403, the decryption module 222 decrypts the received file.
In step S <b> 404, the structure conversion module 223 performs structure conversion for processing the data in the decrypted file in the medical information processing system 200.

In step S405, the count / mail sending module 224 counts the number of records in the received file in pharmacy units.
In step S406, the count / mail sending module 224 reports the number counted in step S405 to the pharmacy using electronic mail.
In step S407, the count / mail sending module 224 stores the decrypted file in the backup module 211 as a backup.
In step S <b> 408, the name identification processing module 225 performs name identification processing on the data in the receipt file based on the facility master file 212.

In step S409, the name identification processing module 225 determines whether there is data that could not be identified. If there is data that could not be identified, the process proceeds to step S410. If there is no data that could not be identified, the process proceeds to step S411.
In step S410, since the medical institution that could not perform the name identification process has not been registered in the facility master file 212, an addition or change process to the facility master file 212 is performed based on the determination of the operator.
In step S411, the category assignment module 226 assigns category data to the receipt data so that a report can be easily created.
In step S412, the mask processing module 227 performs a masking process so that the clinic name, pharmacy name, pharmacy code, etc. cannot be specified from the receipt file.

In step S413, the exclusion processing module 228 determines whether there is a patient to be excluded. If there is a patient to be excluded, the process proceeds to step S414, and if there is no patient to be excluded, the process proceeds to step S415.
In step S414, data regarding the patient to be excluded from the receipt data is excluded.
Note that the processing in steps S413 and S414 is the same as the processing in steps S303 and S304 in FIG. 3, but can also handle cases where there is a time difference in the registration of patients to be excluded. is there.

In step S415, data for which a series of processing from step S408 onward is completed is stored in the processing result storage module 213.
In step S416, the structure conversion module 229 converts the data stored in the processing result storage module 213 into a data format that can be processed by the user system 300.
In step S417, the structure conversion module 229 outputs the file processed in step S416 as the user format file 215.
In step S418, the structure conversion module 229 stores the file processed in step S416 in the public data storage module 214 in order to make it public to the user system 300.

An example of processing performed by the user system 300 will be described using the flowchart of FIG.
In step S <b> 501, the user system 300 accesses the public data storage module 214 or the user format file 215 in the medical information processing system 200. At this time, the user and access to be accessed are managed by the user management module 231 and the access management module 232 in the medical information processing system 200.
In step S <b> 502, the user system 300 retrieves the data in the public data storage module 214 or the user format file 215. Thereafter, processing by the user system 300 is performed.

In the above embodiment, the structure conversion module 229 performs the process of converting the structure into the user file. However, the present invention is not limited to this, and the report may be generated according to the user's request. At that time, data mining processing may be performed.
Moreover, the anonymization encryption module 121 may perform the anonymization process of the personal information regarding a doctor as well as the patient anonymization process.

This embodiment has the following effects.
(1) The information described in the receipt can be analyzed.
(2) The patient is uniquely encoded, and it becomes possible to analyze the aging of a patient without specifying a name.
(3) The medical information processing system 200 provides data to the user system 300 at regular intervals (for example, once / month, twice / month), so that the user regularly checks changes in market information. Will be able to.
(4) The database can be analyzed according to the user.
(5) A database can be provided with data items requested by the user.
(6) Consulting services such as marketing information analysis combined with user sales information can be performed.

  Note that the hardware configuration of a computer that executes the program according to the present embodiment is a general computer as shown in FIG. Each of the pharmacy system 100, the medical information processing system 200, and the user system 300 has a hardware configuration as shown in FIG. A CPU 901 that executes programs such as the anonymization encryption module 121 and the excluded patient processing module 122 of the pharmacy system 100, the decryption module 222 of the medical information processing system 200, the structure conversion module 223, and the like, and a RAM 902 that stores the programs and data A ROM 903 storing a program for starting the computer, an HD 904 (used by the backup module 211, the processing result storage module 213, etc. of the medical information processing system 200) as an auxiliary storage device, a keyboard, An input device 906 for inputting data such as a mouse, an output device 905 such as a CRT or a liquid crystal display, a communication line interface 907 for connecting to a communication network, and connecting them to exchange data And a bus 908 for. A plurality of these computers may be connected to each other via a network.

  Note that the hardware configuration illustrated in FIG. 7 illustrates one configuration example, and the present embodiment is not limited to the configuration illustrated in FIG. 7, and is a configuration capable of executing the modules described in the present embodiment. I just need it. For example, some modules may be configured with dedicated hardware (for example, ASIC).

The described program can be stored in a recording medium, and the program can be provided by communication means. In that case, for example, the above-described program can also be regarded as an invention of a “computer-readable recording medium recording the program”.
The “computer-readable recording medium on which a program is recorded” refers to a computer-readable recording medium on which a program is recorded, which is used for program installation, execution, program distribution, and the like.
The recording medium is, for example, a digital versatile disc (DVD), which is a standard established by the DVD Forum, such as “DVD-R, DVD-RW, DVD-RAM,” and DVD + RW. Standards such as “DVD + R, DVD + RW, etc.”, compact discs (CDs), read-only memory (CD-ROM), CD recordable (CD-R), CD rewritable (CD-RW), etc. MO), flexible disk (FD), magnetic tape, hard disk, read only memory (ROM), electrically erasable and rewritable read only memory (EEPROM), flash memory, random access memory (RAM), etc. It is.
The program or a part of the program can be recorded on the recording medium and stored or distributed. Also, by communication, for example, a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a wired network used for the Internet, an intranet, an extranet, etc., or wireless communication It can be transmitted using a transmission medium such as a network or a combination of these, and can also be carried on a carrier wave.
Furthermore, the above program may be a part of another program, or may be recorded on a recording medium together with a separate program. Moreover, it may be divided and recorded on a plurality of recording media.

It is a block diagram which shows the structural example of the module in this Embodiment. It is a block diagram which shows the structural example of the whole system. It is a flowchart of the process example which a pharmacy system performs. It is a flowchart of the process example which a medical information processing system performs. It is a flowchart of the example of a process which a user system performs. It is explanatory drawing which showed the example of the data structure of receipt data. It is a block diagram which shows the hardware structural example of the computer which implement | achieves this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Pharmacy system 110 ... Receipt 111 ... Receipt file 112 ... Encryption file 113 ... Exclusion patient list 121 ... Anonymization encryption module 122 ... Exclusion patient processing module 140 ... Anonymization 200 ... Medical information processing system 211 ... Backup module 212 ... Facility master file 213 ... processing result storage module 214 ... data storage module for disclosure 215 ... user format file 221 ... reception processing module 222 ... decryption module 223 ... structure conversion module 224 ... count and mail sending module 225 ... name identification processing module 226 ... category Giving module 227 ... Mask processing module 228 ... Exclusion processing module 229 ... Structure conversion module 231 ... User management module 232 Access management module 300 ... user system

Claims (8)

A receipt input means for inputting receipt data including a patient name;
Anonymization means for performing anonymization by a one-way function for at least a patient name in the receipt data input by the receipt input means;
Excluded patient anonymization means for anonymizing with a one-way function for at least patient names of patients not to be processed,
Exclusion means for excluding from the subject the patient data anonymized by the exclusion patient anonymization means from the anonymization receipt data anonymization means,
Encryption means for encrypting the receipt data excluded by the exclusion means from the receipt data anonymized by the anonymization means,
A medical information processing system comprising: transmission means for transmitting the receipt data encrypted by the encryption means. A receiving means for receiving encrypted receipt data including data relating to the pharmacy;
Decoding means for decoding the receipt data received by the receiving means;
Counting report means for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding means, and reporting the counting result to the pharmacy;
Masking processing means for masking data relating to the pharmacy in the receipt data decoded by the decoding means;
Structure converting means for converting the structure of the receipt data masked by the masking means;
A medical information processing system comprising storage means for storing the receipt data structurally converted by the structural conversion means so as to be accessible from the outside. A receipt input means for inputting receipt data including data on a patient name and a pharmacy;
Anonymization means for performing anonymization by a one-way function for at least a patient name in the receipt data input by the receipt input means;
Excluded patient anonymization means for anonymizing with a one-way function for at least patient names of patients not to be processed,
Exclusion means for excluding from the subject the patient data anonymized by the exclusion patient anonymization means from the anonymization receipt data anonymization means,
Encryption means for encrypting the receipt data excluded by the exclusion means from the receipt data anonymized by the anonymization means,
Transmitting means for transmitting the receipt data encrypted by the encryption means;
Receiving means for receiving receipt data transmitted by the transmitting means;
Decoding means for decoding the receipt data received by the receiving means;
Counting report means for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding means, and reporting the counting result to the pharmacy;
Masking processing means for masking data relating to the pharmacy in the receipt data decoded by the decoding means;
Structure converting means for converting the structure of the receipt data masked by the masking means;
A medical information processing system comprising storage means for storing the receipt data structurally converted by the structural conversion means so as to be accessible from the outside. A receipt input means for inputting receipt data including data on a patient name and a pharmacy;
Anonymization means for performing anonymization by a one-way function for at least a patient name in the receipt data input by the receipt input means;
Excluded patient anonymization means for anonymizing with a one-way function for at least patient names of patients not to be processed,
Exclusion means for excluding from the subject the patient data anonymized by the exclusion patient anonymization means from the anonymization receipt data anonymization means,
A transmission means for transmitting the remaining receipt data excluded from the target by the first-term exclusion means;
Receiving means for receiving receipt data transmitted by the transmitting means;
Counting report means for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data received by the receiving means, and reporting the counting result to the pharmacy;
A medical information processing system comprising masking processing means for masking data relating to a pharmacy in the receipt data decoded by the receiving means. On the computer,
A receipt input function for inputting receipt data including a patient name;
An anonymization function for anonymizing by a one-way function for at least a patient name in the receipt data input by the receipt input function;
Excluded patient anonymization function that anonymizes by one-way function for at least patient name of patients not to be processed,
Exclusion function to exclude the patient's receipt data anonymized by the exclusion patient anonymization function from the anonymization reception data from the subject,
An encryption function for encrypting the receipt data excluded by the exclusion function from the reception data anonymized by the anonymization function;
A medical information processing program that realizes a transmission function of transmitting receipt data encrypted by the encryption function. On the computer,
A receiving function to receive encrypted receipt data including data about the pharmacy;
A decryption function for decrypting the receipt data received by the reception function;
A count reporting function for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding function, and reporting the counting result to the pharmacy;
A masking process function for masking data related to the pharmacy in the receipt data decoded by the decoding function;
A structure conversion function for converting the structure of the receipt data masked by the masking function;
A medical information processing program for realizing a storage function of storing the receipt data subjected to structure conversion by the structure conversion function so as to be accessible from the outside. On the computer,
A receipt input function for entering receipt data including patient name and pharmacy data;
An anonymization function for anonymizing by a one-way function for at least a patient name in the receipt data input by the receipt input function;
Excluded patient anonymization function that anonymizes by one-way function for at least patient name of patients not to be processed,
Exclusion function to exclude the patient's receipt data anonymized by the exclusion patient anonymization function from the anonymization reception data from the subject,
An encryption function for encrypting the receipt data excluded by the exclusion function from the reception data anonymized by the anonymization function;
A transmission function for transmitting the receipt data encrypted by the encryption function;
A reception function for receiving the receipt data transmitted by the transmission function;
A decryption function for decrypting the receipt data received by the reception function;
A count reporting function for counting the receipt data in the pharmacy according to the data related to the pharmacy from the receipt data decoded by the decoding function, and reporting the counting result to the pharmacy;
A masking process function for masking data related to the pharmacy in the receipt data decoded by the decoding function;
A structure conversion function for converting the structure of the receipt data masked by the masking function;
A medical information processing program for realizing a storage function of storing the receipt data subjected to structure conversion by the structure conversion function so as to be accessible from the outside. On the computer,
A receipt input function for entering receipt data including patient name and pharmacy data;
An anonymization function for anonymizing by a one-way function for at least a patient name in the receipt data input by the receipt input function;
Excluded patient anonymization function that anonymizes by one-way function for at least patient name of patients not to be processed,
Exclusion function to exclude the patient's receipt data anonymized by the exclusion patient anonymization function from the anonymization reception data from the subject,
A transmission function for transmitting the remaining receipt data excluded from the target by the exclusion function;
A reception function for receiving the receipt data transmitted by the transmission function;
A count reporting function for counting the receipt data in the pharmacy according to the data about the pharmacy from the receipt data received by the receiving function, and reporting the counting result to the pharmacy;
A medical information processing program for realizing a masking processing function for masking data relating to a pharmacy in the receipt data decrypted by the receiving function.

Images