JP2011053810A - Statistical analysis system, information processing apparatus, center device, and control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure the protection of the personal information of an institute in a statistical analysis technology through a network. <P>SOLUTION: The information processing apparatus 100a is connected through a network to a center device for collecting medical information as information for specifying the features of each clinic or each participating institute from a plurality of clinics through a network, and configured to perform statistical processing by distributing medical information with the other information processing apparatus. The information processing apparatus 100a includes: a division part 123 for extracting the data of items as the objects of the statistical processing from the medical information of one clinic, and for dividing the extracted data, and for outputting partial data; an arithmetic part 124 for performing an irreversible arithmetic operation corresponding to the statistical processing to the data transferred from the other information processing apparatus and the partial data obtained by the division part 123 to set the partial data and the transferred data in a state that those data cannot be reproduced; and a transmission/reception part 110 for transferring the partial data or the data prior to the arithmetic operation to the other information processing apparatus. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a statistical analysis system, an information processing apparatus, a center apparatus, and a control program that perform statistical processing via a network.

  2. Description of the Related Art Conventionally, a method of collecting various information from an information processing apparatus installed in a facility such as a store via a network and performing various statistical processes in order to analyze the collected information has been widely used. In recent years, from the viewpoint of treatment by EBM (Evidence Based Medicine) and marketing to the pharmaceutical industry, it has been considered to apply statistical analysis technology via networks to medical institutions such as clinics as well as stores. Yes.

  However, the medical institution information is required to have higher confidentiality than the store information. As a method for applying statistical analysis technology via a network to a medical institution, an intermediate institution is provided between the medical institution and the research institution, and the device in the medical institution can identify the individual patient (so-called information) A method has been proposed in which medical information is stored in a device in an intermediate institution after eliminating personal information, and a device in a research institution acquires medical information from a device in the intermediate institution (see Patent Document 1). .

JP 2008-15742 A

  However, in the method described in Patent Document 1, although personal information of a patient can be protected, other information is collectively stored in a device in an intermediate engine from a device in a medical institution. Therefore, in the method described in Patent Document 1, a medical institution is specified based on medical information stored in a device in the intermediate engine, and the characteristics and status of the medical institution are grasped.

  Hereinafter, information that can identify an institution such as a medical institution, information that characterizes the institution, or information that can constitute such information will be referred to as “institutional personal information”. In other words, the personal information of an institution is information that can specify each institution or the characteristics of each institution and is highly necessary to be kept secret from other institutions.

  In the conventional technology, there is a problem that the protection of the personal information of the institution cannot be secured in the statistical analysis technology via the network.

  Accordingly, an object of the present invention is to provide a statistical analysis system, an information processing apparatus, a center apparatus, and a control program that can ensure protection of personal information of an organization in a statistical analysis technique via a network.

  In order to solve the above-described problems, the present invention has the following features. First, the feature of the statistical analysis system (for example, statistical analysis system 1) according to the present invention is information that can identify each participating organization or each participating organization from a plurality of participating organizations (for example, clinics a to c) participating in the analysis. Is a statistical analysis system having a center device (for example, center device 200) that collects institution information (for example, medical information) via a network (for example, network 300) and performs statistical processing, and is connected to the network, A plurality of information processing devices (for example, information processing devices 100a to 100c) that distribute and statistically distribute institution information of a plurality of participating organizations, each of the information processing devices being subjected to statistical processing from institution information of one participating organization And a division unit (for example, the division unit 123) that extracts the data of the item to be output, divides the extracted data and outputs partial data, and other data A calculation unit (for example, calculation unit 124) that performs irreversible calculation according to statistical processing on the data transferred from the information processing device and the partial data obtained by the division unit, and obtained by the division unit. A transfer unit (for example, the transmission / reception unit 110) for transferring the partial data or the data after the calculation by the calculation unit to another information processing apparatus, or transferring the data after the calculation by the calculation unit to the center device. The center device derives a statistical processing result by performing an operation according to the statistical processing on the post-computation data transferred from the information processing device, and the transfer unit transfers the data to another information processing device. When transferring partial data, the gist is to perform data transfer so that the transfer destinations for all the divided partial data are not the same information processing apparatus. Note that the information processing apparatus includes one computer or a plurality of computers.

  According to such a statistical analysis system, the information processing apparatus obtains the data by dividing the extracted data by extracting the data of items subject to statistical processing from the institution information of one participating institution. It is possible to make it difficult to identify the participating institution or its characteristics from the partial data, and to protect the institution information (that is, institutional personal information). The institution information may be composed of information (institutional personal information) that can identify the characteristics of participating institutions and other information.

  Each information processing device reproduces the partial data and the transferred data by performing an irreversible operation according to statistical processing on the data transferred from the other information processing device and the partial data. Make it impossible. As a result, the institution information (that is, the institution's personal information) can be more reliably specified. What is transferred to the center device is the data after the calculation, and the center device cannot identify the participating organization or its characteristics from the data after the calculation. Therefore, the statistical processing of the engine information can be performed without the center device knowing the engine information (that is, the personal information of the engine).

  In addition, if all partial data is transferred from one information processing apparatus to one other information processing apparatus, the data before division can be reproduced by the one other information processing apparatus. When transferring partial data to another information processing apparatus, the data transfer is performed so that the transfer destinations for all the divided partial data are not the same information processing apparatus.

  The statistical analysis system according to the present invention is characterized in that, in the statistical analysis system according to the above feature, the center device designates a data item to be subjected to statistical processing, a method for dividing the data, and partial data used for calculation. Communication via each information processing device, including data designation information to be performed, computation content designation information for designating computation content according to statistical processing, and transfer destination designation information for designating a data transfer destination in each information processing device A packet (for example, a halfway packet) is transmitted to the information processing apparatus, and the division unit extracts and divides data of items to be statistically processed according to the data designation information included in the communication packet, The calculation unit performs a calculation according to statistical processing according to the calculation content designation information included in the communication packet, and the transfer unit is obtained by the dividing unit. The communication packet is included in the communication packet, and the communication packet is transferred to another information processing apparatus or the center apparatus in accordance with the transfer destination designation information included in the communication packet. Is the gist.

  According to such a statistical analysis system, the statistical processing can be managed and controlled by the center apparatus, and various types of statistical processing can be easily handled. In addition, since the center device receives post-computation data included in a communication packet that passes through each information processing device, the center device cannot identify the participating organization or its characteristics from the post-computation data. Therefore, the statistical processing of the engine information can be performed without the center device knowing the engine information (that is, the personal information of the engine).

  A feature of the information processing apparatus according to the present invention is that statistical information processing is performed by collecting, through a network, institution information, which is information that can identify characteristics of each participating institution or each participating institution, from a plurality of participating institutions participating in the analysis. An information processing apparatus that is connected to a center apparatus via a network and performs statistical processing by distributing engine information of the plurality of participating institutions together with other information processing apparatuses, and statistical processing is performed from the engine information of one participating institution. The data of the target item is extracted, the extracted data is divided and output partial data, the data transferred from another information processing apparatus, and the partial data obtained by the dividing unit A calculation unit that performs irreversible calculations according to statistical processing, and transfers the partial data obtained by the dividing unit or the data after the calculation by the calculation unit to another information processing apparatus; Or a transfer unit that transfers data after calculation by the calculation unit to the center device, and the transfer unit transfers all the divided partial data when transferring partial data to another information processing device. The gist is to perform data transfer so that the transfer destination is not the same information processing apparatus.

  The center device according to the present invention is characterized by a center that collects, through a network, institution information that is information that can identify each participating organization or the characteristics of each participating organization from a plurality of participating organizations that participate in the analysis. Data specifying information for specifying items of data to be subjected to statistical processing, a method for dividing the data, partial data used for calculation, and calculation content specifying information for specifying calculation content according to statistical processing And transmission destination designation information for designating a data transfer destination in each information processing device, and a transmission unit (for example, transmission / reception unit 210) that transmits a communication packet that passes through each information processing device to the information processing device, A receiving unit (for example, the transmitting / receiving unit 210) that receives the communication packet that is transferred from the information processing apparatus and includes the calculated data, and a post-computation included in the received communication packet And summarized in that and a statistical result derivation unit for deriving the statistical processing result by performing a calculation in accordance with the statistical processing for chromatography data (statistical result derivation unit 224).

  A feature of the control program according to the present invention is that a center that collects, through a network, institution information that is information that can identify each participating organization or characteristics of each participating organization from a plurality of participating organizations participating in the analysis, and performs statistical processing. An information processing apparatus connected to the apparatus via a network and distributing the engine information of the plurality of participating institutions together with other information processing apparatuses to perform statistical processing. A division procedure (for example, step S103) for extracting the data of the item and outputting the partial data by dividing the extracted data, the data transferred from another information processing apparatus, and the partial data obtained by the division procedure Calculation procedure (for example, step S104) for performing irreversible calculation according to statistical processing, and partial data obtained by the division procedure or the calculation The data after the calculation according to the procedure is transferred to another information processing apparatus or the data after the calculation according to the calculation procedure is transferred to the center apparatus (for example, step S107). When transferring partial data to another information processing apparatus, the gist is to perform data transfer so that the transfer destinations of all the divided partial data are not the same information processing apparatus.

  A feature of the control program according to the present invention is that a center that collects, through a network, institution information that is information that can identify each participating organization or characteristics of each participating organization from a plurality of participating organizations participating in the analysis, and performs statistical processing. In the apparatus, the data items to be subjected to statistical processing, the data division method, data designation information for designating partial data used for computation, computation content designation information for designating computation content according to statistical processing, and A transmission procedure (for example, step S203) for transmitting a communication packet that passes through each information processing device to the information processing device, including transfer destination designation information that specifies a data transfer destination in the information processing device; A reception procedure (for example, step S205) for receiving the communication packet that is transferred and includes the calculated data, and a calculation included in the received communication packet And summarized in that to execute a statistical processing result derivation procedure for deriving the statistical processing result by performing a calculation in accordance with the statistical processing (e.g., step S206) for the data.

  According to the present invention, it is possible to provide a statistical analysis system, an information processing apparatus, a center apparatus, and a control program that can ensure protection of personal information of an organization in a statistical analysis technique via a network.

1 is an overall schematic configuration diagram of a statistical analysis system according to an embodiment of the present invention. It is a block diagram which shows the structure of the information processing apparatus which concerns on embodiment of this invention. It is a figure which shows an example of the medical information which the information processing apparatus which concerns on embodiment of this invention memorize | stores. It is a block diagram which shows the structure of the center apparatus which concerns on embodiment of this invention. It is a figure which shows the whole operation | movement of the statistical analysis system which concerns on embodiment of this invention. It is a figure which shows the format example of the half piece packet which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the information processing apparatus which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the center apparatus which concerns on embodiment of this invention. It is a figure which shows the comparative example of embodiment of this invention.

  Next, an embodiment of the present invention will be described with reference to the drawings. Specifically, (1) Outline of statistical analysis system, (2) Configuration of information processing device, (3) Configuration of center device, (4) Operation of statistical analysis system, (5) Action / effect, (6) Comparative examples and (7) other embodiments will be described. In the description of the drawings in the following embodiments, the same or similar parts are denoted by the same or similar reference numerals.

(1) Outline of Statistical Analysis System In the following embodiment, an example of performing statistical analysis of medical information held by a clinic will be described. The medical information is information that can specify a clinic or its characteristics, and for example, a receipt, an electronic medical record, order information, various application forms, and the like correspond to the medical information. In the following embodiments, a clinic corresponds to a participating organization that participates in statistical analysis, and medical information of each clinic corresponds to institution information of the clinic.

  FIG. 1 is an overall schematic configuration diagram of a statistical analysis system 1 according to the present embodiment.

  As shown in FIG. 1, in the statistical analysis system 1, a plurality of clinics a, b, c and a center C are connected via a network 300. The network 300 is a wide area network such as the Internet or a dedicated line, but may be a wired network or a wireless network. The center C is an organization that manages and controls statistical analysis.

  The clinics a, b, and c are clinics participating in statistical processing of medical information (for example, receipts, electronic medical records, order information, various application forms, etc.). In the example of FIG. 1, only three clinics a, b, and c are illustrated, but the number of clinics that actually participate in statistical processing is assumed to be several tens or more. However, it is not limited to several tens or more, it may be two or more, and may be several tens or less.

  The information processing apparatus 100a is installed in the clinic a and can access a medical information database (DB) 150a of the medical information processing system of the clinic a. The information processing apparatus 100a includes one computer or a plurality of computers. The medical information DB 150a holds medical information of the clinic a. The information processing apparatus 100a is connected to the network 300 by wire or wireless.

  The information processing apparatus 100b is installed in the clinic b and can access the medical information DB 150b of the medical information processing system of the clinic b. The information processing apparatus 100b includes one computer or a plurality of computers. The medical information DB 150a holds medical information of the clinic b. The information processing apparatus 100b is connected to the network 300 by wire or wireless.

  The information processing apparatus 100c is installed in the clinic c and can access the medical information DB 150c of the medical information processing system of the clinic c. The information processing apparatus 100c includes one computer or a plurality of computers. The medical information DB 150c holds medical information of the clinic c. The information processing apparatus 100c is connected to the network 300 by wire or wireless.

  In the following description, the information processing apparatus 100a, the information processing apparatus 100b, and the information processing apparatus 100c are simply referred to as the information processing apparatus 100 unless particularly distinguished. When the medical information DB 150a, the medical information DB 150b, and the medical information DB 150c are not particularly distinguished, they are simply expressed as the medical information DB 150.

  The information processing apparatus 100 can communicate with the center apparatus 200 installed in the center C via the network 300. Each information processing apparatus 100 can also communicate with other information processing apparatuses 100 via the network 300. That is, each information processing apparatus 100 is an apparatus for distributing and statistically processing medical information of a plurality of clinics a, b, and c while ensuring protection of medical information.

  The center apparatus 200 collects medical information (institution information) from a plurality of clinics a, b, and c (a plurality of participating institutions) via the network 300 and performs statistical processing (for example, distribution, correlation, average, or variance). It is a device for. Examples of statistical processing include, for example, processing for obtaining a nationwide distribution of infectious diseases such as influenza and processing for obtaining a use record of a medicine in a certain disease.

  Here, an outline of statistical processing performed by the statistical analysis system 1 will be described with reference to FIGS. 2 and 3.

  First, the center device 200 generates a half-packet that is a communication packet that passes through each information processing device 100 in accordance with a statistical processing plan created by the analyst operating the center device 200 using the center device 200.

  The statistical processing plan is information indicating what kind of statistical processing is performed in the statistical analysis system 1. Specifically, the statistical processing plan includes the timing of statistical processing, the type of statistical processing (for example, distribution, correlation, average, or variance), the item of data to be subjected to statistical processing, the number of packets issued in the middle, This includes measures for handling errors. Partial data or data after calculation is stored in each halfway packet by each information processing apparatus 100.

  The partial data is obtained by each information processing apparatus 100 extracting data of items to be subjected to statistical processing from the medical information of the clinic to which the information processing apparatus belongs, and dividing the extracted data. However, depending on the contents of the statistical processing, there is a case where calculation is performed on the partial data.

  After the calculation, each information processing apparatus 100 performs statistical processing on the data transferred from the other information processing apparatus 100 and the partial data corresponding to the medical information of the clinic to which the information processing apparatus belongs. Obtained by performing irreversible calculations. The halfway packet is a communication packet for carrying partial data or post-computation data.

  The halfway packet generated by the center device 200 includes data items to be subjected to statistical processing, a data division method, data designation information for designating partial data used for computation, and computation contents corresponding to statistical processing. Calculation content specifying information to be specified and transfer destination specifying information for specifying a data transfer destination in each information processing apparatus 100 are included. The items of data to be subjected to statistical processing mean data attributes and ranges necessary for the statistical processing.

  FIG. 2 is a diagram illustrating a format example of a halfway packet.

  As shown in FIG. 2, the halfway packet includes data designation information, calculation content designation information, post-calculation data, and transfer destination designation information. The data designation information is information for designating data items to be subjected to statistical processing, a method for dividing the data, and partial data used for calculation. Each information processing apparatus 100 extracts (searches) data of items to be subjected to statistical processing from the medical information DB 150 according to the data designation information, and divides the extracted data into pieces. From the viewpoint of concealing medical information, the greater the number of divisions, the better. However, from the viewpoint of reducing the processing load, the smaller the number of divisions, the better. In the example of FIG. 2, when the data of the item to be subjected to statistical processing is divided into three, partial data (any of partial data 1 to 3) is designated for each clinic.

  The calculation content specifying information includes an input that is information for specifying data to be calculated and a process that is information for specifying a calculation method. The post-computation data stores the latest post-computation data and is updated each time it passes through one information processing apparatus 100. Note that the data after the calculation does not exist at the time of generation of a halfway packet in the center device 200. In addition, at the time of transfer from the information processing apparatus 100 that is the starting point of the packet transfer path constituted by each information processing apparatus 100, there is no data after calculation, and there is partial data instead. Each information processing apparatus 100 performs a calculation according to the statistical process according to the calculation content designation information.

  The transfer destination designation information is information for designating a transfer destination in each information processing apparatus 100. Specifically, the transfer destination designation information is an address (for example, an IP address) indicating the position of each information processing apparatus 100 and center apparatus 200 on the network 300 on the transfer path followed by the halfway packet. Each information processing apparatus 100 transfers a half-piece packet to another information processing apparatus 100 or center apparatus 200 according to the transfer destination designation information.

  FIG. 3 is a diagram illustrating an example of the overall operation of the statistical analysis system 1. In the example of FIG. 3, the center device 200 generates three half piece packets (half piece packets 1 to 3), and each half piece packet is routed to the information processing devices 100a to 100c.

  First, the operation related to the half packet 1 will be described. The halfway packet 1 generated by the center device 200 is subject to statistical processing as data designation information for each of the information processing device 100a of the clinic a, the information processing device 100b of the clinic b, and the information processing device 100c of the clinic c. Information for designating the first partial data of the data divided into three is included. Further, in the halfway packet 1, as the transfer destination designation information, the address of the information processing apparatus 100a at the clinic a → the address of the information processing apparatus 100b at the clinic b → the address of the information processing apparatus 100c at the clinic c → the center apparatus of the center C Information specifying the transfer destination in the order of 200 addresses is included.

  The information processing apparatus 100a of the clinic a receives the half piece packet 1 from the center apparatus 200, includes the partial data a1 in the half piece packet 1 according to the data designation information contained in the half piece packet 1, and is included in the half piece packet 1 The halfway packet 1 is transferred to the information processing apparatus 100b in the clinic b according to the transfer destination designation information. At that time, since the halfway packet 1 does not include all of the medical information of the clinic a, the information processing apparatus 100b identifies the clinic a based on the partial data a1 and grasps the characteristics and status of the clinic a. I can't do it.

  The information processing apparatus 100b receives the half piece packet 1 from the information processing apparatus 100a, and data obtained as a result of calculating the partial data a1 and the partial data b1 according to the data designation information and the processing content designation information included in the half piece packet 1 (A1b1) is included in the half piece packet 1, and the half piece packet 1 is transferred to the information processing apparatus 100c in accordance with the transfer destination designation information included in the half piece packet 1. At that time, the half piece packet 1 includes the data (a1b1) after the calculation, and the partial data a1 and the partial data b1 are in an unrecoverable state. For this reason, the information processing apparatus 100c cannot identify the clinics a and b based on the data (a1b1) after the calculation, and cannot grasp the characteristics and situations of the clinics a and b.

  The information processing apparatus 100c receives the halfway piece packet 1 from the information processing apparatus 100b, and performs post-computation data (a1b1) contained in the halfway piece packet 1 according to the data designation information and the processing content designation information contained in the halfway piece packet 1 The data (a1b1c1) obtained as a result of the calculation of the partial data c1 is included in the half piece packet 1, and the half piece packet 1 is transferred to the center apparatus 200 according to the transfer destination designation information included in the half piece packet 1. At that time, the half piece packet 1 includes data (a1b1c1) after the calculation, and the partial data a1, the partial data b1, and the partial data c1 are in an unrecoverable state. For this reason, the center apparatus 200 cannot identify the clinics a, b, and c based on the calculated data (a1b1c1) and cannot grasp the characteristics and status of the clinics a, b, and c.

  The center apparatus 200 receives the half piece packet 1 from the information processing apparatus 100c, and temporarily stores the post-computation data (a1b1c1) included in the half piece packet 1.

  Secondly, an operation related to the half packet 2 will be described. In the halfway packet 2 generated by the center apparatus 200, as the data designation information, the statistical processing target is applied to each of the information processing apparatus 100a of the clinic a, the information processing apparatus 100b of the clinic b, and the information processing apparatus 100c of the clinic c. Information for designating the second partial data of the data divided into three. Further, in the halfway packet 2, as the transfer destination designation information, the address of the information processing device 100a at the clinic a → the address of the information processing device 100c at the clinic c → the address of the information processing device 100b at the clinic b → the center device of the center C Information specifying the transfer destination in the order of 200 addresses is included.

  The information processing apparatus 100a of the clinic a receives the half piece packet 2 from the center device 200, includes the partial data a2 in the half piece packet 2 according to the data designation information contained in the half piece packet 2, and is included in the half piece packet 2 In accordance with the transfer destination designation information, the halfway packet 2 is transferred to the information processing apparatus 100c of the clinic c. Here, the transfer destination from the information processing apparatus 100a is different for the half-piece packets 1 and 2. Specifically, the information processing apparatus 100a transfers the halfway packet 1 to the information processing apparatus 100b, but transfers the halfway packet 2 to the information processing apparatus 100c. By doing in this way, it is possible to prevent the data of one clinic (here, the clinic a) from being concentrated on one device and reproducing the data of one clinic.

  The information processing apparatus 100c receives the half piece packet 2 from the information processing apparatus 100a, and data obtained as a result of calculating the partial data a2 and the partial data c2 according to the data designation information and the processing content designation information included in the half piece packet 2 (A2c2) is included in the half piece packet 2, and the half piece packet 2 is transferred to the information processing apparatus 100b of the clinic b according to the transfer destination designation information included in the half piece packet 2.

  The information processing apparatus 100b receives the half piece packet 2 from the information processing apparatus 100c, and calculates the calculated data (a2c2) and the partial data b2 according to the data designation information and the processing content designation information included in the half piece packet 2. The result data (a2b2c2) is included in the halfway packet 2, and the halfway packet 2 is transferred to the center device 200 according to the transfer destination designation information included in the halfway packet 2.

  At this time, the halfway packet 2 includes the data (a2b2c2) after the calculation, and the partial data a2, the partial data b2, and the partial data c2 are in an unrecoverable state. For this reason, the center apparatus 200 cannot identify the clinics a, b, and c based on the calculated data (a2b2c2) and cannot grasp the features and situations of the clinics a, b, and c. The center device 200 receives the half piece packet 2 from the information processing device 100b and temporarily stores the post-computation data (a2b2c2) included in the half piece packet 2.

  Thirdly, an operation related to the half-piece packet 3 will be described. In the half piece packet 3 generated by the center device 200, as data designation information, the information processing device 100a of the clinic a, the information processing device 100b of the clinic b, and the information processing device 100c of the clinic c are subject to statistical processing. Information for designating the third partial data of the data divided into three is included. Further, in the halfway packet 3, as the transfer destination designation information, the address of the information processing device 100c at the clinic c → the address of the information processing device 100b at the clinic b → the address of the information processing device 100a at the clinic a → the center device of the center C Information specifying the transfer destination in the order of 200 addresses is included.

  The information processing apparatus 100c of the clinic c receives the half piece packet 3 from the center device 200, includes the partial data c3 in the half piece packet 3 according to the data designation information contained in the half piece packet 3, and is included in the half piece packet 3 The halfway packet 3 is transferred to the information processing apparatus 100b in the clinic b according to the transfer destination designation information.

  The information processing apparatus 100b receives the half piece packet 3 from the information processing apparatus 100c, and data obtained as a result of calculating the partial data c3 and the partial data b3 according to the data designation information and the processing content designation information included in the half piece packet 3 (B3c3) is included in the half piece packet 3, and the half piece packet 3 is transferred to the information processing apparatus 100a in the clinic a according to the transfer destination designation information included in the half piece packet 3.

  The information processing apparatus 100a receives the half piece packet 3 from the information processing apparatus 100b, and calculates the calculated data (b3c3) and the partial data a3 according to the data designation information and the processing content designation information included in the half piece packet 3. The result data (a3b3c3) is included in the halfway packet 2, and the halfway packet 3 is transferred to the center apparatus 200 according to the transfer destination designation information included in the halfway packet 3.

  The center device 200 performs post-computation data (a1b1c1) corresponding to the half piece packet 1, post-computation data (a2b2c2) corresponding to the half piece packet 2, and post computation data (a3b3c3) corresponding to the half piece packet 3. ), An operation corresponding to the statistical processing is performed, and as a result, an overall statistical processing result (abc) is obtained.

  By such a method, each information processing apparatus 100 divides the data of the items to be subjected to statistical processing, and each partial data is calculated between the information processing apparatuses 100, thereby making the original partial data unreproducible. Can protect the personal information of the clinic. In addition, each information processing apparatus 100 can change the transfer destination of a halfway packet to prevent data from a specific information processing apparatus 100 from being reproduced in one information processing apparatus 100. Furthermore, since each information processing apparatus 100 distributes and performs statistical processing, the processing load accompanying statistical processing can be distributed. The data that is transmitted / received via the network 300 is mainly the data after computation, the data size is reduced compared to the raw data before computation, and the data size that flows through the network 300 compared to the case of sending and receiving raw data Can be reduced.

(2) Configuration of Information Processing Device FIG. 4 is a block diagram showing the configuration of the information processing device 100.

  As illustrated in FIG. 4, the information processing apparatus 100 includes a transmission / reception unit 110 (transfer unit), a processing unit 120, and a storage unit 130. The transmission / reception unit 110 transmits / receives data to / from the network 300. The processing unit 120 performs various data processing. The processing unit 120 is configured to be accessible to the medical information DB 150 of the own clinic. The storage unit 130 stores various data processed by the processing unit 120.

  The processing unit 120 includes a half piece packet interpretation unit 121, a verification unit 122, a division unit 123, a calculation unit 124, a half piece packet reconfiguration unit 125, a monitor interpretation unit 126, and a monitor processing unit 127.

  The halfway packet interpreting unit 121 acquires data designation information, calculation content designation information, partial data of other clinics or data after calculation, and transfer destination information from the halfway packet received by the transmission / reception unit 110. Interpret calculation content specification information.

  The verification unit 122 determines the validity of the halfway packet received by the transmission / reception unit 110 according to whether the information included in the halfway packet received by the transmission / reception unit 110 matches the information registered in the storage unit 130 in advance. Verify sex. For example, when data designation information indicating that all medical information of the own clinic is included in the halfway packet is included in the halfway packet, the verification unit 122 determines that the halfway packet is invalid. Then, a countermeasure such as discarding the halfway packet is taken. In addition, when the transfer destination information indicating that all the partial data are the same transfer destination is included in the halfway packet, the verification unit 122 determines that the halfway packet is invalid. It is determined that there is a packet, and the halfway packet is discarded.

  The dividing unit 123 extracts data of items to be subjected to statistical processing from the medical information held in the medical information DB 150 according to the data designation information interpreted by the halfway packet interpreting unit 121, and divides the extracted data into pieces. To output partial data. As described above, the items to be extracted and the number of divisions are designated by the data designation information. When the dividing unit 123 divides the data into n, it may be divided into n equal parts, or may be divided unevenly according to a predetermined ratio.

  The calculation unit 124 determines the data of other clinics (specifically, partial data or data after calculation) and the partial data obtained by the dividing unit 123 according to the calculation content designation information interpreted by the half-piece packet interpretation unit 121. And the partial data obtained by the dividing unit 123 and the data transferred from another information processing apparatus are rendered unreproducible. Details of the arithmetic processing in the arithmetic unit 124 will be described later. When the information processing apparatus 100 is the starting point of a packet transfer path configured by each information processing apparatus 100, the calculation by the calculation unit 124 may not be performed.

  The half piece packet reconstructing unit 125 reconstructs the half piece packet including the data obtained by the computation unit 124 or the partial data obtained by the dividing unit 123. The transmission / reception unit 110 transmits the half piece packet reconfigured by the half piece packet reconfiguration unit 125 to the transfer destination according to the transfer destination designation information.

  The monitor processing unit 127 interprets the monitor instruction received from the center device 200 by the transmission / reception unit 110. Details of the monitor instruction will be described later. The monitor processing unit 127 notifies the center device 200 of a monitor report (for example, normal end or abnormal end) indicating the processing result of the halfway packet according to the monitor instruction interpreted by the monitor processing unit 127.

  FIG. 5 is a diagram illustrating an example of medical information stored in the medical information DB 150. In the example of FIG. 5, the medical information includes items such as a management number, a visit date and time, a patient ID, sex, and age. Here, it is assumed that the medical information is divided into three. For example, when statistically analyzing the usage results of agent A, the number of agents A is counted for each of the partial data D1 to D3. In partial data D1, the usage record of agent A is counted three times, in partial data D2, the usage record of agent A is counted once, and in partial data D3, the usage record of agent A is counted twice.

  "A drug use record: 3 times" corresponding to the partial data D1, "A drug use record: 1" corresponding to the partial data D2, and "A drug use record: 2" corresponding to the partial data D3. Is transferred to the information processing apparatus 100 of the same clinic, the information processing apparatus 100 of the transfer destination grasps the entire usage record of the agent A in the transfer source clinic, and the transfer source clinic The information that characterizes can be seen. That is, protection of medical information is not guaranteed.

  Therefore, in the present embodiment, the information processing apparatus 100 corresponding to the start point among the information processing apparatuses 100 is not concentrated on one, and the transfer when the information processing apparatus 100 corresponding to the start point transfers partial data. I don't concentrate on one point. Furthermore, by transferring the result of computing partial data D1, D2, or D3 and data (partial data or post-computation data) from another clinic's information processing apparatus 100, the information processing apparatus 100 at the transfer destination In this case, the partial data D1, D2, or D3 cannot be restored.

(3) Configuration of Center Device FIG. 6 is a block diagram showing the configuration of the center device 200.

  As illustrated in FIG. 6, the center apparatus 200 includes a transmission / reception unit 210, a processing unit 220, a storage unit 230, an input unit 240, and a display unit 250. The transmission / reception unit 210 transmits / receives halfway packets to / from the information processing apparatus 100 via the network 300. The processing unit 220 performs various data processing. The storage unit 230 stores various data processed by the processing unit 220, calculation contents (algorithms) used for statistical processing, and statistical processing plan information.

  The input unit 240 and the display unit 250 function as a user interface with the analyst. The input unit 240 receives an input operation from an analyst. The input operation includes an instruction of statistical processing contents and monitor instruction contents, correction of statistical processing contents, and the like. The display unit 250 displays edited contents, monitor results, statistical processing results, and the like.

  The processing unit 220 includes a statistical processing plan generation unit 221, an intermediate piece packet generation unit 222, an intermediate piece packet collection unit 223, a statistical result derivation unit 224, a statistical result comparison processing unit 225, a display data generation unit 226, a monitor interpretation unit 227, And a monitor processing unit 228.

  The statistical processing plan generation unit 221 generates a statistical processing plan according to an input operation (instruction on statistical processing content, correction of statistical processing content) received by the input unit 240 from the analyst.

  The halfway packet generation unit 222 generates a plurality of sets of halfway packet packets according to the statistical processing plan information generated by the statistical processing plan generation unit 221. One set of halfway packet consists of a plurality of halfway packets. For example, the address of each information processing apparatus 100, an algorithm corresponding to statistical processing, and the like are stored in advance in the storage unit 230, and the halfway packet generation unit 222 uses a statistical processing plan to transfer a packet transfer path and a statistical processing method. Is specified, a plurality of halfway packet packets corresponding to the statistical processing plan are generated. In addition, the half-piece packet generation unit 222 generates a plurality of sets of a plurality of half-piece packets for the same statistical process because a statistical process result is derived for each of the plurality of sets and the validity of the statistical process result is determined. This is for judgment. A set of halfway packets for the same statistical process may have different contents (different packet transfer paths, different numbers of divisions, different calculation algorithms, etc.). In addition, transfer and processing are performed so that one information processing apparatus cannot acquire personal information (medical information) of one clinic (institution) from halfway packets of all sets.

  As described above, the half-piece packet generation unit 222 includes a data item to be subjected to statistical processing, a data division method, data designation information for designating partial data to be used for calculation, and statistical data. It includes calculation content designation information for designating calculation content (algorithm) according to processing, and transfer destination designation information for designating a data transfer destination in each information processing apparatus. The halfway packet generated by the halfway packet generation unit 222 is transmitted by the transmission / reception unit 210.

  The mid-piece packet collection unit 223 collects the mid-piece packet via the transmission / reception unit 210. The half piece packet collection unit 223 obtains post-computation data included in the collected half piece packet, and passes the obtained post-computation data to the statistical result deriving unit 224.

  The statistical result deriving unit 224 derives an overall statistical processing result by performing a calculation for integrating the calculated data included in each half-way packet. Details of the arithmetic processing in the statistical result deriving unit 224 will be described later.

  When the statistical result deriving unit 224 derives the statistical processing result for the same statistical processing a plurality of times, the statistical result comparison processing unit 225 compares the statistical processing results and determines whether the statistical processing results match or not. Confirm the validity of.

  The display data generation unit 226 generates display data (image data) by graphing the statistical processing results whose validity has been confirmed, and causes the display unit 250 to display the generated display data.

  The monitor interpretation unit 227 interprets the monitor report from the information processing apparatus 100. The monitor report includes information on the transmission / reception status and processing status (normal termination, abnormal termination, etc.) of halfway packets.

  The monitor processing unit 228 instructs the information processing apparatus 100 to monitor, and records the monitor report notified from the information processing apparatus 100 in the storage unit 230. The monitor instruction includes information (address) designating the information processing apparatus 100 as a transmission destination and information designating processing contents (continuation, retry, stop, etc.) in the designated information processing apparatus 100. The monitor report includes information on the transmission / reception status and processing status of halfway packets, and the monitor processing unit 228 records the information together with time information in the storage unit 230. The monitor processing unit 228 displays the monitor result on the display unit 250.

(4) Operation of Statistical Analysis System Next, with regard to the operation of the statistical analysis system 1, (4.1) the operation of the information processing device, (4.2) the operation of the center device, and (4.3) the order of the statistical processing example I will explain it.

(4.1) Operation of Information Processing Device FIG. 7 is a flowchart showing the operation of the information processing device 100.

  When the transmission / reception unit 110 receives a halfway packet (step S101; YES), the verification unit 122 verifies the validity of the halfway packet received by the transmission / reception unit 110 in step S102. If it is confirmed that the received halfway packet is valid, the process proceeds to step S103.

  In step S <b> 103, the dividing unit 123 extracts data of items to be subjected to statistical processing from the medical information held in the medical information DB 150 according to the data designation information included in the halfway packet whose validity has been confirmed, and extracts the data. The obtained data is divided into small pieces to obtain partial data.

  In step S <b> 104, the calculation unit 124 transmits the data (specifically, partial data or post-calculation data) transferred from another information processing device according to the calculation content designation information of the halfway packet received by the transmission / reception unit 110. Then, the partial data obtained by the dividing unit 123 is calculated, and the partial data obtained by the dividing unit 123 and the data transferred from another information processing apparatus are rendered unreproducible.

  In step S <b> 105, the monitor processing unit 127 transmits a monitor report from the transmission / reception unit 110 to the center device 200.

  When there is no abnormality report from the center apparatus 200 (step S106; NO), in step S107, the transmission / reception unit 110 includes the post-computation data generated by the computation unit 124 according to the transfer destination designation information included in the halfway packet. Send one halfway packet to the forwarding destination.

(4.2) Operation of Center Device FIG. 8 is a flowchart showing the operation of the center device 200.

  In steps S <b> 201 and S <b> 202, the halfway packet generation unit 222 acquires statistical processing plan information from the storage unit 230 and generates a plurality of sets of halfway packet packets. The half piece packet generator 222 creates a plurality of sets of a plurality of half piece packets corresponding to the same statistical process.

  In step S <b> 203, the transmission / reception unit 210 transmits the halfway packet generated by the halfway packet generation unit 222 to the information processing apparatus 100.

  In step S204, the monitor processing unit 228 monitors the progress of halfway packet processing and determines whether or not the result is normal.

  If the monitor result is normal (step S204; YES), in step S205, the statistical result deriving unit 224 determines whether or not the collection of halfway packets has been successful. On the other hand, if the monitor result is not normal (step S204; NO), the process ends abnormally in step S210.

  When the collection of the halfway packet is successful (step S205; YES), in step S206, the statistical result deriving unit 224 derives the overall statistical processing result by integrating the post-computation data included in each halfway packet. To do. On the other hand, if the collection of the halfway packet fails (step S205; NO), the process ends abnormally in step S210.

  In step S206, the statistical result deriving unit 224 determines whether or not all of the plurality of statistical processing results corresponding to the plurality of sets of half-way packets have been derived. If all of the statistical processing results have been derived (step S207; YES), In S208, the statistical result comparison processing unit 225 compares the statistical processing results. If the statistical processing results match (step S208; YES), the processing is completed as normal termination. On the other hand, if the statistical processing results do not match (step S208; NO), the process ends abnormally in step S210. The statistical result comparison processing unit 225 may output a report of successful processing in the case of normal termination, or may output a report of error processing in the case of abnormal termination.

  In addition, when each statistical processing result does not correspond (step S208; NO), it is not limited to abnormal termination, and the larger statistical processing result may be regarded as appropriate and the processing may be terminated normally by majority vote. .

(4.3) Statistical Processing Examples Next, statistical processing examples 1 to 3 performed in the statistical analysis system 1 will be described.

(4.3.1) Statistical processing example 1
Statistical processing example 1 is an example of creating a distribution, a histogram, and a correlation diagram. This is applied to the case where certain items are arranged according to conditions and the distribution and correlation are analyzed.

  For example, the number of visits per year for each patient age, the amount of A drug used by region, and the like. Here, it is assumed that the number of visits of one clinic is analyzed in the 10-year-old division. A clinic a, a clinic b, and a clinic c participate in the analysis, and for example, the medical information of each clinic is divided into three to form partial data.

  In the following, among the three partial data, the first partial data is expressed as 1/3, the second partial data is expressed as 2/3, and the third partial data is expressed as 3/3.

  First, partial data (for example, 1/3) of clinic a is included in a half packet and sent to clinic b. In this case, the information processing apparatus 100a of the clinic a extracts, for example, the number of visits N10, N20,... In the 10s, 20s,. The data is divided, and 1/3 of them is included in a half packet and sent to the clinic b. The first partial data obtained by dividing the number of visits of the 10-year-old in clinic a by three is denoted as N10a1. Next, the information processing apparatus 100b of the clinic b includes the result of calculating the statistical data of the clinic a and the statistical data of the clinic b in a halfway packet and sends the result to the clinic c. On the other hand, the partial data 2/3 of the clinic a is sent to the clinic c by another route, and the information processing apparatus 100c of the clinic c includes the calculation result of the statistical data of the clinic a and the statistical data of the clinic c in a half packet. To clinic b. The halfway packet finally obtained in this way is collected by the center apparatus 200 of the center C, and the post-computation data included in each halfway packet is integrated, so that the entire clinics a, b, and c Can be obtained.

  The processing of each clinic is expressed mathematically as follows. In the following, @x means that the process is performed by the information processing apparatus 100 of the clinic x. → means transfer from an information processing apparatus in one clinic to an information processing apparatus in another clinic.

-Halfway packet 1:
(N0a1, N10a1, .. N90a1) @a
→ (N0a1 + N0b1, N10a1 + N10b1, ..N90a1 + N90b1) @b
→ (N0a1 + N0b1 + N0c1, N10a1 + N10b1 + N10c1, ..N90a1 + N90b1 + N90c1) @c
... (1)
As shown in Expression (1), in the information processing apparatus 100a of the clinic a, the partial data Nka1 obtained by dividing the number of visits Nk in the age of k in the clinic a into three is included in the half packet 1 to the clinic b. send. In the information processing apparatus 100b at the clinic b, the partial data Nka1 obtained by dividing the number of visits Nk in the age k in the clinic a into three and the number of visits Nk for the number Nk of visits in the age k in the clinic b are divided into three. The sum of one of the partial data Nkb1 is included in the half packet 1 as the post-computation data and sent to the clinic c. In the information processing apparatus 100c of the clinic c, another calculation is performed on the sum of one partial data Nkc1 obtained by dividing the number of visits Nk in the age of k in the clinic c into three and the calculated data sent from the clinic b. The latter data is included in the halfway packet 1 and sent to the center C. In the half piece packets 2 and 3, as shown in the following formulas (2) and (3), processing is performed with a different route and different partial data from the half piece packet 1 based on the principle of formula (1).

-Halfway packet 2:
(N0a2, N10a2, .. N90a2) @a
→ (N0a2 + N0b2, N10a2 + N10b2, ..N90a2 + N90b2) @b
→ (N0a2 + N0b2 + N0c2, N10a2 + N10b2 + N10c2, ..N90a2 + N90b2 + N90c2) @c
... (2)
-Halfway packet 3:
(N0a3, N10a3, ..N90a3) @a
→ (N0a3 + N0c3, N10a3 + N10c3, .. N90a3 + N90c3) @c
→ (N0a3 + N0b3 + N0c3, N10a3 + N10b3 + N10c3, .. N90a3 + N90b3 + N90c3) @b
... (3)
・ Center C:
N0a1 + N0b1 + N0c1 + N0a2 + N0b2 + N0c2 + N0a3 + N0b3 + N0c3
N10a1 + N10b1 + N10c1 + N10a2 + N10b2 + N10c2 + N10a3 + N10b3 + N10c3
...
N90a1 + N90b1 + N90c1 + N90a2 + N90b2 + N90c2 + N90a3 + N90b3 + N90c3
... (4)
As shown in Expression (4), the center device 200 of the center C receives the post-computation data (N0a1 + N0b1 + N0c1, N10a1 + N10b1 + N10c1,... N90a1 + N90b1 + N90c1) included in the halfway packet 1 received from the clinic c The post-computation data included in the single packet 2 (N0a2 + N0b2 + N0c2, N10a2 + N10b2 + N10c2, .. N90a2 + N90b2 + N90c2) and the post-computation data contained in the mid-packet 3 received from the clinic b (N0a3 + N0b3 + N3c + N3 + N3 + N3 + N3 + Derived as statistical processing results.

(4.3.2) Statistical processing example 2
Statistical processing example 2 is an example of calculating an average value. An average value is calculated for each item by condition.

  For example, when analyzing the average of medical fees (medical fees) of one clinic by prefecture, P prefecture clinics a, b, and c participate in the analysis. For example, the medical information of each clinic is divided into three to form partial data. To do. In this case, for example, the total ΣX of the medical fee X and the total ΣN of the number N are included in another halfway packet and collected.

  The processing of each clinic can be expressed mathematically as follows.

Halfway packet X1:
ΣXa1 @a → ΣXa1 + ΣXb1 @b → ΣXa1 + ΣXb1 + ΣXc1 @c
... (5)
In the equation (5), the partial data ΣXa1 @ a means a part ΣXa1 of the total ΣXa of medical fees in the clinic a. The halfway packet X1 including the partial data ΣXa1 is transferred to the clinic b, and the information processing apparatus 100b of the clinic b uses the sum of the partial data ΣXa1 and the partial data ΣXb1 as the calculated data, and uses the calculated data (ΣXa1 + ΣXb1). The included halfway packet X1 is transferred to the clinic c. The information processing apparatus 100c in the clinic c uses the sum of the calculated data (ΣXa1 + ΣXb1) and the partial data ΣXc1 as the post-calculation data, and transfers the halfway packet X1 including the post-calculation data (ΣXa1 + ΣXb1 + ΣXc1) to the center C. As shown in the following equation (6), the halfway packet X2 is processed by a different route and different partial data from the halfway packet X1 according to the principle of the equation (5).

Halfway packet X2:
ΣXb2 @b → ΣXb2 + ΣXc2 @c → ΣXb2 + ΣXc2 + ΣXa2 @a
... (6)
Halfway packet N1:
ΣNc1 @c → ΣNc1 + ΣNa1 @a → ΣNc1 + ΣNa1 + ΣNb1 @b
... (7)
In Expression (7), the partial data ΣNc1 @ c means a part ΣNc1 of the total number ΣNc of the number of times in the clinic c. The halfway packet N1 including the partial data ΣNc1 is transferred to the clinic a, and the information processing apparatus 100a of the clinic a uses the sum of the partial data ΣNc1 and the partial data ΣNa1 as the calculated data, and uses the calculated data (ΣNc1 + ΣNa1). The intermediate packet N1 including the packet is transferred to the clinic b. The information processing apparatus 100b in the clinic b uses the sum of the calculated data (ΣNc1 + ΣNa1) and the partial data ΣNb1 as the post-calculation data, and transfers a halfway packet N1 including the post-calculation data (ΣNa1 + ΣNb1 + ΣNc1) to the center C. As shown in the following formula (8), the halfway packet N2 is processed by a different route and different partial data from the halfway packet N1, based on the principle of the formula (7).

Halfway packet N2:
ΣNa2 @a → ΣNa2 + ΣNb2 @b → ΣNa2 + ΣNb2 + ΣNc2 @c
... (8)
Center C:
Average value = (ΣXa1 + ΣXb1 + ΣXc1 + ΣXb2 + ΣXc2 + ΣXa2) / (ΣNc1 + ΣNa1 + ΣNb1 + ΣNa2 + ΣNb2 + ΣNc2)
... (9)
As shown in Expression (9), the center device 200 of the center C is included in the post-computation data (ΣXa1 + ΣXb1 + ΣXc1) included in the mid-piece packet X2 received from the clinic a and the mid-piece packet 2 received from the clinic c. The sum (ΣXa1 + ΣXb1 + ΣXc1 + ΣXb2 + ΣXc2 + ΣXa2) with the calculated data (ΣXb2 + ΣXc2 + ΣXa2) is calculated. Further, the center apparatus 200 calculates the sum of the post-computation data (ΣNc1 + ΣNa1 + ΣNb1) included in the halfway packet N1 received from the clinic b and the post-computation data (ΣNa2 + ΣNb2 + ΣNc2) contained in the halfway packet N2 received from the clinic c. (ΣNc1 + ΣNa1 + ΣNb1 + ΣNa2 + ΣNb2 + ΣNc2) is calculated. Then, the center device 200 derives the average value by (ΣXa1 + ΣXb1 + ΣXc1 + ΣXb2 + ΣXc2 + ΣXa2) / (ΣNc1 + ΣNa1 + ΣNb1 + ΣNa2 + ΣNb2 + ΣNc2).

  It is also possible to circulate by putting X and N that do not correspond as an average value on one halfway packet.

Halfway packet 1:
ΣXa1, ΣNa2 @a
→ ΣXa1 + ΣXb1, ΣNa2 + ΣNb1 @b
→ ΣXa1 + ΣXb1 + ΣXc2, ΣNa2 + ΣNb1 + ΣNc1 @c → Center C
(10)
As shown in Expression (10), the halfway packet 1 including the partial data ΣXa1 and the partial data ΣNa2 from the information processing apparatus 100a of the clinic a is transferred to the clinic b, and the information processing apparatus 100b of the clinic b receives the partial data ΣXa1. And the partial data ΣXb1 (ΣXa1 + ΣXb1), and the sum of the partial data ΣNa2 and the partial data ΣNb1 (ΣNa2 + ΣNb1) as post-computation data, the intermediate packet 1 including the post-computation data (ΣXa1 + ΣXb1, ΣNa2 + ΣNb1) Forward to. The information processing apparatus 100c of the clinic c calculates the sum of the data after calculation (ΣXa1 + ΣXb1) and the partial data ΣXc1 (ΣXa1 + ΣXb1 + ΣXc2) and the sum of the data after calculation (ΣNa2 + ΣNb1) and the partial data ΣNc1 (ΣNa2 + ΣNb1 + ΣNc1) As a result, the halfway packet 1 including the data (ΣXa1 + ΣXb1 + ΣXc2, ΣNa2 + ΣNb1 + ΣNc1) after the calculation is transferred to the center C. As shown in the following equation (11), the halfway packet 2 is processed with a different route and different partial data from the halfway packet 1 according to the principle of the equation (10).

Halfway packet 2:
ΣXa2, ΣNa1 @a
→ ΣXa2 + ΣXc1, ΣNa1 + ΣNc2 @c
→ ΣXa2 + ΣXc1 + ΣXb2, ΣNa1 + ΣNc2 + ΣNb2 @b → Center C
... (11)
At center C, halfway packets 1 and 2 are collected,
Average value = (ΣXa1 + ΣXb1 + ΣXc2 + ΣXa2 + ΣXc1 + ΣXb2) / (ΣNa2 + ΣNc2 + ΣNb2 + ΣNa1 + ΣNc2 + ΣNb2)
(12)
(4.3.3) Statistical processing example 3
Statistical processing example 3 is an example of calculating the variance. Calculate the variance for each item according to the condition.

  For example, when analyzing the distribution of medical fees (medical fees) of one clinic by prefecture, P prefecture clinics a, b, and c participate in the analysis. For example, the medical information of each clinic is divided into two to form partial data To do.

  One method is to obtain an average in the first cycle and advance the calculation using the average. Let the average value be μ. It is assumed that the total number N is known in the cycle for calculating the average. The second cycle for determining the dispersion is as follows.

Halfway packet S1:
Σ (Xa1-μ) ² @a
→ Σ (Xa1-μ) ² + Σ (Xb1-μ) ² @b
→ Σ (Xa1−μ) ² + Σ (Xb1−μ) ² + Σ (Xc1−μ) ² @c
... (13)
As shown in Expression (13), the halfway packet S1 including the partial data Σ (Xa1−μ) ² from the information processing apparatus 100a in the clinic a is transferred to the clinic b, and the information processing apparatus 100b in the clinic b The sum of the data Σ (Xa1−μ) ² and the partial data Σ (Xb1−μ) ² (Σ (Xa1−μ) ² + Σ (Xb1−μ) ² ) is used as the data after the calculation. The halfway packet S1 including Σ (Xa1−μ) ² + Σ (Xb1−μ) ² ) is transferred to the clinic c. The information processing apparatus 100c in the clinic c calculates the sum (Σ (Xa1-μ)) of the calculated data (Σ (Xa1-μ) ² + Σ (Xb1-μ) ² ) and the partial data Σ (Xc1-μ) ^{2. 2} + Σ (Xb1−μ) ² + Σ (Xc1−μ) ² ) is used as the data after the calculation, and the data after the calculation (Σ (Xa1−μ) ² + Σ (Xb1−μ) ² + Σ (Xc1− μ) Forward halfway packet S1 including ² ) to center C. As shown in the following equation (14), the halfway packet S2 is processed by a different route and different partial data from the halfway packet S1, based on the principle of the equation (13).

Halfway packet S2:
Σ (Xa2-μ) ² @a
→ Σ (Xa2−μ) ² + Σ (Xc2−μ) ² @c
→ Σ (Xa2−μ) ² + Σ (Xc2−μ) ² + Σ (Xb2−μ) ² @b
... (14)
Center C:
Dispersion = (Σ (Xa1−μ) ² + Σ (Xb1−μ) ² + Σ (Xc1−μ) ² + Σ (Xa2−μ) ² + Σ (Xb2−μ) ² + Σ (Xc2−μ) ² ) / N
... (15)
As shown in Expression (15), the center device 200 of the center C receives the data (Σ (Xa1−μ) ² + Σ (Xb1−μ) ² +) included in the halfway packet S1 received from the clinic c. Σ (Xc1−μ) ² ) and post-computation data (Σ (Xa2−μ) ² + Σ (Xc2−μ) ² + Σ (Xb2−μ) ² ) included in the halfway packet S2 received from the clinic b ) (Σ (Xa1−μ) ² + Σ (Xb1−μ) ² + Σ (Xc1−μ) ² + Σ (Xa2−μ) ² + Σ (Xb2−μ) ² + Σ (Xc2−μ) ² ) is calculated. Further, the center device 200 has a known total number N and (Σ (Xa1−μ) ² + Σ (Xb1−μ) ² + Σ (Xc1−μ) ² + Σ (Xa2−μ) ² + Σ (Xb2−μ). ) ² + Σ (Xc ² −μ) ² ), the variance is calculated as (Σ (Xa 1 −μ) ² + Σ (Xb 1 −μ) ² + Σ (Xc 1 −μ) ² + Σ (Xa ² −μ) ² + Σ ( Xb2−μ) ² + Σ (Xc2−μ) ² ) / N

  Alternatively, the method performed in one cycle is as follows.

Halfway packet 1:
ΣXa1 ² , ΣXa1, ΣNa2 @a
→ ΣXa1 ² + ΣXb1 ² , ΣXa1 + ΣXb1, ΣNa2 + ΣNb1 @b
→ ΣXa1 ² + ΣXb1 ² + ΣXc2 ² , ΣXa1 + ΣXb1 + ΣXc2, ΣNa2 + ΣNb1 + ΣNc1 @c
... (16)
As shown in the equation (16), the halfway packet 1 including the partial data ΣXa1 ² , the partial data ΣXa1 and the partial data ΣNa2 from the information processing apparatus 100a of the clinic a is transferred to the clinic b, and the information processing apparatus 100b of the clinic b the sum of the partial data ShigumaXa1 ² and partial data ^{ΣXb1 2 (ΣXa1 2 + ΣXb1 2} ), the sum of the partial data ShigumaXa1 and partial data ΣXb1 (ΣXa1 + ΣXb1), calculates the sum (ΣNa2 + ΣNb1) of the partial data ShigumaNa2 and partial data ShigumaNb1 As the subsequent data, the halfway packet 1 including the post-calculation data (ΣXa1 ² + ΣXb1 ² , ΣXa1 + ΣXb1, ΣNa2 + ΣNb1) is transferred to the clinic c. The information processing apparatus 100c in the clinic c adds the sum (ΣXa1 ² + ΣXb1 ² + ΣXc2 ² ) of the calculated data (ΣXa1 ² + ΣXb1 ² ) and the partial data ΣXc2 ^2, and the sum of the post-calculation data (ΣXa1 + ΣXb1) and the partial data ΣXc2. (ΣXa1 + ΣXb1 + ΣXc2), the sum (ΣNa2 + ΣNb1 + ΣNc1) of the post-computation data (ΣNa2 + ΣNb1) and the partial data ΣNc1 is the post-computation data, and the post-computation data (ΣXa1 ² + ΣXb1 ² + ΣXc2 ² , ΣXa1 + Nc1) Is transferred to the center C. As shown in the following equation (17), the halfway packet 2 is processed by a different route and different partial data from the halfway packet 1 according to the principle of the equation (16).

Halfway packet 2:
ΣXa2 ² , ΣXa2, ΣNa1 @a
→ ΣXa2 ² + ΣXc1 ² ,, ΣXa2 + ΣXc1, ΣNa1 + ΣNc2 @c
→ ΣXa2 ² + ΣXc1 ² + ΣXb2 ² , ΣXa2 + ΣXc1 + ΣXb2, ΣNa1 + ΣNc2 + ΣNb2 @b
... (17)
Center C:
Dispersion = (ΣX ² −μΣX + μ ² ) / N
= (ΣX ² − (ΣX) ² / N + (ΣX / N) ² ) / N
... (18)
As shown in Expression (18), the center device 200 of the center C receives data (ΣXa1 ² + ΣXb1 ² + ΣXc2 ² , ΣXa1 + ΣXb1 + ΣXc2, ΣNa2 + ΣNb1 + ΣNc1) included in the halfway packet S1 received from the clinic c, and A statistical processing result is derived from the data (ΣXa2 ² + ΣXc1 ² + ΣXb2 ² , ΣXa2 + ΣXc 1 + ΣXb ² , ΣNa 1 + ΣNc ² + ΣNb ² ) included in the received halfway packet S ² and the known total number N according to the equation (18).

(5) Action / Effect As described above, according to the statistical analysis system 1, the information processing apparatus 100 extracts data of items to be subjected to statistical processing from medical information of one clinic, and extracts the extracted data. By dividing into small pieces, it is possible to make it difficult to specify the clinic or its features from the partial data obtained by the division, and to protect the medical information. Each information processing apparatus 100 performs an irreversible operation according to statistical processing on the data transferred from the other information processing apparatus 100 and the partial data, thereby transferring the partial data and the transferred data By making the state unreproducible, medical information (that is, personal information of the institution) can be more reliably made unidentifiable. It is the post-computation data that is transferred to the center device 200, and the center device 200 cannot identify the clinic or its features from the post-computation data. Therefore, it is possible for the center device 200 to perform statistical processing of medical information without knowing the medical information.

  In addition, if all the partial data is transferred from the information processing apparatus 100 to another same information processing apparatus 100, the data before division can be reproduced by the same information processing apparatus 100. Performs data transfer so that the same information processing apparatus 100 does not have the same information processing apparatus as the transfer destination for all partial data. Thereby, further protection of medical information is realized.

(6) Comparative Example FIG. 9 is a diagram illustrating a comparative example of the statistical analysis system 1. In this comparative example, the arithmetic unit 124 of the information processing apparatus 100 is provided in the center apparatus 200.

  First, in step S <b> 301, the center apparatus 200 transmits a notification indicating statistical processing target data to the information processing apparatus 100. In step S302, the information processing apparatus 100 divides the medical information into partial data, and transmits the partial data designated by the center apparatus 200 to the center apparatus 200 in step S303. In step S304, the center apparatus 200 performs statistical processing on the partial data received from each information processing apparatus 100, and generates post-calculation data. The partial data used for generating the data after the calculation is deleted (step S305). The same processing as in steps S303 to S305 is repeated a plurality of times (steps S306 to S311). Finally, the center apparatus 200 creates an overall statistical processing result by integrating the data after each calculation obtained in steps S304, S307, and S310.

  In this comparative example, when the center device 200 is misused, the center device 200 can collect partial data of each clinic and reproduce the original data, so that the secure protection of medical information is not ensured. There is. Furthermore, there is a problem that the processing load is concentrated on the center device 200.

  On the other hand, in the above-described embodiment, the original data cannot be reproduced when the center device 200 receives the data, and secure protection of medical information is ensured. In addition, the processing load is not concentrated on the center apparatus 200 by performing the statistical processing in a shared manner with the information processing apparatus 100. For this reason, the problem in a comparative example can be solved.

(7) Other Embodiments As described above, the present invention has been described according to the embodiment. However, it should not be understood that the description and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples and operational techniques will be apparent to those skilled in the art.

  In the above-described embodiment, the mode in which the information processing apparatus 100 is installed in the clinic and processes medical information has been described. However, the present invention is not limited to such a mode. For example, the present invention is also effective when it is desired to conceal data that characterizes a certain store in POS data analysis, or when it is desired to obtain a national average score without touching the average of each school in a national simulation test or the like.

  In the above-described embodiment, the case where the statistical analysis system 1 performs processing such as distribution, correlation, average, or variance as the statistical processing has been exemplified. However, the statistical analysis system 1 is not limited to distribution, correlation, average, or variance. The statistical analysis system 1 may be applied to.

  In the above-described embodiment, the information processing apparatus 100 is installed in a medical institution (clinic office). However, the information processing apparatus 100 is connected to a plurality of reliable intermediate institutions other than the center C and connected to the network 300. May be installed.

  Note that the processing according to the above-described embodiment can be configured as a computer program and executed by a computer.

  Thus, it should be understood that the present invention includes various embodiments and the like not described herein. Therefore, the present invention is limited only by the invention specifying matters in the scope of claims reasonable from this disclosure.

  DESCRIPTION OF SYMBOLS 1 ... Statistical analysis system, 100 ... Information processing apparatus, 100a, 100a-100c ... Information processing apparatus, 110 ... Transmission / reception part, 120 ... Processing part, 121 ... Halfway packet interpretation part, 122 ... Verification part, 123 ... Dividing part, DESCRIPTION OF SYMBOLS 124 ... Operation part, 125 ... Half piece packet reconstruction part, 126 ... Monitor interpretation part, 127 ... Monitor processing part, 130 ... Memory | storage part, 150, 150a-150c ... Medical information DB, 200 ... Center apparatus, 210 ... Transmission / reception part , 220 ... processing unit, 221 ... statistical processing plan generation unit, 222 ... half piece packet generation unit, 223 ... half piece packet collection unit, 224 ... statistical result derivation unit, 225 ... statistical result comparison processing unit, 226 ... display data generation Unit, 227 ... monitor interpretation unit, 228 ... monitor processing unit, 230 ... storage unit, 240 ... input unit, 250 ... display unit, 300 ... network

Claims (6)

It has a center device that collects institution information, which is information that can identify the characteristics of each participating organization or each participating organization, from a plurality of participating organizations that participate in the analysis, and performs statistical processing for analysis. A statistical analysis system,
A plurality of information processing devices connected to the network and performing statistical processing by distributing institution information of the plurality of participating organizations;
Each of the information processing devices
A division unit that extracts data of items subject to statistical processing from institution information of one participating institution, divides the extracted data, and outputs partial data;
A calculation unit that performs irreversible calculation according to statistical processing on data transferred from another information processing device and partial data obtained by the dividing unit;
A transfer unit that transfers the partial data obtained by the dividing unit or the data after the calculation by the calculation unit to another information processing apparatus, or transfers the data after the calculation by the calculation unit to the center device. And
The center device derives a statistical processing result by performing an operation according to the statistical processing on the post-computation data transferred from the information processing device,
The transfer unit, when transferring partial data to another information processing apparatus, performs data transfer so that the transfer destinations for all the divided partial data are not the same information processing apparatus. . The center device includes a data item to be subjected to statistical processing, a data division method, data designation information for designating partial data used for computation, and computation content designation information for designating computation content in accordance with statistical processing. Transfer destination designation information that designates a data transfer destination in each information processing device, and transmits a communication packet that passes through each information processing device to the information processing device,
The division unit extracts and divides data of items to be statistically processed according to the data designation information included in the communication packet,
The calculation unit performs a calculation according to statistical processing according to the calculation content designation information included in the communication packet,
The transfer unit includes the partial data obtained by the dividing unit or the data after the calculation by the calculation unit in the communication packet, and according to the transfer destination designation information included in the communication packet, The statistical analysis system according to claim 1, wherein the communication packet is transferred to the center device. It is connected to the center device that collects the information of each participating organization or the characteristics of each participating organization from a plurality of participating organizations participating in the analysis through the network, and performs statistical processing via the network. An information processing apparatus for distributing and statistically processing engine information of the plurality of participating institutions together with the information processing apparatus of
A division unit that extracts data of items subject to statistical processing from institution information of one participating institution, divides the extracted data, and outputs partial data;
A calculation unit that performs irreversible calculation according to statistical processing on data transferred from another information processing device and partial data obtained by the dividing unit;
A transfer unit that transfers the partial data obtained by the dividing unit or the data after the calculation by the calculation unit to another information processing apparatus, or transfers the data after the calculation by the calculation unit to the center device. And
The information processing apparatus, wherein when transferring partial data to another information processing apparatus, the transfer unit performs data transfer so that transfer destinations for all the divided partial data are not the same information processing apparatus. . A center device that collects, through a network, statistical information by collecting institution information, which is information that can identify characteristics of each participating organization or each participating organization from a plurality of participating organizations participating in the analysis,
Data item for statistical processing, data division method, data designation information for designating partial data used for computation, computation content designation information for designating computation content according to statistical processing, and each information processing device Including a transfer destination designation information for designating a data transfer destination in the transmission unit for transmitting a communication packet passing through each information processing device to the information processing device,
A receiving unit that receives the communication packet that is transferred from the information processing apparatus and includes data after calculation;
A center apparatus, comprising: a statistical result deriving unit that derives a statistical processing result by performing a calculation according to a statistical process on the calculated data included in the received communication packet. It is connected to the center device that collects the information of each participating organization or the characteristics of each participating organization from a plurality of participating organizations participating in the analysis through the network, and performs statistical processing via the network. An information processing apparatus for distributing and statistically processing engine information of the plurality of participating institutions together with the information processing apparatus of
A division procedure for extracting data of items subject to statistical processing from institution information of one participating institution, dividing the extracted data and outputting partial data;
A calculation procedure for performing irreversible calculation according to statistical processing on data transferred from another information processing apparatus and partial data obtained by the division procedure,
Transfer the partial data obtained by the division procedure or the data after the calculation by the calculation procedure to another information processing apparatus, or transfer the data after the calculation by the calculation procedure to the center device Let
In the transfer procedure, when transferring partial data to another information processing apparatus, the control program causes the data transfer to be performed so that the transfer destination for all the divided partial data does not become the same information processing apparatus . To the center device that collects the institution information, which is information that can identify the characteristics of each participating institution or each participating institution from a plurality of participating institutions participating in the analysis via the network,
Data item for statistical processing, data division method, data designation information for designating partial data used for computation, computation content designation information for designating computation content according to statistical processing, and each information processing device A transmission procedure for transmitting a communication packet that passes through each information processing device to the information processing device,
A reception procedure for receiving the communication packet that is transferred from the information processing apparatus and includes data after calculation;
A control program for executing a statistical processing result deriving procedure for deriving a statistical processing result by performing a calculation according to the statistical processing on post-computation data included in the received communication packet.

Images