JP2011197793A - Medical certificate creation support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To increase the reliability of a medical certificate by confirming an edition history in the middle of creation of a medical certificate afterwards.SOLUTION: In editing received medical certificate data, the medical certificate data themselves are not edited, but edition data are separately created. When the electronic signature of the source of transmission is included in the received medical certificate data, the electronic signature is not deleted, but the created edition data are added to create new medical certificate data. Furthermore, the new medical certificate data are encrypted and transmitted after an electronic signature is created and added to the new medical certificate data.

Description

  The present invention relates to a medical certificate creation support technology that supports the creation of a medical certificate sent from a medical institution to an insurance company.

When claiming insurance claims to an insurance company, it is necessary to submit a medical certificate written by a medical institution (doctor) to the insurance company. Conventionally, an insurance company or an insurance company agent sends a blank medical certificate to the claimant, and the claimant gives the medical certificate to the medical institution and fills in the medical certificate. Processed in the process of submitting to the company.
Here, there are various types of medical certificates. For example, hospital certificates used to request medical insurance hospitalization benefits and death medical certificates used to request life insurance death insurance. Etc. And the format of a medical certificate differs for every kind of medical certificate. In addition, the items that must be described in the medical certificate differ depending on the status of the insurance contract. For this reason, an insurance company or an insurance company agent usually selects the format of the medical certificate required for the claim, identifies the items that must be described, and sends the blank medical certificate to the claimant. .

  Patent Document 1 describes that a medical certificate is digitized and only necessary input items are displayed on the screen according to the type of the medical certificate. Also, in Patent Document 1, the insurance company guarantees the source of the medical certificate by attaching an electronic signature to the unfilled medical certificate, and the medical institution describes the medical certificate by attaching the electronic signature to the medical certificate. There is also a statement about guaranteeing the original.

JP 2006-85684 A

As described above, the format of the medical certificate is different for each type of medical certificate, and the items that must be described in the medical certificate differ depending on the status of the insurance contract. Therefore, the insurance company or the insurance company agent selects the format of the medical certificate necessary for the claim and specifies the items that must be described.
Here, the medical certificate is used as a proof of fact in various situations where proof is required. Therefore, it is desirable that it is possible to confirm later who the person who edited the medical certificate was. In other words, it is desirable that it is possible to confirm later who has selected the format of the medical certificate and who has specified the item to be described. In addition, when a medical certificate is sent from a medical institution to an insurance company, it is possible not only to confirm that the medical certificate has not been tampered with, but before the medical certificate is sent to the medical institution, there is no unnecessary information on the medical certificate. It is desirable that this can be confirmed later.
However, with the method described in Patent Document 1, the source of the medical certificate is simply guaranteed, and it can only be confirmed that the medical certificate has not been tampered with when the medical certificate is sent from the medical institution to the insurance company. In other words, the editing history during the creation of the medical certificate cannot be confirmed later.
An object of the present invention is to make it possible to confirm later the editing history in the process of creating a document such as a medical certificate, and to improve the reliability of the document such as a medical certificate.

The medical certificate generation support system according to the present invention includes:
A medical certificate generation support system comprising an insurance company device used in an insurance company, a medical institution device used in a medical institution, and an authentication device;
The insurance company device is:
A medical certificate data generation unit for generating medical certificate data defining the input format of the medical certificate by the processing device;
An insurance company signature data generation unit that encrypts the medical certificate data generated by the medical certificate data generation unit with an insurance company key and generates insurance company signature data by a processing device;
A medical certificate for transmitting signed medical certificate data obtained by adding the insurance company signature data generated by the insurance company signature data generating unit to the medical certificate data generated by the medical certificate data generating unit to the authentication device via a communication device A data transmission unit,
The authentication device
An authentication device signature data generation unit that encrypts the signed medical certificate data transmitted by the medical certificate data transmission unit with an authentication device key and generates first authentication device signature data by the processing device;
Authenticated diagnosis for transmitting first authenticated medical certificate data obtained by adding first authenticated device signature data generated by the authentication device signature data generating unit to the signed medical certificate data to the medical institution device via a communication device A data transmission unit,
The medical institution apparatus is
Diagnostic data that causes the input device to input diagnostic data to be input to the medical certificate in accordance with the input format of the medical certificate specified by the medical certificate data included in the first authenticated medical certificate data transmitted by the authenticated medical certificate data transmission unit An input section;
Medical institution signature data in which the diagnosis data input by the diagnosis data input unit is added to the authenticated medical certificate data, and the medical institution signature data is generated by the processing device by encrypting the input medical certificate data with a medical institution key. A generator,
Signature input medical certificate data transmission unit for transmitting signature input medical certificate data in which the medical institution signature data generated by the medical institution signature data generation unit is added to the input medical certificate data to the authentication device via a communication device And
The authentication device signature data generation unit of the authentication device generates second authentication device signature data by encrypting the signature input completed medical certificate data transmitted by the signature input completed medical certificate data transmission unit with an authentication device key;
The authenticated medical certificate data transmission unit of the authentication device includes second authenticated medical certificate data obtained by adding the second authentication device signature data generated by the authentication device signature data generating unit to the signature input medical certificate data. It transmits to the said insurance company apparatus via a communication apparatus, It is characterized by the above-mentioned.

The medical certificate generation support system further includes an agency device used by the agency,
The authenticated medical certificate data transmission unit of the authentication device transmits the authenticated medical certificate data to the agency device via a communication device,
The agency device includes an editing data generating unit that generates editing data for editing the medical certificate data included in the authenticated medical certificate data transmitted by the authenticated medical certificate data transmitting unit;
Agent signature data generation in which edited data generated by the edited data generation unit is added to the certified medical certificate data, and the edited medical certificate data is encrypted with the agent key and the agency signature data is generated by the processing device. And
Signature-edited medical certificate data transmission unit for transmitting signature-edited medical certificate data obtained by adding agency signature data generated by the agency signature data generation unit to the edited medical certificate data to the authentication device via a communication device And
The authentication device signature data generation unit of the authentication device generates the third authentication device signature data by encrypting the signature edited medical certificate data transmitted by the signature edited medical certificate data transmission unit with an authentication device key,
The authenticated medical certificate data transmission unit of the authentication device includes third authenticated medical certificate data obtained by adding the third authentication device signature data generated by the authentication device signature data generating unit to the signature edited medical certificate data. To the medical institution device,
The diagnostic data input unit of the medical institution apparatus includes a medical certificate format indicated by medical certificate data included in the third authenticated medical certificate data transmitted by the authenticated medical certificate data transmitting unit, and the third authenticated medical certificate. According to the edit data included in the data, let the diagnostic data to be entered into the medical certificate be entered by the input device,
The medical institution signature data generation unit of the medical institution device encrypts the input medical certificate data obtained by adding the diagnostic data input by the diagnostic data input unit to the third authenticated medical certificate data with a medical institution key. To generate medical institution signature data,
The signature input medical certificate data transmission unit of the medical institution device uses the communication device to transmit the signature input medical certificate data obtained by adding the medical institution signature data generated by the medical institution signature data generation unit to the input medical certificate data. And transmitting to the authentication device.

The authentication device further includes:
An authenticated data storage unit that stores data transmitted by the authenticated medical certificate data transmission unit in a storage device is provided.

The document generation support system according to the present invention includes:
A document data generation support system including a first device, a second device, and an authentication device;
The first device includes:
A document data generation unit for generating document data defining a document data input format by a processing device;
A first signature data generation unit that encrypts the document data generated by the document data generation unit with a first key and generates first signature data by a processing device;
A document data transmission unit that transmits signed document data obtained by adding the first signature data generated by the first signature data generation unit to the document data generated by the document data generation unit to the authentication device via a communication device; With
The authentication device
An authentication device signature data generation unit that encrypts the signed document data transmitted by the document data transmission unit with an authentication device key and generates first authentication device signature data by the processing device;
Authenticated document data transmission for transmitting the first authenticated document data obtained by adding the first authentication device signature data generated by the authentication device signature data generation unit to the signed document data to the second device via a communication device With
The second device includes:
A data input unit for inputting data to be input to a document by an input device in accordance with an input format of document data defined by document data included in the first authenticated document data transmitted by the authenticated document data transmission unit;
A second signature data generation unit that encrypts the input document data added to the authenticated document data with the second key by the data input unit and generates second signature data by a processing device;
A signature input document data transmission unit that transmits the signature input document data obtained by adding the second signature data generated by the second signature data generation unit to the input document data to the authentication device via a communication device. ,
The authentication device signature data generation unit of the authentication device generates second authentication device signature data by encrypting the signature input document data transmitted by the signature input document data transmission unit with an authentication device key,
The authenticated document data transmission unit of the authentication device transmits the second authenticated document data obtained by adding the second authentication device signature data generated by the authentication device signature data generation unit to the signature input document data. And transmitting to the first device.

  The medical certificate data created by the medical certificate generation support system according to the present invention includes an electronic signature of the editor for each data edited in the past. Therefore, the editing history of the medical certificate data can be confirmed later.

The functional block diagram of the medical certificate production | generation assistance system 100. FIG. The flowchart which shows the flow of a process of the medical certificate production | generation assistance system 100. FIG. The flowchart which shows the flow of a process of the medical certificate production | generation assistance system 100. FIG. The block diagram of signed medical certificate data. The block diagram of authenticated medical certificate data. The block diagram of signature edited medical certificate data. The block diagram of authenticated medical certificate data. The block diagram of signed medical certificate data. The block diagram of authenticated medical certificate data. The figure which shows an example of the hardware constitutions of the insurance company apparatus 10, the agency apparatus 20, the medical institution apparatus 30, and the authentication apparatus 40.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
In the following description, the processing device is a CPU 911 or the like which will be described later. The storage device is a ROM 913, a RAM 914, a magnetic disk 920, a cache memory, a register, or the like included in the CPU 911, which will be described later. The input device is a keyboard 902, a communication board 915, and the like which will be described later. The communication device is a communication board 915 described later. That is, the processing device, the storage device, the input device, and the communication device are hardware.

Embodiment 1 FIG.
FIG. 1 is a functional block diagram of the medical certificate generation support system 100.
The medical certificate generation support system 100 includes an insurance company device 10, an agency device 20, a medical institution device 30, and an authentication device 40. The insurance company device 10, the agency device 20, the medical institution device 30, and the authentication device 40 are connected via a network.
The insurance company device 10 is a device installed in an insurance company, and includes a medical certificate data generation unit 11, an insurance company signature data generation unit 12, a medical certificate data transmission unit 13, and a storage device 14.
The agency device 20 is a device installed at an insurance company agency, and includes an edited data generation unit 21, an agency signature data generation unit 22, a signature edited medical certificate data transmission unit 23, and a storage device 24.
The medical institution apparatus 30 is an apparatus installed in a medical institution, and includes a diagnostic data input unit 31, a medical institution signature data generation unit 32, a signature input completed medical certificate data transmission unit 33, and a storage device 34.
The authentication device 40 is a device of an institution that the insurance company device 10, the agent device 20, and the medical institution device 30 have previously determined to trust, and is a device of a certificate authority in so-called electronic signature processing. The authentication device 40 authenticates the data transmitted from the insurance company device 10, the agency device 20, and the medical institution device 30, and transfers the data to another device. The authentication device 40 includes a signature confirmation unit 41, an authentication device signature data generation unit 42, an authenticated medical certificate data transmission unit 43, and a storage device 44.

The operation of the medical certificate generation support system 100 will be described.
Here, as an example, the following processing flow (1), (2), and (3) will be described. (1) The insurance company prepares medical certificate data that defines the input format of the medical certificate and distributes it to the agency. Next, (2) the agency that received the request for hospitalization benefits from the claimant edits the medical certificate data created by the insurance company according to the status of the claimant's insurance contract, etc., and sends it to the medical institution To do. (3) The medical institution describes the diagnostic data that is the hospitalization information of the claimant and sends it to the insurance company.
2 and 3 are flowcharts showing the flow of processing of the medical certificate generation support system 100 in this case. 2 and 3 show that (S13) in FIG. 3 is executed after (S12) in FIG.

The processing from (S1) to (S6) corresponds to the processing of “(1) The insurance company creates medical certificate data defining the medical certificate input format and distributes it to the agent”.
The insurance company apparatus 10 performs the processing from (S1) to (S3).
In (S1), the medical certificate data generation unit 11 generates medical certificate data defining a new input format by the processing device. The medical certificate data generation unit 11 includes the expiration date, identification information of the created application, identification information of the creator, creation date and time, IP address of the created device, etc. in the medical certificate data.
In (S2), the insurance company signature data generation unit 12 encrypts the medical certificate data generated in (S1) with the insurance company key, which is the private key of the insurance company device 10, by the processing device, and generates the insurance company signature data. Generate.
In (S3), the medical certificate data transmitting unit 13 adds the insurance company signature data generated in (S2) to the medical certificate data generated in (S1), and uses the communication device as signed medical certificate data. To the authentication device 40. Further, the medical certificate data transmission unit 13 stores the transmitted signed medical certificate data in the storage device 14.
FIG. 4 is a configuration diagram of signed medical certificate data. As described above, the signed medical certificate data is data obtained by adding insurance company signature data to the medical certificate data.

The authentication device 40 performs the processes from (S4) to (S6).
In (S4), the signature verification unit 41 receives the signed medical certificate data transmitted in (S3), and the insurance device signature data included in the signed medical certificate data is received by the processing device by the insurance company device 10. The signature is verified using the public key.
In (S5), if the signature verification is successful in (S4), the authentication device signature data generation unit 42 encrypts the signed medical certificate data with the authentication device key, which is the secret key of the authentication device 40, by the processing device. To generate authentication device signature data.
In (S6), the authenticated medical certificate data transmission unit 43 adds the authentication device signature data generated in (S5) to the signed medical certificate data, and uses the communication device as the authenticated medical certificate data. Transmit to device 20. It is assumed that the transmission destination is designated when the medical certificate data transmitting unit 13 transmits the signed medical certificate data in (S3). However, only a device registered in advance in the authentication device 40 can be designated as the transmission destination. In addition, the authenticated medical certificate data transmission unit 43 stores the transmitted authenticated medical certificate data in the storage device 44.
FIG. 5 is a configuration diagram of authenticated medical certificate data. As described above, the authenticated medical certificate data is data in which the authentication device signature data is added to the signed medical certificate data.

  Through the above processing, the medical certificate data authenticated by the authentication device 40 is distributed to the agency. The agency device 20 decrypts the authentication device signature data included in the authenticated medical certificate data transmitted in (S6) with the public key of the authentication device 40 and verifies the signature, thereby distributing the medical certificate. It can be confirmed that the data is not invalid.

The processing from (S7) to (S12) is "(2) The agent who received the request for hospitalization benefits from the claimant, the medical certificate data created by the insurance company according to the status of the claimant's insurance contract, etc. This corresponds to the process of “edit and send to medical institution”.
The agency device 20 performs the processing from (S7) to (S9).
In (S7), the edit data generating unit 21 receives the authenticated medical certificate data transmitted in (S6), and the processing device causes the medical certificate data included in the received authenticated medical certificate data and the claimant. Edit data is generated according to the status of the insurance contract. For example, the edit data generation unit 21 inputs the requester's name, address, contact information, etc., and allows only the items to be input by the medical institution according to the status of the claimant's insurance contract, etc. Edit data that disables entry of the item is generated. That is, the edit data generation unit 21 does not directly edit the medical certificate data included in the authenticated medical certificate data, but generates edit data indicating the content of editing the medical certificate data separately from the medical certificate data. . The edit data generation unit 21 includes the created application identification information, the creator identification information, the creation date and time, the created device IP address, and the like in the edited data.
In (S8), the agency signature data generation unit 22 adds the edited data generated in (S7) to the authenticated medical certificate data transmitted in (S6) to obtain edited medical certificate data. Then, the agency signature data generation unit 22 generates agency signature data by encrypting the edited medical certificate data with the agency key by the processing device.
In (S9), the signature-edited medical certificate data transmitting unit 23 adds the agency signature data generated in (S8) to the edited medical certificate data, and uses the communication device as signature-edited medical certificate data. It transmits to the authentication device 40. In addition, the signature edited medical certificate data transmission unit 23 stores the transmitted signature edited medical certificate data in the storage device 24.
FIG. 6 is a configuration diagram of the signature edited medical certificate data. As described above, the signature edited medical certificate data is data obtained by adding the edited data and the agency signature data to the authenticated medical certificate data.

The authentication device 40 performs the processes from (S10) to (S12).
In (S10), the signature confirmation unit 41 receives the signature edited medical certificate data transmitted in (S9), and the processing device converts the agent signature data included in the received signature edited medical certificate data, The signature is verified by decrypting with the public key of the agency device 20.
In (S11), if the signature verification is successful in (S10), the authentication device signature data generation unit 42 uses the authentication device key that is the secret key of the authentication device 40 to process the signature edited medical certificate data by the processing device. Encrypt and generate authentication device signature data.
In (S12), the authenticated medical certificate data transmission unit 43 adds the authentication device signature data generated in (S11) to the signature edited medical certificate data, and uses the medical certificate as the authenticated medical certificate data via the communication device. It transmits to the engine device 30. It is assumed that the transmission destination is specified when the signature edited medical certificate data transmission unit 23 transmits the signature edited medical certificate data in (S9). However, only a device registered in advance in the authentication device 40 can be designated as the transmission destination. In addition, the authenticated medical certificate data transmission unit 43 stores the transmitted authenticated medical certificate data in the storage device 44.
FIG. 7 is a configuration diagram of authenticated medical certificate data. As described above, the authenticated medical certificate data is data obtained by adding the authentication device signature data to the signature edited medical certificate data.

  Through the above processing, the medical certificate data authenticated by the authentication device 40 and distributed according to the contents of the insurance contract of the claimant is distributed to the medical institution. The medical institution device 30 is distributed by decrypting the two authentication device signature data included in the authenticated medical certificate data transmitted in (S12) with the public key of the authentication device 40 and verifying the signature. It can be confirmed that the medical certificate data is not invalid.

The processing from (S13) to (S19) corresponds to the processing “(3) The medical institution describes diagnostic data that is hospitalization information of the claimant and sends it to the insurance company”.
The medical institution apparatus 30 performs the processing from (S13) to (S15).
In (S13), the diagnostic data input unit 31 receives the authenticated medical certificate data transmitted in (S12) and edits it in the medical certificate format indicated by the medical certificate data included in the received authenticated medical certificate data. The diagnosis data is input to the doctor by the input device to the item indicating that the data can be input. Thereby, the diagnostic data input part 31 produces | generates diagnostic data separately from medical certificate data and edit data. The diagnostic data input unit 31 includes the identification information of the created application, the identification information of the creator, the creation date and time, the IP address of the created device, and the like in the diagnostic data.
In (S14), the medical institution signature data generation unit 32 uses the processing device to add the diagnostic data input in (S13) to the authenticated medical certificate data to obtain input medical certificate data. Then, the medical institution signature data generation unit 32 encrypts the input medical certificate data with a medical institution key that is a secret key of the medical institution and generates medical institution signature data.
In (S15), the signed medical certificate data transmission unit 33 adds the medical institution signature data generated in (S14) to the entered medical certificate data, and uses the communication device as the signed medical certificate data. It transmits to the authentication device 40.
FIG. 8 is a configuration diagram of the signed medical certificate data. As described above, the signed medical certificate data is data in which diagnostic data and medical institution signature data are added to the authenticated medical certificate data.

The processing from (S16) to (S18) is performed by the authentication device 40.
In (S16), the signature confirmation unit 41 receives the signature input completed medical certificate data transmitted in (S15) by the processing device, and stores the agent signature data included in the received signature input completed medical certificate data. The signature is verified by decrypting with the public key of the medical institution apparatus 30.
In (S17), if the signature verification is successful in (S16), the authentication device signature data generation unit 42 uses the authentication device key, which is the secret key of the authentication device 40, to obtain the signed certificate data by the processing device. Encrypt and generate authentication device signature data.
In (S18), the authenticated medical certificate data transmission unit 43 adds the authentication device signature data generated in (S17) to the signature-input completed medical certificate data, and uses the medical certificate as the authenticated medical certificate data via the communication device. It transmits to the engine device 30. It is assumed that the transmission destination is designated when the signature edited medical certificate data transmitting unit 23 transmits the signature edited medical certificate data in (S15). However, only a device registered in advance in the authentication device 40 can be designated as the transmission destination. In addition, the authenticated medical certificate data transmission unit 43 stores the transmitted authenticated medical certificate data in the storage device 44.
FIG. 9 is a configuration diagram of authenticated medical certificate data. As described above, the authenticated medical certificate data is data obtained by adding the authentication device signature data to the signature input medical certificate data.

  In (S19), the insurance company apparatus 10 receives the authenticated medical certificate data transmitted in (S18). As a result, the insurance company device 10 acquires the medical certificate data authenticated by the authentication device 40 and including the diagnostic data of the claimant by the medical institution.

Here, in the medical certificate generation support system 100, when editing the received data, the received data is not changed, but the data to be edited is generated and added. For example, when the medical certificate data is edited in (S7), the contents of the medical certificate data are not changed, but the edited data is generated separately from the medical certificate data. For example, even when a part of the received data is deleted, data indicating that the data is to be deleted is added instead of actually deleting the data. The data to be added includes identification information of the person who generated the data. Therefore, it can be confirmed later who added the data added in the past.
In addition, the diagnostic document generation support system 100 leaves the electronic book name included in the received data without deleting it. Therefore, as shown in FIG. 9, the certified medical certificate data acquired by the insurance company apparatus 10 in (S19) is attached to the data added in the past and the person who added the data every time it is added. Signature data. Therefore, it is possible to detect when the data has been tampered with while the data is being transferred.

In addition, when data is added, not only the electronic signature of the person who added the data is attached, but also after the electronic signature is authenticated by the authentication device 40 and the electronic signature of the authentication device 40 is further attached, Sent to others. Although the electronic book name of the person who added the data is not necessarily reliable, if the electronic signature of the authentication device 40 is used, the authentication device 40 recognizes that it is trusted in advance, so that it can be trusted.
Further, since the data is always transmitted to the other person through the authentication device 40, all data transmitted to the other person is stored in the storage device 44 provided in the authentication device 40. Therefore, it is possible to trace the past history of the medical certificate data also from the data stored in the storage device 44.

In addition, when data is transmitted to another person, the data is always transmitted via the authentication device 40. Therefore, the insurance company device 10, the agency device 20, and the medical institution device 30 send data to the authentication device. It may be fixed to 40. By doing so, it is possible to prevent the medical certificate data in which personal information is described from leaking to a third party.
Further, the destination to which the authentication device 40 transmits is limited to those who are registered in advance as described above. Therefore, it is possible to prevent the medical certificate data in which personal information is described from leaking to a third party.

In addition, a signature by the insurance company is attached at the stage where the medical certificate data is newly created, that is, only the format is defined, and in some cases, a blank sheet stage, and the signature by the authentication device 40 is attached. Therefore, official guarantee is provided when the medical certificate data is newly created.
In addition, edit data for restricting (specifying) the medical certificate data area that can be edited by the medical institution is generated by the agency, the agency's signature is attached to the data including the edit data, and the authentication device 40 A signature is attached. Therefore, there is an official guarantee about the limitation of the editable area.

In the above description, the flow of processes (1), (2), and (3) has been described as an example. However, the flow of processing in the medical certificate generation support system 100 is not limited to this.
For example, medical certificate data may be transmitted directly from an insurance company to a medical institution without going through an agent. In this case, the authenticated medical certificate data transmission unit 43 may transmit the authenticated medical certificate data to the medical institution device 30 in (S6).
Similarly to the case described above, when the medical certificate data is transmitted to the medical institution device 30 after adding the edit data, the insurance company device 10 performs the processing of the agency device 20 in (2) instead. Just do it. That is, the insurance company apparatus 10 performs the processing from (S7) to (S9) instead of the agency apparatus 20. In this case, in (S8), the insurance company signature data generation unit 12 of the insurance company device 10 encrypts the edited medical certificate data obtained by adding the edited data to the authenticated medical certificate data with the insurance company key, and the insurance company signature. Generate data. In (S9), the insurance company key generated in (S8) is added to the edited medical certificate data and transmitted to the authentication device 40 as signature edited medical certificate data.
Further, the medical certificate data may be added to the medical certificate data added by the insurance company to the medical certificate data added to the medical certificate data. Even in this case, an electronic signature is added each time data is added to the medical certificate data. When the medical certificate data is sent to another person, the authentication apparatus 40 verifies the electronic signature, adds the electronic signature of the authentication apparatus 40, and transmits the result.

In the above description, it is assumed that there is only one insurance company device 10, agent device 20, and medical institution device 30 each. However, the insurance company apparatus 10, the agency apparatus 20, and the medical institution apparatus 30 are installed for each insurance company, for each agency, and for each medical institution, and a plurality of them may exist.
In this case, for example, medical certificate data may be transmitted from an insurance company to a medical institution via a plurality of agents. Even in this case, an electronic signature is added each time data is added to the medical certificate data. When the medical certificate data is sent to another person, the authentication apparatus 40 verifies the electronic signature, adds the electronic signature of the authentication apparatus 40, and transmits the result.

  In the above description, each signature data is generated by encrypting the original data of the signature. However, each signature data may be generated by encrypting the signature original data after calculating a hash value with a predetermined hash function.

  In the above description, data is not encrypted and transmitted. However, the data may be transmitted after being encrypted.

  In the above description, the medical certificate is described as an example. However, similarly to the medical certificate, any document other than the medical certificate may be used as long as it is necessary to confirm the editing history or the like in a guaranteed form later. In this case, the “medical certificate” in the above description may be read as “document”. Further, in this case, it is conceivable that documents are not exchanged between the insurance company and the medical institution, and documents are exchanged between other companies, organizations, and the like. Therefore, in the above description, “insurance company” may be read as “first”, “medical institution” as “second”, and “agent” as “third”.

Next, the hardware configuration of each server included in the insurance company apparatus 10, the agency apparatus 20, the medical institution apparatus 30, and the authentication apparatus 40 in the above embodiment will be described.
FIG. 10 is a diagram illustrating an example of a hardware configuration of the insurance company device 10, the agency device 20, the medical institution device 30, and the authentication device 40.
As shown in FIG. 10, the insurance company device 10, the agency device 20, the medical institution device 30, and the authentication device 40 include a CPU 911 (Central Processing Unit, a central processing unit, a processing unit, an arithmetic unit, a micro unit that executes a program. A processor, a microcomputer, and a processor). The CPU 911 is connected to the ROM 913, the RAM 914, the LCD 901 (Liquid Crystal Display), the keyboard 902 (K / B), the communication board 915, and the magnetic disk device 920 via the bus 912, and controls these hardware devices. Instead of the magnetic disk device 920 (fixed disk device), a storage device such as an optical disk device or a memory card read / write device may be used. The magnetic disk device 920 is connected via a predetermined fixed disk interface.

  The ROM 913 and the magnetic disk device 920 are examples of a nonvolatile memory. The RAM 914 is an example of a volatile memory. The ROM 913, the RAM 914, and the magnetic disk device 920 are examples of a storage device (memory). The keyboard 902 and the communication board 915 are examples of input devices. The communication board 915 is an example of a communication device (network interface). Furthermore, the LCD 901 is an example of a display device.

  An operating system 921 (OS), a window system 922, a program group 923, and a file group 924 are stored in the magnetic disk device 920 or the ROM 913. The programs in the program group 923 are executed by the CPU 911, the operating system 921, and the window system 922.

In the program group 923, in the above description, “medical certificate data generation unit 11”, “insurance company signature data generation unit 12”, “medical certificate data transmission unit 13”, “edit data generation unit 21”, “agent signature” "Data generation unit 22", "Signature edited medical certificate data transmission unit 23", "Diagnostic data input unit 31", "Medical institution signature data generation unit 32", "Signature input completed medical certificate data transmission unit 33", "Signature Stored are software, programs, and other programs that execute the functions described as “confirmation unit 41”, “authentication device signature data generation unit 42”, “authenticated medical certificate data transmission unit 43”, and the like. The program is read and executed by the CPU 911.
In the file group 924, information, data, signal values, variable values, and parameters such as “tag data”, “encrypted data”, “decrypted data”, “result”, “warning” in the above description are stored in the “file data”. And “database”. The “file” and “database” are stored in a recording medium such as a disk or a memory. Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit, and extracted, searched, referenced, compared, and calculated. Used for the operation of the CPU 911 such as calculation / processing / output / printing / display. Information, data, signal values, variable values, and parameters are temporarily stored in the main memory, cache memory, and buffer memory during the operation of the CPU 911 for extraction, search, reference, comparison, calculation, calculation, processing, output, printing, and display. Is remembered.

In the above description, the arrows in the flowchart mainly indicate input / output of data and signals, and the data and signal values are recorded in a memory of the RAM 914, other recording media such as an optical disk, and an IC chip. Data and signals are transmitted online by a bus 912, signal lines, cables, other transmission media, and radio waves.
In addition, what is described as “to part” in the above description may be “to circuit”, “to device”, “to device”, “to means”, and “to function”. It may be “step”, “˜procedure”, “˜processing”. In addition, what is described as “˜device” may be “˜circuit”, “˜device”, “˜means”, “˜function”, and “˜step”, “˜procedure”, “ ~ Process ". Furthermore, what is described as “to process” may be “to step”. That is, what is described as “˜unit” may be realized by firmware stored in the ROM 913. Alternatively, it may be implemented only by software, or only by hardware such as elements, devices, substrates, and wirings, by a combination of software and hardware, or by a combination of firmware. Firmware and software are stored in a recording medium such as ROM 913 as a program. The program is read by the CPU 911 and executed by the CPU 911. That is, the program causes a computer or the like to function as the “˜unit” described above. Alternatively, the computer or the like is caused to execute the procedures and methods of “to part” described above.

  DESCRIPTION OF SYMBOLS 10 Insurance company apparatus, 11 Medical certificate data generation part, 12 Insurance company signature data generation part, 13 Medical certificate data transmission part, 14 Storage device, 20 Agency apparatus, 21 Edit data generation part, 22 Agency signature data generation part, 23. Signature edited medical certificate data transmission unit, 24 storage device, 30 medical institution device, 31 diagnostic data input unit, 32 medical institution signature data generation unit, 33 signature input medical certificate data transmission unit, 34 storage device, 40 authentication device , 41 Signature confirmation unit, 42 Authentication device signature data generation unit, 43 Authenticated medical certificate data transmission unit, 44 Storage device, 100 Medical certificate generation support system.

Claims (4)

A medical certificate generation support system comprising an insurance company device used in an insurance company, a medical institution device used in a medical institution, and an authentication device;
The insurance company device is:
A medical certificate data generation unit for generating medical certificate data defining the input format of the medical certificate by the processing device;
An insurance company signature data generation unit that encrypts the medical certificate data generated by the medical certificate data generation unit with an insurance company key and generates insurance company signature data by a processing device;
A medical certificate for transmitting signed medical certificate data obtained by adding the insurance company signature data generated by the insurance company signature data generating unit to the medical certificate data generated by the medical certificate data generating unit to the authentication device via a communication device A data transmission unit,
The authentication device
An authentication device signature data generation unit that encrypts the signed medical certificate data transmitted by the medical certificate data transmission unit with an authentication device key and generates first authentication device signature data by the processing device;
Authenticated diagnosis for transmitting first authenticated medical certificate data obtained by adding first authenticated device signature data generated by the authentication device signature data generating unit to the signed medical certificate data to the medical institution device via a communication device A data transmission unit,
The medical institution apparatus is
Diagnostic data that causes the input device to input diagnostic data to be input to the medical certificate in accordance with the input format of the medical certificate specified by the medical certificate data included in the first authenticated medical certificate data transmitted by the authenticated medical certificate data transmission unit An input section;
Medical institution signature data in which the diagnosis data input by the diagnosis data input unit is added to the authenticated medical certificate data, and the medical institution signature data is generated by the processing device by encrypting the input medical certificate data with a medical institution key. A generator,
Signature input medical certificate data transmission unit for transmitting signature input medical certificate data in which the medical institution signature data generated by the medical institution signature data generation unit is added to the input medical certificate data to the authentication device via a communication device And
The authentication device signature data generation unit of the authentication device generates second authentication device signature data by encrypting the signature input completed medical certificate data transmitted by the signature input completed medical certificate data transmission unit with an authentication device key;
The authenticated medical certificate data transmission unit of the authentication device includes second authenticated medical certificate data obtained by adding the second authentication device signature data generated by the authentication device signature data generating unit to the signature input medical certificate data. A medical certificate generation support system, which transmits to the insurance company device via a communication device. The medical certificate generation support system further includes an agency device used by the agency,
The authenticated medical certificate data transmission unit of the authentication device transmits the authenticated medical certificate data to the agency device via a communication device,
The agency device includes an editing data generating unit that generates editing data for editing the medical certificate data included in the authenticated medical certificate data transmitted by the authenticated medical certificate data transmitting unit;
Agent signature data generation in which edited data generated by the edited data generation unit is added to the certified medical certificate data, and the edited medical certificate data is encrypted with the agent key and the agency signature data is generated by the processing device. And
Signature-edited medical certificate data transmission unit for transmitting signature-edited medical certificate data obtained by adding agency signature data generated by the agency signature data generation unit to the edited medical certificate data to the authentication device via a communication device And
The authentication device signature data generation unit of the authentication device generates the third authentication device signature data by encrypting the signature edited medical certificate data transmitted by the signature edited medical certificate data transmission unit with an authentication device key,
The authenticated medical certificate data transmission unit of the authentication device includes third authenticated medical certificate data obtained by adding the third authentication device signature data generated by the authentication device signature data generating unit to the signature edited medical certificate data. To the medical institution device,
The diagnostic data input unit of the medical institution apparatus includes a medical certificate format indicated by medical certificate data included in the third authenticated medical certificate data transmitted by the authenticated medical certificate data transmitting unit, and the third authenticated medical certificate. According to the edit data included in the data, let the diagnostic data to be entered into the medical certificate be entered by the input device,
The medical institution signature data generation unit of the medical institution device encrypts the input medical certificate data obtained by adding the diagnostic data input by the diagnostic data input unit to the third authenticated medical certificate data with a medical institution key. To generate medical institution signature data,
The signature input medical certificate data transmission unit of the medical institution device uses the communication device to transmit the signature input medical certificate data obtained by adding the medical institution signature data generated by the medical institution signature data generation unit to the input medical certificate data. The diagnostic document generation support system according to claim 1, wherein the diagnostic certificate generation support system transmits the information to the authentication device. The authentication device further includes:
The medical certificate generation support system according to claim 1, further comprising an authenticated data storage unit that stores data transmitted by the authenticated medical certificate data transmission unit in a storage device. A document data generation support system including a first device, a second device, and an authentication device;
The first device includes:
A document data generation unit for generating document data defining a document data input format by a processing device;
A first signature data generation unit that encrypts the document data generated by the document data generation unit with a first key and generates first signature data by a processing device;
A document data transmission unit that transmits signed document data obtained by adding the first signature data generated by the first signature data generation unit to the document data generated by the document data generation unit to the authentication device via a communication device; With
The authentication device
An authentication device signature data generation unit that encrypts the signed document data transmitted by the document data transmission unit with an authentication device key and generates first authentication device signature data by the processing device;
Authenticated document data transmission for transmitting the first authenticated document data obtained by adding the first authentication device signature data generated by the authentication device signature data generation unit to the signed document data to the second device via a communication device With
The second device includes:
A data input unit for inputting data to be input to a document by an input device in accordance with an input format of document data defined by document data included in the first authenticated document data transmitted by the authenticated document data transmission unit;
A second signature data generation unit that encrypts the input document data added to the authenticated document data with the second key by the data input unit and generates second signature data by a processing device;
A signature input document data transmission unit that transmits the signature input document data obtained by adding the second signature data generated by the second signature data generation unit to the input document data to the authentication device via a communication device. ,
The authentication device signature data generation unit of the authentication device generates second authentication device signature data by encrypting the signature input document data transmitted by the signature input document data transmission unit with an authentication device key,
The authenticated document data transmission unit of the authentication device transmits the second authenticated document data obtained by adding the second authentication device signature data generated by the authentication device signature data generation unit to the signature input document data. A document generation support system, wherein the document generation support system transmits the information to the first device.

Images