JP2012252573A - Information distribution system and information distribution control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To secure security and trace a distribution state of an electronic file, by dynamically applying operation authority to the electronic file.SOLUTION: In an official document management server 4, an official document state recording part 47 manages a distribution state of an official document, an official document recording part 46 manages an access control rule, and an official document authority providing server 3 is newly provided. When each of requests "generation", "issuance", "browsing" and "completion" to the official document occurs from an official document issuance server 1 and an official document reception server 2, it is determined that whether or not a requester has operation authority to the official document on the basis of the current distribution state and access control rule information of the target document. If the determination result shows that the requester has the operation authority, processing corresponding to each of the requests is set as executable, and if not, the processing corresponding to each of the requests is executed after waiting for input operation of authority provision by an authority provider in the authority providing server 3.

Description

  The present invention relates to an information distribution system and an information distribution control method for distributing electronic files such as official documents among a plurality of users via a communication network.

  As medical / healthcare information is digitized, official documents such as letters of introduction and prescriptions are expected to be digitized and distributed. However, these official documents have security issues such as replacement, loss, theft, and leakage of personal information due to the period between issue and receipt, which further promotes electronic distribution of medical and healthcare information. It is a big hindrance above.

  In order to solve this problem, a policy that allows a specific person to perform a specific operation is applied to the official document, or the work based on the official document from the issuance of the official document (hereinafter referred to as “complete”). It is necessary to trace and clarify

  On the other hand, as a technique for handling an electronic file, a technique has been proposed in which a password is assigned to the electronic file and only a person who knows the password has the authority to operate the electronic file (see, for example, Patent Document 1). There is also a technology that categorizes electronic files and prepares a list that shows the relationship between people and electronic file operation authority by category so that electronic file operation authority can be provided for each category. Proposed. Furthermore, in relation to this technology, in the medical field, a technology that grants operation authority for each item by qualification for medical information composed of a plurality of items, a category for electronic files, and a confidential level and position information of a person are used. In addition, when a person tries to operate an electronic file at an arbitrary place, a technique for determining whether the person can operate the electronic file at the place has been proposed.

JP-A-11-227267

  However, with the technique described in Patent Document 1, a password is assigned each time an electronic file is created, and authentication processing using the password is required when the electronic file is read. For this reason, if there are a plurality of operating persons, a corresponding amount of time is required. Also, in an electronic file that has an effect only from the issuance to the completion of receipt, such as an official document, since the person who operates at each stage is different, it is necessary to dynamically change the operation authority. However, the technique described in Patent Document 1 cannot cope with dynamic changes in operation authority. In addition, even in the conventionally proposed technology, there is a problem that operation authority cannot be appropriately applied in the file distribution process.

  The present invention has been made paying attention to the above circumstances, and the purpose of the present invention is to make it possible to dynamically apply an operation authority to an electronic file, thereby ensuring security and tracking the distribution state of the electronic file. It is an object to provide an information distribution system and an information distribution control method that make it possible.

  In order to achieve the above object, one aspect of the present invention is to provide an issuing device that includes an electronic file creation process in accordance with a user operation and a means for issuing the created electronic file, and a user operation. Management capable of transmitting information between a receiving device having means for performing processing for browsing an electronic file and completion processing of work performed based on the electronic file, and the issuing device and the receiving device via a communication network A first storage unit that stores an electronic file created by the issuing device in the management device, and a distribution of the electronic file stored in the first storage unit Second storage means for storing distribution state management information for managing the state, and an access control rule in which an operation authority corresponding to the distribution state is defined for each user And a third storage means for storing the broadcast. When the execution request for at least one of the electronic file creation processing, issue processing, browsing processing, and completion processing is sent from the issuing device and the receiving device according to the user's request operation, the second storage Based on the distribution status management information stored in the means and the access control rule information stored in the third storage means, the presence or absence of the operation authority of the requesting user for the electronic file to be processed is determined. According to the result, information for controlling execution of processing by the requesting user is generated and transmitted to the requesting issuing device or receiving device.

  Therefore, in response to various processing requests of the user for the electronic file, the operation authority is dynamically provided according to the current distribution state of the electronic file. For this reason, various processes for the electronic file can be limited to only a user having an operation authority, and it is possible to prevent a third party from replacing or deleting a document in the distribution process.

One aspect of the present invention is characterized by comprising the following aspects.
The first aspect is as follows. That is, the information distribution system further includes an authority providing device capable of transmitting information to and from the management device via the communication network. When the management apparatus determines that the requesting user does not have the operating authority for the processing target electronic file, the management apparatus transmits a request for providing the operating authority to the requesting user to the authority providing apparatus. To do. In the authority providing device, when a request for providing the operation authority is sent from the management apparatus, the authority providing apparatus generates information indicating whether or not the operation authority is provided according to the input operation of the user as the authority provider. The generated permission / rejection information is returned to the management apparatus. The management device generates information for controlling execution of processing by the request source user according to the permission / refusal information returned from the authority providing device, and transmits the information to the request source issuing device or receiving device.

  Therefore, even a user (person or institution) who does not have the operation authority can receive only the authority from the authority provider, so that only specific processing can be performed on the electronic file to be operated. That is, not only a user who has been given an operation authority in advance according to the distribution status of the electronic file, but also a user who is not managed on the disclosure control infrastructure or the authentication infrastructure can execute processing corresponding to each status of the electronic file. Is possible.

In the second aspect, the management device sends a request for updating the distribution state of the electronic file from the issuing device or the receiving device during or after the electronic file creation processing, issue processing, browsing processing, and completion processing. In this case, the distribution state management information stored in the second storage means is updated in response to the update request.
Therefore, every time various processes are executed in the issuing device and the receiving device, the contents of the distribution state management information related to the management file are updated accordingly. For this reason, it is possible to track the transition of the distribution state of the electronic file by referring to the distribution state management information.

  That is, according to the present invention, an information distribution system and an information distribution control method that can dynamically apply an operation authority to an electronic file, thereby enabling security assurance and tracking of the distribution state of the electronic file. Can be provided.

The block diagram which shows the function structure of the information distribution system which concerns on one Embodiment of this invention. The figure which shows an example of the information memorize | stored in the official document recording part provided in the official document management server of the information distribution system shown in FIG. The figure which shows an example of the information memorize | stored in the official document status recording part provided in the official document management server of the information distribution system shown in FIG. The figure which shows an example of the access control rule information managed by the official document management server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the official document preparation process performed in the official document issuing server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the official document issuing process performed in the official document issuing server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the official document reception process performed in the official document reception server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the authority provision process performed in the official document authority provision server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the official document reception completion process performed in the official document reception server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the calling process performed in the official document management server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the official document state update process performed in the official document management server of the information distribution system shown in FIG. The flowchart which shows the procedure of the official document preservation | save process performed in the official document management server of the information distribution system shown in FIG. The flowchart which shows the procedure and processing content of the access control process performed in the official document management server of the information distribution system shown in FIG.

Embodiments according to the present invention will be described below with reference to the drawings.
[Typical embodiment]
(Constitution)
FIG. 1 is a block diagram showing a functional configuration of an information distribution system according to an embodiment of the present invention. This information distribution system includes an official document issuing server 1, an official document receiving server 2, an official document authority providing server 3, an official document management server 4 and an authentication server 5, and a communication network NW is connected between these servers 1-5. This enables communication for information distribution.

  The communication network NW is a public telephone network, optical fiber, cable communication network such as CATV (Cable Television) or wired LAN (Local Area Network), mobile phone network, hot spot (registered trademark), WiMAX (registered trademark). And a wireless communication network such as a wireless LAN.

  The official document issue server 1 is used by an official document issuer by logging in from its own terminal UT1, and includes a control unit having a CPU (Central Processing Unit) and a storage unit. A user recording unit 15 is provided in the storage unit. The control unit includes an authentication unit 11, an authentication cooperation unit 12, an information distribution unit 13, and an update document issuing unit 14 as processing functions necessary for carrying out this embodiment.

Among these, the update document issuing unit 14 has the following processing functions.
(1) A process of creating a new official document in response to a document creation request from the official document issuer and recording it in the official document recording unit 46 of the official document management server 4 described later.
(2) A process for calling or correcting or deleting the official document recorded in the official document recording unit 46 according to the operation of the official document issuer.
(3) A process of setting the corresponding document recorded in the official document recording unit 46 to the issued state in response to the document issue request of the official document issuer.

  The official document receiving server 2 is used by a person who wants to view and receive an official document by logging in from his / her terminal UT2, and the official document receiving server 2 also includes a control unit having a CPU and a storage unit. A user recording unit 25 is provided in the storage unit. The control unit includes an authentication unit 21, an authentication cooperation unit 22, an information distribution unit 23, and an official document reception unit 24 as processing functions necessary for carrying out this embodiment.

Among these, the official document receiving unit 24 has the following processing functions.
(1) In response to the document viewing request of the official document recipient, it is determined whether the recipient has the viewing authority and is the recipient of the official document. If the requester is an official document recipient, the official document management server 4 (to be described later) is requested to call the corresponding official document to enable reception of the official document, and the official document is received. Processing for transmitting a request for updating the state of the official document to the official document management server 4 in order to record the fact to the official document state recording unit 47.
(2) If the viewing requester is not the official document recipient, a process for requesting the official document management server 4 to call the corresponding official document and allowing only the official document to be viewed.
(3) When the recipient performs the completion operation after receiving the official document, it is determined whether or not the operator has the authority to complete. Then, if there is a completion authority, after performing the completion work for the corresponding official document, the official document management server 4 updates the state of the official document to record the completion in the official document state recording unit 47 Process to send a request to do.

  The official document authority providing server 3 is used by an authority provider who provides the official document recipient with the authority to view and receive official documents by logging in from his / her terminal UT3. A control unit having a CPU and a storage unit are provided. A user recording unit 35 is provided in the storage unit. The control unit includes an authentication unit 31, an authentication linkage unit 32, an information distribution unit 33, and an authority providing unit 34 as processing functions necessary to implement this embodiment.

  Among these, the authority providing unit 34 determines whether the recipient is an organization or a person who is not on the authentication base in the official document browsing process by the official document receiving server 2 according to the operation of the authority provider. On the other hand, processing is performed to temporarily provide viewing and receiving authority for the official document.

  The official document management server 4 is used by an official document manager who logs in from his / her terminal UT4. The official document management server 4 also includes a control unit having a CPU and a storage unit. In addition to the user recording unit 45, the storage unit is provided with an official document recording unit 46 and an official document state recording unit 47. The control unit includes an authentication unit 41, an authentication cooperation unit 42, an information distribution unit 43, and an official document processing unit 44 as processing functions necessary to implement this embodiment.

  Of these, the official document recording unit 46 is used to record the electronic file of the official document created in the official document issuing server 1 in association with the management information. The management information includes an official document ID, an authority provider, an official document type, and a plurality of management items. In the management item, the organization name and name of the recipient of the official document are entered. An example is shown in FIG.

  The official document status recording unit 47 is used to record information for managing the distribution status of each official document recorded in the official document recording unit 46. The information managing the distribution status is associated with each official document ID, the current distribution status of the official document, the creator signature and creation date of the official document, the issuer signature and issue date, the recipient signature and It stores the date of receipt, the signature of the person who completed it, and the time of completion. An example is shown in FIG.

  The official document status recording unit 47 also stores information indicating access control rules for the official document recorded in the official document recording unit 46. FIG. 4 shows an example.

Of the processing functions provided in the control unit, the official document processing unit 44 has the following processing functions.
(1) Processing for recording, correcting and deleting the official document to the official document recording unit 46 in response to requests for recording, correcting and deleting the official document from the official document issuing server 1 and the official document receiving server 2.
(2) Processing for reading out the corresponding recorded document from the official document recording unit 46 in response to the official document call request from the official document issuing server 1 and the official document receiving server 2 and returning it to the request source.
(3) In response to the access request for the official document recorded in the official document recording unit 46, based on the information managing the distribution state of the official document stored in the official document state storage unit 47 and the access control rule, Processing that performs access control.
(4) Processing for updating information managing the distribution status of the corresponding official document stored in the official document status storage unit 47 in response to the distribution status update request from the official document issuing server 1 and the official document receiving server 2.

  Note that the authentication units 11 to 41 included in each of the servers 4 perform authentication processing based on the user information stored in the user recording units 15 to 45 when the user of the server logs in. The authentication cooperation units 12 to 42 distribute user authentication results between the servers 1 to 4. The information distribution units 13 to 43 distribute information between the servers 1 to 4 so as to know which electronic file is stored in which server and where.

  The authentication server 5 is for enabling authentication cooperation and information distribution between the servers 1 to 4 described above. In addition to the user recording unit 56, the authentication server recording unit 57 and the disclosure rule recording unit 58 are provided in the storage unit. Provided. In addition to the authentication unit 51 and the authentication cooperation unit 52, the control unit includes an authentication cooperation processing unit 53, an information distribution unit 54, and a disclosure control unit 55.

The authentication linkage recording unit 57 records the authentication IDs of the servers 1 to 4 in a list. The authentication cooperation processing unit 53 compares the authentication result in an arbitrary server with the list recorded in the authentication cooperation recording unit 57, and performs login processing to other related servers. In the disclosure rule recording unit 58, information representing who does not allow any operation on which electronic file on which server is recorded in a list. In response to an information distribution request between arbitrary servers, the disclosure control unit 55 determines permission / rejection of disclosure based on the list recorded in the disclosure rule recording unit 58, and returns the determination result.
Each processing function provided in the control unit of each of the servers 1 to 5 is realized by causing the CPU to execute an application program.

(Operation)
Next, an official document distribution processing operation by the information distribution system configured as described above will be described.
Here, the doctor's referral letter is an official document. For example, the doctor a of the medical institution A creates and issues a referral letter regarding the patient c, and the doctor b of the medical institution B receives the referral letter and then converts it into the referral letter. The case where the work based on this is performed will be described as an example. The completion of this work is referred to as “completion”.

(1) Creation of Official Document FIG. 5 is a flowchart showing the procedure and processing contents of official document creation processing by the official document issuing server 1.
In consideration of actual work, the letter of introduction is generally created based on medical information acquired at a hospital or the like. Therefore, the official document creation process is usually executed as one function of the electronic medical record system, but may be executed in another system.

  When the doctor a now accesses the official document issuing server 1 using the browser function of the terminal UT1, in the official document issuing server 1, first, the authentication unit 11 presents a login ID and password authentication input form. When the doctor a inputs the login ID and password in this input form, the authentication unit 11 acquires these login ID and password in step S11 and authenticates by collating with the user information recorded in the user recording unit 15. I do. As an authentication method, in addition to an authentication method using a login ID and a password, biometric authentication using a fingerprint or a vein, or an authentication method using an ID card may be used.

  Next, in step S12, the official document issuing server 1 sends function list data including at least an official document issuing function to the terminal UT1 of the doctor a, and displays this data as a use menu. On the other hand, when the doctor a selects the official document issuance function from the use menu, the official document issuance server 1 determines whether the doctor a has the authority to create an official document under the control of the official document issuance unit 14. The determination is made at step S13. This determination is made based on the attribute information of the doctor a recorded in the user recording unit 15.

  For example, if the official document issuing server 1 is operated by the medical institution A and the doctor a belongs to the medical institution A, the attribute information of the doctor a is stored in the user recording unit 15 of the official document issuing server 1. Since it is registered, it is determined that the doctor a has the authority to create an official document. On the other hand, for example, when a doctor belonging to another medical institution accesses the official document issuing server 1, it is determined that there is no authority to create an official document. In this case, a message indicating that there is no authority is displayed on the terminal of the requesting doctor.

  On the other hand, it is assumed that doctor a has the authority to create an official document. In this case, the official document issuing unit 14 determines in step S14 whether the creation mode desired by the doctor a is “new creation” or “correction”. If “new creation”, the process proceeds to step S15. The official document is newly created according to the input operation of the doctor A. On the other hand, if the creation mode is “correct”, an official document call request is transmitted to the official document management server 4 in step S16.

The official document management server 4 executes response processing to the call request as follows. FIG. 10 is a flowchart showing the processing procedure and processing contents.
That is, when an official document call request is received in step S81, under the control of the official document processing unit 44, the official document to be called designated by the call request received by the official document recording unit 46 in step S82. Perform a search. As a result of this search processing, the presence / absence of the corresponding official document is determined in step S83. If there is a corresponding official document, the official document is read from the official document recording unit 46 in step S84, and the requesting official document issuing server Return to 1. On the other hand, if the corresponding official document does not exist, an error notification is returned in step S85.

  When the official document recording unit 46 adopts a database structure, the call request is a SQL (Structured Query Language) sentence by a Select command. Moreover, information based on the calling authority may be described in the extraction condition of the SQL statement. Further, in the subsequent requests to the official document recording unit 46 and the official document state recording unit 47, if these recording units 46 and 47 are database structures, SQL statements corresponding to each request are used.

  When the official document is sent back from the official document management server 4, the official document issuing unit 14 of the official document issuing server 1 transfers the official document to the terminal UT1 in step S18, and corrects the official document according to the correction operation of the doctor A. Process. Even when an error notification is returned, the error notification is transferred to the terminal UT1 and displayed.

  When the new creation or correction of the official document is completed in step S15 or step S18, the official document issuing unit 14 selects whether or not the official document is temporarily stored in the official document recording unit 46 in step S19. To generate a menu for display on the terminal UT1 of the doctor A. In this state, when the doctor A selects “temporary storage”, the official document is transmitted to the official document management server 4 together with the temporary storage request in step S20.

  On the other hand, the official document management server 4 executes the storage process as described below under the control of the official document processing unit 44. FIG. 12 is a flowchart showing the processing procedure and processing contents. That is, when the temporary storage request is received in step S101, the record management information of the official document recording unit 46 is confirmed in step S102, and then the content of the request is “temporary storage” or “save” in step S103. Or “deletion”. As a result of this determination, since it is “temporary storage” here, the received new official document or modified official document is stored or updated in the official document recording unit 46 in step S104.

  In addition, when the official document is being saved, the official document issuing unit 14 of the official document issuing unit 1 makes an inquiry to the doctor A regarding whether or not the distribution state of the saved official document needs to be updated. When the doctor A inputs an update instruction to the inquiry at the terminal UT1, a request for updating the distribution state to “create” is transmitted to the official document management server 4 in step S22. If doctor A selects “deleted” in the recorded distribution state, a deletion request is transmitted in step S24. If neither “update” nor “deletion” in distribution state is requested, “end” is selected. Send.

On the other hand, the official document processing unit 44 of the official document management server 4 executes state update processing as follows under the control of the official document processing unit 44. FIG. 11 is a flowchart showing the processing procedure and processing contents.
That is, when the official document processing unit 44 receives the status update request in step S91, the official document status information is read from the official document status recording unit 47 in step S92. Then, it is determined whether the content of the update request is “create / correct (modify) / delete”, “issue”, “receive”, or “complete”. In this case, since the content of the update request is “creation”, information representing the creator of the corresponding official document is acquired from the official document issuing server 1 in step S94, and the content of the status information is updated in step S95. Then, the last updated state information is stored in the official document state recording unit 47 in step S100.

(2) Issuance of Official Document FIG. 6 is a flowchart showing the procedure and processing contents of the official document issuance process by the official document issuance server 1.
When the official document issuing unit 14 of the official document issuing server 1 completes the authentication of the doctor a in step S31, the official document issuing server 14 transmits an access control execution request to the official document management server 4 in step S32. The access control requested here is for confirming whether or not the doctor a who is the issue requester has the issue authority. The request includes the identification information of the doctor a and the identification of the official document selected as the issue target. Information and information indicating that the type of operation authority is “issue” are included.

Upon receiving the access control execution request, the official document management server 4 executes the access control process as follows under the control of the official document processing unit 44. FIG. 13 is a flowchart showing the processing procedure and processing contents.
That is, the official document processing unit 44 corresponds to the official document recording unit 46 and the official document state recording unit 47 in steps S111 and S112, respectively, based on the identification information of the official document to be issued included in the execution request. The information indicating the official document and the official document state to be read is read, and access control rule information relating to the doctor a is read from the official document recording unit 46 in step S113. Then, based on the current distribution state of the relevant official document and the access control rule information, it is determined in step S114 whether or not the doctor a has the authority to issue the relevant official document. If the result of this determination is that the user has issuance authority, the permission information is returned to the requesting official document issuing server 1 in step S118.

  On the other hand, for example, it is assumed that another doctor a2 belonging to the same medical institution A as the doctor a makes an issue request on behalf of the doctor a. In this case, according to the access control rule shown in FIG. 4, since the doctor a2 has no issuing authority, the official document processing unit 44 determines whether or not the doctor a2 has the qualification to obtain the issuing authority in step S115. judge. If the result of this determination is that doctor a2 has the qualification to obtain issuance authority, a request for provision of issuance authority is transmitted to official document authority providing server 3 in step S116.

Upon receiving the issuing authority providing request, the official document authority providing server 3 executes issuing authority providing processing under the control of the authority providing unit 34 as follows. FIG. 8 is a flowchart showing the processing procedure and processing contents.
That is, when the authority providing unit 34 acquires the authority providing request in step S61, the authority providing unit 34 acquires the official document to be issued from the official document management server 4 in step S62, and inputs approval / non-approval by the authority provider in step S63. wait. In this state, for example, the doctor a or the medical institution A to which the doctor a belongs requests the approval process to the patient c who is the authority provider by means of communication outside the system such as oral, telephone, or e-mail. Accordingly, it is assumed that the patient c logs in to the official document authority providing server 3 from his / her terminal UT3 and performs an input operation of approval / disapproval. Then, the authority providing unit 34 accepts the approval / disapproval input in step S63, and if approved, permits the doctor a2 to temporarily provide the issuance authority only for the official document in step S64. Information is transmitted to the official document management server 4 of the request source.

  When the official document processing unit 44 of the official document management server 4 receives the information permitting the provision of the issuing authority in step S117, it returns the permission information to the requesting official document issuing server 1 in step S118. If patient c is disapproved for providing the issuance authority, information to that effect is notified from the official document authority providing server 3 to the official document management server 4, so that the official document management server 4 is informed of the disapproval information. Is returned to the requesting official document issuing server 1.

  In step S33, the official document issuing unit 14 of the official document issuing server 1 determines whether or not the doctor a has the authority to issue the official document based on the response information about the issuing authority sent from the official document management server 4. To do. When it is determined that the doctor a or the doctor a2 has the official document issuing authority, the official document issuing unit 14 transmits an official document call request to the official document management server 4 in step S34. When the official document management server 4 reads and returns the corresponding official document from the official document recording unit 46 according to the call processing procedure shown in FIG. 10 in response to this call request, the official document issuing unit 14 sends the returned official document to the official document. It is received by step S35, transferred to the terminal UT1 of the doctor a or the doctor a2, and displayed.

  Next, in step S36, the official document issuing unit 14 causes the terminal UT1 to display a menu for allowing the doctor a or the doctor a2 to select whether to issue or correct the displayed official document as an official document. . When the doctor a or the doctor a2 selects “Issuance” in this menu, the official document issuance destination information is acquired from the user recording unit 15 of the official document issuance server 1 in step S37, and the official document management server is obtained in step S38. A status update request is transmitted to 4. The issuer information may be an individual doctor or an organization to which the doctor belongs, and the acquired information may be extracted from the user recording unit 15 of the official document issuing server 1 according to the official document distribution policy.

  Upon receiving the status update request, the official document management server 4 executes a process for updating the status to “issued” according to the processing procedure shown in FIG. That is, when the official document processing unit 44 receives the status update request in step S91, the official document status information is read from the official document status recording unit 47 in step S92. Then, it is determined whether the content of the update request is “create / correct (modify) / delete”, “issue”, “receive”, or “complete”. In this case, since the content of the update request is “issue”, information indicating the issue destination of the corresponding official document is acquired from the official document issue server 1 in step S96, and the content of the status information is updated in step S99. Then, the updated state information is stored in the official document state information recording unit 47 in step S100.

  When this state update processing is completed, the issued document issuing unit 14 of the official document issuing server 1 transmits a request to save the official document that has been issued to the official document management server 4 in step S29. The official document management server 4 stores the issued official document in the official document recording unit 46 according to the procedure shown in FIG. 12 under the control of the official document processing unit 44. As a result, the official document temporarily stored is officially stored.

  On the other hand, it is assumed that the doctor a or the doctor a2 selects “correction” of the official document in the menu. In this case, the official document issuing unit 14 acquires the official document correction information from the terminal UT1 of the doctor a in step S40, and transmits the acquired official document correction information to the official document management server 4 in step S41 together with the correction request. Upon receiving this correction request, the official document management server 4 changes the status of the corresponding official document in the official document status recording unit 47 by the steps S94 and S95 shown in FIG. Change to "Modify" and add the corrector signature and the date and time. Finally, the modified official document is stored in the official document recording unit 46 in accordance with the processing procedure of FIG.

(3) Browsing official documents Here, when doctor b, who has browsing authority, browses the letter of introduction issued by doctor a, other doctors d who do not have browsing authority because the authentication infrastructure or disclosure control infrastructure is different. A case of browsing will be described as an example.

FIG. 7 is a flowchart showing the procedure and processing contents of an official document receiving (browsing) process performed by the official document receiving server 2.
When the doctor b views the introduction letter issued by the doctor a, the doctor b accesses the official document receiving server 2 using the browser function of the terminal UT2. Then, in the official document receiving server 2, the authentication unit 21 first presents a login ID and password authentication input form. When the doctor b inputs the login ID and password in this input form, the authentication unit 21 acquires these login ID and password in step S51 and authenticates by collating with the user information recorded in the user recording unit 15. I do. As an authentication method, in addition to an authentication method using a login ID and a password, biometric authentication using a fingerprint, a vein, or the like, or an authentication method using an ID card may be used.

  Next, in step S52, the official document receiving server 2 sends function list data including at least the official document receiving function to the terminal UT2 of the doctor b, and displays this data as a use menu. On the other hand, when the doctor b selects the official document receiving function from the use menu, the official document receiving unit 24 of the official document receiving server 2 transmits an access control execution request to the official document management server 4 in step S52. . The access control requested here is for confirming whether or not the doctor b who is the browsing requester has the browsing authority. The request includes the identification information of the doctor b and the identification of the official document selected as the browsing target. Information and information indicating that the type of operation authority is “browsing” are included.

Upon receiving the access control execution request, the official document management server 4 executes access control as follows under the control of the official document processing unit 44 in accordance with the processing procedure shown in FIG.
That is, the official document processing unit 44 corresponds to the official document recording unit 46 and the official document state recording unit 47 in steps S111 and S112, respectively, based on the identification information of the official document to be browsed included in the execution request. The information indicating the official document and the official document state to be read is read, and the access control rule information regarding the doctor b is read from the official document recording unit 46 in step S113. Then, based on the current distribution state of the corresponding official document and the access control rule information, it is determined in step S114 whether or not the doctor b has browsing authority for the corresponding official document.

  If the result of this determination is that he / she has viewing authority, the permission information of viewing authority is returned to the requesting official document receiving server 2 in step S118. For example, according to the access control rule information shown in FIG. 4, only “read” is permitted as the operation authority of the doctor b for the document whose distribution state (status) is “issued”. For this reason, it is determined that the doctor b has browsing authority, and permission information of browsing authority is returned.

  In contrast, for example, a doctor d belonging to another medical institution requests browsing on the official document receiving server 2 operated by the medical institution B. In this case, as shown in FIG. 4, the access control rule does not permit viewing by the doctor d and the medical institution to which the doctor d belongs, so the official document processing unit 44 determines that there is no viewing authority in step S114. To do. Then, in step S115, it is determined whether or not the doctor d has the qualification to obtain browsing authority. If the result of this determination is that doctor d has the qualification to obtain viewing authority, a request for providing viewing authority is transmitted to the official document authority providing server 3 in step S116.

  Upon receiving the browsing authority providing request, the official document authority providing server 3 executes the authority providing process under the control of the authority providing unit 34 according to the processing procedure shown in FIG. That is, when the authority providing unit 34 obtains the authority providing request in step S61, the authority providing unit 34 obtains an official document to be browsed from the official document management server 4 in step S62, and inputs approval / non-approval by the authority provider in step S63. wait.

  In this state, for example, the doctor a or the medical institution A to which the doctor a belongs requests the approval process to the patient c who is the authority provider by means of communication outside the system such as oral, telephone, or e-mail. Accordingly, it is assumed that the patient c logs in to the official document authority providing server 3 from his / her terminal UT3 and performs an input operation of approval / disapproval. Then, the authority providing unit 34 receives the approval / disapproval input in step S63, and if approved, permits the doctor d to temporarily provide the viewing authority only to the official document in step S64. Information is transmitted to the official document management server 4 of the request source.

  When the official document processing unit 44 of the official document management server 4 receives the information permitting the provision of the viewing authority in step S117, it returns the permission information to the requesting official document receiving server 2 in step S118. If patient c is disapproved for the provision of viewing authority, information to that effect is notified from official document authority providing server 3 to official document management server 4, so official document management server 4 is informed of the disapproval information. Is transferred to the official document receiving server 2 of the request source.

  The official document receiving unit 24 of the official document receiving server 2 determines whether or not the doctor b or the doctor d has the authority to view the official document based on the response information of the viewing authority sent from the official document management server 4. The determination is made at S53. When it is determined that the doctor b or the doctor d does not have the authority to view the official document, a message to that effect is displayed on the terminal UT2 and the function list use menu is returned.

  On the other hand, it is determined that the doctor b or the doctor d has the official document viewing authority. In this case, the official document receiving unit 24 determines whether the browsing requester is a recipient (browsing), or an issuer or an authority provider in step S54. If the result of this determination is that the viewing requester is an issuer or authority provider, the process proceeds to step S58 as it is because it is a party and sends a request for calling the official document to the official document management server 4.

  Upon receiving the official document call request, the official document management server 4 reads the corresponding official document from the official document recording unit 46 according to the processing procedure shown in FIG. 10 and returns it to the requesting official document receiving server 2. When receiving the official document in step S59, the official document receiving unit 24 of the official document receiving server 2 transfers the received document to the terminal UT2 used by the viewer for display.

(4) Completion of official document Here, for example, doctor b views an introduction letter issued by doctor a, and then, for example, performs a procedure for accepting a patient based on this introduction letter, and registers the completion as an example. explain.
FIG. 9 is a flowchart showing the procedure and processing contents of the official document completion processing by the official document receiving server 2.

  When the official document receiving unit 24 of the official document receiving server 2 finishes the authentication of the doctor b in step S71, the official document receiving unit 24 next transmits an access control execution request to the official document management server 4 in step S72. The access control requested here is for confirming whether or not the doctor b who is the completion requester has the authority to complete. The request includes the identification information of the doctor b and the identification of the official document selected as the issue target. Information and information indicating that the type of operation authority is “complete”.

  Upon receiving the access control execution request, the official document management server 4 executes access control according to the processing procedure shown in FIG. 13 under the control of the official document processing unit 44. That is, the official document processing unit 44 corresponds to the official document recording unit 46 and the official document state recording unit 47 in steps S111 and S112, respectively, based on the identification information of the official document to be completed included in the execution request. The information indicating the official document and the official document state to be read is read, and the access control rule information regarding the doctor b is read from the official document recording unit 46 in step S113. Then, based on the current distribution state of the corresponding official document and the access control rule information, it is determined in step S114 whether or not doctor b has the authority to complete the corresponding official document. As a result of the determination, if the user has the completion authority, the permission information is returned to the requesting official document receiving server 2 in step S118.

  In contrast, for example, it is assumed that another doctor b2 belonging to the same medical institution B as the doctor b makes a completion request on behalf of the doctor b. In this case, according to the access control rule shown in FIG. 4, since the doctor b2 does not have the authority to complete, the official document processing unit 44 determines whether or not the doctor b2 has the qualification to obtain the authority to complete in step S115. judge. As a result of the determination, if the doctor b2 has the qualification for obtaining the completion authority, a request for providing the completion authority is transmitted to the official document authority providing server 3 in step S116.

When receiving the completion authority providing request, the official document authority providing server 3 executes the completion authority providing process under the control of the authority providing unit 34 according to the processing procedure shown in FIG.
That is, when the authority providing unit 34 obtains the authority providing request in step S61, the authority providing unit 34 obtains an official document to be completed from the official document management server 4 in step S62, and inputs approval / non-approval by the authority provider in step S63. wait. In this state, for example, the doctor b or the medical institution B to which the doctor b belongs requests the approval process to the patient c who is the authority provider by means of communication outside the system such as oral, telephone, or e-mail. Accordingly, it is assumed that the patient c logs in to the official document authority providing server 3 from his / her terminal UT3 and performs an input operation of approval / disapproval. Then, the authority providing unit 34 accepts the approval / disapproval input in step S63, and if approved, the information that permits the doctor b2 to temporarily provide the completion authority only to the official document in step S64. Is sent to the requesting official document management server 4.

  When the official document processing unit 44 of the official document management server 4 receives the information permitting the provision of the completion authority in step S117, it returns the permission information to the requesting official document receiving server 2 in step S118. If the patient c is disapproved for providing the completion authority, the official document authority providing server 3 notifies the official document management server 4 of information to that effect. Is returned to the official document receiving server 2 of the request source.

  In step S73, the official document receiving unit 24 of the official document receiving server 2 determines whether or not the doctor b has the authority to complete the official document, based on the response information of the completion authority sent from the official document management server 4. To do. If it is determined that the doctor b or the doctor b2 has the official document completion authority, the official document receiving unit 24 transmits an official document call request to the official document management server 4 in step S74. When the official document management server 4 reads and returns the corresponding official document from the official document recording unit 46 according to the call processing procedure shown in FIG. 10 in response to this call request, the official document receiving unit 24 sends the returned official document to the official document. It is received by step S75, transferred to the terminal UT2 of the doctor b or the doctor b2, and displayed. Therefore, the doctor b or the doctor b2 can perform a patient acceptance procedure or the like according to the displayed official document (introduction letter).

  After the official document is displayed, the official document receiving unit 24 presents a completion input request to the doctor b or the doctor b2 in step S76. On the other hand, when the doctor b or the doctor b2 inputs a completion request, the official document receiving unit 24 acquires the information of the official document completion person from the user recording unit 25 of the official document receiving server 2 in step S77, and the official document receiving unit 24 A status update request is transmitted to the document management server 4. The information on the complete person may be an individual doctor or an organization to which the doctor belongs, and the acquired information may be extracted from the user recording unit 25 of the official document receiving server 2 in accordance with the official document distribution policy.

  Upon receiving the state update request, the official document management server 4 executes a process for updating the state to “processed”, that is, “completed” in accordance with the processing procedure shown in FIG. That is, when the official document processing unit 44 receives the status update request in step S91, the official document status information is read from the official document status recording unit 47 in step S92. Then, it is determined whether the content of the update request is “create / correct (modify) / delete”, “issue”, “receive”, or “complete”. In this case, since the content of the update request is “completed”, information indicating the issue destination of the corresponding official document is acquired from the official document receiving server 2 in step S96, and the content of the status information is updated in step S99. Then, the updated state information is stored in the official document state information recording unit 47 in step S100.

  When this state update processing is completed, the issued document receiving unit 24 of the official document receiving server 2 transmits a request to save the official document that has been issued to the official document management server 4 in step S29. The official document management server 4 stores the completed official document in the official document recording unit 46 according to the procedure shown in FIG. 12 under the control of the official document processing unit 44.

  On the other hand, it is assumed that the doctor a or the doctor a2 selects “correction” of the official document in the menu. In this case, the official document receiving unit 24 acquires the official document correction information from the terminal UT1 of the doctor a in step S40, and transmits the acquired official document correction information to the official document management server 4 along with the correction request in step S41. Upon receiving this correction request, the official document management server 4 changes the status of the corresponding official document in the official document status recording unit 47 by the steps S94 and S95 shown in FIG. Change to "Modify" and add the corrector signature and the date and time. Finally, the modified official document is stored in the official document recording unit 46 in accordance with the processing procedure of FIG.

(5) Example of official document status information An example of official document status information that is changed by the processes of “creation”, “issue”, “view”, and “completion” described in (1) to (4) above Show.
The official document managed as official document ID = 1 is an official document created by Shiraishi xx at 10:35 on August 30, 2010, and a letter of introduction about the patient (Ichinose xx) Issued by Shiraishi xx at 11:00 on August 30, 2010 for delivery to doctors. This official document was read by Kuroiwa xx at 11:20 on August 30, 2010. At 12:10 on August 30, 2010, work on the content of official document ID = 1 was conducted by Kuroiwa xx. Implemented and means the status of the official document is complete.

  Similarly, the official document managed as the official document ID = 2 is an official document created by Shiraishi xx at 11:40 on September 17, 2010, and a letter of introduction about the patient (Ninomiya xx) Issued by Shiraishi xx on September 17, 2010 at 12:03 for delivery to Dr. Kuroda at the hospital. This official document was received by Aozora Hospital at 15:47 on September 21, 2010, which means that work based on the contents described in the official document has not yet been implemented.

  Moreover, the official document managed as official document ID = 3 is a prescription for a patient (Miwa xx) created at 16:36 on September 20, 2010 by Akama xx. Issued by Akama General Hospital at 17:00. Since this official document is a prescription, the distribution destination changes depending on the intention of the patient (Miwa xx), and therefore the submission destination is not described in the official document recording unit 46 like an introduction letter. It can be seen from the status column of the status information stored in the official document status recording unit 47 that the status is “complete”.

  Here, the value of the recipient list in the official document state recording unit 47 is “Morino Pharmacy-Miwa”, but this does not exist in the authentication infrastructure and the disclosure control infrastructure that the system of this embodiment is based on. In order to receive the official document, the patient (Miwa xx) who is the authority provider receives the access authority (viewing authority) regarding the official document managed as the official document ID = 3 by the issuing document authority providing server 3 to the Midorino Pharmacy. Means that it was provided.

(Function and effect)
As described above in detail, in the information distribution system according to this embodiment, the official document management server 4 manages information related to the distribution state of the official document by the official document state recording unit 47 and access control by the official document recording unit 46. A rule server is managed, and an official document authority providing server 3 is newly provided. When the official document issuing server 1 and the official document receiving server 2 generate “create”, “issue”, “view”, and “complete” requests for the official document, the current distribution state of the target document Based on the access control rule information, it is determined whether or not the requester has the operating authority for the official document. As a result of this determination, if there is an operation authority, the process according to each request can be executed. On the other hand, if there is no operation authority, the authority providing server 3 waits for the authority provider's authority providing input operation. The process according to the request is executed.

  Therefore, in response to various processing requests of medical personnel for official documents such as referral letters and prescriptions, operation authority is dynamically provided according to the current distribution state of the official documents. For this reason, it is possible to prevent a third party from replacing or deleting a document in the process of distributing the official document, and even a person or institution who does not have the operating authority temporarily receives the official document from the person concerned. By receiving the authorization, it is possible to perform only a specific operation on the official document to be operated. In other words, not only for the person concerned with the current state of the official document, but also for the official document, even if the recipient organization or person of the official document is not managed on the disclosure control infrastructure or the authentication infrastructure ”,“ Browse ”,“ complete ”, and the like.

[Other Embodiments]
In the above-described embodiment, the case where medical information is distributed as an electronic file has been described as an example. However, in the case where scientific information, information related to lawsuits, image information such as photographs and videos, and the like are distributed as electronic files. However, the present invention is applicable. In addition, official document issuance, official document receipt, official document authority provision and official document management device types and configuration, official document creation, issuance, browsing, completion processing procedures and processing details, information distribution control, access control The processing procedures and processing contents for providing the authority can be variously modified without departing from the gist of the present invention.

  In short, the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  NW: communication network, UT1 to UT4 ... terminal, 1 ... official document issuing server, 2 ... official document receiving server, 3 ... official document authority providing server, 4 ... official document management server, 5 ... authentication server, 11, 21, 31 , 41, 51 ... authentication unit, 12, 22, 32, 42, 52 ... authentication cooperation unit, 13, 23, 33, 43 ... information distribution unit, 14 ... official document issuing unit, 15, 25, 35, 45, 56 ... user recording unit, 24 ... official document receiving unit, 34 ... authority providing unit, 44 ... official document processing unit, 46 ... official document recording unit, 47 ... official document status recording unit, 55 ... disclosure control unit, 57 ... authentication Cooperation recording unit, 58... Disclosure rule recording unit.

Claims (6)

Issuing apparatus comprising means for performing electronic file creation processing and electronic file issuance processing in response to user operation, and electronic file browsing processing and electronic file in accordance with user operation A receiving device comprising means for performing a work completion process, and a management device capable of transmitting information between the issuing device and the receiving device via a communication network,
The management device
First storage means for storing an electronic file created by the issuing device;
Second storage means for storing distribution state management information for managing the distribution state of the electronic file stored in the first storage means;
Third storage means for storing access control rule information defining operation authority according to the distribution state for each user;
When an execution request for at least one of electronic file creation processing, issue processing, browsing processing, and completion processing is sent from the issuing device and the receiving device in response to a user's request operation, the second storage means Determination means for determining the presence or absence of the operation authority of the requesting user for the electronic file to be processed based on the stored distribution state management information and the access control rule information stored in the third storage means;
Means for generating information for controlling execution of processing by the requesting user according to the determination result of the determining means, and transmitting the information to the issuing device or receiving device of the requesting source system. Further comprising an authority providing device capable of transmitting information to and from the management device via the communication network;
The management device
Means for transmitting, to the authority providing apparatus, a request for requesting provision of operation authority to the requesting user when the determining means determines that the requesting user has no operation authority to the electronic file to be processed; Further,
The authority providing device includes:
When a request for provision of operation authority is sent from the management device, information indicating permission / prohibition with respect to provision of the operation authority is generated according to an input operation of a user who is an authority provider, and the generated permission / inhibition information Means for returning to the management device,
The management device
The information processing apparatus further comprises means for generating information for controlling execution of processing by the requesting user according to the permission / refusal information returned from the authority providing device and transmitting the information to the issuing device or receiving device of the requesting source. The information distribution system according to claim 1. The management device
When an update request for the distribution state of the electronic file is sent from the issuing device or the receiving device during or after the electronic file creation processing, issue processing, browsing processing, and completion processing, in response to the update request 3. The information distribution system according to claim 1, further comprising means for updating the distribution state management information stored in the second storage means. Issuing apparatus comprising means for performing electronic file creation processing and electronic file issuance processing in response to user operation, and electronic file browsing processing and electronic file in accordance with user operation Information distribution control used in an information distribution system comprising: a receiving device comprising means for performing a work completion process; and a management device capable of transmitting information between the issuing device and the receiving device via a communication network A method,
The management device receives the electronic file created by the issuing device and stores it in the first storage means;
A process in which the management device generates distribution state management information for managing a distribution state of the electronic file stored in the first storage unit and stores the distribution state management information in a second storage unit;
A process in which the management device stores, in a third storage means, access control rule information that defines operation authority according to the distribution state for each user;
When the management device receives an execution request for at least one of electronic file creation processing, issue processing, browsing processing, and completion processing from the issuing device and the receiving device in response to a user's request operation, Whether or not the requesting user has the operation authority for the processing target electronic file is determined based on the distribution state management information stored in the second storage unit and the access control rule information stored in the third storage unit. Judgment process,
A process in which the management device generates information for controlling execution of processing by the requesting user according to a determination result in the determination step, and transmits the information to the issuing device or the receiving device of the requesting source. An information distribution control method characterized by the above. When the information distribution system further includes an authority providing device capable of transmitting information to and from the management device via the communication network,
When the management device determines that the requesting user does not have the operating authority for the electronic file to be processed by the determining unit, the management apparatus provides a request for requesting the requesting user to provide the operating authority. Sending to the device;
When the authority providing device sends a request for providing the operation authority from the management device, the authority providing device generates information indicating whether or not the operation authority is provided according to the input operation of the user as the authority provider, Returning the generated permission / refusal information to the management device;
A process in which the management device generates information for controlling execution of processing by the requesting user according to permission / refusal information returned from the authority providing device, and transmits the information to the issuing device or receiving device of the requesting source; The information distribution control method according to claim 4, further comprising:   When the management device receives a request for updating the distribution status of the electronic file from the issuing device or the receiving device during or after the process of creating, issuing, viewing, and completing the electronic file, 6. The information distribution control method according to claim 4, further comprising a step of updating the distribution state management information stored in the second storage unit in response to an update request.

Images