JP2014021663A - Classified information management system, information terminal, classified information controlling method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a classified information management system, an information terminal, a classified information controlling method, and a program enabling management of classified information in a highly reliable manner.SOLUTION: An information terminal 100 photographs an affected part of patient 450 when an authentication by in-hospital server 300 is successful, stores the image data obtained by the photographing, and transmits the data to the in-hospital server 300. The in-hospital server 300 stores the received image data and transmits storage completion information indicating that storage is completed to the information terminal 100. The information terminal 100 deletes the stored image data when it receives storage completion information from the in-hospital server 300.

Description

  The present invention relates to a confidential information management system, an information terminal, a confidential information management method, and a program.

  Conventionally, in view of the fact that various information is necessary for medical care, a technology that enables smooth distribution of medical information that is confidential information including personal information that should be kept secret in hospitals and the like has been proposed. . For example, in Patent Document 1, when a person who needs medical information performs a predetermined gesture, the medical information corresponding to the gesture is acquired based on the type of the gesture and the part of the subject corresponding to the gesture. An apparatus for displaying is disclosed.

JP 2012-48602 A

  By the way, confidential information such as medical information is required to be strictly managed in order to prevent leakage to the outside from the viewpoint of ensuring the privacy of the target person.

  The present invention has been made in view of such problems, and an object of the present invention is to provide a confidential information management system, an information terminal, a confidential information management method, and a program capable of managing confidential information with higher certainty. And

  In order to achieve the above object, a confidential information management system according to a first aspect of the present invention includes an information terminal and a server that transmits and receives information between the information terminals, and is classified as confidential A confidential information management system for managing information, wherein the information terminal includes confidential information acquisition means for acquiring the confidential information, identification information of an acquirer of the confidential information, and identification information of a target person of the confidential information. Authentication information transmitting means for transmitting to the server, wherein the server performs authentication based on the identification information of the acquirer of the confidential information from the information terminal and the identification information of the target person of the confidential information And authentication result transmitting means for transmitting authentication result information indicating a result of authentication by the authentication means to the information terminal, wherein the information terminal receives the authentication result information from the server. A result receiving means, a first confidential information storage means for storing the confidential information acquired by the confidential information acquisition means, and a case where the authentication result information received by the authentication result receiving means indicates a successful authentication. A confidential information transmission unit that transmits the confidential information stored in the first confidential information storage unit to the server; and after the confidential information is transmitted by the confidential information transmission unit, the first confidential information storage unit Confidential information erasing means for erasing the confidential information stored in the means, wherein the server is received by the confidential information receiving means for receiving the confidential information from the information terminal and the confidential information receiving means. And second confidential information storage means for storing the confidential information.

  To achieve the above object, an information terminal according to a second aspect of the present invention is an information terminal that transmits and receives information to and from a server, and acquires confidential information that is determined to be confidential. Means, identification information transmitting means for transmitting identification information of the acquirer of the confidential information and identification information of the target person of the confidential information to the server, identification information of the acquirer of the confidential information from the server, and the Authentication result receiving means for receiving authentication result information indicating a result of authentication based on identification information of a target person of confidential information, confidential information storage means for storing the confidential information acquired by the confidential information acquiring means, and Confidential information transmission means for transmitting the confidential information stored in the confidential information storage means to the server when the authentication result information received by the authentication result receiving means indicates a successful authentication; and After the confidential information has been transmitted by the confidential information transmission means, characterized in that it comprises, a confidential information erasing means for erasing the confidential information stored in the confidential information storage unit.

  The information terminal further comprises storage completion information receiving means for receiving storage completion information indicating that the confidential information has been stored from the server, and the confidential information erasing means is stored by the storage completion information receiving means. When completion information is received, the confidential information stored in the confidential information storage means may be erased.

  Further, the information terminal is based on the imaging unit, an image corresponding to the identification information of the acquirer of the confidential information obtained by imaging of the imaging unit, and an image corresponding to the identification information of the target person of the confidential information, You may make it provide the identification information acquisition means which acquires the identification information of the acquirer of the said confidential information, and the identification information of the target person of the said confidential information.

  In order to achieve the above object, a confidential information management method according to a third aspect of the present invention is a confidential information management method for managing confidential information determined to be confidential in an information terminal that transmits and receives information to and from a server. A confidential information acquisition step for acquiring the confidential information, an identification information transmission step for transmitting identification information of an acquirer of the confidential information and identification information of a target person of the confidential information to the server, and the server An authentication result receiving step for receiving authentication result information indicating a result of authentication based on the identification information of the acquirer of the confidential information from the identification information of the target person of the confidential information, and acquired in the confidential information acquisition step When the authentication result information received in the confidential information storage step for storing the confidential information and the authentication result reception step indicates successful authentication, the confidential information is stored. A confidential information transmission step for transmitting the confidential information stored in the information storage step to the server; and the confidential information stored in the confidential information storage step after the confidential information is transmitted in the confidential information transmission step. And a secret information erasing step for erasing.

  In order to achieve the above object, a program according to a fourth aspect of the present invention includes a confidential information acquisition unit that acquires confidential information determined to be confidential, identification information of the acquirer of the confidential information, and Identification information transmission means for transmitting identification information of the target person of the confidential information to the server, an authentication result based on the identification information of the acquirer of the confidential information from the server and the identification information of the target person of the confidential information Authentication result receiving means for receiving the authentication result information, confidential information storage means for storing the confidential information acquired by the confidential information acquisition means, and the authentication result information received by the authentication result receiving means indicates that the authentication result has been successfully authenticated. The confidential information stored in the confidential information storage means is transmitted to the server, and the confidential information is transmitted by the confidential information transmitting means. After being, characterized in that to function as confidential information erasing unit, for erasing the confidential information stored in the confidential information storage unit.

  According to the present invention, it is possible to provide a confidential information management system, an information terminal, a confidential information management method, and a program capable of managing confidential information with higher certainty.

It is a figure which shows an example of arrangement | positioning of the information terminal hospital server and PC which comprise the medical information management system which concerns on embodiment of this invention. It is a figure which shows an example of the external appearance of the information terminal which concerns on the embodiment. It is a figure which shows an example of a structure of the information terminal which concerns on the embodiment. It is a figure which shows an example of a structure of the hospital server which concerns on the embodiment. It is a flowchart which shows an example of the operation | movement which concerns on the same embodiment. It is a figure which shows an example of the authentication database for medical workers and the authentication database for patients in the hospital server which concerns on the embodiment. It is a figure which shows an example of the image management database in the hospital server which concerns on the embodiment. It is a figure which shows an example of the display transition by the information terminal which concerns on the embodiment. It is a figure which shows an example of the display transition by the information terminal which concerns on the embodiment.

  Hereinafter, a confidential information management system, an information terminal, a confidential information management method, and a program according to embodiments of the present invention will be described with reference to the drawings.

  As shown in FIG. 1, a medical information management system 1 as a confidential information management system includes an information terminal 100, a hospital server 300, and a personal computer (PC) 350. The information terminal 100, the hospital server 300, and the PC 350 communicate with each other via the communication network 500 and the radio base station 600.

  The information terminal 100 is a terminal that can carry a mobile phone, a smartphone, a tablet personal computer, a notebook personal computer, and the like and has a wireless communication function. The information terminal 100 is possessed by a medical worker 400 who is an acquirer of medical information that is confidential information determined to be kept secret.

  The information terminal 100 is identification information of the medical worker 400 in order to cause the in-hospital server 300 to perform authentication when the medical worker 400 takes an image of an affected part of the patient 450 who is a target of medical information. The medical worker ID, the medical worker password used to determine whether the medical worker 400 can access the hospital server 300, and the patient ID that is identification information of the patient 450 are transmitted to the hospital server 300.

  Upon receiving the medical worker ID, the medical worker password, and the patient ID, the in-hospital server 300 receives the medical worker ID and the medical worker password in the medical worker authentication database, which will be described later, and the patient authentication database, which will be described later. It is determined whether or not it matches the patient ID (authentication). Further, the hospital server 300 transmits authentication result information indicating that the authentication has been successful to the information terminal 100 if they match, and sends authentication result information indicating that the authentication has failed to the information terminal 100 if they do not match. Send.

  When the information terminal 100 receives the authentication result information indicating that the authentication is successful, the information terminal 100 transitions to a state in which imaging by the medical worker 400 can be performed, and the affected part of the patient 450 according to the operation by the medical worker 400 , And temporarily stores the image data as medical information obtained by the imaging and the information of the shooting date and time. Further, the information terminal 100 stores the stored image data and the shooting date and time with the medical worker ID. And the patient ID together with the patient ID.

  The in-hospital server 300 registers the received image data, medical worker ID, patient ID, and imaging date and time in an image management database to be described later. Further, the in-hospital server 300 transmits storage completion information indicating that registration in the image management database is completed to the information terminal 100. When receiving the storage completion information, the information terminal 100 erases the temporarily stored image data and shooting date / time.

  The PC 350 connects to the in-hospital server 300, retrieves images in the image management database using the medical worker ID, patient ID, and imaging date / time as keys, acquires the images, and displays them on a display (not shown).

  Next, a detailed configuration of the information terminal 100 will be described. FIG. 2 is a diagram illustrating an example of the appearance of the information terminal 100, and FIG. 3 is a diagram illustrating an example of the configuration of the information terminal 100. 2 and 3, the information terminal 100 includes a control unit 102, a program ROM (Read Only Memory) 104, a work RAM (Random Access Memory) 106, a flash ROM (Read Only Memory) 108, and a wireless communication processing unit. 110, an antenna 112, a CCD (Charge Coupled Device) 114, an image processing unit 118, a GPS (Global Positioning System) unit unit 122, a speaker 124, a driver 126, a display unit 128, and a touch panel 130.

  The control unit 102 is configured by, for example, a CPU (Central Processing Unit). The control unit 102 includes the information terminal 100 by executing software processing according to a program stored in the program ROM 104 (for example, an image application for realizing the operation of the information terminal 100 illustrated in FIG. 5 described later). Control various functions.

  The program ROM 104 stores the program as described above. The work RAM 106 stores various information during execution of software processing according to the program. The flash ROM 108 stores various tables and the like.

  The wireless communication processing unit 110 is configured using, for example, a radio frequency (RF) circuit, a baseband (BB) circuit, or the like. The wireless communication processing unit 110 transmits and receives wireless signals via the antenna 112. In addition, the wireless communication processing unit 110 performs encoding and modulation of a transmission signal and demodulation and decoding of a reception signal.

  The CCD 114 is disposed on the surface opposite to the surface on which the display unit 128 is disposed in the housing of the information terminal 100. The CCD 14 captures (receives) an optical image that has entered through a lens (not shown), and converts an image signal obtained by the imaging into digital data (image data).

  The image processing unit 118 adjusts the image quality and image size and outputs the image to the control unit 102 so that an image corresponding to the image data output from the CCD 114 is displayed on the display unit 128.

  The GPS unit 122 receives a signal from a GPS satellite and measures the position (latitude and longitude) of the information terminal 100 based on the signal. Further, the GPS unit 122 outputs information on the measured position to the control unit 102.

  The speaker 124 outputs sound based on the sound data from the control unit 102. The driver 126 outputs an image signal based on the image data output from the control unit 102 to the display unit 128. The display unit 128 includes, for example, an LCD (Liquid Crystal Display), a PDP (Plasma Display Panel), an EL (Electroluminescence) display, and the like. The display unit 128 displays an image according to the image signal output from the driver 126.

  The touch panel 130 is an interface that is disposed on the upper surface of the display unit 128 and is used to input operation details of the medical staff 400. The touch panel 130 incorporates a transparent electrode (not shown), for example, and detects the position where the voltage has changed as a contact position when the finger of the medical worker 400 touches, and outputs information on the contact position to the control unit 102. .

  Next, a detailed configuration of the hospital server 350 will be described. As shown in FIG. 4, the hospital server 300 includes a control unit 302, a program ROM (Read Only Memory) 304, a work RAM (Random Access Memory) 306, a flash ROM (Read Only Memory) 308, a wired communication unit 310, and a display unit. 318 and an operation unit 320.

  The control unit 302 is configured by, for example, a CPU (Central Processing Unit). The control unit 302 controls various functions of the hospital server 300 by executing software processing according to the program stored in the program ROM 304.

  The program ROM 304 stores the program as described above. The work RAM 306 stores various information during execution of software processing according to the program, and stores a medical worker authentication database, a patient authentication database, and an image management database, which will be described later. The wired communication processing unit 310 communicates with the information terminal 100 via the communication network 500 and the wireless base station 600. The display unit 318 displays various images. The operation unit 320 is a keyboard or the like, and is an interface used for inputting the operation content of the operator.

  Next, operation | movement of the medical information management system 1 in this embodiment is demonstrated, referring the flowchart of FIG. Prior to the operation shown in the flowchart of FIG. 5, when the image management application is activated for the first time, the IP address of the hospital server 300 is set as the transmission destination in the information terminal 100. The transmission destination is set, for example, by reading a barcode.

  The control unit 102 in the transmission-side information terminal 100 activates the image management application in response to the operation of the touch panel 130 by the medical worker 400 (step S101). For example, when the medical worker 400 touches the “in-hospital camera” display 701 indicating the image management application displayed on the display unit 128 as illustrated in FIG. Based on the output contact position information, it recognizes that the image management application has been selected, and activates the image management application.

  After starting the image management application, the control unit 102 acquires a medical worker ID and a patient ID (step S102). For example, when the medical staff 400 and the patient 450 are each wearing a wristband with an ID barcode, the control unit 102 activates the CCD 114. Further, as shown in FIG. 8B, when the wristband with the ID barcode is photographed according to the operation of the medical worker 400, the control unit 102 displays an image 702 obtained by the photographing. By analyzing the data, a barcode reading process is performed to obtain a medical worker ID and a patient ID.

  Here, when an operation for selecting the check box 703 of the medical worker shown in FIG. 8B is performed, the control unit 102 recognizes the ID obtained from the image data as the medical worker ID, and the patient When an operation for selecting the check box 704 is performed, an ID obtained from the image data is recognized as a patient ID. For example, as shown in the display 705 in FIG. 8B, the certified ID is displayed, so that the medical worker 400 can confirm it.

  Next, the control part 102 acquires a medical worker password (step S102). For example, a medical worker password input field is displayed on the display unit 128, and the medical worker 400 operates the touch panel 128 to input the medical worker password in the input field. The control unit 102 authorizes the medical worker password based on the input operation.

  Next, the control unit 102 transmits the medical worker ID and patient ID acquired in step S102 and the medical worker ID acquired in step S103 to the hospital server 300 via the wireless communication processing unit 110 and the antenna 112. And send. The control unit 302 in the hospital server 300 receives the medical worker ID, the patient ID, and the medical worker password via the wired communication unit 310 (step S104). The control unit 102 in the information terminal 100 encrypts and transmits the medical worker ID, patient ID, and medical worker password by a predetermined encryption method, and the control unit 302 in the hospital server 300 receives the received data. The data may be decrypted to obtain the medical worker ID, patient ID, and medical worker password.

  Next, the control part 302 in the hospital server 300 performs an authentication process (step S105). Specifically, in the work RAM 306, as shown in FIG. 6A, a medical worker authentication database composed of a combination of a medical worker ID and a medical worker password, as shown in FIG. 6B. In addition, a patient authentication database including patient IDs is stored.

  The control unit 302 matches the combination of the medical worker ID and the medical worker password received in step S104 with any combination of the medical worker ID and the medical worker password in the authentication database for medical workers, and If the patient ID received in step S104 matches any of the patient IDs in the patient authentication database, it is determined that the authentication is successful. On the other hand, when the combination of the medical worker ID and the medical worker password received in step S104 does not match the combination of the medical worker ID and the medical worker password in the medical worker authentication database, the control unit 302 Alternatively, if the patient ID received in step S104 does not match any of the patient IDs in the patient authentication database, it is determined that the authentication has failed.

  After the authentication process, the control unit 302 transmits authentication result information indicating the success or failure of the authentication to the information terminal 100 via the wired communication unit 310. The control unit 102 in the information terminal 100 receives the authentication result information via the antenna 112 and the wireless communication processing unit 110 (step S106). The control unit 302 in the hospital server 300 encrypts and transmits the authentication result information by a predetermined encryption method, and the control unit 102 in the information terminal 100 decrypts the received data to obtain the authentication result information. You may make it acquire.

  After receiving the authentication result information, the control unit 102 in the information terminal 100 determines whether or not the content of the authentication result information indicates successful authentication (step S107). When the content of the authentication result information does not indicate that the authentication is successful (step S107: NO), the series of operations ends.

  On the other hand, when the content of the authentication result information indicates successful authentication (step S107: YES), the control unit 102 causes the CCD 114 to photograph the affected part of the patient 450 in response to the operation of the medical worker 400, Image data is acquired (step S108). For example, the control unit 102 activates the CCD 114. Further, as shown in FIG. 8C, when the medical staff 400 touches the position of the shooting button 706 displayed on the display unit 128 with the shooting direction of the CCD 114 aligned with the position of the affected part 707, the CCD 114 performs shooting. The image data output from the CCD 114 is acquired.

  Next, the control unit 102 stores the image data acquired in step S108 in the work RAM 106 (step S109). For example, as shown in FIG. 8D, when the medical worker 400 touches the position of the save button 708 displayed on the display unit 128, the image data obtained by photographing is stored in the work RAM 106.

  It should be noted that the medical worker 400 can contact the position of the photographing button 706, in other words, the photographing can be performed many times, and then the control unit 102 when the medical worker 400 contacts the position of the storage button 708. Stores only the image data obtained by the latest photographing in the work RAM 106.

  Next, the control unit 102, for the hospital server 300 via the wireless communication processing unit 110 and the antenna 112, the medical worker ID and patient ID acquired in step S102, the image data stored in step S109, Sends shooting date and time information. For example, the control unit 102 acquires the date and time when the process of step S108 was performed from a clock (not shown) built in the information terminal 100 as information on the shooting date and time, and stores it in the work RAM 106 together with the image data in step S109. As a result, the shooting date and time information can be acquired from the work RAM 106. For example, when the information on the medical worker ID, patient ID, image data, and imaging date / time is being transmitted, the control unit 102 displays an image 709 indicating that transmission is being performed as illustrated in FIG. The control unit 302 in the hospital server 300 receives information on the medical worker ID, patient ID, image data, and imaging date and time via the wired communication unit 310 (step S110). The control unit 102 in the information terminal 100 encrypts and transmits information on the medical worker ID, patient ID, image data, and imaging date and time by a predetermined encryption method, and the control unit 302 in the in-hospital server 300. May decode the received data to obtain information on the medical worker ID, patient ID, image data, and imaging date and time.

  Next, the control unit 302 in the hospital server 300 registers the received medical worker ID, patient ID, image data, and imaging date / time information in the image management database in the work RAM 306 (step S111). FIG. 7 is a diagram illustrating an example of the image management database.

  After registration in the image management database, the control unit 302 transmits storage completion information indicating that registration in the image management database is completed to the information terminal 100 via the wired communication unit 310. The control unit 102 in the information terminal 100 receives the storage completion information via the antenna 112 and the wireless communication processing unit 110 (step S112). The control unit 302 in the hospital server 300 encrypts and transmits the storage completion information by a predetermined encryption method, and the control unit 102 in the information terminal 100 decrypts the received data and stores the storage completion information. You may make it acquire.

  After receiving the storage completion information, the control unit 102 in the information terminal 100 deletes the image data stored in the work RAM 106 in step S109 (step S113). If the shooting date / time information is stored in the work RAM 106 together with the image data in step S109, the control unit 102 also deletes the shooting date / time information together with the image data.

  A series of operation | movement is complete | finished by the process of step S113. Here, the control unit 102 may cause the display unit 128 to display an image for prompting the medical worker 400 to perform the next operation. For example, when an image as shown in FIG. 9B is displayed, the following processing is performed. That is, when the medical worker 400 touches the position of the button 710 in order to photograph the same affected area of the patient 450 as before, the operations after step S108 are repeated. In addition, when the medical worker 400 touches the position of the button 711 in order to photograph the affected part of the patient 450 different from the previous one, the operations after step S102 are repeated. However, since the medical worker ID and the medical worker password have been acquired in the past step S102, if stored in the work RAM 106 at that time, the control unit 102 reads from the work RAM 106 in the subsequent step S102. Just do it. When the medical worker 400 touches the position of the end button 712, the activation of the image management application is ended.

  As described above, in the present embodiment, when the authentication by the in-hospital server 300 is successful, the information terminal 100 captures the affected area of the patient 450, stores the image data, and transmits the image data to the in-hospital server 300. Furthermore, when the information terminal 100 receives storage completion information indicating that the image data is stored in the hospital server 300 from the hospital server 300, the information terminal 100 deletes the stored image data. Thereby, the image data of the affected part of the patient 450 is stored only in the in-hospital server 300 and managed more reliably, the privacy of the patient 450 is ensured, and the outflow to the outside is prevented.

  Note that the present invention is not limited by the description of the above-described embodiment and the drawings, and appropriate modifications and the like can be made to the above-described embodiment and the drawings. For example, in the above-described embodiment, the information terminal 100 captures a wristband with an ID barcode, analyzes image data obtained by the capture, performs barcode reading processing, and engages in medical engagement. Person ID and patient ID were acquired. However, the acquisition of the medical worker ID and the patient ID is not limited to this. For example, the medical worker 400 operates the touch panel 130 to directly input the medical worker ID and the patient ID, and the information terminal 100 The control unit 102 may recognize and acquire the medical worker ID and the patient ID according to the operation.

  In the above-described embodiment, the information terminal 100 temporarily stores the image data and transmits the image data to the in-hospital server 300. However, the information terminal 100 temporarily stores moving image data and audio data as medical information. When it is transmitted to the server 300 and thereafter storage completion information indicating that the storage is completed in the hospital server 300 is received, the temporarily stored moving image data and audio data may be deleted.

  In addition, this is not limited to the management of medical information. For example, when managing various confidential information such as confidential information management systems that manage confidential information related to non-life insurance (images of traffic accident scenes, etc.) The invention can be applied.

  Further, for example, the functions of the information terminal 100 and the in-hospital server 300 may be realized by a computer executing a program. Further, programs for realizing the functions of the information terminal 100 and the hospital server 300 may be stored in a storage medium such as a CD-ROM, or may be downloaded to a computer via a network.

  As mentioned above, although preferable embodiment of this invention was described, this invention is not limited to the specific embodiment which concerns, This invention includes the invention described in the claim, and its equivalent range It is.

DESCRIPTION OF SYMBOLS 1 ... Medical information management system 100 ... Information terminal 102, 302 ... Control part 104, 304 ... Program ROM
106, 306 ... Work RAM
108, 308 ... Flash ROM
110 ... Wireless communication processing unit 112 ... Antenna 114 ... CCD
DESCRIPTION OF SYMBOLS 118 ... Image processing part 122 ... GPS unit part 124 ... Speaker 126 ... Driver 128, 318 ... Display part 130 ... Touch panel 300 ... Hospital server 310 ... Wired communication part 320 ... Operation part 350 ... PC
400 ... Medical worker 450 ... Patient 500 ... Communication network 600 ... Wireless base station

Claims (6)

A confidential information management system that manages confidential information determined to be concealed, including an information terminal and a server that transmits and receives information between the information terminal,
The information terminal
Confidential information acquisition means for acquiring the confidential information;
Identification information transmitting means for transmitting the identification information of the acquirer of the confidential information and the identification information of the target person of the confidential information to the server;
With
The server
Authentication means for performing authentication based on identification information of an acquirer of the confidential information from the information terminal and identification information of a target person of the confidential information;
Authentication result transmission means for transmitting authentication result information indicating the result of authentication by the authentication means to the information terminal;
With
The information terminal
Authentication result receiving means for receiving the authentication result information from the server;
First confidential information storage means for storing the confidential information acquired by the confidential information acquisition means;
Confidential information transmitting means for transmitting the confidential information stored in the first confidential information storage means to the server when the authentication result information received by the authentication result receiving means indicates successful authentication;
Confidential information erasing means for erasing the confidential information stored in the first confidential information storage means after the confidential information is transmitted by the confidential information transmitting means;
With
The server
Confidential information receiving means for receiving the confidential information from the information terminal;
Second confidential information storage means for storing the confidential information received by the confidential information receiving means;
A confidential information management system comprising: An information terminal that transmits / receives information to / from a server,
Confidential information acquisition means for acquiring confidential information determined to be confidential;
Identification information transmitting means for transmitting the identification information of the acquirer of the confidential information and the identification information of the target person of the confidential information to the server;
Authentication result receiving means for receiving authentication result information indicating an authentication result based on the identification information of the acquirer of the confidential information from the server and the identification information of the target person of the confidential information;
Confidential information storage means for storing the confidential information acquired by the confidential information acquisition means;
Confidential information transmitting means for transmitting the confidential information stored in the confidential information storage means to the server when the authentication result information received by the authentication result receiving means indicates successful authentication;
Confidential information erasing means for erasing the confidential information stored in the confidential information storage means after the confidential information is transmitted by the confidential information transmitting means;
An information terminal comprising: Storage completion information receiving means for receiving storage completion information indicating that the confidential information from the server is stored;
3. The confidential information erasing unit erases the confidential information stored in the confidential information storage unit when the storage completion information is received by the storage completion information receiving unit. Information terminal. Photographing means;
Based on the image corresponding to the identification information of the acquirer of the confidential information obtained by the imaging of the imaging means and the image corresponding to the identification information of the target person of the confidential information, the identification information of the acquirer of the confidential information Identification information acquisition means for acquiring identification information of the target person of the confidential information;
The information terminal according to claim 2, further comprising: A confidential information management method for managing confidential information determined to be confidential in an information terminal that transmits and receives information to and from a server,
A confidential information acquisition step of acquiring the confidential information;
An identification information transmission step of transmitting identification information of an acquirer of the confidential information and identification information of a target person of the confidential information to the server;
An authentication result receiving step for receiving authentication result information indicating an authentication result based on the identification information of the acquirer of the confidential information from the server and the identification information of the target person of the confidential information;
A confidential information storage step for storing the confidential information acquired in the confidential information acquisition step;
A confidential information transmission step of transmitting the confidential information stored in the confidential information storage step to the server when the authentication result information received in the authentication result reception step indicates successful authentication;
After the confidential information is transmitted in the confidential information transmitting step, the confidential information erasing step of erasing the confidential information stored in the confidential information storing step;
A method for managing confidential information, comprising: Computer
Confidential information acquisition means for acquiring confidential information determined to be confidential;
Identification information transmitting means for transmitting the identification information of the acquirer of the confidential information and the identification information of the target person of the confidential information to the server;
An authentication result receiving means for receiving authentication result information indicating an authentication result based on the identification information of the acquirer of the confidential information from the server and the identification information of the target person of the confidential information;
Confidential information storage means for storing the confidential information acquired by the confidential information acquisition means;
Confidential information transmitting means for transmitting the confidential information stored in the confidential information storage means to the server when the authentication result information received by the authentication result receiving means indicates successful authentication;
Confidential information erasing means for erasing the confidential information stored in the confidential information storage means after the confidential information is transmitted by the confidential information transmitting means;
A program characterized by functioning as

Images