JP2014235446A - Health information management method, health information management system, and health information management program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a large amount of health information to be registered within a fixed time, and at the same time, to execute a guarantee of security in inexpensively.SOLUTION: A relay server 12 is connected to a plurality of information holding agencies for holding the original of medical health data through a network, and receives data type information, user identification information, and health information records including medical health data which are transmitted from the plurality of information holding agencies, and consolidate them to be transmitted together to each health information management server. Further, health information management servers 131 to 13m are connected to the relay server 12 through the network, receive the health information records consolidated and transmitted together from the relay server 12, determine permission/no-permission of an access based on an access control management table which is set for each data type on each health information record, specify a storage destination table of corresponding health information data based on the data type by dividing the heal information records, and register health information data on the specified table.

Description

  The present invention relates to a health information management technology for the purpose of promoting personal health and reducing medical costs by collecting and utilizing health information such as personal medical health data held by information holding organizations such as local governments. .

  In Japan, medical expenses are increasing year by year with the arrival of an aging society, and reducing medical expenses is a national urgent issue. In particular, once a person suffers from a chronic disease such as diabetes, the cost required for treatment becomes enormous, and the economic burden tends to increase as the symptoms become more serious. As an example, artificial dialysis, which is a necessary measure when diabetes becomes serious, is said to cost 5 million yen per patient per year. Therefore, prevention of illness before suffering from chronic disease and prevention of seriousness after suffering from chronic disease are important.

  As one of the measures for disease prevention and disease seriousness prevention, individual medical health data (for example, health check records such as periodic health check records and physical fitness measurement records) held by information holding organizations such as local governments, health insurance associations, and workplaces Information) is collected and returned to individuals, and the introduction and use of health information management systems for the purpose of personal health management, health promotion, and medical cost reduction is progressing.

  In such a health information management system, in addition to the basic usage pattern in which an individual himself / herself improves his / her life by browsing the registered medical health data, the data is shared between the healthcare professional and the individual. As a result, it is expected to improve the health of the individual through the interaction between the healthcare professional and the individual, such as proposing a life guidance program suitable for the individual and a measure for preventing serious disease.

  On the other hand, with the recent digitization of medical information, services such as the above-described health information management, for example, a health information management service as an additional service for a personal portal site are provided (see Non-Patent Document 1). ). Factors for developing such a health information management service include increasing the number of new subscribers, and the subscribers using the service continuously. For that purpose, it is the key to enrich medical health data as content.

  As a powerful means to enhance medical health data as content, it is for health information management services from information holding organizations such as local governments, health insurance associations, and offices that already have a large amount of medical health data about users. Can be imported into the health information management system. However, generally, importing a large amount of medical health data is a processing that is a heavy load on the health information management system, and thus is required to be completed in a limited time outside the service time such as a midnight time zone.

  On the other hand, since medical health data is highly sensitive personal information, it is essential from the various guidelines to ensure security when handling it. Specifically, it is necessary to take measures such as limiting users and authority that can access medical health data, and maintaining a history of access to medical health data. In order to achieve these, it is common to incorporate an access control mechanism into the health information management system, and set and operate policies that define users and access rights for individual medical health data. . However, individually securing the security of each large amount of medical health data has a large load in terms of processing cost, and greatly affects service operation costs.

goo body log (http://karada.goo.ne.jp/)

  As described above, when implementing a health information management service, health information can be imported from an information holding organization, for example, at a limited time outside the service hours, and at the same time security (access authority setting, etc.) can be made at low cost. It is required to be able to secure it.

  The present invention has been made paying attention to the above circumstances, and it is possible to register a large amount of health information within a certain time with high efficiency, and at the same time, a health information management method capable of executing security guarantee at a low cost. It aims to provide a health information management system and a health information management program.

In order to achieve the above object, the health information management method according to the first aspect of the present invention comprises the following components.
(1) A relay server connected through a network with a plurality of information holding organizations that store original medical health data includes data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations. The health information record is received, aggregated and transmitted in a batch, and the health information management server connected to the relay server through the network receives the health information record aggregated and transmitted from the relay server. Permission / non-permission is determined based on the access control management table set for each data type for the record, and the health information record is divided and the corresponding health information data storage destination table is specified based on the data type Then, the health information data is registered for each user based on the user identification information in the specified storage location table. To.

  (2) In (1), when there are a plurality of the health information management servers and the health information management server identification information is included in the health information records transmitted by the plurality of information holding organizations, the relay server Receiving a health information record including health information management server identification information, data type information, user identification information, and medical health data transmitted from the information holding organization, and managing the health information based on the health information management server identification information Aggregate for each server and send to the corresponding health information management server.

In order to achieve the above object, the health information management system according to the second aspect of the present invention includes the following components.
(3) A health information record including data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations connected to a plurality of information holding organizations that store the original medical health data. A relay server that receives, aggregates and transmits collectively, and receives the health information record that is connected to the relay server through the network and is aggregated and transmitted from the relay server, and for each health information record for each data type Permission / non-permission is determined based on the set access control management table, the health information record is divided, the corresponding health information data storage destination table is specified based on the data type, and the specified storage destination A health information management server that registers the health information data for each user based on the user identification information in a table Comprising the door.

  (4) In (3), when there are a plurality of the health information management servers and the health information management server identification information is included in the health information records transmitted by the plurality of information holding organizations, the relay server Receiving a health information record including health information management server identification information, data type information, user identification information, and medical health data transmitted from the information holding organization, and managing the health information based on the health information management server identification information Aggregate by server and send to each health information management server at once.

  (5) In (3), the relay server sequentially receives access from the plurality of information holding organizations and receives the health information record, and the plurality of information holding organizations received by the access unit. A health information record from the health information record, and a health information record for the user is divided from the health information record aggregated by the aggregator, and a data registration message is generated as aggregated data for the medical health management server And a data registration calling unit to be transmitted to each health information management server 131 to 13m.

  (6) In (5), the health information management server receives an access from the relay server and receives a data registration message of health information records aggregated from the relay server and collectively transmitted; An access control determination unit that determines permission / non-permission based on an access control management table set for each data type for the health information record of the message received by the access reception unit, and the health information record that has received the determination A data dividing unit that identifies a storage table for the corresponding health information data based on the data type, and a storage destination table identified by the data dividing unit for each user based on the user identification information A data storage unit for registering the health information data.

In order to achieve the above object, the health information management program according to the third aspect of the present invention comprises the following components.
(7) A health information record including data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations and connected to a plurality of information holding organizations storing original medical health data. Used for a relay information server that receives, aggregates and transmits collectively, and a health information management server connected through the network, and causes a computer to execute processing for registering and managing health information records that are aggregated and transmitted collectively from the relay server A health information management program for receiving an access from the relay server and receiving a health information record aggregated from the relay server and collectively transmitted; and the health information record received in the access reception step An access control management table set for each data type. Access control determination step for determining permission / non-permission based on the data, and a data division step for dividing the determined health information record to identify a corresponding health information data storage destination table based on the data type And a data storage step of registering the health information data for each user based on the user identification information in the storage destination table specified in the data division step.

  As described above, the present invention provides a plurality of information holding organizations that store the original medical health data, a relay server that relays medical health data from the information holding organization and transmits it to the health information management server, one or more The health information management server is connected via a network. The relay server aggregates medical health data transmitted from the information holding organization, and multiple items of data can be stored in a single data transmission. Features that are collectively transmitted to the information management server, and the health information management server is a feature that divides a plurality of pieces of medical health data that are collectively transmitted and stores them as individual medical health data, and access rights at that time A feature is provided in which the determination is performed not on a record basis but on a table basis. In this way, it is possible to transmit a plurality of medical health data in one data transmission, and access right determination compared to the conventional method of performing access right determination in record units by performing access right determination in table units. The two points that the processing cost can be reduced can increase the amount of medical health data that can be processed per unit time. For this reason, according to the present invention, it is possible to import a large amount of medical health data from an information holding organization, for example, in a limited time zone at midnight, and thus it is possible to extend the service provision time of the health information management service It becomes.

  Therefore, according to the present invention, it is possible to register a large amount of health information within a certain time with high efficiency, and at the same time, a health information management method, a health information management system, and a health which can execute security guarantee at a low cost. An information management program can be provided.

It is a block diagram which shows the structure of the health information management system which concerns on one Embodiment of this invention. It is a figure which shows the processing content of the access reception part in the relay server of the said embodiment. It is a figure which shows the processing content of the data aggregation part in the relay server of the said embodiment. It is a figure which shows the processing content of the data registration call part in the relay server of the said embodiment. It is a figure which shows the processing content of the access reception part in the health information management server of the said embodiment. It is a figure which shows the processing content of the access control determination part in the health information management server of the said embodiment. It is a figure which shows the processing content of the data division part in the health information management server of the said embodiment. It is a figure which shows the processing content of the data storage part in the health information management server of the said embodiment. It is a block diagram which shows the structural example of the relay server of the said embodiment, and a health information management server. It is a flowchart which shows the program procedure in the case of performing the process in the relay server of the said embodiment by computer. It is a flowchart which shows the program procedure in the case of performing the process in the health information management server of the said embodiment by computer. It is a block diagram which shows the structure of the health information management system which concerns on other embodiment of this invention.

Embodiments according to the present invention will be described below with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a health information management system according to an embodiment of the present invention. In FIG. 1, 111 to 11 n are information holding organizations that store original medical health data, 12 is a relay server, and 131 to 13 m are health information management servers, and between the information holding organizations 111 to 11 n and the relay server 12, The relay server 12 and the health management servers 131 to 13m are connected via a network such as the Internet. Here, each information holding organization 111-11n is, for example, a local government, a health insurance association, a workplace, etc., and a data type (for example, a periodic medical checkup record, physical fitness measurement record, electronic medical record, test result, diagnostic image, etc.) The health information is distributed in the form of a record including a medical health management server ID, a user ID, and medical health data.

The relay server 12 includes an access reception unit 12a, a data aggregation unit 12b, and a data registration call unit 12c.
As shown in FIG. 2, the access receiving unit 12a receives access from a plurality of information holding institutions 111 to 11n, and transmits health information (data type, medical health management server ID, user ID, and user ID) transmitted from the respective institutions. (Record including medical health data) is received, and after a format check is performed on each item, processing is passed to the data aggregating unit 12b as checked reception data. As shown in FIG. 3, the data aggregating unit 12b merges the data type / user ID / medical health data in units of health information management server IDs for each record, and processes them as aggregated data to the data registration calling unit 12c. Hand over. As shown in FIG. 4, the data registration calling unit 12 c divides the aggregated medical health data for a plurality of users into health information management server IDs, aggregated data types for each medical health management server, and aggregated A message generation unit A1 that generates a data registration message including a user ID and aggregated medical health data, and a message transmission unit A2 that transmits a corresponding data registration message to each of the health information management servers 131 to 13m. Prepare.

In addition, the health management server 131 (other servers 132 to 13m are omitted because they are the same) includes an access receiving unit 13a, an access control determining unit 13b, a data dividing unit 13c, and a data storage unit 13d.
As shown in FIG. 5, the access receiving unit 13a receives an access by a data registration message transmitted from the relay server 12, and collects the collected data type, the collected user ID, and the collected medical health data for the server itself. , And after checking the format, the process is transferred to the access control determination unit 13b. As shown in FIG. 6, the access control determination unit 13b includes an access control management table in which access rights (OK (user viewing permission), NG (user viewing permission)) for each data type are registered in advance. For the medical health data, the access control management table is searched for each data type to obtain the access right. As shown in FIG. 7, the data dividing unit 13c divides the medical health data for each received user ID, and passes only the data of the record whose access control determination result is OK to the data storage unit 13d, and the access control determination result Discard the data of the record that was NG. As shown in FIG. 8, the data storage unit 13d specifies a storage table for the corresponding health information data based on the data type, and registers the health information data for each user ID for each storage destination table.

  As described above, the system according to the above-described embodiment is configured to transfer a large amount of medical health data, which is individually required for security management, of personal data included in the information holding organizations 111 to 11n through the relay server 12 in a short time. In particular, a relay server 12 is provided that aggregates data from a plurality of information holding institutions 111 to 11n for each health information management server ID and relays them collectively, and the health information management servers 131 to 13m. Has an access control management table for determining whether to register for each data type.

  That is, in the relay server 12, medical health data transmitted from the information holding organizations 111 to 11n is aggregated for each health information management server ID, and a plurality of pieces of data are collected by one data transmission. 13m has the feature of batch transmission. In addition, the health information management servers 131 to 13m divide a plurality of pieces of medical health data that are collectively transmitted, sort the individual medical health data for each data type, and store them for each user ID. The access right determination is performed not on a record basis but on a table basis.

  As a result, a plurality of medical health data can be transmitted by one data transmission. In addition, since the access right determination is performed in units of tables, the processing cost for the access right determination can be reduced as compared with the conventional method in which the access right determination is performed in units of records. In addition, the combination of the two points can increase the amount of medical health data that can be processed per unit time. In addition, according to this embodiment, it is possible to import a large amount of medical health data from an information holding organization, for example, in a limited time zone in the middle of the night, and in turn, it is possible to extend the service provision time of the health information management service It becomes.

Therefore, according to the health information management system of the above embodiment, it is possible to register a large amount of health information within a certain time with high efficiency, and at the same time, it is possible to execute security guarantee at a low cost.
By the way, the processing performed by the relay server 12 and the health information management servers 131 to 13m can be realized by program processing by a computer. FIG. 9 shows the configuration of the computer.

  In FIG. 9, reference numeral 101 denotes a CPU that controls the center of the computer. The CPU 101 is a ROM (Read Only Memory) 103, a RAM (Random Access Memory) 104, and a mass storage device (HDD (Hard Disk Drive)) 105 through a bus 102. The communication interface 106 is connected. The ROM 103 is used for program storage, the RAM 104 is used for work space, the mass storage device 105 is used for data storage, and the communication interface 106 is used for input / output of transmission / reception data through a transmission / reception device (not shown). The processing programs of the relay server 12 and the health information management servers 131 to 13m are installed in the ROM 103, loaded into the CPU 101 and executed.

  FIG. 10 shows a program procedure when the processing in the relay server 12 is executed by a computer. When an access from any of the information holding institutions 111 to 11n is accepted (step S11), the information is sent from the information holding agency. Health information (data type, medical health management server ID, user ID, and record including medical health data) is received (step S12), a format check is performed for each item (step S13), and the received reception is completed. For each record of data, data type, user ID, and medical health data are merged in units of health information management server ID (step S14), and the medical health data for a plurality of users aggregated by merging is stored in the health information management server. Divided for each ID (step S15) for each medical health management server A data registration message including the contracted data type, the aggregated user ID, and the aggregated medical health data is generated (step S16), and the corresponding data registration message is transmitted to each health information management server 131 to 13m. (Step S17), a series of processing ends.

  FIG. 11 shows a program procedure when the processing in the health information management servers 131 to 13m is executed by a computer. When access from the relay server 12 is accepted (step S21), a data registration message for the own server is shown. (Aggregated data type, aggregated user ID, aggregated medical health data) is received (step S22), after checking the format of each item (step S23), the medical health data in the received message Then, the access control management table is searched for each data type to obtain the access right (step S24). Subsequently, medical health data is divided for each received user ID (step S25), the access control determination result is referred to (step S26), and if the determination result is OK, the data of the record is stored as data. When the access control determination result is NG, the record data is discarded (step S28). Next, the storage destination table of the corresponding health information data is specified based on the data type (step S29), the health information data is registered for each user ID for each storage destination table (step S30), and the series of processes is completed. To do.

  It is assumed that a program based on the above processing procedure is installed in the ROM 103 of the computer shown in FIG. 9, and an instruction is given to the ROM 103 in accordance with the processing execution instruction. According to this configuration, the processing contents can be recognized almost completely by the computer, and an immediate response is possible.

  In addition, although the said embodiment demonstrated the case where it operate | moves with a some health information management server, there may also be a form which operates a health information management server by a single structure like other embodiment shown in FIG. . In this case, the relay server 12 does not need a distribution process for each health information management server ID.

  In addition, the present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In particular, in the above embodiment, the processes of the relay server and the health information management server have been described with reference to FIGS. 2 to 8, but these processes can be realized by a program for causing a computer to execute. That is, the action purpose estimation program according to the present invention is loaded on a computer and user information is taken in, whereby the processing of the above embodiment can be executed.

  Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

111 to 11n: Information holding organization,
12 ... Relay server,
12a ... Access reception unit,
12b ... Data aggregation part,
12c: Data registration calling part,
A1 ... message generator,
A2 ... message transmission unit,
131 to 13m ... health information management server,
13a ... Access reception part,
13b ... access control determination unit,
13c: Data dividing unit,
13d: Data storage unit,
101 ... CPU,
102 ... Bus
103 ... ROM (Read Only Memory),
104 ... RAM (Random Access Memory),
105 ... Mass storage device (HDD (Hard Disk Drive) etc.),
106: Communication interface.

Claims (7)

A health information record that includes data type information, user identification information, and medical health data transmitted from a plurality of information holding organizations to a plurality of information holding organizations that store a plurality of information holding organizations that store original medical health data Received, aggregated and sent in bulk,
The health information management server connected to the relay server through the network receives the health information records aggregated and transmitted from the relay server, and the access control management table set for each data type for each health information record Based on the data type, the health information record is divided, the corresponding health information data storage destination table is specified based on the data type, and the user identification information is stored in the specified storage destination table. A health information management method for registering the health information data for each user based on the above. When there are a plurality of health information management servers, and the health information management server identification information is included in health information records transmitted by the plurality of information holding organizations,
The relay server receives health information records including health information management server identification information, data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations, and the health information management server identification information The health information management method according to claim 1, wherein the health information management server aggregates each health information management server and transmits the collected information to the corresponding health information management server. Connected to a plurality of information holding organizations that store the original medical health data through a network, and receives a health information record including data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations; A relay server that aggregates and sends the batch,
The health information records connected to the relay server through the network, aggregated from the relay server, and collectively transmitted are received, and permission / rejection based on the access control management table set for each data type for each health information record. The permission is determined, the health information record is divided, the corresponding health information data storage destination table is specified based on the data type, and the specified storage destination table is identified for each user based on the user identification information. A health information management system comprising a health information management server for registering the health information data. When there are a plurality of health information management servers, and the health information management server identification information is included in health information records transmitted by the plurality of information holding organizations,
The relay server receives health information records including health information management server identification information, data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations, and the health information management server identification information The health information management system according to claim 3, wherein the health information management server aggregates each health information management server based on the information and transmits the collected information to each health information management server.   The relay server collects health information records received from the plurality of information holding organizations received by the access unit and an access receiving unit that receives the health information records by sequentially receiving accesses from the plurality of information holding organizations. Dividing medical health data for users from the health information record aggregated by the aggregation unit and the aggregation unit, generating a data registration message as aggregated data for the medical health management server, and transmitting it to each health information management server The health information management system according to claim 3, further comprising: a data registration calling unit that performs the registration. The health information management server
An access receiving unit that receives access from the relay server and receives health information records that are aggregated and transmitted collectively from the relay server;
An access control determination unit that determines permission / non-permission based on an access control management table set for each data type for the health information record received by the access reception unit;
A data dividing unit that divides the health information record subjected to the determination and identifies a storage table of the corresponding health information data based on the data type;
The health information management system according to claim 5, further comprising: a data storage unit that registers the health information data for each user based on the user identification information in the storage destination table specified by the data dividing unit. Connected to a plurality of information holding organizations that store the original medical health data through a network, and receives a health information record including data type information, user identification information, and medical health data transmitted from the plurality of information holding organizations; Health information management used for a relay server that aggregates and transmits collectively and a health information management server that is connected through the network, and that causes a computer to execute processing for registering and managing health information records that are aggregated and transmitted collectively from the relay server A program,
An access receiving step for receiving health information records received from the relay server and aggregated from the relay server and collectively transmitted;
An access control determination step for determining permission / non-permission based on an access control management table set for each data type for the health information record received in the access reception step;
A data dividing step of dividing the determined health information record to specify a storage table of corresponding health information data based on the data type;
A health information management program comprising: a data storage step of registering the health information data for each user based on the user identification information in the storage destination table specified in the data division step.

Images