JP2017194980A - Medication history management device and method, information processing apparatus and method, information management apparatus, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve security and convenience.SOLUTION: An affiliated store terminal device transmits a personal identification ID acquired from an IC card to a data center. The data center generates a terminal ID for each individual which can uniquely identify a portable terminal device for the received personal identification ID. In addition, the data center records the terminal ID for individual in association with the personal identification ID, and transmits the terminal ID for individual to the affiliated store terminal device. The portable terminal device receives the personal identification ID and the terminal ID for individual from the affiliated store terminal device, and accesses medication history data recorded in the data center by using the personal identification ID and the terminal ID for individual. This technique is applicable to the portable terminal device.SELECTED DRAWING: Figure 1

Description

  The present technology relates to a drug history management apparatus and method, an information processing apparatus and method, an information management apparatus, and a program, and in particular, a drug history management apparatus and method that can improve security and convenience. The present invention relates to an information processing apparatus and method, an information management apparatus, and a program.

  For example, a service that manages various data on a server and allows each individual user to view the data is known. The data to be browsed may be various data such as the user's medication history data, for example. When the data to be browsed is personal data, the user's personal information is used as appropriate. , You need to verify your identity.

  Conventionally, personal information has been dealt with by strictly protecting it after acquisition, but this greatly increases the management cost of related data.

  Therefore, a mechanism for not recording personal information on the server side and a mechanism for transmitting personal information directly to the portable terminal device side using a QR (Quick Response) code (registered trademark) have been proposed (for example, Patent Document 1). reference).

  In addition, a technique for registering a terminal ID or a telephone number previously assigned to each portable terminal device on the server side when granting browsing permission to the portable terminal device is also proposed (for example, Patent Document 2). According to this technology, the uniqueness of the portable terminal device in the server can be ensured, and the user can designate the portable terminal device that the user wants to cancel the service.

JP2013-101585A JP 2007-164449 A

  However, with the technology described above, it has been difficult to improve security and convenience.

  For example, in the technique described in Patent Document 1, since personal information is not recorded on the server side, security can be improved. However, with this technology, when a user records personal information in a plurality of portable terminal devices and browses data managed by the server, the server side cannot distinguish between the portable terminal devices. For this reason, for example, access to only a specific portable terminal device cannot be prohibited later, which is inconvenient.

  In the technique described in Patent Document 2, a user can designate a portable terminal device that the service is desired to be canceled, but it is necessary to record a terminal ID, a cellular phone number, and the like on the server side. Terminal IDs and telephone numbers unique to such portable terminal devices are beginning to be regarded as being very close to personal information, which is inconvenient in realizing a mechanism that does not have personal information on the server side.

  The present technology has been made in view of such a situation, and is intended to improve security and convenience.

  The drug history management device according to the first aspect of the present technology includes a communication unit that receives and transmits information, a recording unit that records drug history information in association with personal identification information, and a control unit, When the communication unit receives a registration request for access source information used when accessing the personal identification information and the drug history information associated with the personal identification information, the communication unit identifies the access source. The access source identification information is generated, the access source identification information is recorded in the recording unit in association with the personal identification information, and the communication unit is controlled to transmit the access source identification information.

  The drug history management method and program according to the first aspect of the present technology correspond to the drug history management device according to the first aspect of the present technology.

  In the first aspect of the present technology, when a registration request for access source information used when accessing personal identification information and drug history information associated with the personal identification information is received, the access source is Access source identification information to be identified is generated, the access source identification information is recorded in association with the personal identification information, and the access source identification information is transmitted.

  An information processing apparatus according to a second aspect of the present technology is an information processing apparatus that accesses drug history information associated with personal identification information, and transmits and receives information using short-range communication. And a recording unit for recording information, and a control unit, wherein the control unit acquires the personal identification information and the access source identification information for identifying the access source by the short-range communication unit, The access source identification information is recorded in the recording unit in association with the personal identification information.

  The information processing method and program according to the second aspect of the present technology correspond to the information processing apparatus according to the second aspect of the present technology.

  In the second aspect of the present technology, when the personal identification information and the access source identification information for identifying the access source are acquired by the short-range communication unit, the access source identification is associated with the personal identification information. Information is recorded.

  An information processing apparatus according to a third aspect of the present technology includes an acquisition unit that acquires personal identification information, a communication unit that transmits and receives information, a display unit, and a control unit, and the control unit includes: A request for accessing the personal identification information and the medication history information associated with the personal identification information is transmitted to the medication history management device by the communication unit, and the communication unit responds to the transmission of the personal identification information. When the access source identification information generated by the medicine history management device is received, the access source identification information is controlled to be displayed on the display unit.

  The information processing method and program according to the third aspect of the present technology correspond to the information processing apparatus according to the third aspect of the present technology.

  In the third aspect of the present technology, a request to access the personal identification information and the drug history information associated with the personal identification information is transmitted to the drug history management device, and in response to the transmission of the personal identification information When the access source identification information generated by the medicine history management device is received, the access source identification information is displayed.

  An information management device according to a fourth aspect of the present technology includes a communication unit that receives and transmits information, a recording unit that records information about a user in association with personal identification information, and a control unit, the control unit Is a terminal identification that identifies the terminal device when the communication unit receives a registration request for the terminal device used when accessing the personal identification information and information related to the user associated with the personal identification information. Information is generated, the terminal identification information is recorded in the recording unit in association with the personal identification information, and the communication unit is controlled to transmit the terminal identification information.

  In a fourth aspect of the present technology, the terminal device is identified when a registration request for the terminal device used when accessing the personal identification information and information related to the user associated with the personal identification information is received. Terminal identification information is generated, the terminal identification information is recorded in association with the personal identification information, and the terminal identification information is transmitted.

  An information management device according to a fifth aspect of the present technology includes a communication unit that receives and transmits information, a recording unit that records information about a user in association with personal identification information, and a control unit, the control unit Identifies the access source when the communication unit receives a registration request for the access source information used when accessing the personal identification information and the information related to the user associated with the personal identification information. Access source identification information is generated, the access source identification information is recorded in the recording unit in association with the personal identification information, and the access unit identification information is controlled to be transmitted by the communication unit.

  In a fifth aspect of the present technology, when a registration request for access source information used when accessing personal identification information and information related to a user associated with the personal identification information is received, the access source is Access source identification information to be identified is generated, the access source identification information is recorded in association with the personal identification information, and the access source identification information is transmitted.

  According to the first aspect to the fifth aspect of the present technology, it is possible to improve security and convenience.

  Note that the effects described here are not necessarily limited, and may be any of the effects described in the present disclosure.

It is a figure which shows the structural example of an information processing system. It is a figure which shows the structural example of a data center. It is a figure which shows an example of a database. It is a figure which shows the structural example of a member store terminal device. It is a figure which shows the structural example of a portable terminal device. It is a flowchart explaining a reading process, a temporary registration request process, and a temporary registration process. It is a flowchart explaining a registration request process and a registration process. It is a flowchart explaining a browsing process and a provision process. It is a flowchart explaining a deletion request process and a deletion process. It is a flowchart explaining a deletion request process and a deletion process. It is a figure which shows an example of a database. It is a flowchart explaining a registration request process and a registration process. It is a figure which shows an example of a database. It is a flowchart explaining a browsing process and a provision process. It is a figure which shows an example of a database. It is a flowchart explaining a registration request process and a registration process. It is a flowchart explaining a deletion request process and a deletion process. It is a figure which shows the structural example of a computer.

  Hereinafter, embodiments to which the present technology is applied will be described with reference to the drawings.

<First Embodiment>
<Configuration example of information processing system>
FIG. 1 is a diagram illustrating a configuration example of an embodiment of an information processing system to which the present technology is applied.

  This information processing system includes a member store terminal device 11, a data center 12, an IC (Integrated Circuit) card 13 and a portable terminal device 14 possessed by the user. The member store terminal device 11 and the data center 12 are connected to each other via a communication network 15 including a wired or wireless network such as the Internet.

  This information processing system can be applied when various services are provided to the user, but in the following, for the sake of specific explanation, the medical history such as a medicine notebook in which the user is digitized. The description will be continued by taking the case of uploading data to the data center 12 and browsing the drug history data as appropriate. Note that the drug history data is uploaded by a service member store or the user himself / herself after the authentication or face-to-face authentication using the IC card 13 is performed as necessary.

  The member store terminal device 11 is provided in a service member store that provides a predetermined service. In this example, the member store terminal device 11 is provided, for example, in a pharmacy where the user purchases a prescribed medicine or in a hospital where the user visits.

  The member store terminal device 11 includes a computer and performs various processes in response to an input operation by a pharmacist or the like. Specifically, for example, the member store terminal device 11 generates drug history data of the user in response to an input operation by a pharmacist or the like, records the drug history data, or stores the drug history data via the communication network 15. It is transmitted to the center 12 and recorded.

  Further, the member store terminal device 11 reads the personal identification ID and personal information, which are IDs unique to the user, from the user's IC card 13 and uses them for personal authentication or the medicine history managed by the data center 12. Information necessary for accessing data is transmitted to the portable terminal device 14 by short-range communication.

  Here, the personal identification ID is one piece of personal identification information that can uniquely identify the user. However, if another person simply obtains the personal identification ID, it is generally identified by the personal identification ID. It is information that cannot identify the individual user (it is difficult).

  Note that the medium that triggers the acquisition of the personal identification ID is not limited to an IC card or the like in which the personal identification ID is directly recorded, and may be a unique medium that cannot be rewritten or replaced. For example, when acquiring unique information from the biometric information as the personal identification ID, the medium for acquiring the personal identification ID is a part or all of the human body.

  The data center 12 manages drug history data supplied from the member store terminal device 11 or the portable terminal device 14 and records it in response to a request from the member store terminal device 11 or the portable terminal device 14. Permits viewing of medical history data.

  Here, drug history data will be described as an example of management data managed by the data center 12, but the management data may be any data as long as it is data accessed by the user. .

  The IC card 13 is an IC card that a user who receives a service provided at a service member store or the like in which the member store terminal device 11 is installed appropriately uses the service. This IC card 13 is issued for each user. The IC card 13 stores a personal identification ID for authenticating a user who is a service user, and personal information including the user's name, date of birth, and sex. In addition, the personal information recorded on the IC card 13 may include a user's address, telephone number, insurance card number, and the like.

  The IC card 13 communicates with the member store terminal device 11 and transmits the recorded personal identification ID and personal information to the member store terminal device 11.

  The portable terminal device 14 is composed of a portable telephone held by the user, and communicates with the member store terminal device 11 and the data center 12 via a communication network or communication network 15 (not shown), and exchanges information as necessary. To do. For example, the portable terminal device 14 receives and displays drug history data from the data center 12 or transmits the drug history data to the data center 12 to be updated.

  In the example of FIG. 1, only one member store terminal device 11 is shown in the information processing system, but actually, the information processing system includes a plurality of member store terminal devices 11.

<Data center configuration example>
Next, the configuration of the member store terminal device 11, the data center 12, and the portable terminal device 14 shown in FIG. 1 will be described.

  FIG. 2 is a diagram illustrating a configuration example of the data center 12. In FIG. 2, the data center 12 is configured as one device, but the data center 12 may be configured from a plurality of devices.

  The data center 12 illustrated in FIG. 2 includes a recording unit 41, a communication unit 42, and a control unit 43.

  The recording unit 41 is, for example, a database, and records various data such as drug history data of each user, personal identification ID, personal setting terminal code, individual terminal ID, and the like, if necessary. Data is supplied to the control unit 43.

  Here, the terminal ID for each individual is terminal identification information that can uniquely identify the portable terminal device 14 registered for the personal identification ID in the data center 12. In other words, the terminal ID for each individual is used to uniquely identify whether the predetermined portable terminal device 14 is one or more of the portable terminal devices 14 registered for the personal identification ID. Information.

  Therefore, if the personal identification ID and the terminal ID for each individual are used, it is possible to uniquely identify which portable terminal device 14 is registered for which IC card 13 in the data center 12. Therefore, in the data center 12, the combination of the personal identification ID and the terminal ID for each individual is used as information (access key) for access management used when the user accesses the drug history data.

  The personal setting terminal code is information for specifying the portable terminal device 14 determined by the user, and the user designates information that can be easily remembered as the personal setting terminal code, for example. Therefore, the user can easily understand which portable terminal device 14 the personal setting terminal code indicates by looking at the personal setting terminal code.

  The personal setting terminal code is used when the access authority to the drug history data is invalidated, that is, when the use of the service is stopped.

  The communication unit 42 communicates with the member store terminal device 11 and the portable terminal device 14 via the communication network 15 or the like, and supplies the received information to the control unit 43 or transmits the information supplied from the control unit 43. Or

  The control unit 43 controls the operation of the entire data center 12. The control unit 43 includes a registration management unit 51, a generation unit 52, and an information management unit 53.

  The registration management unit 51 performs processing related to registration of the portable terminal device 14 to enable browsing of the drug history data. The generation unit 52 generates a terminal ID for each person recorded in the recording unit 41. The information management unit 53 manages data recorded in the recording unit 41.

  Here, an example of the personal identification ID, the personal setting terminal code, the personal terminal ID, and the medication history data recorded in the recording unit 41 will be described. For example, as shown in FIG. 3, these personal setting terminal codes, terminal IDs for individual persons, and medication history data are recorded as a database in association with personal identification IDs.

  In FIG. 3, the personal identification ID is information that uniquely identifies the user read from the IC card 13. The personal identification ID is associated with the personal setting terminal code, the personal terminal ID, and the medical history data. It has been.

  For example, the personal identification ID “ab01” is associated with the personal setting terminal code “1234”, the terminal ID “1” for each individual, and the drug history data “medicine history data A”. Here, the drug history data associated with the personal identification ID is always one, but the personal setting terminal code and the personal terminal ID are associated with the personal identification ID as many as the number of the portable terminal devices 14 to be registered. ing.

  For example, in the personal identification ID “ab02”, the personal setting terminal code “1111” of the portable terminal device 14 identified by the individual terminal ID “1” and the portable terminal identified by the individual terminal ID “2” The personal setting terminal code “2222” of the device 14 is associated.

  Therefore, in this case, the user can access the same medication history data B from the two portable terminal devices 14. If the user's medication history data can be accessed from some portable terminal devices 14 in this way, the user's convenience can be improved.

  In the example of FIG. 3, a number that is consecutive in the registration order is assigned as a terminal ID for each individual to each portable terminal device 14 registered for the same personal identification ID. In this example, serial numbers consecutive in order from “1” are assigned as individual terminal IDs. Furthermore, in the data center 12, when the combination of the terminal ID for each person and the personal setting terminal code associated with each other stops the use of the service in the portable terminal device 14 specified by the terminal ID for each person. It is a use stop code used for. For example, the use stop code is information obtained by adding a terminal ID for each person to the end of the personal setting terminal code.

<Configuration example of member store terminal device>
Next, the configuration of the member store terminal device 11 will be described.

  FIG. 4 is a diagram illustrating a configuration example of the member store terminal device 11. In FIG. 4, the member store terminal device 11 is configured as one device, but the member store terminal device 11 may be configured from a plurality of devices.

  The member store terminal device 11 includes an information identification reader 81, a communication unit 82, an input unit 83, a display unit 84, a control unit 85, and a recording unit 86.

  The information identification reader 81 performs non-contact communication with the IC card 13, reads the personal identification ID and personal information from the IC card 13, and supplies them to the control unit 85. The communication unit 82 communicates with each device such as the data center 12 via the communication network 15, receives the transmitted information, supplies the information to the control unit 85, and transmits information supplied from the control unit 85. Or

  The input unit 83 includes a mouse or the like, and supplies a signal corresponding to an operation by a pharmacist or the like to the control unit 85. The display unit 84 includes a liquid crystal display panel and the like, and displays an image and the like based on data supplied from the control unit 85.

  The control unit 85 controls the operation of the entire member store terminal device 11. The control unit 85 includes a code generation unit 91 and a request processing unit 92.

  The code generation unit 91 generates a QR code based on the personal information read from the IC card 13 and displays the QR code on the display unit 84. The request processing unit 92 executes processing for making various requests to the data center 12 such as a request for temporary registration of the portable terminal device 14.

  The recording unit 86 records various data such as a user's personal identification ID and medication history data, and supplies the data to the control unit 85 as necessary.

<Configuration example of portable terminal device>
Further, FIG. 5 is a diagram illustrating a configuration example of the portable terminal device 14.

  The portable terminal device 14 includes a communication unit 111, a short-range communication unit 112, an input unit 113, a control unit 114, a recording unit 115, and a display unit 116.

  The communication unit 111 communicates with external devices such as the member store terminal device 11 and the data center 12, receives various data, supplies the data to the control unit 114, and transmits data supplied from the control unit 114. To do.

  The near field communication unit 112 performs near field communication with the member store terminal device 11 and supplies the information received from the member store terminal device 11 to the control unit 114. For example, the short-range communication unit 112 includes a camera or the like, captures a QR code displayed on the member store terminal device 11 as short-range communication, and supplies the obtained image information to the control unit 114.

  The input unit 113 includes, for example, an input button, a touch panel, a microphone, and the like, and supplies information corresponding to an input operation by the user to the control unit 114.

  The control unit 114 controls the operation of the entire portable terminal device 14. The control unit 114 includes a decryption unit 121, an information management unit 122, a browsing control unit 123, and a display control unit 124.

  The decoding unit 121 decodes the image information supplied from the short-range communication unit 112 and extracts information described in the QR code. The information management unit 122 manages various data recorded in the recording unit 115. In other words, the information management unit 122 supplies the data to the recording unit 115 for recording, and reads the data recorded in the recording unit 115.

  The browsing control unit 123 performs processing related to browsing of drug history data recorded in the data center 12. The display control unit 124 controls display of images and information on the display unit 116.

  The recording unit 115 records various data supplied from the control unit 114, and supplies the data to the control unit 114 as necessary. The display unit 116 includes a liquid crystal display panel and displays various images and information based on data supplied from the control unit 114.

<Provisional registration>
Next, the operation of the information processing system shown in FIG. 1 will be described.

  For example, in the information processing system, the user can browse medicine history data recorded in the data center 12 from the portable terminal device 14. In order to browse such medication history data, the user needs to register in advance in the data center 12 information related to the portable terminal device 14 used during browsing.

  In this embodiment, the user first performs temporary registration to record the personal identification ID and the individual terminal ID in the portable terminal device 14, and then transmits the personal setting terminal code to the data center 12 to complete the main registration. By doing so, it will be possible to view the drug history data. Hereinafter, processing of the information processing system performed at the time of temporary registration and main registration will be described.

  First, a reading process performed by the portable terminal device 14, a temporary registration request process performed by the member store terminal device 11, and a temporary registration process performed by the data center 12 performed during temporary registration will be described with reference to the flowchart of FIG.

  When performing temporary registration, for example, the user goes to a service member store where the member store terminal device 11 is installed, and informs a pharmacist who is a clerk of the service member store that he / she wants to make a new registration. Then, a pharmacist or the like requests presentation of the IC card 13 possessed by the user.

  When the user holds the IC card 13 over the information identification reader 81 of the member store terminal device 11, the information identification reader 81 of the member store terminal device 11 performs non-contact communication with the IC card 13 in step S11. The personal identification ID and personal information are acquired from 13 and supplied to the control unit 85. Further, the control unit 85 supplies the personal identification ID and personal information supplied from the information identification reader 81 to the display unit 84 as necessary, and displays them. The pharmacist or the like uses the displayed personal information to appropriately confirm the user identity.

  In step S <b> 12, the communication unit 82 transmits a personal identification ID and a temporary registration request to the data center 12 via the communication network 15. That is, the request processing unit 92 generates a temporary registration request for requesting temporary registration of a new portable terminal device 14 of the user identified by the personal identification ID, and is supplied from the temporary registration request and the information identification reader 81. The personal identification ID is supplied to the communication unit 82. Then, the communication unit 82 transmits the personal identification ID and temporary registration request supplied from the request processing unit 92 to the data center 12.

  In step S 21, the communication unit 42 of the data center 12 receives the personal identification ID and temporary registration request transmitted from the member store terminal device 11 and supplies them to the control unit 43.

  In step S22, the generation unit 52 generates an individual terminal ID for the received personal identification ID. That is, the registration management unit 51 instructs the generation unit 52 to generate a terminal ID for each individual in response to the received temporary registration request, and the generation unit 52 issues a terminal ID for each individual according to the instruction. The individual terminal ID is different from other individual terminal IDs recorded in the recording unit 41 in association with the individual identification ID to be registered, and is unique for each individual identification ID. Any identification information may be used.

  In step S <b> 23, the information management unit 53 supplies the individual terminal ID to the recording unit 41 in accordance with an instruction from the registration management unit 51, and records it. That is, the information management unit 53 records the terminal ID for each individual in association with the personal identification ID received in step S21 among the personal identification IDs recorded in the recording unit 41.

  For example, in the example shown in FIG. 3, when the personal identification ID “ab02” is received and the terminal ID “2” for each person is generated, the terminal ID “2” for each person is newly added to the personal identification ID “ab02”. It is recorded in association with. Therefore, if there is a personal identification ID and a terminal ID for each person, the combination of the IC card 13 and the portable terminal device 14 can be uniquely specified. When the personal identification ID corresponding to the recording unit 41 is not recorded, a new personal identification ID is recorded, and a terminal ID for each individual is recorded in association with the personal identification ID.

  In this way, when the individual terminal ID is associated with the personal identification ID and recorded, the provisional registration of the portable terminal device 14 is completed. When provisional registration is performed, the registration management unit 51 supplies the generated individual terminal ID to the communication unit 42 and instructs transmission.

  In step S24, the communication unit 42 transmits the terminal ID for each individual supplied from the registration management unit 51 to the member store terminal device 11 via the communication network 15, and the temporary registration process ends.

  In step S <b> 13, the communication unit 82 of the member store terminal device 11 receives the individual terminal ID transmitted from the data center 12 and supplies it to the control unit 85.

  In step S <b> 14, the code generation unit 91 generates a QR code based on the terminal ID for each individual received in step S <b> 13 and the personal identification ID and personal information read in step S <b> 11 and supplies them to the display unit 84. To do. The QR code generated by the code generation unit 91 includes personal identification ID, terminal ID for each individual, and personal information as information.

  In step S15, the display unit 84 displays the QR code supplied from the code generation unit 91, and the temporary registration request process ends. That is, the code generation unit 91 displays the QR code on the display unit 84 to perform short-range communication with the portable terminal device 14 using the QR code, and the information included in the QR code is transmitted to the portable terminal device 14. Send to.

  When the QR code is displayed on the display unit 84 in this way, the user causes the portable terminal device 14 possessed to perform short-range communication with the member store terminal device 11 and read the QR code.

  That is, in step S31, the short-range communication unit 112 of the portable terminal device 14 reads the QR code by photographing the QR code displayed on the display unit 84 using the camera function, and sends it to the control unit 114. Supply. That is, the image information of the QR code obtained by photographing is supplied to the control unit 114.

  In this case, communication using a QR code is performed as short-range communication between the member store terminal device 11 and the portable terminal device 14 to exchange personal identification ID, individual terminal ID, and personal information. Although described as an example, any method may be used as long as it does not pass through the communication network 15 such as the Internet. For example, the member store terminal device 11 and the portable terminal device 14 perform infrared communication or NFC (Near Field Communication) as short-range communication, and exchange personal identification ID, individual terminal ID, and personal information. May be.

  In step S32, the decoding unit 121 extracts the personal identification ID, the individual terminal ID, and the personal information described in the QR code by decoding the image information of the QR code supplied from the short-range communication unit 112. To do.

  In step S33, the information management unit 122 supplies the personal identification ID, the terminal ID for each individual, and the personal information to the recording unit 115 for recording, and the reading process ends. When the personal identification ID and the individual terminal ID are recorded in the portable terminal device 14 in this way, the portable terminal device 14 accesses the data center 12 using the personal identification ID and the individual terminal ID. Will be able to. The portable terminal device 14 can access the data center 12 as long as at least a personal identification ID and a terminal ID for each person are recorded, and thus it is not always necessary to record personal information.

  As described above, the data center 12 receives the personal identification ID from the member store terminal device 11, and generates and records the individual terminal ID that can uniquely identify the portable terminal device 14 with respect to the personal identification ID. To do.

  The individual terminal ID generated in the data center 12 is information in which uniqueness is ensured. By generating the terminal ID for each individual in the data center 12 in this way, the data center 12 uses the quasi-personal information such as the Sim card ID and the telephone number of the portable terminal device 14 as information for identifying the portable terminal device 14. The service can be provided without holding. Thereby, security can be improved.

  Moreover, in the data center 12, a terminal ID for each person is recorded in association with one personal identification ID for each one or a plurality of portable terminal devices 14. Therefore, on the data center 12 side, each portable terminal device 14 used by the user identified by the personal identification ID can be individually identified. That is, the service can be provided by distinguishing each portable terminal device 14 for each user. Thereby, a user's convenience can be improved.

  In addition, the user can access the data center 12 from a plurality of portable terminal devices 14, and convenience can be improved. For example, if the portable terminal device 14 such as the user's spouse is registered, not only the user himself / herself but also the spouse can access the medical history data from the spouse's portable terminal device 14. Become.

<Registration>
When provisional registration is performed as described above, the user subsequently accesses the data center 12 and performs main registration. Hereinafter, a registration request process performed by the portable terminal device 14 and a registration process performed by the data center 12 will be described with reference to the flowchart of FIG.

  In step S61, the browsing control unit 123 of the portable terminal device 14 receives an input of a personal setting terminal code by the user.

  For example, the browsing control unit 123 is displayed on the display unit 116 when the application program for browsing the drug history data, which is recorded in the recording unit 115, is started for the first time or when the web page of the data center 12 is accessed for the first time. Display the personal setting terminal code input screen.

  The input screen displays a text message prompting the user to enter a personal setting terminal code, and the user operates the input unit 113 so that the user can easily memorize numbers, characters, symbols, and the like or combinations thereof. Enter the column as a personalized terminal code. Then, the information corresponding to the user's operation, that is, the input personal setting terminal code is supplied from the input unit 113 to the control unit 114.

  Further, the information management unit 122 reads the personal identification ID and the terminal ID for each individual from the recording unit 115 in accordance with the instruction from the browsing control unit 123. The browsing control unit 123 supplies the read personal identification ID and individual terminal ID and the personal setting terminal code supplied from the input unit 113 to the communication unit 111.

  In step S <b> 62, the communication unit 111 transmits the personal identification ID, the individual terminal ID, and the personal setting terminal code supplied from the browsing control unit 123 to the data center 12 via a communication network such as the communication network 15.

  In step S 71, the communication unit 42 of the data center 12 receives the personal identification ID, the individual terminal ID, and the personal setting terminal code transmitted from the portable terminal device 14 and supplies them to the control unit 43.

  In step S <b> 72, the registration management unit 51 controls the information management unit 53 based on the personal identification ID, the individual terminal ID and the personal setting terminal code supplied from the communication unit 42, and stores the personal setting terminal code in the recording unit 41. Let me record. That is, in the recording unit 41, the personal identification ID and the individual terminal ID that are the same as the received personal identification ID and the individual terminal ID among the recorded personal identification ID and the individual terminal ID are associated with the individual personal ID. The setting terminal code is recorded.

  As a result, the personal identification ID and the personal setting terminal code are recorded in the recording unit 41 in association with the personal identification ID for each portable terminal device 14. The personal identification ID is also recorded in association with the medication history data of the user specified by the personal identification ID. When the personal setting terminal code is recorded in this way, the main registration of the portable terminal device 14 is completed.

  When the main registration is completed, the registration management unit 51 supplies information indicating that the main registration is completed to the communication unit 42 and instructs transmission of the information. The information indicating that the main registration is completed includes a use stop code, that is, a personal setting terminal code and an individual terminal ID.

  In step S <b> 73, the communication unit 42 transmits information indicating that the main registration supplied from the registration management unit 51 is completed to the portable terminal device 14, and the registration process ends.

  In step S <b> 63, the communication unit 111 of the portable terminal device 14 receives the information transmitted from the data center 12 to the effect that the main registration is completed and supplies the information to the control unit 114.

  In step S64, the display control unit 124 supplies the display unit 116 with information such as a use stop code included in the information indicating that the main registration supplied from the communication unit 111 is completed, and displays the registration request. The process ends.

  In this case, for example, a use stop code is displayed on the display unit 116 together with a message indicating that the main registration has been completed, and the use stop code is displayed when the registered mobile terminal device 14 stops using the service. Since it is necessary, a message prompting to refrain from the use stop code is displayed.

  For example, if the registered portable terminal device 14 is a user other than the owner of the IC card 13 such as a spouse, the registered user of the portable terminal device 14 becomes the owner of the IC card 13. If the use stop code is notified, the owner of the IC card 13 can stop using the service in the portable terminal device 14 using the use stop code.

  As described above, the portable terminal device 14 transmits the personal setting terminal code inputted by the user, the personal identification ID and the terminal ID for each individual to the data center 12, and the data center 12 The personal setting terminal code is recorded in association with each terminal ID.

  As described above, by recording the personal setting terminal code in the data center 12 for each portable terminal device 14, the personal setting terminal code is appropriately used for each portable terminal device 14 to obtain the medical history data. The access authority can be managed safely and easily. Thereby, security and convenience can be improved.

  Further, in this information processing system, it is possible to register the same portable terminal device 14 for a plurality of IC cards 13 and to browse the drug history data of each of a plurality of users with one portable terminal device 14. It is.

<About browsing medical history data>
When the main registration is performed by the above processing, the user uploads the drug history data from the portable terminal device 14 to the data center 12 to update the drug history data recorded in the data center 12, or the data center 12 You can download and view medication history data recorded in

  Hereinafter, with reference to the flowchart of FIG. 8, a browsing process performed by the portable terminal device 14 and a provision process performed by the data center 12 performed when browsing the medical history data will be described.

  In step S101, the communication unit 111 transmits a personal identification ID, a terminal ID for each individual, and a medication history data transmission request to the data center 12 via the communication network 15 or the like.

  Specifically, when the user operates the input unit 113 of the portable terminal device 14 to instruct browsing of medicine history data, the browsing control unit 123 responds to information supplied from the input unit 113 by the user's operation. Then, a transmission request for requesting transmission of drug history data is generated. In addition, the browsing control unit 123 controls the information management unit 122 to read out the personal identification ID and the individual terminal ID from the recording unit 115.

  Then, the browsing control unit 123 supplies the personal identification ID, the individual terminal ID, and the transmission request to the communication unit 111, and sends the personal identification ID, the individual terminal ID, and the transmission request to the data center 12. Send it.

  In step S <b> 111, the communication unit 42 of the data center 12 receives the personal identification ID and the individual terminal ID and the transmission request transmitted from the portable terminal device 14 and supplies them to the control unit 43.

  In step S112, the information management unit 53 records the medical history data associated with the personal identification ID and the individual terminal ID received by the communication unit 42 in response to the transmission request supplied from the communication unit 42. Read from 41. The information management unit 53 supplies the read medicine history data to the communication unit 42.

  More specifically, an authentication process is performed between the portable terminal device 14 and the data center 12 as needed when browsing the medical history data. For example, whether or not the portable terminal device 14 has an access authority to the drug history data is authenticated by a hash calculation using a terminal ID for each individual and a personal identification ID.

  In step S113, the communication unit 42 transmits the medicine history data supplied from the information management unit 53 to the portable terminal device 14 via the communication network 15 or the like, and the providing process ends.

  In step S <b> 102, the communication unit 111 of the portable terminal device 14 receives the drug history data transmitted from the data center 12 and supplies it to the control unit 114. The display control unit 124 supplies the drug history data supplied from the communication unit 111 to the display unit 116 and controls the display of the drug history data.

  In step S103, the display unit 116 displays the medicine history data supplied from the display control unit 124, and the browsing process ends. When the medication history data is displayed on the display unit 116 in this way, the user browses the medication history data or adds information to the medication history data.

  As described above, the portable terminal device 14 receives drug history data using the recorded personal identification ID and individual terminal ID, and displays the received drug history data. In this way, in the data center 12, by managing the access to the medical history data using the personal identification ID and the terminal ID for each individual, the medical history data and the like are browsed for each of the plurality of portable terminal devices 14. You can manage access to data. Thereby, browsing of medical history data can be permitted easily and safely. That is, security and convenience can be improved.

<Deletion of personal setting terminal code and individual terminal ID>
By the way, for some reason such as the loss or replacement of the portable terminal device 14 registered by the user, permission to view the medication history data by the registered portable terminal device 14, that is, the authority to access the medication history data is invalidated. Sometimes you want to

  In such a case, the user deletes the personal setting terminal code and the individual terminal ID by using the registered portable terminal device 14 or the member store terminal device 11 so that the medical history data cannot be viewed from the portable terminal device 14. be able to. Hereinafter, processing performed in such a case will be described.

  First, the deletion request processing by the member store terminal device 11 and the deletion processing by the data center 12 will be described with reference to the flowchart of FIG.

  For example, in the case where the process of the flowchart of FIG. 9 is performed, the owner of the IC card 13 permits the portable terminal device 14 owned by the wife or the like of the person to use the service related to the IC card 13. Then, you may want to stop using the service. In such a case, the user goes to the service member store in which the member store terminal device 11 is installed, tells the user that the access authority of the registered portable terminal device 14 is to be invalidated, and possesses the IC card 13 possessed. Is held over the member store terminal device 11.

  Then, in step S <b> 141, the information identification reader 81 of the member store terminal device 11 performs contactless communication with the IC card 13, acquires a personal identification ID and personal information from the IC card 13, and supplies them to the control unit 85. If the user has lost the IC card 13 or the like, the member store terminal device 11 may acquire the personal identification ID from the data center 12.

  The control unit 85 supplies personal information to the display unit 84 for display as necessary, and a pharmacist or the like appropriately performs identity verification using the displayed personal information.

  In addition, the request processing unit 92 supplies the personal identification ID and a request for transmitting a list of use suspension codes to the communication unit 82 and instructs transmission to the data center 12.

  In step S <b> 142, the communication unit 82 transmits the personal identification ID supplied from the request processing unit 92 and the transmission request for the list of use suspension codes to the data center 12 via the communication network 15.

  Then, in step S 151, the communication unit 42 of the data center 12 receives the personal identification ID transmitted from the member store terminal device 11 and the transmission request for the list of use suspension codes and supplies the received request to the control unit 43.

  The registration management unit 51 of the control unit 43 controls the information management unit 53 in response to the received transmission request, and from the recording unit 41, all the use stop codes associated with the received personal identification ID, that is, The personal setting terminal code and the terminal ID for each individual are read out, and a list of their use stop codes is generated. Then, the registration management unit 51 supplies the generated list to the communication unit 42.

  In step S <b> 152, the communication unit 42 transmits a list of use suspension codes supplied from the registration management unit 51 to the member store terminal device 11 via the communication network 15.

  In step S <b> 143, the communication unit 82 of the member store terminal device 11 receives the list of use stop codes transmitted from the data center 12 and supplies the list to the control unit 85.

  In step S <b> 144, the control unit 85 supplies the display unit 84 with a list of use stop codes supplied from the communication unit 82 and displays the list.

  When the list of use suspension codes is displayed in this way, the user operates the input unit 83 to select one of the portable terminal devices 14 that the user wants to stop using the service from among the use suspension codes. .

  The list of use suspension codes displayed in this way includes personal setting terminal codes input by the user or the like, and the personal setting terminal code should normally be information that can be easily remembered by the user or the like. . Therefore, the user can easily and reliably specify the portable terminal device 14 that he / she wants to stop using the service by using the personal setting terminal code as a hint.

  For example, when only the personal setting terminal code is displayed as the use stop code, when the same personal setting terminal code is set for a plurality of different portable terminal devices 14, each portable terminal device 14 is distinguished. I can't. However, in the present technology, the portable terminal device 14 can be reliably specified by using the combination of the personal setting terminal code and the terminal ID for each individual as the use stop code.

  When the use stop code, that is, the portable terminal device 14 is selected by the user, the control unit 85 acquires information corresponding to the user operation from the input unit 83, that is, information indicating the selected use stop code. Then, the request processing unit 92 supplies the communication unit 82 with the personal identification ID acquired in step S141, the use stop code selected by the user, and a deletion request for requesting deletion of information related to the portable terminal device 14. To do.

  In step S <b> 145, the communication unit 82 transmits a personal identification ID, a use stop code, and a deletion request to the data center 12 via the communication network 15.

  In step S <b> 153, the communication unit 42 of the data center 12 receives the personal identification ID and the use stop code transmitted from the member store terminal device 11 and the deletion request and supplies them to the control unit 43.

  In step S154, the registration management unit 51 deletes the terminal ID for each individual and the personal setting terminal code based on the personal identification ID and use stop code supplied from the communication unit 42 and the deletion request.

  That is, according to the deletion request, the registration management unit 51 receives the individual terminal ID and the individual used as the received use stop code among the individual terminal ID and the personal setting terminal code associated with the received personal identification ID. The information management unit 53 is instructed to delete the set terminal code, and the individual terminal ID and the personal set terminal code recorded in the recording unit 41 are deleted. When the individual terminal ID and the personal setting terminal code are deleted in this way, the portable terminal device 14 specified by the individual terminal ID cannot access the medical history data.

  When the terminal ID for each individual and the personal setting terminal code are deleted, the registration management unit 51 supplies information indicating that the deletion is completed to the communication unit 42. For example, the information indicating that the deletion has been completed includes a use stop code of the portable terminal device 14 in which the use of the service is stopped, that is, the access authority is invalidated.

  In step S155, the communication unit 42 transmits information indicating that the deletion is completed, supplied from the registration management unit 51, to the member store terminal device 11 via the communication network 15, and the deletion process ends.

  In step S 146, the communication unit 82 of the member store terminal apparatus 11 receives the information transmitted from the data center 12 to the effect that the deletion has been completed and supplies the information to the control unit 85. The control unit 85 supplies the information supplied from the communication unit 82 to the display unit 84 for display, and the deletion request process ends. When the use stop code of the portable terminal device 14 whose use of the service is stopped is displayed on the display unit 84 as the received information, the user or the like correctly deletes the terminal ID for each individual and the personal setting terminal code. Can be confirmed.

  As described above, the member store terminal device 11 transmits the personal identification ID read from the IC card 13 and the use stop code selected by the user to the data center 12, and the terminal ID for each individual and the personal setting terminal code. To delete.

  Thus, by deleting the individual terminal ID and the personal setting terminal code using the personal identification ID and the use stop code, even when the user does not have the portable terminal device 14, the individual terminal ID and The personal setting terminal code can be deleted. Thereby, security and convenience can be improved.

  Here, an example has been described in which the user selects a desired use stop code from the use stop codes displayed in a list, but the user directly operates the input unit 83 to store the stored use stop codes. You may make it input. In such a case, the communication unit 82 transmits the use stop code input by the user, the personal identification ID, and the deletion request to the data center 12. Furthermore, the use of the service may be stopped when the user inputs the personal setting terminal code.

  Further, the user can delete the terminal ID for each individual and the personal setting terminal code by operating the portable terminal device 14 without going to the service member store. In such a case, the process shown in FIG. 10 is performed. Hereinafter, the deletion request process performed by the portable terminal device 14 and the deletion process performed by the data center 12 will be described with reference to the flowchart of FIG.

  First, the user operates the portable terminal device 14 to which the individual terminal ID to be deleted is assigned, and instructs the deletion of the individual terminal ID and the personal setting terminal code.

  Then, in step S181, the communication unit 111 transmits the personal identification ID, the terminal ID for each individual, and the deletion request to the data center 12 via the communication network 15 or the like.

  That is, the browsing control unit 123 controls the information management unit 122 according to the user's instruction to read out the personal identification ID and the individual terminal ID from the recording unit 115, and the individual terminal ID and the personal setting terminal code. A deletion request for requesting deletion of is generated. In other words, a deletion request for requesting invalidation of access authority to data based on the personal identification ID and the terminal ID for each individual is generated.

  The browsing control unit 123 supplies the personal identification ID, the individual terminal ID, and the deletion request to the communication unit 111, and the communication unit 111 supplies the personal identification ID, the individual terminal ID, and the deletion request supplied from the browsing control unit 123. And send.

  In step S <b> 191, the communication unit 42 of the data center 12 receives the personal identification ID, the individual terminal ID and the deletion request transmitted from the portable terminal device 14 and supplies them to the control unit 43.

  In step S 192, the registration management unit 51 deletes the individual terminal ID and the personal setting terminal code based on the personal identification ID, the individual terminal ID, and the deletion request supplied from the communication unit 42.

  That is, the registration management unit 51 instructs the information management unit 53 to delete the received individual terminal ID and the received personal identification ID and the personal setting terminal code associated with the individual terminal ID according to the deletion request. To do. The information management unit 53 deletes the individual terminal ID and the personal setting terminal code recorded in the recording unit 41 according to the instruction of the registration management unit 51. When the individual terminal ID and the personal setting terminal code are deleted in this way, the portable terminal device 14 specified by the individual terminal ID cannot access the medical history data.

  When the terminal ID for each individual and the personal setting terminal code are deleted, the registration management unit 51 supplies information indicating that the deletion is completed to the communication unit 42. The information indicating that the deletion has been completed may include a stop use code of the portable terminal device 14 whose use has been stopped as necessary, that is, a personal setting terminal code and a terminal ID for each individual.

  In step S193, the communication unit 42 transmits information indicating that the deletion has been completed supplied from the registration management unit 51 to the portable terminal device 14 via the communication network 15, and the deletion process ends.

  In step S <b> 182, the communication unit 111 of the portable terminal device 14 receives information indicating that the deletion has been completed transmitted from the data center 12 and supplies the information to the control unit 114. The display control unit 124 supplies the information supplied from the communication unit 111 to the display unit 116 for display, and the deletion request process ends. When the received information is displayed on the display unit 116, the user can confirm that the terminal ID for each individual and the personal setting terminal code have been deleted. In particular, when the use stop code is displayed, the user can know the mobile terminal device 14 whose use of the service has been stopped more reliably.

  As described above, the portable terminal device 14 transmits the recorded personal identification ID and personal terminal ID to the data center 12, and deletes the personal terminal ID and personal setting terminal code. In this way, when operating the portable terminal device 14 to be deleted and instructing the deletion of the terminal ID for each individual and the personal setting terminal code, the user can easily input each individual without inputting the use stop code. The terminal ID and personal setting terminal code can be deleted. Thereby, security and convenience can be improved.

  In this case as well, the use stop code input by the user may be transmitted to the data center 12 together with the personal identification ID, and the terminal ID for each individual and the personal setting terminal code may be deleted.

<Second Embodiment>
<Registration>
Furthermore, in the above, it has been explained that the main registration is completed when the personal setting terminal code is recorded. However, in order to further improve the security, if the main registration is not performed within a certain period after provisional registration, The terminal ID may be invalidated.

  In such a case, for example, the registration time limit shown in FIG. 11 is recorded in the recording unit 41 of the data center 12. In FIG. 11, the description of portions corresponding to those in FIG. 3 is omitted as appropriate.

  In the database shown in FIG. 11, a registration time limit is further recorded in association with each individual identification ID in the database shown in FIG. This registration deadline indicates the deadline for validating the individual terminal ID issued in the provisional registration, and if the user does not complete the registration by the date indicated in the registration deadline, the issued individual terminal ID Cannot be accessed using. For example, the registration deadline is a fixed period such as one month from the date when the provisional registration is completed. When the main registration is completed, the registration deadline field is rewritten with information indicating that the registration has been completed.

  In the example of FIG. 11, for example, for each individual terminal ID “1” associated with the personal identification ID “ab02”, the main registration is completed and registered within the registration time limit. On the other hand, for example, the individual terminal ID “2” associated with the personal identification ID “ab02” has been provisionally registered, but the main registration has not yet been performed, and the registration deadline of the main registration is “2005 / 3/2 ". This registration time limit is recorded, for example, in association with the personal identification ID and the individual terminal ID at the time of temporary registration. In this example, the personal setting terminal code is not yet recorded for the terminal ID “2” for each person associated with the personal identification ID “ab02”.

  In this way, after the provisional registration, when the regular registration must be performed within a certain period, the provisional registration process described with reference to FIG. 6 shows the registration time limit when the individual terminal ID is recorded in step S23. Is also recorded. That is, the registration management unit 51 of the data center 12 generates a registration time limit according to the current date and time, and the information management unit 53 supplies the registration time limit to the recording unit 41 according to an instruction from the registration management unit 51 for recording. . In such a case, the generated registration deadline may be transmitted to the member store terminal device 11 and displayed on the member store terminal device 11 or the portable terminal device 14.

  In addition, when the main registration must be performed within a certain period after the temporary registration, for example, the process shown in FIG. 12 is performed at the time of the main registration. Hereinafter, the registration request process by the portable terminal device 14 and the registration process by the data center 12 will be described with reference to the flowchart of FIG. In addition, since the process of step S221, step S222, and step S231 is the same as that of step S61 of FIG. 7, step S62, and step S71, the description is abbreviate | omitted.

  In step S232, the registration management unit 51 determines whether or not the registration deadline has passed for the portable terminal device 14 for which registration is requested. Specifically, the registration management unit 51 sets the registration deadline when the current date and time has passed the registration deadline recorded in the recording unit 41 in association with the received personal identification ID and individual terminal ID. It is determined that it has passed.

  If it is determined in step S232 that the registration deadline has not passed, then the processing of step S233 and step S234 is performed and the registration processing ends, but these processing are the same as the processing of step S72 and step S73 of FIG. Since it is the same, the description is abbreviate | omitted.

  On the other hand, if it is determined in step S232 that the registration deadline has passed, the registration management unit 51 supplies the communication unit 42 with information indicating that the registration failed because the registration deadline has been exceeded. The transmission of the information is instructed, and the process proceeds to step S235.

  In step S <b> 235, the communication unit 42 transmits information indicating that the main registration failed supplied from the registration management unit 51 to the portable terminal device 14, and the registration process ends.

  Further, when the process of step S234 or step S235 is performed, in step S223, the communication unit 111 of the portable terminal device 14 receives the information transmitted from the data center 12 and supplies the information to the control unit 114.

  In step S224, the display control unit 124 supplies the information supplied from the communication unit 111 to the display unit 116 for display, and the registration request process ends. In this case, the display unit 116 displays information indicating that the main registration has been completed or information indicating that the main registration has failed. Further, when information indicating that the main registration has been completed is displayed, a use stop code included in the information received from the data center 12 is also displayed.

  As described above, the data center 12 determines whether or not to permit the main registration based on the registration time limit, and performs the main registration according to the determination result. By providing the registration time limit in this way, it becomes possible to further improve the security.

<Third Embodiment>
<About expiration date of terminal ID for each individual>
Moreover, in order to improve security, you may make it provide the expiration date of terminal ID for every individual. In such a case, for example, the expiration date shown in FIG. 13 is recorded in the recording unit 41 of the data center 12. In FIG. 13, description of portions corresponding to those in FIG. 3 is omitted as appropriate.

  In the database shown in FIG. 13, the expiration date of each individual terminal ID is recorded in association with each individual identification ID in the database shown in FIG. 3 for each individual terminal ID. This expiry date indicates the expiry date by which the medical history data can be accessed using the issued individual terminal ID. When the expiry date has passed, the individual terminal ID accesses the medical history data. I can't do that. For example, the expiration date is a fixed period such as 5 years from the date of completion of the main registration. The expiration date of the terminal ID for each person may be updated as appropriate.

  In FIG. 13, for example, the expiration date of the terminal ID “1” for each person associated with the personal identification ID “ab01” is “2005/2/12”.

  As described above, when the individual terminal ID is valid for a certain period after the main registration, in the registration process described with reference to FIG. 7, when the personal setting terminal code is recorded in step S72, the expiration date is also set. To be recorded. That is, the registration management unit 51 of the data center 12 generates an expiration date according to the current date and time, and the information management unit 53 supplies the expiration date to the recording unit 41 in accordance with an instruction from the registration management unit 51 for recording. . In such a case, the expiration date may be included in the information transmitted in step S73 indicating that the main registration is completed, and the expiration date may be displayed on the portable terminal device 14 in step S64. .

  When an expiration date is set for each individual terminal ID, for example, the process shown in FIG. 14 is performed when browsing the medical history data. Hereinafter, the browsing process by the portable terminal device 14 and the providing process by the data center 12 will be described with reference to the flowchart of FIG. In addition, since the process of step S261 and step S271 is the same as the process of step S101 of FIG. 8, and step S111, the description is abbreviate | omitted.

  In step S272, the information management unit 53 is requested based on the received personal identification ID and personal terminal ID whether or not the expiration date of the personal terminal ID associated with the personal identification ID has passed. Judgment is made on whether or not to allow viewing of the medication history data. For example, if the current date has passed the expiration date recorded in the recording unit 41 in association with the received personal identification ID and individual terminal ID, it is determined that the expiration date has passed.

  If it is determined in step S272 that the expiration date has not passed, then the processing of step S273 and step S274 is performed, and the providing process ends. Since these processes are the same as the processes in steps S112 and S113 in FIG. 8, the description thereof is omitted.

  On the other hand, if it is determined in step S272 that the expiration date has passed, the information management unit 53 supplies the communication unit 42 with information indicating that the user has no viewing authority because the expiration date has expired, and transmits the information. And the process proceeds to step S275.

  In step S275, the communication unit 42 transmits information indicating that there is no viewing authority supplied from the information management unit 53 to the portable terminal device 14, and the providing process ends.

  In addition, when the process of step S274 or step S275 is performed, in step S262, the communication unit 111 of the portable terminal device 14 determines whether or not medicine history data has been transmitted.

  If it is determined in step S262 that the medication history data has been transmitted, then the processing of step S263 and step S264 is performed, and the browsing process ends. Since these processes are the same as the processes in steps S102 and S103 in FIG. 8, the description thereof is omitted.

  On the other hand, if it is determined in step S262 that no medication history data has been transmitted, information indicating that the user has no viewing authority is transmitted from the data center 12, so that the process of step S265 is performed. Is called.

  That is, in step S <b> 265, the communication unit 111 receives the information indicating that there is no viewing authority transmitted from the data center 12 and supplies the information to the control unit 114. Then, the display control unit 124 supplies the information supplied from the communication unit 111 to the display unit 116 for display, and the browsing process ends. In this case, information indicating that there is no viewing authority is displayed on the display unit 116.

  As described above, the data center 12 determines whether to permit browsing of the drug history data based on the expiration date of the terminal ID for each individual, and transmits the drug history data according to the determination result. Thus, by providing an expiration date for each individual terminal ID, unauthorized access can be prevented and security can be further improved.

<Fourth embodiment>
<About service suspension>
Further, in the example described above, the personal setting terminal code is auxiliary information for allowing the user to easily grasp which portable terminal device 14 the use of is to be stopped, that is, It was included in the suspension code as hint information. However, the personal setting terminal code is not always easy to remember for a user other than the person who has input the personal setting terminal code.

  Therefore, information regarding registration of the portable terminal device 14 is provided as auxiliary information for enabling the desired portable terminal device 14 to be specified more easily and reliably when the service use suspension operation is performed. May be recorded on the data center 12 side.

  Here, the information related to registration is not personal information of the user such as the birth year and sex of the user who owns the registered portable terminal device 14, and the relationship with the owner of the IC card 13, but for identifying the user. It may be personal identification auxiliary information that is auxiliary (hint). Moreover, the information regarding registration may be information indicating the registration date of the portable terminal device 14 or information indicating a store such as a pharmacy that has performed registration.

  The information related to the registration recorded on the data center 12 side may be any auxiliary information as long as it is auxiliary information for specifying the desired portable terminal device 14. An example in which the year of birth and gender are used will be described.

  In such a case, the year of birth and gender are recorded in the recording unit 41 of the data center 12 as shown in FIG. 15, for example. In FIG. 15, the description of portions corresponding to those in FIG. 3 is omitted as appropriate.

  In the database shown in FIG. 15, for each individual identification ID in the database shown in FIG. 3, for each individual terminal ID, the year of birth and sex of the owner of the portable terminal device 14 specified by the individual terminal ID Is recorded.

  These birth years and gender are not personal information because they cannot identify individuals by themselves, but those who know the owner of the portable terminal device 14, such as the owner of the IC card 13, This is information serving as a hint (auxiliary) when specifying the type terminal device 14.

<Registration>
In this way, when the year of birth and gender are recorded in association with the terminal ID for each individual, the process shown in FIG. Hereinafter, the registration request process by the portable terminal device 14 and the registration process by the data center 12 will be described with reference to the flowchart of FIG.

  In step S301, the browsing control unit 123 of the portable terminal device 14 receives an input of a personal setting terminal code, a birth year, and sex by the user.

  For example, the user who is the owner of the portable terminal device 14 who intends to perform the main registration operates the input unit 113 to input the personal setting terminal code, his / her year of birth and gender. Then, information corresponding to a user operation is supplied from the input unit 113 to the control unit 114.

  Further, the information management unit 122 reads the personal identification ID and the terminal ID for each individual from the recording unit 115 in accordance with the instruction from the browsing control unit 123. The browsing control unit 123 supplies the communication unit 111 with the read personal identification ID and individual terminal ID, and the personal setting terminal code, year of birth, and gender supplied from the input unit 113.

  In step S <b> 302, the communication unit 111 sets the personal identification ID, the individual terminal ID, the personal setting terminal code, the birth year, and the sex supplied from the browsing control unit 123 via the communication network such as the communication network 15. Send to.

  In step S 311, the communication unit 42 of the data center 12 receives the personal identification ID, the individual terminal ID, the personal setting terminal code, the birth year, and the sex transmitted from the portable terminal device 14, and sends them to the control unit 43. Supply.

  In step S <b> 312, the registration management unit 51 controls the information management unit 53 based on the personal identification ID, the individual terminal ID, the personal setting terminal code, the birth year, and the gender supplied from the communication unit 42. Record personalized terminal code, year of birth, and gender. That is, in the recording unit 41, the personal identification ID and the individual terminal ID that are the same as the received personal identification ID and the individual terminal ID among the recorded personal identification ID and the individual terminal ID are associated with the individual personal ID. Setting terminal code, year of birth, and gender are recorded.

  Thereby, in the recording unit 41, the individual terminal ID, the personal setting terminal code, the year of birth, and the sex are recorded in association with the personal identification ID for each portable terminal device 14. When the personal setting terminal code, the year of birth, and the sex are recorded in this way, the main registration of the portable terminal device 14 is completed.

  When the main registration is completed, the process of step S313 is performed by the data center 12 to complete the registration process. Further, in the portable terminal device 14, the processes of step S303 and step S304 are performed and the registration request process is completed. To do. Note that the processing in step S313, step S303, and step S304 is the same as the processing in step S73, step S63, and step S64 in FIG.

  For example, in step S304, the use stop code is displayed on the display unit 116 of the portable terminal device 14, but the registered birth year and gender may be displayed together with the use stop code.

  As described above, the portable terminal device 14 transmits the personal setting terminal code, the year of birth, and the gender, the personal identification ID and the individual terminal ID input by the user to the data center 12, and the data center 12 The personal setting terminal code, year of birth, and gender are recorded in association with the terminal ID for each individual.

  Thus, by recording the personal setting terminal code, the year of birth, and the sex in the data center 12 for each portable terminal device 14, it is easier when the user selects a specific portable terminal device 14. In addition, a desired portable terminal device 14 can be selected with certainty.

<Deletion of personal setting terminal code and individual terminal ID>
Further, when the personal setting terminal code, the year of birth, and the sex are recorded in the data center 12 for each portable terminal device 14 in this way, the use of the service by the specific portable terminal device 14, that is, the access authority When invalidating is performed, the processing shown in FIG. 17 is performed. Hereinafter, the deletion request processing by the member store terminal device 11 and the deletion processing by the data center 12 will be described with reference to the flowchart of FIG.

  Note that the processing in step S341 is the same as the processing in step S141 in FIG.

  When the personal identification ID is acquired in step S341, the request processing unit 92 supplies the personal identification ID and a request for transmission of the list of the use stop code, the year of birth, and the sex to the communication unit 82, and sends them to the data center 12. Instruct to send.

  In step S <b> 342, the communication unit 82 transmits the personal identification ID supplied from the request processing unit 92 and a request for transmission of a list of use stop codes, birth years, and genders to the data center 12 via the communication network 15. .

  Then, in step S351, the communication unit 42 of the data center 12 receives the personal identification ID transmitted from the member store terminal device 11 and the transmission request for the list of the use stop code, the year of birth, and the sex, and controls the control unit. 43.

  In response to the received transmission request, the registration management unit 51 of the control unit 43 reads from the recording unit 41 all the use stop codes, the year of birth, and the gender associated with the received personal identification ID, Generate a list of those suspension codes, birth years, and genders. Then, the registration management unit 51 supplies the generated list to the communication unit 42.

  In step S <b> 352, the communication unit 42 transmits the use suspension code, the year of birth, and the gender list supplied from the registration management unit 51 to the member store terminal device 11 via the communication network 15.

  In step S <b> 343, the communication unit 82 of the member store terminal apparatus 11 receives the use stop code, the year of birth, and the gender list transmitted from the data center 12 and supplies them to the control unit 85.

  In step S <b> 344, the control unit 85 supplies the display unit 84 with the use suspension code, the year of birth, and the sex list supplied from the communication unit 82, and displays them.

  When the list of the use stop code, the year of birth, and the sex is displayed in this way, the processing of step S345 and step S346 is thereafter performed, the deletion request processing is ended, and the processing of steps S353 to S355 is performed. Then, the deletion process ends. Note that the processing in these steps S345, S346, and steps S353 to S355 is the same as the processing in steps S145, S146, and steps S153 to S155 in FIG.

  However, in step S354, in addition to the terminal ID for each individual and the personal setting terminal code, the year of birth and gender are also deleted. Further, the data center 12 is requested to stop using the service for the portable terminal device 14 specified by the use stop code, the year of birth, and the gender selected from the displayed list. That is, the individual terminal ID and the personal identification ID of the portable terminal device 14 are transmitted to the data center 12.

  As described above, when the year of birth and gender are displayed in a list together with the use stop code, the year of birth and gender become auxiliary information for selecting the correct portable terminal device 14. Thereby, the user can specify easily and reliably the portable terminal device 14 which wants to stop use of a service. In the process of step S346, the year of birth and gender may be displayed together with the use stop code.

  In the above description, the example in which the individual user is specified by the personal identification ID of the IC card 13 issued by the cloud service provider has been described. However, if it is guaranteed that the personal identification ID for identifying the user is unique, it is possible to construct a similar information processing system based on the unique ID number assigned by the service member store.

  By the way, the above-described series of processing can be executed by hardware or can be executed by software. When a series of processing is executed by software, a program constituting the software is installed in the computer. Here, the computer includes, for example, a general-purpose computer capable of executing various functions by installing a computer incorporated in dedicated hardware and various programs.

  FIG. 18 is a block diagram illustrating a configuration example of hardware of a computer that executes the above-described series of processing by a program.

  In a computer, a CPU (Central Processing Unit) 501, a ROM (Read Only Memory) 502, and a RAM (Random Access Memory) 503 are connected to each other by a bus 504.

  An input / output interface 505 is further connected to the bus 504. An input unit 506, an output unit 507, a recording unit 508, a communication unit 509, and a drive 510 are connected to the input / output interface 505.

  The input unit 506 includes a keyboard, a mouse, a microphone, an image sensor, and the like. The output unit 507 includes a display, a speaker, and the like. The recording unit 508 includes a hard disk, a nonvolatile memory, and the like. The communication unit 509 includes a network interface or the like. The drive 510 drives a removable medium 511 such as a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory.

  In the computer configured as described above, the CPU 501 loads the program recorded in the recording unit 508 to the RAM 503 via the input / output interface 505 and the bus 504 and executes the program, for example. Is performed.

  A program executed by the computer (CPU 501) can be provided by being recorded on a removable medium 511 as a package medium, for example. The program can be provided via a wired or wireless transmission medium such as a local area network, the Internet, or digital satellite broadcasting.

  In the computer, the program can be installed in the recording unit 508 via the input / output interface 505 by attaching the removable medium 511 to the drive 510. Further, the program can be received by the communication unit 509 via a wired or wireless transmission medium and installed in the recording unit 508. In addition, the program can be installed in advance in the ROM 502 or the recording unit 508.

  The program executed by the computer may be a program that is processed in time series in the order described in this specification, or in parallel or at a necessary timing such as when a call is made. It may be a program for processing.

  The embodiments of the present technology are not limited to the above-described embodiments, and various modifications can be made without departing from the gist of the present technology.

  For example, the present technology can take a configuration of cloud computing in which one function is shared by a plurality of devices via a network and is jointly processed.

  In addition, each step described in the above flowchart can be executed by being shared by a plurality of apparatuses in addition to being executed by one apparatus.

  Further, when a plurality of processes are included in one step, the plurality of processes included in the one step can be executed by being shared by a plurality of apparatuses in addition to being executed by one apparatus.

  Moreover, the effect described in this specification is an illustration to the last, and is not limited, There may exist another effect.

  DESCRIPTION OF SYMBOLS 11 Merchant terminal device, 12 Data center, 13 IC card, 14 Portable terminal device, 42 Communication part, 51 Registration management part, 52 Generation part, 53 Information management part, 81 Information identification reader, 82 Communication part, 91 Code generation Unit, 92 request processing unit, 111 communication unit, 112 short-range communication unit, 115 recording unit, 121 decoding unit, 122 information management unit, 123 browsing control unit, 124 display control unit

Claims (23)

A communication unit for receiving and transmitting information;
A recording unit that records drug history information in association with personal identification information;
A control unit,
When the control unit receives a registration request for information of an access source used when accessing the personal identification information and the drug history information associated with the personal identification information by the communication unit,
Generating access source identification information for identifying the access source;
The access source identification information is recorded in the recording unit in association with the personal identification information,
A medicine history management apparatus that controls the communication unit to transmit the access source identification information. The control unit, when the communication unit receives the personal identification information and the access source identification information, and a transmission request for the drug history information from the access source,
The medicine history management device according to claim 1, wherein the communication unit controls the medicine history information associated with the personal identification information and the access source identification information to be transmitted to the access source. The control unit, when the communication unit receives the personal identification information and the access source identification information, and a request to invalidate access to the drug history information,
The medication history management device according to claim 1, wherein control is performed so as to invalidate access to the medication history information by the access source identified by the received access source identification information. The recording unit further records auxiliary information related to registration of the access source information identified by the access source identification information in association with the personal identification information and the access source identification information,
When the control unit receives the personal identification information, the access source identification information associated with the personal identification information, and the transmission request for the auxiliary information by the communication unit,
The medicine history management apparatus according to claim 1, wherein the communication unit is controlled to transmit the access source identification information and the auxiliary information. The medicine history management device according to claim 4, wherein the auxiliary information is a character string input at the access source. The medicine history management device according to claim 4, wherein the auxiliary information is at least one of a birth year, a gender, or a relationship with a user of an owner of the access source device. The medicine history management device according to claim 1, wherein the recording unit further records an expiration date of the access source identification information or an expiration date of validation of the access source identification information. A communication unit for receiving and transmitting information;
A recording unit that records drug history information in association with personal identification information;
A drug history management method of a drug history management device having a control unit,
When the control unit receives a registration request for access source information used when accessing the personal identification information and the drug history information associated with the personal identification information by the communication unit,
Generating access source identification information for identifying the access source;
The access source identification information is recorded in the recording unit in association with the personal identification information,
The medicine history management method including the step of controlling the communication unit to transmit the access source identification information by the communication unit. A communication unit for receiving and transmitting information;
A computer that controls a drug history management device having a recording unit that records drug history information in association with personal identification information,
When the communication unit receives a registration request for access source information used when accessing the personal identification information and the drug history information associated with the personal identification information,
Generating access source identification information for identifying the access source;
The access source identification information is recorded in the recording unit in association with the personal identification information,
A program for executing processing including a step of controlling the communication unit to transmit the access source identification information. An information processing apparatus that accesses drug history information associated with personal identification information,
A near field communication unit that transmits and receives information using near field communication;
A recording unit for recording information;
A control unit,
When the control unit acquires the personal identification information and the access source identification information for identifying the access source by the short-range communication unit, the control unit associates the access source identification information with the personal identification information and records the access source identification information in the recording unit. An information processing device that controls to record on the computer. The information processing apparatus further includes a communication unit that transmits and receives information;
A display unit,
The controller is
The communication unit transmits the personal identification information and the access source identification information, and a transmission request for drug history information to the drug history management device,
When the communication unit receives the medication history information associated with the personal identification information and the access source identification information in response to the transmission request,
The information processing apparatus according to claim 10, wherein the medicine history information is controlled to be displayed on the display unit. Access the medication history information associated with the personal identification information,
A near field communication unit that transmits and receives information using near field communication;
A recording unit for recording information;
An information processing method for an information processing apparatus having a control unit,
When the control unit obtains the personal identification information and the access source identification information for identifying the access source by the short-range communication unit, the access source identification information is associated with the personal identification information and the recording unit An information processing method including a step of controlling recording. Access the medication history information associated with the personal identification information,
A near field communication unit that transmits and receives information using near field communication;
A computer for controlling an information processing apparatus having a recording unit for recording information;
Control is performed to record the access source identification information in the recording unit in association with the personal identification information when the personal identification information and the access source identification information for identifying the access source are acquired by the short-range communication unit. A program that executes processing including steps. An acquisition unit for acquiring personal identification information;
A communication unit for transmitting and receiving information;
A display unit;
A control unit,
The controller is
By the communication unit, the personal identification information and a request to access the drug history information associated with the personal identification information are transmitted to the drug history management device,
When the communication unit receives access source identification information generated by the drug history management device in response to transmission of the personal identification information,
An information processing apparatus that controls to display the access source identification information on the display unit. The control unit uses the communication unit to access the personal identification information, the access source identification information, and the medication history information associated with the personal identification information by the access source identified by the access source identification information. The information processing apparatus according to claim 14, wherein control is performed so as to further transmit a request for invalidating access. The controller is
When the communication unit receives the access source identification information and auxiliary information associated with the personal identification information from the drug history management device,
The information processing apparatus according to claim 14, wherein the communication unit controls to transmit a request for invalidating access of an access source specified by the access source identification information and the auxiliary information. An acquisition unit for acquiring personal identification information;
A communication unit for transmitting and receiving information;
A display unit;
An information processing method for an information processing apparatus having a control unit,
The control unit is
By the communication unit, the personal identification information and a request to access the drug history information associated with the personal identification information are transmitted to the drug history management device,
When the communication unit receives access source identification information generated by the drug history management device in response to transmission of the personal identification information,
An information processing method including a step of controlling to display the access source identification information on the display unit. An acquisition unit for acquiring personal identification information;
A communication unit for transmitting and receiving information;
A computer for controlling an information processing apparatus having a display unit;
By the communication unit, the personal identification information and a request to access the drug history information associated with the personal identification information are transmitted to the drug history management device,
When the communication unit receives access source identification information generated by the drug history management device in response to transmission of the personal identification information,
A program for executing processing including a step of controlling to display the access source identification information on the display unit. A communication unit for receiving and transmitting information;
A recording unit that records information about the user in association with personal identification information;
A control unit,
When the control unit receives a registration request for the terminal device used when accessing the personal identification information and information about the user associated with the personal identification information by the communication unit,
Generating terminal identification information for identifying the terminal device;
Recording the terminal identification information in the recording unit in association with the personal identification information;
An information management apparatus that controls the communication unit to transmit the terminal identification information. The information management apparatus according to claim 19, wherein the information related to the user is information related to a medicine purchased by the user or drug history information of the user. The information management apparatus according to claim 19, wherein the information related to the user is information related to the health of the user. When the control unit receives the personal identification information and the terminal identification information and a transmission request for information about the user from the terminal device, the communication unit,
The information management device according to claim 19, wherein the communication unit controls the personal identification information and the information related to the user associated with the terminal identification information to be transmitted to the terminal device. A communication unit for receiving and transmitting information;
A recording unit that records information about the user in association with personal identification information;
A control unit,
When the control unit receives a registration request for access source information used when accessing the personal identification information and information about the user associated with the personal identification information by the communication unit,
Generating access source identification information for identifying the access source;
The access source identification information is recorded in the recording unit in association with the personal identification information,
An information management apparatus that controls the communication unit to transmit the access source identification information.

Images