JP2018097826A - Server device, communication system, information processing method, and information processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a server device, a communication system, an information processing method, and an information processing program, which can be easily installed and easily introduced in the case of associating medical related information including individual information stored in a medical institution terminal with a cloud analysis tool or the like.SOLUTION: The server device which can be inserted into a communication system including at least a medical terminal device for storing medical related information and an external storage device is connected to the external storage device through an external network, and is connected to the medical terminal device through an internal network when inserted between communication systems. The server device receives the stored medical related information by communicating with the medical terminal device through the internal network, eliminates prescribed information including at least subtlety information from the medical related information, generates anonymity information, transmits the anonymity information to the external storage device through the external network, and causes the external storage device to store the anonymity information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a server device, a communication system, an information processing method, and an information processing program.

  Conventionally, a system for managing and utilizing data in a receipt computer in a medical institution has been developed.

  For example, in Patent Document 1, in order to comprehensively manage and utilize medical information, information for specifying a patient's disease name, information for specifying the content of treatment for the patient, and prescription for the patient The medical information management system which stores the information for specifying the contents of these and inputs / outputs the information is disclosed.

  In recent years, there is a need to extract receipt data such as monthly computer files and basic patient information files from a receipt computer and use them for analysis in other software on the cloud. It contains personal information and requires careful attention to data handling. Therefore, a system that can cope with the risk of handling personal information has been developed.

  For example, in Patent Document 2, in a system consisting of a receipt computing terminal that creates receipt computing data and an audit center that performs a receipt check, in order to prevent leakage of patient personal information, the receipt computing terminal When information that is not identifiable for the receipt check is erased or concealed, an identifier that can be associated with personal information is sent to the audit center, and the receipt check result is received from the audit center In addition, it is disclosed that personal information corresponding to an identifier is read and restored.

JP 2002-163355 A JP 2006-134077 A

  However, in the conventional system, on the terminal side, it is necessary to install and set dedicated software for concealing personal information in a terminal device such as a receipt computer, while on the application providing side such as cloud analysis, There is a problem that it is necessary to install an ASP server or the like that receives and analyzes the concealment data, and the introduction cost and labor are large, and the threshold for introduction is high.

  The present invention has been made in view of the above problems, and can be easily installed and introduced when medical related information including personal information stored in a medical institution terminal is linked with a cloud analysis tool or the like. A server apparatus, a communication system, an information processing method, and an information processing program with a low threshold are provided.

  In order to achieve such an object, the server device of the present invention is a server device that can be inserted into a communication system that includes at least a medical terminal device that stores medical-related information and an external storage device. When inserted between, the external storage device is connected via an external network, the medical terminal device is connected via an internal network, and the server device communicates with the medical terminal device through the communication with the medical terminal device. Internal communication means for receiving the stored medical related information via the internal network, and anonymization means for generating anonymized information by deleting predetermined information including at least sensitive information from the medical related information And an external communication means for transmitting the anonymization information to the external storage device via the external network and storing the anonymization information in the external storage device. Characterized in that was.

  In the server device according to the present invention, in the server device, the anonymization unit associates hash identification information hashed using at least facility identification information and / or medical record identification information among the medical related information. The anonymization information is generated.

  In the server device according to the present invention, the internal communication unit starts receiving the medical related information at a predetermined timing or a manual timing.

  In the server device according to the present invention, the medical terminal device is a receipt computer and / or an electronic medical record terminal.

  In the server device according to the present invention, in the above server device, when the plurality of medical terminal devices are the receipt computer and the electronic medical record terminal, respectively, the anonymization means is stored in the receipt computer. The medical related information and the medical related information stored in the electronic medical record are integrated through a medical my number or medical chart ID.

  In the server device according to the present invention, the anonymization information stored in the external storage device is provided for performing medical service analysis by an application service provider device.

  In the server device according to the present invention, the anonymization information stored in the external storage device is subjected to statistical processing by an application service provider device.

  The server device according to the present invention is the server device described above, wherein the internal communication means stores (1) the shared folder of the medical terminal device in the shared folder by communication with the medical terminal device. (2) a method for receiving the medical related information from the medical terminal device by making a transmission request to a transmission API provided by the medical terminal device; (3) A method for receiving the medical-related information to be transmitted when there is a reception request from the medical terminal device for the reception API provided in the server device, and (4) the medical terminal device Receiving the medical related information by any one of the methods for receiving the medical related information stored in the external storage device with reference to an external storage device And features.

  Moreover, the server apparatus of the present invention is characterized in that, in the above server apparatus, the anonymization means anonymizes the medical related information and further encrypts to generate the anonymized information. To do.

  The communication system of the present invention is a communication system including at least a medical terminal device, an external storage device, and a server device inserted between the two parties, wherein the server device is external to the external storage device. Via the network, the medical terminal device is connected via an internal network, and the server device communicates the stored medical related information via the internal network through communication with the medical terminal device. The internal communication means for receiving the information, deleting the predetermined information including at least sensitive information from the medical related information, anonymizing means for generating anonymized information, and the anonymized information via the external network External communication means for transmitting to an external storage device, wherein the external storage device stores the anonymization information transmitted from the server device. Characterized by comprising a means.

  The information processing method of the present invention is an information processing method executed in a server device that can be inserted into a communication system including at least a medical terminal device that stores medical-related information and an external storage device. The server device inserted between systems is connected to the external storage device via an external network, is connected to the medical terminal device via an internal network, and is executed in the server device. An internal communication step of receiving the stored medical-related information via the internal network through communication with a device, and deleting predetermined information including at least sensitive information from the medical-related information, and anonymizing Anonymizing step for generating information, and transmitting the anonymized information to the external storage device via the external network, Characterized in that it comprises an external communication step to be stored in the part storage device.

  An information processing program of the present invention is an information processing program for causing a server device that can be inserted into a communication system including at least a medical terminal device that stores medical-related information and an external storage device, The server device inserted between communication systems is connected to the external storage device via an external network, connected to the medical terminal device via an internal network, and in the server device, the medical terminal device An internal communication step of receiving the stored medical-related information via the internal network, and deleting predetermined information including at least sensitive information from the medical-related information, and anonymizing information. Anonymizing step to be generated, and transmitting the anonymization information to the external storage device via the external network, Characterized in that to execute the external communication step to be stored in an external storage device.

  According to the present invention, when medical related information including personal information stored in a medical institution terminal is linked with a cloud analysis tool or the like, there is an effect that introduction threshold is low and can be easily installed.

FIG. 1 is a configuration diagram showing an overall outline of a communication system according to an embodiment of the present invention. FIG. 2 is a block diagram showing an example of the configuration of the micro server 100 and the medical terminal 400 to which the present embodiment is applied. FIG. 3 is a flowchart illustrating an example of an information processing flow in the communication system according to the present embodiment. In FIG. 4, the internal communication unit 102a of the micro server 100 transmits the input / output screen data in the Web format to the connected viewing terminal 800, the receptacle terminal 400-1, and the like, so that the browsing terminal 800 and the receptacle terminal 400-1 are displayed. It is the figure which showed an example of the display screen displayed in displays, such as. FIG. 5 is a diagram illustrating an example of a screen during anonymization and encryption processing. FIG. 6 is a diagram illustrating an example of a screen showing an upload communication history. FIG. 7 is a diagram showing an analysis result display screen generated by the ASP server 600 that performs business analysis based on the anonymized information. FIG. 8 is a diagram showing a graph of monthly medical reward points generated based on anonymization information. FIG. 9 is a diagram showing changes in the revisit rate for the same month and the same year of the patient generated based on the anonymized information.

  Hereinafter, embodiments of a server device, a communication system, an information processing method, an information processing program, and a recording medium according to the present embodiment of the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

  First, an overall outline of the present embodiment according to the present invention will be described, and then the configuration, processing, and the like of the present embodiment will be described in detail. Here, FIG. 1 is a configuration diagram showing an overall outline of a communication system according to an embodiment of the present invention.

  As shown in FIG. 1, the communication system according to the present embodiment is configured by connecting a microserver 100, an external storage device 200, and a medical terminal 400 via an external network 300 or an arbitrary internal network. . As shown in the figure, the medical terminal 400 is connected to one of the microservers 100 in the medical facility, such as a receipt computer (abbreviation of “receipt computer”) terminal 400-1 and an electronic medical record terminal 400-2. A plurality of medical terminals may be connected. That is, preferably, one microserver 100 is provided for each medical facility or medical institution. As an example, the microserver 100 is a small housing having a server function, and is portable and excellent in portability.

  Here, as shown in FIG. 1, the communication system according to the present embodiment provides application services such as business analysis based on anonymized information stored in the external storage device 200 and anonymized medical related information. An ASP server 600 may be provided. Then, in an arbitrary browsing device 800 such as a mobile phone (smartphone or the like), a portable information terminal (tablet type computer or the like), a personal computer or the like, the business analysis content provided by the ASP server 600 via the network 300 such as the Internet is displayed. You may be comprised so that browsing is possible.

  As an example, the external storage device 200 may be realized by hardware elements such as a server computer and software elements such as a database function, an operating system, an application program, and other data. The network 300 has a function of mutually connecting the micro server 100 and the external storage device 200, the ASP server 600 and the browsing terminal 800, and the like, for example, the Internet. Details of each device will be described below.

[Configuration of Medical Terminal 400]
First, an outline of the configuration of the medical terminal 400 of the present embodiment will be described. As described above, the medical terminal 400 is, for example, a computer (including a tablet terminal) that handles medical related information, such as the receipt computer terminal 400-1 and the electronic medical record terminal 400-2. FIG. 2 is a block diagram showing an example of the configuration of the micro server 100 and the medical terminal 400 to which the present embodiment is applied, and conceptually shows only the portion related to the present embodiment in the configuration. .

  As shown in FIG. 2, the medical terminal 400 generally includes a control unit 402 such as a CPU that controls the entire medical terminal 400 overall, a communication device such as a router connected to a communication line (not shown). ) Connected to the communication control interface unit 404, an input unit 412 such as a touch panel, an input / output control interface unit 408 connected to the output unit 414, and a storage unit 406 for storing various databases and tables. These units are communicably connected via an arbitrary communication path.

  The various databases and tables stored in the storage unit 406 are storage means such as a fixed disk device, and store various programs, tables, files, databases, web pages, and the like used for various processes. Here, as shown in FIG. 2, the storage unit 406 includes an application folder 406a and a shared folder 406b.

  Among these, the application folder 406a is application information storage means for storing medical related information generated by an application providing unit 402a described later, original data for editing, and the like.

  The shared folder 406b is a storage unit for sharing to which a storage area is allocated in order to share data with other devices. In the present embodiment, it is set in advance so that the medical related information generated by the application providing unit 402a is also stored in the shared folder 406b. Therefore, the microserver 100 can collect medical related information with reference to the shared folder 406b of the medical terminal 400.

  Here, in the present embodiment, an example in which the medical terminal 400 includes a shared folder will be described, but the present invention is not limited to this. For example, when the medical terminal 400 provides a transmission API for transmitting medical related information in response to a request without using a shared folder, the medical related information is determined in response to a transmission request from the internal communication unit 102a of the microserver 100. May be configured to be transmitted. Further, even when the shared folder 102 is not used, when the internal communication unit 102a of the microserver 100 provides a reception API for receiving medical-related information in response to a request, it is transmitted when there is a reception request from the medical terminal 400. Medical related information may be received. Even if the shared folder is not used, when the medical terminal 400 has an external storage device connected by an arbitrary communication means, the internal communication unit 102a of the microserver 100 stores the medical related information stored by the medical terminal 400. The medical related information may be received by referring to the external storage device.

  In FIG. 2, an input / output control interface unit 408 controls an input unit 412 such as a mouse, a keyboard, and a touch panel, and an output unit 414 such as a speaker and a display. Here, the touch panel is an input / output unit that combines an output unit 414 such as a liquid crystal panel and an input unit 412 such as a touch position input device. As the output unit 414 serving as a display unit, a monitor (including a home television or a touch screen monitor) can be used. As the input unit 412, a mouse, a keyboard, a touch panel, a voice microphone, a stylus pen, a camera, various sensors such as a GPS sensor and an acceleration sensor, and the like can be used.

  In FIG. 2, the control unit 402 has a control program such as an OS (Operating System), a program that defines various processing procedures, and an internal memory for storing necessary data. Information processing for performing the process is performed. The control unit 402 includes an application providing unit 402a in terms of functional concept.

  Here, the application providing unit 402a is an application control unit that provides an application function corresponding to the medical terminal, such as the receptacle terminal 400-1 and the electronic medical record terminal 400-2. For example, when the medical terminal 400 is the receipt computer terminal 400-1, the application providing unit 402a provides an input / output function and a calculation function for creating a receipt (medical remuneration statement).

  As an example, specifically, the application providing unit 402a of the receptacle terminal 400-1 creates medical related information (in this case, receipt computer data) having a predetermined data format configured by a plurality of data units. May be. For example, medical institution information, medical institution name, institution name, and date of creation are recorded in the medical information of the receipt, and the serial number, patient number, patient name, patient gender / date of birth are divided into data units. , Patient address, insurer number of the insurance institution to which the patient belongs, patient insurance symbol, public payer ID, medical ID (medical my number), public payer ID, information on the medical department the patient took, name of the patient's disease Information, contents of medical treatment given to the patient, and the like may be recorded. The medical related information generated by the application providing unit 402a is stored in the application folder 406a and also in the shared folder 406b.

[Configuration of Micro Server 100]
Next, in FIG. 2, the microserver 100 schematically includes a control unit 102 such as a CPU that comprehensively controls the entire microserver 100, and a communication device (not shown) such as a router connected to a communication line or the like. The communication control interface unit 104 is connected to the storage unit 106 and a storage unit 106 that stores various databases and tables. These units are communicably connected via an arbitrary communication path.

  Various databases and tables (anonymization folder 106a, etc.) stored in the storage unit 106 are storage means such as a fixed disk device, and store various programs, tables, files, databases, web pages, etc. used for various processes. To do.

  Here, the anonymization folder 106a is an anonymization information storage unit that stores medical-related information received from the medical terminal device 400 for editing and stores anonymized information that conceals the medical-related information.

  In FIG. 2, the control unit 102 has a control program such as an OS (Operating System), a program defining various processing procedures, and an internal memory for storing necessary data. Information processing for executing various processes is performed. The control unit 102 includes an internal communication unit 102a, an anonymization unit 102b, and an external communication unit 102c in terms of functional concept.

  Among these, the internal communication unit 102a is an internal communication unit that refers to the shared folder 406b of the medical terminal 400 and receives medical related information stored in the shared folder 406b via the internal network. In the present embodiment, the received medical related information is stored in the anonymization folder 106a.

  In the present embodiment, the microserver 100 does not have a display unit or a voice output unit that outputs information processing status or the like, but the internal communication unit 102a is a medical terminal 400 or a browsing terminal connected to the microserver 100. By transmitting information such as HTML data indicating the information processing status to 800 etc., the browsing means such as the browser function of medical terminal 400 or browsing terminal 800 can grasp the status of microserver 100 or enter it. You can send output instructions. For example, the internal communication unit 102a starts collecting medical related information at a predetermined timing, and also starts collecting medical related information at a manual timing by operating from the medical terminal 400, the browsing terminal 800, or the like. Can be directed.

  The anonymization unit 102b is an anonymization unit that generates anonymization information by deleting predetermined information including at least sensitive information from medical related information stored in the anonymization folder 106a. As an example, the anonymization unit 102b includes a medical institution number, a medical institution name, a creation date, a serial number, a patient number, a patient name, a patient's gender / date of birth, a patient address, and an insurer number of an insurance institution to which the patient belongs. Identifies an individual from the receipt medical-related information such as the patient's insurance symbol, public payer number, public beneficiary number, patient department information, patient's disease name information, and details of the medical treatment given to the patient Detailed information such as possible patient name, date data of birth date, insurer number, insurance symbol, detailed address information below address of patient address, medical ID etc. (so-called "medical my number"), sensitive information May be deleted as predetermined information, and anonymized information may be generated.

  Here, the anonymization unit 102b has generated and hashed these pieces of information using facility identification information (medical institution number, etc.), medical chart identification information (patient number, etc.), serial number, etc., among medical related information. Anonymization information may be generated in association with the hash identification information. By hashing, facility identification information such as a facility number and medical record identification information such as a patient number can be anonymized and unique hash identification information without duplication can be generated. For hashing, a publicly known method such as a publicly known hash function or MD5 can be used. The anonymization unit 102b obtains medical-related information from a plurality of medical terminals 400 (such as the receipt computer terminal 400-1 and the electronic medical record terminal 400-2), and a medical record ID such as a serial number or a patient number, or a medical my number. Medical related information provided from a plurality of medical terminals 400 may be integrated via (medical etc. ID).

  The anonymization unit 102b may generate anonymized information by anonymizing and encrypting medical related information. For example, the anonymization unit 102b may encrypt medical related information using a known encryption method such as Advanced Encryption Standard (AES). In the present embodiment, the anonymized information encrypted in the microserver 200 is transmitted to the external storage device 200 and encrypted using a known communication means in which security such as SSL communication is secured. It may be stored as anonymized information. Note that the external storage device 200 may decrypt and provide the anonymized information stored in the external storage device 200 while being encrypted by the ASP server 600 or the like.

  The external communication unit 102 c is an external communication unit that transmits anonymization information in the anonymization folder 106 a to the external storage device 200 via the external network 300 and stores the information in the external storage device 200. Note that the external communication unit 102a may upload to the external storage device 200 at a predetermined timing or at a manual timing. For example, the external communication unit 102a may upload anonymization information at the same time as the timing of the internal communication unit 102a when the processing of the anonymization unit 102b is completed. You may upload at a predetermined interval.

  In FIG. 2, the communication control interface unit 104 is a device that performs communication control between the microserver 100 and the network 300 (or a communication device such as a router). That is, the communication control interface unit 104 has a function of communicating data with other terminals or stations via a communication line (whether wired or wireless).

  That is, the microserver 100 is configured to be communicably connected to the external storage device 200 including a database, the medical terminal 400, an external system that provides an external program such as the program according to the present invention, and the like via the network 300. May be. The microserver 100 may be communicably connected to the network 300 via a communication device such as a router and a wired or wireless communication line such as a dedicated line.

  In FIG. 2, the external storage device 200 is connected to the micro server 100, the browsing terminal 800, and the ASP server 600 via the network 300, and is externally related to anonymized information that anonymizes medical related information. Has the function of providing a database.

  In FIG. 2, the ASP server 600 is connected to the external storage device 200, the browsing terminal 800, and the ASP server 600 via the network 300, and relates to business analysis results, receipt check results, statistical processing results, and the like. It has a function of providing an external database, a website for executing an external program such as a business analysis program, a receipt check program, and a statistical processing program.

  Here, the ASP server 600 and the external storage device 200 may be configured as a WEB server, an ASP server, or the like, and the hardware configuration thereof is generally an information processing apparatus such as a commercially available workstation or personal computer and its attachment. You may comprise by the apparatus. Each function of the external storage device 200 is realized by a CPU, a disk device, a memory device, an input device, an output device, a communication control device, and the like in the hardware configuration of the external storage device 200 and a program for controlling them. .

  The browsing terminal 800 is connected to the micro server 100 via an internal network (such as an indoor LAN or an intranet) and the ASP server 600 via an external network 300 (such as the Internet). It has a function (browser or the like) for browsing a result or the like or a website instructing program execution. The browsing terminal 800 may be configured by an information processing device such as a commercially available workstation or personal computer and an accessory device thereof, and may be, for example, a tablet terminal, a smartphone, a laptop computer, or the like.

  Above, description of each structure of the communication system of this Embodiment is finished.

[Information processing]
Next, an example of the processing of the communication system according to the present embodiment configured as described above will be described in detail with reference to FIGS.

  FIG. 3 is a flowchart illustrating an example of an information processing flow in the communication system according to the present embodiment. In the drawing, the medical terminal 400, the microserver 100, and the external storage device 200 are drawn so as to have a one-to-one relationship. However, the present invention is not limited to this. The relationship may be many-to-one, and the relationship between the microserver 100 and the external storage device 200 may be many-to-one.

  As shown in FIG. 3, first, the medical terminal 400 controls the application providing unit 402a to provide an input unit to a user such as a medical worker in addition to data stored in the application folder 406a in advance. Medical-related information is generated by displaying it on the output unit 414 so that the medical-related information is input via 412 (step SA-1). For example, since information about medical facilities (medical institution number, medical institution name, etc.) is unchanged, data stored in the application folder 406a is used in advance, while information about a new patient (patient number, patient name, patient name) Gender / birth date, patient address, insurer number of the insurance institution to which the patient belongs, patient insurance symbol, public payer number, public beneficiary number, information on the department the patient took, patient name information, patient The input / output control interface 408 is controlled so as to be input to the user via the input unit 412 such as a keyboard.

  The medical terminal 400 stores the generated medical related information in the application folder 406a under the control of the application providing unit 402a, and stores a copy in the shared folder 406b under the control of the OS or the like (step SA- 2).

  Then, the micro server 100 refers to the shared folder 406b of the medical terminal 400 at a predetermined timing or a manual timing such as a time at which a day's work ends by the processing of the internal communication unit 102a, for example, Medical related information is collected (step SA-3). For example, collecting daily receipt medical-related information is useful as basic data for daily daily reports, and collecting monthly receipt medical-related information at the end of each month It can be used as basic data for business analysis. Here, FIG. 4 shows that the internal communication unit 102a of the microserver 100 transmits the input / output screen data in the Web format to the connected viewing terminal 800, the receiving terminal 400-1, and the like, so that the viewing terminal 800 and the receiving terminal 800 are connected. It is the figure which showed an example of the display screen displayed in displays, such as 400-1. In this example, a GUI button or the like is installed and displayed so that the user can manually determine the range of medical related information to be collected and the upload timing.

  Then, the micro server 100 deletes predetermined information including sensitive information from the collected medical related information by the processing of the anonymization unit 102b, and generates anonymization information (step SA-4). For example, the anonymization unit 102b may provide some detailed information on a patient's name, date of birth, insurer number, insurance symbol, address, medical ID (so-called “medical my number”), etc. that can identify an individual. Anonymization information may be generated by deleting and omitting. For example, the anonymization unit 102b for the name related to the name, the date related to the date of birth, the last 3 digits of the insurer number, the last 3 digits of the insurance symbol, the last 3 digits of the medical my number, and the address below the address, Anonymization information may be generated by deleting as predetermined information including sensitive information.

  The anonymization unit 102b stores the generated anonymization information in the shared folder 406b. Here, the anonymization unit 102b generates a unique hash ID without duplication by hashing the facility number, the chart ID (or medical my number), and the secret key, and generates a hash ID. The anonymized information and the medical related information may be managed in association with each other. Here, FIG. 5 is a diagram illustrating an example of a screen during anonymization and encryption processing. In this example, anonymization and encryption are performed when a file is selected or uploaded. In this case, the anonymization unit 102b anonymizes the medical related information and encrypts AES or the like to generate anonymized information. The anonymization information encrypted in the microserver 200 is transmitted to the external storage device 200 using secure communication means such as SSL communication in step SA-5 described later. In step SA-7 described later, The encrypted anonymization information may be stored as it is. In step SA-8 to be described later, the anonymized information stored in an encrypted state in the external storage device 200 is decrypted when the ASP server 600 or the like is used, and an analysis result or the like is provided.

  Returning to FIG. 3 again, the microserver 100 uploads and transmits the anonymization information stored in the anonymization folder 106a to the external storage device 200 by the processing of the external communication unit 102c (step SA-5). Here, FIG. 6 is a diagram showing an example of a screen showing an upload communication history. As shown in FIG. 6, when upload processing is started and upload is completed manually or at a predetermined timing, it is displayed as a communication history.

  Returning to FIG. 3 again, the external storage device 200 receives the transmitted anonymization information via the network 300 (step SA-6) and stores it in the database (step SA-7).

  Then, the external storage device 200 transmits the requested range of anonymization information to the ASP server 600 in response to a request from the ASP server 600 having a business analysis function, a receipt check function, and a statistical processing function (step) SA-8). Here, FIG. 7 is a diagram showing an analysis result display screen generated by the ASP server 600 that performs business analysis based on the anonymization information. As shown in FIG. 7, even if the sensitive information below the address is deleted from the address information of the patient, it is possible to grasp a certain address area such as the chome, so that the ASP server 600 can change the place where the patient lives to a heat map or the like. Can be provided. Thereby, it is possible to represent a business analysis result indicating from which side a large number of customers are attracted and which side of the customer should be newly developed. Although not shown, it is also possible to display the results of statistical processing. For example, by presenting the medical facility showing the intention to participate in the clinical trial and the number of patients at the medical facility, it contributes to the clinical trial. Data can be provided.

  Moreover, FIG. 8 is a figure which shows the graph of the score of the monthly medical reward produced | generated based on the anonymization information. As shown in FIG. 8, even if anonymization is performed, based on monthly receipts (medical remuneration statement), the results of business analysis such as which procedures are used for a lot of medical fees and where there are few fields are visually displayed. It can be presented to the user in an easy-to-understand manner.

  Moreover, FIG. 9 is a figure which shows the change of the revisit rate of the same month of a patient and the same year produced | generated based on the anonymization information. As shown in FIG. 9, business analysis results such as whether the revisit rate is on an upward trend or a downward trend can be presented to the user in an easy-to-understand manner, which can contribute to management improvement.

  Above, description of the example of the information processing flow of this Embodiment is finished.

  In the prior art such as Patent Document 2, information that is unnecessary for the receipt check is deleted or concealed in the receptacle terminal and uploaded to the audit center that performs the receipt check. However, according to the present embodiment, Since the micro server can be installed like a network relay without rewriting the terminal program, medical-related information uploaded to the cloud can be easily anonymized without modifying a dedicated medical terminal such as a receptacle terminal. can do. In other words, dedicated medical terminals such as receptacle computers have been developed independently by each manufacturer and do not allow modification of the terminal.However, according to this embodiment, there are restrictions on manufacturers of medical terminals such as receptacle computers. It can be introduced without receiving it.

  Further, when the OS or the like of a medical terminal computer such as a receptacle terminal is upgraded as in the prior art of Patent Document 2, the erasure / concealment processing program installed therein needs to be upgraded. On the other hand, according to the present embodiment, since the micro server having a separate housing from the medical terminal such as a receptacle terminal is installed, it is not necessary to update the anonymization program according to the upgrade of the medical terminal computer. In addition, in the prior art such as Patent Document 2, it is necessary to install an erasure / concealment processing program for each medical terminal such as a receptacle terminal, and thus there is a problem that expansion becomes complicated when the number of new medical terminals increases. . On the other hand, according to the present embodiment, even when a new medical device is added, if anonymization processing is performed by connecting to a microcomputer, the extensibility is excellent. A system that can exchange and utilize data can be easily constructed.

[Other embodiments]
Although the embodiments of the present invention have been described so far, the present invention is not limited to the above-described embodiments, but can be applied to various different embodiments within the scope of the technical idea described in the claims. It may be implemented.

  For example, in the above-described embodiment, the example in which the concealment information uploaded by the present embodiment is used for the medical service analysis and the receipt check has been described. It can be used in a wide range of fields, such as drug and hospital trend analysis and notification, and data transfer from medical devices.

  Further, for example, the case where the external storage device 200 performs processing in response to a request from a client terminal such as the microserver 100 and returns the processing result to the client terminal has been described as an example. In order to distribute the timing, an upload request may be sent from the external storage device 200 to the microserver 100. Further, although the external storage device 200 and the ASP server 600 have been described as separate housings, they may be configured as a single unit.

  In addition, among the processes described in the embodiment, all or part of the processes described as being automatically performed can be performed manually, or the processes described as being performed manually can be performed. All or a part can be automatically performed by a known method.

  In addition, unless otherwise specified, the processing procedures, control procedures, specific names, information including registration data for each processing, parameters such as search conditions, screen examples, and database configurations shown in the above documents and drawings Can be changed arbitrarily.

  In addition, regarding the micro server 100, the external storage device 200, and the medical terminal 400, each illustrated component is functionally conceptual and does not necessarily need to be physically configured as illustrated.

  For example, regarding the processing functions provided in each device of the microserver 100, the external storage device 200, and the medical terminal 400, in particular, the processing functions performed by the control units 102 and 402, all or any part thereof is transferred to a CPU (Central (Processing Unit) and a program interpreted and executed by the CPU, or may be realized as hardware by wired logic. The program is recorded on a non-transitory computer-readable recording medium including a programmed instruction for causing a computer to execute the method according to the present invention, which will be described later. Or mechanically read by the external storage device 200 or the medical terminal 400. That is, in the storage units 106 and 406 such as a ROM or a HDD (Hard Disk Drive), a computer program for giving instructions to the CPU in cooperation with an OS (Operating System) and performing various processes is recorded. . This computer program is executed by being loaded into the RAM, and constitutes a control unit in cooperation with the CPU.

  Further, this computer program may be stored in an application program server connected to the micro server 100, the external storage device 200, or the medical terminal 400 via an arbitrary network 300. It is also possible to download a part.

  In addition, the program according to the present invention may be stored in a computer-readable recording medium, and may be configured as a program product. Here, the “recording medium” means a memory card, USB memory, SD card, flexible disk, magneto-optical disk, ROM, EPROM, EEPROM, CD-ROM, MO, DVD, and Blu-ray (registered trademark). It includes any “portable physical medium” such as Disc.

  The “program” is a data processing method described in an arbitrary language or description method, and may be in any format such as source code or binary code. The “program” is not necessarily limited to a single configuration, but is distributed in the form of a plurality of modules and libraries, or in cooperation with a separate program represented by an OS (Operating System). Including those that achieve the function. Note that a well-known configuration and procedure can be used for a specific configuration for reading a recording medium, a reading procedure, an installation procedure after reading, and the like in each device described in the embodiment. The present invention may be configured as a program product in which a program is recorded on a computer-readable recording medium that is not temporary.

  Various databases and the like (anonymized folder 106a and the like) stored in the storage units 106 and 406 are storage means such as a memory device such as a RAM and a ROM, a fixed disk device such as a hard disk, a flexible disk, and an optical disk. Various programs, tables, databases, web page files, etc. used for various processes and website provision are stored.

  In addition, the micro server 100, the external storage device 200, and the medical terminal 400 may be configured as an information processing device such as a known personal computer or workstation, and any peripheral device may be connected to the information processing device. It may be configured. The microserver 100, the external storage device 200, and the medical terminal 400 may be realized by installing software (including programs, data, and the like) that realizes the method of the present invention in the information processing apparatus.

  Furthermore, the specific form of distribution / integration of the devices is not limited to that shown in the figure, and all or a part of them may be functional or physical in arbitrary units according to various additions or according to functional loads. Can be distributed and integrated. That is, the above-described embodiments may be arbitrarily combined and may be selectively implemented.

  As described above in detail, according to the present invention, when medical related information including personal information stored in a medical institution terminal is linked with a cloud analysis tool or the like, it can be easily installed and is a threshold for introduction. Server apparatus, communication system, information processing method, information processing program, and recording medium can be provided.

DESCRIPTION OF SYMBOLS 100 Customer terminal 102 Control part 102a Internal communication part 102b Anonymization part 102c External communication part 104 Communication control interface part 106 Storage part 106a Anonymization folder 200 External storage device 300 Network 400 Medical terminal 400-1 Reckon terminal 400-2 Electronic medical record terminal 400-2 402 control unit 402a application providing unit 404 communication control interface unit 406 storage unit 406a application folder 406b shared folder 408 input / output control interface unit 412 input unit 414 output unit

Claims (12)

A server device that can be inserted into a communication system including at least a medical terminal device that stores medical related information and an external storage device, and when inserted between the communication systems, the external storage device is an external network. Connected to the medical terminal device via an internal network,
The server device
Internal communication means for receiving the medical related information via the internal network by communication with the medical terminal device;
Anonymization means for generating anonymized information by deleting predetermined information including at least sensitive information from the medical related information;
An external communication means for transmitting the anonymization information to the external storage device via the external network and storing it in the external storage device;
A server device comprising: The server device according to claim 1,
The anonymization means is:
The server apparatus, wherein the anonymization information is generated by associating hash identification information hashed using at least facility identification information and / or medical chart identification information among the medical related information. In the server apparatus according to claim 1 or 2,
The internal communication means is
The server apparatus starts receiving the medical related information at a predetermined timing or a manual timing. In the server apparatus as described in any one of Claims 1 thru | or 3,
The medical terminal device
A server apparatus, which is a receipt computer and / or an electronic medical record terminal. The server device according to claim 4,
When the plurality of medical terminal devices are the receipt computer and the electronic medical chart terminal,
The anonymization means is:
The server apparatus, wherein the medical related information stored in the receipt computer and the medical related information stored in the electronic medical record are integrated via a medical my number or medical chart ID. In the server apparatus as described in any one of Claims 1 thru | or 5,
The anonymization information stored in the external storage device is
A server device that is provided for performing a medical service analysis by an application service provider device. In the server apparatus as described in any one of Claims 1 thru | or 5,
The anonymization information stored in the external storage device is
A server device that is subjected to statistical processing by an application service provider device. The server device according to any one of claims 1 to 7,
The internal communication means communicates with the medical terminal device,
(1) A method for receiving the medical related information stored in the shared folder with reference to the shared folder of the medical terminal device,
(2) A method of receiving the medical related information from the medical terminal device by making a transmission request to the transmission API provided by the medical terminal device;
(3) A method of receiving the medical-related information to be transmitted when there is a reception request from the medical terminal device for a reception API provided in the server device; and
(4) A method of receiving the medical related information stored in the external storage device with reference to the external storage device of the medical terminal device,
The server apparatus receives the medical related information by any one of the methods. The server device according to any one of claims 1 to 8,
The said anonymization means produces | generates the said anonymization information by anonymizing with respect to the said medical relevant information, and also encrypting, The server apparatus characterized by the above-mentioned. In a communication system comprising at least a medical terminal device, an external storage device, and a server device inserted between the two parties,
The server device is connected to the external storage device via an external network and to the medical terminal device via an internal network,
The server device
An internal communication means for receiving the stored medical related information via the internal network by communication with the medical terminal device;
Anonymization means for generating anonymized information by deleting predetermined information including at least sensitive information from the medical related information;
External communication means for transmitting the anonymization information to the external storage device via the external network;
With
The external storage device is
A communication system comprising storage means for storing the anonymization information transmitted from the server device. An information processing method executed in a server device that can be inserted into a communication system including at least a medical terminal device that stores medical-related information and an external storage device,
The server device inserted between the communication systems is connected to the external storage device via an external network, and connected to the medical terminal device via an internal network,
Executed in the server device,
An internal communication step of receiving the stored medical related information via the internal network by communication with the medical terminal device;
Anonymization step for generating anonymized information by deleting predetermined information including at least sensitive information from the medical related information;
An external communication step of transmitting the anonymization information to the external storage device via the external network and storing the information in the external storage device;
An information processing method comprising: An information processing program for causing a server device that can be inserted into a communication system including at least a medical terminal device that stores medical-related information and an external storage device to execute the program,
The server device inserted between the communication systems is connected to the external storage device via an external network, and connected to the medical terminal device via an internal network,
In the server device,
An internal communication step of receiving the stored medical related information via the internal network by communication with the medical terminal device;
Anonymization step for generating anonymized information by deleting predetermined information including at least sensitive information from the medical related information;
An external communication step of transmitting the anonymization information to the external storage device via the external network and storing the information in the external storage device;
An information processing program for executing