JP2018156293A - Program, information processing method, and information processing apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a program, etc. for masking part of information on a screen.SOLUTION: The program is configured to cause a computer to detect a first character string to be replaced from data for screen display, and replace the detected first character string with a predetermined second character string or figure to output data for screen display including the replaced second character string or figure. Further, the program is configured to cause the computer to refer to a character string list including the character string and an attribute of the character string and detect a first character string matching the character string in the character string list from the data.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a program, an information processing method, and an information processing apparatus.

  Information that needs to be concealed, such as personal information and trade secrets, is processed by the information processing apparatus. There has been proposed a maintenance support apparatus that prints by masking personal information in an error screen when an information processing apparatus generates an error (Patent Document 1). There has been proposed a data replacement device that parses document data, extracts personal information, replaces it with different data, and outputs it (Patent Document 2).

JP 2007-233465 A JP 2006-221560 A

  However, in the techniques disclosed in Patent Document 1 and Patent Document 2, when a user of an information processing apparatus that handles information that is highly necessary to be concealed needs support related to an operation method or the like, one piece of information on the screen is displayed. There is a problem that the part cannot be masked.

  An object of one aspect is to provide a program for masking a part of information on a screen.

  The program detects a first character string to be replaced from screen display data, replaces the detected first character string with a predetermined second character string or figure, and replaces the replaced second character string or graphic. A computer is caused to execute a process of outputting screen display data including the graphic.

  In one aspect, a program for masking a part of information on the screen can be provided.

It is explanatory drawing which shows the structure of an information processing system. It is explanatory drawing which shows the record layout of character string list DB. It is explanatory drawing which shows the example of a screen. It is explanatory drawing which shows the example of a screen. It is explanatory drawing which shows the example of the screen for printing when selection of the button to conceal is received. It is a flowchart which shows the flow of a process of a program. It is a flowchart which shows the flow of a process of the subroutine of replacement screen creation. It is explanatory drawing which shows the record layout of secrecy item DB. 10 is an explanatory diagram illustrating an example of a screen according to Embodiment 2. FIG. 10 is an explanatory diagram illustrating an example of a printing screen according to Embodiment 2. FIG. 12 is a flowchart illustrating a processing flow of a program according to the second embodiment. It is a flowchart which shows the flow of a process of the subroutine of replacement screen creation-2. FIG. 10 is an explanatory diagram illustrating a configuration of an information processing system according to a third embodiment. 10 is an explanatory diagram illustrating an example of a screen of a second information processing apparatus according to Embodiment 3. FIG. 12 is a flowchart illustrating a processing flow of a program according to the third embodiment. It is explanatory drawing which shows the record layout of authority DB. 14 is a flowchart illustrating a processing flow of a program according to the fourth embodiment. It is explanatory drawing which shows the record layout of character string list DB of Embodiment 5. FIG. FIG. 10 is an explanatory diagram illustrating an example of a printing screen according to a fifth embodiment. FIG. 20 is an explanatory diagram illustrating an example of a printing screen according to a sixth embodiment. FIG. 19 is a functional block diagram illustrating an operation of the information processing apparatus according to the seventh embodiment. FIG. 19 is an explanatory diagram illustrating a configuration of an information processing system according to an eighth embodiment.

[Embodiment 1]
FIG. 1 is an explanatory diagram showing the configuration of the information processing system 1. The information processing system 1 includes an information processing apparatus 10 and an electronic medical record server 39 connected via a network. The electronic medical record server 39 records patient medical information. Since the electronic medical record server 39 has been used conventionally, description of the detailed structure is omitted.

  The information processing apparatus 10 includes a CPU (Central Processing Unit) 11, a main storage device 12, an auxiliary storage device 13, a display unit 14, an input unit 15, a communication unit 16, and a bus.

  The CPU 11 is an arithmetic control device that executes a program according to the present embodiment. As the CPU 11, one or a plurality of CPUs or a multi-core CPU is used. The CPU 11 is connected to each hardware part constituting the information processing apparatus 10 via a bus.

  The main storage device 12 is a storage device such as an SRAM (Static Random Access Memory), a DRAM (Dynamic Random Access Memory), or a flash memory. The main storage device 12 temporarily stores information necessary during the processing performed by the CPU 11 and a program being executed by the CPU 11.

  The auxiliary storage device 13 is a storage device such as an SRAM, a flash memory, a hard disk, or a magnetic tape. The auxiliary storage device 13 stores a program to be executed by the CPU 11, a character string list DB 31, and various data necessary for executing the program. The character string list DB 31 may be stored in the electronic medical record server 39 or other storage device connected via a network.

  The display unit 14 is a liquid crystal display panel, an organic EL (Electro Luminescence) display panel, or the like. The input unit 15 is a device such as a mouse, a keyboard, a touch panel, or a pen tablet, and is used when the CPU 11 receives an operation by a user. The communication unit 16 is an interface that performs communication with a network.

  The information processing apparatus 10 is a general-purpose personal computer or a tablet. The information processing apparatus 10 is an example of an apparatus used when a doctor or the like performs entry and browsing of an electronic medical record. The information processing apparatus 10 may also serve as the electronic medical record server 39.

  FIG. 2 is an explanatory diagram showing a record layout of the character string list DB 31. The character string list DB 31 is a DB that associates a character string to be replaced with an attribute among information that may be displayed on the display unit 14. The character string list DB 31 has an attribute field and an original character string field. The character string list DB 31 is an example of a DB that records the character string list of the present embodiment.

  A list of character strings to be replaced is recorded in the original character string field. An attribute of the original character string is recorded in the attribute field. For example, the patient's Chinese character name is recorded in the original character string field of the record in which “patient” is recorded in the attribute field. The name of the patient is recorded in the original character string field of the record in which “Kanja” is recorded in the attribute field.

  The name of the doctor is recorded in the original character string field of the record in which “doctor” is recorded in the attribute field. The disease name is recorded in the original character string field of the record in which “disease name” is recorded in the attribute field. The name of the medicine is recorded in the original character string field of the record in which “medicine” is recorded in the attribute field. The surgical technique is recorded in the original character string field of the record in which “technique” is recorded in the attribute field. The character string list DB 31 has one record for one character string to be replaced.

  The character string list DB 31 is created based on a master file in which items used in, for example, an electronic medical record handled by the information processing apparatus 10 are accumulated. Further, the CPU 11 may accept a character string to be replaced by the user in advance and record it in the character string list DB 31.

  FIG. 3 is an explanatory diagram illustrating an example of a screen. The CPU 11 acquires data from the electronic medical record server 39 based on a user operation, and displays the electronic medical record screen shown in FIG. 3 on the display unit 14. The screen shown in FIG. 3 has a patient column 40, a surgery application column 50, and a progress record column 60.

  The patient column 40 includes a gender mark 41, a kana patient name column 42, a kanji patient name column 43, and an age column 44. The gender mark 41 displays the gender of the patient as an icon. The Kana patient name column 42 and the Kanji patient name column 43 indicate the patient's name in katakana and kanji. The age column 44 indicates the age of the patient.

  The surgery application field 50 includes a patient name field 53, three doctor name fields 55, a disease name field 56, and a surgical procedure field 57. The patient name column 53 shows the name of the patient. The doctor name column 55 indicates the name of the doctor. The disease name column 56 shows a patient's disease name. The surgical procedure column 57 shows the surgical procedure.

  In the progress record column 60, medical records input by a doctor or the like in the so-called SOAP (Subject, Object, Assessment, Plan) format at the time of past medical care are displayed. Note that the screen shown in FIG. 3 is an example of a screen that the CPU 11 shows on the display unit 14.

  A user such as a doctor who operates the information processing apparatus 10 requests support from a support person such as a computer expert in the case of trouble such as when the operation method is lost. Even when the support person is in a remote place, the user can smoothly convey the trouble situation to the support person by sending the screen image displayed on the display unit 14 by FAX or e-mail. Can do.

  Incidentally, the screen described with reference to FIG. 3 includes a lot of information that is highly necessary to be concealed, including the patient name. Since these pieces of information are unnecessary for the support person in charge, the user may send the information to the support person after performing work such as painting.

  FIG. 4 is an explanatory diagram illustrating an example of a screen. FIG. 4 is a screen that the CPU 11 displays on the display unit 14 when the user depresses the PrtSc (Print Screen) key on the keyboard. The screen shown in FIG. 4 includes an instruction input window 71. The instruction display window 71 includes a button 74 that is concealed and a button 75 that is not concealed.

  Note that the pressing of the PrtSc key is an example of an operation for accepting an instruction for screen printing or screen capture. An operation corresponding to the OS (Operating System) and hardware of the information processing apparatus 10 can be used in the same manner as the PrtSc key is depressed in the present embodiment.

  FIG. 5 is an explanatory diagram showing an example of a printing screen when selection of the concealment button 74 is accepted. The screen shown in FIG. 5 includes a print button 72 and a capture button 73 in addition to the components of the screen described with reference to FIG. The CPU 11 sets the Kana patient name field 42 in the screen described with reference to FIG. 3 to “Kanja ***” by adding three asterisks to “Kanja” indicating the attribute of the character string “Yamaoka Kayoko”. Replace and display.

  Similarly, the CPU 11 also displays “patient”, “doctor”, “disease name”, “attribute” of the character string displayed in the respective fields in the Chinese character patient name column 43, the doctor name column 55, the disease name column 56, and the technique column 57. Replaced by a character string with three asterisks added to the “method” character string.

  The CPU 11 replaces and displays the character string “Ichiro Suzuki” in the progress record column 60 with a character string obtained by adding three asterisks to the character string “doctor” indicating the attribute. The CPU 11 displays the character strings “antiallergic drug” and “anticoagulant drug” in the progress record column 60 by replacing them with a character string obtained by adding three asterisks to the characters “drug” indicating the attribute. The CPU 11 replaces and displays the character string of “myocardial infarction” in the progress record column 60 with a character string obtained by adding three asterisks to the character string of “disease name” indicating the attribute.

  Here, the pre-substitution character strings such as “Yamaoka Kayoko” and “Ichiro Suzuki” are examples of the first character string to be replaced. The replaced character string such as “Kanja ***” and “Doctor ***” is an example of the second character string. The second character string is associated with the first character string via the attribute recorded in the character string list DB 31.

  When the selection of the print button 72 is received, the CPU 11 outputs the printing screen described with reference to FIG. 5 to a printer (not shown). When the selection of the capture button 73 is received, the CPU 11 stores the screen capture of the printing screen described with reference to FIG. 5, that is, still image data in the auxiliary storage device 13. The user can send a printed hard copy or screen shot to a support representative to request assistance.

  The person in charge of support can grasp the user's situation accurately and provide support by talking with the user over the telephone while viewing the hard copy or the screen shot sent from the user.

  When the selection of the non-confidential button 75 is received on the screen described with reference to FIG. 4, the CPU 11 displays a print screen in which the print button 72 and the capture button 73 are added to the screen described with reference to FIG. .

  When the selection of the print button 72 is received, the CPU 11 prints a screen image that does not replace the patient name or the like. When the selection of the capture button 73 is received, the CPU 11 stores a screen capture of a print screen that does not replace the patient name or the like in the auxiliary storage device 13. The user can use a screen image on which a patient name, a disease name, and the like are displayed, for example, at a conference in a hospital.

  FIG. 6 is a flowchart showing the flow of processing of the program. The CPU 11 displays the electronic medical record screen described with reference to FIG. 3 on the display unit 14 (step S501). The CPU 11 accepts an electronic medical record entry and browsing operation by the user via the input unit 15, cooperates with the electronic medical record server 39, changes the screen displayed on the display unit 14, and electronic information of the input information Recording to the medical record server 39 is performed. The details of the operation of the electronic medical record are omitted.

  The CPU 11 accepts pressing of the PrtSc key (step S502). The CPU 11 displays the instruction input window 71 described with reference to FIG. 4 on the display unit 14 (step S503). The CPU 11 accepts selection of the button 74 to be concealed or the button 75 not to be concealed (step S504).

  When it is determined that selection of the button 74 to be concealed has been received (concealment is performed in step S504), the CPU 11 starts a replacement screen creation subroutine (step S505). The replacement screen creation subroutine is a subroutine that detects a character string to be replaced from the screen and replaces it based on a predetermined rule. The processing flow of the replacement screen creation subroutine will be described later.

  When it is determined that the selection of the non-confidential button 75 has been accepted (not concealed in step S504), or after the end of step S505, the CPU 11 displays a print screen on the display unit 14 (step S506). When the selection of the print button 72 is received, the CPU 11 outputs a print screen to a printer (not shown). When the selection of the capture button 73 is received, the CPU 11 stores a screen capture of the print screen in the auxiliary storage device 13.

  The CPU 11 determines whether to end the process (step S507). For example, when an instruction to end the operation of the electronic medical record is received using an end button or the like (not shown), the CPU 11 determines to end the process. Further, when an instruction to continue the operation of the electronic medical record is received by an input restart button (not shown) or the like, the CPU 11 determines that the processing is not ended.

  If it is determined not to end the process (NO in step S507), the CPU 11 returns to step S501. If it is determined that the process is to be ended (YES in step S507), the CPU 11 ends the process.

  FIG. 7 is a flowchart showing the flow of the subroutine for creating a replacement screen. The replacement screen creation subroutine is a subroutine that detects a character string to be replaced from the screen and replaces it based on a predetermined rule.

  The CPU 11 sets the counter J to the initial value 1 (step S521). The CPU 11 extracts the J-th record from the character string list DB 31, and acquires the original character string recorded in the original character string field and the attribute recorded in the attribute field (step S522).

  The CPU 11 determines whether or not the screen displayed on the display unit 14 includes the original character string acquired in step S522 (step S523). More specifically, the CPU 11 determines whether or not the screen display data acquired from the electronic medical record server 39 includes the original character string.

  If it is determined that the original character string is included (YES in step S523), the CPU 11 replaces the original character string in the screen with a character string in which three asterisks are added to the end of the attribute (step S524). A character string in which three asterisks are added to the end of the attribute is an example. You may use the character string which added one or several asterisks before the attribute. A character string in which an attribute is sandwiched between one or more asterisks may be used.

  Instead of an asterisk, symbols or characters such as white circles, black circles, white squares, black squares, stars, and parentheses may be used. Instead of replacing the original character string with another character string, or at the same time as replacing with another character string, the character string may be displayed in a state where it cannot be read by mosaic processing or fraud processing.

  By adjusting the number of asterisks, the number of characters in the original character string and the number of characters in the character string to be replaced may be aligned. The user can grasp the number of characters of the original character string by looking at the screen after replacement.

  When it is determined that the original character string is not included (NO in step S523), or after the end of step S524, the CPU 11 determines whether or not the processing of all the records recorded in the character string list DB 31 has been completed ( Step S525). If it is determined that the process has not been completed (NO in step S525), the CPU 11 adds 1 to the counter J (step S526). The CPU 11 returns to step S522. If it is determined that the process has ended (YES in step S525), the CPU 11 ends the process.

  In this embodiment, the electronic medical record system has been described as an example. However, the present invention can be applied to a system for any field that handles information that is highly necessary to be concealed, such as finance, education, or government.

  According to the present embodiment, it is possible to provide an information processing apparatus 10 that records a part of information on a screen while masking it. For example, a user who handles information that is highly necessary to be concealed using a complex and multifunctional system such as an electronic medical record system can easily receive support from an expert of an external computer. Further, for example, the support center of the system does not receive information that needs to be kept secret such as the name of the patient, so that it is possible to reduce the load of information management.

  Since the replacement character string includes an attribute, the support person can easily determine what data is displayed. Therefore, the person in charge of support can smoothly perform user support and trouble analysis.

  When the PrtSc key is pressed down, the screen described with reference to FIG. 4 is displayed, and in order to accept the necessity of replacement, the user forgets the existence of this function and displays the screen including the patient's name and the like. Printing or capturing can be prevented.

  Immediately before performing printing or screen capture, the instruction input window 71 is displayed to accept an instruction on whether information is concealed. Therefore, it is possible to provide the information processing apparatus 10 capable of recording a screen image according to the application.

  The replaced character string may not include a character string indicating an attribute. For example, a character string that does not include an attribute, such as a certain number of consecutive asterisks or a sequence of asterisks equal to the number of characters in the original character string, may be used as the replaced character string. In these cases, the character string list DB 31 may not have the attribute field.

  By using the screen captured using this system, for example, an operation manual or the like using an actual screen can be easily created in a state where the patient's name or the like is concealed. Since the screen in the concealed state cannot be returned to the state before concealment, the state before concealment does not leak from the screen in the concealed state.

[Embodiment 2]
The present embodiment relates to an information processing apparatus 10 that accepts selection of a replacement process target. Description of portions common to the first embodiment is omitted.

  FIG. 8 is an explanatory diagram showing a record layout of the secret item DB. The secret item DB is a DB that associates an item that accepts a user selection as to whether or not to replace with an attribute that performs the replacement. The secret item DB has an item field and an attribute field.

  In the item field, an item for accepting the user's selection is recorded. In the attribute field, an attribute corresponding to the item is recorded. The secret item DB has one record for one item that accepts a user's selection. The secret item DB is stored in the auxiliary storage device 13. The confidential item DB may be stored in the electronic medical record server 39 or other storage device connected via a network.

  FIG. 9 is an explanatory diagram illustrating an example of a screen according to the second embodiment. FIG. 9 is an example of a screen displayed on the display unit 14 by the CPU 11 instead of the screen described with reference to FIG. The instruction display window 71 of the present embodiment includes a check box 77 for specifying an item to be concealed and an OK button 76.

  In FIG. 9, in addition to each item recorded in the item field of the secret item DB described with reference to FIG. 8, a check box 77 for selecting age and gender is displayed. The CPU 11 accepts designation of an item to be concealed via the check box 77. The items to be concealed shown in FIG. 9 are an example. It is possible to set items to be concealed according to information handled by the information processing system 1.

  FIG. 10 is an explanatory diagram illustrating an example of a printing screen according to the second embodiment. FIG. 10 shows an example of a screen that the CPU 11 displays on the display unit 14 when the selection of the OK button 76 in FIG. 9 is accepted.

  Based on the designation of the “patient name” and “disease name” items received via the check box 77, the CPU 11 searches the secret item DB and extracts the corresponding attributes. “Patient” and “Kanja” attributes are extracted for the “patient name” item, and “disease name” and “technique” attributes are extracted for the “disease name” item.

  The CPU 11 extracts an original character string corresponding to the extracted attribute from the character string list DB 31 described with reference to FIG. 2, and replaces it with a character string obtained by adding three asterisks to the attribute.

  Further, the CPU 11 conceals the gender mark 41 and the age column 44 based on the instruction received via the check box 77.

  FIG. 11 is a flowchart showing a flow of processing of the program according to the second embodiment. The CPU 11 displays the electronic medical record screen described with reference to FIG. 3 on the display unit 14 (step S501). The CPU 11 accepts pressing of the PrtSc key (step S502). The CPU 11 displays the instruction input window 71 described with reference to FIG. 9 on the display unit 14 (step S503).

  CPU 11 accepts selection of check box 77. The CPU 11 accepts selection of the OK button 76 (step S541). The CPU 11 determines whether there is a selected check box 77 (step S542).

  If it is determined that there is a selected check box 77 (YES in step S542), the CPU 11 starts a subroutine for replacement screen creation-2 (step S543). The replacement screen creation-2 subroutine is a subroutine that detects a character string to be replaced with an attribute designated from the screen and replaces it based on a predetermined rule. The flow of processing of the subroutine of replacement screen creation-2 will be described later.

  When it is determined that there is no selected check box 77 (NO in step S542), or after the end of step S543, the CPU 11 displays a printing screen on the display unit 14 (step S506). The CPU 11 determines whether to end the process (step S507). If it is determined not to end the process (NO in step S507), the CPU 11 returns to step S501. If it is determined that the process is to be ended (YES in step S507), the CPU 11 ends the process.

  FIG. 12 is a flowchart showing the flow of the subroutine of the replacement screen creation-2. The replacement screen creation-2 subroutine is a subroutine that detects a character string to be replaced with an attribute designated from the screen and replaces it based on a predetermined rule.

  The CPU 11 searches the concealment item DB using the item of the selected check box 77 as a key, extracts a record, and acquires the concealment target attribute from the attribute field (step S551).

  The CPU 11 sets the counter J to the initial value 1 (step S521). The CPU 11 extracts the J-th record from the character string list DB 31, and acquires the original character string recorded in the original character string field and the attribute recorded in the attribute field (step S522).

  The CPU 11 determines whether or not the attribute acquired in step S522 is included in the concealment target attribute acquired in step S551 (step S552). When it determines with it being included in the attribute of confidentiality (it is YES at step S552), CPU11 determines whether the screen displayed on the display part 14 contains the original character string acquired by step S522 (step S523).

  If it is determined that the original character string is included (YES in step S523), the CPU 11 replaces the original character string in the screen with a character string in which three asterisks are added to the end of the attribute (step S524). The CPU 11 determines whether or not the processing of all the records recorded in the character string list DB 31 has been completed (step S525).

  If it is determined that the attribute is not included in the concealment target attribute (NO in step S552) and if it is determined that the original character string is not included (NO in step S523), the CPU 11 proceeds to step S525. If it is determined that the process has not ended (NO in step S525), the CPU 11 adds 1 to the counter J (step S526). The CPU 11 returns to step S522.

  When it determines with complete | finishing (it is YES at step S525), CPU11 determines whether selection of the check box 77 which conceals the sex of a patient was received (step S554). When it is determined that it has been accepted (YES in step S554), the CPU 11 replaces the gender mark 41 having a shape that clearly indicates the gender illustrated in FIG. 3 with a shape that does not clearly indicate the gender as illustrated in FIG. Is concealed (step S555).

  If it is determined that it has not been received (NO in step S554), or after the end of step S555, the CPU 11 determines whether or not selection of the check box 77 that conceals the age of the patient has been received (step S556). When it determines with having received (it is YES at step S556), CPU11 conceals the age of a patient by replacing the age of the age column 44 with an asterisk (step S557).

  If it is determined that it has not been accepted (NO in step S556), or after the end of step S557, the CPU 11 ends the process.

  According to the present embodiment, it is possible to provide the information processing apparatus 10 that receives selection of a replacement process target. For example, when using a screen image for academic reports, the user can adjust the range of information to be concealed as necessary, such as concealing the patient's name but not the disease name.

[Embodiment 3]
The present embodiment relates to an information processing system 1 in which a support person performs remote support in real time. Description of portions common to the first embodiment is omitted.

  FIG. 13 is an explanatory diagram illustrating a configuration of the information processing system 1 according to the third embodiment. The information processing system 1 includes an information processing apparatus 10, an electronic medical record server 39, and a second information processing apparatus 20 connected via a network. The information processing apparatus 10 and the electronic medical record server 39 are the same as the information processing apparatus 10 of Embodiment 1 and the electronic medical record server 39 described with reference to FIG.

  The second information processing device 20 includes a second CPU 21, a main storage device 22, an auxiliary storage device 23, a second display unit 24, a second input unit 25, a communication unit 26, and a bus.

  The second CPU 21 is an arithmetic control device that executes a program according to the present embodiment. As the second CPU 21, one or a plurality of CPUs, a multi-core CPU, or the like is used. The second CPU 21 is connected to each part of hardware configuring the second information processing apparatus 20 via a bus.

  The main storage device 22 is a storage device such as SRAM, DRAM, or flash memory. The main storage device 22 temporarily stores information necessary during the processing performed by the second CPU 21 and a program being executed by the second CPU 21.

  The auxiliary storage device 23 is a storage device such as an SRAM, a flash memory, a hard disk, or a magnetic tape. The auxiliary storage device 23 stores a program to be executed by the second CPU 21 and various data necessary for executing the program. The second display unit 24 is a liquid crystal display panel or an organic EL display panel. The second input unit 25 is a device such as a mouse, a keyboard, a touch panel, or a pen tablet. The communication unit 26 is an interface that performs communication with a network.

  The second information processing apparatus 20 is a general-purpose personal computer or a tablet. The second information processing apparatus 20 is an example of an apparatus used when a support person performs remote support.

  FIG. 14 is an explanatory diagram illustrating an example of a screen of the second information processing apparatus 20 according to the third embodiment. When the screen described with reference to FIG. 3 is displayed on the display unit 14 of the information processing apparatus 10, the screen illustrated in FIG. 14 is displayed on the second display unit 24 of the second information processing apparatus 20.

  In the screen shown in FIG. 14, the Kana patient name column 42, the kanji patient name column 43, the doctor name column 55, the disease name column 56, and the technique column 57 are displayed in the respective columns as in the screen described with reference to FIG. 5. Is replaced with a character string obtained by adding three asterisks to the attribute of the character string displayed in.

  The person in charge of support can perform so-called remote support in which the user explains the method of using the information processing apparatus 10 through a telephone or the like while viewing the screen shown in FIG.

  FIG. 15 is a flowchart showing a flow of processing of the program according to the third embodiment. The CPU 11 displays the electronic medical record screen described with reference to FIG. 3 on the display unit 14 (step S501).

  When a trouble such as an incomprehensible operation method occurs, the user of the information processing apparatus 10 contacts a support person using a telephone or the like. The person in charge of support uses the second information processing apparatus 20 to perform an operation of starting remote support. The second CPU 21 transmits an access request to the CPU 11 (step S701).

  The CPU 11 receives an access request (step S561). The CPU 11 authenticates the access request (step S562). Authentication is performed using, for example, a password and an ID (Identifier). If the access is illegal and authentication cannot be performed, the CPU 11 ignores the access request received in step S561. Hereinafter, a case where access is valid and authentication is successful will be described.

  The CPU 11 starts a replacement screen creation subroutine (step S563). The subroutine for creating the replacement screen is the same subroutine as the subroutine described with reference to FIG. The CPU 11 transmits data for displaying the replacement screen created in step S563 to the second CPU 21 via the network (step S564). The data can be transmitted using an HTML (HyperText Markup Language) format, an AVI (Audio Video Interleave) format, or the like.

  The second CPU 21 receives data (step S702). The second CPU 21 displays the screen described with reference to FIG. 14 on the second display unit 24 based on the received data (step S703).

  CPU11 receives operation by a user via input part 15 (Step S565). The CPU 11 determines whether to end the process based on the received operation (step S566). When it determines with not complete | finishing a process (it is NO at step S566), CPU11 updates the screen displayed on the display part 14 based on operation received by step S565 (step S567). The CPU 11 returns to step S563. If it is determined that the process is to be ended (YES in step S566), the CPU 11 ends the process.

  According to this embodiment, it is possible to provide an information processing system 1 in which a support person performs remote support in real time. The person in charge of the support can perform appropriate support while checking the screen operated by the user in real time without looking at the name of the patient.

  In step S565, the CPU 11 may accept an operation by the second input unit 25 via a network. The person in charge of support can operate the information processing apparatus 10 instead of the user and explain the operation to the user.

[Embodiment 4]
The present embodiment relates to an information processing apparatus 10 that switches presence / absence of display of information that is highly necessary to be concealed based on an access right. Description of portions common to the first embodiment is omitted.

  FIG. 16 is an explanatory diagram showing a record layout of the authority DB. The authority DB is a DB that associates a user ID with a user authority. The secret item DB has a user ID field and an authority field.

  A user ID unique to the user is recorded in the user ID field. In the authority field, the authority granted to the user is recorded. When “None” is recorded in the authority field, the authority to access information that is highly necessary to be concealed, such as the name of the patient, is not granted. When “Yes” is recorded in the authority field, the authority to access information that is highly necessary to be concealed is given. For example, authority is given to users such as doctors and nurses, and authority is not given to users who are in charge of maintenance of the information processing apparatus 10.

  The authority DB is stored in the auxiliary storage device 13. The authority DB may be stored in the electronic medical record server 39 or another storage device connected via a network.

  When the user who has recorded “Yes” in the authority field logs on and uses the CPU 11, the CPU 11 displays the screen described with reference to FIG. The user can view the patient's name, disease name, and the like. When the user whose “None” is recorded in the authority field is logged on and used, the CPU 11 displays the screen described with reference to FIG. The user can operate the information processing apparatus 10 without browsing the patient's name, disease name, and the like.

  FIG. 17 is a flowchart showing a flow of processing of the program according to the fourth embodiment. The CPU 11 displays a logon screen on the display unit 14 (step S581). The logon screen is a screen that requests input of a user ID and a password, for example. The CPU 11 authenticates logon (step S582). If the user ID or password is invalid and authentication cannot be performed, the CPU 11 ignores the logon request. In the following description, a case where authentication is successful will be described.

  The CPU 11 extracts a record from the authority DB using the user ID as a key, and determines whether there is an authority with reference to the authority field (step S583). If it is determined that there is an authority (YES in step S583), the CPU 11 cooperates with the electronic medical record server 39 to update screen data used to generate a screen to be displayed on the display unit 14 (step S584). .

  CPU11 displays the screen demonstrated using FIG. 3, for example on the display part 14 based on the updated screen data (step S585). CPU11 receives operation by a user via input part 15 (Step S586).

  The CPU 11 determines whether to end the process based on the accepted operation (step S587). If it is determined not to end the process (NO in step S587), the CPU 11 returns to step S584. If it is determined that the process is to be ended (YES in step S587), the CPU 11 ends the process.

  When it is determined that there is no authority (NO in step S583), the CPU 11 cooperates with the electronic medical record server 39 to update screen data used to generate a screen to be displayed on the display unit 14 (step S591). . The screen data updated in step S591 is the same as the screen data updated in step S584.

  The CPU 11 starts a replacement screen creation subroutine (step S592). The subroutine for creating the replacement screen is the same subroutine as the subroutine described with reference to FIG.

  CPU11 displays the screen demonstrated using FIG. 14, for example on the display part 14 (step S593). CPU11 receives operation by a user via input part 15 (Step S594).

  Based on the accepted operation, the CPU 11 determines whether or not to end the process (step S595). If it is determined not to end the process (NO in step S595), the CPU 11 returns to step S591. If it is determined that the process is to be ended (YES in step S595), the CPU 11 ends the process.

  According to the present embodiment, it is possible to provide the information processing apparatus 10 that switches the presence / absence of information that is highly necessary to be concealed based on the access right. For example, a system maintenance person can perform system maintenance without seeing information such as a patient's name.

  The information processing apparatus 10 may be installed in a support center or the like. The maintenance staff can maintain the system at a remote location without seeing information such as the patient's name. In this case, the CPU 11 may determine the presence / absence of authority based on, for example, the IP (Internet Protocol) address of the information processing apparatus 10.

[Embodiment 5]
The present embodiment relates to an information processing apparatus 10 that replaces an original character string with a predetermined replacement character string. Description of portions common to the first embodiment is omitted.

  FIG. 18 is an explanatory diagram illustrating a record layout of the character string list DB 31 according to the fifth embodiment. The character string list DB 31 is a DB that associates a character string to be replaced, an attribute, and a replacement character string among information that may be displayed on the display unit 14.

  The character string list DB 31 has an attribute field, an original character string field, and a replacement character string field. The character string list DB 31 is an example of a DB that records the character string list of the present embodiment.

  A list of character strings to be replaced is recorded in the original character string field. An attribute of the original character string is recorded in the attribute field. A replacement character string for replacing the original character string is recorded in the replacement character string field. For example, the original character string “Yamaoka Kayoko” is replaced with the replacement character string “patient 001”.

  In the present embodiment, the replacement character string is a character string in which a 3-digit serial number is added after the attribute, but the relationship between the original character string and the replacement character string is arbitrary. The replacement character string may be, for example, a character string in which an attribute is added after the serial number. The replacement character string may be another character string having the same meaning as the original character string.

  For example, the replacement character string for the original character string “Yamaoka Kayoko” may be “Yamada Hanako” that can be recognized as a female name. A user who sees the screen after the character string is replaced can work without being aware of the fact that the information is kept secret.

  FIG. 19 is an explanatory diagram illustrating an example of a printing screen according to the fifth embodiment. The screen shown in FIG. 19 shows an example of a screen displayed on the display unit 14 by the CPU 11 instead of the screen described with reference to FIG.

  In the screen shown in FIG. 19, the Kana patient name field 42, the kanji patient name field 43, the doctor name field 55, the disease name field 56, and the surgical technique field 57 are replaced characters corresponding to the original character strings displayed in the respective fields. Has been replaced by a column.

  The person in charge of support can recognize that different doctor names are displayed, for example, in the doctor column, the surgeon column, and the assistant column. Therefore, the situation can be accurately grasped even when a complicated trouble occurs.

[Embodiment 6]
The present embodiment relates to an information processing system that replaces an original character string with a graphic. Description of portions common to the first embodiment is omitted.

  FIG. 20 is an explanatory diagram illustrating an example of a printing screen according to the sixth embodiment. In FIG. 20, the original character strings in the Kana patient name column 42, the Kanji patient name column 43, and the patient name column 53 are replaced with black ellipses.

  Instead of an ellipse, a figure having an arbitrary shape such as a rectangle or an ellipse may be used. For example, you may use the figure of the external appearance filled with thick magic. Different shapes or colors may be used depending on the attributes of the original character string.

  It is easy to understand that the original character string is intentionally hiding, and the information processing apparatus 10 that emphasizes the necessity of concealing information can be provided.

[Embodiment 7]
FIG. 21 is a functional block diagram illustrating the operation of the information processing apparatus 10 according to the seventh embodiment. The information processing apparatus 10 according to the present embodiment operates as follows based on control by the CPU 11.

  The information processing apparatus 10 includes a detection unit 95, a replacement unit 96, and an output unit 97. The detection unit 95 detects the first character string to be replaced from the screen display data. The replacement unit 96 replaces the first character string detected by the detection unit 95 with a predetermined second character string or figure. The output unit 97 outputs screen display data including the second character string or the figure replaced by the replacement unit 96.

[Embodiment 8]
The present embodiment relates to a mode for realizing the information processing apparatus 10 of the present embodiment by operating a general-purpose computer 90 and a program 91 in combination. FIG. 22 is an explanatory diagram illustrating a configuration of the information processing system 1 according to the eighth embodiment. The configuration of this embodiment will be described with reference to FIG. Note that description of portions common to the first embodiment is omitted.

  The information processing system 1 includes a computer 90 and an electronic medical record server 39 connected via a network. The computer 90 includes a CPU 11, a main storage device 12, an auxiliary storage device 13, a display unit 14, an input unit 15, a communication unit 16, a reading unit 17, and a bus. The computer 90 is a general-purpose personal computer or a tablet.

  The reading unit 17 is a device that reads the portable recording medium 92, and specifically, for example, an SD (Secure Digital) card slot, an optical disk drive, or a USB (Universal Serial Bus) port.

  The program 91 is recorded on a portable recording medium 92. The CPU 11 reads the program 91 via the reading unit 17 and stores it in the auxiliary storage device 13. The CPU 11 may read the program 91 stored in the semiconductor memory 93 such as a flash memory mounted in the computer 90. Further, the CPU 11 may download the program 91 from another server computer (not shown) connected via a network and save it in the auxiliary storage device 13.

  The program 91 is installed as a control program for the computer 90, loaded into the main storage device 12, and executed. Thereby, the computer 90 functions as the information processing apparatus 10 described above.

The technical features (components) described in each embodiment can be combined with each other, and new technical features can be formed by combining them.
The embodiment disclosed this time is to be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the meanings described above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  With respect to the embodiments including the above first to eighth embodiments, the following additional notes are disclosed.

(Appendix 1)
The first character string to be replaced is detected from the screen display data,
Replacing the detected first character string with a predetermined second character string or figure;
A program that causes a computer to execute processing for outputting data for screen display including the replaced second character string or the graphic.

(Appendix 2)
The program according to claim 1, wherein a first character string that matches a character string in the character string list is detected from the data with reference to a character string list including a character string and an attribute of the character string.

(Appendix 3)
The program according to claim 2, wherein the second character string includes a character string associated with an attribute of the first character string.

(Appendix 4)
The program according to Supplementary Note 2 or Supplementary Note 3, wherein the character string list includes a second character string associated with each of the character strings.

(Appendix 5)
Accepting the necessity of replacement for each attribute,
The program according to any one of Supplementary Note 2 to Supplementary Note 4, wherein a first character string that matches the character string having the attribute that is accepted as requiring replacement in the character string list is detected.

(Appendix 6)
The number of characters of the second character string is the same as the number of characters of the first character string. The program according to any one of supplementary notes 1 to 5.

(Appendix 7)
Display a screen based on the data,
Accept the need for replacement,
The program according to any one of Supplementary Note 1 to Supplementary Note 4, wherein when the replacement is accepted, the replacement data is output.

(Appendix 8)
Accept user logons,
Based on the access rights of the logged-on user, determine the necessity of replacement,
The program according to any one of appendix 1 to appendix 7, wherein when it is determined that the replacement is required, the replaced data is displayed on a screen.

(Appendix 9)
Accepts connection requests from information processing devices connected via a network,
The program according to any one of Supplementary Note 1 to Supplementary Note 8, wherein the replaced data is transmitted to the information processing apparatus.

(Appendix 10)
The program according to appendix 9, wherein a screen is displayed based on the data before replacement.

(Appendix 11)
The program according to any one of Supplementary Note 1 to Supplementary Note 10, wherein the output is printing a screen image or saving a captured image of the screen image.

(Appendix 12)
The first character string to be replaced is detected from the screen display data,
Replacing the detected first character string with a predetermined second character string or figure;
An information processing method for causing a computer to execute a process of outputting screen display data including the replaced second character string or the graphic.

(Appendix 13)
A detection unit for detecting a first character string to be replaced from data for screen display;
A replacement unit that replaces the first character string detected by the detection unit with a predetermined second character string or figure;
And an output unit that outputs data for screen display including the replaced second character string or the graphic.

DESCRIPTION OF SYMBOLS 1 Information processing system 10 Information processing apparatus 11 CPU
12 Main Storage Device 13 Auxiliary Storage Device 14 Display Unit 15 Input Unit 16 Communication Unit 17 Reading Unit 20 Second Information Processing Device 21 Second CPU
22 Main storage device 23 Auxiliary storage device 24 Second display unit 25 Second input unit 26 Communication unit 31 Character string list DB
39 Electronic Medical Record Server 40 Patient Field 41 Gender Mark 42 Kana Patient Name Field 43 Kanji Patient Name Field 44 Age Field 50 Surgery Application Field 53 Patient Name Field 55 Physician Name Field 56 Disease Name Field 57 Surgery Field Field 60 Progress Record Field 71 Instruction Input Window 72 Print button 73 Capture button 74 Button to conceal 75 Button not to conceal 76 OK button 77 Check box 90 Computer 91 Program 92 Portable recording medium 93 Semiconductor memory 95 Detection unit 96 Replacement unit 97 Output unit

Claims (9)

The first character string to be replaced is detected from the screen display data,
Replacing the detected first character string with a predetermined second character string or figure;
A program that causes a computer to execute processing for outputting data for screen display including the replaced second character string or the graphic. The program according to claim 1, wherein a first character string that matches a character string in the character string list is detected from the data with reference to a character string list including a character string and an attribute of the character string. The program according to claim 2, wherein the second character string includes a character string associated with an attribute of the first character string. Accepting the necessity of replacement for each attribute,
The program according to claim 2 or 3, wherein a first character string that matches the character string having the attribute that is accepted as requiring replacement in the character string list is detected. Display a screen based on the data,
Accept the need for replacement,
The program according to any one of claims 1 to 3, wherein when the replacement is accepted, the replaced data is output. Accept user logons,
Based on the access rights of the logged-on user, determine the necessity of replacement,
The program according to any one of claims 1 to 5, wherein when it is determined that replacement is required, the replaced data is displayed on a screen. Accepts connection requests from information processing devices connected via a network,
The program according to any one of claims 1 to 6, wherein the replaced data is transmitted to the information processing apparatus. The first character string to be replaced is detected from the screen display data,
Replacing the detected first character string with a predetermined second character string or figure;
An information processing method for causing a computer to execute a process of outputting screen display data including the replaced second character string or the graphic. A detection unit for detecting a first character string to be replaced from data for screen display;
A replacement unit that replaces the first character string detected by the detection unit with a predetermined second character string or figure;
And an output unit that outputs data for screen display including the replaced second character string or the graphic.

Images