JP2023093985A - Intermediation system, information intermediation method, and computer system - Google Patents

Abstract

To intermediate information between a medical organization and an insurance company with consent of an insured person.SOLUTION: An intermediation system receives, from a medical system, a first request inquiring a payment condition of insurance of a user, transmits, to a terminal, a second request inquiring whether or not transmission/reception of the information regarding the payment condition is possible if consent to transmission/reception of the information regarding the payment condition is not obtained, transmits a third request inquiring the user payment condition if the consent to transmission/reception of the information regarding the payment condition is already obtained, and transmits a second response including the information regrading the payment condition to the medical system if a first response including the information regarding the payment condition is received.SELECTED DRAWING: Figure 4

Description

The present invention relates to a system and method for supporting exchange of patient information between medical institutions and insurance companies.

Personalized medicine is progressing in cancer treatment, etc., and in addition to an increase in the types of therapeutic drugs and treatment methods, expensive therapeutic drugs and treatment methods that are highly effective only for patients with specific medical conditions have appeared. . Therefore, there is a possibility that medical treatment determined by a doctor in consideration of the patient's condition may not be covered by insurance, and a situation is assumed in which it is determined whether or not the medical treatment is covered by private insurance.

Patent Literature 1 describes an insurance information system that outputs the state of application of public insurance and private insurance according to a member's illness.

JP-A-2005-50376

Since the system described in Patent Document 1 is not equipped with a means to acquire patient consent information regarding information exchange, when using the system, medical institutions have to directly ask patients for consent information, which is a complicated task. is necessary.

A representative example of the invention disclosed in the present application is as follows. In other words, it is an intermediary system that supports the exchange of information, which includes at least one computer and provides a medical system managed by a medical institution, a terminal owned by a user who uses the medical institution, and an insurance policy subscribed by the user. connected to an insurance system managed by an insurance company, receives a first request from the medical system to inquire about the payment terms of the insurance that the user subscribes to, and does not obtain consent to the transfer of information on the payment terms, A second request is sent to the terminal to inquire whether or not the information regarding the payment terms can be transferred, and if consent to the transfer of the information regarding the payment terms is obtained, the payment terms of the user are sent to the insurance system. If a third request to inquire is sent and a first response including information about the payment terms is received as a response to the third request, the medical system includes information about the payment terms as a response to the first request. Send a second response.

According to the present invention, the intermediation system can acquire the user's (insured person's) consent regarding the exchange of information between the medical institution and the insurance company, and mediate the information. Problems, configurations, and effects other than those described above will be clarified by the following description of the embodiments.

1 is a diagram illustrating an outline of a system according to Example 1; FIG. 2 is a diagram illustrating the hardware configuration and software configuration of the mediation system of Example 1; FIG. 3 is a diagram illustrating the hardware configuration and software configuration of the user terminal of Example 1; FIG. 4 is a sequence diagram illustrating the flow of processing in the system of Example 1; FIG. FIG. 10 is a diagram showing an example of a screen presented via the application of Example 1; FIG. FIG. 10 is a diagram showing an example of a screen presented via the application of Example 1; FIG. FIG. 10 is a diagram showing an example of a screen presented via the application of Example 1; FIG. FIG. 10 is a diagram showing an example of a screen presented via the application of Example 1; FIG. FIG. 10 is a diagram showing an example of a screen presented via the application of Example 1; FIG. FIG. 11 is a sequence diagram illustrating the flow of processing in the system of Example 3; FIG. 11 is a sequence diagram illustrating the flow of processing in the system of Example 3;

Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, the present invention should not be construed as being limited to the contents of the examples described below. Those skilled in the art will easily understand that the specific configuration can be changed without departing from the idea or gist of the present invention.

In the configurations of the invention described below, the same or similar configurations or functions are denoted by the same reference numerals, and overlapping descriptions are omitted.

The notations such as “first”, “second”, “third”, etc. in this specification and the like are attached to identify the constituent elements, and do not necessarily limit the number or order.

The position, size, shape, range, etc. of each component shown in the drawings may not represent the actual position, size, shape, range, etc. in order to facilitate understanding of the invention. Therefore, the present invention is not limited to the positions, sizes, shapes, ranges, etc. disclosed in the drawings and the like.

FIG. 1 is a diagram for explaining the outline of the system according to the first embodiment.

The system comprises an intermediary system 100, a user terminal 101 operated by an insured person, an insurance company system 102, and a medical institution system 103.

The medical institution inquires of the mediation system 100 about the insurance payment conditions of the insured person when the medical institution performs medical treatment on the insured person, or when performing medical treatment. The inquiry includes the identification information of the medical institution (for example, the medical institution code) and the patient registration card number of the user. The intermediary system 100 extracts the insured person's information based on the identification information of the medical institution and the patient registration number, and inquires of the insured person based on the extracted information as to whether or not he agrees to the transfer of personal information.

When the insured person answers that he/she agrees, the brokerage system 100 extracts the information of the insurance company that the insured person joins, and based on the extracted information, informs the insurance company of the insured person's insurance. Inquire about payment terms.

The insurance company replies to the brokerage system 100 with the insurance payment terms of the insured. The reply is transmitted to the medical institution via the mediation system 100 . In addition, insurance payment terms for multiple medical practices may be answered.

FIG. 2 is a diagram illustrating the hardware configuration and software configuration of the mediation system 100 of the first embodiment.

The mediation system 100 is composed of at least one computer 200 . Computer 200 has processor 201 , storage device 202 , input device 203 , output device 204 and communication interface 205 . Each hardware element is connected to each other via bus 206 .

The processor 201 functions as an intermediation control unit 210 that implements various functions of the intermediation system 100 by executing programs stored in the storage device 202 .

The intermediary control unit 210 retrieves data in response to an inquiry and queries the user terminal 101 and the systems 102 and 103 . For example, when the intermediary control unit 210 receives an inquiry about the insurance payment conditions of the insured person from a medical institution, it searches data related to the insured person and acquires an individual ID (identifier), an insurance policy number, and the like.

The storage device 202 stores programs executed by the processor 201 and information used by the programs. The storage device 202 is also used as a work area for the processor 201 .

The storage device 202 of this embodiment is a non-temporary or temporary storage medium, such as ROM (Read Only Memory), RAM (Random Access Memory), HDD (Hard Disk Drive), and flash memory. . The storage device 202 stores a program that implements the intermediation control unit 210, and also stores an individual management DB 220, a medical institution management DB 221, an insurance company management DB 222, a consent trail DB 223, a patient ticket management DB 224, and an insurance management DB 225.

The individual management DB 220 is a database for managing data on insured persons. The personal management DB 220 stores data including the identification information, name, and contact information of the insured person. The consent trail DB 223 is a database for managing data related to the insured's consent to transfer of information on insurance. The consent trail DB 223 stores data including the identification information of the insured person, the identification information of the insurance company, the identification information of the medical institution, the date and time of consent, the content of consent, the expiration date of consent, and the like. The identification information of the insured person is, for example, an insurance policy number, a patient registration card number, or a My Number (registered trademark, the same shall apply hereinafter) number.

The medical institution management DB 221 is a database for managing data regarding medical institutions. The medical institution management DB 221 stores data including identification information and names of medical institutions. The consultation ticket management DB 224 is a database for managing data relating to consultation tickets of medical institutions. The consultation ticket management DB 224 stores data including the name of the insured person, the name of the medical institution, the number of the consultation ticket, and the like.

The insurance company management DB 222 is a database for managing data on insurance companies. The insurance company management DB 222 stores data including identification information and names of insurance companies. The insurance management DB 225 is a database for managing data related to insurances to which the insured is enrolled. The insurance management DB 225 stores data including the name of the insured person, insurance policy number, and the like.

The input device 203 is a device for inputting various information, such as a keyboard, mouse, touch panel, numeric keypad, scanner, and microphone. Information on the insured person, information on the medical institution, information on the insurance company, and the like are input via the input device 203 . Note that the information may be entered via an application.

The output device 204 is a device for outputting various information, such as a display, a printer, and a speaker. Via the output device 204, the insurance payment status of the insurance subscribed by the insured is output. Note that the information may be output via the application.

Communication IF 205 communicates with an external device via a network. The communication IF 205 receives, for example, information input via applications held by the insured person, the medical institution, and the insurance company, and transmits various types of information to the applications held by the insured person, the medical institution, and the insurance company. do.

FIG. 3 is a diagram illustrating the hardware configuration and software configuration of the user terminal 101 according to the first embodiment.

The user terminal 101 has a processor 301 , a storage device 302 , an input device 303 , an output device 304 and a communication interface 305 . Each hardware element is connected to each other via bus 306 .

Processor 301, storage device 302, input device 303, output device 304, communication interface 305 and bus 306 are identical to processor 201, storage device 202, input device 203, output device 204, communication interface 205 and bus 206. Therefore, the explanation is omitted.

Storage device 302 stores a program that implements application 310 for using mediation system 100 . A program that implements the application 310 may be installed in advance, or may be installed from an external system via the communication IF 305 . Also, the application 310 transmits and receives various information via the communication IF 305 .

The insurance company's system 102 and the medical institution's system 103 are composed of computers having the same hardware as the computer 200 . An application 310 is running on the computer. The system 102 holds a database for managing the details of the insurance of the insured person and the payment conditions of the insurance, and the system 103 holds a database for managing the medical information of the insured person. .

FIG. 4 is a sequence diagram illustrating the flow of processing in the system of the first embodiment; 5A, 5B, 5C, 5D, and 5E are diagrams showing examples of screens presented via the application 310 of Example 1. FIG.

The insurance company registers data on the insurance company via application 310 on system 102 (step S401). The brokerage system 100 registers data in the insurance company management DB 222 . It should be noted that the brokerage system 100 generates identification information that uniquely identifies the insurance company or acquires it from an external DB and attaches it to the data when registering the data.

The medical institution registers data regarding the medical institution via the application 310 on the system 103 (step S402). The mediation system 100 registers data in the medical institution management DB 221 . When registering data, the mediation system 100 generates identification information that uniquely identifies a medical institution or acquires it from an external DB and attaches it to the data.

The insured person registers data on the insured person via the application 310 on the user terminal 101 (step S403). The intermediary system 100 registers data in the personal management DB 220 . It should be noted that the brokerage system 100 generates identification information that uniquely identifies the insured at the time of data registration, or obtains the identification information from an external DB and attaches it to the data.

When the insured person takes out insurance, the insurance company sends the insured person an insurance policy and a registration guide to the brokerage system 100 . The insured person registers insurance-related data via the application 310 running on the user terminal 101 (step S404). The brokerage system 100 registers data in the insurance management DB 225. FIG.

When the insured visits a medical institution, the medical institution provides the insured with a patient registration card. The insured person registers data on the patient registration card via the application 310 on the user terminal 101 (step S405). The mediation system 100 registers data in the patient registration ticket management DB 224 .

The application 310 presents a screen 500 as shown in FIG. 5A in order to register data regarding the patient registration card. The screen 500 includes fields for entering the medical institution and patient registration card numbers. Note that an operation button for reading a photograph of a patient registration card and an IC (Integrated Circuit) tag may be included.

The medical institution transmits a payment terms inquiry including the patient registration card number and identification information of the medical institution to the intermediation system 100 via the application 310 (step S406). Application 310 presents, for example, screen 510 as shown in FIG. 5B. The medical institution inputs the patient registration card number and presses an inquiry button.

When the intermediary system 100 receives the inquiry, it refers to the medical institution management DB 221, authenticates the medical institution, and identifies the insured person (step S407). Specifically, the brokerage control unit 210 refers to the consultation ticket management DB 224 to obtain the name of the insured person corresponding to the consultation ticket number, and refers to the individual management DB 220 to obtain the contact information.

Intermediary system 100 transmits a consent inquiry to application 310 on user terminal 101 based on the contact information (step S408).

Application 310 on user terminal 101 presents screens 520 and 530 as shown in FIG. 5C or FIG. 5D based on the inquiry, and accepts the insured's answer. The application 310 transmits the insured person's response to the brokerage system 100 (step S409). In the case of a reply to the effect of consenting to the transfer of information, the intermediary system 100 registers the data in the consent trail DB 223 .

Here, the explanation is continued assuming that the answer is to consent to the exchange of information.

The intermediation system 100 identifies an insurance company that provides insurance to which the insured person subscribes (step S410). Specifically, brokerage control unit 210 refers to insurance management DB 225 to acquire information on an insurance policy corresponding to the name of the insured person, and identifies the insurance company based on the information on the insurance policy.

The intermediary system 100 sends a query for payment terms, including identification information of the insurance company and policy number, to the application 310 on the system 102 of the identified insurance company (step S411).

If a payment terms inquiry is received, the insurance company system 102 retrieves the payment terms from the database based on the policy number, and the application 310 sends the insurance payment terms response to the intermediary system 100 (step S412). ).

The intermediary system 100 transmits a response regarding insurance payment conditions to the application 310 on the system 103 of the medical institution (step S413). Based on the responses received, application 310 presents screen 540 as shown in FIG. 5E. The medical institution refers to the screen 540 to determine the treatment policy for the insured person.

In step S407, the intermediary system 100 may identify the insured person and the insurer, refer to the consent trail DB 223, and determine whether or not consent has already been obtained. If consent can be confirmed, the intermediation system 100 makes a payment inquiry without sending an consent inquiry.

According to the first embodiment, the intermediation system 100 associates and manages the medical institution used by the insured person and the insurance the insured person subscribes to, and also manages the medical institution and the insured person. It is possible to centrally manage whether or not to consent to the transfer of information. As a result, the medical institution does not need to make inquiries directly to the insured person, so it is possible to improve operational efficiency. In addition, since the mediation system 100 centrally manages the information of the insured person, the medical institution, and the insurance company, the efficiency of the system as a whole can be improved.

In Example 2, the information included in the inquiry is partially different. The second embodiment will be described below, focusing on the differences from the first embodiment.

The configuration of the system of the second embodiment is the same as that of the first embodiment. The hardware configuration and software configuration of the mediation system 100, the user terminal 101, the systems 102 and 103 of the second embodiment are the same as those of the first embodiment.

The processing flow of the system of the second embodiment is the same as that of the first embodiment. However, the query method is partially different.

In step S<b>406 , the medical institution transmits to the intermediary system 100 via the application 310 a payment terms inquiry including the patient registration card number, the identification information of the medical institution, and the encrypted special care-required personal information. The personal care-required information in this embodiment is the medical information of the insured person. Here, the medical information includes medical history, past history, diagnosis name, treatment method, treatment policy, electronic chart, PHR (Personal Health Record), and the like.

In step S411, the intermediary system 100 sends a payment terms query including insurance company identification, policy number, and medical information to the application 310 on the system 102 of the identified insurance company. Specifically, the brokerage control unit 210 decrypts the encrypted medical information and encrypts it in a format that can be decrypted by the insurance company. Insurance company system 102 decodes the medical information and retrieves payment terms from the database based on the policy number and medical information.

Communication between the brokerage system 100 and the medical institution's system 103 and communication between the brokerage system 100 and the insurance company's system 102 are encrypted using a common authentication key. An authentication key is also described as an encryption key.

As described above, according to the second embodiment, the insurance company can decide whether to accept the insurance payment based on the medical information of the insured person. This allows the medical institution to confirm in detail the insurance payment conditions for the treatment method under consideration, thereby further improving operational efficiency.

In the third embodiment, various inquiries are made to the mediation system 100 while the personal information requiring consideration is kept confidential. The third embodiment will be described below, focusing on the differences from the first embodiment.

The system configuration of the third embodiment is the same as that of the first embodiment. The hardware configuration and software configuration of the mediation system 100, the user terminal 101, the systems 102 and 103 of the third embodiment are the same as those of the first embodiment. However, in Example 3, the structure of the data stored in individual management DB220, medical institution management DB221, and insurance company management DB222 differs.

The personal management DB 220 stores data including IDs, names, contact information, etc., in association with public keys. In the medical institution management DB 221, data including IDs, names of medical institutions, etc., and public keys are stored in association with each other. The insurance company management DB 222 stores data including IDs, insurance company names, etc., in association with public keys. Note that the private key and public key are examples of encryption keys.

6A and 6B are sequence diagrams explaining the flow of processing in the system of the third embodiment.

The insurance company registers data and public key regarding the insurance company via application 310 on system 102 (step S601). The brokerage system 100 associates and registers the data and the public key in the insurance company management DB 222 . Let public key I be the public key sent by the insurance company. It should be noted that the brokerage system 100 generates identification information that uniquely identifies the insurance company or acquires it from an external DB and attaches it to the data when registering the data.

The medical institution registers data and public key regarding the medical institution via the application 310 on the system 103 (step S602). The mediation system 100 associates and registers the data and the public key in the medical institution management DB 221 . Assume that a public key H is a public key transmitted by a medical institution. When registering data, the mediation system 100 generates identification information that uniquely identifies a medical institution or acquires it from an external DB and attaches it to the data.

The insured person registers data and public key regarding the insured person via the application 310 on the user terminal 101 (step S603). The mediation system 100 associates and registers the data and the public key in the personal management DB 220 . A public key U is a public key transmitted by the insured person. It should be noted that the brokerage system 100 generates identification information that uniquely identifies the insured at the time of data registration, or obtains the identification information from an external DB and attaches it to the data.

When the insured person takes out insurance, the insurance company sends the insured person an insurance policy and a registration guide to the brokerage system 100 . The insured person registers insurance-related data via the application 310 running on the user terminal 101 (step S604). The brokerage system 100 registers data in the insurance management DB 225. FIG.

The brokerage system 100 identifies the insurance company corresponding to the insurance policy, transmits the public key I corresponding to the identified insurance company to the insured person (step S605), and sends the insurance policy to the identified insurance company. The public key U is transmitted together with the registration status of the securities (step S606).

When the insured visits a medical institution, the medical institution provides the insured with a patient registration card. The insured person registers data related to the patient registration card via the application 310 on the user terminal 101 (step S607). The mediation system 100 registers data in the patient registration ticket management DB 224 .

The application 310 presents a screen 500 as shown in FIG. 5A in order to register data regarding the patient registration card. The screen 500 includes fields for entering the medical institution and patient registration card numbers. Note that an operation button for reading a photograph of a patient registration card and an IC (Integrated Circuit) tag may be included.

The brokerage system 100 transmits the public key H corresponding to the medical institution to the insured person (step S608), and transmits the registration status of the patient registration card and the public key U to the medical institution (step S609).

The medical institution transmits a payment terms inquiry including the patient registration card number, medical information, and identification information of the medical institution to the intermediation system 100 via the application 310 (step S610). Application 310 presents, for example, screen 510 as shown in FIG. 5B. The medical institution inputs the patient registration card number and presses an inquiry button. The medical information, which is personal information requiring special care, is encrypted using the public key U by the system 103 of the medical institution.

When the intermediary system 100 receives the inquiry, it refers to the medical institution management DB 221, authenticates the medical institution, and identifies the insured person (step S611). Specifically, the brokerage control unit 210 refers to the consultation ticket management DB 224 to obtain the name of the insured person corresponding to the consultation ticket number, and refers to the individual management DB 220 to obtain the contact information.

Intermediary system 100 transmits a consent inquiry to application 310 on user terminal 101 based on the contact information (step S612). At this time, the intermediary system 100 also transmits the medical information encrypted using the public key U.

Application 310 on user terminal 101 presents screens 520 and 530 as shown in FIG. 5C or FIG. 5D based on the inquiry, and accepts the insured's answer. Note that the application 310 uses the secret key U to decrypt the encrypted medical information. The application 310 transmits the insured's reply to the brokerage system 100 (step S613). The response includes consent-related information encrypted using private key U and medical information encrypted using public key I. Intermediary system 100 decrypts the information about consent using public key U, and registers the data in consent trail DB 223 if the answer is to consent to the exchange of information.

It should be noted that it may be possible to select whether or not to include special care-required personal information such as medical information in the information that consents to the transfer. If the insured person does not consent to transfer of the special care-required personal information, medical institutions and insurance companies cannot refer to the special care-required personal information. Concerning the consent to transfer of the information, there may be an embodiment in which the consent of the insured person is not required each time, such as consent for a specified period and long-term consent. In this case, the type of consent and the like are recorded in the consent trail DB 223 . Application 310 automatically performs decryption and encryption. In addition, all data other than special care-required personal information derived from medical institutions or insurance companies is decrypted after asking the insured person's consent each time, and the insured person's application using private key U and public key U There may be some form of communication between 310 and the intermediary system 100 .

Note that the application 310 on the user terminal 101 may display a screen for designating the public key I to be used. Thereby, the processing load of the mediation system 100 can be reduced.

Note that if the application 310 on the user terminal 101 does not hold the public key I of the insurance company that provides the insurance that the user subscribes to and the public key H of the medical institution to which the inquiry is made, an error may be output. good. In addition, the intermediation system 100 monitors the success or failure of encryption of the application 310 on the user terminal 101 and the systems 102 and 103, and if the encryption is not performed or the encryption fails, the application 310 You may make it prohibit the transmission of the data by.

Here, the explanation is continued assuming that the answer is to consent to the exchange of information.

The intermediary system 100 identifies the insurance company that provides the insurance that the insured subscribes to (step S614). Specifically, brokerage control unit 210 refers to insurance management DB 225 to acquire information on an insurance policy corresponding to the name of the insured person, and identifies the insurance company based on the information on the insurance policy.

The intermediary system 100 sends the specified insurance company's system 102 application 310 payment terms including insurance company identification information, insurance policy number, and special care-required personal information encrypted using public key I. is transmitted (step S615).

Upon receiving the payment terms inquiry, the insurance company system 102 decrypts the special care-required personal information using the private key I, obtains the payment terms from the database based on the insurance policy number and the special care-required personal information, The application 310 encrypts the payment terms using the public key U and sends a response of the insurance payment terms to the brokerage system 100 (step S616). Note that the special care-required personal information is encrypted using a secret key I. The insurance payment terms reply is sent to the user terminal 101 via the mediation system 100 .

The application 310 on the user terminal 101 decrypts the payment terms using the private key U, encrypts the payment terms using the public key H, and transmits a response including the payment terms to the brokerage system 100 (step S617). The insurance payment terms reply is sent to the system 103 of the medical institution via the mediation system 100 . The application 310 on the medical institution's system 103 uses the private key H to decrypt the payment terms included in the received response, and based on the payment terms, presents a screen 540 as shown in FIG. 5E. The medical institution refers to the screen 540 to determine the treatment policy for the insured person.

As described above, according to the third embodiment, the intermediary system 100 can mediate the exchange of information between three parties without referring to the insured person's special care-required personal information. That is, the insurance payment terms of the insured person can be presented to the medical institution while protecting the privacy of the insured person.

In addition, the present invention is not limited to the above-described embodiments, and includes various modifications. Further, for example, the above-described embodiments are detailed descriptions of the configurations for easy understanding of the present invention, and are not necessarily limited to those having all the described configurations. Moreover, it is possible to add, delete, or replace a part of the configuration of each embodiment with another configuration.

Further, each of the above configurations, functions, processing units, processing means, and the like may be realized by hardware, for example, by designing them in an integrated circuit. The present invention can also be implemented by software program code that implements the functions of the embodiments. In this case, a computer is provided with a storage medium recording the program code, and a processor included in the computer reads the program code stored in the storage medium. In this case, the program code itself read from the storage medium implements the functions of the above-described embodiments, and the program code itself and the storage medium storing it constitute the present invention. Examples of storage media for supplying such program code include flexible disks, CD-ROMs, DVD-ROMs, hard disks, SSDs (Solid State Drives), optical disks, magneto-optical disks, CD-Rs, magnetic tapes, A nonvolatile memory card, ROM, or the like is used.

Also, the program code that implements the functions described in this embodiment can be implemented in a wide range of programs or scripting languages such as assembler, C/C++, perl, Shell, PHP, Python, and Java (registered trademark).

Furthermore, by distributing the program code of the software that implements the functions of the embodiment via a network, it can be stored in storage means such as a hard disk or memory of a computer, or in a storage medium such as a CD-RW or CD-R. Alternatively, a processor provided in the computer may read and execute the program code stored in the storage means or the storage medium.

In the above-described embodiments, the control lines and information lines indicate those considered necessary for explanation, and not all control lines and information lines are necessarily indicated on the product. All configurations may be interconnected.

100 Brokerage System 101 User Terminal 102 System 103 System 200 Computers 201, 301 Processors 202, 302 Storage Devices 203, 303 Input Devices 204, 304 Output Devices 205, 305 Communication Interfaces 206, 306 Bus 210 Brokerage Control Unit 220 Personal Management DB
221 Medical Institution Management DB
222 Insurance company management DB
223 Consent Trail DB
224 Patient ticket management DB
225 Insurance Management DB
310 applications 500, 510, 520, 530, 540 screens

Claims (14)

An intermediary system that supports exchange of information,
including at least one calculator;
connecting with a medical system managed by a medical institution, a terminal owned by a user who uses the medical institution, and an insurance system managed by an insurance company that provides insurance to which the user subscribes;
receiving a first request from the medical system to inquire about payment terms for insurance subscribed by the user;
sending a second request to the terminal to inquire whether or not to transfer information on the payment terms, if consent to the transfer of the information on the payment terms has not been obtained;
sending a third request to the insurance system to inquire about the payment terms of the user, if consent to the transfer of information on the payment terms has been obtained;
Sending a second response including information about the payment terms to the medical system as a response to the first request when a first response including information about the payment terms is received as a response to the third request. An intermediary system characterized by: The intermediary system of claim 1, comprising:
Maintaining a database for managing the status of consent to the transfer of information on the payment terms,
From the terminal, first information about the insurance that the user subscribes to, second information for specifying the insurance company that provides the insurance that the user subscribes to, and information for specifying the medical institution that the user uses Acquiring third information, managing the first information, the second information, and the third information in correspondence,
When the first request is received, the user is identified based on the third information, and based on the database, it is determined whether or not the identified user consents to the exchange of information regarding the payment terms,
If consent to the transfer of information on payment terms has been obtained, the insurance that the user has subscribed to is specified based on the first information of the specified user, and the second insurance of the specified user is specified. An intermediary system, wherein the insurance company that provides the identified insurance is identified based on the information. An intermediary system according to claim 2, wherein
Personal information of the user is included in the inquiry about the payment terms of the insurance that the user subscribes,
An intermediation system, wherein the information on the payment terms includes the payment terms specified based on the personal information. An intermediary system according to claim 3, wherein
The personal information is information that requires protection,
The intermediary system includes:
obtaining a first encryption key from the terminal;
obtaining a second cryptographic key from the medical system;
Obtaining a third encryption key from the insurance system;
transmitting the first encryption key to the medical system and the insurance system;
transmitting the second encryption key and the third encryption key to the terminal;
receiving the first request including the personal information encrypted by the medical system using the first encryption key;
said personal information encrypted by said terminal using said third encryption key, and a response regarding whether or not to transmit/receive information regarding said payment terms encrypted using said first encryption key; 2 receive a response to the request;
transmitting the first response to the terminal when the insurance system receives the first response including information about the payment terms encrypted using the first encryption key;
An intermediary system, wherein said second response includes information about said payment terms encrypted by said terminal using said second encryption key. An intermediary system according to claim 4, wherein
An intermediary system that manages association between the user and the first encryption key, association between the medical institution and the second encryption key, and association between the insurance company and the third encryption key. An information intermediary method executed by an intermediary system that supports exchange of information,
The intermediary system includes:
including at least one calculator;
connecting with a medical system managed by a medical institution, a terminal owned by a user who uses the medical institution, and an insurance system managed by an insurance company that provides insurance to which the user subscribes;
The information mediation method includes:
a first step of receiving, by the intermediary system, a first request from the medical system to inquire about payment terms for insurance subscribed by the user;
a second step of sending a second request from the intermediation system to the terminal to inquire whether or not to transfer the information on the payment terms, if consent to the transfer of the information on the payment terms has not been obtained;
a third step of the intermediary system sending a third request to the insurance system to inquire about the payment terms of the user if consent has been obtained to exchange information on the payment terms;
If a first response including information about the payment terms is received in response to the third request, the intermediary system sends a second response including information about the payment terms to the medical system in response to the first request. a fourth step of sending
An information mediation method characterized by comprising: The information mediation method according to claim 6,
The intermediary system holds a database for managing the status of consent to the transfer of information on the terms of payment,
The information mediation method includes:
The intermediary system receives, from the terminal, first information about the insurance that the user subscribes to, second information for specifying the insurance company that provides the insurance that the user subscribes to, and the medical institution that the user uses. obtaining third information for identifying the
the intermediary system managing the first information, the second information, and the third information in association with each other;
The second step includes
the intermediary system identifying the user based on the third information;
the intermediary system determining whether or not the identified user agrees to exchange information on the payment terms based on the database;
In the third step, the intermediary system identifies insurance that the user has subscribed to based on the first information of the identified user, and based on the second information of the identified user A method of intermediary information, comprising the step of identifying said insurance company that provides said identified insurance. The information mediation method according to claim 7,
Personal information of the user is included in the inquiry about the payment terms of the insurance that the user subscribes,
An information mediation method, wherein the information on the payment terms includes the payment terms specified based on the personal information. The information mediation method according to claim 8,
The personal information is information that requires protection,
The information mediation method includes:
obtaining a first cryptographic key from the terminal, a second cryptographic key from the medical system, and a third cryptographic key from the insurance system;
the intermediary system transmitting the first cryptographic key to the medical system and the insurance system;
said intermediary system transmitting said second cryptographic key and said third cryptographic key to said terminal;
the first step includes the intermediary system receiving the first request including the personal information encrypted by the medical system using the first encryption key;
In the second step, the brokerage system transmits the personal information encrypted by the terminal using the third encryption key and the payment terms information encrypted using the first encryption key. and receiving a response to the second request,
the third step includes the intermediary system sending to the insurance system the third request including the personal information encrypted using the third encryption key;
The fourth step is
upon receipt by the insurance system of the first response containing information regarding the payment terms encrypted using the first encryption key, the intermediary system transmitting the first response to the terminal;
said intermediary system receiving said second response containing information on said payment terms encrypted by said terminal using said second encryption key. A computer system,
A medical system managed by a medical institution, a terminal owned by a user who uses the medical institution, an insurance system managed by an insurance company that provides insurance to which the user subscribes, and the medical system, the terminal, and the insurance system including an intermediary system that mediates information between
The intermediary system includes:
receiving a first request from the medical system to inquire about payment terms for insurance subscribed by the user;
sending a second request to the terminal to inquire whether or not to transfer information on the payment terms, if consent to the transfer of the information on the payment terms has not been obtained;
sending a third request to the insurance system to inquire about the payment terms of the user, if consent to the transfer of information on the payment terms has been obtained;
Sending a second response including information about the payment terms to the medical system as a response to the first request when a first response including information about the payment terms is received as a response to the third request. A computer system characterized by: A computer system according to claim 10,
The terminal includes first information about the insurance that the user subscribes to, second information for specifying the insurance company that provides the insurance that the user subscribes to, and information for specifying the medical institution that the user uses. registering the third information in the intermediation system;
The intermediary system includes:
Maintaining a database for managing the status of consent to the delivery and receipt of information on payment terms of the user,
managing the first information, the second information, and the third information in association with each other;
When the first request is received, the user is identified based on the third information, and based on the database, it is determined whether or not the identified user consents to the exchange of information regarding the payment terms,
If consent to the transfer of information on payment terms has been obtained, the insurance that the user has subscribed to is specified based on the first information of the specified user, and the second insurance of the specified user is specified. identifying the insurance company that provides the identified insurance based on the information, sending the third request to the identified insurance company, the third request including identifying information of the user;
A computer system, wherein the insurance system, when receiving the third request, identifies the information regarding the payment terms based on the identification information of the user. A computer system according to claim 11, wherein
the intermediation system sending the third request including the user's identification information and the user's personal information to the identified insurance company;
A computer system, wherein the insurance system specifies the information regarding the payment conditions based on the user's identification information and the personal information. 13. A computer system according to claim 12,
The personal information is information that requires protection,
the terminal registers a first encryption key in the intermediary system;
The medical system registers a second encryption key with the mediation system;
The insurance system registers a third encryption key in the brokerage system,
The intermediary system includes:
transmitting the first encryption key to the medical system and the insurance system;
transmitting the second encryption key and the third encryption key to the terminal;
the medical system transmits the first request including the personal information encrypted using the first encryption key;
The terminal sends, to the intermediary system, the personal information encrypted using the third encryption key, and a response regarding whether or not the information regarding the payment terms encrypted using the first encryption key can be exchanged. sending a response to the second request comprising
the insurance system transmitting to the brokerage system the first response including information about the payment terms encrypted using the first encryption key;
the intermediary system sending the first response to the terminal;
The terminal is
upon receiving the first response, decrypting the information regarding the payment terms encrypted using the first encryption key;
encrypting the information regarding the payment terms using the second encryption key;
A computer system that transmits to the brokerage system the second response including information about the payment terms encrypted using the second encryption key. 14. The computer system of claim 13,
A computer system, wherein said terminal notifies said intermediary system of an error when said terminal does not hold at least one of said second encryption key and said third encryption key.

Images