JP2024000227A - Medical information server and terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a medical information system that allows medical information to be safely accessed from the outside of a medical institution.

SOLUTION: A medical information server 10 is connected to a specific node of a closed mobile data communication network 20 provided by a telecommunications carrier without going through the Internet. The medical information server 10 includes a medical information storage unit. When there is access from a user terminal 30 equipped with a SIM card of the telecommunications carrier, the medical information server acquires a user's ID information read by an IC card reader of the terminal and authentication information input by the user, and, only when the ID information matches ID information given to the user approved by a medical institution, and the authentication information matches authentication information registered in advance for the user, allows access to the medical information storage unit. The user terminal 30 is a virtual terminal.

SELECTED DRAWING: Figure 1

COPYRIGHT: (C)2024,JPO&INPIT

Description

The present invention relates to a medical information server that handles medical information of medical institutions such as hospitals and clinics, and a terminal for accessing this medical information server and viewing medical information.

At medical institutions such as hospitals and clinics, medical information, including data on patients, falls under the category of extremely highly personal information, and therefore, extreme care must be taken when handling it to prevent it from leaking to outside parties. Usually, each medical institution is provided with a server that manages medical information, and only staff members who have been given a given access authority are allowed to log into the server. Furthermore, terminals for logging into the server are also limited, and access from outside the medical institution is often not allowed, for example.

However, in recent years, the use of cloud systems has been considered. For example, in Patent Document 1 below, patient medical information is stored on a server and only with the patient's consent, multiple medical institutions can access the patient's information. A system is disclosed that allows viewing of medical information for a predetermined period of time.

JP2021-33443

On the other hand, there are security risks in storing medical information on servers on the Internet, and on the other hand, there is also a demand for accessing the servers of medical institutions from outside the medical institution. For example, (1) a doctor who is on call wants to check the data of an inpatient who has changed in condition from outside the hospital, (2) a doctor who is working remotely wants to check electronic medical record data, medical images, etc. from outside the hospital. (3) When a pharmaceutical company conducting a clinical trial wants to check electronic medical record data from outside the hospital; (4) After a patient is transferred from a hospital to a rehabilitation hospital, staff at the rehabilitation hospital If you want to check electronic medical record data etc., etc.

The present invention aims to provide a medical information system that allows safe access to medical information of a medical institution from outside the medical institution while ensuring prevention of leakage of medical information.

The medical information server according to the present invention includes:
A medical information server for a medical institution,
Connected to a specific node of a closed mobile data communications network provided by a telecommunications carrier without going through the Internet,
a storage unit that stores medical information;
When there is an access via the closed mobile data communication network from a terminal equipped with a SIM card of the telecommunications carrier, the user's ID information read by the storage medium reading section of the terminal and the user's The input authentication information is obtained from the terminal, and the ID information matches the ID information stored in the storage medium and given to the user approved by the medical institution, and the authentication information is previously associated with the user. and an access control unit that accepts the access only when the authentication information matches the registered authentication information and provides the medical information stored in the storage unit.

According to the present invention, it is possible to provide a medical information system that allows safe access to medical information of a medical institution from outside the medical institution while ensuring prevention of leakage of medical information.

1 is a schematic diagram showing the overall configuration of a medical information system 1 according to an embodiment of the present invention. FIG. 2 is a block diagram showing a schematic functional configuration of the X hospital server 10. FIG. 3 is a block diagram showing a schematic functional configuration of a user terminal 30. FIG.

An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows an overall schematic configuration of a medical information system 1 according to an embodiment of the present invention. In the following description, it is assumed that the medical information system 1 is a system that manages medical information of a certain medical institution (hereinafter referred to as "Hospital X").

The medical information system 1 includes an X hospital server 10 that centrally manages medical information at X hospital. In addition to data regarding inpatients and outpatients at X Hospital, the medical information may include data regarding clinical trials, clinical trials, etc. being conducted at X Hospital. That is, the content of medical information managed by the medical information system 1 is not limited to specific information. The X hospital server 10 may be installed within the X hospital or outside the premises of the X hospital, and the physical installation location is not particularly limited. The X hospital server 10 may be composed of one computer or may be composed of multiple computers.

The X hospital server 10 is connected to a node 20A of a mobile data communication network 20 provided by a telecommunications carrier by a dedicated optical cable 11. The mobile data communication network 20 is a mobile phone network that includes many nodes 20B, 20C, 20D, etc. in addition to the node 20A, and performs packet communication, but is a closed network that is not connected to the Internet. be. The X hospital server 10 is connectable via the mobile data communication network 20 from a user terminal 30 located outside the X hospital. As will be explained later, when the user terminal 30 connects to the X hospital server 10, it does not go through the Internet.

The X hospital server 10 configures a virtual terminal for the user terminal 30. The user of the user terminal 30 can view and edit medical information on the X hospital server 10 using the OS and application program of the virtual terminal configured on the X hospital server 10. From the user terminal 30, it is possible to perform almost the same range of operations on the medical information of the X hospital server 10 as those performed from a terminal within the X hospital. For example, from the user terminal 30, it is possible to write articles regarding electronic medical record data, issue prescriptions for drugs, request tests, instruct treatments, and create documents such as letters of introduction. However, this excludes the creation of documents that are required to be stamped by law (narcotics prescriptions and death certificates), but if the use of electronic certificates is permitted instead of stamping, these documents can also be used on the user terminal 30. It is possible to create from Although only one user terminal 30 is illustrated in FIG. 1, the number of user terminals 30 that can be connected to the X hospital server 10 is arbitrary. However, the number of user terminals 30 that can simultaneously connect to the X hospital server 10 and use the virtual terminal function is generally limited to a predetermined number.

FIG. 2 is a block diagram showing a schematic functional configuration of the X hospital server 10. The X hospital server 10 includes a medical information storage unit 101 that stores medical information regarding inpatients and outpatients of the X hospital, an in-hospital access control unit 102, a virtual terminal control unit 103, a user information storage unit 104, and an external access control unit 102. The controller 105 includes at least a controller 105. Although FIG. 2 only shows functional blocks related to the present invention, the X hospital server 10 includes hardware (such as a processor) and necessary software that are included in a normal server.

The in-hospital access control unit 102 accepts access from terminals within X Hospital. The in-hospital access control unit 102 is connected by wire or wirelessly via a router or hub in the X hospital server 10, and when an authorized user logs in from a terminal that is permitted to connect to the X hospital server 10. Access to the medical information storage unit 101 is accepted only in this case.

The virtual terminal control unit 103 accepts access from the user terminal 30 located outside the X hospital and provides a virtual terminal function. That is, the virtual terminal control unit 103 implements a virtual terminal OS and application software on the X hospital server 10 for each of the user terminals 30. The user terminal 30 accesses medical information stored in the medical information storage unit 101 of the X hospital server 10 using the virtual terminal OS and application software on the X hospital server 10. The virtual terminal control unit 103 processes medical information using the virtual terminal OS and application software, and generates a screen image to be displayed on the user terminal 30.The generated screen image is displayed on the display on the user terminal 30 side. , the user of the user terminal 30 can view medical information and view processing results for the medical information. In other words, the medical information data of the X hospital server 10 is not sent to the user terminal 30, but only the data of the screen image displayed on the display of the user terminal 30 is sent. Therefore, the user terminal 30 uses this virtual terminal OS and application software to access the medical information storage unit 101 and view and edit medical information only while the connection with the X hospital server 10 is established. It can be performed.

The user information storage unit 104 stores information regarding users who are permitted to access the X hospital server 10. Users who are permitted to access the X hospital server 10 include medical personnel (doctors, nurses, laboratory technicians, pharmacists, etc.) and administrative staff of the X hospital, as well as outsiders who have been previously permitted by the X hospital. may also include people. Such an outsider may be, for example, a specific user at an affiliated medical institution (for example, a rehabilitation hospital, etc.) or a pharmaceutical company conducting a clinical trial in cooperation with Hospital X. The user information storage unit 104 stores, for each user who is permitted to access the X hospital server 10, an ID (staff ID or related person ID) given by the X hospital as an ID for identifying the user, and a login information. It remembers your ID, login password, etc. As will be explained later, the staff ID or related person ID is stored in the IC chip of the identification card (IC card) given to each user by Hospital X. Note that the storage medium for storing the staff ID or related party ID and giving it to each user may be other than an IC card, and may be, for example, a smartphone, a smart watch, or the like.

As will be described in detail later, the external access processing unit 105 receives a login from the user terminal 30, determines whether the login is from an authorized user, and determines whether the login is from an authorized user. Only when this can be confirmed, access to the medical information storage unit 101 from the user terminal 30 is permitted.

User terminal 30 can be implemented by any type of computer. That is, the user terminal 30 may be a desktop, a notebook, a tablet, a PDA, or the like. FIG. 3 is a block diagram showing a schematic functional configuration of the user terminal 30. The user terminal 30 includes a SIM port 301, an IC card reader 302, a processor 303, a working memory 304, and the like. Although FIG. 3 only shows functional blocks related to the present invention, the user terminal 30 is equipped with the hardware (display, keyboard, etc.) and minimum software that are included in a normal computer.

A SIM card of a telecommunications carrier that provides the mobile data communication network 20 is installed in the SIM port 301 . Note that it is preferable that the user terminal 30 is not equipped with a communication module (for example, a WiFi module, etc.) that can perform other network communications.

The IC card reader 302 is used by a user using the user terminal 30 to read an identification card (IC card) issued by Hospital X when logging in. This identification card is issued individually by Hospital X to its employees or related parties, and is an entry pass to Hospital X or a permit to enter areas of Hospital X where entry is prohibited to non-related persons. , also used as . This ID card is equipped with an IC chip on which an employee ID or related party ID is recorded. The staff ID or related party ID read by the IC card reader 302 is sent to the X hospital server 10 along with the login ID and password input by the user into the user terminal 30. By comparing the received data with the data stored in the user information storage unit 104, the X hospital server 10 determines that the person attempting to log in is registered as an employee or related person of the X hospital, and It is determined whether the person is authorized to access the hospital server 10. In this way, by requiring the user terminal 30 to read the identification card (IC card) issued by Hospital X when logging in, unauthorized access can be effectively prevented even if the login ID and password are leaked. can be prevented. Note that if the user terminal 30 is equipped with a biometric data reading device, it is also possible to authenticate the person by face authentication, iris authentication, fingerprint authentication, etc. instead of entering a password. Further, in that case, it is also possible to omit reading the staff ID or related party ID.

Once the login by the user is approved at the user terminal 30, the user terminal 30 is enabled to access the X hospital server 10 via the mobile data communication network 20. The user terminal 30 can view and edit medical information stored in the medical information storage section 101 using the virtual terminal OS and application software provided by the virtual terminal control section 103. Note that the recent mobile data communication network 20 complies with 4G and 5G communication standards, so it is fully compatible with the viewing of high-resolution images such as CT images and MRI images.

In this way, medical information is accessed from the user terminal 30 using the virtual terminal function of the X hospital server 10, and the user terminal 30 only refers to the screen image on the X hospital server 10. No information exists, and even after the connection between the user terminal 30 and the X hospital server 10 is terminated, no medical information remains on the user terminal 30. The working memory 304 of the user terminal 30 is used only as a frame memory (frame buffer) that temporarily holds an image for one screen when displaying screen image data on the display of the user terminal 30, for example. Does not retain data. Therefore, even if the user terminal 30 is lost or stolen, there is an excellent advantage that medical information will not be leaked from the user terminal 30 to the outside. Further, by using the virtual terminal function, the user terminal 30 can be a relatively low-spec computer, and costs can be reduced.

Further, it is preferable that the user terminal 30 is not provided with a terminal or port to which an external storage medium can be connected. This makes it impossible to copy the medical information of the X hospital server 10 to an external storage medium via the user terminal 30, so that leakage of medical information can be more reliably prevented.

Note that the range of medical information that can be accessed from the user terminal 30 may be limited depending on user attributes. For example, in the case of a user of a pharmaceutical company conducting a clinical trial with Hospital X, it is sufficient to allow access to only data related to the clinical trial among the medical information stored in the medical information storage unit 101.

As described above, according to the medical information system 1 according to the present embodiment, it is possible to access medical information in the X hospital server 10 from the user terminal 30 outside the medical institution. When logging in, it is necessary to read the IC card issued by Hospital X, so it is possible to effectively prevent unauthorized access due to leakage of login information. Further, by using the virtual terminal function, no medical information remains on the user terminal 30 after the connection between the user terminal 30 and the X hospital server 10 is broken, so that leakage of medical information is prevented. Furthermore, since the communication between the user terminal 30 and the X hospital server 10 is not via the Internet but is via a mobile data communication network using a SIM card installed in the user terminal 30, it is susceptible to attacks such as hacking. It is very sturdy.

Therefore, according to the medical information system 1, the following effects are brought about, for example.

(1) When a doctor on call wants to check the data of an inpatient whose condition has changed from outside the hospital, by accessing the X hospital server 10 from the user terminal 30 and viewing the data of the patient, It is possible to accurately check the patient's condition from home, and it becomes easy to give instructions to the doctor on duty and determine whether or not you need to go to the hospital yourself. This makes it possible to reduce the frequency of patients having to work at night after waiting at home, thereby reducing the burden on doctors.

(2) Since it becomes possible to access the X hospital server 10 from the user terminal 30 and check electronic medical record data, medical images, etc. from outside the hospital, remote work (telework) for doctors becomes possible.
(3) If a pharmaceutical company conducting a clinical trial wanted to check electronic medical record data, etc., it was necessary to visit the hospital in the past, but if the user is registered in advance, the user terminal 30 can access the X hospital server 10. You can access and view the necessary data from outside the hospital. Particularly in situations where there is concern about the spread of infectious diseases, eliminating the need for outsiders to visit hospitals to view data is of great benefit to both hospitals and outsiders.

(4) After the patient is transferred from Hospital X to the rehabilitation hospital, the staff at the rehabilitation hospital can check the patient's electronic medical record data etc. from the user terminal 30. This makes it possible to accurately grasp the patient's situation at the rehabilitation hospital. Therefore, preparations for receiving a patient at the time of transfer can be made smoothly, and even after the patient is admitted, appropriate rehabilitation can be carried out according to the patient's situation.

Although several embodiments of the present invention have been described above, the embodiments of the present invention are not limited to the specific examples described above, and various changes can be made within the scope of the invention.

Note that the present invention can be explained as follows.

[First configuration]
The medical information server according to the first configuration is
A medical information server for a medical institution,
Connected to a specific node of a closed mobile data communications network provided by a telecommunications carrier without going through the Internet,
a storage unit that stores medical information;
When there is an access via the closed mobile data communication network from a terminal equipped with a SIM card of the telecommunications carrier, the user's ID information read by the storage medium reading section of the terminal and the user's input and the authentication information is obtained from the terminal, and the ID information matches the ID information stored in the storage medium and given to the user approved by the medical institution, and the authentication information is registered in advance for the user. and an access control unit that accepts the access and provides the medical information stored in the storage unit only when the authentication information matches the received authentication information.

According to this first configuration, access from the terminal to the medical information server is through communication via a closed mobile data communication network, not via the Internet. Therefore, it becomes possible to access medical information from outside the medical institution while more reliably preventing leakage of medical information. Further, in the first configuration, the user's ID information read by the storage medium reading unit of the terminal and the authentication information input by the user are acquired from the terminal, and the ID information is used for the user who is approved by the medical institution. The access is accepted only when the authentication information matches the ID information stored in the storage medium and assigned to the user, and the authentication information matches the authentication information registered in advance for the user, and the authentication information is stored in the storage unit. Provide medical information. This makes it possible to more reliably prevent unauthorized access due to leakage of login IDs, passwords, and the like.

[Second configuration]
In a second configuration, in the first configuration, the authentication information is a password or biometric information of the user.

[Third configuration]
In a third configuration, in the first or second configuration, the storage medium is an IC card used as an employee ID or related person ID of the medical institution.

[Fourth configuration]
In a fourth configuration, in any of the first to third configurations, the medical information server is connected to the specific node via a dedicated line. Thereby, data leakage between the medical information server and the node can be prevented.

[Fifth configuration]
In a fifth configuration, in any of the first to fourth configurations, the medical information server provides a virtual terminal function to the terminal. According to this configuration, since access to medical information is performed by the virtual terminal function, no medical information remains on the terminal after the connection between the terminal and the medical information server is terminated. Thereby, leakage of medical information can be more reliably prevented.

[Sixth configuration]
The sixth configuration is a terminal for accessing a medical information server of a medical institution. Here, the medical information server is connected to a specific node of a closed mobile data communication network provided by a telecommunications carrier without going through the Internet, and includes a storage unit that stores medical information and a storage unit that stores medical information. and an access control unit that allows access only to users approved by the medical institution when there is access. The terminal accesses this medical information server via the mobile data communications network. Further, the terminal operates based on a virtual terminal function on the medical information server, and includes a SIM card port into which a SIM card of the telecommunications carrier is installed, and a storage medium reading unit that reads user ID information from the storage medium. and an authentication information input section that receives authentication information input from a user.

According to this sixth configuration, access from the terminal to the medical information server is through communication via a closed mobile data communication network, not via the Internet. Therefore, it becomes possible to access medical information from outside the medical institution while more reliably preventing leakage of medical information. Furthermore, since access to medical information from the terminal is performed by the virtual terminal function, no medical information remains on the terminal after the connection between the terminal and the medical information server is terminated. Thereby, leakage of medical information can be more reliably prevented.

[Seventh configuration]
In a seventh configuration, in the sixth configuration, the authentication information is a password or biometric information of the user.

[Eighth configuration]
In an eighth configuration, in the sixth or seventh configuration, the storage medium is an IC card used as an employee ID card or a related person ID card of the medical institution.

1 Medical information system 10 X hospital server 11 Dedicated line 20 Mobile data communication network 20A Node 30 User terminal 101 Medical information storage section 102 Hospital access control section 103 Virtual terminal control section 104 User information storage section 105 External access control section 301 SIM port 302 IC card reader 303 Processor 304 Working memory

Claims (8)

A medical information server for a medical institution,
Connected to a specific node of a closed mobile data communications network provided by a telecommunications carrier without going through the Internet,
a storage unit that stores medical information;
When there is an access via the closed mobile data communication network from a terminal equipped with a SIM card of the telecommunications carrier, the user's ID information read by the storage medium reading section of the terminal and the user's The input authentication information is obtained from the terminal, and the ID information matches the ID information stored in the storage medium and given to the user approved by the medical institution, and the authentication information is previously associated with the user. A medical information server, comprising: an access control unit that accepts the access only when the authentication information matches registered authentication information, and provides the medical information stored in the storage unit. The medical information server according to claim 1, wherein the authentication information is a password or biometric information of the user. The medical information server according to claim 1, wherein the storage medium is an IC card used as an employee identification card or a related person identification card of the medical institution. The medical information server according to claim 1, connected to the specific node via a dedicated line. The medical information server according to claim 1, wherein the medical information server provides virtual terminal functionality to the terminal. A medical information server of a medical institution, which is connected to a specific node of a closed mobile data communication network provided by a telecommunications carrier without going through the Internet, and includes a storage unit that stores medical information, and the medical information server. A terminal for accessing a medical information server via the mobile data communication network, comprising: an access control unit that allows access only to a user approved by the medical institution when there is access to the medical information server; ,
The terminal operates based on a virtual terminal function on the medical information server,
a SIM card port into which a SIM card of the telecommunications carrier is installed;
a storage medium reading unit that reads user ID information from the storage medium;
A terminal comprising an authentication information input section that receives authentication information input from a user. The terminal according to claim 6, wherein the authentication information is a password or biometric information of the user. 7. The terminal according to claim 6, wherein the storage medium is an IC card used as an employee identification card or a related person identification card at the medical institution.

Images