JP4925689B2 - Screen reproduction data generation system, screen reproduction data generation method, and computer program - Google Patents

Description

  The present invention relates to a system and method for outputting a screen displayed on a display by a method such as printing.

  Conventionally, an information management system such as an electronic medical record system has been used in a medical field such as a hospital. Hospitals can improve services for patients and improve work efficiency by introducing electronic medical record systems.

  This electronic medical record system is provided with a terminal device used by a doctor for examination. The doctor operates the patient to display the patient's electronic chart on the display, and examines the patient while viewing the electronic chart. I do. By using the electronic medical record system in this manner, a doctor can easily search and browse a patient's electronic medical record, and can easily add contents to the electronic medical record as necessary.

  When a user such as a doctor operates the terminal device, an error may occur in the electronic medical record system. The error that has occurred is notified to the user by displaying a message indicating the content of the error on the display. When an error occurs, the user may or may not continue the operation after confirming the message about the error. In any case, it may be necessary to investigate the cause of the error and take appropriate action for the subsequent smooth operation of the electronic medical record system. Therefore, when an error occurs, the user notifies the maintenance staff of the situation at that time. At that time, the screen displayed on the display at the time when the error occurs is printed (hard copy) on paper, and handed over to the maintenance staff. The maintenance staff performs maintenance by investigating the cause of the error using the information shown on the hard copy as a clue.

  However, personal information is usually included in the screen of the electronic medical record displayed on the terminal device. If such a screen is hard-copyed on paper, the paper may be transferred to a third party by some mistake and personal information may be misused. Therefore, when performing a hard copy, it is necessary to take some measures to prevent recognition of the portion of personal information from the viewpoint of personal information protection. Therefore, it is conceivable to use a method as disclosed in Patent Documents 1 and 2.

  According to Patent Document 1, masking is performed by designating a data portion for identifying an individual with respect to digital data when a medical chart is read by an image scanner. Then, the remaining medical attribute information part is captured and stored as image data. As a result, the information specifying the individual is hidden, and at the same time, only the medical-related attribute information description portion is imaged using the image scanner.

According to Patent Document 2, the confidential information issued to the client is sealed so that it cannot be viewed after printing. Thereby, the confidential information is prevented from being written on a paper medium such as an application document in a dangerous state.
JP 2004-318875 A JP 2005-4330 A

  As described above, according to the methods described in Patent Documents 1 and 2, confidential information that should be kept secret from a third party, such as personal information, is always masked, so that security for the confidential information can be improved. .

  However, in such a conventional method, a maintenance person may not be able to obtain necessary information when performing maintenance work. If it does so, the efficiency of the work will worsen. Also, the work itself may not be possible.

  From the viewpoint of personal information protection, all confidential information should be hidden, but it is also important to improve the efficiency of maintenance work and smooth operation of the system.

  In view of these problems, the present invention can output information necessary for maintenance by a maintenance person to a recording medium such as a sheet or a removable disk while taking personal information protection into consideration. The purpose is to do so.

  The screen reproduction data generation system according to the present invention includes a display means for displaying a screen on which one or more pieces of information are arranged, and information arranged in the screen displayed when an error occurs. Of the information arranged in the screen displayed when an error occurs, information that has been determined to be confidential Screen reproduction data generation means for generating screen reproduction data for reproducing the screen in a state where the image cannot be recognized.

  Preferably, a first screen on which one or a plurality of pieces of information are arranged and a second screen for notifying the user of an error that has occurred are displayed, and the first screen that is displayed when an error occurs The information to be kept secret among the information arranged in the screen is determined in accordance with the error, and is arranged in the first screen displayed when the error occurs. Screen reproduction that reproduces the first screen in a state where the information determined to be confidential among the existing information cannot be recognized, and generates screen reproduction data for reproducing the second screen of the error Data generation means.

  FIG. 1 is a diagram showing an example of the overall configuration of an electronic medical record system 1 according to the present invention, FIG. 2 is a diagram showing an example of a hardware configuration of a terminal device 3, and FIG. 3 is a functional configuration of the electronic medical record system 1 FIG. 4 is a diagram showing an example of the electronic medical record screen FR, FIG. 5 is a diagram showing an example of the message box MB, and FIG. 6 is a diagram showing the electronic medical record screen FR and the message box MB displayed on the display 32 at the same time. It is a figure which shows the example in the case of being.

  As shown in FIG. 1, an electronic medical chart system 1 according to the present invention includes an electronic medical chart server 2, terminal devices 3a, 3b,... And printers 4a, 4b,. Hereinafter, the terminal devices 3a, 3b,... May be collectively referred to as “terminal device 3”, and the printers 4a, 4b,.

  The electronic medical record server 2 and the terminal device 3 are connected to each other via a communication line 5. As the communication line 5, a LAN, WAN, the Internet, a public line, a dedicated line, or the like is used. Further, one printer 4 is connected to each terminal device 3.

  The electronic medical chart system 1 is a system that electronically handles the medical chart of a patient who undergoes medical examination, treatment, or examination in a hospital. Hereinafter, the case where the electronic medical chart system 1 is used in the hospital X having a plurality of medical departments will be described as an example.

  The electronic medical record server 2 is a server that centrally manages an electronic medical record (electronic medical record) of a patient in the hospital X. This electronic medical record server 2 is installed in a management department of the hospital X system or an external outsourcing center. As the electronic medical record server 2, an electronic medical record server that has already been operated in the hospital X is used. Alternatively, a new electronic medical record server may be constructed. However, in any case, the patient data storage unit 201 and the patient data search unit 202 as shown in FIG. 3 are provided. Note that the programs and data for realizing the functions of these units are installed in the hard disk of the electronic medical record server 2, read out to the RAM as necessary, and executed by the CPU.

  At least one terminal device 3 is installed for each medical department of hospital X, and is used by a doctor to use a patient's electronic medical record. As shown in FIG. 2, the terminal device 3 includes a terminal device main body 31, a display 32, a keyboard 33, a mouse 34, and the like. As the terminal device 3, a personal computer or a workstation is used.

  In FIG. 2, the terminal device body 31 includes a CPU 311, a ROM 312, a RAM 313, a communication interface 314, a hard disk 315, and an input / output interface 316.

  In the ROM 312 and the hard disk 315, an OS (Operating System), various application programs, a printer driver, and the like are installed.

  Further, the data storage unit 301, the command reception unit 302, the electronic medical record screen generation unit 303, the display control unit 304, the error detection unit 305, the message box generation unit 306, the screen image output target determination unit 307, and the screen reproduction unit shown in FIG. Programs and data for realizing functions such as the data generation unit 308 and the data output unit 309 are installed. These programs and data are read into the RAM 313 as necessary, and the CPU 311 executes the programs.

  The communication interface 314 is an interface for communicating with other devices. As the communication interface 314, a NIC (Network Interface Card) or a modem is used.

  The input / output interface 316 is an interface for receiving input from the keyboard 33 and the mouse 34 or outputting data to the printer 4 or the like. USB or RS232C or the like is used as this interface. If necessary, a drive corresponding to a removable disk such as a magneto-optical disk, a floppy disk, or a CD-R can be connected.

  The display 32 is a CRT display or a liquid crystal display. The display 32 constitutes a desktop on the entire display surface. On the desktop, various electronic medical chart screens FR showing the contents of the patient's electronic medical chart are displayed. The electronic medical record screen FR is a window provided with items related to the electronic medical record such as “patient ID”, “patient name”, or “prescription comment” as shown in FIG. Hereinafter, these items provided on the electronic medical record screen FR are referred to as “screen items”. The electronic medical record screen FR is given a screen code for distinguishing it from other electronic medical record screens FR. An item code for distinguishing from other screen items is given to the screen item.

  When an error occurs when a user such as a doctor is using the terminal device 3, a message box MB as shown in FIG. 5 is displayed on the desktop. The generated error is notified to the user by this message box MB.

  As shown in FIG. 6, the message box MB is a dialog box that is displayed over the electronic medical record screen FR (injection screen FR1) displayed when an error occurs.

  The keyboard 33 and the mouse 34 are input devices for the user to give instructions (commands) to the terminal device body 31.

  The printer 4 prints (hard copy) the screen displayed on the display 32 of the terminal device 3 to which the printer 4 is connected. Further, instead of printing the screen as it is as in the prior art, there is a case where a part of the edited screen is printed. As the printer 4, an ink jet printer, a laser printer, or a multifunction machine is used.

  7 is a diagram showing an example of a patient table TKM, FIG. 8 is a diagram showing an example of an error table TEM, FIG. 9 is a diagram showing an example of a secret item designation table TGM, and FIG. 10 is a diagram of an electronic medical record screen FR and a message box MB. FIG. 11 is a diagram showing an example in which both are printed on paper, and FIG. 11 is a diagram showing an example in which only the message box MB is printed on paper.

  Next, the contents of the processing of each part of the electronic medical record server 2 and the terminal device 3 shown in FIG. 3 will be described.

  In FIG. 3, the patient data storage unit 201 of the electronic medical record server 2 stores a patient table TKM.

  As shown in FIG. 7, the patient table TKM may be collectively referred to as patient data KM1, KM2,... (Hereinafter referred to as “patient data KM”, which is a patient's electronic medical record. The same applies to the other data. .) For each patient. The patient data KM indicates information related to an ID (patient ID) for identifying a patient, a patient's name (patient name), date of birth, age, address, and past history.

  The data storage unit 301 of the terminal device 3 stores an error table TEM and a secret item designation table TGM. As shown in FIG. 8, the error table TEM stores error data EM that is data relating to settings for printing the electronic medical record screen FR and the message box MB when an error occurs. The error data EM is stored for each error that may occur when the terminal device 3 is in use.

  In FIG. 8, the error data EM includes data such as “error code”, “title”, “error message”, “screen output mode”, “valid flag”, and “remarks”.

  The error code indicates a code uniquely assigned to each error that may occur when the terminal device 3 is used. This error code may be allocated at the stage of designing the electronic medical chart system 1, or an error code set in advance in the OS or the like may be used. In this embodiment, this error code is also used as an error message identification code.

  The title and the error message indicate a message for notifying the user of the title of the error that has occurred and the content of the error, respectively. Based on these, the title MT and error message MS of the message box MB shown in FIG. 5 are determined.

  The screen output mode specifies a mode related to screen image output for the screen displayed on the desktop when the error occurs. “Screen image output” means that the screen displayed on the desktop is printed and output to a paper medium such as paper, or the screen data is written to the hard disk 315 as an image file in a bitmap format or the like. It is to do. Hereinafter, a case where printing is performed as a screen image output will be described as an example. The method for using the screen output mode will be described later.

  The valid flag is a flag for designating whether or not to display an error message MS regarding the error on the desktop. When this flag is “1”, it means that the error message MS is displayed, and when it is “0”, it means that it is not displayed.

  The remarks indicate a supplementary explanation about the error written by the designer of the electronic medical record system 1 or the like.

  In FIG. 9, the secret item specification table TGM includes data for determining whether or not a screen item in the electronic medical record screen FR displayed on the desktop when an error occurs is to be a screen image output target. Stored. Specifically, one secret item designation data GM is stored for each combination of “error code”, “screen code”, and “item code”.

  The secret item designation data GM includes a screen item related to a combination of an error code, a screen code, and an item code, that is, an electronic medical record screen FR related to the screen code displayed when an error related to the error code occurs. The “secret flag” indicating whether or not to exclude the screen item related to the item code from the screen image output target is included. “1” means exclusion from the screen image output target, and “0” means not exclusion from the screen image output target.

  For example, the secret item designation data GM1 includes a screen item (book) whose item code is “FD001” in the electronic medical record screen FR (“injection screen FR1” in this embodiment) whose screen code is “OD001”. In the embodiment, “patient ID”) is excluded from the screen image output target when an error having the error code “E0003” occurs.

  In addition, the secret item designation data GM includes “remarks” for the designer of the electronic medical record system 1 to freely write a supplementary explanation.

  Returning to FIG. 3, the patient data search unit 202 searches the patient data KM requested from the terminal device 3 from the patient table TKM of the patient data storage unit 201, and stores the patient data KM acquired by the search in the terminal device 3. Send.

  The command receiving unit 302 receives a command input by the user by operating the keyboard 33 or the mouse 34.

  The electronic medical record screen generation unit 303 performs processing for generating electronic medical record screen data GA that is data for displaying the electronic medical record screen FR on the desktop. This process is performed as follows.

  For example, when the user designates the type of the electronic medical record screen FR and the patient ID of the patient and inputs a command for displaying the electronic medical record screen FR, the command reception unit 302 receives the command. Then, the electronic medical record screen generation unit 303 requests the electronic medical record server 2 to transmit the patient data KM corresponding to the patient ID related to the command.

  In the electronic medical record server 2, the patient data search unit 202 searches the patient data KM from the patient table TKM of the patient data storage unit 201, and transmits the patient data KM acquired by the search to the requesting terminal device 3.

  Then, the electronic medical record screen generation unit 303 generates electronic medical record screen data GA for displaying the electronic medical record screen FR indicating the content of the patient data KM transmitted from the patient data search unit 202 on the desktop.

  The display control unit 304 displays the electronic medical record screen FR or the message box MB on the desktop based on the electronic medical record screen data GA or message box data MA described later.

  The doctor examines the patient while looking at the electronic medical record screen FR displayed on the desktop. Then, as necessary, data can be added to the electronic medical chart or switched to another type of electronic medical chart screen FR. When the doctor operates the terminal device 3 in this way, an error may occur unexpectedly. The error detection unit 305 detects an error that occurs when the terminal device 3 is used in this way, and acquires the error code.

  The message box generation unit 306 generates message box data MA for displaying a message box MB informing the doctor of the error detected by the error detection unit 305 as follows.

  Error data EM corresponding to the error code of the error detected by the error detection unit 305 is acquired from the error table TEM of the data storage unit 301. Then, the message box data MA of the message box MB including the error message MS and the title MT of the error data EM is generated.

  When an error occurs and a message box MB related to the error is displayed on the desktop, the screen image output target determination unit 307 displays each screen displayed on the desktop at that time and screen items in them. Among the information shown in (1), what is to be screen image output and what is not. Such a decision is made in the following procedure.

  The screen image output target determination unit 307 acquires error data EM corresponding to the error code of the error detected by the error detection unit 305 from the error table TEM of the data storage unit 301. Then, based on the value of the item “screen output mode” of the error data EM, a screen to be screen image output is selected. That is, when the value is “2”, both the electronic medical record screen FR and the message box MB displayed on the desktop are selected as targets. If “1”, only the message box MB is selected as a target. If it is “0”, no screen is selected. That is, in this case, screen image output is not performed.

  Furthermore, when the screen output mode is “2”, that is, when the electronic medical record screen FR is a screen image output target, the error code of the error detected by the error detection unit 305 and the screen code of the electronic medical record screen FR are displayed. Is obtained from the secret item designation table TGM. Then, based on the value of the secret flag of the acquired secret item designation data GM, it is determined whether or not the screen item related to the item code indicated in the secret item designation data GM is to be kept secret. That is, it is determined whether or not to exclude the information indicated by the screen item from the screen image output target. Specifically, when the secret flag is “1”, the screen item is determined to be secret, and when the secret flag is “0”, it is determined not to be secret.

  The screen reproduction data generation unit 308 generates screen reproduction data GS for reproducing the contents of the screen and screen items determined as the screen image output target by the screen image output target determination unit 307 by printing.

  That is, when only the message box MB is determined as a screen image output target, the screen reproduction data GS for reproducing the message box MB is generated as follows, for example. Capture the entire current desktop. Then, image processing for extracting an image of the area of the message box MB from the image obtained thereby is performed, and the image data of the extracted image is set as screen reproduction data GS.

  Alternatively, when both the message box MB and the electronic medical record screen FR are determined as screen image output targets, screen reproduction data GS for reproducing both of them is generated as follows, for example. Capture the entire current desktop. Among the screen items included in the electronic medical record screen FR, an image of the area of the screen item determined to be secret is searched from the images obtained thereby. Then, image processing such as deleting an image in the area or painting with a predetermined color is performed to mask the information of the image item to be kept secret from being recognized by humans. That is, a masking process is performed. The image data of the entire desktop image that has been subjected to such processing is defined as screen reproduction data GS.

  Note that image data obtained by capturing a desktop is usually bitmap data in many cases. Then, the screen reproduction data GS generated by the method described above also becomes bitmap data. However, many printers do not have a function of printing an image based on bitmap data. Therefore, the screen reproduction data generation unit 308 converts the image data obtained by the above-described image processing into data having a format corresponding to the printer 4 (for example, page description language data of the printer 4) as necessary. Thus, the screen reproduction data GS is generated.

  The data output unit 309 outputs screen reproduction data GS to the printer 4. Then, the printer 4 executes printing based on the screen reproduction data GS. Through the above processing, when both the electronic medical record screen FR and the message box MB are targets of screen image output, a printed matter as shown in FIG. 10 is obtained. When only the message box MB is the target of screen image output, a printed matter as shown in FIG. 11 is obtained.

  These printed materials are handed over to maintenance personnel and used as materials for maintenance work such as maintenance, maintenance, and management of the electronic medical chart system 1.

  FIG. 12 is a flowchart for explaining an example of a process flow of screen image output in the terminal device 3.

  Next, the overall processing flow of the terminal device 3 used when the doctor examines the patient will be described with reference to the flowchart of FIG.

  When a patient enters the examination room, the doctor performs a predetermined operation such as inputting the patient ID of the patient to the terminal device 3 installed in the examination room (# 11). Then, the terminal device 3 acquires the patient data KM of the patient from the electronic medical record server 2 and displays the electronic medical record screen FR (# 12). The doctor examines the patient while referring to the electronic medical record screen FR.

  An error may occur while the doctor operates the terminal device 3 in this way. When an error occurs (# 13), the terminal device 3 detects the error and acquires an error code of the detected error. Then, the error data EM corresponding to the error code is searched from the error table TEM. Here, it is assumed that this error code is “E0004”. In that case, the error data EM4 shown in FIG. 8 is extracted by the search.

  When an error is detected and its error code is acquired, a message box MB is displayed on the desktop (# 14). The title MT and error message MS of the message box MB indicate “data acquisition error” and “data acquisition failed” based on the error data EM4, respectively.

  After displaying the message box MB, a screen to be printed is selected based on the screen output mode. Since “2” is set as the screen output mode in the error data EM4 (“2” in # 15), both the electronic medical record screen FR and the message box MB currently displayed on the desktop are to be printed. Select (# 16). Of the screen items included in the selected electronic medical record screen FR, a secret item is determined as follows (# 17).

  First, secret item designation data GM indicating the error code “E0004” of the error that has occurred and the selected electronic chart screen FR, that is, the screen code of the currently displayed electronic chart screen FR, is searched from the secret item designation table TGM. . For example, when the screen code of the electronic medical record screen FR is “OD001”, the secret item designation data GM5, GM6, and GM7 in FIG. 9 are extracted by the search.

  In these secret item designation data GM5, GM6, and GM7, “FD001”, “FD002”, and “FD006” are indicated as item codes. In the present embodiment, the screen items of “patient ID”, “patient name”, and “selected injection” correspond to these item codes, respectively.

  Among these secret item designation data GM, those having the secret flag set to “1” are the secret item designation data GM5 and GM6, so the screens corresponding to the item codes of “FD001” and “FD002” respectively. Items, that is, “patient ID” and “patient name” are determined as screen items to be kept secret.

  When the screen item to be kept secret is determined, the image data of the electronic medical record screen FR and the message box MB in a state where the contents shown in the screen item cannot be recognized is generated, and the screen reproduction is performed by performing conversion processing as necessary. Data GS is generated (# 18). Then, the printer 4 is controlled so that printing is executed based on the generated screen reproduction data GS (# 19).

  As a result, as shown in FIG. 10, the electronic medical record screen FR and the message box MB are printed on the paper PA in a state where the “patient ID” and “patient name”, which are the screen items determined to be secret, are filled. Printed on.

  On the other hand, if the screen output mode is “1” (“1” in # 15), that is, if an error with an error code “E0002” has occurred in step # 13, for example, Only the message box MB is selected as an object (# 20). Then, screen reproduction data GS for reproducing only the message box MB is generated (# 18), and printing is executed based on the screen reproduction data GS (# 19). In this case, as shown in FIG. 11, only the message box MB is printed on the paper PA.

  Alternatively, if the screen output mode is “0” (“0” in # 15), that is, if an error with an error code “E0001” has occurred in step # 13, printing is performed. The process is terminated as it is.

  According to this embodiment, the screen when an error occurs is not printed as it is as before, but the items in the screen are classified into items to be kept secret and items to be output and kept secret. Was printed in a state where it cannot be recognized. In addition, since classification is performed according to errors, it is possible to print information necessary for maintenance work by a maintenance person among the information on the screen while considering protection of personal information.

  FIG. 13 is a diagram showing a modified example of the method of hiding the screen item to be kept secret, FIG. 14 is a diagram showing an example of a divided area obtained by dividing the area of the electronic medical record screen FR, and FIG. 15 is a message in the designated divided area FIG. 16 is a diagram illustrating an example in which the boxes MB are arranged, and FIG. 16 is a diagram illustrating an example in which the electronic medical record screen FR and the message box MB are printed without overlapping each other.

  By the way, depending on the contents of the patient data KM of the patient or the contents of the operation of the doctor, there is a blank screen item in which no data is input when an error occurs in the electronic medical record screen FR There is. If a screen item determined to be secret is blank, it is not necessary to keep the screen item secret. Therefore, when an error occurs, a screen item that is blank may be confirmed, and the screen item may be excluded from the processing target for determining whether or not to be secret, and may be determined not to be secret.

  In the present embodiment, the screen item to be kept secret is made unrecognizable by performing image processing that fills the image area of that portion. Instead of performing such processing, as shown in FIG. 13, the message box MB overlaps the place where the contents of the screen items to be kept secret (“patient ID” and “patient name” in the example of FIG. 13) are shown. You may make it unrecognizable by making it cover. In this case, for example, it may be configured as follows.

  A divided area obtained by dividing the entire area of the electronic medical record screen FR into a plurality of areas is defined in advance, and identification numbers “1” to “9” are assigned to the divided areas as shown in FIG. Instead of the secret item designation data GM (see FIG. 9), secret item designation data GM 'indicating "error code", "screen code", and "arrangement position number" is provided. The arrangement position number indicates in which divided area in the electronic medical record screen FR of the screen code the message box MB is arranged when an error of the error code occurs. The developer of the electronic medical record system 1 sets an arrangement position number in advance so that the position of the screen item that should be kept secret is well hidden.

  If an error occurs, the secret item designation data GM ′ indicating the error code of the error and the screen code of the electronic medical record screen FR displayed at that time is called, and the secret item designation in the electronic medical record screen FR is designated. A message box MB is displayed in the divided area of the arrangement position number indicated in the data GM ′. More specifically, the center point SP1 of the divided area and the center point SP2 of the message box MB are arranged to coincide with each other. Alternatively, the upper left end of the divided area and the upper left end of the message box MB may be aligned with each other, or the lower right end of the divided area and the lower right end of the message box MB may be aligned with each other. Good.

  Or, depending on the display position of the message box MB, screen items that do not need to be kept secret may be hidden by the message box MB. Therefore, the following configuration may be adopted. It is possible to set “0” as the arrangement position number of the secret item designation data GM ′. If “0” is set, as shown in FIG. 16, the message box MB is arranged at a position that does not overlap the electronic medical record screen FR.

  In the present embodiment, the screen image output target screen is configured such that both the electronic medical record screen FR and the message box MB or only the message box MB can be selected, but an option of only the electronic medical record screen FR is also prepared. It may be left. For example, when the value indicated in the screen output mode of the error data EM (see FIG. 8) is “3”, only the electronic medical record screen FR may be printed.

  In this embodiment, the case where the screen image is output by printing the screen has been described. However, the image file may be generated and written to a recording medium such as a floppy disk or a hard disk. In that case, as described above, the image captured on the desktop is edited to generate image data for screen reproduction, which is output as an image file in a format such as a bitmap and stored in the hard disk 315 or the like. Alternatively, the image file may be transmitted to the outside and attached to an e-mail.

  Even if the image of the electronic medical record screen FR and the message box MB is reproduced (displayed) on the display using this image file, the positional relationship between the electronic medical record screen FR and the message box MB is changed in the same manner as the window. Therefore, it is impossible to see the information covered by the message box MB among the information in the electronic medical record screen FR.

  In the present embodiment, an example in which the electronic medical record system 1 is configured by the electronic medical record server 2, the terminal device 3, and the printer 4 has been described. However, the present invention is configured by only one set of personal computer and printer. The present invention can also be applied to an electronic medical record system or an electronic medical record system composed of only one personal computer, that is, a stand-alone type electronic medical record system.

  In the present embodiment, the case where the screen reproduction data generation system of the present invention is applied to the electronic medical record system 1 has been described as an example. However, the system used in a city hall that handles personal information of residents or the personal information of employees is handled. The present invention can also be applied to other systems that handle confidential information such as personal information such as a salary system.

  In addition, the configuration, processing contents, processing order, screen configuration, table configuration, etc. of the whole or each part of the electronic medical record system 1, the electronic medical record server 2, and the terminal device 3 are appropriately changed in accordance with the spirit of the present invention. be able to.

In the embodiment described above, the following notes are also disclosed.
(Appendix 1)
A maintenance support device for supporting maintenance of an information processing system having a display unit for displaying a screen,
Information to be kept secret among one or a plurality of pieces of information arranged in the error occurrence screen, which is a screen displayed on the display unit when an error occurs in the information processing system. Determining means for determining according to the content;
Screen reproduction data generation means for generating screen reproduction data for reproducing the error occurrence screen in a state where the information determined by the determination means should be kept secret cannot be recognized;
Screen reproduction data output means for outputting the screen reproduction data to the outside of the maintenance support device;
A maintenance support apparatus comprising:
(Appendix 2)
The screen reproduction data generation means is a screen reproduction data for reproducing an error notification screen that is a screen for notifying a user of the error together with the error occurrence screen when an error occurs as the screen reproduction data. Generate data,
The maintenance support device according to appendix 1.
(Appendix 3)
The screen reproduction data generating means arranges the error notification screen at the position of the information determined to be secret among the information arranged in the error occurrence screen. Generating the screen reproduction data for reproducing the error occurrence screen and the error notification screen in a state where the error cannot be recognized.
The maintenance support device according to attachment 2.
(Appendix 4)
The screen reproduction data generating means generates the screen reproduction data for reproducing the error occurrence screen and the error notification screen in a state where they do not overlap each other.
The maintenance support device according to attachment 2.
(Appendix 5)
A maintenance support device for supporting maintenance of an information processing system having a display unit for displaying a screen,
According to the content of the error, an error occurrence screen that is a screen displayed on the display unit when an error occurs in the information processing system and an error notification screen for notifying the user of the error are to be output. Selecting means to select,
Determining means for determining information to be kept secret among one or a plurality of information arranged in the error occurrence screen when an error occurs, according to the content of the error;
When both the error occurrence screen and the error notification screen are selected as screens to be output, the information determined to be secret among the information arranged in the error occurrence screen When the error occurrence screen is reproduced in a state where it cannot be recognized and screen reproduction data for reproducing the error notification screen is generated, and only the error notification screen is selected as a screen to be output, the error notification is performed. Screen reproduction data generating means for generating screen reproduction data for reproducing only the screen;
Screen reproduction data output means for outputting the screen reproduction data generated by the screen reproduction data to the outside of the maintenance support device;
A maintenance support apparatus comprising:
(Appendix 6)
A data generation method for generating data used for maintenance of an information processing system having a display unit for displaying a screen,
Depending on the content of the error, one or more information arranged on the error occurrence screen, which is the screen displayed on the display unit when an error occurs in the information processing system, should be kept secret Decide
Generating screen reproduction data for reproducing the screen when the error occurs in a state where the information determined to be confidential cannot be recognized;
A data generation method characterized by the above.
(Appendix 7)
A computer program used in a computer for supporting maintenance of an information processing system having a display unit for displaying a screen,
Depending on the content of the error, one or more information arranged on the error occurrence screen, which is the screen displayed on the display unit when an error occurs in the information processing system, should be kept secret Processing to be determined
Processing for generating screen reproduction data for reproducing the screen when the error occurs in a state where information determined to be confidential cannot be recognized;
Processing for outputting the data for screen reproduction;
A computer program for causing a computer to execute.

It is a figure which shows the example of the whole structure of the electronic medical chart system which concerns on this invention. It is a figure which shows the example of the hardware constitutions of a terminal device. It is a figure which shows the example of a functional structure of an electronic medical chart system. It is a figure which shows the example of an electronic medical record screen. It is a figure which shows the example of a message box. It is a figure which shows the example in case an electronic medical record screen and a message box are displayed on the display simultaneously. It is a figure which shows the example of a patient table. It is a figure which shows the example of an error table. It is a figure which shows the example of a secret item designation | designated table. It is a figure which shows the example in which both the electronic medical record screen and the message box were printed on the paper. FIG. 6 is a diagram illustrating an example in which only a message box is printed on paper. It is a flowchart for demonstrating the example of the flow of a process of the screen image output in a terminal device. It is a figure which shows the modification of the method of hiding the screen item made secret. It is a figure which shows the example of the division area which divided | segmented the area | region of the electronic medical chart screen into plurality. It is a figure which shows the example by which the message box was arrange | positioned to the designated division area. It is a figure which shows the example printed in the state in which an electronic medical record screen and a message box do not overlap each other.

Explanation of symbols

1 Electronic medical record system (information processing system)
3 Terminal device (maintenance support device)
307 Screen image output target determination unit (determination means)
308 Screen reproduction data generation unit (screen reproduction data generation means)
309 Data output unit (data output means for screen reproduction)
FR electronic medical record screen (screen when an error occurs)
GS screen reproduction data MB message box (error notification screen)

Claims (5)

A maintenance support device for supporting maintenance of an information processing system having a display unit for displaying a screen,
Information to be kept secret among one or a plurality of pieces of information arranged in the error occurrence screen, which is a screen displayed on the display unit when an error occurs in the information processing system. Determining means for determining according to the content;
Screen reproduction data generation means for generating screen reproduction data for reproducing the error occurrence screen in a state where the information determined by the determination means should be kept secret cannot be recognized;
Screen reproduction data output means for outputting the screen reproduction data to the outside of the maintenance support device;
A maintenance support apparatus comprising: The screen reproduction data generation means is a screen reproduction data for reproducing an error notification screen that is a screen for notifying a user of the error together with the error occurrence screen when an error occurs as the screen reproduction data. Generate data,
The maintenance support device according to claim 1. The screen reproduction data generating means arranges the error notification screen at the position of the information determined to be secret among the information arranged in the error occurrence screen. Generating the screen reproduction data for reproducing the error occurrence screen and the error notification screen in a state where the error cannot be recognized.
The maintenance support device according to claim 2. A data generation method for generating data used for maintenance of an information processing system having a display unit for displaying a screen,
Computer
Corresponds to the screen code of the error occurrence screen, which is the screen displayed on the display unit when an error occurs in the information processing system, from a table storing items to be kept secret for each screen code for identifying the screen By extracting the items that should be kept secret, execute the process of determining the items that should be kept secret,
Screen reproduction for reproducing the error occurrence screen in a state where the information of the item to be kept secret determined by the determination process among the information of the plurality of items arranged on the error occurrence screen is not identifiable It performs a process of generating data,
Executing a process of outputting the screen reproduction data to the outside of the computer;
A data generation method characterized by the above. A computer program used in a computer for supporting maintenance of an information processing system having a display unit for displaying a screen,
In the computer,
Corresponds to the screen code of the error occurrence screen, which is the screen displayed on the display unit when an error occurs in the information processing system, from a table storing items to be kept secret for each screen code for identifying the screen A process for determining items to be secreted by extracting items to be secreted;
Screen reproduction for reproducing the error occurrence screen in a state where the information of the item to be kept secret determined by the determination process among the information of the plurality of items arranged on the error occurrence screen is not identifiable Processing to generate data;
Processing for outputting the screen reproduction data to the outside of the computer;
A computer program for executing