JP5214914B2 - Medical information management system - Google Patents

Description

  The present invention relates to a medical information management system that manages medical information.

  In recent years, image information and patient information have been digitized along with improvements in computer and peripheral device technology. It is necessary to share image information and patient information that have been closed in the hospital by digitization of image information, and also to external hospitals etc. via a network for the purpose of medical work support and medical quality improvement etc. It has also become possible to transfer information. In addition, with the increase in capacity of networks, large-capacity data such as medical images has been transferred.

  The medical information is managed as a DICOM (digital imaging and communication in medicine) file as a standard. The DICOM file is composed of image information and image supplementary information attached thereto. The image supplementary information includes a lot of personal information such as examination ID information, patient information, collection information, related information, image display information, and image data information. The database server manages the DICOM file, records it on a medium as needed, and provides the DICOM file to other computers.

  In addition, in the database server, in order to protect personal information, the specific incidental information included in the DICOM file is concealed. Then, the database server records the DICOM file, which is partly concealed, on a medium as necessary, or provides the DICOM file to another computer.

In addition, the example of the well-known literature relevant to this application is shown in the following patent documents 1. FIG.
JP 2003-21696 A

  If a part of the DICOM file is concealed, when a user such as a doctor / technologist refers to the image supplementary information included in the DICOM file, there is a case where desired information is not obtained and inconvenience may occur. On the other hand, when a part of the DICOM file is not concealed, there is a problem in terms of personal information protection. Further, when a part of the DICOM file is not concealed, it is difficult for the user side to specify which information should be concealed.

  Moreover, in patent document 1, when duplicating and changing the image information included in the DICOM file, it is impossible to present which information should be concealed to the user.

  The present invention has been made in consideration of the above-described circumstances, and a medical information management system capable of providing desired image information to a user while preventing leakage of information to be concealed included in medical information. The purpose is to provide.

The medical information management system according to the present invention stores, in a storage device, medical information in which image information and image supplementary information attached to the image information are associated with each other as described in claim 1 to solve the above-described problem. In the medical information management system for managing the medical information, the concealment information specifying unit for specifying the information to be concealed from the image supplementary information included in the medical information, and the first feature information based on the medical information a first characteristic information generating unit that generates, on the medical information, a recording unit that records in the storage device in association with the ciphering information to be and the first characteristic information, the required medical information from said storage device It reads, based on a reading unit, the image supplementary information included in the required medical information reading the information to be confidential匿化that corresponds to the required medical information and first characteristic information, the secret And confidential information display area specifying unit for specifying a display region of the information to be of a second feature information generating unit that generates a second feature information based on the required medical information, first corresponding to the required medical information A feature information comparing unit that compares one feature information and the second feature information to determine whether or not they match, and if it is determined that the two match , display of the information to be concealed An area is concealed and the required medical information is displayed, while if the two are determined not to match, a display unit that outputs a warning that the information to be concealed may not be concealed ; Have

The medical information management system according to the present invention stores medical information associated with image information and image supplementary information attached to the image information in a storage device, as described in claim 3 in order to solve the above-described problem. In the medical information management system for managing the medical information, the concealment information specifying unit for specifying the information to be concealed from the image supplementary information included in the medical information, and the first feature information based on the medical information a first characteristic information generating unit that generates, on the medical information, a recording unit that records in the storage device in association with the ciphering information to be and the first characteristic information, in accordance with the transmission request of the required medical information, a providing unit for providing the required medical information stored in the storage device, together with the concealed information to be corresponding to the required medical information and first characteristic information, the required medical information Performs transmission request, the said required medical information from the providing unit, and a request section for receiving with concealed information to be corresponding to the required medical information and first characteristic information, image included in the required medical information A secret information display region specifying unit that specifies a display region of the information to be concealed based on the incidental information, a second feature information generating unit that generates second feature information based on the required medical information, When the first feature information corresponding to the required medical information is compared with the second feature information to determine whether or not they match, and when it is determined that the two match , said concealing the display area of the concealed information to be, while for displaying the required medical information, when the both are determined not to match, the effect that the concealed information to be may not be concealed Output warning It has a that display unit.

  According to the medical information management system of the present invention, desired image information can be provided to the user while preventing leakage of information to be concealed included in the medical information.

  An embodiment of a medical information management system according to the present invention will be described with reference to the accompanying drawings.

  FIG. 1 is a schematic diagram showing the configuration of the first embodiment of the medical information management system according to the present invention.

  FIG. 1 shows a medical information management system 10 of this embodiment. The medical information management system 10 includes a medical information generation device (modality) 11, a medical information management device 12, and a medical information display device (work station) 13. The medical information generation device 11, the medical information management device 12, and the medical information display device 13 are configured based on a computer. The medical information generation device 11 and the medical information management device 12 are connected to each other via a network N such as a hospital basic LAN (local area network). The medical information display device 13 may be connected to the network N so as to be capable of mutual communication.

  Examples of the medical information generation apparatus 11 include an ultrasonic diagnostic apparatus, an X-ray CT (computed tomography) apparatus, an MRI (magnetic resonance imaging) apparatus, and an angio apparatus. The medical information generation apparatus 11 generates a DICOM (digital imaging and communication in medicine) file that is medical information in which image information related to a patient and image supplementary information attached to the image information are associated with each other.

  Here, the DICOM file is file data generated according to the DICOM standard. The DICOM standard is a wide range of regulations that are standardized in the United States to standardize medical information and include data formats, communication methods, systems, services, and the like for image information. When the medical information generation apparatus 11 is an X-ray CT apparatus, an MRI apparatus, or the like, one DICOM file corresponds to one image information, whereas when the medical information generation apparatus 11 is an angio apparatus or the like, one DICOM file Corresponds to the image information group.

  FIG. 2 is a diagram showing an outline of the structure of the DICOM file.

  As shown in FIG. 2, the DICOM file for each image information (or each image information group) is mainly composed of a blank area, an image supplementary information area, and an image information area. The image supplementary information area of the DICOM file is composed of a collection of data elements (for example, explicit VR (value representation) type). Each data element includes a tag (group number (GRP.), Element number (ELM.)), Value expression (VR), value length (VL) and value content (Value). . The tag, the value expression, the value length, and the value content are generally expressed in hexadecimal (HEX). The structure of the DICOM file has been described as the explicit VR type, but the exclusive VR type may also be used.

  By each tag included in each data element of the DICOM file, patient information, imaging condition information, image information, display information, and the like, which are attribute information of the image information, are added to the image information.

  FIG. 3 is a diagram illustrating an example of the image supplementary information.

  The image supplementary information shown in FIG. 3 includes patient personal information. In the image supplementary information shown in FIG. 3, the group number “0010” includes the patient's personal information. Specifically, the value content “TOKYO TARO” corresponding to the tag “(0010,0010)” of the data element name “patient name” and the tag “(0010,0020) of the data element name“ patient ID (IDentification) ”. "Value content" ABC12345 "and data element name" Patient's date of birth "tag" (0010,0030) "Value content" 19500101 "and data element name" Patient gender " Value content “M” corresponding to “(0010,0040)” and value content “3-4, Kasumigaseki, Chiyoda-ku, corresponding to tag“ (0010,0140) ”of data element name“ patient address ”, “Tokyo” and the tag “(0010,2) of the data element name“ telephone number of patient's house ”. 54) ”and the value content“ 2100 ”corresponding to the tag“ (0010, 1000) ”of the data element name“ other ID of patient (social insurance number, etc.) ”. It corresponds to personal information.

  In FIG. 3, “DA” indicates “date”, “PE” indicates “person name”, “LO” indicates “long string”, “CS” indicates “code string”, and “SH” indicates “ “short string”, “OW / OB” is “other word string / other byte string”, “DS” is “decimal string”, “IS” is “integer string”, “US” is “unsigned short”. Respectively.

  The medical information management apparatus 12 shown in FIG. 1 is a database server that receives the DICOM file generated by the medical information generation apparatus 11 via the network N and stores the DICOM file.

  FIG. 4 is a hardware configuration diagram of the medical information management apparatus 12.

  FIG. 4 shows a hardware configuration of the medical information management apparatus 12, and the medical information management apparatus 12 is mainly composed of a CPU (central processing unit) 21, a memory 22, an HD (hard disc) 23, and communication control. It comprises basic hardware such as a device 24 and a recording medium drive 25. The CPU 21 is interconnected to each hardware component constituting the medical information management apparatus 12 via a bus B1 as a common signal transmission path. The medical information management device 12 may include a display device such as a monitor that displays image information, and input devices such as a keyboard and a mouse.

  The CPU 21 executes a program stored in the memory 22. Alternatively, the CPU 21 loads a program such as a program stored in the HD 23, a program transferred from the network N, received by the communication control device 24 and installed in the HD 23 into the memory 22 and executed.

  The memory 22 has elements such as a ROM (read only memory) and a RAM (random access memory), and stores an initial program loading (IPL), a basic input / output system (BIOS), and data. This is a storage device used for temporary storage of data.

  The HD 23 is composed of a metal disk coated or vapor-deposited with a magnetic material, and is incorporated in a reading device (not shown) in a non-detachable manner. The HD 23 is a storage device that stores programs installed in the server 12 (including OS (operating system) in addition to application programs), DICOM files, and the like. In addition, the OS can be provided with a graphical user interface (GUI) that allows the input device 25 to perform basic operations by using graphics frequently for displaying information to the user.

  The communication control device 24 performs communication control according to each standard. The communication control device 24 has a function of being able to connect to the network N through a telephone line, whereby the medical information management device 12 can be connected from the communication control device 24 to the network N network.

  The recording medium drive 25 can attach and detach a general-purpose recording medium (medium), reads out data (including a program) recorded on the recording medium and outputs the data on the bus B1. Write data supplied via B1 to the recording medium. Examples of recording media include FD (flexible disk), CD-ROM (compact disc-read only memory), CD-R (compact disk recordable), CD-RW (compact disk rewriteable), and MO (magnet, disc). Examples thereof include a DVD (digital versatile disc), a DVD-R (digital versatile disk-recordable), and a magnetic disk.

  The medical information display device 13 shown in FIG. 1 reads a desired DICOM file from the recording medium and displays the DICOM file.

  FIG. 5 is a hardware configuration diagram of the medical information display device 13.

  FIG. 5 shows a medical information display device 13, which is basically composed of basic hardware such as a CPU 31, a memory 32, an HD 33, a recording medium drive 35, an input device 36 and a display device 37. Consists of Note that the CPU 31 has the same function as the CPU 21, the memory 32 has the same function as the memory 22, the HD 33 has the same function as the HD 23, and the recording medium drive 35 has the same function as the recording medium drive 25.

  Examples of the input device 36 include a keyboard and a mouse that can be operated by a user such as a doctor. An input signal according to the operation is sent to the CPU 31. The user uses the input device 36 to request display of the desired DICOM file.

  The display device 37 includes a monitor and the like, and displays image information and image supplementary information included in the DICOM file.

  FIG. 6 is a block diagram showing functions of the first embodiment of the medical information management system according to the present invention.

  The medical information management apparatus 12 functions as part of the medical information management system 10 by executing a program by the CPU 21 (shown in FIG. 4). The medical information management apparatus 12 includes a medical information receiving unit 41, a concealment information specifying unit 42, a first feature information generating unit 43, and a recording unit 44. Note that it is not essential that the medical information management apparatus 12 includes the first feature information generation unit 43.

  The medical information receiving unit 41 has a function of receiving a DICOM file that is medical information generated by the medical information generating apparatus 11.

  The concealment information specifying unit 42 has a function of specifying information to be concealed from the image supplementary information included in the DICOM file. As information to be concealed, personal information of patients can be cited. Specifically, the concealment information specifying unit 52 specifies the tag with the group number “0010” among the image supplementary information included in the DICOM file for each DICOM file received by the medical information receiving unit 41. The concealment information specifying unit 52 specifies, for example, personal information to be concealed by setting a flag for information to be concealed included in the DICOM file.

  The first feature information generation unit 43 converts the image information and the image supplementary information included in the DICOM file as the original text for verifying the falsification (correction, appending, and deletion) of the medical information, based on the required function. 1 has the function of generating feature information. The first feature information generation unit 43 uses, for example, a hash function (also called “summary function” or “message digest”) that generates image information and image supplementary information included in the DICOM file, for example, a fixed-length pseudorandom number as a required function. .)) To generate a first hash value.

  FIG. 7 is a diagram for explaining a generation form of the first hash value.

  As shown in FIG. 7, the image information type “CT image information” which is the DICOM file “No. 1” includes one image information in one DICOM file. On the other hand, the image information type “angio image information” which is the DICOM file “No. 151” includes a plurality of pieces of image information in one DICOM file. The first feature information generation unit 43 generates a first hash value as first feature information for each piece of image information included in the DICOM file.

  Note that the original text for verifying falsification of medical information is not limited to the first hash value. For example, the original text may be a case where a checksum is used in which data is divided and the data in each block is regarded as a numerical value and totaled.

  Further, the recording unit 44 shown in FIG. 6 controls the recording medium drive 25 (shown in FIG. 4), and the DICOM file received by the medical information receiving unit 41 is specified by the concealment information specifying unit 42. The information to be concealed and the first hash value generated by the first feature information generation unit 43 are associated with each other and recorded on a recording medium such as a CD-R. The recording unit 44 may record the DICOM file, information to be concealed, and the first hash value in a single recording medium.

  The medical information display device 13 functions as a part of the medical information management system 10 by executing a program by the CPU 31 (shown in FIG. 5). The medical information display device 13 includes a reading unit 51, a concealment information display region specifying unit 52, a second feature information generating unit 53, a feature information comparing unit 54, and a display unit 55. Note that it is not essential that the medical information display device 13 includes the second feature information generation unit 53.

  The reading unit 51 controls the recording medium drive 35 to conceal the desired DICOM file and the corresponding DICOM file from the recording medium storing the DICOM file, the information to be concealed, and the first hash value. A function to read power information and the first hash value.

  The concealment information display area specifying unit 52 has a function of specifying the display area of information to be concealed based on the tag of the image supplementary information included in the DICOM file for each DICOM file read by the reading unit 51.

  The second feature information generating unit 53 is used by the first feature information generating unit 43 for each image information included in the DICOM file read by the reading unit 51 in order to verify the alteration of the image information. Based on an equivalent function, the second feature information is generated. For example, the second feature information generation unit 53 generates a second hash value for each piece of image information based on a hash function equivalent to that used by the first feature information generation unit 43.

  The feature information comparison unit 54 compares the first hash value generated by the first feature information generation unit 43 and the second hash value generated by the second feature information generation unit 53 and includes them in the DICOM file. Each image information has a function of determining whether or not they match. The feature information comparison unit 54 can verify the alteration of the DICOM file before and after recording on the recording medium.

  When the feature information comparing unit 54 determines that the first hash value and the second hash value match, the display unit 55 displays the image information and the image information included in the DICOM file read by the reading unit 51. When the supplementary information is displayed on the display device 37 (shown in FIG. 5), the display area of the information to be concealed specified by the concealment information display area specifying unit 52 is concealed and displayed on the display. The display unit 55 determines that the information with the flag set is information to be concealed, and conceals the information with the flag set. Examples of the processing method for concealing the display area of information to be concealed include a simple replacement method and a mosaic method.

  The simple replacement method is a method of replacing the concealment information for which the flag is set by the concealment information specifying unit 52 with another character string. For example, the display of the value content “TOKYO TARO”, which is image-attached information with a flag set, is replaced with a general noun such as “patient name” or a message such as “protecting personal information”. There are methods of replacing, replacing with a blank character, or replacing a character string itself with a mosaic. It should be noted that the value length is concealed by repeatedly replacing the concealment information up to the length in each image supplementary information as the concealment information.

  On the other hand, the mosaic method is a method of mosaic processing the range of the overlay position when “coordinate (start point)” and “coordinate (end point)” are present as overlay information in the image supplementary information shown in FIG. . Further, as the light and dark method, there is a method of erasing information (characters, rectangles, annotations, etc.) existing in the display area of information to be concealed or filling the display area with clear and dark colors.

  In addition, the display unit 55 generates a medical information plane in which the image information and the image supplementary information included in the DICOM file read by the reading unit 51 are drawn, and the concealment information specified by the concealment information display region specifying unit 52 A mask plane that masks only the display area of the information to be converted may be generated, and the mask plane may be displayed in front of the medical information plane.

  FIG. 8 is a diagram showing a general DICOM file display screen, and FIG. 9 is a diagram showing a DICOM file display screen by the medical information management system 10 of the present embodiment.

  FIG. 9 is a diagram showing a display screen of a DICOM file when the display area of information to be concealed is concealed by the simple replacement method. According to the display screen shown in FIG. 9, compared with the display screen shown in FIG. 8, only the personal information of the patient displayed on the upper right is replaced.

  On the other hand, the display unit 55 shown in FIG. 6 displays a warning message screen on the display device 37 when the feature information comparison unit 54 determines that the first hash value and the second hash value do not match. . FIG. 10 is a diagram illustrating a display example of a warning message. Since the update (change) of the DICOM file is managed by the hash value for each DICOM file, if there is a possibility that information to be concealed contained in the DICOM file is changed and cannot be completely concealed, a doctor or the like Call attention to the user.

  The display unit 55 displays a message confirming the display of the DICOM file on the display device 37 when the feature information comparison unit 54 determines that the first hash value and the second hash value do not match. You may let them. In that case, the display unit 55 causes the display device 37 to display the DICOM file in accordance with a display request from the input device 36 (shown in FIG. 6).

  As described above, it is possible to check whether or not the uncompressed DICOM file recorded on the recording medium can be concealed after reading and can be concealed during the concealment process. be able to. For example, in a case where a user such as a doctor cites image information for presentation from a recording medium generated as a backup of past image information, information that should be concealed such as personal information is generated on the recording medium ( It can be safely deleted without using the medical information management device 12).

  Further, the display unit 55 of the medical information display device 13 can display a list of information to be concealed on the display device 37. Therefore, since a list of information to be concealed can be presented to the user, the user can select and delete the information to be concealed.

  According to the medical information management system 10 of this embodiment, desired image information can be provided to the user while preventing leakage of information to be concealed included in the medical information.

  FIG. 11 is a schematic diagram showing the configuration of the second embodiment of the medical information management system according to the present invention.

  FIG. 11 shows a medical information management system 10A of this embodiment. The medical information management system 10 includes a medical information generation device 11, a medical information management device 12, and a medical information display device 13a. The medical information generation device 11, the medical information management device 12, and the medical information display device 13a are configured based on a computer. In addition, the medical information generation device 11, the medical information management device 12, and the medical information display device 13a are connected to each other via a network N so that they can communicate with each other.

  In the medical information management system 10A shown in FIG. 11, the same components as those in the medical information management system 10 shown in FIG.

  FIG. 12 is a hardware configuration diagram of the medical information display device 13a.

  FIG. 12 shows a medical information display device 13a. The medical information display device 13a mainly includes a CPU 31, a memory 32, an HD 33, a recording medium drive 35, an input device 36, a display device 37, a communication control device 64, and the like. Consists of basic hardware. The CPU 31 has the same function as the CPU 21, the memory 32 has the same memory 22, the HD 33 has the HD 23, the recording medium drive 35 has the recording medium drive 25, and the communication control device 64 has the same function as the communication control device 24. The description is omitted.

  FIG. 13 is a block diagram showing functions of the second embodiment of the medical information management system according to the present invention.

  The medical information management apparatus 12 functions as a part of the medical information management system 10A when the program is executed by the CPU 21 (shown in FIG. 4). The medical information management apparatus 12 includes a medical information receiving unit 41, a concealment information specifying unit 42, a first feature information generating unit 43, a recording unit 74, a providing unit 75, and a reading unit 76. Note that it is not essential that the medical information management apparatus 12 includes the first feature information generation unit 43.

  The recording unit 74 includes the DICOM file received by the medical information receiving unit 41, the information to be concealed specified by the concealment information specifying unit 42, and the first hash value generated by the first feature information generating unit 43. Are associated with each other and recorded in a storage device such as the memory 22 and the HD 23.

  The providing unit 75 has a function of providing a DICOM file stored in the storage device together with information to be concealed in accordance with a required DICOM file transmission request from the medical information display device 13a.

  The reading unit 76 reads the DICOM file stored in the storage device together with the information to be concealed in accordance with a required DICOM file transmission request from the medical information display device 13a, and supplies it to the providing unit 75.

  The medical information display device 13a functions as a part of the medical information management system 10A by executing a program by the CPU 31 (shown in FIG. 12). The medical information display device 13a includes a request unit 81, a concealment information specifying unit 52, a second feature information generation unit 53, a feature information comparison unit 54, and a display unit 55. In addition, it is not essential to have the second feature information generation unit 53 in the medical information management apparatus 13a.

  The feature information comparison unit 54 compares the first hash value generated by the first feature information generation unit 43 and the second hash value generated by the second feature information generation unit 53 and includes them in the DICOM file. Each image information has a function of determining whether or not they match. The feature information comparison unit 54 can verify the alteration of the DICOM file before and after transmission / reception.

  The request unit 81 has a function of requesting transmission of a required DICOM file and receiving the required DICOM file from the providing unit 75 together with information to be concealed.

  In the medical information management system 10A shown in FIG. 13, the same components as those in the medical information management system 10 shown in FIG.

  According to the medical information management system 10A of the present embodiment, desired image information can be provided to the user while preventing leakage of information to be concealed included in the medical information.

Schematic which shows the structure of 1st Embodiment of the medical information management system which concerns on this invention. The figure which shows the outline | summary of the structure of a DICOM file. The figure which shows an example of image supplementary information. The hardware block diagram of a medical information management apparatus. The hardware block diagram of a medical information display apparatus. The block diagram which shows the function of 1st Embodiment of the medical information management system which concerns on this invention. The figure explaining the production | generation form of a 1st hash value. The figure which shows the display screen of a general DICOM file. The figure which shows the display screen of the DICOM file by the medical information management system of this embodiment. The figure which shows the example of a display of a warning message. Schematic which shows the structure of 2nd Embodiment of the medical information management system which concerns on this invention. The hardware block diagram of a medical information display apparatus. The block diagram which shows the function of 2nd Embodiment of the medical information management system which concerns on this invention.

Explanation of symbols

10, 10A Medical Information Management System 11 Medical Information Generation Device 12 Medical Information Management Device 13 Medical Information Display Device 21, 31 CPU
22, 32 Memory 23, 33 HD
24, 64 Communication control device 36 Input device 37 Display device 41 Medical information receiving unit 42 Concealed information specifying unit 43 First feature information generating unit 44, 74 Recording unit 51 Reading unit 52 Concealed information display region specifying unit 53 Second feature Information generating unit 54 Feature information comparing unit 55 Display unit 75 Providing unit 76 Reading unit 81 Requesting unit

Claims (11)

In a medical information management system for storing medical information associated with image information and image supplementary information attached to the image information in a storage device, and managing the medical information,
A concealment information specifying unit for specifying information to be concealed from the image supplementary information included in the medical information;
A first feature information generation unit that generates first feature information based on the medical information;
The medical information, a recording unit that records in the storage device in association with the ciphering information to be and the first characteristic information,
A reading section for reading the conjunction from the storage device reads the required medical information, it said required to be secret匿化that corresponds to the medical information data and the first characteristic information,
Based on image supplementary information included in the required medical information, a secret information display area specifying unit that specifies a display area of the information to be concealed;
A second feature information generating unit that generates second feature information based on the required medical information;
A feature information comparison unit that compares the first feature information corresponding to the required medical information and the second feature information to determine whether or not they match;
When it is determined that the two match, the display area of the information to be concealed is concealed and the required medical information is displayed, whereas when it is determined that the two do not match, the information to be concealed is A medical information management system comprising: a display unit that outputs a warning that the information may not be concealed . The medical information management system according to claim 1, wherein the storage device is a portable medium. In a medical information management system for storing medical information associated with image information and image supplementary information attached to the image information in a storage device, and managing the medical information,
A concealment information specifying unit for specifying information to be concealed from the image supplementary information included in the medical information;
A first feature information generation unit that generates first feature information based on the medical information;
The medical information, a recording unit that records in the storage device in association with the ciphering information to be and the first characteristic information,
A providing unit for providing the required medical information stored in the storage device together with the information to be concealed corresponding to the required medical information and the first feature information in accordance with a transmission request for the required medical information ;
A request unit that performs a transmission request for the required medical information and receives the required medical information from the providing unit together with information to be concealed corresponding to the required medical information and first feature information ;
Based on image supplementary information included in the required medical information, a secret information display area specifying unit that specifies a display area of the information to be concealed;
A second feature information generating unit that generates second feature information based on the required medical information;
A feature information comparison unit that compares the first feature information corresponding to the required medical information and the second feature information to determine whether or not they match;
When it is determined that the two match, the display area of the information to be concealed is concealed and the required medical information is displayed, whereas when it is determined that the two do not match, the information to be concealed is A medical information management system comprising: a display unit that outputs a warning that the information may not be concealed . The medical information management system according to claim 3, wherein the storage device is a hard disk or a memory. Wherein when both are determined not to match, the display unit, the medical information management system as claimed in any one of claims 1 to 4, characterized in that to display a warning message. In response to a message for confirming the display of the medical information displayed when the feature information comparison unit determines that the two do not match, an input device is provided for requesting display of the required medical information, and the input device medical information management system as claimed in any one of claims 1 to 5 wherein in accordance with the display request of the required medical information, wherein the display unit is characterized in that for displaying the required medical information by. The display unit is configured to display on the concealed using a simple replacement method the display area of the concealed information to be any one of claims 1 to 6, characterized in that for displaying the required medical information Medical information management system described in 1. Wherein the display unit, the display area of the concealed information to be displayed on the concealed using a mosaic process, in any one of the claims 1 to 6, characterized in that for displaying the required medical information The medical information management system described. The display unit generates a medical information plane in which the image information and the image supplementary information are drawn, and a mask plane that masks only a display region of information to be concealed specified by the concealment information display region specifying unit. generated, the medical information management system as claimed in any one of claims 1 to 6, characterized in that for displaying the mask plane in front of the medical information plane. Any of the medical information, converts the basis of the hash function that generates a pseudo-random number having a fixed length, of the claims 1 to 9, characterized in that to generate the first characteristic information and second characteristic information A medical information management system according to claim 1. The medical information management system according to any one of claims 1 to 10 , wherein the information to be concealed is personal information.

Images