JP7379558B2 - information processing system - Google Patents

Description

The present invention relates to an information processing system.

Generally, an electronic medical record viewing system introduced into a medical institution is operated by granting viewing authority and writing authority to the electronic medical record to a specific user within the medical institution, such as a doctor (see, for example, Technical Document 1).

Some medical institutions conduct various clinical trials at the request of external trial sponsors (such as pharmaceutical companies and their agents) and clinical trial facility support organizations. In such medical institutions, part of the information in the electronic medical record related to the clinical trial is provided to the clinical trial sponsor.
A clinical trial is a test conducted on humans to confirm the effectiveness and safety of various medical methods related to the prevention, diagnosis, and treatment of diseases, such as drugs and medical devices. Among clinical trials, trials that are conducted with the approval of regulatory authorities in order to obtain approval under the Pharmaceutical and Medical Device Act regarding the manufacture and sale of pharmaceuticals or medical devices are particularly referred to as clinical trials.
A clinical trial is a test to confirm the effectiveness and safety of a new drug by administering it to actual patients (subjects) at a clinical site such as a hospital.

Remote Source is a technology that allows a person in charge of a clinical research associate (CRA) of a clinical trial sponsor, for example, to electronically view source materials such as medical records at a medical institution in a location away from the medical institution (remote location). This is called Documents Validation (hereinafter referred to as "R-SDV"), and methods for implementing this R-SDV can be broadly divided into the following first to third methods.

The first method is for a medical institution to photograph a paper medical record as a PDF or a still image and have the CRA view it.
In the case of the first method, the staff of the medical institution takes a photo of the medical record as a PDF or still image, and the PDF or still image is viewed by the CRA via the cloud, or the PDF or still image is sent by email. This is a method of having the CRA view the information.

In the second method, a Clinical Research Coordinator (CRC) dispatched from a clinical trial facility support organization to a medical institution logs into the electronic medical record database and, following the instructions of the CRA, records an online video recording of the electronic medical record. This is a method for CRA to view.
In this second method, the CRC of a medical institution uses a personal computer (in-hospital PC) owned by the medical institution under the supervision of the medical institution's staff to log in to the electronic medical record database and give instructions to the CRA in a remote location. R-SDV will be implemented by videotaping the electronic medical record and having the CRA view the video online.

The third method is to provide each person in charge of the sponsor with a PC dedicated to R-SDV with an application program installed for viewing electronic medical records, and to provide each person with an account for accessing electronic medical records. This is a method of implementing R-SDV by having the account issued and the person in charge using that account to access the electronic medical record.

JP 2019-53443 Publication

The conventional method described above has the following problems.
In the case of the first method, it is necessary to take a PDF or still image of the medical record in advance.
In the second method, the CRC is permanently stationed at the medical institution, which incurs the cost of the CRC. Further, since the CRC corresponds to the instructions from the CRA, the CRC requires a lot of man-hours.
In the case of the third method, although CRC work at the medical institution is not required, in order for CRAs to access electronic medical records, it is not only necessary to install an application program on the PC, but also to create an R-SDV for each CRA. Preparing a dedicated PC increases the cost of equipment such as the PC and the cost of obtaining software licenses.
Due to this situation, the introduction of R-SDV into clinical trials at medical institutions is currently slow.

The present invention aims to facilitate the introduction of R-SDV into medical institutions.

To achieve the above object, an information processing device according to one embodiment of the present invention includes:
A first information processing device placed in a medical institution conducting a clinical trial, a second information processing device placed together with a monitor in a location different from the medical institution, and a database placed in the medical institution or connected to a network. In an information processing system including
The database is
Stores electronic information materials including electronic medical records related to the clinical trial conducted at the medical institution,
The first information processing device includes:
viewing means that allows viewing of the electronic information material stored in the database;
Equipped with
The second information processing device includes:
Viewing control means that connects to the first information processing device via a virtual private network and controls the viewing means so that the electronic information material can be viewed on the monitor;
Equipped with
Thereby, R-SDV can be realized at low cost while preventing information leakage of electronic medical records handled by medical institutions.
Note that an information processing method and program corresponding to the above information processing apparatus according to one embodiment of the present invention are also provided as an information processing method and program according to one embodiment of the present invention.

According to the present invention, it becomes possible to promote the introduction of R-SDV into medical institutions.

1 is a diagram illustrating a configuration example of an information processing system according to an embodiment of the present invention. 2 is a block diagram showing the hardware configuration of a server in the information processing system of FIG. 1. FIG. 2 is a functional block diagram showing an example of a functional configuration of a CRA terminal in the information processing system of FIG. 1. FIG. FIG. 3 is a diagram showing an example of blocking respective ports of a CRA terminal and a CRC terminal. 3 is a flowchart showing the operation of R-SDV realized by a CRA terminal and a CRC terminal. It is a flowchart showing a series of operations such as VPN connection between a CRC terminal and a CRA terminal, access to an electronic medical record DB, and display of an electronic medical record using the VPN viewer. 12 is a flowchart showing a VPN disconnection operation between a CRC terminal and a CRA terminal by a VPN viewer. FIG. 2 is a diagram showing another configuration example (cloud type example) of an information processing system according to an embodiment of the present invention. FIG. 7 is a diagram showing another embodiment of cloud-type R-SDV. FIG. 7 is a diagram showing an information processing system according to another embodiment including an information processing device of the present invention.

Embodiments of the present invention will be described below with reference to the drawings.
An information processing system according to an embodiment will be described with reference to FIGS. 1 to 3.
FIG. 1 is a diagram showing a configuration example of an information processing system according to an embodiment of the present invention.

The information processing system shown in Figure 1 includes equipment located at a medical institution SA that conducts a clinical trial, a location different from the medical institution SA (for example, a clinical trial facility support organization SB, a location of a clinical trial sponsor such as a pharmaceutical company, etc.). ) are configured to communicate with each other via network N.
Here, the network N includes a network that physically connects the medical institution SA and the clinical trial facility support institution SB, a wide area network (WAN) such as a mobile phone company's communication network, and a public line.

The equipment of the medical institution SA is an electronic medical record database 40 (hereinafter referred to as "electronic medical record DB 40"), an in-hospital PC_PC-0 operated by the medical institution SA's doctors, etc., and the equipment dispatched to the medical institution SA from the clinical trial facility support organization SB. The CRC terminal PC-A operated by the clinical trial coordinator SD in the medical institution SA, and the CRC terminal PC-A, the hospital PC_PC-0, and the electronic medical record DB40 are connected to the network DN in the medical institution SA to enable communication. A network connection device R is included. The network DN is, for example, a local network (LAN).

The clinical trial facility support organization SB is an organization that has a contract with the medical institution SA and supports complicated clinical trial operations at the medical institution SA so that the clinical trial can be conducted properly and smoothly. The clinical trial sponsor is, for example, a pharmaceutical company or its agent.
A CRA terminal PC-B operated by a person in charge of the clinical trial facility support organization SB is located at the location of the clinical trial facility support organization SB.

In other words, the information processing system of this embodiment consists of a CRC terminal PC-A, etc. located at a medical institution SA that conducts a clinical trial, and a CRC terminal PC-A located at a different location from the medical institution SA, which is in charge of the clinical trial facility support organization SB that requests the clinical trial. A CRA terminal PC-B placed with a monitor at the location where the patient SC is stationed, an electronic medical record DB 40 placed in the medical institution SA or connected to the network N, and an in-hospital PC_PC-0 placed in the medical institution SA. include.

The CRC terminal PC-A located within the medical institution SA is a terminal managed by the medical institution SA or the clinical trial facility support organization SB. On the other hand, the hospital PC_PC-0 and the electronic medical record DB 40 are terminals and databases managed by the medical institution SA. Therefore, when bringing the CRC terminal PC-A into the facility of a medical institution SA, it is necessary to operate the CRC terminal PC-A while applying the data leakage prevention measures implemented at the medical institution SA.

Therefore, in the information processing system of the embodiment, a virtual private network (VPN) is established from the CRA terminal PC-B to the CRC terminal PC-A in the medical institution SA through the network N, and the CRC terminal PC-A is connected to the CRC terminal PC-A in the medical institution SA by remote desktop connection. By loading the desktop environment of the terminal PC-A into the CRA terminal PC-B and logging into the CRC terminal PC-A from the CRA terminal PC-B, the electronic medical record DB 40 can be accessed through the CRC terminal PC-A and the internal network DN of the medical institution SA. access. A VPN is a virtual network and is realized using a physical network N.

The electronic medical record DB 40 stores electronic information materials including electronic medical records related to treatments for patients performed at the medical institution SA.

In order to access the electronic medical record DB 40, information on access authority to the electronic medical record DB 40 (login information) provided by the medical institution SA and electronic medical record application software (for searching, viewing and editing the electronic medical record DB 40) are required. It is necessary to install a program such as "electronic medical record software" (hereinafter referred to as "electronic medical record software").

Since the electronic medical record records data and personal information of all the medical treatment processes of patients during and after their visit to the medical institution SA, the clinical trial facility support organization SB can only view the results of the study carried out at the medical institution SA. It is limited to data related to clinical trials, such as medication status for specific patients (subjects), that is, clinical trial data.

On the CRC terminal PC-A, it is possible to search and view data of a specific subject among the data in the electronic medical record DB 40, for example, data on patients undergoing medication treatment at a specific pharmaceutical company.
The CRC terminal PC-A is also restricted from accessing only some resources of the internal network DN.

CRA terminal PC-B has a VPN viewer 51. The VPN viewer 51 makes a VPN connection to the CRC terminal PC-A and controls the transfer of the desktop of the CRC terminal PC-A using the remote desktop function, thereby taking over the functions of the CRC terminal PC-A and accessing the electronic information of the medical institution SA. An application program for managing the medical record DB 40 (hereinafter referred to as "electronic medical record software") is started to enable the clinical trial data in the electronic medical record DB 40 to be viewed on the monitor screen of the CRA terminal PC-B.

This information processing system includes a CRC terminal PC-A and a CRA terminal PC-B, and accesses clinical trial data stored in the electronic medical record DB 40, and outputs the output unit 16 such as the display of the CRA terminal PC-B main body. This is to output to an external display etc. connected to CRA terminal PC-B. In the following, these displays will be referred to as monitors.
The CRA terminal PC-B is managed by the person in charge SC of the clinical trial facility support organization SB. The person in charge SC may be another person other than the CRA.
The CRC terminal PC-A is managed by the clinical trial coordinator SD (CRC) located at the medical institution SA or the person in charge SC who has visited the medical institution SA.

FIG. 2 is a block diagram showing the hardware configuration of the CRA terminal PC-B in the information processing system shown in FIG.

The CRA terminal PC-B includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a bus 14, an input/output interface 15, an output section 16, and an input/output interface 15. It includes a section 17, a storage section 18, a communication section 19, and a drive 20.

The CPU 11 executes various processes according to programs recorded in the ROM 12 or programs loaded into the RAM 13 from the storage section 18 .
The RAM 13 also appropriately stores data necessary for the CPU 11 to execute various processes.

The CPU 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input/output interface 15 is also connected to this bus 14 . An output section 16 , an input section 17 , a storage section 18 , a communication section 19 , and a drive 20 are connected to the input/output interface 15 .

The output unit 16 is composed of a display, a speaker, etc., and outputs various information as images and sounds. The input unit 17 includes a keyboard, a mouse, etc., and inputs various information. The output section 16 and the input section 17 include not only built-in units but also external units.

The storage unit 18 is composed of a hard disk, a DRAM (Dynamic Random Access Memory), etc., and stores various data.
The communication unit 19 communicates with other devices (such as the CRC terminal PC-A in the example of FIG. 1) via a network N including the Internet.

A removable medium 21 made of a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is appropriately installed in the drive 20. The program read from the removable medium 21 by the drive 20 is installed in the storage unit 18 as necessary.
Further, the removable medium 21 can also store various data stored in the storage section 18 in the same manner as the storage section 18. Note that the removable media 21 is restricted so that information that cannot be taken out, such as clinical trial data from the medical institution SA side, cannot be copied (duplicated and saved) by remote operation.
Although the hardware configuration of the CRA terminal PC-B is shown in Figure 2, the CRC terminal PC-A of the information processing system in Figure 1 also has the same hardware configuration as the CRA terminal PC-B. It has a structure.

Hereinafter, with reference to FIG. 3, an example of the functional configuration of the CRA terminal of the information processing system shown in FIGS. 1 and 2 will be described. FIG. 3 is a functional block diagram showing an example of the functional configuration of the CRA terminal shown in FIGS. 1 and 2. As shown in FIG.

As shown in FIG. 3, a DB 30 is stored in one area of the storage unit 18 of the CRA terminal PC-B shown in FIG.
The DB 30 stores a history of the user of the CRA terminal PC-B logging into the electronic medical record DB of the medical institution SA at the clinical trial facility support institution SB.

When processing is executed in the CRA terminal PC-B in FIG. 1, the VPN viewer 51 functions in the CPU 11 of the CRA terminal PC-B.

The VPN viewer 51 connects to the CRC terminal PC-A via VPN, and then allows the operator of the CRA terminal PC-B to remotely control the electronic medical record software functions of the CRC terminal PC-A using the remote desktop function, thereby viewing the electronic medical record DB 40. The clinical trial data (electronic information material) of the electronic medical record is displayed on the output unit 16, such as a monitor, for example, so that the operator can view it.

The VPN viewer 51 includes a VPN connection control section 61, a port control section 62, and a log management section 63.
The VPN connection control unit 61 uses the network N to establish a VPN to the CRC terminal PC-A located within the medical institution SA.

In addition, the VPN connection control unit 61 uses the remote desktop function to transfer the desktop screen of the CRC terminal PC-A connected to the VPN to the CRC terminal PC-A, thereby transferring the data from the CRA terminal PC-B to the CRC terminal PC-A. allows for direct operation.
Specifically, the VPN connection control unit 61 establishes a VPN with the connection destination based on the VPN connection information stored in advance in the DB 30, the connection destination address of the remote desktop function, etc., and operates the remote desktop function.
Note that the remote desktop function may utilize a function provided in advance in the operating system (OS) of the CRA terminal PC-B.

The port control unit 62 prohibits copying (duplication) of data being viewed, such as clinical trial data in the electronic medical record DB 40, to the CRA terminal PC-B.
Specifically, the port control unit 62 controls opening and blocking of ports of the communication unit 19 based on port control information stored in the DB 30 in advance. As the port control information, information such as closing port numbers 20, 21, and 22 when the VPN viewer 51 operates is stored.

As shown in FIG. 4, the port control unit 62 closes (blocks) the file transfer ports with port numbers 20, 21, and 22 among the ports that exchange data between the CRA terminal PC-B and the CRC terminal PC-A. This prevents file transfer (download, upload) from the CRC terminal PC-A to the CRA terminal PC-B.

Port numbers 20 and 21 are FTP (File Transfer Protocol) ports. Port number 22 is an SFTP (SSH File Transfer Protocol: encrypted file transfer protocol) port. Note that port opening settings require administrator privileges, so they cannot be changed using the user account.

In addition, the port control unit 62 executes interface control of the CRA terminal PC-B. Specifically, the log management unit 63 controls the USB port and prohibits data writing. Furthermore, data leakage is prevented by prohibiting writing to a USB memory or an external DVD drive connected to a USB port.

The log management unit 63 controls recording of the history of accesses to the electronic medical record DB 40 from the CRA terminal PC-B through the CRC terminal PC-A.

The log management unit 63 collects various access logs of the CRC terminal PC-A and the electronic medical record DB 40, including the time, when the CRC terminal PC-A and the electronic medical record DB 40 are accessed from the CRA terminal PC-B.

Specifically, the log management unit 63 collects information about when a user logs into the CRA terminal PC-B, CRC terminal PC-A, and electronic medical record DB 40 (time, account, etc.) and information about when the user logs off (time, account, etc.) and stores it in the DB 30 as history information.

Further, the log management unit 63 monitors the startup process and termination process of the terminal, and the behavior of the software installed on the CRA terminal PC-B.

Further, the log management unit 63 collects information on the CRC terminal PC-A to which the CRA terminal PC-B is connected while the CRA terminal PC-B is connected to the VPN (for example, accesses to data other than clinical trial data, access times, etc.).

Note that history information such as collected access history, login history, operation history, etc. is stored in the DB 30, but the history information is stored after being encrypted to prevent tampering. History information in the DB 30 can be viewed only when someone with administrator authority logs in.

According to the configuration of the information processing system of the embodiment, a VPN is established from the remote CRA terminal PC-B to the CRC terminal PC-A located in the medical institution SA, and electronic medical records are transmitted through the CRC terminal PC-A. R-SDV can be realized by logging into the DB 40 and viewing the subject's electronic medical record data, that is, clinical trial data, from the electronic medical record DB 40 on the monitor of the CRA terminal PC-B.
As a result, R-SDV can be realized at low cost while preventing leakage of clinical trial data in electronic medical records handled by medical institution SA.

The operation of the information processing system according to the embodiment will be described below.
First, we will explain how to view clinical trial data and other data that need to be viewed.

In the case of the information processing system of the embodiment, the CRC terminal PC-A is accessed remotely from the CRA terminal PC-B of the clinical trial facility support organization SB, and the person in charge SC of the clinical trial facility support organization SB installs it on the CRC terminal PC-A. The clinical trial data on the electronic medical record DB 40 can be viewed by remotely operating the electronic medical record software.

In addition to clinical trial data, paper documents that need to be viewed by the person in charge at the clinical trial facility support organization SC are scanned by the staff at the medical facility SA using an in-hospital scanner, converted into data such as a PDF file, etc. Save the PDF file etc. on the CRC terminal PC-A.
Then, the person in charge SC of the clinical trial facility support organization SB can view it by remotely accessing the CRC terminal PC-A from the CRA terminal PC-B.
View-only data is data that has a function to prevent data editing, such as not being able to be rewritten or printed.

Next, the operation of R-SDV will be explained with reference to FIG.
FIG. 5 is a flowchart showing the operation of R-SDV realized by a CRA terminal and a CRC terminal.
In step S11 of FIG. 5, the clinical trial coordinator SD or the staff of the medical institution SA (trial facility) starts up the CRC terminal PC-A under the internal network environment of the clinical trial facility and connects the CRC terminal PC-A to the internal network environment of the clinical trial facility. Connect to the network and display the login screen.

Subsequently, in step S12, the person in charge of the clinical trial facility support organization SB resident at the facility of the clinical trial facility support organization SB connects the CRA terminal PC-B in the facility to the network N and starts the VPN viewer 51. Then, the VPN viewer 51 connects the VPN to the CRC terminal PC-A through the network N, and uses the remote desktop function to display the login screen of the CRC terminal PC-A on the monitor of the CRA terminal PC-B. let

In step S13, the person in charge SC of the clinical trial facility support organization SB remotely logs in to the CRC terminal PC-A by entering login information on the login screen of the CRC terminal PC-A that is transferred to the CRA terminal PC-B. do.

In step S14, after logging in, the person in charge SC of the clinical trial facility support organization SB clicks on the shortcut icon of the electronic medical record software on the desktop of the CRC terminal PC-A displayed on the monitor of the CRA terminal PC-B. The electronic medical record software starts.
When the electronic medical record software is started, the user logs in using the login information set in advance in the electronic medical record DB 40 and displays the electronic medical record screen of the electronic medical record DB 40.

Next, the person in charge SC of the clinical trial facility support organization SB selects the desired subject's electronic medical record from the search window or medical record list from that screen, and the electronic medical record software retrieves the clinical trial data of that subject from the electronic medical record DB 40. Read out and display on monitor. Thereby, the person in charge SC of the clinical trial facility support organization SB can view the clinical trial data of a desired subject.

In step S15, paper materials such as worksheets on which supplementary information of the medical record has been filled out are converted into electronic data, for example, PDF files, on the in-hospital PC_PC-0 by the staff of the medical institution SA, and then converted to electronic data, such as a PDF file, on the CRC terminal PC-0. Have A save it.

As a result, the person in charge SC of the clinical trial facility support organization SB can specify the storage location of electronic data inside the CRC terminal PC-A from the desktop of the CRC terminal PC-A displayed on the monitor of the CRA terminal PC-B. You can view the PDF file.
Note that the PDF file is a file that has a data editing control function (a function that restricts data rewriting, printing, etc.), and is created for viewing only at the time of conversion.

Next, operations when accessing (connecting) and viewing the electronic medical record DB 40 will be described with reference to FIGS. 6 and 7. First, a series of operations such as VPN connection between the CRC terminal and CRA terminal, access to the electronic medical record DB 40, and display of the electronic medical record will be described with reference to FIG. FIG. 6 is a flowchart showing a series of operations by the VPN viewer 51, such as VPN connection between the CRC terminal and the CRA terminal, access to the electronic medical record DB 40, and display of the electronic medical record.

In step S21 of FIG. 6, when the clinical trial coordinator SD or the hospital staff turns on the power of the CRC terminal PC-A, the activated CRC terminal PC-A attempts to connect to the internal network of the clinical trial facility and connects to that network. Connecting.
In step S22, when the person in charge SC of the clinical trial facility support organization SB turns on the power of the CRA terminal PC-B, the CRA terminal PC-B connects to the network N.

In step S23, when the person in charge SC of the clinical trial facility support organization SB starts up the VPN viewer 51 of the CRA terminal PC-B, the VPN viewer 51 transmits a request for VPN connection to the CRC terminal PC-A.
In step S24, the CRC terminal PC-A returns a response to the request for VPN connection from the CRA terminal PC-B to the CRC terminal PC-A, thereby establishing a VPN connection between the two terminals.

In step S25, a remote desktop connection is made from the CRA terminal PC-B to the CRC terminal PC-A.

In step S26, the CRA terminal PC-B accesses the electronic medical record DB 40 via the CRC terminal PC-A, reads the clinical trial data from the electronic medical record of the desired subject, and displays it on the monitor, so that the clinical trial facility support organization SB The patient SC can view the clinical trial data.

Next, the network disconnection operation between the CRC terminal and the CRA terminal by the VPN viewer 51 will be explained with reference to FIG.
FIG. 7 is a flowchart showing the network disconnection operation between the CRC terminal and the CRA terminal by the VPN viewer 51.

In this case, first, in step S31 of FIG. 7, the person in charge SC of the clinical trial facility support organization SB performs a remote desktop disconnection operation on the screen of the CRA terminal PC-B, and the VPN viewer 51 connects the remote desktop. cut.
Subsequently, in step S32, the VPN viewer 51 disconnects the VPN of the CRC terminal PC-A.
In step S33, the VPN viewer 51 disconnects the VPN of the CRA terminal PC-B.
In step S34, the clinical trial coordinator SD turns off the power of the CRC terminal PC-A.
In step S35, the person in charge SC of the clinical trial facility support organization SB turns off the power of the CRA terminal PC-B.

When the person in charge of the clinical trial facility support organization SB turns off the power of the CRA terminal PC-B, the OS executes the shutdown process, but at this time, the hard disk or SSD of the CRA terminal PC-B is Any data that was saved or temporarily stored in memory is completely erased.

According to the operation of the information processing system of the embodiment, the CRC terminal PC-A is equipped with electronic medical record software for viewing clinical trial data stored in the electronic medical record DB 40, and the CRA terminal PC-B is equipped with electronic medical record software for viewing clinical trial data stored in the electronic medical record DB 40. By connecting VPN and remote desktop to CRC terminal PC-A and transferring the desktop of CRA terminal PC-B, it is possible to remotely control the electronic medical record software, allowing clinical trial facilities located far from medical institution SA. The person in charge SC of the clinical trial facility support institution SB can view the clinical trial data of the medical institution SA on a monitor while being permanently stationed at the location of the support institution SB.

Thereby, R-SDV can be realized at low cost while preventing information leakage of electronic medical records handled by the medical institution SA. As a result, it becomes possible to promote the introduction of R-SDV into medical institution SA.

In addition, the information processing system of the embodiment provides the following effects.
1. R-SDV can be made possible regardless of the type of electronic medical record in the medical institution SA, the model of the electronic medical record DB 40 storing it, etc.
2. Since the CRA terminal PC-B and the CRC terminal PC-A are directly connected via VPN, the information processing system can be constructed relatively easily since it does not depend on the internal network of the medical institution SA.
3. Since the CRA terminal PC-B is provided with a dedicated VPN viewer 51 to view electronic medical records, concerns about data leakage can be reduced.
4. In order to convert not only electronic data but also paper materials such as worksheets into CertifiedCopy (certification of the original certified by a notary public) such as PDF files, it can be saved on the CRC terminal PC-A and viewed. Complete R-SDV can be achieved.
5. In the remote desktop connection between CRC terminal PC-A and CRA terminal PC-B, the CRC terminal PC-A and CRA terminal PC-B perform two-way communication, so the person in charge SC of the clinical trial facility support organization SB Before or after viewing the data, it is also possible to have an online interview with a doctor or clinical trial coordinator SD under this network environment.
6. Almost the same system configuration can support not only the electronic medical record DB located within the medical institution SA but also cloud-based electronic medical records.

Although the embodiment of the information processing system to which the present invention is applied has been described above, the embodiment to which the present invention is applied may be, for example, as follows.

In the above embodiment, after VPN connection and remote desktop connection are made from the CRA terminal PC-B to the CRC terminal PC-A, the person in charge SC of the clinical trial facility support organization SB starts and operates the electronic medical record software to access the electronic medical record 40 for the clinical trial. Although the data is read out and displayed on the monitor, the series of operations and processing procedures may be programmed into the VPN viewer 51 and the series of processing may be performed automatically.
That is, the VPN viewer 51 of the CRA terminal PC-B connects to the CRC terminal PC-A via the VPN, and starts the electronic medical record software of the CRC terminal PC-A by remote control from the CRA terminal PC-B. The clinical trial data in the electronic medical record DB 40 may be read out from the screen and displayed on the monitor.

In the above embodiment, copying of the highly confidential clinical trial data in the electronic medical record DB 40 is prohibited by blocking the ports of the CRC terminal PC-A and the CRA terminal PC-B. There may be.

In the above embodiment, an example has been described in which the electronic medical record DB 40 is placed in the medical institution SA, but as shown in FIG. ) etc., and the in-hospital PC_PC-0 located at the medical institution SA, the CRC terminal PC-A, and the CRA terminal PC-B located at the clinical trial facility support institution SB individually store the electronic medical record DB 40. may be accessed.
In this case, it is assumed that the CRA terminal PC-B located in the clinical trial facility support organization SB has security measures completed and electronic medical record software installed, as in FIG.
In addition, some of the access settings of the cloud CL will be opened so that the electronic medical record DB 40 can be accessed from the CRA terminal PC-B.

Further, as shown in FIG. 9, a cloud-type R-SDV may be configured and implemented.
That is, the person in charge SC on the side of the clinical trial facility support organization SB logs into the CRC terminal PC-A located within the facility of the clinical trial facility support organization SB.
Next, the person in charge SC starts the electronic medical record software of the CRC terminal PC-A and logs into the electronic medical record DB 40 of the cloud CL.
As a result, the person in charge SC of the clinical trial facility support organization SB can access the electronic medical record in the electronic medical record DB40 of the cloud CL from the screen of the electronic medical record software via the CRC terminal PC-A and display it on the monitor screen. , you can view clinical trial data for subjects. For paper materials other than clinical trial data, such as worksheets, please ask the staff at the medical institution SA to save PDF files in the cloud CL.
Then, the person in charge SC of the clinical trial facility support organization SB can view the PDF file by remotely accessing the storage location of the PDF file in the cloud CL via the CRC terminal PC-A.
In the case of cloud-based R-SDV, the person in charge SC of the clinical trial facility support organization SB operates the CRC terminal PC-A to access the electronic medical record DB40 of the cloud CL, so the clinical trial coordinator SD at the medical institution SA There is no need to be present.
In addition, in the system configuration shown in FIG. 1, only the electronic medical record DB 40 is placed outside the medical institution SA, and a VPN is established from the CRA terminal PC-B to the CRC terminal PC-A. The electronic medical record DB 40 may be accessed from the CRC terminal PC-A.
In the above embodiment, the location where the CRA terminal PC-B is located is explained as the clinical trial facility support institution SB, but the location where the CRA terminal PC-B is located may be another location (for example, the location of the clinical trial sponsor). The CRA terminal PC-B may be located at any location other than the medical institution SA.

Another embodiment will be described below with reference to FIG.
FIG. 10 is a diagram showing an information processing system according to another embodiment including the information processing apparatus of the present invention.
As shown in FIG. 10, the information processing system of this embodiment includes a CRC terminal PC-A, and a CRA terminal PC connected to the CRC terminal PC-A via a wired or wireless network in the facility and a cloud CL. -B.
Note that the network configuration includes not only the configuration shown in FIG. 10 but also the configurations shown in FIGS. 1, 8, and 9 described above.

The CRA terminal PC-B is installed at the clinical trial facility support organization SB. The CRA terminal PC-B has a fingerprint reader SR as biometric information reading means. The fingerprint reader SR reads the fingerprint of the person in charge SC when starting up and logging in to the CRA terminal PC-B, and authenticates the fingerprint data in the cloud CL.
After fingerprint authentication processing is executed in the cloud CL, if the fingerprint is authenticated, login to the CRA terminal PC-B and the cloud CL is permitted.
The fingerprint reader SR shown here is an example, and other biometric information reading means (for example, facial image reading by camera photography, etc.) may be used, and the biometric information reading means is not limited to the fingerprint reader SR. do not have.

The CRC terminal PC-A is installed in a predetermined room such as the viewing room S of the medical institution SA.
A predetermined room is provided with a door D through which people can enter and exit. The door D is provided with a key K, and can be locked or unlocked under control from a predetermined PC. Note that the door may not be locked depending on how the medical institution SA manages the facility. Door D and key K may be installed in the room where CRA terminal PC-B of clinical trial facility support organization SB is located.
Further, the clinical trial facility support organization SB is equipped with a surveillance camera C that can take and stop taking images of the room through the network under control from the predetermined PC.

Cloud CL is provided with a WEB reservation function, an electronic signature/electronic seal function, an electronic medical record viewing control function, and a paper medical record viewing function.

The WEB reservation function is a function for reserving the date and time (time slot) for use of the CRC terminal PC-A.By clicking the reservation button displayed on the initial screen, you can access the facility reservation system and make the reservation displayed. It is possible to make a reservation to use the equipment (CRC terminal PC-A, etc.) during an available time slot on the calendar on the screen.

In this WEB reservation function, the person in charge SC starts up his/her own CRA terminal PC-B, performs fingerprint authentication using the fingerprint reader SR, and then activates the terminal via the cloud CL.

Then, the person in charge of the viewing room operation of the clinical trial facility support institution SB clicks on the reservation button from the activated application screen, thereby displaying the reservation screen of the facility management system managed by the medical institution SA. The person in charge of operating the reading room at the clinical trial facility support organization SB may be the person in charge SC (CRA).
On the reservation screen, when the desired date and time (time zone) for R-SDV is specified by the reading room operator of the clinical trial facility support organization SB, the facility management system sends a message to the PC of the medical institution SA's reading room operator. A reservation registration notification indicating that a reservation has been registered is output and notified to the PC.

The person in charge of operating the viewing room at the clinical trial facility support organization SB can check the reservation details (desired date, equipment, etc.) included in the reservation registration notification sent to his/her own PC.

Further, a similar reservation registration notification is sent to the clinical trial coordinator SD (CRC) at the medical institution SA from the facility reservation system to a mobile terminal, such as a smartphone, managed by the clinical trial coordinator SD (CRC).
The notification informs the Clinical Trial Coordinator SD (CRC) that he needs to prepare the R-SDV in the viewing room S at the beginning of that time period.

With this WEB reservation function, the person in charge SC (CRA) of the clinical trial facility support organization SB, the clinical trial coordinator SD (CRC), and the person in charge of viewing room management can grasp the schedule of R-SDV, and can use R-SDV remotely. It can be carried out without any delay.
In addition, by knowing the respective schedules of the above three parties, a preliminary connection test can be conducted between the CRC terminal PC-A and the CRA terminal PC-B to check whether R-SDV can be reliably implemented. .

There are two ways to prepare for R-SDV: viewing electronic medical records and viewing paper medical records.
When a person in charge SC (CRA) views, for example, an electronic medical record using R-SDV, the clinical trial coordinator SD enters the viewing room S and performs operations up to activating the CRC terminal PC-A.
In addition, when a person in charge SC (CRA) views paper medical records using R-SDV, for example, the clinical trial coordinator SD (CRC) enters the reading room S and connects the paper medical chart reader KR to the CRC terminal PC-A. After that, set the paper chart K on the paper chart reader KR.

The paper chart reader KR includes a page feeding mechanism PE for the set paper chart K, and a camera CA supported (arranged) so as to be able to take an image of the opened page.
In this paper chart reader KR, after setting the paper chart K, operations (control) from the CRC terminal PC-A to which the paper chart reader KR is connected can be used to perform operations such as page forwarding, and pages to be imaged by the camera CA. Images can be viewed.
After that, start up the CRC terminal PC-A and confirm that the paper cart reader KR and CRC terminal PC-A are electrically connected (that the operation of the paper cart reader KR can be controlled). Perform operations.

After making the above preparations, the person in charge of the clinical trial facility support organization SB starts up the CRA terminal PC-B, performs fingerprint authentication using the fingerprint reader SR, and connects the CRC terminal PC-B to the CRC terminal PC-B via the cloud CL as usual. Users can log in to A, start the application, and view electronic medical records and paper medical records K from the displayed screen.
To view the paper medical record K, a desired page of the paper medical record K can be viewed by remotely controlling the paper medical record reader KR (such as page turning operation).

Next, the electronic signature/electronic seal function will be explained.
The electronic signature/electronic seal function guarantees the data being viewed by attaching an electronic seal to the PDF file.
The electronic signature/electronic seal function ensures the validity of the original data by using an electronic seal attaching service on an external network (for example, the Internet, etc.) outside the medical institution SA. The electronic seal provision service uses a general-purpose cloud service such as DocuWorks and OBC's evidence storage cloud service. DocuWorks is a registered trademark.

The electronic signature/electronic seal function converts paper medical records into PDF (converts paper medical records into electronic data such as PDF files) by connecting existing scanners, etc. installed in medical institution SA to CRC terminal PC-A. and temporarily retain it in storage in cloud CL.
The electronic signature/electronic seal function attaches an electronic seal to the PDF file held in the cloud CL using an electronic seal attaching service. A PDF file with an electronic seal shall be retained as view-only data, and after being viewed by R-SDV, it shall be saved in Cloud CL for history management. It is also possible to delete it.
When using the electronic seal application service, an electronic seal is applied by preparing a separate network without using the network of this system.

According to the electronic signature/electronic seal function, when digitizing paper medical records, the PDF file is saved as a PDF file with an electronic seal attached to it at a public institution, and then it can be digitalized using R-SDV. By making it possible to delete data after viewing it, it is possible to ensure the originality of paper medical records and prevent information leaks in the event of unforeseen circumstances.

Next, the electronic medical record viewing control function will be explained.
The electronic medical record viewing control function restricts the viewable electronic medical records (or specific pages, patient data, etc. therein) by identifying the login ID and/or biometric authentication of the person in charge SC (R-SDV implementer). It is a function.

In this case, the fingerprint information of the R-SDV performer is registered in the CRA terminal PC-B using the fingerprint reader SR built into the CRA terminal PC-B or externally connected to the CRA terminal PC-B. In conjunction with the fingerprint registration and authentication function installed in the OS (Operating System) of the CRA terminal PC-B, login settings using fingerprints are performed.

Security risks can be reduced by having only the same person use the CRA terminal PC-B during subsequent R-SDV implementations.
Furthermore, it is possible to reduce the need for PC login (issuance of ID/PASS, etc. and login processing using it) when using the CRA terminal PC-B for the second and subsequent times.

The operation of the electronic medical record viewing control function will be explained below.
In this case, as shown in FIG. 10, a fingerprint reader SR included in the CRA terminal PC-B and a CRC terminal PC-A with a screen lock application program installed in advance are prepared. Note that the fingerprint reader SR may be built in the CRA terminal PC-B, or may be an external fingerprint reader SR connected to the CRA terminal PC-B via a communication cable.
Note that a screen lock application program may be installed in the cloud CL in advance, and the screen lock application may function when the CRC terminal PC-A logs into the cloud CL.
The screen lock application can be used to access patient data (electronic medical records with patient names for which viewing is not permitted) for which the logged-in staff SC is not granted viewing rights among the electronic medical records K stored in the electronic medical record DB 40. When the person in charge SC attempts to access (performs an operation to open a file), the connection from the CRC terminal PC-A to the electronic medical record DB 40 is cut off.

For the first time, the CRA terminal PC-B acquires the fingerprint of the person in charge SC (R-SDV implementer), and sets the CRA terminal PC-B to perform authentication processing using the fingerprint.
As a result, when performing R-SDV from the second time onward, it is possible to log in to the CRA terminal PC-B using the fingerprint information of the person in charge SC and perform R-SDV without issuing login information. .

The specific operation of the electronic medical record viewing control function will be described below.
In this case, as a preliminary step, a person with administrator authority (administrator) starts the screen lock application program installed on the CRC terminal PC-A or cloud CL and displays a dialog box setting screen for unlocking the screen. do.
Then, the administrator displays the login information (ID and password, etc.) of the person in charge SC (R-SDV implementer) on the dialog box setting screen, and the patient identification information (patient ID and patient name) written in the electronic medical record to be viewed. At the same time, the dialog box is set to automatically start up the next time the CRA terminal PC-B is started.
From the next time onward, the person in charge SC (R-SDV implementer) can display the patient's electronic medical record by entering the patient ID and patient name registered in advance in the dialog box. Further, if information other than the patient ID and patient name is input into the dialog box, the screen lock application program closes the VPN viewer (an application for viewing electronic medical records).

In this way, according to the electronic medical record viewing control function, by installing a screen lock application program compatible with the medical institution SA's electronic medical record system on the CRC terminal PC-A or cloud CL in advance, the person in charge SC (R -SDV practitioner) remotely connects from CRA terminal PC-B to CRC terminal PC-A and views the patient's electronic medical record. can be restricted.

Next, the paper medical record viewing function will be explained.
Regarding paper medical records and paper materials, by linking the paper medical chart reader KR connected to the CRC terminal PC-A and the paper medical record viewing application program that operates the paper medical chart reader KR, the materials can be viewed remotely. Make it.

In this case, after the clinical trial coordinator SD sets the paper medical record K, the remote person in charge SC starts the paper medical record viewing application program on the CRC terminal PC-A using the R-SDV, displays the paper medical record viewing screen, and remotely By operating (controlling) the paper chart reader KR on the paper chart viewing screen, the paper chart can be viewed while turning over the pages of the paper chart K captured by the camera CA.

Previously, paper medical records and paper materials were converted to PDF files and saved in storage, and the electronic data in the storage was viewed from a PC within the medical institution SA, but this took time and required updating. I can't tell what's going on. For this reason, we have developed technology that allows paper medical records to be viewed directly and remotely.

The operating procedure of the paper medical record viewing function will be specifically explained below.
The clinical trial coordinator SD sets the paper chart K in the paper chart reader KR.
Subsequently, when the clinical trial coordinator SD turns on the power of the CRC terminal PC-A, the CRC terminal PC-A starts up and waits for login.

Next, the person in charge SC (R-SDV implementer) remotely connects to the CRC terminal PC-A from the CRA terminal PC-B using R-SDV, logs in to the CRC terminal PC-A, and then runs the paper medical record viewing application program. to start.
The activated paper medical record viewing application program controls the camera CA of the paper medical record reader KR, and as a result, the camera CA starts capturing the page of the electronic medical record K, and the screen of the CRA terminal PC-B is displayed through the CRC terminal PC-A. A captured image of the electronic medical record K page is displayed.

From then on, by operating the page turn operation from the CRA terminal PC-B using the operation button on the paper chart viewing application program screen of the remote CRC terminal PC-A, the paper chart K can be viewed by the paper chart reader KR. Since page turning is executed, the person in charge SC can view a desired page of the paper medical record K from a remote location.
In addition, it is possible to view not only paper medical records K, but also other documents as long as the pages can be turned over.

According to this paper chart viewing function, first, the clinical trial coordinator SD sets the paper chart K in the paper chart reader KR and starts the CRC terminal PC-A. - SDV implementer) can use R-SDV to view necessary pages of the paper medical record K by his/her own operation without the help of an assistant.

Furthermore, for example, the series of processes described above can be executed by hardware or by software.
In other words, the functional configuration in FIG. 3 is merely an example and is not particularly limited.
In other words, it is sufficient that the information processing system is equipped with a function that can execute the above-mentioned series of processes as a whole, and what functional blocks and databases are used to realize this function are limited to the example shown in FIG. Not done. Further, the locations of the functional blocks and the database are not particularly limited to those shown in FIG. 3, and may be arbitrary. For example, the functions and database of the CRC terminal PC-A may be transferred to the network connection device R or the like. Moreover, one functional block and database may be configured by a single piece of hardware, a single piece of software, or a combination thereof.

Further, for example, when a series of processes is executed by software, a program constituting the software is installed on a computer or the like from a network or a recording medium. The computer may be a computer built into dedicated hardware. Further, the computer may be a computer that can execute various functions by installing various programs, such as a management server, a general-purpose smartphone, or a personal computer.

For example, a recording medium containing such a program may not only be a removable medium (not shown) that is distributed separately from the computer to be provided to a service provider, but also a recording medium that is pre-installed in the computer. The service provider may be provided with a recording medium or the like provided to the service provider.

Note that in this specification, the step of writing a program to be recorded on a recording medium is not only a process that is performed chronologically in accordance with the order, but also a process that is not necessarily performed chronologically but in parallel or individually. It also includes the processing to be executed.
Furthermore, in this specification, the term system refers to an overall device composed of a plurality of devices, a plurality of means, and the like.

In other words, the information processing apparatus to which the present invention is applied can take various embodiments having the following configurations.

That is, the information processing system to which the present invention is applied,
A first information processing device located at the medical institution conducting the clinical trial (for example, the CRC terminal PC-A in Figure 3) and a location different from the medical institution (for example, the location of the clinical trial facility support organization SB or the clinical trial sponsor) a second information processing device placed together with the monitor (for example, the CRA terminal PC-B in FIG. 3), and a database (for example, the electronic medical record DB 40 in FIG. 3) placed in the medical institution or connected to the network N. In information processing systems including
The database (for example, electronic medical record DB 40 in FIG. 3) is
Stores electronic information materials (for example, clinical trial data) included in electronic medical records related to the clinical trial conducted at the medical institution,
The first information processing device (for example, the CRC terminal PC-A in FIG. 3),
Viewing means (such as electronic medical record software) that enables viewing of the electronic information material stored in the database (for example, the electronic medical record DB 40 in FIG. 3);
Equipped with
The second information processing device (for example, the CRA terminal PC-B in FIG. 3),
By connecting to the first information processing device (for example, CRC terminal PC-A in FIG. 3, etc.) via a virtual private network (VPN) and controlling the viewing means (electronic medical record software), the electronic information viewing control means (for example, the VPN viewer 51 in FIG. 3) that executes control to display materials (for example, clinical trial data, etc.) on the monitor;
Equipped with
This makes it possible to implement R-SDV at low cost while preventing data leakage of electronic medical records in the electronic medical record DB 40 handled by the medical institution SA.
As a result, it is possible to promote the introduction of R-SDV into medical institution SA.

The viewing control means (for example, the VPN viewer 51 in FIG. 3),
a copy prohibition control means (for example, the port control unit 62 in FIG. 3) that prohibits copying of the electronic information material to the second information processing device (for example, the CRA terminal PC-B in FIG. 3, etc.);
Equipped with
Configuring the second information processing device (for example, the CRA terminal PC-B in FIG. 3, etc.) in this way, and copying electronic information material to the second information processing device (for example, the CRA terminal PC-B, etc. in FIG. 3) By prohibiting copying of the terminal itself, it is possible to prevent leakage of electronic medical record information regardless of the access authority of the terminal operator.

The viewing control means (for example, the VPN viewer 51 in FIG. 3),
Directly from the second information processing device (for example, CRA terminal PC-B in FIG. 3, etc.) through the network N, or via the first information processing device (for example, CRC terminal PC-A in FIG. 3, etc.), the database ( access history recording control means (for example, the log management unit 63 in FIG. 3) that controls recording of access history to the electronic medical record DB in FIG. 3;
Equipped with
By configuring the second information processing device (for example, the CRA terminal PC-B in FIG. 3) in this way and leaving a record of logins to the database, accounts or users who have accessed the database can be managed, thereby preventing information leakage. It is possible to prevent this.

DESCRIPTION OF SYMBOLS 11... CPU, 16... Output unit, 18... Storage unit, 19... Communication unit, 30... DB, 40... Electronic medical record DB, 51... VPN viewer, 61... ...VPN connection control unit, 62...Port control unit, 63...Log management unit, PC-0...Hospital PC, PC-A...CRC terminal, PC-B...CRA terminal, N...Network, DN...Network inside the medical institution, SA...Medical institution, SB...Clinical trial facility support organization, SC...Person in charge of the clinical trial facility support organization, SD...Clinical trial facility support organization clinical trial coordinator

Claims (6)

A first information processing device located at a medical institution conducting a clinical trial, a second information processing device located with a monitor at a location different from the medical institution and operated by a remote person at the location, and a third information processing device. An information processing system including a processing device and a database located at the medical institution or connected to a network,
The database is
Stores electronic information materials included in electronic medical records related to the clinical trial conducted at the medical institution,
The first information processing device includes:
viewing means that allows viewing of the electronic information material for each patient stored in the database;
Equipped with
The third information processing device includes remote person identification information that can identify the remote person in charge, and patient identification information that can identify a patient whose electronic medical record is permitted to be viewed by the remote person among a plurality of patients. We manage the information by associating it with the information in advance.
The second information processing device includes:
By connecting to the first information processing device via a virtual private network and controlling the viewing means, the patient identification information input by the remote person in charge is associated with the remote person in charge identification information. When managed by the third information processing device, the electronic information material of the patient specified by the patient identification information is displayed on the monitor, and the patient identification information input by the remote person in charge is displayed on the monitor. If the electronic information material of the patient identified by the patient identification information is not managed by the third information processing device in association with the patient identification information, viewing for executing control to prohibit display of the electronic information material of the patient identified by the patient identification information on the monitor; control means,
An information processing system equipped with. The first information processing device is placed at a location where permission for entry is required from the medical institution, and operates in the presence of a site representative;
The third information processing device further manages reservation dates and times for use of the second information processing device,
In the second information processing device,
The viewing control means connects to the first information processing device via the virtual private network based on the operation of the remote person at the reservation date and time, and controls the viewing means. Execute control to display electronic information material on the monitor,
reservation accepting means for accepting the reservation date and time based on the operation of the remote person in charge, and notifying the third information processing device;
Furthermore,
When the third information processing device receives the notification of the reservation date and time from the reservation accepting means, the third information processing device sends a reservation date and time notification to each of the medical institution, the on-site person in charge, and the remote person in charge of the reservation date and time. further equipped with means;
The information processing system according to claim 1 . The viewing control means includes:
duplication prohibition control means for prohibiting duplication of the electronic information material to the second information processing device;
The information processing system according to claim 1, comprising: The viewing control means includes:
access history recording control means for controlling recording of a history of accesses to the database from the second information processing device directly through the network or via the first information processing device;
The information processing system according to claim 1, comprising: A first information processing device located at a medical institution conducting a clinical trial, a second information processing device located with a monitor at a location different from the medical institution and operated by a remote person at the location, and a third information processing device. An information processing method in an information processing system including a processing device and a database located at the medical institution or connected to a network,
The database is
Stores electronic information materials included in electronic medical records related to the clinical trial conducted at the medical institution,
The process executed by the first information processing device is
a viewing step of making the electronic information material for each patient stored in the database viewable;
including;
The process executed by the third information processing device is
Remote person identification information that can identify the remote person in charge and patient identification information that can identify patients whose electronic medical records are permitted to be viewed by the remote person among a plurality of patients are managed in advance by associating them. step,
including;
The process executed by the second information processing device is
By connecting to the first information processing device via a virtual private network and controlling the first information processing device that executes the processing of the viewing step, the patient identification information input by the remote person in charge is When managed by the third information processing device in association with the remote person identification information, the electronic information material of the patient identified by the patient identification information is displayed on the monitor, while the remote person If the patient identification information inputted by is not managed by the third information processing device in association with the remote person identification information, the electronic information material of the patient identified by the patient identification information is displayed on the monitor. a viewing control step that executes a control that prohibits display;
Information processing methods including. A first information processing device located at a medical institution conducting a clinical trial, a second information processing device located with a monitor at a location different from the medical institution and operated by a remote person at the location, and a third information processing device. An information processing system including a processing device and a database located at the medical institution or connected to a network,
The database is
Stores electronic information materials included in electronic medical records related to the clinical trial conducted at the medical institution,
a computer that controls the first information processing device;
a viewing step of making the electronic information material for each patient stored in the database viewable;
Execute control processing including
a computer that controls the third information processing device;
Remote person identification information that can identify the remote person in charge and patient identification information that can identify patients whose electronic medical records are permitted to be viewed by the remote person among a plurality of patients are managed in advance by associating them. step,
Execute control processing including
a computer that controls the second information processing device;
By connecting to the first information processing device via a virtual private network and controlling the first information processing device that executes the processing of the viewing step, the patient identification information input by the remote person in charge is When managed by the third information processing device in association with the remote person identification information, the electronic information material of the patient identified by the patient identification information is displayed on the monitor, while the remote person If the patient identification information inputted by is not managed by the third information processing device in association with the remote person identification information, the electronic information material of the patient identified by the patient identification information is displayed on the monitor. a viewing control step that executes a control that prohibits display;
execute control processing including
program.

Images