JP7453504B2 - Patient information display control program, patient information display control method, and information processing system - Google Patents

Description

The present invention relates to a patient information display control program, a patient information display control method, and an information processing system.

With advances in information processing technology, databases are increasingly being utilized in the medical field. For example, technology is being introduced that allows a variety of information about each patient to be stored in a database and allows medical professionals such as doctors to search for patients and information about them by specifying search conditions.

Regarding the use of databases in the medical field, for example, a healthcare cloud has been proposed that provides users and their doctors with health risks estimated based on users' PHR (Personal Health Record) data.

Regarding information display, for example, when providing a community list screen to a user, a community server is proposed that controls the display/hide of private communities depending on the user's member type. has been done.

JP2017-97895A JP2002-342232A

By the way, some patient databases such as electronic medical record systems allow access restrictions (viewing restrictions) to be set for specific patients. Such access restrictions generally limit the ability of only specific pre-set users to view information about a specific patient when viewing information about that patient. .

However, if such access restrictions are not applied when displaying a list of patient information that matches the search conditions, information about patients for whom access restrictions have been set will also be displayed, making it difficult to protect the privacy of those patients. Problems can arise.

In one aspect, the present invention aims to provide a patient information display control program, a patient information display control method, and an information processing system that can protect the privacy of a specific patient when displaying patient search results. .

In one proposal, a computer receives search conditions for searching for patients whose information is to be displayed in a list, and data corresponding to a plurality of items and information regarding access restrictions are registered for each of a plurality of patients. When a first patient who satisfies the search conditions is extracted from multiple patients based on the patient database, and a second patient among the first patients for whom access restrictions have been set based on the patient database satisfies the search conditions. patient information display that causes processing to be executed, displaying a list of data corresponding to each of a plurality of items for each of the other patients among the first patients except for the second patient. A control program is provided.

In one proposal, a patient information display control method is provided in which a computer executes processing similar to the processing according to the patient information display control program described above.
Furthermore, in one proposal, an information processing unit having a storage unit that stores the patient database described above, and a processing unit that uses the patient database to execute the same process as the process according to the patient information display control program described above. system is provided.

In one aspect, the privacy of a particular patient can be protected when displaying patient search results.

1 is a diagram illustrating a configuration example and a processing example of an information processing system according to a first embodiment; FIG. FIG. 2 is a diagram illustrating a configuration example of an information processing system according to a second embodiment. It is a diagram showing an example of the hardware configuration of a server. FIG. 2 is a block diagram illustrating a configuration example of processing functions of a server. It is a figure showing an example of data composition of a patient database. FIG. 3 is a first diagram showing a display example of a search result display screen. It is a figure which shows the example of a display of a patient group setting screen. FIG. 3 is a first diagram showing a display example of a search result list. FIG. 2 is a second diagram showing a display example of a search result list. FIG. 7 is a second diagram showing a display example of a search result display screen. It is a figure which shows the example of a display of a restricted patient display screen. This is an example of a flowchart showing a search result display processing procedure. It is an example of a flowchart showing the procedure of patient classification processing. This is an example of a flowchart showing the procedure of restricted patient list display processing. It is an example of a flowchart showing the procedure of patient information display processing.

Embodiments of the present invention will be described below with reference to the drawings.
[First embodiment]
FIG. 1 is a diagram illustrating a configuration example and a processing example of an information processing system according to a first embodiment. The information processing system shown in FIG. 1 includes a storage section 1 and a processing section 2. The storage unit 1 and the processing unit 2 are included in the same information processing device, for example. In this case, for example, the storage unit 1 is implemented as a storage device installed in a certain information processing device, and the processing unit 2 is implemented as a processor installed in the information processing device. Furthermore, the storage section 1 and the processing section 2 may each exist as separate devices.

The storage unit 1 stores a patient database 1a. In the patient database 1a, data corresponding to a plurality of items is registered for each of a plurality of patients. Furthermore, information regarding access restrictions is also registered in the patient database 1a for each of a plurality of patients. The access restriction is a restriction on viewing of information in the patient database 1a by a user. Information regarding access restrictions includes, for example, information indicating whether access is restricted, information indicating user conditions for restricting access, and the like.

The processing unit 2 is capable of searching the patient database 1a for information on patients that satisfy the search conditions, and displaying a list of the searched patient information on a display device (not shown). This search and list display processing is executed as follows.

The processing unit 2 receives search conditions for searching for patients whose information is to be displayed in a list. As the search condition, for example, a condition regarding one or more items in the patient database 1a is applied. Based on the patient database 1a, the processing unit 2 extracts patients who satisfy the search conditions from among the patients registered in the patient database 1a. In the example of FIG. 1, it is assumed that patients P1 to P5 are extracted as such patients.

Next, the processing unit 2 displays a list 2a that lists data regarding the retrieved patients. Here, it is assumed that among the searched patients P1 to P5, access restrictions have been set for patients P3 and P5 based on the patient database 1a. In this case, the processing unit 2 does not display data regarding the patients P3 and P5 in the list 2a even if the patients P3 and P5 satisfy the search conditions. That is, the processing unit 2 displays a list 2a that lists data corresponding to each of a plurality of items for each of patients P1, P2, and P4 other than patients P3 and P5 among patients P1 to P5. . In the list 2a illustrated in FIG. 1, data corresponding to items A1 to A3 are displayed as a list for each of patients P1, P2, and P4.

According to such processing, when a patient for whom access restrictions have been set is searched, data on multiple items related to that patient is not displayed in List 2a, thereby protecting the privacy of that patient. Can be done. Therefore, according to the first embodiment, the privacy of a specific patient can be protected when displaying patient search results.

[Second embodiment]
FIG. 2 is a diagram illustrating a configuration example of an information processing system according to the second embodiment. The information processing system shown in FIG. 2 includes a server 100 and terminal devices 200, 200a, 200b, . The server 100 and the terminal devices 200, 200a, 200b, . . . are connected via a network 300. The network 300 may be, for example, a LAN (Local Area Network), a WAN (Wide Area Network), or a wide area network such as the Internet. Note that the server 100 is an example of an information processing device including the storage section 1 and the processing section 2 shown in FIG.

The server 100 stores a patient database in which a plurality of patient information is registered. In the patient information, multiple items of information regarding the patient are registered. For example, information such as attribute information such as the patient's name and gender, the dates and details of the patient's medical examination and hospitalization, and the patient's test results and diagnosis results are registered in the patient information. In addition, in response to search requests from terminal devices 200, 200a, 200b, . Display the list on the device.

The terminal devices 200, 200a, 200b, . . . are client computers used by users. Possible users of the terminal devices 200, 200a, 200b, . . . include those working at medical institutions, such as doctors, nurses, laboratory technicians, and medical office personnel. In this case, the patient database of the server 100 stores, for example, information regarding patients at this medical institution.

In this way, the information processing system shown in FIG. 2 is a system that allows a user to view patient information registered in a patient database. This information processing system is realized, for example, as part of an electronic medical record system.

FIG. 3 is a diagram showing an example of the hardware configuration of the server. The server 100 is realized, for example, as a computer as shown in FIG.
The entire server 100 is controlled by a processor 101. Processor 101 may be a multiprocessor. The processor 101 is, for example, a CPU (Central Processing Unit), an MPU (Micro Processing Unit), a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), or a PLD (Programmable Logic Device). Further, the processor 101 may be a combination of two or more elements among a CPU, an MPU, a DSP, an ASIC, and a PLD. Note that the processor 101 is an example of the processing unit 2 shown in FIG.

A RAM 102 (Random Access Memory) and a plurality of peripheral devices are connected to the processor 101 via a bus 108.
RAM 102 is used as the main storage device of server 100. The RAM 102 temporarily stores at least a portion of an OS (Operating System) program and application programs to be executed by the processor 101. Further, the RAM 102 stores various data necessary for processing by the processor 101.

Peripheral devices connected to the bus 108 include an HDD (Hard Disk Drive) 103, a graphic interface (I/F) 104, an input interface (I/F) 105, a reading device 106, and a communication interface (I/F) 107. There is.

HDD 103 is used as an auxiliary storage device of server 100. The HDD 103 stores OS programs, application programs, and various data. Note that other types of nonvolatile storage devices such as SSD (Solid State Drive) can also be used as the auxiliary storage device. Note that the HDD 103 or the RAM 102 is an example of the storage unit 1 shown in FIG.

A display 104a is connected to the graphic interface 104. The graphic interface 104 displays images on the display 104a according to instructions from the processor 101. Examples of displays include liquid crystal displays and organic EL (Electroluminescence) displays.

An input device 105a is connected to the input interface 105. Input interface 105 transmits a signal output from input device 105a to processor 101. Examples of the input device 105a include a keyboard and a pointing device. Pointing devices include mice, touch panels, tablets, touch pads, trackballs, and the like.

A portable recording medium 106a is attached to and detached from the reading device 106. The reading device 106 reads data recorded on the portable recording medium 106a and transmits it to the processor 101. Examples of the portable recording medium 106a include an optical disk and a semiconductor memory.

The communication interface 107 sends and receives data to and from other devices such as the terminal devices 200, 200a, 200b, . . . via the network 300.
With the hardware configuration as described above, the processing functions of the server 100 can be realized. Note that the terminal devices 200, 200a, 200b, . . . can also be realized as computers as shown in FIG.

FIG. 4 is a block diagram showing an example of the configuration of processing functions of the server. As shown in FIG. 4, the server 100 includes a storage section 110, a search processing section 120, and a display control section 130. The storage unit 110 is implemented, for example, as a storage area secured in the RAM 102 or the HDD 103. The processing of the search processing unit 120 and the display control unit 130 is realized, for example, by the processor 101 executing a predetermined program.

The storage unit 110 stores a patient database 111, a viewer database 112, and a search management database 113.
As described above, patient information about each of a plurality of patients is registered in the patient database 111. The patient database 111 also registers information regarding access restrictions to each patient's information.

The viewer database 112 has registered information about users (viewers) who view patient information. For example, the user's identification number, name, position, etc. are registered in the viewer database 112 for each user. Note that the user (viewer) is a user who views information in the patient database 111 using the terminal devices 200, 200a, 200b, . . . , and is, for example, a doctor or a nurse.

The search management database 113 registers information for displaying a search result display screen that displays a list of information about each patient searched from the patient database 111 according to search conditions. The search management database 113 includes records for each patient group.

A patient group is a group of patients searched from the patient database 111 according to search conditions set in association with the patient group. In the search process in the server 100, when a patient group name is selected, a patient is searched from the patient database 111 according to the search conditions associated with the patient group name, and a search result indicating information about the searched patient is generated. The display screen will appear.

In the record for each patient group, identification information of the patient group and search conditions corresponding to the patient group are registered. Furthermore, definition information indicating what kind of information is to be displayed in various display columns of the search result display screen is registered in these records. For example, when supplementary items and regular items (described later) are displayed on the search result display screen, each of the supplementary items and regular items includes definition information indicating which item information of the patient database 111 is to be displayed. be registered.

The search processing unit 120 receives a search request from the terminal device via the display control unit 130 and searches the patient database 111 for patients that match the search conditions. The search processing unit 120 reads information about each searched patient from the patient database 111, passes it to the display control unit 130, and requests display of a search result display screen.

The display control unit 130 receives search requests from the terminal devices 200, 200a, 200b, . . . and requests the search processing unit 120 to execute a search in accordance with the search request. Then, the display control unit 130 receives information about each searched patient from the search processing unit 120, generates a search result display screen in which the information is displayed in a list based on the search management database 113, and requests the search. Display on the display device of the original terminal device.

FIG. 5 is a diagram showing an example of the data structure of the patient database. As shown in FIG. 5, the patient database 111 includes records 111a for each patient. Basic information, hospitalization information, surgery information, examination information, document-related information, examination information, and access restriction information are registered in each patient's record 111a.

The basic information includes basic information about the patient, such as patient identification number, patient name, patient age and gender. The hospitalization information includes information related to hospitalization, such as the date of admission, date of discharge, hospital ward or room, department, and attending physician. The surgery information includes information regarding the surgery, such as the date and time of the surgery, the surgical method indicating the type of surgery, the surgeon, and the assistant. The medical examination information includes information regarding the medical examination, such as the date and time of the medical examination reservation, the medical department, and the doctor in charge.

The document-related information includes information regarding various documents such as an inpatient treatment plan, a nutritional management plan, a surgical instruction manual, and a consent form. For example, the document-related information includes information indicating the creation status of those documents, link information indicating the data location of those documents, and the like. The test information includes information indicating test results for the patient. In the test information, test result data is registered for each test item.

The access restriction information includes information regarding access restrictions (viewing restrictions) to patient information. Specifically, the access restriction information includes a restriction type, patient type, viewer condition, and password.

The restriction type indicates whether access restrictions are set for patient information. In this embodiment, access restriction means restricting viewing of at least some information regarding a patient. In this embodiment, as an example, it is assumed that among the information to be viewed (that is, information other than access restriction information) included in the patient's record 111a, information other than basic information is subject to access restriction. .

The patient type indicates the type of patient regarding access restriction. This type allows the strength of access restrictions to be set depending on the reason for restricting access. In this embodiment, "normal" indicates a normal patient, and "normal" indicates a patient who requires stronger access restrictions. There is a term "VIP (Very Important Person)" which refers to a special patient.

Viewer conditions indicate conditions for users who are permitted to view (access) when access restrictions are set. As the viewer condition, for example, a user's position, an identification number for identifying the user, etc. are set.

The password indicates a password that the user is requested to input when the user who meets the viewer condition specifies a patient and attempts to view the patient's information. That is, a password can only be set if access restrictions are set. If access restrictions are set and a password is set, the user will need the password to view the page. On the other hand, if access restrictions are set but no password is set, the user can view the page without entering a password.

Next, the search result display screen will be explained.
FIG. 6 is a first diagram showing a display example of a search result display screen. The search result display screen 400 shown in FIG. 6 includes a selection area 410 for selecting a patient group, a search result list 420, and a search number display section 460. However, as will be described later, FIG. 6 shows a display example when the user who views the search result display screen 400 has access rights (viewing rights) for all searched patients.

Selection buttons 411 to 413 for selecting patient groups are displayed in the selection area 410, respectively. By performing a selection operation on the selection buttons 411 to 413, the patient corresponding to the selected selection button is searched from the patient database 111 as a patient group corresponding to the selection button. Then, information regarding the searched patients is displayed in a list in the search result list 420.

In the example of FIG. 6, patient groups named "hospitalization," "reservation," and "surgery" are set, and selection buttons 411, 412, and 413 are associated with the patient groups "hospitalization," "reservation," and "surgery," respectively. It is being For example, when a selection operation is performed on the selection button 411, a search condition corresponding to the patient group "hospitalization" is acquired from the search management database 113, and patients matching the acquired search condition are searched from the patient database 111. Information regarding the searched patients is then displayed in the search result list 420.

The search result list 420 includes an item display area 430 where the item names are displayed, and records 441a-441e corresponding to each searched patient. In each of the records 441a-441e, information about the searched patient is basically displayed arranged in rows (horizontally). Note that while the records for five patients are displayed as an example in FIG. 6, the records of other searched patients may be displayed, for example, by scrolling the screen up and down.

In each patient's record 441a to 441e, a basic information column 451, supplementary information columns 452a, 452b, and normal information column are arranged in the row direction (that is, arranged in the same row). In FIG. 6, as an example, normal information columns 453a to 453f for six pieces of normal information are arranged.

The basic information column 451 displays basic information (basic information) about the patient, such as the patient's identification number and name. These pieces of information are extracted from information registered as basic information in the patient database 111.

In each of the supplementary information columns 452a and 452b, data of supplementary items defined in the search management database 113 (supplementary information) is displayed. Each of the supplementary information columns 452a and 452b can display data of a plurality of supplementary items, and in this case, the data of each supplementary item is displayed arranged in a column direction (vertical direction).

In the item display area 430, an ancillary item name display section 431 is displayed at a position corresponding to the ancillary information field 452a, and an ancillary item name display section 432 is displayed at a position corresponding to the ancillary information field 452b. The ancillary item name display section 431 displays the item name of the data displayed in the ancillary information column 452a. When the data of a plurality of items are arranged in the column direction in the supplementary information field 452a, the item names of those items are also displayed in the column direction in the supplementary item name display section 431. Similarly, the ancillary item name display section 432 displays the item name of the data displayed in the ancillary information column 452b. When the data of a plurality of items are arranged in the column direction in the supplementary information column 452b, the item names of those items are also displayed in the column direction in the supplementary item name display section 432.

In each of the normal information columns 453a to 453f, data of normal items (normal information) defined in the search management database 113 is displayed. Each of the normal information columns 453a to 453f displays only data of one type of normal item. Therefore, in each patient's record 441a to 441e, all data of normal items are arranged in the row direction.

In the item display area 430, normal item name display sections 433a to 433f are displayed at positions corresponding to the normal information columns 453a to 453f, respectively. The normal item name display sections 433a to 433f display the item names of the data displayed in the normal information columns 453a to 453f, respectively. Further, in the item display area 430, the item names can usually be classified by type of item content. For example, in FIG. 6, the item names in the normal item name display areas 433a and 433b are classified by the category name displayed in the category name display area 434a, and the item names in the normal item name display areas 433c and 433d are displayed in the category name display area 434b. Classified by the displayed classification name. Note that the item names displayed as normal items and information regarding the classification of each item are set in the search management database 113.

The number of search results (number of patients) that match the search criteria are displayed in the search result count display section 460. In the example of Figure 6, the search result count display section 460 displays that 30 search results were obtained.

Here, search processing according to patient group selection will be explained. As described above, search conditions for searching for patients are set for each patient group. The search conditions are set using a patient group setting screen as shown in FIG. 7 below.

FIG. 7 is a diagram showing a display example of the patient group setting screen. As shown in FIG. 7, the patient group setting screen 500 includes a selection area 510 for selecting a patient group and a search condition setting area 520 in which search conditions are set.

In the selection area 510, tabs for "hospitalization," "reservation," and "surgery" are displayed. By selecting the "hospitalization" tab, search conditions for the patient group "hospitalization" can be set in the search condition setting area 520. By selecting the "reservation" tab, search conditions for the patient group "reservation" can be set in the search condition setting area 520. By selecting the "surgery" tab, search conditions for the patient group "surgery" can be set in the search condition setting area 520.

In the example of FIG. 7, the "hospitalization" tab is selected, and at this time, the search condition setting area 520 displays setting areas 521 to 525 for setting search conditions for the patient group "hospitalization."

In the setting area 521, it is possible to select one of "admission date," "discharge date," and "hospitalization" as a search category, and in the setting area 522, it is possible to set a search period. When "hospitalization date" is selected as the search category, patients whose hospitalization date is included in the search period are searched. When "discharge date" is selected as the search category, patients whose discharge date is included in the search period are searched. When "hospitalized" is selected as the search category, patients who are hospitalized during the search period are searched.

In the setting area 523, a medical department can be selectively set. In the setting area 524, information indicating the ward in which the patient is admitted can be selectively set. In the setting area 525, the patient's doctor can selectively make settings.

In the example shown in FIG. 7, a patient who satisfies all the search conditions specified in the setting areas 521, 522, 523, 524, and 525 is registered in the patient database 111 as a patient belonging to the patient group "hospitalized". will be searched from. Further, as in the example of FIG. 7, when the patient group "hospitalized" is selected, information regarding the patient's hospitalization is set as a search condition.

Although not shown, when the patient group "reservation" is selected, information regarding the patient's consultation reservation is set as a search condition. For example, the period of the reservation date, the medical department in which the examination will be performed, the doctor in charge of the examination, the type of examination contents, the examination contents during the examination, etc. are set as search conditions. Furthermore, although not shown, when the patient group "surgery" is selected, information regarding the patient's surgery is set as a search condition. For example, search conditions include the period of surgery, the surgical method indicating the type of surgery, and the surgeon and assistant in charge of the surgery.

FIG. 8 is a first diagram showing a display example of a search result list. As an example, FIG. 8 shows a display example when the patient group "hospitalized" is selected.
First, the items displayed in the basic information column 451 of each record will be explained using FIG. 8. As described above, the basic information column 451 displays basic information (basic information) about the patient. In the example of FIG. 8, the basic information column 451 includes the patient's identification number, the patient's kana name (the name written in kana), the patient's kanji name (the name written in kanji), and the patient's age. Data for each item is displayed arranged in columns.

Next, the ancillary item name display sections 431 and 432 and the ancillary information fields 452a and 452b will be explained. The supplementary item name display section 431 can display up to four item names in the column direction. These item names indicate the supplementary items displayed in the supplementary information column 452a. Similarly, the supplementary item name display section 432 can display up to four item names in the column direction. These item names indicate the supplementary items displayed in the supplementary information column 452b.

As described above, each of the supplementary information columns 452a and 452b can display data of supplementary items set individually for each patient group. In FIG. 8, the item names of incidental items set for the patient group "hospitalization" are displayed in incidental item name display sections 431 and 432.

In the ancillary item name display section 431, "admission date", "discharge date", "ward/room", and "medical department" are displayed as the item names of the ancillary items, arranged in order from the top in the column direction. Therefore, when the patient group "Hospitalization" is selected, the incidental information column 452a of each record includes data corresponding to the following items: "Date of admission", "Date of discharge", "Ward/Room", and "Clinic department". They are arranged and displayed in order from top to bottom in the direction.

In addition, in the ancillary item name display section 432, the item names of the ancillary items are displayed in order from the top in the column direction: "Department Transfer Division," "Main Attending Doctor," and "Attending Doctor." Therefore, when the patient group "Hospitalization" is selected, the incidental information column 452b of each record contains data corresponding to the "transfer category," "main attending physician," and "attending physician" in the column direction. are displayed in order from top to bottom.

On the other hand, as described above, data of normal items set individually for each patient group can also be displayed in each of the normal information columns. In FIG. 8, the item names of the normal items set for the patient group "hospitalization" are displayed in the normal item name display areas 433a to 433d. In the normal item name display areas 433a, 433b, 433c, and 433d, "hospital treatment plan," "nutrition management plan," "reservation," and "instruction/consent form" are displayed as the item names of the normal items, respectively. Therefore, the normal information columns 453a, 453b, 453c, and 453d of each record display data corresponding to each item of "hospital treatment plan," "nutrition management plan," "reservation," and "instruction/consent form." be done.

In the example of FIG. 8, as shown in the classification name display section 434a, each item of "hospitalization treatment plan" and "nutrition management plan" is classified with the classification name "hospitalization document." Further, as shown in the classification name display section 434b, each item of "reservation" and "instruction/consent form" is classified under the classification name "surgery schedule".

FIG. 9 is a second diagram showing a display example of the search result list. As an example, FIG. 9 shows a display example when the patient group "surgery" is selected.
In the example of FIG. 9, in the ancillary item name display section 431, "Surgery date" and "Surgical procedure" are displayed as the item names of the ancillary items, arranged in order from the top in the column direction. Therefore, when the patient group "Surgery" is selected, the data corresponding to the "Surgery date" and "Surgical method" items are arranged in order from the top in the column direction in the additional information column 452a of each record. will be displayed.

Further, in the ancillary item name display section 432, "surgeon," "attending physician," and "assistant" are displayed as item names of ancillary items, arranged in order from the top in the column direction. Therefore, when the patient group "Surgery" is selected, the additional information column 452b of each record contains data corresponding to the items "Surgeon", "Physician in charge", and "Assistant" from the top in the column direction. They are arranged and displayed in order.

On the other hand, in the example of FIG. 9, the normal item name display areas 433a, 433b, 433c, and 433d display "Instruction (for surgery)," "Consent form (for surgery)," and "Date of hospitalization," respectively. "Discharge date" is displayed. Therefore, data corresponding to each item of "instruction sheet", "consent form", "admission date", and "discharge date" is displayed in the normal information columns 453a, 453b, 453c, and 453d of each record.

In the example of FIG. 9, as shown in the classification name display section 434a, the items "instruction document" and "consent form" are classified under the classification name "surgical document". Further, as shown in the classification name display section 434b, the items "admission date" and "discharge date" are classified under the classification name "hospitalization schedule".

By the way, as shown in FIG. 5, access restrictions can be set for patient information for each patient in the patient database 111. This access restriction is such that when a user specifies a patient and views detailed information about that patient, only a preset specific user can view the information about that patient.

On the other hand, as illustrated in FIGS. 6, 8, and 9, the search result list 420 of the search result display screen 400 displays multiple items of information about the searched patient. Therefore, if a patient for whom access restrictions have been set is searched and such a patient is included as a patient to be displayed in the search result list 420, information regarding that patient will not be displayed in the search result list 420. It ends up. Such a situation is undesirable from the viewpoint of patient privacy.

Therefore, in the server 100 of the present embodiment, when a patient for whom access restrictions are set is searched, if the user does not satisfy the viewer conditions set for that patient and the user does not have access rights, The information of that patient is not displayed in the search result list 420. Instead, the server 100 displays on the search result display screen 400 together with the search result list 420 the number of patients who were not displayed on the search result list 420 due to access restrictions.

FIG. 10 is a second diagram showing a display example of the search result display screen. The search result display screen 400 shown in FIG. 10 includes a selection area 410, a search result list 420, and a search result display section 460, as in the case of FIG. Furthermore, on the search result display screen 400 shown in FIG. 10, a number of people display section 470 is displayed in an area between the selection area 410 and the search result list 420.

After searching for a patient, the search processing unit 120 of the server 100 restricts the searched patients to "display patients" that can be displayed on the search result list 420 and the display on the search result list 420 ( Display is not permitted) and classified as “restricted patients.” Basically, among the searched patients, patients for whom the user viewing the search result display screen 400 does not satisfy the set viewer conditions are classified as restricted patients. In addition, in this embodiment, a patient whose patient type (see FIG. 5) is set to "VIP" is classified as a restricted patient even if the user satisfies the viewer condition. Thereby, stricter restrictions can be imposed on the display of patient information for "VIP" patients.

A search result display screen 400 shown in FIG. 10 shows a display example when a restricted patient is included among the searched patients. In this case, the search result list 420 displays only information about displayed patients among the searched patients, and does not display information about restricted patients. This allows the privacy of restricted patients to be protected.

On the other hand, the number of restricted patients is displayed in the number of patients display section 470. This allows the user to recognize that among the searched patients there are patients who are not displayed in the search result list 420 and the number of patients. Therefore, it is possible to improve the convenience for users who view search results while considering the privacy of restricted patients. In particular, by arranging the number of people display section 470 in a position close to the search result list 420 as in the example of FIG. 10, the user can easily recognize the existence of restricted patients and the number of patients.

Furthermore, in the example of FIG. 10, in addition to the number of restricted patients, the number of people who are not allowed access is displayed. The number of people who are not allowed to access indicates the number of patients whose users do not satisfy the set viewer conditions among the restricted patients. This allows the user to check how many patients who do not satisfy the viewer condition are included in the searched patients and restricted patients. In addition, the difference between the number of restricted patients and the number of inaccessible patients indicates the number of "VIP" patients, so the user can check how many "VIP" patients are included in the searched patients and restricted patients. can be recognized.

Note that if the searched patients do not include restricted patients, the number of people display section 470 is not displayed on the search result display screen 400 as in the example of FIG. However, as another example, the number of people display part 470 is always displayed on the search result display screen 400, and if the restricted patients are not included in the searched patients, the number of people is displayed in the number of people display part 470. It may be displayed that there are 0 people.

FIG. 11 is a diagram showing a display example of the restricted patient display screen. When a selection operation (for example, a click operation) is performed on the number of people display section 470 shown in FIG. 10, a restricted patient display screen 600 shown in FIG. 11 is displayed. The restricted patient display screen 600 includes a number of patients display section 601 and a restricted patient list 602.

The number of patients display section 601 displays the number of restricted patients. The restricted patient list 602 displays a list of specific items of information determined in advance for each restricted patient. In this embodiment, as an example, the restricted patient list 602 displays information on items included in the basic information (see FIG. 5) among the patient information items. That is, the restricted patient list 602 does not display detailed information other than basic information among the restricted patient information.

In this way, by performing a selection operation on the number of people display section 470 of the search result display screen 400, the user displays the restricted patient display screen 600 and views a limited portion of information about each restricted patient. be able to. By displaying only limited information about each restricted patient on the restricted patient display screen 600, detailed information about restricted patients can be prevented from being disclosed unnecessarily, and information with consideration for privacy can be displayed. Disclosures may be made.

Next, the processing of the server 100 will be explained using a flowchart.
FIG. 12 is an example of a flowchart showing the search result display processing procedure.
[Step S11] The display control unit 130 determines whether an operation to select a patient group has been performed on the search result display screen 400 on the terminal device. If a selection operation is performed on any of the selection buttons 411 to 413, it is determined that a patient group selection operation has been performed, and the process proceeds to step S12.

[Step S12] The display control unit 130 notifies the search processing unit 120 of the selected patient group. The search processing unit 120 acquires the search conditions set for the notified patient group from the search management database 113. The search processing unit 120 searches the patient database 111 using the acquired search conditions and extracts patients that match the search conditions.

[Step S13] The search processing unit 120 performs patient classification processing to classify each patient extracted in step S12 into display patients and restricted patients based on information regarding access restrictions. Details of this process will be explained later in FIG. 13.

[Step S14] The search processing unit 120 determines whether there is a patient classified as a restricted patient by the process of step S13. If there is a restricted patient, the search processing unit 120 advances the process to step S15, and if there is no restricted patient, the search processing unit 120 advances the process to step S16.

[Step S15] The search processing unit 120 notifies the display control unit 130 of the information regarding the displayed patients and the number of restricted patients, and instructs the display control unit 130 to display the search result display screen 400 including the number of people display unit 470. request. Display control unit 130 generates image data for search result display screen 400 in response to this request. At this time, the search result list 420 displays a list of information regarding only the displayed patients among the searched patients, and the number display section 470 displays the number of restricted patients. The search processing unit 120 transmits the generated image data to the terminal device and displays the search result display screen 400.

[Step S16] The search processing unit 120 notifies the display control unit 130 of information regarding the displayed patient and requests the display control unit 130 to display the search result display screen 400 that does not include the number of people display unit 470. Display control unit 130 generates image data for search result display screen 400 in response to this request. At this time, the search result list 420 displays a list of information regarding the searched patients, and the number of patients display section 470 is not displayed. The search processing unit 120 transmits the generated image data to the terminal device and displays the search result display screen 400.

FIG. 13 is an example of a flowchart showing the procedure of patient classification processing. The process in FIG. 13 corresponds to the process in step S13 in FIG.
[Step S21] The search processing unit 120 selects one patient searched in step S12 of FIG. The search processing unit 120 executes the processes from step S22 onward while referring to the record of the selected patient among the records in the patient database 111.

[Step S22] The search processing unit 120 determines whether access restrictions are set for the selected patient based on the restriction type registered in the selected patient's record. If the access restriction is set, the search processing unit 120 advances the process to step S23, and if the access restriction is not set, the search processing unit 120 advances the process to step S25.

[Step S23] The search processing unit 120 determines whether the selected patient is a "VIP" based on the patient type registered in the selected patient's record. If the patient is a "VIP", the search processing unit 120 advances the process to step S26, and if the patient is not a "VIP" (in the case of "normal"), the search processing unit 120 advances the process to step S24.

[Step S24] The search processing unit 120 reads viewer conditions from the selected patient's record. The search processing unit 120 also reads user (viewer) information from the viewer database 112. The search processing unit 120 determines whether the user meets the viewer conditions based on this information. If the user matches the viewer conditions, the search processing unit 120 advances the process to step S25, and if the user does not meet the viewer conditions, the search processing unit 120 advances the process to step S26.

[Step S25] The search processing unit 120 classifies the selected patient as a display patient.
[Step S26] The search processing unit 120 classifies the selected patient as a restricted patient.
[Step S27] The search processing unit 120 determines whether all the patients searched in step S12 of FIG. 12 have been selected. If there are unselected patients, the search processing unit 120 advances the process to step S21 and selects one patient from the unselected patients. On the other hand, if all searched patients have been selected, the search processing unit 120 advances the process to step S14 in FIG. 12.

According to the above process of FIG. 13, among the searched patients, patients whose patient type is "normal" are classified as display patients if the user matches the viewer condition (step S24: Yes). . In this case, the patient is classified as a display patient and the patient's information is displayed in the search result list 420, regardless of whether a password is required when the user views the patient's information.

In other words, among the searched patients, patients whose patient type is "normal" are classified as restricted patients only if the user does not meet the viewer conditions (step S24: No). On the other hand, among the searched patients, patients whose patient type is "VIP" are classified as restricted patients even if the user matches the viewer condition (step S23: Yes).

In this way, access restrictions are more severe for "VIP" patients than for "normal" patients. Thereby, the access restriction level can be changed depending on the patient type. Conversely, for patients whose patient type is "normal", the user can view the contents of patient information to some extent through the search result list 420. This increases the convenience for users who view patient information compared to a case where the access restriction level is set uniformly and information about all patients for whom access restrictions are set is not displayed in the search result list 420. be able to.

FIG. 14 is an example of a flowchart showing the procedure of restricted patient list display processing. The process in FIG. 14 may be started in a state where the search result display screen 400 including the number of people display section 470 is displayed.

[Step S31] When detecting that a selection operation has been performed on the number of people display section 470 of the search result display screen 400 on the terminal device, the display control section 130 notifies the search processing section 120 to that effect.

[Step S32] The search processing unit 120 acquires basic information of restricted patients from the patient database 111. If there are multiple restricted patients, basic information about each restricted patient is acquired.

[Step S33] The search processing unit 120 notifies the display control unit 130 of the basic information of each restricted patient and requests display of the restricted patient display screen 600. The display control unit 130 generates image data of a restricted patient display screen 600 that displays a list of basic information for each restricted patient. The display control unit 130 transmits the generated image data to the terminal device and causes the restricted patient display screen 600 to be displayed.

FIG. 15 is an example of a flowchart showing the procedure of patient information display processing.
[Step S41] The display control unit 130 accepts an operation to specify a patient. For example, in the search result list 420 of the search result display screen 400 or the restricted patient list 602 of the restricted patient display screen 600, when a selection operation is performed on the patient ID or name field of one patient, the patient is It is specified. The display control unit 130 notifies the search processing unit 120 of information indicating the designated patient. The search processing unit 120 executes the processes from step S42 onward while referring to the record of the designated patient among the records in the patient database 111.

[Step S42] The search processing unit 120 determines whether access restrictions are set for the designated patient based on the restriction type registered in the designated patient's record. If the access restriction is set, the search processing unit 120 advances the process to step S43, and if the access restriction is not set, the search processing unit 120 advances the process to step S46.

[Step S43] The search processing unit 120 reads viewer conditions from the record of the specified patient. The search processing unit 120 also reads user (viewer) information from the viewer database 112. The search processing unit 120 determines whether the user meets the viewer conditions based on this information. If the user matches the viewer conditions, the search processing unit 120 advances the process to step S44, and if the user does not meet the viewer conditions, the search processing unit 120 advances the process to step S47.

[Step S44] The search processing unit 120 determines whether a password is set in the record of the specified patient. If the password has been set, the search processing unit 120 advances the process to step S45; if the password has not been set, the search processing unit 120 advances the process to step S47.

[Step S45] The search processing unit 120 requests the display control unit 130 to request the input of a password. The display control unit 130 displays a password input screen on the terminal device, and when a password is input, notifies the search processing unit 120 of the value. If the input password matches the password set in the specified patient's record, the search processing unit 120 advances the process to step S46. On the other hand, although not shown, if the passwords do not match, the process proceeds to step S47.

[Step S46] The search processing unit 120 notifies the display control unit 130 of the information of the specified patient and requests display of the patient information display screen. The display control unit 130 generates image data of a patient information display screen that displays a list of information about the specified patient. The display control unit 130 transmits the generated image data to the terminal device, and a patient information display screen is displayed.

[Step S47] The search processing unit 120 determines that viewing of the specified patient's information is not permitted, and requests the display control unit 130 to notify the user of this fact. The display control unit 130 causes the terminal device to display a screen indicating that the user is not permitted to view the specified patient's information.

In the process of FIG. 15 described above, regardless of the patient type, if the user meets the viewer condition, patient information is displayed, and if the user does not meet the condition, patient information is not displayed. Furthermore, if a password has been set, the patient information will be displayed if the password is successfully verified. On the other hand, as shown in FIG. 13, when displaying a list of search results, the conditions for displaying patient information vary depending on the patient type. In other words, in the example of this embodiment, for patients whose patient type is "VIP", unlike for "normal" patients, the conditions are stricter when displaying a list of search results than when displaying patient information specifying the patient. Access will be restricted.

Note that the devices shown in each of the above embodiments (for example, the information processing device including the processing unit 2 or the information processing device realizing the processing unit 2, the server 100, the terminal devices 200, 200a, 200b, etc.) Processing functions can be implemented by a computer. In this case, a program is provided that describes the processing contents of the functions that each device should have, and by executing the program on the computer, the above-mentioned processing functions are realized on the computer. A program that describes processing contents can be recorded on a computer-readable recording medium. Examples of computer-readable recording media include magnetic storage devices, optical disks, magneto-optical recording media, and semiconductor memories. Magnetic storage devices include hard disk drives (HDD), magnetic tapes, and the like. Optical discs include CDs (Compact Discs), DVDs (Digital Versatile Discs), and Blu-ray Discs (BD, registered trademark). Magneto-optical recording media include MO (Magneto-Optical disk) and the like.

When a program is distributed, for example, a portable recording medium such as a DVD or a CD on which the program is recorded is sold. It is also possible to store the program in the storage device of the server computer and transfer the program from the server computer to another computer via a network.

A computer that executes a program stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. Then, the computer reads the program from its own storage device and executes processing according to the program. Note that a computer can also directly read a program from a portable recording medium and execute processing according to the program. Furthermore, each time a program is transferred from a server computer connected via a network, the computer can sequentially execute processing according to the received program.

1 Storage unit 1a Patient database 2 Processing unit 2a List

Claims (3)

to the computer,
Accepts search conditions to search for patients whose information is displayed in a list,
For each of the plurality of patients, a first patient satisfying the search condition is extracted from the plurality of patients based on a patient database in which data corresponding to a plurality of items and information regarding access restrictions are registered. ,
Even if a second patient among the first patients for whom access restrictions are set based on the patient database satisfies the search conditions, other patients other than the second patient among the first patients Displaying a list listing data corresponding to each of the plurality of items for each patient, and displaying a number display section indicating the number of identified second patients together with the list ;
Upon receiving a selection input to the number of people display section, displaying a list of data corresponding to limited items among the plurality of items for each of the second patients based on the patient database;
A patient information display control program that executes processing. The computer is
Accepts search conditions to search for patients whose information is displayed in a list,
For each of the plurality of patients, a first patient satisfying the search condition is extracted from the plurality of patients based on a patient database in which data corresponding to a plurality of items and information regarding access restrictions are registered. ,
Even if a second patient among the first patients for whom access restrictions are set based on the patient database satisfies the search conditions, other patients other than the second patient among the first patients Displaying a list listing data corresponding to each of the plurality of items for each patient, and displaying a number display section indicating the number of identified second patients together with the list ;
Upon receiving a selection input to the number of people display section, displaying a list of data corresponding to limited items among the plurality of items for each of the second patients based on the patient database;
Patient information display control method. a storage unit that stores a patient database in which data corresponding to a plurality of items and information regarding access restrictions are registered for each of a plurality of patients;
A search condition for searching for a patient whose information is to be displayed in a list is accepted, a first patient satisfying the search condition is extracted from the plurality of patients based on the patient database, and the first patient is searched for. Even if the second patient, for whom access restrictions are set based on the patient database, satisfies the search conditions, the A list displaying a list of data corresponding to each of the plurality of items is displayed, a number display section indicating the number of identified second patients is displayed together with the list , and selection input to the number display section is performed. a processing unit that, when received, displays a list of data corresponding to limited items among the plurality of items for each of the second patients based on the patient database ;
An information processing system with

Images