JPH05324559A - Information management device - Google Patents

Abstract

PURPOSE:To prevent a person who does not have the access right from perusing or operating secret information at the time of perusal of the information to be classified. CONSTITUTION:If nothing is inputted to an input part 3 for a prescribed period of time measured by a timer, an information management part 1 manages a display part 2 so that the display part 2 is switched to the display erase state or the display state free from classification and is not returned to the display state before switching till correct input of key information or one of key information and a password. Thus, this information management device 10 prevents illegal information perusal or illegal operation due to the person, who does not have the acess right, to improve the information protection function.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information management device in which security management is performed in an information management system.

[0002]

2. Description of the Related Art In recent years, as various kinds of information about individuals have been managed by computers and the like, there has been an increasing demand for protection methods against leakage and falsification of the information.

In networks such as large-scale computers and workstations, and in financial systems that have been computerized for a long time, recorded personal information and system operating rights are strictly protected, and personal identification numbers and passwords are used. Key words such as and physical locks are used.

Regarding medical information, due to the obligation to keep medical records on paper and problems such as the application of insurance, direct recording and management of patient data with a computer has not been performed so far. However, at present, a database of medical information is being constructed with the development of various information recording media and the spread of personal computers.

Card-shaped information recording media such as optical cards and IC cards have excellent portability and are easier to handle than magnetic disks such as floppy disks. For this reason, medical information about the individual is recorded, the owner of the information carries the card, reproduces the information as necessary, and based on it, receives guidance from a doctor or public health nurse, or new information. It has come to be used for applications such as recording.

Of course, when personal information is browsed or data is recorded, a password or a personal identification number is often set so that only a person who has the right can set the information acquisition or update.

[0007]

However, unless information is viewed or recorded in a completely closed room, a third party who does not have access to the information is displayed while the doctor happens to leave his seat. It is difficult to completely exclude what you see and what you do. Several methods have been proposed for preventing such a problem.

For example, Japanese Patent Application Laid-Open No. 63-111028 proposes a method of preventing the leakage of know-how by stopping the display of molding information on the display panel when there is no setting operation for a certain time in the injection molding machine. There is.

Further, in Japanese Patent Laid-Open No. 1-200462, when the workstation is not operated for a certain period of time, the display screen is erased so that the screen before the erasure cannot be restored unless a password is entered. , A method of preventing leakage of personal information has been proposed.

As described above, when no input is made for a certain period of time, it is possible to prevent the information leakage to some extent by requiring the input of the password for erasing the screen display and returning, but it is based on medical information. In diagnosis, etc., it is necessary to assume that there is a patient on the immediate side with the doctor who operates the patient. In other words, if the system can be used or the screen that has been erased can be restored by an easy method such as typing the input device like a password, even if the patient is not malicious, the password will There is a risk that you will see and know. Under these circumstances, there are conventional ones. In this state, if the doctor leaves his / her seat, even if the screen disappears for a certain period of time, the patient may curiosly enter the password that he / she knew and operate the system improperly, even if the screen was erased. There is enough sex.

The present invention has been made in view of the above circumstances, and has a function of excluding a person who does not have an access right from browsing or operating the information when browsing the information to be concealed. The purpose is to provide a device.

[0012]

According to the present invention, a display section for displaying information, an input section for instructing a password and various processes, a medium recording / reproducing section for recording / reproducing information on / from an information recording medium, and a key are provided. The information input unit, the input unit, the medium recording / reproducing unit, the key information input unit, and the display unit are comprehensively controlled, and the information security management is performed based on the key information input from the key information input unit. A key information management device comprising an information management unit that is performing, and a means for measuring a duration time in which no input is made from the input unit, wherein the information management unit measures the duration time. In the measurement of the means, if the input is not made for a specified time length, the display of the display unit is changed to a deleted state or a display state that does not need to be kept secret, and the key information or the key information and password is changed. Of both Chi, until either is entered correctly, so as not returned to the display state before the change is managed.

[0013]

According to the present invention, in the measurement of the duration measuring means, when the prescribed time length is not input, the display of the display unit is changed to a display state which does not need to be erased or hidden. Until the key information is changed and the key information is correctly input, or both the key information and the password are correctly input, one of them is managed by the information management unit so as not to return to the display state before the change. is doing. By adopting such a configuration, the device of the present invention prevents unauthorized access to information and unauthorized operation by persons without access rights.

[0014]

Embodiments of the present invention will be described with reference to the drawings. 1 and 2 relate to a first embodiment of the present invention.
2 is a block diagram of the information management device, and FIG. 2 is a flowchart relating to the operation of the device shown in FIG.

FIG. 1 shows an example of the configuration of the information management device 10. For example, a system may be used in which a doctor browses and guides the examination data of the patient recorded on the optical card.

The doctor owns, for example, an optical card (hereinafter referred to as a staff card) for proving that he is a doctor. Without this card, the patient data cannot be browsed by this system. .. The patient stores his / her examination data in, for example, an optical card (hereinafter referred to as a patient card), and carries the optical card to the viewing place.

The information management device 10 includes an information management unit 1
And a display unit 2 for browsing information, an input unit 3, a medium recording / reproducing unit 4, and a key information input unit 5. A display unit 2, an input unit 3, a medium recording / reproducing unit 4, and a key information input unit 5 are connected to the information management unit 1.

The display unit 2 is a general display device such as a CRT, a liquid crystal display panel, and a plasma display. The input unit 3 is a keyboard for a user to instruct the system to perform processing and to input a keyword such as a password or a personal identification number. The medium recording / reproducing apparatus 4 is an optical card reader / writer for reading information for browsing and writing new information. The key information input unit 5 is an optical card reader for inputting a staff card which is a key for certifying that the user has a right to access the information, and enabling access to the key information. Is.

When no input is made from the input unit 3, the information management unit 1 incorporates a timer (not shown) as means for measuring the duration of no input since the last input. There is. Note that this means may be provided separately from the information management unit 1.

FIG. 2 is a flow chart for explaining the information reproducing procedure in the information management apparatus shown in FIG.
In using the information management apparatus 10, step S1
At, the user is asked to enter an appropriate password. If the password is inappropriate in step S2, the user is requested to input the correct password again. At this time, for example, "Please input the password." Is displayed on the display unit 2.

If a correct password is given,
Go to step S3. Here, you are asked to enter the key staff card. In step S3, the information read from the staff card by the optical card reader is
The key information is input to the information management unit 1. Unless the correct key is shown, including the case where the reading cannot be performed, the process returns to step S3 in step S4 to request re-input of the key. At this time, for example, "Please insert the correct card (key)" is displayed on the display unit 2.

If the correct key is indicated, the process proceeds to step S5, and the time measured by the timer is reset. Next, it progresses to step S6.

In step S6, the patient card in which the examination data of the patient is recorded is set in the medium recording / reproducing unit 4, and various processes such as information browsing, writing, and updating are performed as necessary. At this time, if the input from the input unit 3 is interrupted, the timer starts measuring the duration of the interrupted input in step S7. In the meantime, in step S8, the information management unit 1 monitors whether or not the input is performed again. If the input is made within the preset duration, the process returns to step S5, the timer is reset, and various processes are performed according to the input instruction.

If it is determined that the input is not performed within the set duration time through steps S8 and S9, the process proceeds to step S10, and the display content of the display unit 2 needs to be hidden. Determine whether or not. At this time,
If there is no need to conceal, the process returns to step S5, the timer is reset, and the display is continued.

On the other hand, if the information displayed up to that point is to be kept secret, then in step S11 the information is erased from the display unit 2 and switched to a display prompting the input of a staff card, or For example, the menu selection screen is changed to a screen that can be left as it is.

Incidentally, the step S10 is omitted, and the step S
In the case of 9, the time may be hidden without fail regardless of the display contents.

If it becomes necessary to operate the apparatus again, the password is re-input in step S12.
When the correct key information is input in step S13 and the correct key information is input through steps S14 and S15, the process returns to step S5 and the measurement time is initialized. Then, it returns to step S6 and continues various processing.

On the other hand, if either the password or the key information is not entered correctly, the process returns to step S1 to enter the password, and a series of procedures relating to the use of the apparatus is performed again from the beginning.

By taking such a procedure, in the unlikely event that the doctor leaves the seat for a long time, the patient operates the system without permission, or a third party who does not have the data browsing qualification obtains information on the patient. You can prevent you from browsing. Also, without the staff card, the system cannot be operated at all, so even if the password is leaked, the system cannot be used illegally.

The flow chart of FIG. 2 can be modified in various ways. After the password is input in step S1, the staff card is input in step S3, but this order may be reversed, or only one of them may be input.

If there is no input for a certain period of time, step S12
Also, although the password and the key information are input in step S14, the order of the two may be reversed, or only the key information may be input in the case of simplifying the operational operability.

If the correct password and key information are not given in step S12 and step S14, the process returns to step S1. However, it is possible to return to the key information input in step S3 or the system. It may be regarded as an unauthorized use of the system, and an alarm may be sounded or the system may not be reused. The number of times of illegal use may be set, and if the number of times is equal to or more than the number of times, it may be illegally used.

In the apparatus of this embodiment, the password and key information are used to browse the information to be kept secret, and the input unit 3 is used.
When there is no input for a certain period of time, the display can be hidden so that a third party who does not have access rights can snoop on the information or protect the information from unauthorized operation.

It should be noted that the system may have a unique length of time for the key information to be re-input after the input is interrupted, or the user may arbitrarily set the duration.

In this embodiment, the doctor browses the examination data of the patient and gives guidance, but the information is not limited to the examination data and any information may be used. And need not be limited to patient use.

The input section 3 is not limited to a keyboard, and may be, for example, a mouse, digitizer, light pen, touch panel, joystick, voice input device,
Any kind of external input such as a telephone line, serial interface, parallel interface, etc. may be used, and the input device to be connected is not limited to one type. You may make it monitor both input states.

The connection method between the information management section 1 and the input section 3 may be of any form, wireless or wired.

The medium recording / reproducing unit 4 is an optical card reader / writer in this example, but in addition to this, all information such as an IC card, an IC memory card, a magnetic card, a magnetic disk, an optical disk, a magneto-optical disk, and a magnetic tape. A recording / reproducing device for a recording medium may be used.

Further, in the present embodiment, the data to be browsed was read from the patient card carried by the patient,
The data of the patient may be read from another database based on the information of the medium carried by the patient.

Further, regarding the key information input section 5 as well,
Similar to the medium recording / reproducing unit 4, it may be a reproducing device for any information recording medium, or may be a physical locking device, or may be a fingerprint recognition device, a palm print recognition device, a voice feature analysis device,
It may be a device that discriminates the physical characteristics of an individual, such as a human phase recognition device or a fundus vascular network identification device.

FIG. 3 is a block diagram of an information management apparatus according to the second embodiment. In the information management apparatus 11 according to the second embodiment shown in FIG. 3, the medium recording / reproducing section 4 and the key information input section 5 are separately configured in the apparatus according to the first embodiment shown in FIG. Instead, it has a medium recording / reproducing unit 6 configured as an integrated device.

That is, when the information recording medium of the information to be browsed and the key information recording medium are the same medium, for example, an optical card, both can be recorded and reproduced by the same device, and therefore the device can be used. As a result, one unit will be good.

In the case of this configuration, during confirmation of the staff card and browsing of patient data, step S in FIG.
Between 4 and step S6, an operation of exchanging the staff card and the patient card of the patient is added.

In the second embodiment, as in the first embodiment, modifications such as replacement of each constituent element, replacement of step S, omission and the like are possible. Other configurations and effects are the same as those in the first embodiment, and the description thereof will be omitted.

FIG. 4 is a flow chart relating to information management of the third embodiment of the present invention. The configuration of the device is the second
As shown in FIG. 3 similarly to the embodiment, both the staff card as a key and the information recording medium (patient card) in which patient information is recorded are optical cards, for example. In the information management apparatus of the second embodiment, the staff card and the patient card are set so that the contents of the information to be browsed are different. Other configurations and operations similar to those of the second embodiment are designated by the same reference numerals and description thereof will be omitted.

Next, the operation of the apparatus will be described with reference to the flowchart shown in FIG. However, the same steps as those in FIG.

After the correct password is input in steps S1 and S2, the optical card is input in step S3a. Here, if either the staff card or the patient card is input, various processes are performed. Allow that.

However, if the input card is a staff card in step S3a, step S4a
Then, in the same manner as the second embodiment, step S4c is performed so that various processes such as patient guidance and data update by a doctor can be performed.
At, the access right 1 is given.

On the other hand, when the patient card is input without inputting the staff card, the access right 2 is given in step S4d so that only the data browsing of the patient corresponding to the patient card is permitted in step S4b.

Here, the access right 1 means that the right to access all information such as viewing and modifying all information recorded on the patient card and additional recording is permitted. The access right 2 means that the right to view only a part of all the information recorded on the patient card is permitted.

After that, the processing when there is no key input from the input unit 3 for a certain period of time is the same as that of the second embodiment. However, in step S14, step S4a
Similarly to 4 to 4d, the staff card and the patient card are discriminated and the access right is set. still,
In order to access the information again, the patient card may not be used, and only the staff card may be the correct key.

In this embodiment, the procedure described above makes it possible to minimize the staff card input procedure in actual system operation. Therefore,
It saves time and eliminates the need for a staff card unless you really need it, reducing the chances that your staff card will be mismanaged or lost. Further, similar to the above-described embodiment, it is possible to prevent a person who does not have the access right from inadvertently viewing the display screen or operating the system unduly.

In the present embodiment, the case where the doctor teaches the patient by using the optical card has been described, but like the first embodiment, the present invention is not limited to this application, and what kind of An information medium may be used to manage such information, and the devices, media, and procedures used in each unit may be replaced.

[0054]

As described above, according to the information management apparatus of the present invention, when browsing the information to be concealed, the password and the key information are used, and the display is concealed when there is no input from the input unit for a certain period of time. There is an effect that a person who does not have the access right can steal the information and protect the information from an unauthorized operation.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an information management device according to a first embodiment.

FIG. 2 is a flowchart relating to the operation of the information management device shown in FIG.

FIG. 3 is a block diagram showing a configuration of an information management device according to a second embodiment.

FIG. 4 is a flowchart regarding the operation of the third embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Information management part 2 ... Display part 3 ... Input part 4 ... Medium recording / reproducing part 5 ... Key information input part 10 ... Information management device

[Procedure amendment]

[Submission date] December 1, 1992

[Procedure Amendment 1]

[Document name to be amended] Statement

[Name of item to be corrected] Claim 4

[Correction method] Change

[Correction content]

[Procedure Amendment 2]

[Document name to be amended] Statement

[Correction target item name] 0050

[Correction method] Change

[Correction content]

Here, the access right 1 is, for example,
This means that the right to access all information such as viewing and modifying all information recorded on the patient card and additional records has been granted. Further, the access right 2 means that, for example, the right to view only a part of all the information recorded on the patient card is permitted.

[Procedure 3]

[Document name to be amended] Statement

[Name of item to be corrected] 0053

[Correction method] Change

[Correction content]

In the present embodiment, the case where the doctor teaches the patient by using the optical card has been described, but like the first embodiment, the present invention is not limited to this application, and what kind of An information medium may be used to manage such information, and the devices, media, and procedures used in each unit may be replaced. The content of the access right set in this example is
It is not limited to the above. In this embodiment, two types of
I have set access rights, but there may be more. example
For example, in addition to the above two types, for system administrators and public health nurses
You may establish the right such as.

Claims (5)

[Claims] 1. A display unit for displaying information, an input unit for instructing a password and various processes, a medium recording / reproducing unit for recording / reproducing information on / from an information recording medium, a key information input unit, and the input unit. , A medium recording / playback unit, a key information input unit, and a display unit, and an information management unit that performs safety management of information based on the key information input from the key information input unit. In the information management device, which comprises means for measuring a duration that is not input from the input unit, the information management unit, in the measurement of the means for measuring the duration, the specified time length input If it is not done, the display of the display unit is changed to the erased state or the display state that does not need to be kept secret, and either the key information or both the key information and the password is correctly input. Until, so as not to return to the display state before the change, the information management apparatus characterized in that it manages. 2. The key information input from the key information input unit is information recorded on an information recording medium or information identifying a unique feature of an individual.
Information management device described. 3. The information management apparatus according to claim 1, wherein the information management unit enables the information management apparatus by inputting at least one of the password information and the key information. 4. There are two types of key information input from the key information input unit, and the information management unit manages information managed by the device if the input key information is first key information. Access to the whole of the
If it is key information of, only a part of the information managed by this device,
The information management device according to claim 1, wherein the information management device permits access to the display unit. 5. The medium recording / reproducing unit and the key information input unit are integrally configured.
Alternatively, the information management device according to claim 3.