JPH07141451A - Security device of health-care system - Google Patents

Abstract

PURPOSE:To secure the security of personal information on a user when the information is inquired from a medical institution, etc., being a third party to a center. CONSTITUTION:When the doctor belonging to a medical institution 13-1 makes a call to the exclusive telephone set 17 of a center 11 via a public line 12 so as to inquire the personal medical information, etc., of a patient (a user), a service clerk 18 asks the doctor about the institution code of the medical institution and the concerned persons code that the doctor has. When the service clerk 18 inputs the institution code and the concerned persons code that he asks from the keyboard of an information controller 16, a data base is retrieved, and pertinent institution information and concerned persons information is displayed. The service clerk 18 confirms the displayed contents to an inquiring person, he further asks the inquiring person about the name code and the password of the patient if the confirmation is OK and inputs these matters. If these matters are OK, the personal medical information, etc., on the patient is read from the data base and is displayed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a health care system in which a health management center that manages various health information of a user who is a service target provides various services in response to inquiries from the user or medical institutions. In particular, it relates to a device for ensuring the security of personal information with respect to an inquiry from a doctor or the like of a medical institution as a third party.

[0002]

2. Description of the Related Art With the advent of a highly welfare society and the sophistication of various information device technologies, a health care system has been considered which intends to comprehensively manage the health of local residents (users). In addition to personal details (name, address, date of birth, etc.) of each user, a health management center (hereinafter simply referred to as “center”), various medical-related information (home doctor, health insurance card, medical history, etc.) Medication history, medical history, etc.) and welfare information (public health nurse, medical certificate for the elderly, handbook for the disabled, etc.) are recorded, and this information is to be centrally managed by the center.

[0003]

In such a system, for example, when a doctor of a medical institution examines a user as a patient, it is necessary to know personal detailed information and medical-related information of the patient. Therefore, in such a case, it is necessary for the doctor to be able to inquire the above information regarding the patient from the center.

On the other hand, since the above information relates to the privacy of the individual user, when a person other than the doctor inquires about the content even if he / she is a doctor, he / she confirms the identity of the inquirer and personal information. It is necessary to secure the security of.

The present invention has been made in order to solve the above problems, and secures the security of the personal information when inquiring the personal information of the user from the institution other than the user such as a medical institution to the center. The purpose is to obtain a security device that can.

[0006]

The invention according to claim 1 is
In the healthcare system in which the health management center comprehensively manages the personal information of users who are the service target and provides various services in response to external requests or inquiries, (i)
An institution information database in which the institution information such as the name and address of each institution such as each medical institution has been registered in advance in association with the institution code, and (ii) an institution that requests the institution code of the institution when making an inquiry from the institution It is characterized by comprising a code input requesting means and (iii) an institution information displaying means for searching the institution information database based on the inputted institution code and displaying the relevant institution information.

The invention according to claim 2 is the same as in claim 1, further comprising (iv) a related person information database in which information about related people such as doctors who belong to each institution is registered in advance in association with related person codes. (v) Related party code input requesting means for requesting input of related party code possessed by the inquirer, and (vi) searching the related party information database based on the entered related party code, and finding the relevant related party information. And related person information display means for displaying.

The invention according to claim 3 is the same as claim 1 or claim 2, further comprising (vii) a personal information database in which personal information of each user is registered in association with a name code and password, and (viii) A name code input requesting means for requesting the input of the name code of the user as the inquiry target, and (ix) a password input requesting means for requesting the input of the password of the user as the inquiry target according to the input of the name code, (x) a comparing means for comparing the entered password with the password of the personal information registered in the personal information database, and (xi) displaying the personal information described in the personal information database when the comparison results in a match. And a personal information display means for performing the same.

[0009]

According to the invention described in claim 1, when an inquiry is made from a third party organization, the organization code of the organization is requested, and by entering this, the organization code registered in the center is related. Institution information is displayed. Therefore, the identity of the inquirer can be confirmed by confirming the identity of the contents of the institution information.

According to the second aspect of the present invention, further, it is required to input the related person code possessed by the inquirer. When this is input, the related person information about the concerned person registered in the center is also displayed. Therefore, by confirming the identity of the contents of the related party information, the identity of the inquirer can be confirmed more accurately.

According to the third aspect of the invention, it is further required to input the name code of the user who is the subject of the inquiry.
When this is entered, the password entry of the user is further required. Then, a password is entered, and the personal information of the user is displayed only when the entered password matches the password registered for the user. Therefore, even if the identity of the inquirer is confirmed by the institution code and the related party code, inquiries from doctors who have not been given the name code and password by the user are excluded.

[0012]

The present invention will be described in detail below with reference to the drawings.

FIG. 1 shows a schematic configuration of a healthcare system according to an embodiment of the present invention. In this figure, a dedicated telephone 17 provided in the center 11 is a medical institution 13-1 such as a hospital and a welfare institution 1 via a public line 12.
3-2, health promotion institutions such as fitness clubs 13-
3 and various institutions such as the administrative institution 13-4. The center 11 is provided with an information management device 16 used by the service staff 18 when performing various service tasks.

FIG. 2 shows the information management device in FIG. 1 in detail. This apparatus is provided with a central control unit 21 including a processing unit 26, a memory 29 and the like.
The processing unit 26 controls the operation of the central control unit 21 as a whole, and the memory 29 stores programs controlling the operation of the processing unit 26 and data read from various databases described later.

The processing unit 26 is connected to the display device 22, the keyboard 23, the printer 24, and the following databases. The display device 22 is
In addition to displaying various data, a mouse 25 is provided, and data can be selected and input by clicking a desired data display location on the display screen with the mouse 25.

User personal basic database 31 (DB3
As shown in FIG. 3C, 1) is associated with the name code of the user who is the service target, personal detailed information such as name, address, and telephone number, medical history information, health insurance card information,
Medical information such as welfare information, medication history information, and medical examination result information is registered.

Institution information database 32 (DB32)
As shown in FIG. 3A, the name, address, telephone number, FAX number, etc. of the institution are registered in association with the institution code indicating each institution such as a medical institution.

Related party information database 33 (DB33)
Is associated with a person code indicating a person (staff) concerned such as a doctor belonging to each institution, and the name, address,
The phone number, date of birth, age, main occupation, etc. are registered.

Institution use history database 34 (DB3
In 4), the usage history of various institutions by each user is registered.

The operation of the information management device 16 in the healthcare system having the above configuration will be described.

Case of Inquiry by User First, the operation of the processing unit 26 in the case of providing a service in response to an inquiry from the user himself will be described with reference to FIGS. 4 and 6 to 8 in association with the operation of the service person.

When "user inquiry" is selected with the mouse 25 on the initial screen (not shown) of the display device 22 (step S101 in FIG. 4), the processing section 26 displays the user code input screen as shown in FIG. Is displayed (step S102). Here, when the name code (IC card number or personal code) of the user is selected (step S103), the processing unit 26 searches the DB 33 to read the personal basic information of the corresponding user, and also shown in FIG. As described above, the password input screen is displayed (step S104).

When the user password is entered here (step S105), the processing section 26 compares the password of the read personal basic information with the entered password,
If the two match (step S106; Y), FIG.
In addition to displaying the personal basic information, as shown in
The institution use history is read from 34 and displayed. Further, function displays such as introductory institution, introductory service, and related person search are also displayed, and various kinds of information or services are provided by performing an operation of selecting these as necessary (step S108).

On the other hand, if the passwords do not match (step S106; N), the process ends.

In the case of an inquiry from an organization Next, the operation of the processing unit 26 in the case of providing a service in response to an inquiry from the organization will be described with reference to FIGS. Here, a case where there is an inquiry from a doctor of the medical institution 13-1 will be described.

When the service person accepts the call to the dedicated telephone 17 (step S201 in FIG. 5), the mouse 25 selects "inquiry institution" on the initial screen (not shown) of the display device 22 of the information management device 16. Yes (step S202). As a result, the institution code input screen as shown in FIG. 9 is displayed (step S20).
3). At this point, the institution code of the institution to which the doctor belongs is heard from the other party (doctor) who made the inquiry by telephone and is input (step S204). Therefore, a person who does not know the institution code cannot make an inquiry.

When the service person inputs the institution code heard from the other party, the processing section 26 searches the DB 32 and displays the relevant institution information as shown in FIG. 10 (step S205). The service staff confirms the existence and identity of the institution by asking the other party for the institution name, address, etc. by telephone (step S206). It can be confirmed that the institution actually exists (Step S
207; Y), when "OK" is clicked, the processing unit 26
Displays the related person code input screen shown in FIG. 11 (step S208). Next, the service staff listens to and inputs the person-related code of the doctor himself by telephone (step S209). Therefore, even the staff of the relevant institution cannot make an inquiry if it does not have a person code and is not registered in the center.

When the service person inputs the related party code heard from the other party, the processing section 26 searches the DB 33 and displays the related related party institution information as shown in FIG. 12 (step S210). Here, the service person confirms the existence and identity of the doctor by asking the name, address, main occupation, etc. from the other party by telephone (step S211).

When it is confirmed that the doctor actually exists and is registered (step S212; Y), when the service person clicks "OK", the processing unit 2 continues.
6, the user code input screen is displayed as shown in FIG. 13 (step S213). Here, the service person hears the name code of the user who is the inquiry target from the other party and inputs it (step S214). Therefore, even if the other party does not know the name code of the person to be inquired, the inquiry cannot be made.

When the user name code is input, the processing unit 26 searches the DB 31 to read the personal basic information of the corresponding user, and displays the password input screen shown in FIG. 14 (step S215).

Here, the service person also asks the user password from the other party and inputs it (step S216).

When the password is entered, the processing unit 26
Compares the password of the read personal basic information with the input password, and when both match (step S217; Y), displays the personal basic information as shown in FIG. 15 (step S218). . However, in this case, unlike the case of the inquiry by the user himself, D
The institution use history of B34 is not displayed, only the personal basic information is displayed. The service person transmits the displayed contents to the other party (step S219), and finishes the response work to the inquiry.

On the other hand, if the passwords do not match (step S217; N), the processing unit 26 ends the process. Therefore, it is not possible to make an inquiry even if the other party does not know the password or is wrong.

[0034]

As described above, according to the invention described in claim 1, when an inquiry is made from a third party institution, the institutional code of the institution is requested, and this is input. Since the institution information about the institution registered in the center is displayed, by confirming the content of the displayed institution information with the inquirer, the identity of the inquirer, specifically, the inquirer belongs. It is possible to confirm the existence of the institution that seems to be.

According to the second aspect of the present invention, further, it is requested to input the related person code possessed by the inquirer, and when this is input, the related person information about the concerned person registered in the center is also displayed. Therefore, by confirming the content of the displayed related party information with the inquirer, the identity of the inquirer can be confirmed more accurately.

According to the third aspect of the invention, further, the user is required to enter the password of the user who is the subject of the inquiry, and the entered password is registered for the user. Since we decided to display the user's personal information only when it matches the password, even if the inquirer's identity is confirmed by the institution code and the related party code, the user will be told the name code and password. Inquiries from doctors who do not exist are excluded. Therefore, the security of the personal information of the user becomes extremely strict.

[Brief description of drawings]

FIG. 1 is a block diagram showing an outline of a healthcare system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing an information management device in FIG.

3 (A) is the institution information database of FIG. 2, (B)
FIG. 3 is an explanatory diagram showing the contents of a related person information database of FIG. 9 and (C) of the user personal basic information database of FIG.

FIG. 4 is a flowchart for explaining processing in a user inquiry.

FIG. 5 is a flow chart for explaining a process in an inquiry about an organization.

FIG. 6 is a diagram showing a user code input screen in a user inquiry.

FIG. 7 is a diagram showing a user password input screen in a user inquiry.

FIG. 8 is a diagram showing a display screen of user personal information in a user inquiry.

FIG. 9 is a diagram showing an institution code input screen in inquiring an institution.

FIG. 10 is a diagram showing an institution information display screen in inquiring about an institution.

FIG. 11 is a diagram showing a related person code input screen for inquiring an organization.

FIG. 12 is a diagram showing a related person information display screen in inquiring an organization.

FIG. 13 is a diagram showing a user code input screen in inquiring an organization.

FIG. 14 is a diagram showing a user password input screen in inquiring an organization.

FIG. 15 is a diagram showing a display screen of user personal information in an inquiry about an organization.

[Explanation of symbols]

 11 Center 13-1 Medical Institution 13-2 Welfare Institution 13-3 Health Promotion Institution 13-4 Government Institution 16 Information Management Device 17 Dedicated Telephone 18 Service Person 22 Display Device 23 Keyboard 26 Processing Unit 29 Memory 31 User Personal Information Basic Database 32 Institution information database 33 Stakeholder information database 34 Institution usage history database

Front Page Continuation (72) Inventor Sou Shinohara 2-5-5 Keihan Hondori, Moriguchi City, Osaka Sanyo Electric Co., Ltd.

Claims (3)

[Claims] 1. A health care system in which a health management center comprehensively manages personal information of users who are service targets and performs various services in response to requests or inquiries from the outside. Institution information database in which the institution information such as the name and address of each organization is associated with the institution code, and the institution code input requesting means for requesting the institution code of the institution when inquiring from the institution, the entered institution A security device for a healthcare system, comprising: an institution information display unit that searches the institution information database based on a code and displays relevant institution information. 2. The related person information database according to claim 1, further comprising: a related person information database in which information related to related people such as doctors who belong to each institution is associated with a related person code in advance; A related person code input requesting means for requesting input of a code; and related person information displaying means for searching the related person information database based on the inputted related person code and displaying relevant related person information. A security device for a healthcare system, which is characterized in that 3. The personal information database according to claim 1 or 2, further comprising the personal information database in which the personal information of each user is registered in association with the name code and password, and the name code of the user who is the subject of the inquiry. Name code input requesting means to request, password input requesting means to request the password of the user to be inquired according to the input of the name code, the input password and the personal information registered in the personal information database And a personal information display unit for displaying personal information stored in the personal information database if the result of the comparison indicates that the personal information is stored in the personal information database. Security device.