KR20090127480A - Portable personal health record storage and system - Google Patents

Abstract

PURPOSE: A portable personal health record device and a system thereof are provided to enable a service subscriber to directly manage his/her health record. CONSTITUTION: Open health record information is stored in the first recording area(104). Private health record information(106) is stored in the second recording area. If a health record information management system(102) is connected to a host device, the health record information management system outputs the stored open health record information. If the authentication is normally performed through the host device, the health record information management system outputs a list of the stored private health record information. If one information is selected from the list, the health record information management system decodes the information by a decoding key. The decoding key is included in the authentication information.

Description

Portable Personal Health Record Storage And System

The present invention relates to a personal health record device, and more particularly, to a device and a system for supporting an individual to directly manage a personal health record of a service subscriber not only online but also offline.

Personal health records are based on medical records generated by hospitals. Health records, including blood sugar and blood pressure, which can be checked at home, and life records such as the amount of alcohol and smoking, as well as contact information for patients and guardians in case of emergency. And the like.

Overseas, it is a system that manages personal health records directly. Individualized paper medical records have been managed before the computerization of medical institutions. Recently, medical image transmission system and electronic medical record system have been introduced, This vast and systematic management is not achieved.

In addition, there was a problem that the patient can not provide prompt medical services because of the patient's allergy or basic immune information, taking medication information in the unconscious emergency.

In addition, most personal health record management systems use a method of inputting a personal health record into a server based on the Internet, so that personal health records cannot be used while offline and not online. There is a problem that you need to install the inquiry program, and to use a separate program to operate it.

Here, health-related records should be thoroughly protected along with the privacy of the individual and the medical institution should be able to refer to the individual's health records according to the appropriate procedures, if necessary.

It is an object of the present invention to provide a portable personal health record device and system that enables a user to quickly read the health record of an individual without having to install a separate application or operate an application.

Another object of the present invention is to provide a portable personal health record apparatus and system that enables an individual to view and manage an electronic medical record based on a multimedia including a medical record at home and a paper-based medical record.

In addition, another object of the present invention is to provide a portable personal health record device and system, method for providing a double encryption offline to solve the problem that the personal information of the service subscriber is exposed when the health record device provided offline is lost To provide.

Still another object of the present invention is to provide a portable personal health record device that protects personal health record data with an online personal health record access security policy while allowing medical institutions to access personal health records using an online service rather than offline. To provide a system.

In addition, another object of the present invention is to provide a portable personal health record device and system that can prove the forgery and forgery of the original document by scanning the original document issued by the medical institution to the digital signature of the service provider.

It is still another object of the present invention to provide a portable personal health record device and system for providing reference indexing of medical records for access to original documents stored in medical institutions scattered in various places.

Portable personal health record storage device of the present invention for achieving the above object, the first recording area for storing public health record information; A second recording area for storing private health record information; When connected with a host device, the public health record information stored in the first recording area is read and outputted, or when authentication is normally performed through the host device, a list of private health record information stored in the second recording area is outputted, And a health record information management system for decoding and outputting the information with a decryption key included in the authentication information for the authentication when any one of the information is selected.

With the present invention, the service subscriber can directly observe the change in health status, not the short-circuit health record recorded in the hospital, by directly managing the health record of the individual, so that they can receive more accurate and fast medical services, and offline. Personal health record storage can be used to provide patient-specific allergies, basic immunization information, and medication information taken quickly, accurately, and in patient emergency situations.

In addition, through offline double-encrypted personal health recorder and online personal health data access and reading authority check, there is an effect of preventing the leakage of personal health records without the subscriber's permission.

The present invention makes it possible to inquire and manage personal health information anytime and anywhere through an offline service through a portable personal health record information storage device and an offline service through a service server. Here, whenever the personal health record information storage device and the service server are connected, the personal health record information storage device and the service server synchronize data.

In particular, the present invention provides the service subscriber with the public health record information and the private health record information, so that the service subscriber can not be exposed to their personal information indiscriminately.

The present invention also discloses the private health record information to an authorized service subscriber or a medical practitioner granted by the authorized service subscriber, so that accurate diagnosis or action can be performed based on the private health record information of the service subscriber.

<Health record information service through portable storage device>

First, a method of using a personal health record storage device, which is a portable storage device, of the health record information service method according to an exemplary embodiment of the present invention will be described.

The personal health record storage device provides public health record information and private health record information to service subscribers through a web browser, so that the personal health record can be read quickly without installing a separate program or operating a program. .

In addition, the present invention is a paper-based obligation generated in the medical institution with the function of directly inputting and managing data such as blood pressure, blood sugar, etc. that can be regularly checked at home at the medical institution for the individual's health record Records can be converted into an image format through a scanner, and a web browser capable of processing electronic medical records and electronic medical records generated by PACS can process multimedia files including XML documents and movies based on international standards such as HL7 CDA and CCR. It allows you to manage all data types.

In addition, the present invention is a paper-based medical records generated in medical institutions to convert the original records into an image format file through a scanner, the medical record professional to convert to an electronic document, the medical professional to convert to an electronic document, the medical obligation Records are entered directly through XML documents based on international standards such as HL7 CDA, CCR, so that service subscribers do not need specialized medical knowledge to manage their medical records.

In addition, the personal health information storage device of the present invention double-encrypts personal health record information. In other words, by checking the access right to the data storage space, the access to the private personal information area is initially blocked when the storage device is lost, and the access right check to encrypt and decrypt each health record data file is performed. The dual encryption method protects data from the loss of personal health record device and leakage of health record data.

In addition, the present invention provides authentication information with a valid period set to a medical member who has fulfilled his / her credentials, thereby minimizing indiscriminate exposure of personal health record information through the personal health information storage device.

In addition, the personal health information storage device and the personal health record information service provider of the present invention scans a medical record issued by a medical institution and stores it together with an electronically signed image file, thereby forgery of the original document in comparison with the original document existing in the medical institution. You can also check to see if there was.

In addition, in the personal health information storage device and the personal health record information service provider of the present invention, a reference for storing the medical image information and the date information that issued the original document together with the scanned image file of medical records interspersed in various medical institutions can be referred to. By managing index data, medical institutions can quickly search for medical records of individuals.

In addition, the personal health information storage device of the present invention synchronizes the health record information of the service subscriber whenever it is connected to the personal health record information service server.

<Configuration of Portable Personal Health Record Storage Device>

1 illustrates a configuration of a portable personal health record storage device according to a preferred embodiment of the present invention.

The portable personal health record storage device 100 includes a health record information management system 102, a public health record information record area 104, and a private health record information record area 106.

The health record information management system 102 records, retrieves, and manages the health record information for the public health record information recording area 104 and the private health record information recording area 106.

The public health record information recording area 104 records general health record information accessible to anyone.

The private health record information recording area 106 records private health record information provided only to a service subscriber or a medical subscriber who has been granted authentication information having a predetermined expiration date. In this case, the private health record information recording area 106 may be searched only when the first authentication for access and the second authentication of each file stored in the private health record information recording area 106 are performed. .

In the private health record information recording area 106, the medical record issued by a medical institution is scanned, and an image file electronically signed and personal health record information recorded by an individual are stored and dispersed in various medical institutions through synchronization with a service server. The scanned image document file containing the medical records present is saved.

And through the personal health record information service server, management information such as authentication information, service record information or log information about the record of the service subscriber and the authorized medical subscriber is stored and notified to the service subscriber.

2 is a block diagram of a health record information management system 102 according to a preferred embodiment of the present invention.

The health record information management system 102 is composed of a health record information management module 200, automatic execution command information (202).

The health record information management module 200 loads an auto-execution command stored in the auto-execution command information 202 to perform recording and retrieval for each of the public health information recording area and the private health information recording area.

The automatic execution command information 202 stores the automatic execution commands for processing by the health record information management module 200 and list information on the automatic execution commands.

The automatic execution command information 202 includes a synchronization engine for automatically synchronizing upon access of a web browser and a service server for recording and inquiry of health record information according to a preferred embodiment of the present invention.

<How to manage health record information>

Now, the health record information management method according to a preferred embodiment of the present invention will be described with reference to FIG.

When the portable personal health record storage device 100 according to the preferred embodiment of the present invention is inserted into a terminal such as a computer (step 300), the health record information management module 200 of the portable personal health record storage device automatically executes an instruction. The web browser of information 202 is driven. The web browser outputs guide information for accessing the public and private health record information record area.

According to the guidance information, a service subscriber or a medical subscriber can choose to access public or private health record information.

When access to the public health record information is selected (step 304), the health record information management module 200 loads the data of the public health record information recording area and outputs the data through a web browser (steps 306 and 308).

In contrast to the above, when access to the private health record information is selected (step 304), when inputting and inputting the authentication information, the data of the private health record information recording area is loaded, and the authentication of the authentication information is performed. If the authentication is successful, the data is output through the web browser, and if the authentication fails, an error is output (steps 310 to 318).

<Access to Public Health Record Information Record Area>

The public health record information management process of the health record information management process according to the preferred embodiment of the present invention will be described in more detail with reference to FIG. 4.

When the portable health record storage device and the computer are connected, the health record information management module 200 drives a web browser registered in the autorun command information 202. Here, the web browser outputs guide information for accessing the personal health record file XML and the style sheet XSL recorded in the public health information recording area 104 through the initial page. Here, the service user may select a part of the personal health record file and the style sheet and request an output according to the guide information.

The health record information management module 200 reads the personal health record file and the style sheet selected by the service subscriber or the medical subscriber through the computer, converts them into HTML format, and converts the selected public health information recording area through the web browser. The information of 104 is outputted (step 400 to 404).

 <Access to private health record information record area>

Now, a method of accessing a private health information recording area according to a preferred embodiment of the present invention will be described with reference to FIG.

In order to access the private health record information recording area 106 from the public health record information recording area 104, the service subscriber or the medical subscriber must input a password which is authentication information for accessing the private area (step 500). If is matched, the health record information management module 200 deactivates the public health record information recording area 104 and instead activates the private health record information recording area 106 (steps 502 to 504).

At this time, the private health record area 103 is automatically searched by the health record information management module 200 to drive the web browser in the auto-execution command list 1012. The first start page of the web browser reads the summary personal health record file (XML) and style sheet (XSL) recorded in the private health record area, converts them into HTML format, and summarizes the individual's private health record to the monitor through the web browser. Print information.

<List of Private Health Information Record Areas>

A health information list inquiry and management method of a private health record information recording area according to a preferred embodiment of the present invention will be described with reference to FIG.

When the health record information management module 200 requests access to files such as a medical record stored in the private health record information storage area 106, it guides the input of a password for the file, and if the password is input, the valid information is valid first. Check the period (steps 600-604).

If the validity period is valid, the entered password is compared with the access password for the file to perform authentication.

Subsequently, the health record information management module 200 reads and decodes the health record index data stored in the private health record information record information, reads the style sheet (XSL), converts it into HTML format, and outputs the result through a web browser (608 ~). Step 616). Here, the output list is a hyperlink accessible to each medical record.

As described above, the medical records generated by the medical institution exist as encrypted documents, respectively, and when accessing the list or searching the list, the access password of the private personal record file must be input. At this time, the input file access password includes an expiration date and a file decryption key. If the validity of the file's access password is valid compared to the date of the system, the encrypted private health record is read and decrypted.

<File Search in Private Health Record Information Record Area>

A file inquiry and management method of a private health record information recording area according to a preferred embodiment of the present invention will be described with reference to FIG.

In order to access a file such as a medical record selected from the outputted private health record list, the password validity period is checked once again using the previously entered and stored private file access password (steps 700 to 706).

If the validity period is valid, the health record information management module 200 opens and decrypts the encrypted medical record in the private health record area, converts the HTML into a style sheet (XSL) suitable for the medical record, and then converts it into a web browser. Outputs to the screen (steps 708-716).

Therefore, the present invention can manage all multimedia files that can be represented by a web browser.

The security policy for the present invention described above will be described.

<Security policy>

1. Service subscriber

First, the service subscriber fulfills the service subscription with the service provider.

Upon subscription of the service subscriber, the service provider issues a service user number to identify the subscriber.

The service subscriber provides the service provider with an encryption key for encrypting a medical record such as an encryption medical institution in a private area of his / her personal health record.

2. Medical person

For the service of the present invention, the medical practitioner must prove that he is a medical practitioner in order to view the patient's personal information and the health record in the private area from the service provider.

If the verification is successful, the service provider accepts the service subscription for the healthcare provider.

3. Online Approval of Nonpublic Health Information

Upon completion of the subscription process for service subscribers and medical personnel to the service provider, the service subscriber notifies the medical practitioner of the subscriber access number to present his or her personal health information when receiving medical treatment at the medical institution.

The healthcare provider provides the subscriber identification information to the service provider after the authentication procedure, and provides the authentication information, that is, the password, which has a validity period. Accordingly, the medical person can read the obligatory information on the subscriber during the validity period.

In addition, the present invention allows a medical subscriber to obtain a substitute permission through a guardian in an emergency situation in which the medical subscriber cannot receive permission of the service subscriber.

In another aspect, the present invention is to manage the log information about the request and acceptance of the health record information of the service subscriber, the timing of acceptance, proxy information and the like, the managed information to the service subscriber through a portable health record storage device or Web site To be guided.

<Online services>

The operation of the service server for the online service will be described with reference to FIG.

The service server 800 provides a subscription service through the subscriber terminal 802 or the medical care terminal 804.

Through the subscription service, a service subscriber is allocated a storage area of authentication information including its identification information and password, and public health record information and private health record information, log information for reading and viewing.

The service server 800 manages authentication information for the service subscriber and performs synchronization with the portable personal health record storage device connected based on the authentication information, thereby storing online health record information and portable personal health record. Match the health record information stored in the device.

In addition, the service server 800 grants the medical person the authentication information given the validity period according to the reading request through the medical person terminal 804. The medical personnel authentication information includes an expiration date, a decryption key, and the like.

In addition, the service server 800 manages log information about the viewing request, the acceptance time, and the proxy permission information.

1 is a block diagram of a portable personal health record storage device according to a preferred embodiment of the present invention.

2 is a block diagram of the health record information management system of FIG.

3 to 7 are flowcharts of a health record information service method according to a preferred embodiment of the present invention.

8 is a block diagram of a health record information service system according to a preferred embodiment of the present invention.

Claims (6)

In the portable personal health record storage device, A first recording area for storing public health record information; A second recording area for storing private health record information; When connected to a host device, the public health record information stored in the first recording area is read and outputted, or If authentication is normally performed through the host device, a list of private health record information stored in the second recording area is output, and when any one of the lists is selected, the information is decrypted by the decryption key included in the authentication information for authentication. Health record information management system that decrypts and outputs Portable personal health record storage device comprising a. The method of claim 1, The health record information management system, Portable personal health record storage device, characterized in that for outputting the information stored in the first and second recording area via a web browser. The method of claim 1, The health record information management system, And a management information including access log information on the information stored in the second recording area. In the health record information service system, A first record area for storing public health record information, A second record area for storing private health record information, When connected to a host device, the public health record information stored in the first recording area is read and outputted, or When authentication information is input through the host device, authentication is performed by checking whether the validity period and password of the authentication information are valid, and when the authentication is normally performed, a list of private health record information stored in the second recording area is displayed. A portable personal health record storage device including a health record information management system that outputs and decodes the information by using a decryption key included in the authentication information for authentication when one of the information is selected; When a reading request is generated through a medical terminal, authentication information including an expiration date and the decryption key is issued, A service server that, when connected to the portable personal health record storage device, performs a data synchronization with the portable personal health record storage device; Health record information service system comprising a. The method of claim 4, wherein The health record information management system, Health record information service system, characterized in that for outputting information stored in the first and second recording area via a web browser. The method of claim 1, And the server stores management information including log information on issuance of the authentication information, and provides the management information to the portable personal health record storage device to perform data synchronization.

Images