KR20170052108A - System and method for verification of personal owned record - Google Patents

Abstract

The present invention relates to a system and a method to verify a personal record and, more specifically, relates to a verification model capable of verifying the integrity of a personal medical record submitted by each person in a business model provided by an exchange between a personal medical record and a predetermined reward. The personal record verification system requests that a first medical institution verify whether a first personal record, matched with a first demand condition suggested by a demander, exists. The verification procedure is able to be executed in the verification system by receiving an original copy of the first personal record directly from the first medical institution or executed by delivering the first medical record to the first medical institution and then receiving a verification result from the first medical institution.

Description

[0001] SYSTEM AND METHOD FOR VERIFICATION OF PERSONAL OWNED RECORD [0002]

The present invention relates to a system and method for verifying personal retention records, and more particularly, to a verification model for verifying the authenticity of individual retention records submitted by individuals in a business model that provides personal retention records to a consumer through a predetermined procedure .

The medical record includes various data about the patient including medical history data, test data, medication data, and the like. The electronic health record (EHR) has been a vital resource for doctors, researchers, laboratories, insurance providers, and claims processors.

Access to available data has historically been hampered by the distribution of data to a large number of disparate entities, but these entities are becoming increasingly interconnected. For example, a national health information infrastructure may be created from a plurality of local networks, each of which stores electronic medical records between a plurality of participants or shares access thereto.

Once established, these local networks (referred to herein as Regional Health Information Organization (RHIO)) may be connected to form a nation-wide infrastructure. Thus, the national health information network can emerge from specialized "networks in the network", so healthcare providers can use electronic medical records whenever and wherever they are needed.

As accessibility and capacity for electronic medical records increase, the value and interest of data for research and clinical trial activities also increases proportionately. However, there is a tension between the EHR "consumer" (medical research and clinical trial organization, commonly referred to as the third party) and the individual whose data is included in the electronic medical record. In other words, the privacy of the individual must be protected and personal control over the data usage of the EHR consumer must be established while providing accessibility of the EHR consumer to the data.

Typically, organizations relating to health data will invite participants by advertising and in some cases by providing a participation fee for a given project. The expected participants will be asked to fill in a Yes / No document that begins with whether their data can be used for the study of the direct organization they request. However, this approach is costly to acquire suitable participants for medical research and clinical trials, and does not provide the participant with flexibility in the capacity and scope with which the participant's data can be used.

Korean Patent Publication No. 2007-0064250 (Publication Date: 2007.06.20) and U.S. Published Patent Application No. 2007-0143148 (Publication Date: 2007.06.21), which disclose information on the medical record to the consumer based on the electronic medical record, .

Reference to the prior art can provide a significant level of accessibility to data while providing user control / awareness in a manner that encourages widespread adoption of the EHR system. However, according to the above-described prior arts, it is not possible to provide a guideline on how much privacy of an individual should be maintained while acknowledging the necessity of protecting an individual's privacy.

Korean Unexamined Patent Publication No. 2007-0064250 (published on Jun. 20, 2007) U.S. Published Patent Application No. 2007-0143148 (published on June 21, 2007)

Advances in mobile computing and cloud / distributed storage systems technology are transforming individuals' medical records into virtual space or mobile handsets without staying in the hospital alone. However, in any case, the decision to disclose or dispose of an individual's medical record can only be made by the individual himself or herself.

On the other hand, there are many medical and clinical implications in the information related to the medical records. Therefore, there is a need to analyze information related to medical records from a large data analysis perspective.

However, there is a lot of information about the individual's privacy in the medical record information, and consumers often do not even need individual privacy information.

Accordingly, the present invention is directed to a system and method for mediating an individual's medical record of an individual possessed, and aims at linking a consumer and a provider of medical record-related information.

On the other hand, if monetary compensation is given in return for providing personal medical records, there may be attempts to manipulate or distort personal medical records for monetary compensation and take unfair advantage. In order to prevent such fraud, it is necessary to verify whether the personal medical record is true from the medical institution or the like where the personal medical record is generated.

The present invention allows the consumer to disclose the personal record of his or her own desire to the desired level while indirectly providing the opportunity for negotiation between the consumer and the individual, while preventing the privacy information of the individual from being exposed to the consumer, The purpose of this study is to propose a mediation model that can transmit information related to open medical records to the consumer.

The present invention aims at proposing a validation model that verifies the authenticity and authenticity of an individual's medical record so that it can be detected when the individual's medical record is manipulated or distorted.

According to an aspect of the present invention, there is provided a method for verifying a personal retention record, comprising: receiving a first personal retention record from at least one information provider; Requesting the first medical institution for which the first personal retention record is generated to confirm the existence of the first personal retention record if the first personal retention record meets a first requirement received from the consumer; Requesting the first medical institution for an original of the first personal retention record that is confirmed to be real; Comparing and verifying the first personal retention record and the original of the first personal retention record; And providing the consumer with at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record.

In this case, the method may further include the step of comparing an original of the received first personal retention record with the first personal retention record to extract an error.

According to another aspect of the present invention, there is provided a personal medical record verification method comprising: receiving a first personal retention record from at least one information provider; Sending the first personal retention record to a first medical institution where the first personal retention record is generated if the first personal retention record meets a first requirement received from a consumer; Receiving a verification result between an original of the first personal retention record held by the first medical institution and the first personal retention record from the first medical institution; And providing the consumer with at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record.

At this time, the verification result may include the error information extracted by comparing the original of the first personal retention record held by the first medical institution with the first individual retention record.

A personal retention record verification system according to an embodiment of the present invention includes a personal retention log interface module for receiving a first personal retention record from at least one information provider; Requesting the first medical institution for which the first personal retention record is generated to confirm whether the first personal retention record is authentic if the first personal retention record meets a first requirement presented by the consumer, A medical institution interface module for requesting the first medical institution for an original of the first personal retention record if it is found that one personal retention record exists; A verification module for comparing and verifying the first personal retention record and the original of the first personal retention record; And a consumer interface module for providing the consumer with at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record.

A personal retention record verification system according to an embodiment of the present invention includes a personal retention log interface module for receiving a first personal retention log from at least one information provider; A medical institution interface module for transmitting the first personal retention record to the first medical institution where the first personal retention record is generated when the first personal retention record meets a first requirement presented by the consumer; A verification module that receives a verification result between an original of the first personal retention record held by the first medical institution and the first personal retention record from the first medical institution; And a consumer interface module for providing the consumer with at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record.

The present invention relates to a system and method for mediating an individual's medical record of an individual, and has the effect of connecting a consumer and a provider of medical record related information.

The verification model of the present invention has the effect of verifying the authenticity and authenticity of an individual's medical record so that it can be detected when the individual's medical record is manipulated or distorted.

The intermediary model of the present invention allows the consumer to disclose the personal record of his or her own desires without exposing the privacy information of the individual that the consumer does not desire and indirectly provides the opportunity of negotiating between the consumer and the individual, It is also possible to transmit the information about the level / branch of the medical record to the consumer through the consensus between them.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic block diagram of a personal possessive record mediation model according to an embodiment of the present invention; FIG.
2 is a block diagram of a personal possessive record mediation system in accordance with one embodiment of the present invention.
FIG. 3 is a diagram illustrating a protocol of a personalized record mediation method according to an embodiment of the present invention.
FIG. 4 is a diagram showing a schematic operation of a personalized record mediating model according to another embodiment of the present invention.
5 is a schematic block diagram of a verification model of the personal possessive record according to another embodiment of the present invention.
6 and 7 are diagrams illustrating embodiments of the protocol of the personal retention record verification model of the present invention.
8 is a block diagram of a verification system for a personal retention record according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. In the following description of the embodiments of the present invention, specific values are only examples.

More particularly, the present invention relates to a system and method for collecting personal records, and more particularly, to an apparatus and method for collecting personal records, which collects individuals to provide personal record of ownership held by an individual, .

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic block diagram of a personal possessive record mediation model according to an embodiment of the present invention; FIG.

Referring to FIG. 1, an individual can request his / her own medical record to the first medical institution 400 to which he / she has been consulted, and can hold the medical record. Through this process, it is an outline of the mediation model of the present invention that relevant information about the POR (Personal Owned Record) held by the individual is transmitted to the consumer.

When an individual moves from the first medical institution 400 to the second medical institution 500 for the purpose of medical treatment, the individual medical record 500 may be transmitted to the second medical institution 500 for the purpose of effective medical treatment of the patient , And to transmit the medical record held by the first medical institution 400 to the second medical institution 500. In the case where the personal medical record is transmitted from the first medical institution 400 to the second medical institution 500 as described above, this corresponds to a case of sharing the medical information between the hospitals for the medical treatment of the individual. This can be understood as an extended version of the prior art EHR (Electronic Health Record), EMR (Electronic Medical Record), and Healthcare Information Exchange (HIE) technology.

In addition, an individual may receive an individual's medical record from a first medical institution 400 for the purpose of managing his / her health, for example, when a patient is discharged from a first medical institution 400, This is the case of receiving the medical record from the first medical institution 400. This can be understood as an extended version of the prior art Personal Healthcare Record.

Meanwhile, for the purpose of disease management through research or statistics, there may be cases where an individual or a third party other than the first medical institution 400 wishes to analyze the medical records as a consumer. At this time, although the first medical institution 400 may provide the patient with the EMR, the medical record of the individual is owned by the individual, and the individual's intention is most important in disposing the medical record of the individual , A model may be implemented that provides a consumer with a personal possessed record to the consumer. Individuals may be given the opportunity to verify that they will provide personal records in their own discretion and may withdraw their intention to provide personal records at their own discretion at any time.

The intermediary system 100 may subscribe or inquire to the individuals 220 holding the POR whether they are willing to provide information about some of the medical information.

An individual who has a doctor who wants to provide information may set the range of information to be different depending on the amount or the reward condition.

The brokerage system 100 may be operated in the form of a portal service, and may execute an anonymization or a pseudonymization process to process the processed result information, to process the medical record into the result information.

The consumer may be an institution that wants to obtain information on a broad range of medical records such as pharmaceutical companies, research medical institutions, insurance companies, public institutions, universities and other research institutes. There are different items to include.

That is, the consumer does not want the detailed personal information of the individuals 220 and may want information on the specific medicine for the disease, injury, disorder, the application, the application of the treatment, the frequency of application, and the application time. Or the consumer may want statistical information quantifying the treatment and recovery effects of each individual 220 according to the particular drug, procedure, application of the treatment, frequency of application or application time.

The intermediary system 100 receives the request for providing information from the customers and can provide the processed medical information, and the payment of cash can be made in this process.

The intermediary system 100 may propose an inquiry or solicitation requesting the individuals 220 to provide information and may be provided with an obligation record from the individuals 220. [ Compensation may be provided to the individuals 220 in the process or from the intermediary system 100.

The intermediary system 100 may process a part of the personal retention record provided by the individuals 220, generate it as the result information, and transmit the result information to the consumer. In this case, some items of the record of the personal retention record are reflected in the result information, but personal information that can identify the individual can be anonymized or pseudonymized and processed or deleted within the limits of the requirements of the consumer have.

Although not shown in FIG. 1, the intermediary system 100 may include a database in which all of the personal retention records are not stored, anonymized or pseudonymized, and processed to the extent that they do not deviate from the requirements requested by the consumer. Or only deleted information may be stored.

The reward conditions include the level of disclosure of information required by the consumer, the number of items included in the information, the degree of processing difficulty of the information required by the consumer, the extent to which the individual's personal information on the personal record of the consumer is disclosed, It may be determined by reflecting at least one of the difficulty of acquisition of the personal possessing record meeting the condition required by the consumer.

In addition, the reward condition may be determined by a predetermined logic in the intermediary system 100, the consumer may determine the reward condition and the content of the requested information together, or may be determined by the individual who is the information provider.

The reward conditions may be determined by negotiation or auction / reverse auction methods between the individual and the consumer, and in the process of recruiting individuals to provide information, the reward conditions may be transmitted to the individual along with the information items required by the consumer have.

2 is a block diagram of a personal possessive record mediation system in accordance with one embodiment of the present invention.

The intermediary system 100 receives the personal holding medical record from the POR holding individuals 220 and transmits it to the consumer 210, and mediates the matching of the financial compensation, etc., and the medical record disclosure condition.

The intermediary system 100 includes an internal processor 110, a first communication module 120, and a second communication module 130. The first communication module 120 and the second communication module 130 may be communication devices capable of transmission and reception. The first communication channel 120a and the second communication channel 130a may denote ports capable of inputting / outputting data in a wired / wireless manner.

The first communication module 120 can transmit and receive data and requirements with the customer 210. [ The first communication module 120 receives a first request for result information from the consumer 210 so that the broker system 100 is ready to receive the personal retention record from the POR holding individuals 220 do.

The second communication module 130 may broadcast a message containing the subscription content whether or not the POR holding individuals 220 are willing to provide a POR, And may receive the POR via the second communication channel 130a.

The processor 110 may include an information provider recruitment module 111, a personal retention history verification module 112, and a result information generation module 113 as internal submodules.

The information provider recruitment module 111 recruits at least one information provider who is willing to provide the personal retention record using the first requirement and the first reward condition received from the consumer 210. [ At this time, the first compensation condition may be received from the consumer 210 together with the first requirement, or may be determined by the information provider recruitment module 111. The information provider recruitment module 111 may determine the first reward condition reflecting the difficulty of achieving the first requirement, the detailed requirements of the first requirement, the level of disclosure of the first requirement, and the like;

The personal retention history verification module 112 verifies that at least one information provider and the first personal retention record that the at least one information provider has expressed willingness to meet meet the first requirement.

When at least one information provider and the first personal retention record meet the first requirement by the verification of the personal retention record verification module 112, the result information generation module 113 generates the result information in the first personal retention record And generates related information corresponding to the first requirement.

The first communication module 120 transmits the related information corresponding to the first requirement generated by the result information generation module 113 to the consumer 210. [

The personal retention record validation module 112 first verifies that the personal information of the information provider meets some of the first requirements. When the first personal retention record is received from the information provider thereafter, the first personal retention record can be secondly verified to meet the first requirement.

The first requirement may define that the information provider is a specific gender, age. The first requirement may also include a particular medication, and hence a lab result. The personal retention record verification module 112 verifies the personal information of the information provider by verifying whether or not the information provider is deceiving the identity (may deceive the identity for money compensation), the personal information defined in the first requirement And whether the information provider who is out of the range has indicated his will to provide information.

The information provider recruitment module 111 may request the information provider to provide the first personal retention record if the personal information of the information provider meets a part of the first requirement.

The personal retention record verification module 112 can second verify that the first personal retention record of the received information provider meets the first requirement upon request. The first requirement defines the disease, injury, or disorder that causes the treatment, procedure, operation or medication, and provides only the medical record of the patient for whom the specified cause (treatment, procedure, surgery or medication, etc.) And the like. That is, the secondary verification is a process of confirming whether or not the first personal retention record substantially satisfies the first requirement. If the first requirement calls for providing only the case where the specific cancer drug has been administered to the liver cancer, the second verification step verifies whether the first individual cancer record contains the fact that the liver cancer has been administered with the specific cancer drug .

The second communication module 130 generates a message including at least a portion of the first requirement and the first compensation condition. The message may be a subscription message for the personal retention record and the second communication module 130 may broadcast the generated subscription message to at least one information provider, The second communication module 130 may receive a response message from the POR holding individuals 220 that includes an intention to provide the personal retention record in response to the subscription message.

The information provider recruitment module 111 may identify the sender of the received response message and regard the identified sender as an information provider.

The result information generation module 113 may generate the first personal retention record determined as a result of the verification by the personal retention record verification module 112 as the result information to be transmitted to the consumer 210. [ At this time, the result information generation module 113 may anonymize or pseudonymize the identity of the information provider of the first personal retention record so that the consumer 210 can not recognize the identity of the information provider. Or to change some items of the personal information of the information provider of the first personal retention record to generate the result information. Changes in personal information may be made within the scope of the personal information specified in the first requirement.

FIG. 3 is a diagram illustrating a protocol of a personalized record mediation method according to an embodiment of the present invention.

The broker 100 may receive a request (Q1) for medical information from a consumer 210. The request Q1 includes a first requirement (disease, puncture prescription, patient condition, age, sex, etc.), and in some embodiments the request Q1 may be a reward Conditions.

The reward condition may include various reward conditions that may be beneficial to the information provider, including certain souvenirs provided to the volunteer, or non-monetary or non-monetary rewards.

The intermediary system 100 may recruit an information provider who is willing to provide a personal retention record based on the first requirement and the first reward condition. At this time, a request / recruitment message (Q2) including a request / recruitment intention may be broadcast from the intermediary system 100 to the POR holding individuals 220. [ The request / recruitment message (Q2) includes at least a portion of the first requirement and a first reward condition. The first compensation condition may correspond to the compensation condition included in the request Q1 and may be the compensation condition newly generated by the intermediate system 100. [ If a reward condition is provided from the consumer 210, the mediation system 100 may determine a first reward condition to broadcast to the individuals 220 based on the reward condition given by the consumer 210. [ At this time, the intermediary system 100 may determine the reward condition given from the customer 210 as the first reward condition by adjusting the difficulty of achieving the first requirement, the information disclosure level, and the like. The intermediary system 100 may determine the first compensation condition by reflecting the degree of difficulty of achieving the first requirement, the level of information disclosure, etc., if the compensation condition is not given through the request Q1 from the consumer 210. [

For example, if the first requirement requires a medical record for a very rare disease, the first compensation condition can be determined at a relatively high level since the difficulty of achieving the first requirement is high. Also, the disease itself is not uncommon, but if the disease does not appear well within the scope of the personal information presented in the first requirement, the first compensation condition may be determined based on the rare disease.

On the contrary, when it is expected that the medical record satisfying the first requirement can be easily obtained, the mediation system 100 can determine the first compensation condition at a relatively low level.

Even if the identity of the information provider is anonymized due to the large number of information disclosure items required under the first requirement, the identity of the information provider is highly likely to be estimated, or even if the identity of the information provider is likely to be exposed due to a rare disease, It can be decided at a relatively high level.

Although not shown in FIG. 4, individuals 220 having a personal retention record may have information in the intermediary system 100 that can identify or search for the individual himself or herself. The information that can identify or retrieve an individual may include a person's brief personal information (age, sex, etc.), a first medical institution (400) or other medical facility, a specific disease experience, / Have experience of medication / treatment, etc. The intermediary system 100 may search the registered information to set the individuals satisfying the first requirement as the information provider candidates and send the request / solicit message Q2 only to individuals belonging to the information provider candidate group. (Q2) to the individuals meeting the first requirement among the individuals registered in the broker system 100, and if the sufficient number of personal retention records are not secured, the intermediary system 100 (Q2) to individuals who are not registered with the < / RTI >

In accordance with another embodiment of the present invention, individuals 220 having a personal retention record may not provide searchable information to the intermediary system 100, but may provide only contact point information that can be contacted. In this case, the intermediary system 100 may send a request / recruitment message Q2 to all individuals 220 on the contactable list on equal terms without prior screening through the search.

The intermediary system 100 receives the response R1 from at least some of the individuals 220. [ The response R1 includes identification information for identifying whether or not there is an intention to provide and an individual.

The intermediary system 100 can identify the sender of the received response message and regard the identified sender as an information provider or information providing applicant.

The intermediary system 100 verifies that the individuals who are willing to provide the information through the primary verification meet the range of the personal information of the first requirement. For example, if the first requirement is to limit the scope to adolescents, the individual who is willing to provide can verify the adolescent or age.

At this time, there may be a case where an individual expressing the intention to provide is requesting a change of the charging condition or the first requirement through the response R1. In this case, the intermediary system 100 can inquire through the inquiry Q3 whether the customer 210 is willing to accept the charging condition and whether the first requirement can be changed. In the first requirement, a request to reduce the number of information disclosure items or to lower the level of information disclosure may be presented to information providing users.

When the mediation system 100 receives a response (R2) to the inquiry (Q3) from the customer 210 and a consensus is reached between the information providing requester and the consumer 210 regarding the billing condition and the first requirement, (Q4). If an agreement is not made in the response (R2) to the inquiry (Q3), the inquiry (Q3) and the response (R2) may be repeated several times.

The inquiry (Q3) and the response (R2) may be shared with all the information provision applicants who responded to the first requirement, or may be delivered only to the information providing applicant who submitted the content of the inquiry (Q3).

For the request (Q4) of the personal holding medical record, the information providing prospective person can provide the personal holding medical record through the response (R3). At this time, the intermediary system 100 can verify the authenticity and authenticity of the received personal record, through the secondary verification, and grasp the information consistent with the first requirement.

The intermediary system 100 generates the result information corresponding to the first requirement based on the first personal retention record when the first personal retention record of the information provider and the information provider meets the first requirement, May be provided by the first communication module 120 to the consumer 210 (R4).

The result information may be a medical record in which the personal retention record is anonymized or may be a statistical index calculated for a plurality of personal retention records.

FIG. 4 is a diagram showing a schematic operation of a personalized record mediating model according to another embodiment of the present invention.

Referring to FIG. 4, the information provider recruitment module 111 may extract only information necessary for searching and identifying from the personal POR according to the requirements of the consumer. That is, not all the information of the POR is brought into the inside of the intermediary system 100, and only the information necessary for the search and the identification by the filtering of the information provider recruitment module 111 can be imported into the intermediary system 100.

In the result information generation module 113, not all the information is transmitted to the consumer but only the information that is disclosed at a meaningful level that the consumer can give clinical meaning is extracted.

The extracted information can be generated based on Map-reduce and generated as result information to be provided to the consumer. For example, the result information may be generated as statistical information such as the number of persons per requirement.

Request matching, that is, identification and verification of the requirements of the consumer can be performed through the application layer 120b.

5 is a schematic block diagram of a verification model of the personal possessive record according to another embodiment of the present invention.

Since the mediation system 100 of FIG. 5 is the same as the mediation system 100 of FIG. 1, the duplicated description is omitted.

Since the consumer 210 receives anonymized or pseudonymized medical information or receives only statistical information, it can not directly verify the authenticity and authenticity of the personal record provided by the individual. Therefore, in order to establish such an ecosystem, there is a need for a verification system 300 for verifying the existence of the personal possessed record provided by the individuals separately from the intermediary system 100.

On the other hand, the existence of the personal retention record can not be verified without the help of the first medical institution 400 in which the personal retention record is created. Therefore, the verification model communicates with the first medical institution 400 in addition to the individual 221, the intermediary system 100, and the consumer 210 providing the personal retention record POR and verifies the authenticity and authenticity of the personal retention record;

Since the verification request between the verification system 300 and the consumer 210 and the flow of providing the verification service must be authenticated with the reliability of the information in the state where there is a discrepancy between the anonymized / pseudonymized medical information and the original data, It is possible to provide highly reliable verification results without errors due to the difference between them.

Depending on the embodiment, the verification system 300 may be located within the first medical institution 400, or may be operated by an institution that is capable of cooperating closely with the first medical institution 400, or by an institution that receives the direction of the first medical institution 400 It is possible. Or verification system 300 may be contained within the intermediary system 100 or may be operated by an agency that is under the direction of the intermediary system 100.

It is also possible to operate the mediation system 100 or a third authorized institution irrespective of the first medical institution 400 in order to increase the trust of the verification system 300.

Although not shown in FIG. 5, the verification system 300 may also provide a simple backup service of data. This is because the verification system 300, unlike the intermediary system 100, needs to store an individual's personal retention record (POR) for verification. The database for such back-up includes a verification of personal retention history from the time when the person 221 providing the personal retention record discloses the intention to provide information and then provides the personal retention record of the individual 221 to the intermediary system 100 It is possible to store the personal retention record provided by the individual 221 until the end.

In another embodiment of the present invention, it may be assumed that the verification system 300 is under the influence or closely related to the first medical institution 400. A database for backup of the verification system 300 may be provided to the first medical institution 400 from the first medical institution 400 when it is necessary to verify the personal retention record provided by the individual 221 to the intermediary system 100 (EMR) or electronic health record (EHR) of the electronic health record (s) 221, and may store the electronic medical record or electronic health record in the database until the verification is complete.

In another embodiment of the present invention, the verification system 300 may be configured such that when the first medical institution 400 provides personal records to the individual 221 at the request of the individual 221, the first medical institution 400 The first copy of the personal retention record provided to the individual 221 is backed up in the database and the first copy backed up in the database and the individual 221 are transferred to the intermediary It is possible to compare the personal retention record provided to the system 100 to verify the authenticity of the personal retention record provided by the individual 221 to the intermediary system 100. [

In another embodiment of the present invention, the verification system 300 may be configured to communicate with the first medical institution 400 (e.g., the first medical institution 400) according to a request from the intermediary system 100 when the individual 221 registers the identifiable / ), And can receive and store the first copy.

6 is a diagram showing an embodiment of a protocol of the personal retention record verification model of the present invention.

Although not shown in FIG. 6, the verification system 300 may determine whether the personal POR provided by the POR provider 221 meets the first requirement presented by the consumer 210 to the intermediary system 100 or the consumer 210 ) May be notified.

The verification system 300 receives the personal POR provided by the POR provider 221 (S610).

If the received personal POR matches the first requirement presented by the consumer 210 in step S610, the consumer 210 requests the verification system 300 to verify the personal POR information in step S620.

Although steps S610 and S620 are sequentially shown in FIG. 6, it is not necessary to follow them, and S620 may be executed first, or S610 and S620 may be executed simultaneously.

The verification system 300 may request the first medical institution 400 to verify the personal POR of step S610 (S630). The first medical institution 400 provides the information verification result for the verification request of step S630 (S640). At this time, in step S630, the verification system 300 transmits personal information about the individual of the provider 221 of the verification target POR to the first medical institution 400 for first verification, and the provider 221 of the POR performs the first verification 400, the actual item of the POR to be verified is transmitted to the first medical institution 400, and the specified secondary verification is executed.

The verification system 300 analyzes the verification result received in step S640 and performs verification and verification of whether the error is extracted (S650). At this time, the verification system 300 determines in step S640 which extracting and comparing algorithm is applied, whether coding / decoding is used, information on which algorithm is applied if the coding / decoding technique is applied, and calculation results such as Checksum Data required for verification can be received.

If it is determined in step S650 that the personal POR is error free and reliable, the verification system 300 may return the verification result to the consumer 210 (step S660). At this time, in step S660, the verification system 300 may provide only the verification result to the consumer 210, but may provide the verification result and the medical record together, and only when the verification result is reliable, As shown in FIG.

7 is a diagram showing an embodiment of a protocol of the personal retention record verification model of the present invention.

Although not shown in FIG. 7, the verification system 300 may determine whether the personal POR provided by the POR provider 221 meets the first requirement presented by the consumer 210 to the intermediary system 100 or the consumer 210 ) May be notified.

The operations in steps S610, S620, and S660 are the same as those in Fig. 6, so duplicate descriptions are omitted.

In Fig. 7, the verification process can be developed in two tracks. That is, the first sequence consisting of S731 - S741 and the second sequence consisting of S732 - S742. Two sequences may be processed at the same time.

The verification system 300 requests information for verification from the first medical institution 400 (S731). In response, the first medical institution 400 checks whether the original medical record exists or not, and provides the verification result information including the existence of the original medical record to the verification system 300 (S741). At this time, in step S731, the verification system 300 may transmit the personal POR to the first medical institution 400 or may transmit the personal information of the POR provider 221 for identification of the personal POR to the first medical institution 400 . The POR provider 221 may transmit the information to the first medical institution 400 in step S731 by verifying the schedule, time, and purpose visited in the first medical institution 400 for medical treatment, treatment, treatment, or medication.

The first medical institution 400 confirms whether the information presented in step S731 appears in the EMR (electronic medical record), the CIS / HIS (hospital information system) and the OCS (prescription delivery system) in the first medical institution 400 , It can be confirmed that the fact that the actual POR provider 221 visited the first medical institution 400 at the relevant time and the purpose is the same as that described in the POR.

In step S732, the verification system 300 may request the first medical institution 400 for the original medical record corresponding to the personal POR information (S732). In response, the first medical institution 400 may provide the original medical record corresponding to the personal POR information to the verification system 300.

The verification / verification step S650 for the error-free extraction may be performed in the same manner as in FIG. 6, but may be performed by comparing the original medical record received in step S742 with the individual POR by the verification system 300 directly.

At this time, the movement of the original medical record or personal POR between different institutions will only be possible within a special channel, such as a highly secure dedicated line.

8 is a block diagram of a verification system for a personal retention record according to an embodiment of the present invention.

The verification system 300 controls the first communication module 320 and the first communication module 320 that exchange data with the customer 210 and transmits a request and a message transmitted to the customer 210, And a consumer interface module 311 for analyzing the request.

The verification system 300 includes a second communication module 330 for exchanging data with the POR provider 221 and a POR interface module 312 for controlling the second communication module 330. The first medical institution 400 A third communication module 340 capable of communicating with the third communication module 310 and a medical institution interface module 313 capable of controlling the third communication module 310.

The verification system 300 includes an internal processor 310 and the processor 310 includes all of the customer interface module 311, the POR interface module 312 and the medical institution interface module 313. [

The processor 310 is connected to the first communication module 320, the second communication module 330, the third communication module 340 (or 340) by the user interface module 311, the POR interface module 312 and the medical institution interface module 313, And supports actual instructions to be executed through logic operations on instructions to be transmitted to or received by the consumer 210, the first medical institution 400, and the POR provider 211.

The verification module 314 may execute step S650 of FIG. 6 and FIG. 7 and may directly analyze the difference between the actual POR and the personal POR and verify the verification result of the first medical institution 400. FIG.

The method of verifying the personal retention record according to an embodiment of the present invention may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and configured for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

As described above, the present invention has been described with reference to particular embodiments, such as specific constituent elements, and limited embodiments and drawings. However, it should be understood that the present invention is not limited to the above- And various modifications and changes may be made thereto by those skilled in the art to which the present invention pertains.

Accordingly, the spirit of the present invention should not be construed as being limited to the embodiments described, and all of the equivalents or equivalents of the claims, as well as the following claims, belong to the scope of the present invention .

300: medical information mediation system 310: processor
311: customer interface module 312: POR interface module
313: medical institution interface module 314: verification module
320: first communication module 330: second communication module
321: POR provider 210: Consumer
340: third communication module 400: first medical institution

Claims (6)

Receiving a first personal retention record from at least one information provider;
Requesting the first medical institution for which the first personal retention record is generated to confirm the existence of the first personal retention record if the first personal retention record meets a first requirement received from the consumer;
Requesting the first medical institution for an original of the first personal retention record that is confirmed to be real;
Comparing and verifying the first personal retention record and the original of the first personal retention record; And
Providing at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record to the consumer;
The method comprising the steps of: The method according to claim 1,
Comparing an original of the received first personal retention record with the first personal retention record to extract an error;
Further comprising the steps of: Receiving a first personal retention record from at least one information provider;
Sending the first personal retention record to a first medical institution where the first personal retention record is generated if the first personal retention record meets a first requirement received from a consumer;
Receiving a verification result between an original of the first personal retention record held by the first medical institution and the first personal retention record from the first medical institution; And
Providing at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record to the consumer;
The method comprising the steps of: The method of claim 3,
Wherein the verification result includes error information extracted by comparing an original of the first personal retention record held by the first medical institution with the first personal retention record. A personal retention log interface module for receiving a first personal retention record from at least one information provider;
Requesting the first medical institution for which the first personal retention record is generated to confirm whether the first personal retention record is authentic if the first personal retention record meets a first requirement presented by the consumer, A medical institution interface module for requesting the first medical institution for an original of the first personal retention record if it is found that one personal retention record exists;
A verification module for comparing and verifying the first personal retention record and the original of the first personal retention record; And
A consumer interface module that provides the consumer with at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record;
Wherein the system further comprises: A personal retention log interface module for receiving a first personal retention log from at least one information provider;
A medical institution interface module for transmitting the first personal retention record to the first medical institution where the first personal retention record is generated when the first personal retention record meets a first requirement presented by the consumer;
A verification module that receives a verification result between an original of the first personal retention record held by the first medical institution and the first personal retention record from the first medical institution; And
A consumer interface module that provides the consumer with at least one of the verified first personal retention record or the verification result obtained by comparing the first personal retention record and the original of the first personal retention record;
Wherein the system further comprises:

Images