WO2015198873A1

WO2015198873A1 - Drug history information management device and method, and program

Info

Publication number: WO2015198873A1
Application number: PCT/JP2015/066827
Authority: WO
Inventors: 芳徳高木; 福士　岳歩; 小堀　洋一
Original assignee: ソニー株式会社
Priority date: 2014-06-24
Filing date: 2015-06-11
Publication date: 2015-12-30
Also published as: JP6350658B2; JP2018137002A; JPWO2015198873A1

Abstract

The technology of the present invention pertains to a drug history information management device and method, and a program, that enable improved convenience while ensuring security. A mobile-type terminal device sends to a server a one-time password issuance request, along with an individual identification ID of a user and authentication assistance information. The server generates a one-time password in response to the issuance request, transmits the one-time password to the mobile-type terminal device, associates the one-time password with the individual identification ID, and records the authentication assistance information and the one-time password. The terminal device sends the one-time password and authentication assistance information to the server, and requests transmission of browsing data. The server performs authentication on the basis of the one-time password and authentication assistance information received from the terminal device, and sends the browsing data to the terminal device. The technology of the present invention can be applied to information processing systems.

Description

Drug history information management device and method, and program

The present technology relates to a drug history information management apparatus, method, and program, and more particularly, to a drug history information management apparatus, method, and program capable of improving convenience while ensuring security.

In the future, with the arrival of a super-aged society, the number of patients accommodated will exceed the capacity of conventional medical institutions, so home medical care is expected to be promoted.

Therefore, for example, when the information about the prescriptions and medicines of each patient is managed by the server and the patient, the doctor of the medical institution, and the dispensing pharmacy are registered in the server in advance, the personal authentication of the doctor and the personal authentication of the patient are correctly performed. A technique has been proposed that enables a pharmacist to browse patient and drug information at a dispensing pharmacy (see, for example, Patent Document 1). In this technique, when a drug is dispensed at a dispensing pharmacy, the drug is delivered to the patient's home.

In addition, the user can browse the medical history of users managed by the server simply by holding (touching) an IC (Integrated Circuit) card over a reader installed in a medical institution or pharmacy. An application program that realizes the function of a medicine notebook is also actually operated.

JP 2011-221623 A

However, in the technique described above, there is a case in which inconvenience occurs when a pharmacist or the like in a pharmacy tries to refer to a drug history of a user managed by a server.

For example, in the application program that realizes the function of the electronic medicine notebook described above, when the pharmacy wants to check the medication history of a user who is receiving medical care at home, the user actually visits the pharmacy. However, the IC card must be held over the reader.

In the technique described in Patent Document 1, it is necessary to register patients, medical institutions (doctors), and dispensing pharmacies in advance. If there are unregistered dispensing pharmacies or medical institutions, the provision of services is provided. I couldn't get it.

As described above, with the above-described technology, when browsing data managed by the server, security can be ensured, but there are cases where it is inconvenient.

The present technology has been made in view of such a situation, and is intended to improve convenience while ensuring security.

The medication history information management device according to one aspect of the present technology is a medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network.
A communication unit for transmitting and receiving information;
A recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information in association with personal identification information,
The communication unit and a control unit for controlling the recording unit,
The controller is
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device Authentication is performed, and processing for determining whether or not the medicine history information can be browsed by the second terminal device is executed.

The authentication information can be valid for a predetermined time after the authentication information is issued, or for a predetermined time after accessing the drug history information using the authentication information.

The authentication auxiliary information includes information on a place where the browsing request is made by operating the second terminal device as information on the place where the browsing request is made by the second terminal device. can do.

The control unit further sends the second personal identification information, the updated drug history information, and the update request for the drug history information associated with the second personal identification information by the communication unit. When it receives from the 2nd terminal device, the process which updates the said medical history information can be performed.

The medical history information management method or program according to one aspect of the present technology includes:
A medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network,
A communication unit for transmitting and receiving information;
A drug history information management method or program for a drug history information management apparatus comprising at least the drug history information, authentication information, and authentication recording information that can be recorded in association with personal identification information.
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device And performing a process of performing authentication and determining whether or not the medicine history information can be browsed by the second terminal device.

In one aspect of the technology,
A medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network,
A communication unit for transmitting and receiving information;
A recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information in association with personal identification information,
In the drug history information management device comprising the communication unit and a control unit for controlling the recording unit,
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device;
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A process of performing authentication and determining whether or not the medicine history information can be browsed by the second terminal device is executed.

According to one aspect of the present technology, it is possible to improve convenience while ensuring security.

Note that the effects described here are not necessarily limited, and may be any of the effects described in the present disclosure.

It is a figure explaining the outline | summary of this technique. It is a figure which shows the structural example of an information processing system. It is a figure which shows the structural example of a data center. It is a figure which shows the structural example of an information terminal device. It is a figure which shows the structural example of a portable terminal device. It is a figure explaining the process at the time of a one-time password utilization. It is a flowchart explaining a one-time password issue request process and a one-time password issue process. It is a flowchart explaining a browsing process and a provision process. It is a flowchart explaining a browsing process and a provision process. It is a figure explaining the process at the time of a one-time password utilization. It is a flowchart explaining a one-time password issue request process and a one-time password issue process. It is a flowchart explaining a browsing process and a provision process. It is a figure which shows the structural example of a computer.

Hereinafter, embodiments to which the present technology is applied will be described with reference to the drawings.

<First Embodiment>
<Outline of this technology>
The present technology relates to an information processing system in which a user browses browsing data deposited on a cloud by using an IC card or the like issued to the user in advance. In this technology, when a third party, such as a predetermined operator designated by the user, is allowed to temporarily browse browsing data related to the user, the third party uses a one-time password to Authentication can be performed without using a browser, and browsing data can be browsed. Thereby, convenience can be improved while ensuring security.

Specifically, for example, as illustrated in FIG. 1, it is assumed that there is an information processing system that can browse browsing data about a user recorded in the server 12 using a portable terminal device 11 possessed by the user. .

Here, a personal identification ID is recorded in the portable terminal device 11 as identification information that can uniquely identify the user, and the browsing data of the user specified by the personal identification ID is stored in the server 12. It is recorded in association with the personal identification ID. In this example, a personal identification ID is issued in advance to the user.

When browsing the user's browsing data, the user operates the portable terminal device 11 to transmit the personal identification ID to the server 12 and acquires the browsing data associated with the personal identification ID from the server 12. It is displayed on the portable terminal device 11 and browsed.

In such an information processing system, when a third party obtains the user's consent and newly generates user browsing data and records it in the server 12, the third party is already recorded in the server 12. Suppose you want to refer to browsing data of a user. In other words, when the browsing data recorded in the server 12 is to be updated, it may be desired to refer to browsing data before update.

Here, a third party who intends to browse the browsing data of the user temporarily is, for example, a predetermined operator who browses the browsing data of the user and performs an update of the browsing data.

In such a case, when the user's browsing data is browsed by the third party terminal device 13, the terminal device 13 basically has to acquire a personal identification ID from the portable terminal device 11 or the like. It can be difficult.

Therefore, in the information processing system, the terminal device 13 can temporarily browse the browsing data recorded in the server 12 by using the one-time password issued by the server 12 in response to a user request. Has been made.

Specifically, as indicated by an arrow A11, the portable terminal device 11 transmits a request for issuing a one-time password to the server 12 together with the personal identification ID and authentication auxiliary information in accordance with a user operation.

Here, the authentication auxiliary information is information related to the browsing data to be updated from now on, for example, part of the browsing data updated this time, that is, information included in the data of the updated portion of the browsing data. This authentication auxiliary information is used together with a one-time password when authenticating a third party who temporarily browses browsing data, that is, the terminal device 13. That is, the authentication auxiliary information is used as auxiliary authentication information.

Also, the one-time password is authentication information used for authentication of a third party when the server 12 gives the third party temporary authority for browsing data of the user in response to a user request.

When a request for issuing a one-time password is made in this way, the server 12 generates (issues) a one-time password associated with the personal identification ID transmitted along with the issue request in response to the issue request. Then, the server 12 records the one-time password and the authentication auxiliary information in association with the personal identification ID, and transmits the generated one-time password to the portable terminal device 11 as indicated by an arrow A12.

When the portable terminal device 11 receives the one-time password from the server 12, the portable terminal device 11 displays the one-time password. Then, as indicated by arrow A13, the user verbally notifies the third party of the authentication assistance information and the one-time password by means such as telephone. Further, as indicated by an arrow A14, the terminal device 13 acquires information on a portion of the browsing data that is updated this time by some method.

For example, when the authentication auxiliary information is included in the information of the part of the browsing data that is updated this time, the terminal device 13 can extract the authentication auxiliary information from the acquired information of the updated part. There is no need to pass authentication assistance information to a third party. Further, the notification of the one-time password from the user to the third party may be performed by any method such as e-mail using the portable terminal device 11 or the terminal device 13 and FAX transmission / reception in addition to verbal communication. .

The third party operates the terminal device 13 to transmit the one-time password and authentication auxiliary information notified from the user to the server 12 as indicated by arrow A15, and requests transmission of browsing data. Then, the server 12 compares the one-time password and authentication auxiliary information received from the terminal device 13 with the one-time password and authentication auxiliary information recorded in association with the personal identification ID, so that a third party (terminal Authentication of device 13) is performed.

When the authentication is correctly performed, that is, when it is confirmed (authenticated) that the third party (terminal device 13) has been granted temporary browsing authority, the server 12 has the personal identification ID as indicated by an arrow A16. The browsing data associated with is transmitted to the terminal device 13. Thereby, in the terminal device 13, it becomes possible to browse a user's browsing data temporarily.

Here, an example in which all browsing data associated with the personal identification ID can be browsed by a third party will be described, but only a part of all browsing data such as browsing data on a predetermined date is displayed. Restrictions may be added to enable browsing.

The third party generates a portion of the browsing data that is updated this time, that is, new browsing data based on the information of the portion of the browsing data that is updated this time, referring to the browsing data as necessary. Finally, the terminal device 13 transmits new browsing data to the server 12 as indicated by an arrow A17 and requests update (registration) of the new browsing data.

The server 12 updates the browsing data by recording the new browsing data received from the terminal device 13 in association with the personal identification ID in response to a request from the terminal device 13.

In addition, the server 12 invalidates the one-time password when new browsing data is received from the terminal device 13 and recorded. For example, the server 12 deletes the one-time password and authentication auxiliary information recorded in association with the personal identification ID, and invalidates the browsing authority by the one-time password.

In this way, in the information processing system, convenience can be improved while ensuring security by allowing a third party to browse browsing data temporarily using a one-time password. In addition, security can be ensured by using information related to the browsing data to be updated as authentication auxiliary information together with the one-time password, so that the character string issued as the one-time password by the server 12 can be shortened. can do. This not only makes it difficult for the user or third party to forget the one-time password, but also prevents a one-time password transmission error.

In addition, when a third party is authenticated by a one-time password and authentication auxiliary information, not only browsing browsing data but also registration of new browsing data can be performed, which can further improve convenience. .

It should be noted that the period during which a third party (terminal device 13) can register new browsing data, that is, the one-time password is valid for a predetermined period after the one-time password is issued, It is possible to set a predetermined period after access to the browsing data using.

In addition, the period during which new browsing data can be registered is, for example, after authentication with a one-time password is performed until communication with the server 12 is disconnected (while the session continues). It can also be. Furthermore, the browsing authority by a one-time password may be invalidated when browsing data is transmitted to the terminal device 13 and browsing is completed.

This technology is managed on the network, for example, when browsing the user's medication history data with the electronic medicine notebook service, or when browsing the purchase history of the user's books managed by the server. It is applicable when browsing some data. In the following, the present technology will be described in more detail by taking as an example a case where the user's medicine history data is browsed by the electronic medicine notebook service.

<Configuration example of information processing system>
In such a case, an information processing system to which the present technology is applied is configured, for example, as shown in FIG.

The information processing system 41 shown in FIG. 2 includes a data center 51, an information terminal device 52, an IC card 53 and a portable terminal device 54 possessed by the user. In addition, the data center 51 and the information terminal device 52 are connected to each other via a communication network 55 including a wired or wireless network such as the Internet.

In this information processing system 41, the portable terminal device 54 and the information terminal device 52 can upload drug history data such as an electronic medicine notebook to the data center 51 and browse the drug history data as appropriate. is there.

Therefore, in this example, the data center 51, the information terminal device 52, and the portable terminal device 54 correspond to the server 12, the terminal device 13, and the portable terminal device 11 described with reference to FIG. Further, the medicine history data to be browsed in the information processing system 41 corresponds to the browse data described with reference to FIG.

The data center 51 manages the drug history data of the user. That is, the data center 51 records a personal identification ID, which is an ID unique to a user, and the user's medication history data specified by the personal identification ID in association with each other.

Here, the personal identification ID is one piece of personal identification information that can uniquely identify the user. However, if another person simply obtains the personal identification ID, it is generally identified by the personal identification ID. It is information that cannot identify the individual user (it is difficult).

In the following, a case where a personal identification ID is used as identification information for identifying a user will be described. However, any information can be used as long as the user can be identified, not limited to a personal identification ID.

The data center 51 manages the medicine history data supplied from the information terminal device 52 and the portable terminal device 54, and records the medicine history recorded in response to a request from the information terminal device 52 and the portable terminal device 54. Disclose data. Further, the data center 51 issues a one-time password in response to a request from the portable terminal device 54, and performs authentication using the one-time password.

The information terminal device 52 is provided, for example, in a service member store registered in advance that provides a predetermined service. For example, the information terminal device 52 is provided in a pharmacy where a user purchases a prescribed medicine. Accordingly, in this example, the pharmacy (pharmacist or the like) in which the information terminal device 52 is installed corresponds to a third party such as the business operator described with reference to FIG.

Note that the information terminal device 52 is not necessarily provided in the service member store. In other words, the information terminal device 52 does not need to be registered in the data center 51 in advance, and can be an arbitrary terminal device.

The information terminal device 52 is composed of a computer or the like, and performs various processes according to input operations by a pharmacist or the like. Specifically, for example, the information terminal device 52 generates drug history data of the user in response to an input operation by a pharmacist or the like, records the drug history data, or stores the drug history data via the communication network 55 in the data center. 51 to be recorded.

In addition, the information terminal device 52 acquires the drug history data recorded in the data center 51 using the one-time password and authentication auxiliary information transmitted from the user as appropriate.

The IC card 53 is an IC card that a user who receives a service provided by a service member store in which the information terminal device 52 is installed is appropriately used when receiving the service. The IC card 53 is issued for each user. Is done. The IC card 53 stores a personal identification ID for authenticating a user who is a service user, and personal information including the user's name, date of birth, and sex.

The portable terminal device 54 is composed of a multifunctional mobile phone or the like possessed by the user, communicates with the data center 51 or the information terminal device 52 via a communication network or communication network 55 (not shown), and stores information as necessary. Give and receive. For example, the portable terminal device 54 requests the data center 51 to issue a one-time password, or receives and displays drug history data from the data center 51.

In the example of FIG. 2, only one information terminal device 52 is illustrated in the information processing system 41, but the information processing system 41 may include a plurality of information terminal devices 52.

<Data center configuration example>
Next, the configuration of the data center 51, the information terminal device 52, and the portable terminal device 54 shown in FIG. 2 will be described.

FIG. 3 is a diagram illustrating a configuration example of the data center 51. In FIG. 3, the data center 51 is configured as a single device, but the data center 51 may be configured from a plurality of devices.

3 includes a recording unit 81, a communication unit 82, and a control unit 83.

The recording unit 81 is a database, for example, and records various data. For example, the recording unit 81 records each user's personal identification ID and drug history data in association with each other, and supplies the recorded data to the control unit 83 as necessary.

The communication unit 82 communicates with the information terminal device 52 and the portable terminal device 54 via the communication network 55 and the like, supplies the received information to the control unit 83, and transmits information supplied from the control unit 83. To do.

The control unit 83 controls the operation of the entire data center 51. The control unit 83 includes an information management unit 91, a generation unit 92, and an authentication unit 93.

The information management unit 91 manages the data recorded in the recording unit 81. The generation unit 92 generates a one-time password in response to a request from the portable terminal device 54. The authentication unit 93 authenticates the information terminal device 52 using a one-time password.

<Configuration example of information terminal device>
Next, the configuration of the information terminal device 52 will be described.

FIG. 4 is a diagram illustrating a configuration example of the information terminal device 52. In FIG. 4, the information terminal device 52 is configured as one device, but the information terminal device 52 may be configured from a plurality of devices.

The information terminal device 52 includes a communication unit 121, an input unit 122, a display unit 123, a control unit 124, and a recording unit 125.

The communication unit 121 communicates with each device such as the data center 51 via the communication network 55, receives the transmitted information, supplies the information to the control unit 124, and transmits the information supplied from the control unit 124. Or The input unit 122 includes a mouse, a touch panel, and the like, and supplies a signal corresponding to an operation of a pharmacist or the like to the control unit 124. The display unit 123 includes a liquid crystal display panel and the like, and displays an image or the like based on data supplied from the control unit 124.

The control unit 124 controls the operation of the information terminal device 52 as a whole. The control unit 124 includes a browsing control unit 131 and a display control unit 132.

The browsing control unit 131 performs processing related to browsing of medical history data recorded in the data center 51. The display control unit 132 controls display of various images and information on the display unit 123.

The recording unit 125 records various data and supplies the data to the control unit 124 as necessary.

<Configuration example of portable terminal device>
Further, FIG. 5 is a diagram illustrating a configuration example of the portable terminal device 54.

The portable terminal device 54 includes a communication unit 161, an input unit 162, a control unit 163, a recording unit 164, and a display unit 165.

The communication unit 161 communicates with an external device such as the data center 51, receives various types of data, supplies the data to the control unit 163, and transmits data supplied from the control unit 163.

The input unit 162 includes, for example, an input button, a touch panel, a microphone, and the like, and supplies a signal corresponding to an input operation by the user to the control unit 163.

The control unit 163 controls the operation of the entire portable terminal device 54. The control unit 163 includes an issue request unit 171 and a display control unit 172.

The issue request unit 171 generates a one-time password issue request. The display control unit 172 controls display of images and information on the display unit 165.

The recording unit 164 records various types of data supplied from the control unit 163 and supplies the data to the control unit 163 as necessary. For example, the personal identification ID of the user is recorded in the recording unit 164. The display unit 165 includes a liquid crystal display panel and the like, and displays various images and information based on data supplied from the control unit 163.

<About browsing medical history data>
Next, the flow of processing when the processing related to the present technology described with reference to FIG. 1 is applied to the information processing system 41 will be described with reference to FIG.

The following cases can be considered as cases where it is necessary to issue a one-time password when providing a service for browsing and managing drug history data using the information processing system 41.

For example, a user who is a patient has already issued an IC card 53 for receiving an electronic medicine notebook service, and the portable terminal device 54 has already been registered as a terminal device for receiving the service. In such a situation, medicine history data, which is information in an electronic medicine notebook, is recorded in the data center 51 in association with the personal identification ID of the user.

In addition, it is difficult for the user, who is a patient, to go out at present, and the doctor is examined at home, and the doctor prepares the prescription created at the examination with the consent of the user at the pharmacy for home medical care. It was delivered to the information terminal device 52. For example, the prescription is digitized, and prescription data, which is prescription data, is transmitted from the information terminal device owned by the doctor to the information terminal device 52 via the communication network 55 or the like.

When the information terminal device 52 receives the prescription data, the pharmacist displays the prescription data, confirms the prescription medicine, and creates medicine history data including the contents of the prescription. At this time, the pharmacist wants to view the drug history data recorded in the data center 51 in order to confirm the contraindication of the combination of drugs from the patient's medication history.

In such a case, if the user who is a patient is in a pharmacy where the information terminal device 52 is provided, the information terminal device 52 acquires the personal identification ID of the user from the IC card 53 or the portable terminal device 54, and the data The medical history data recorded in the center 51 can be browsed. However, in this case, since it is difficult for the user to go out, the pharmacist wants to browse the user's medication history data temporarily without causing the user to visit the station.

In such a case, the user operates the portable terminal device 54 to perform an operation for requesting the issuance of a one-time password. At that time, a part of the user's medicine history data to be updated, specifically, For example, a drug name included in a prescription is input as authentication auxiliary information.

Note that the information input (designated) as the authentication auxiliary information may be any information as long as it is information included in the prescription, that is, a part of the prescription data. Alternatively, the description will be continued on the assumption that names of a plurality of medicines are input. Hereinafter, a part of the prescription data specified as the authentication auxiliary information by the user is also referred to as prescription partial information.

Therefore, in this example, the data of the updated part of the drug history data to be updated is data including prescription data, and a part of the prescription data is prescription part information as authentication auxiliary information.

When the prescription part information is input by the user, the portable terminal device 54 transmits a one-time password issuance request to the data center 51 together with the personal identification ID and prescription part information, as indicated by an arrow A21 in FIG.

Further, the data center 51 generates a one-time password in response to the issuance request, records the one-time password and prescription part information in association with the personal identification ID, and stores the one-time password as indicated by an arrow A22. To device 54.

At the same time, at the user's home that is a patient, the doctor who performed the examination as shown by arrow A23 transmits the prescription data from the doctor's information terminal device to the information terminal device 52, and the information terminal device 52 The prescription data transmitted from the terminal device is received.

Further, when the portable terminal device 54 receives and displays the one-time password from the data center 51, the user verbally informs the pharmacist of the one-time password and prescription part information as indicated by an arrow A24.

Then, the pharmacist operates the information terminal device 52, and the information terminal device 52 transmits the one-time password and prescription part information notified from the user to the data center 51 as indicated by an arrow A25, and requests transmission of drug history data. To do.

In response to this, the data center 51 compares the one-time password and prescription part information received from the information terminal device 52 with the one-time password and prescription part information recorded in association with the personal identification ID for authentication. I do.

When the authentication is correctly performed, the data center 51 transmits the drug history data associated with the personal identification ID to the information terminal device 52 as indicated by an arrow A26. Thereby, in the information terminal device 52, it becomes possible to browse a user's medicine history data temporarily.

The pharmacist refers to the drug history data to check whether there are any contraindications to the drug prescribed to the user, and gives instructions to the user if necessary. Further, the pharmacist creates a part of the drug history data that is updated based on the prescription data, that is, new drug history data. Finally, the information terminal device 52 transmits new drug history data to the data center 51 as indicated by an arrow A27 and requests update (registration) of the new drug history data.

The data center 51 updates the drug history data by recording the new drug history data received from the information terminal device 52 in association with the personal identification ID in response to a request from the information terminal device 52.

<Description of one-time password issuance request processing and one-time password issuance processing>
Subsequently, the process described with reference to FIG. 6 will be described in more detail.

First, the one-time password issuance request process by the portable terminal device 54 and the one-time password issuance process by the data center 51 will be described with reference to the flowchart of FIG.

In step S11, the communication unit 161 of the portable terminal device 54 transmits the personal identification ID and prescription part information to the data center 51 together with the issue request.

That is, the issue request unit 171 of the portable terminal device 54 generates prescription part information based on a signal supplied from the input unit 162 according to a user operation, and also generates a one-time password issue request. Further, the issue request unit 171 reads the personal identification ID of the user from the recording unit 164.

Then, the issue request unit 171 supplies a request for issuing a one-time password, a personal identification ID, and prescription part information to the communication unit 161 and instructs (controls) transmission to the data center 51. The communication unit 161 transmits the issue request, personal identification ID, and prescription part information supplied from the issue request unit 171 to the data center 51 via the communication network 55.

Then, in step S 21, the communication unit 82 of the data center 51 receives the issue request, the personal identification ID, and the prescription part information transmitted from the portable terminal device 54 and supplies them to the control unit 83.

In step S <b> 22, the generation unit 92 of the control unit 83 generates a one-time password in response to the issue request supplied from the communication unit 82. For example, the generation unit 92 generates information including a predetermined number of randomly selected characters and numbers as a one-time password.

In more detail, the generation unit 92 performs user authentication, and generates a one-time password after the user is authenticated.

In step S23, the recording unit 81 records the one-time password and prescription part information in association with the personal identification ID.

That is, the information management unit 91 supplies the personal identification ID and prescription part information supplied from the communication unit 82 and the one-time password generated by the generation unit 92 to the recording unit 81 and controls recording of the information. To do. Then, the recording unit 81 records the personal identification ID, the one-time password, and the prescription part information in association with each other according to the control of the information management unit 91.

In addition, the information management unit 91 supplies the generated one-time password to the communication unit 82 and instructs transmission to the portable terminal device 54.

In step S24, the communication unit 82 transmits the one-time password supplied from the information management unit 91 to the portable terminal device 54 via the communication network 55, and the one-time password issuing process ends. As a result, a one-time password for temporarily permitting a third party (pharmacist) to browse the user's medication history data is issued from the data center 51 to the user.

In step S 12, the communication unit 161 of the portable terminal device 54 receives the one-time password transmitted from the data center 51 and supplies it to the control unit 163. The issuance request unit 171 of the control unit 163 supplies the one-time password to the recording unit 164 as necessary, and records it.

In step S13, the display control unit 172 supplies the one-time password supplied from the communication unit 161 to the display unit 165 for display. The display unit 165 displays the one-time password in accordance with the control of the display control unit 172, and the one-time password issuance request process ends.

When the one-time password is displayed on the portable terminal device 54 in this way, the user verbally notifies the pharmacist of the one-time password using a telephone or the like. At that time, the user also notifies the pharmacist of the medicine name as the prescription part information input by the user.

As described above, the portable terminal device 54 transmits a personal identification ID and prescription part information to the data center 51 together with an issuance request in accordance with a user operation. Further, the data center 51 issues a one-time password in response to the issuance request, and records the one-time password and prescription part information in association with the personal identification ID.

Thus, by recording the prescription part information together with the one-time password, not only the one-time password but also the prescription part information can be used for authentication. In particular, the prescription part information is information that is difficult for others to imagine and easy for the user and pharmacist to memorize.

Therefore, by authenticating using the one-time password and prescription part information, the one-time password can be shortened while ensuring security, and the burden on the user and pharmacist can be reduced. Thereby, convenience can be improved while ensuring security.

<Explanation of browsing process and providing process>
When the one-time password and prescription part information are transmitted to the pharmacist as described above, the pharmacist operates the information terminal device 52 and browses the user's drug history data. When an operation for browsing the medical history data is performed by the pharmacist, the information terminal device 52 performs a browsing process to display the medical history data, and the data center 51 displays the medical history data in response to a request from the information terminal device 52. Perform the provision process to be provided.

Hereinafter, the browsing process by the information terminal device 52 and the providing process by the data center 51 will be described with reference to the flowchart of FIG.

In step S51, the communication unit 121 of the information terminal device 52 receives prescription data transmitted from the doctor's information terminal device and supplies it to the control unit 124. Note that the prescription data may be acquired at any timing.

In addition, the pharmacist performs an operation for browsing the medical history data on the input unit 122 and operates the input unit 122 to input the one-time password and prescription part information. Then, the browsing control unit 131 generates a browsing request for requesting browsing of drug history data based on a signal supplied from the input unit 122 according to the operation of the pharmacist, and also includes a browsing request, a one-time password, and a prescription. Partial information is supplied to the communication unit 121 and transmission thereof is controlled.

Here, an example will be described in which the pharmacist verbally transmits and listens to the prescription part information from the user, and operates the input unit 122 to input the prescription part information. However, the prescription part information may be acquired in any way. Good.

In step S <b> 52, the communication unit 121 transmits the one-time password and prescription part information supplied from the browsing control unit 131 to the data center 51 via the communication network 55 together with the browsing request supplied from the browsing control unit 131. .

Then, in step S 61, the communication unit 82 of the data center 51 receives the browsing request, the one-time password, and the prescription part information transmitted from the information terminal device 52 and supplies them to the control unit 83.

In step S62, the authentication unit 93 of the control unit 83 performs authentication based on the one-time password and prescription part information supplied from the communication unit 82 in response to the browsing request supplied from the communication unit 82. That is, the one-time password and prescription part information are compared, and the information terminal device 52 (pharmacist) is authenticated according to the comparison result.

For example, the authentication unit 93 determines whether or not the one-time password and prescription part information supplied from the communication unit 82 match the one-time password and prescription part information recorded in the recording unit 81 in association with the personal identification ID. Determine whether. And when it determines with the authentication part 93 being in agreement, the third party (pharmacist) who transmitted the browsing request will identify the user identified by the personal identification ID associated with the one-time password and prescription part information. It is assumed that the user has the authority to view drug history data temporarily. That is, the pharmacist is authenticated as a third party having temporary browsing authority.

In this example, it is not necessary to register in advance in the data center 51 the pharmacy in which the information terminal device 52 is provided or the medical institution of the doctor who generates the prescription data, so the convenience can be improved.

Note that third-party authentication is not limited to whether the one-time password and prescription part information match, but how the information calculated from the one-time password and prescription part information matches, etc. Good.

In the following, the explanation will be continued assuming that the authentication is correctly performed. If authentication is not performed correctly, that is, if it is determined that the pharmacist who has transmitted the browsing request does not have temporary browsing authority, the data terminal 51 does not have browsing authority. The information to that effect is transmitted and the providing process ends.

When the authentication is correctly performed in step S62, the information management unit 91 reads out the medical history data requested to be browsed, that is, the medical history data associated with the personal identification ID from the recording unit 81 in step S63. The identification ID and drug history data are supplied to the communication unit 82. Then, the information management unit 91 instructs the communication unit 82 to transmit a personal identification ID and medication history data.

In step S64, the communication unit 82 transmits the personal identification ID and the medication history data supplied from the information management unit 91 to the information terminal device 52 via the communication network 55.

Then, in step S53, the communication unit 121 of the information terminal device 52 receives the personal identification ID and the medication history data transmitted from the data center 51 and supplies them to the control unit 124.

In step S54, the display control unit 132 of the control unit 124 supplies the drug history data supplied from the communication unit 121 to the display unit 123 for display. The display unit 123 displays the drug history data according to the control of the display control unit 132.

When the drug history data is displayed in this way, the pharmacist refers to the drug history data. In addition, the pharmacist operates the input unit 122 to create drug history data by appropriately processing the prescription data acquired in the process of step S51. That is, the control unit 124 generates drug history data based on the prescription data in response to an operation performed on the input unit 122 by the pharmacist. The drug history data generated at this time is, for example, a new part added when the drug history data recorded in the data center 51 is updated, that is, data of an updated part.

Further, the new drug history data includes, for example, information related to the pharmacy in which the information terminal device 52 is provided, in addition to the information included in the prescription data. Specifically, in the new drug history data, for example, information included in the prescription data, the name of the drug prescribed to the user, the prescription amount of the drug, information indicating the medical institution that performed the diagnosis, etc. It is included. In addition, the new drug history data includes, for example, information indicating a pharmacy name as information on the pharmacy.

When the drug history data is generated, the control unit 124 supplies the generated new drug history data, the personal identification ID received in the process of step S53, and the update request for the drug history data to the communication unit 121, and the data The transmission to the center 51 is instructed.

In step S55, the communication unit 121 transmits the personal identification ID, new drug history data, and drug history data update request supplied from the control unit 124 to the data center 51 via the communication network 55, and browse processing. Ends.

In step S65, the communication unit 82 of the data center 51 receives the personal identification ID, the new drug history data, and the update request for the drug history data transmitted from the information terminal device 52, and supplies them to the control unit 83. To do.

In step S66, the information management unit 91 supplies the new drug history data supplied from the communication unit 82 to the recording unit 81 for recording in response to a request to update the drug history data.

That is, the information management unit 91 adds the newly received medication history data to the medication history data recorded in the recording unit 81 in association with the same personal identification ID as the personal identification ID supplied from the communication unit 82. Then, recording of new drug history data by the recording unit 81 is controlled so that the drug history data is updated. The recording unit 81 updates the drug history data based on the drug history data supplied from the information management unit 91. When the drug history data is updated, the providing process ends.

As described above, the data center 51 performs authentication based on the one-time password and prescription part information, permits temporary browsing of the drug history data, receives new drug history data, and stores the drug history data. Update.

As described above, by performing authentication based on the one-time password and prescription part information, it is possible to improve convenience while ensuring security. Further, when authentication is performed, by permitting browsing and updating of medical history data, the information terminal device 52 (pharmacist) can separately update the medical history data without performing authentication. Furthermore, convenience can be improved. Here, the case where the drug history data is updated after browsing the drug history data has been described, but the browsing process ends when the drug history data is browsed, that is, when the drug history data is displayed. You may do it. In such a case, step S55 in the browsing process and steps S65 and S66 in the providing process are not performed. If only the drug history is updated after browsing the drug history, the one-time password is transmitted together with the personal identification ID, new drug history data, and the update request in step S55, and the one-time password is valid for the data center 51. If it is within the valid period, the process proceeds to step S65 and step S66.

<Second Embodiment>
<Explanation of browsing process and providing process>
In the above description, it has been described that the prescription part information is transmitted verbally together with the one-time password from the user to the pharmacist. However, since the prescription part information is information included in the prescription data, and the information terminal device 52 acquires the prescription data from the doctor's information terminal device, it is not always necessary to convey the prescription part information to the pharmacist.

In such a case, the information processing apparatus 52 may extract prescription part information from the prescription data. Thus, when prescription part information is extracted from prescription data, the process shown, for example in FIG. 9 is performed as a browsing process and a provision process.

Hereinafter, the browsing process by the information terminal device 52 and the providing process by the data center 51 will be described with reference to the flowchart of FIG. Note that the processing in step S91 is the same as the processing in step S51 in FIG.

In step S92, the browsing control unit 131 of the information terminal device 52 extracts prescription part information from the prescription data supplied from the communication unit 121.

For example, the browsing control unit 131 extracts a predetermined part of the prescription data and uses it as prescription part information. Here, the predetermined part is, for example, a part in which information about a medicine prescribed for the user (patient) is stored. Note that the prescription part information may be described in a prescription with a QR (Quick Response) code (registered trademark) or may be encrypted and described in prescription data. In this case, the browsing control unit 131 acquires the prescription part information by reading a QR code (registered trademark) included in the prescription or decrypting data described in the prescription data.

When the prescription part information is obtained, the browsing control unit 131 supplies the browsing request, the one-time password, and the prescription part information to the communication unit 121, and controls their transmission.

In step S <b> 93, the communication unit 121 transmits the one-time password and prescription part information supplied from the browsing control unit 131 to the data center 51 via the communication network 55 together with the browsing request supplied from the browsing control unit 131. .

When the browsing request is transmitted, the data center 51 performs the processing from step S101 to step S104 to perform the authentication processing and the personal identification ID and medication history data transmission processing. Since it is the same as the process of step S61 thru | or step S64 of FIG. 8, the description is abbreviate | omitted.

Further, when the personal identification ID and the drug history data are transmitted from the data center 51, the processing of steps S94 to S96 is performed in the information terminal device 52, and the browsing process is terminated, but these processes are the steps of FIG. Since it is the same as the process of S53 thru | or step S55, the description is abbreviate | omitted.

Furthermore, when the processing of step S94 to step S96 is performed and the personal identification ID, new drug history data, and an update request are transmitted to the data center 51, the data center 51 performs the processing of step S105 and step S106. Then, the providing process ends. Note that the processing in step S105 and step S106 is the same as the processing in step S65 and step S66 in FIG.

In this way, the information terminal device 52 extracts prescription part information from the acquired prescription data. By extracting the prescription part information from the prescription data in this way, the user does not need to convey the prescription part information to the pharmacist, and not only can the convenience be improved, but also the security can be improved. .

<Third Embodiment>
<About browsing medical history data>
In the above description, a part of the prescription data is used as authentication auxiliary information as an example, but it is not included in the prescription data. Information included in the history data, for example, information related to a pharmacy, may be used as auxiliary authentication information. Below, the example in which the information regarding a pharmacy is used as authentication auxiliary information is demonstrated.

In such a case, the pharmacy provided with the information terminal device 52 is registered in the data center 51 in advance. That is, in the recording unit 81 of the data center 51, a pharmacy ID for identifying a pharmacy, pharmacy name information indicating the pharmacy name (name), and area information indicating a pharmacy location area are recorded in association with each other. Yes. Here, the location area of the pharmacy is, for example, the prefecture or city where the pharmacy is located.

Here, an example in which the pharmacy name information and the regional information are recorded in association with the pharmacy ID in the data center 51 will be described. However, only one of the pharmacy name information and the regional information is recorded. Also good. In such a case, only one of pharmacy name information and regional information is used.

In this way, when the pharmacy is registered in advance, the user operates the portable terminal device 54 and inputs the pharmacy name information or the regional information of the pharmacy that temporarily permits the browsing of the drug history data as the pharmacy information. In this example, pharmacy information is used as authentication auxiliary information. Since the information such as the pharmacy name is information included in the newly added drug history data, it can be said that the pharmacy information is information included in the drug history data to be updated.

Also, for example, the pharmacy information may be input directly by the user, or the user may select from the displayed information. Further, both pharmacy name information and regional information may be input as pharmacy information.

When the pharmacy information is input by the user, the portable terminal device 54 transmits a request for issuing a one-time password to the data center 51 together with the personal identification ID and the pharmacy information, as indicated by an arrow A31 in FIG.

Further, the data center 51 generates a one-time password in response to the issuance request, records the one-time password and pharmacy information in association with the personal identification ID, and uses the one-time password as a portable terminal device as indicated by an arrow A32. 54.

When the portable terminal device 54 receives and displays the one-time password from the data center 51, the user verbally informs the pharmacist of the one-time password as indicated by an arrow A33. In this case, the user does not need to convey pharmacy information to the pharmacist.

The pharmacist operates the information terminal device 52, and the information terminal device 52 transmits the one-time password notified from the user and the pharmacy ID recorded in advance in the information terminal device 52 to the data center 51 as indicated by an arrow A34. And request transmission of drug history data.

Accordingly, the data center 51 performs authentication based on the one-time password and pharmacy ID received from the information terminal device 52 and the one-time password and pharmacy information recorded in association with the personal identification ID.

For example, the pharmacy name information or the regional information that is recorded in association with the pharmacy ID in the data center 51 in advance, and the pharmacy information that is recorded in association with the personal identification ID and the one-time password. If it matches, it is assumed that authentication was successful.

When the authentication is correctly performed, the data center 51 transmits the drug history data associated with the personal identification ID to the information terminal device 52 as indicated by an arrow A35. Thereby, in the information terminal device 52, it becomes possible to browse a user's medicine history data temporarily.

Pharmacist refers to drug history data and creates new drug history data. Finally, the information terminal device 52 transmits new drug history data to the data center 51 as indicated by an arrow A36, and requests update (registration) of the new drug history data.

<Description of one-time password issuance request processing and one-time password issuance processing>
Next, the process described with reference to FIG. 10 will be described in more detail.

First, the one-time password issue request process by the portable terminal device 54 and the one-time password issue process by the data center 51 will be described with reference to the flowchart of FIG.

In step S131, the communication unit 161 of the portable terminal device 54 transmits the personal identification ID and pharmacy information to the data center 51 together with the issue request.

That is, the issue request unit 171 of the portable terminal device 54 generates pharmacy information based on a signal supplied from the input unit 162 according to a user operation, and also generates a one-time password issue request. Further, the issue request unit 171 reads the personal identification ID of the user from the recording unit 164.

The issuance request unit 171 supplies the one-time password issuance request, personal identification ID, and pharmacy information to the communication unit 161, and controls transmission to the data center 51. The communication unit 161 transmits the issue request, the personal identification ID, and the pharmacy information supplied from the issue request unit 171 to the data center 51 via the communication network 55.

Then, in step S141, the communication unit 82 of the data center 51 receives the issuance request, personal identification ID, and pharmacy information transmitted from the portable terminal device 54 and supplies them to the control unit 83.

In step S142, the generation unit 92 of the control unit 83 generates a one-time password in response to the issue request supplied from the communication unit 82.

In step S143, the recording unit 81 records the one-time password and pharmacy information in association with the personal identification ID.

That is, the information management unit 91 supplies the personal identification ID and pharmacy information supplied from the communication unit 82 and the one-time password generated by the generation unit 92 to the recording unit 81 and controls the recording of the information. . The recording unit 81 records the personal identification ID, the one-time password, and the pharmacy information in association with each other according to the control of the information management unit 91.

In step S144, the communication unit 82 transmits the one-time password supplied from the information management unit 91 to the portable terminal device 54 via the communication network 55, and the one-time password issuing process ends.

Further, when the one-time password is transmitted to the portable terminal device 54, the processes of step S132 and step S133 are performed, and the one-time password issuance request process ends, but these processes are performed in steps S12 and S of FIG. Since it is the same as the process of S13, the description is abbreviate | omitted.

When the one-time password is displayed on the portable terminal device 54 in this way, the user verbally notifies the pharmacist of the one-time password using a telephone or the like. At that time, the user does not need to convey the personal identification ID and pharmacy information to the pharmacist.

As described above, the portable terminal device 54 transmits the personal identification ID and pharmacy information to the data center 51 together with the issue request. Further, the data center 51 issues a one-time password in response to the issue request, and records the one-time password and pharmacy information in association with the personal identification ID.

Thus, by recording the pharmacy information together with the one-time password, not only the one-time password but also the pharmacy information can be used for authentication. As a result, the one-time password can be shortened while ensuring security, and convenience can be improved. In particular, by specifying pharmacy name information and regional information as pharmacy information, it is possible to limit the range of pharmacies that are permitted to be browsed, pharmacy groups, and the like, and further improve convenience.

<Explanation of browsing process and providing process>
Next, the browsing process by the information terminal device 52 and the provision process by the data center 51 will be described with reference to the flowchart of FIG. In this example, it is assumed that the information terminal device 52 has acquired prescription data in advance by some method.

In step S171, the communication unit 121 of the information terminal device 52 transmits the one-time password and the pharmacy ID to the data center 51 through the communication network 55 together with the browsing request.

That is, first, the pharmacist performs an operation for browsing the drug history data on the input unit 122 and operates the input unit 122 to input a one-time password. Then, the browsing control unit 131 generates a browsing request for requesting browsing of drug history data in accordance with the operation of the pharmacist and acquires a one-time password.

Also, the browsing control unit 131 reads the pharmacy ID from the recording unit 125. This pharmacy ID is information indicating a pharmacy in which the information terminal device 52 is provided.

The browsing control unit 131 supplies the browsing request, the one-time password, and the pharmacy ID obtained in this way to the communication unit 121, and controls their transmission. The communication unit 121 transmits the browsing request, the one-time password, and the pharmacy ID supplied from the browsing control unit 131 to the data center 51.

Then, in step S181, the communication unit 82 of the data center 51 receives the browsing request, the one-time password, and the pharmacy ID transmitted from the information terminal device 52 and supplies them to the control unit 83.

In step S182, the authentication unit 93 of the control unit 83 performs authentication based on the one-time password and pharmacy ID supplied from the communication unit 82 in response to the browsing request supplied from the communication unit 82.

For example, the authentication unit 93 reads out from the recording unit 81 pharmacy name information and region information associated with the same pharmacy ID as the pharmacy ID supplied from the communication unit 82 among the pharmacy IDs recorded in the recording unit 81. . Next, the authentication unit 93 records the one-time password supplied from the communication unit 82 and the pharmacy name information or the region information read from the recording unit 81 in association with the personal identification ID in the recording unit 81. It is determined whether or not it matches the one-time password and pharmacy name information or regional information indicated by the pharmacy information.

And when it determines with the authentication part 93 being in agreement, suppose that the third party (pharmacist) who transmitted the browsing request has the authority to browse a user's medicine history data temporarily.

For example, when pharmacy name information is designated as pharmacy information, if one-time passwords are transmitted to several stores in a pharmacy belonging to the same group, it is possible to view the drug history data at each of those stores. That is, the user can limit the pharmacy groups permitted to view the drug history data by specifying the pharmacy name information as the pharmacy information.

Similarly, when regional information is designated as pharmacy information, if one-time passwords are transmitted to some pharmacies existing in the region, it is possible to view the medical history data at each of those pharmacies. That is, the user can limit the area where the pharmacy where the browsing of the drug history data is permitted is specified by specifying the area information as the pharmacy information.

Furthermore, when pharmacy name information is designated as pharmacy information, the pharmacy name information may include a pharmacy name (pharmacy name) and a pharmacy store name. In this case, the user can limit the stores that permit the browsing of the drug history data from the stores of the pharmacies belonging to the pharmacy group by specifying the name of the pharmacy group and the store name as the pharmacy name information.

If the authentication is correctly performed in step S182, then the processing of step S183 and step S184 is performed, and the personal identification ID and drug history data are transmitted to the information terminal device 52. Note that the processing in step S183 and step S184 is the same as the processing in step S63 and step S64 in FIG.

Further, when the personal identification ID and the drug history data are transmitted from the data center 51, the information terminal device 52 performs the processing of steps S172 to S174, and the browsing processing ends. Since it is the same as the process of S53 thru | or step S55, the description is abbreviate | omitted.

Further, when the processing from step S172 to step S174 is performed and the personal identification ID, the new drug history data, and the update request are transmitted to the data center 51, the data center 51 performs the processing of steps S185 and S186. Then, the providing process ends. Note that the processing in step S185 and step S186 is the same as the processing in step S65 and step S66 in FIG. 8, and a description thereof will be omitted. In addition, although the case where the medical history data is updated after browsing the medical history data is described here, when only the browsing is performed, the time when the medical history data is browsed, that is, the time when the medical history data is displayed Thus, the browsing process may be terminated. In such a case, it is not necessary for the information terminal device 52 to acquire prescription data in advance, and step S174 in the browsing process and steps S185 and S186 in the providing process are not performed. become.

As described above, the data center 51 performs authentication using the one-time password and the pharmacy information, and permits browsing of drug history data. Thus, by using pharmacy information for authentication, it is possible to improve convenience while ensuring security. In particular, by specifying pharmacy name information and regional information as pharmacy information, it is possible to limit the range of pharmacies that are permitted to be browsed, pharmacy groups, and the like, and further improve convenience.

In the above description, the example in which the entire range of the medication history data recorded in the data center 51 is viewable by the pharmacist has been described. However, only the portion of the range designated by the user in the medication history data is included. It may be made possible to browse.

In such a case, the user designates a range that can be viewed when a one-time password issuance request is made. The extraction of the range that can be browsed may be under any conditions as long as it can be extracted from the stored drug history data, such as the prescription issue date, the type of internal use, the dispensing pharmacy name, and the like. The issue request unit 171 of the portable terminal device 54 generates disclosure range information indicating the range that can be browsed specified by the user, and the communication unit 161 issues the issue request, personal identification ID, prescription part information (or pharmacy information). At the same time, the disclosure range information is transmitted to the data center 51.

The data center 51 records the disclosure range information received from the portable terminal device 54 in this way in the recording unit 81 in association with the personal identification ID, and actually transmits the drug history data to the information terminal device 52. In this case, only the part indicated by the disclosure range information is transmitted. That is, the information management unit 91 reads only the portion indicated by the disclosure range information of the drug history data from the recording unit 81, and the communication unit 82 transmits the read portion of data to the information terminal device 52.

By the way, the above-described series of processing can be executed by hardware or can be executed by software. When a series of processing is executed by software, a program constituting the software is installed in the computer. Here, the computer includes, for example, a general-purpose computer capable of executing various functions by installing a computer incorporated in dedicated hardware and various programs.

FIG. 13 is a block diagram showing an example of the hardware configuration of a computer that executes the above-described series of processing by a program.

In the computer, a CPU (Central Processing Unit) 501, a ROM (Read Only Memory) 502, and a RAM (Random Access Memory) 503 are connected to each other via a bus 504.

An input / output interface 505 is further connected to the bus 504. An input unit 506, an output unit 507, a recording unit 508, a communication unit 509, and a drive 510 are connected to the input / output interface 505.

The input unit 506 includes a keyboard, a mouse, a microphone, an image sensor, and the like. The output unit 507 includes a display, a speaker, and the like. The recording unit 508 includes a hard disk, a nonvolatile memory, and the like. The communication unit 509 includes a network interface or the like. The drive 510 drives a removable medium 511 such as a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory.

In the computer configured as described above, the CPU 501 loads the program recorded in the recording unit 508 to the RAM 503 via the input / output interface 505 and the bus 504 and executes the program, for example. Is performed.

The program executed by the computer (CPU 501) can be provided by being recorded in, for example, a removable medium 511 as a package medium or the like. The program can be provided via a wired or wireless transmission medium such as a local area network, the Internet, or digital satellite broadcasting.

In the computer, the program can be installed in the recording unit 508 via the input / output interface 505 by attaching the removable medium 511 to the drive 510. Further, the program can be received by the communication unit 509 via a wired or wireless transmission medium and installed in the recording unit 508. In addition, the program can be installed in advance in the ROM 502 or the recording unit 508.

The program executed by the computer may be a program that is processed in time series in the order described in this specification, or in parallel or at a necessary timing such as when a call is made. It may be a program for processing.

The embodiments of the present technology are not limited to the above-described embodiments, and various modifications can be made without departing from the gist of the present technology.

For example, the present technology can take a cloud computing configuration in which one function is shared by a plurality of devices via a network and is jointly processed.

Further, each step described in the above flowchart can be executed by one device or can be shared by a plurality of devices.

Further, when a plurality of processes are included in one step, the plurality of processes included in the one step can be executed by being shared by a plurality of apparatuses in addition to being executed by one apparatus.

Further, the effects described in the present specification are merely examples and are not limited, and other effects may be obtained.

Furthermore, the present technology can be configured as follows.

(1)
In the medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via the communication network,
A communication unit for transmitting and receiving information;
A recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information in association with personal identification information,
The communication unit and a control unit for controlling the recording unit,
The controller is
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A medication history information management device that performs authentication and executes a process of determining whether or not the medication history information can be browsed by the second terminal device.
(2)
The authentication information is valid for a predetermined time after the authentication information is issued, or for a predetermined time after accessing the drug history information using the authentication information. Management device.
(3)
The authentication auxiliary information includes information on a place where a browsing request is made by operating the second terminal device as information on a location where the browsing request is made by the second terminal device. The medical history information management device according to (2).
(4)
The control unit further sends the second personal identification information, the updated drug history information, and the update request for the drug history information associated with the second personal identification information by the communication unit. The medicine history information management device according to any one of (1) to (3), wherein when received from the second terminal device, the medicine history information is updated.
(5)
A medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network,
A communication unit for transmitting and receiving information;
A recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information in association with personal identification information,
In the medication history information management method of the medication history information management device comprising the communication unit and a control unit that controls the recording unit,
The control unit is
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A drug history information management method including a step of performing authentication and determining whether or not the drug history information can be browsed by the second terminal device.
(6)
A medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network,
A communication unit for transmitting and receiving information;
In association with personal identification information, a computer that controls a drug history information management device comprising a recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information,
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A program for performing a process including a step of performing a process of performing authentication and performing a process of determining whether or not the drug history information can be viewed by the second terminal device.

41 information processing system, 51 data center, 52 information terminal device, 54 portable terminal device, 82 communication unit, 91 information management unit, 92 generation unit, 93 authentication unit, 121 communication unit, 123 display unit, 131 browsing control unit, 132 Display control unit, 161 communication unit, 171 issue request unit, 172 display control unit

Claims

In the medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via the communication network,
A communication unit for transmitting and receiving information;
A recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information in association with personal identification information,
The communication unit and a control unit for controlling the recording unit,
The controller is
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A medication history information management device that performs authentication and executes a process of determining whether or not the medication history information can be browsed by the second terminal device.
The drug history information according to claim 1, wherein the authentication information is valid for a predetermined time after the authentication information is issued, or for a predetermined time after accessing the drug history information using the authentication information. Management device.
The authentication auxiliary information includes information on a location where a browsing request is made by operating the second terminal device as information on a location where the browsing request is made by the second terminal device. Drug history information management device described.
The control unit further sends the second personal identification information, the updated drug history information, and the update request for the drug history information associated with the second personal identification information by the communication unit. The medical history information management device according to claim 1, wherein when received from a second terminal device, processing for updating the medical history information is executed.
A medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network,
A communication unit for transmitting and receiving information;
A recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information in association with personal identification information,
In the medication history information management method of the medication history information management device comprising the communication unit and a control unit that controls the recording unit,
The control unit is
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A drug history information management method including a step of performing authentication and determining whether or not the drug history information can be browsed by the second terminal device.
A medication history information management device connected to the first terminal device and the second terminal device capable of browsing the medication history information of the user via a communication network,
A communication unit for transmitting and receiving information;
In association with personal identification information, a computer that controls a drug history information management device comprising a recording unit capable of recording at least the drug history information, authentication information, and authentication auxiliary information,
When the first personal identification information, the authentication auxiliary information, and the authentication information issuance request are received from the first terminal device by the communication unit,
Processing for generating the authentication information;
A process of recording the authentication information and the authentication auxiliary information in the recording unit in association with the first personal identification information;
A process of transmitting the authentication information by the communication unit to the first terminal device,
When the communication unit receives the authentication information, the authentication auxiliary information, and the browsing request for the drug history information associated with the second personal identification information from the second terminal device,
Based on the authentication information and the authentication auxiliary information recorded in the recording unit in association with the second personal identification information, and the authentication information and the authentication auxiliary information received from the second terminal device A program for performing a process including a step of performing a process of performing authentication and performing a process of determining whether or not the drug history information can be browsed by the second terminal device.