WO2024014012A1 - Health/medical information central management system - Google Patents

Health/medical information central management system Download PDF

Info

Publication number
WO2024014012A1
WO2024014012A1 PCT/JP2022/047347 JP2022047347W WO2024014012A1 WO 2024014012 A1 WO2024014012 A1 WO 2024014012A1 JP 2022047347 W JP2022047347 W JP 2022047347W WO 2024014012 A1 WO2024014012 A1 WO 2024014012A1
Authority
WO
WIPO (PCT)
Prior art keywords
information
health
medical
management system
incentive
Prior art date
Application number
PCT/JP2022/047347
Other languages
French (fr)
Japanese (ja)
Inventor
崇寛 土井
東一郎 桐林
Original Assignee
株式会社サンクスネット
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社サンクスネット filed Critical 株式会社サンクスネット
Publication of WO2024014012A1 publication Critical patent/WO2024014012A1/en

Links

Images

Classifications

    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H10/00—ICT specially adapted for the handling or processing of patient-related medical or healthcare data

Definitions

  • the present invention relates to a unified health and medical information management system for accumulating and centrally managing health and medical information that is information related to personal health and medical care.
  • Patent Document 1 As an example of such a system, the invention described in Patent Document 1 has been proposed.
  • medical information such as electronic medical records created by a predetermined medical institution is disclosed to other doctors and medical institutions only for necessary items, and items that the patient himself/herself does not wish to be disclosed are not disclosed.
  • the aim was to provide a medical information management system for
  • the above-mentioned invention has a problem in that it does not disclose whether or not to disclose patient's medical information from the perspective of providing incentives to patients in order to promote unified management of medical information.
  • the present invention provides a unified management of health and medical information that provides incentives to individuals in order to promote the unified management of health and medical information regarding whether or not to disclose personal health and medical information.
  • the aim is to provide a system.
  • the present invention provides a health and medical information storage unit for accumulating and centrally managing health and medical information related to individuals, and a network for the health and medical information accumulated in the health and medical information storage unit.
  • a health and medical information storage unit for accumulating and centrally managing health and medical information related to individuals
  • a network for the health and medical information accumulated in the health and medical information storage unit.
  • the present invention provides a health and medical related information unified management system which, in addition to the above characteristics, further includes an access authentication processing section that performs authentication for accessing the incentive management section.
  • the present invention further includes a consent information acquisition unit that acquires consent information that is information indicating consent to accept the incentive provided by the incentive management unit after being authenticated by the access authentication processing unit. Provides a unified management system for health and medical information.
  • the present invention provides a health care system that further includes an incentive processing section for performing incentive processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition section.
  • an incentive processing section for performing incentive processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition section.
  • the present invention provides a health and medical related information unified management system that further includes a disclosure permission information holding unit that holds disclosure permission information indicating whether or not an individual is permitted to disclose his or her health and medical information to a third party. I will provide a.
  • the present invention provides a health care system having a third party identification information holding unit that holds third party identification information for identifying whether a third party is a medical worker or a non-medical worker. Provides a related information unified management system.
  • the access control unit determines whether the disclosure permission information held in the disclosure permission information storage unit indicates permission to publish, and the third party identification information held in the third party identification information storage unit is a medical professional.
  • the access control unit determines whether the disclosure permission information held in the disclosure permission information storage unit indicates permission to publish, and the third party identification information held in the third party identification information storage unit is a medical professional.
  • a unified health and medical information management system that allows medical personnel to view health and medical information stored in a health and medical information storage unit.
  • the access control section determines whether the disclosure permission information held in the disclosure permission information storage section indicates permission for disclosure, and the third party identification information held in the third party identification information storage section is non-medical.
  • the access control section determines whether the disclosure permission information held in the disclosure permission information storage section indicates permission for disclosure, and the third party identification information held in the third party identification information storage section is non-medical.
  • the present invention provides that the anonymization method includes at least k (k is a natural number of 2 or more) anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange),
  • the present invention provides a unified management system for health and medical information that is performed using sampling, grouping anonymization methods, or a combination thereof.
  • the present invention can be applied to medical professionals such as doctors, dentists, pharmacists, public health nurses, midwives, nurses, associate nurses, physical therapists, occupational therapists, orthoptists, speech therapists, and prosthetics and orthotics.
  • a dietician, a nutritionist, a mental health worker, a social worker, a certified care worker, a certified psychologist, a clinical psychologist, and a medical administrator included in the following: a dietician, a nutritionist, a mental health worker, a social worker, a certified care worker, a certified psychologist, a clinical psychologist, and a medical administrator.
  • the present invention also applies to non-medical workers such as life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Kyokai Kenpo, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizers
  • the present invention is a method executed by a CPU in a health and medical information unified management system, which includes a health and medical information accumulation step for accumulating and centrally managing health and medical information related to individuals; An access control step for controlling the disclosure of health and medical information accumulated in the medical information storage step to a third party via the network, and a health and medical
  • a method is provided having an incentive function step including at least an incentive management step for providing incentives to individuals.
  • the present invention is a method executed by a CPU in a health and medical information unified management system, which includes a health and medical information accumulation step for accumulating and centrally managing health and medical information related to individuals; An access control step for controlling the disclosure of health and medical information accumulated in the medical information storage step to a third party via the network, and a health and medical In order to promote unified management of related information, an incentive function step including at least an incentive management step for providing incentives to individuals; Provides an operating program for a unified health and medical information management system.
  • the present invention can provide a unified health and medical information management system that provides incentives to individuals in order to promote the unified management of health and medical information regarding whether or not to disclose health and medical information. .
  • Diagram showing the hardware configuration applied to the present invention Diagram showing the overall configuration of the unified health and medical information management system according to the present invention
  • a diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 1 A diagram showing the hardware configuration of the health and medical related information unified management system in Embodiment 1 Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 1
  • a diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 1 Diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 1 Diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 2 Diagram showing the hardware configuration of the health and medical related information unified management system in Embodiment 2 Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 2 Diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 3
  • FIG. 1 is a diagram showing a hardware configuration applied to the present invention.
  • the present invention is an invention that basically utilizes an electronic computer, but it is also realized by software, hardware, and cooperation between software and hardware.
  • the hardware that realizes all or part of each component of the present invention is comprised of the basic components of a computer, such as a CPU, memory, bus, input/output devices, various peripheral devices, and a user interface.
  • Various peripheral devices include storage devices, interfaces such as the Internet, devices such as the Internet, displays, keyboards, mice, speakers, cameras, videos, televisions, and various sensors (flow rate sensors, , temperature sensor, weight sensor, liquid level sensor, infrared sensor, shipment counting machine, packaging counting machine, foreign object inspection device, defective product counting machine, radiation inspection device, surface condition inspection device, circuit inspection device, human sensor, Devices for understanding worker work status (video, ID, PC workload, etc.), CD devices, DVD devices, Blu-ray devices, USB memory, USB memory interfaces, removable hard disks, general hard disks, projector devices, This includes SSDs, telephones, faxes, copy machines, printing devices, movie editing devices, various sensor devices, etc.
  • sensors flow rate sensors, , temperature sensor, weight sensor, liquid level sensor, infrared sensor, shipment counting machine, packaging counting machine, foreign object inspection device, defective product counting machine, radiation inspection device, surface condition inspection device, circuit inspection device, human sensor, Devices for understanding worker work status (video, ID, PC workload, etc.),
  • the present system does not necessarily need to be configured by one housing, but may be configured by connecting multiple housings through communication.
  • the communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, or ultrasonic communication, and furthermore, some of the communication may be located across national borders.
  • each of the plurality of cases may be operated by a different entity, or may be operated by one entity. It does not matter whether the system of the present invention is operated by a single entity or a plurality of entities.
  • the invention can also be configured as a system including a terminal used by a third party, and a terminal used by another third party. Furthermore, these terminals may be installed across national borders.
  • devices used for registering related information of third parties, related persons, and devices used for databases for recording registration contents may also be prepared. good. These may be provided in the present system, or may be provided outside the present system and the present system may be configured so that these information can be used.
  • a computer is configured on a motherboard, including a chipset, CPU, nonvolatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, and a real-time clock. Consists of etc. These operate in cooperation with an operating system, device drivers (for embedding various interfaces such as USB and HDMI (registered trademark), and various devices such as cameras, microphones, speakers or headphones, and displays), various programs, and the like. Various programs and various data constituting the present invention are configured to efficiently utilize these hardware resources to execute various processes. ⁇ Chip set ⁇
  • a "chip set” is a set of large-scale integrated circuits (LSI) that are mounted on a computer's motherboard and integrate a bridge function, which is a communication function between the CPU's external bus and a standard bus that connects memory and peripheral devices. .
  • LSI large-scale integrated circuits
  • a north bridge is provided on the side closer to the CPU and main memory, and a south bridge is provided on the side that is far away and interfaces with relatively low-speed external I/O.
  • the northbridge includes a CPU interface, memory controller, and graphics interface. Most of the functions of a conventional northbridge may be performed by the CPU.
  • the northbridge is connected to a memory slot of the main memory via a memory bus, and is connected to a graphics card slot of a graphics card via a high-speed graphics bus (AGP, PCI Express).
  • AGP high-speed graphics bus
  • the south bridge is connected to a PCI interface (PCI slot) via a PCI bus, and is responsible for I/O functions and sound functions with ATA (SATA) interface, USB interface, Ethernet interface, etc.
  • PCI interface PCI slot
  • Incorporating circuits to support PS/2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses that do not require or are not possible to operate at high speeds will hinder the speeding up of the chipset itself. Therefore, it may be separated from the south bridge chip and placed in another LSI called a super I/O chip.
  • a bus is used to connect the CPU (MPU) with peripheral devices and various control units.
  • the buses are connected by chipsets.
  • the memory bus used for connection with the main memory may alternatively have a channel structure in order to increase speed.
  • a serial bus or parallel bus can be used as the bus. Whereas a serial bus transfers data one bit at a time, a parallel bus bundles the original data itself or multiple bits extracted from the original data and simultaneously transmits them over multiple communication paths.
  • a dedicated line for clock signals is provided in parallel with the data line to synchronize data demodulation on the receiving side. It is also used as a bus to connect the CPU (chip set) and external devices, and includes GPIB, IDE/(parallel) ATA, SCSI, and PCI. Since there is a limit to speeding up, the data line may be a serial bus in PCI Express, an improved version of PCI, and Serial ATA, an improved version of parallel ATA.
  • the CPU sequentially reads, interprets, and executes a sequence of instructions called a program stored in the main memory, and outputs information consisting of signals to the main memory as well.
  • the CPU functions as the center for performing calculations within the computer.
  • a CPU is composed of a CPU core part that is the center of calculations and its peripheral parts, and inside the CPU there are registers, cache memory, an internal bus that connects the cache memory and the CPU core, a DMA controller, a timer, and a north bridge. This includes the connection bus and interface.
  • one CPU may include a plurality of CPU cores.
  • processing may be performed by a graphic interface (GPU) or FPU.
  • GPU graphic interface
  • FPU graphic interface
  • the basic structure of a hard disk drive consists of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted.
  • the external interface can be SATA (ATA in the past).
  • a sophisticated controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard drive, the controller can read sectors and transfer them to the other hard drive for writing. At this time, the memory of the host CPU is not accessed. Therefore, there is no need to increase the load on the CPU.
  • the CPU directly accesses and executes various programs on the main memory.
  • the main memory is a volatile memory, and DRAM is used.
  • the program on the main memory is expanded from the non-volatile memory onto the main memory in response to a program activation command. Thereafter, the CPU continues to execute the program according to various execution instructions and execution procedures within the program.
  • An operating system is used to manage the resources on a computer so that they can be used by applications, to manage various device drivers, and to manage the computer itself, which is hardware. Small computers sometimes use firmware as an operating system.
  • the BIOS causes the CPU to execute the steps to start up the computer's hardware and run the operating system, and is most typically the first piece of hardware that the CPU reads when it receives a computer startup command. .
  • the address of the operating system stored on the disk (non-volatile memory) is written here, and the operating system is sequentially loaded into the main memory by the BIOS loaded on the CPU and becomes operational.
  • the BIOS also has a check function that checks the presence or absence of various devices connected to the bus. The results of the check are stored in main memory and made available to the operating system as appropriate.
  • the BIOS may be configured to check external devices and the like. The above is the same in all embodiments.
  • the present invention can basically be configured by a general-purpose computer program and various devices.
  • a computer operates by loading a program stored in a non-volatile memory into the main memory, and executing the process using the main memory, CPU, and various devices. Communication with devices is performed via an interface connected to a bus line. Possible interfaces include a display interface, a keyboard, and a communication buffer. Embodiments of the present invention will be described below along with illustrated examples.
  • the present invention functions in cooperation with a computer, communication equipment, and software. Specifically, it is related to a unified health and medical information management system for accumulating and centrally managing health and medical information that is information related to personal health and medical care, and it is possible to collect and centrally manage health and medical information, which is information related to personal health and medical care.
  • Various information and data are exchanged between administrator terminals and the like using hardware resources. Therefore, from this point of view, if the claimed invention is judged based on the matters stated in the claims and specification, as well as the common general knowledge related to these matters, the claimed invention as a whole utilizes the laws of nature. This invention also falls under computer software-related inventions.
  • the effectiveness of an invention is defined as the possibility of providing a certain level of usefulness to the users who use the invention, and it is not sufficient to define the effectiveness of an invention as long as it has the potential to provide a certain level of usefulness to the users who use the invention. It should not be viewed from that perspective. Therefore, even if the effect that the user obtains from this system is a psychological effect, that effect itself is a phenomenon that is not subject to the required usability of natural laws.
  • Embodiments of the present invention will be described below with reference to the accompanying drawings. Note that the mutual relationship between the embodiments and the claims is as follows. Primarily, the description of Embodiment 1 relates to claims 1, 12 and 13, the description of Embodiment 2 relates to claim 2, the description of Embodiment 3 relates to claim 3, the description of Embodiment 4 relates to claim 4, The description of the fifth embodiment is related to claim 5, the description of the sixth embodiment is related to claim 6, the description of embodiment 7 is related to claim 7, and the description of embodiment 8 is related to claim 8.
  • the present invention should not be limited to these embodiments in any way, and may be implemented in various forms without departing from the spirit thereof.
  • FIG. 2a is a diagram showing an example of the overall configuration of the health and medical related information unified management system according to the present invention.
  • the unified health and medical information management system 200 includes electronic medical record information regarding individuals, various test information (which may include medical examinations, medical examinations, etc.), prescription information, drug history information, medication status information, and vital information (for example, body temperature, blood pressure, etc.).
  • the health and medical information storage unit 201 stores health and medical information including one or more pieces of information, and the health and medical information stored in the health and medical information storage unit 201 is disclosed to a third party via a network.
  • the health and medical related information unified management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, WAN, LAN, etc.). .
  • a network 205 for example, the Internet, WAN, LAN, etc.
  • the third party terminal 206 and the administrator terminal 207 are electronic devices (for example, a personal computer, a tablet terminal, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable or a WiFi router). , smartphone, etc.).
  • a "third party” refers to an individual (including, but not limited to, the patient himself/herself, his/her family, etc.), a medical worker, a non-medical worker, etc., which will be described later.
  • the term "administrator” may include a person (for example, an individual, or an institution, group, or corporation to which the individual belongs) who is responsible for managing and operating the entire health and medical information unified management system. This may also include employees of government offices and local governments, or institutions, organizations, and corporations commissioned by government offices and local governments. The user may also have the authority to perform deletion.
  • "electronic medical record information” includes, for example, basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height/weight, allergy information, smoking and drinking status). , medical history, etc.), medical examination information (e.g., patient's chief complaint (complaints about subjective symptoms and physical condition), various test results, medication information, diagnosis name, treatment policy, doctor's examination records, doctor's instructions, etc.) ), information related to nursing care and progress (e.g., vital information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), observation results, urine and Records of stool
  • instructions for treatments and surgeries, progress and results of treatments and surgeries, methods and results of pathological diagnoses, etc. may also be included.
  • "prescription information” includes, for example, insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablets, capsules). , liquids, powders, granules, etc.), the amount of medicine (amount to take at a time), the number of times you take it per day, the timing of taking it, information about switching to generic drugs, and the number of times you need to split the medication. You can.
  • “medication history information” includes, for example, the patient's name, date of birth, gender, My Number information, the symbol number of the insurance card, address, emergency contact information, the name of the insurance medical institution that prescribed the medicine, and the insurance physician.
  • the information may include the patient's intention regarding use, the status of information provided in the notebook, key points of medication guidance, and the name of the insurance pharmacist who provided the guidance.
  • dose status information includes, for example, information regarding the remaining amount of prescribed medicine (e.g., the amount of medicine remaining if the patient accidentally forgets to take it or does not intentionally take it). (including), timing information regarding visits to the hospital/office (e.g., the period required from the scheduled prescription end date (scheduled dosing end date) to the actual visit/office visit (for example, if you come to the hospital/office earlier than planned, patients' complaints about medication (for example, if you keep taking a certain medicine, you get hives, or if you take a certain medicine and it doesn't work). (including complaints about physical condition and subjective symptoms such as feeling light-headed and feeling light-headed).
  • information regarding the remaining amount of prescribed medicine e.g., the amount of medicine remaining if the patient accidentally forgets to take it or does not intentionally take it.
  • timing information regarding visits to the hospital/office e.g., the period required from the scheduled prescription end date (scheduled dosing end date) to the actual visit/office visit (for example, if
  • the "health and medical related information” may include, for example, PHR and the like.
  • PHR is an abbreviation that stands for Personal Health Record, and refers to information regarding personal health, medical care, and nursing care.
  • the aim is for each person to be able to receive excellent services that match their own health status by managing and utilizing information regarding their personal health, medical care, and nursing care in a chronological manner throughout their lifetime.
  • each citizen has recorded a large amount of health and medical information in paper media such as various notebooks and documents. The medium and location in which these records are kept differ depending on the life stage (milestone of life) at the time.
  • the present invention will be described on the assumption that the health and medical information storage unit 201 and the access control unit 202 are configured to function on the same server, the present invention is not limited to this, and they may be configured to function on separate servers. It may be configured to take on a function. Alternatively, a configuration may be adopted in which a plurality of servers are prepared, information and data are exchanged between the servers, and various functions can be executed in coordination or cooperation.
  • the health and medical information storage section 201 and the access control section 202 may be configured as a cloud server.
  • the present invention assumes that the health and medical information storage section 201, the access control section 202, and the incentive function section 204, which includes at least the incentive management section 203, are configured to function as separate servers.
  • the configuration is not limited to this, and the same server may be configured to perform the respective functions.
  • a configuration may be adopted in which a plurality of servers are prepared, information and data are exchanged between the servers, and various functions can be executed in coordination or cooperation.
  • the health and medical information storage unit 201, the access control unit 202, and the incentive function unit 204 may be configured as a cloud server.
  • This embodiment includes a health and medical information storage unit for accumulating and centrally managing health and medical information related to individuals, and a health and medical information storage unit that stores the health and medical information accumulated in the health and medical information storage unit through a network.
  • An access control section to control disclosure to third parties, and a system to provide incentives to individuals in order to promote the unified management of health and medical information regarding whether or not to disclose health and medical information related to individuals.
  • An incentive function section including at least an incentive management section.
  • FIG. 2b is a diagram showing the functional configuration of the health and medical related information unified management system according to the first embodiment.
  • This embodiment includes a health and medical information storage section, an access control section, and an incentive function section including at least an incentive management section.
  • the “health and medical information storage unit” 201 stores electronic medical record information related to individuals, various test information (which may include medical examinations, medical examinations, etc.), prescription information, drug history information, medication status information, vital information (for example, body temperature, Blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial oxygen saturation, electroencephalogram, electrocardiogram, number of steps, breathing rate, heart sounds, urine measurement information (e.g., urine sugar, urine protein, urine occult blood, (including, but not limited to, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), information from medical questionnaires, data from health promotion apps, conversation data from interactive health promotion SNS, etc.
  • test information which may include medical examinations, medical examinations, etc.
  • prescription information for example, body temperature, Blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial oxygen saturation, electroencephalogram, electrocardiogram, number of steps, breathing
  • the device is configured to have a function of accumulating health and medical related information including one or more of the above information.
  • "Electronic medical record information" includes, for example, basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height/weight, allergy information, smoking and drinking status, medical history) ), medical examination information (e.g., patient's chief complaint (complaints about subjective symptoms and physical condition), various test results, medication information, diagnosis name, treatment policy, doctor's examination records, doctor's instructions, etc.), nursing care and information regarding progress (e.g., vital information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds, urine) Measurement information (e.g., urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, n
  • information about the test e.g., test instructions, test results, some images obtained from an imaging test, reports for those images, etc.
  • information about the procedure and Information regarding surgery e.g. instructions for treatment or surgery, progress and results of treatment or surgery, method and results of pathological diagnosis, etc.
  • information regarding medicines e.g. instructions for drug discovery, date and time of administration, etc.
  • the information is configured to include information on information such as medical information, drugs, medication results, etc.), post-treatment or post-surgery follow-up information, etc.
  • Prescription information includes, for example, insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablets, capsules, liquid, etc.) It is structured to include information such as the amount of medicine (powders, granules, etc.), the amount of medicine (amount to take at a time), the number of times to take the medicine per day, the timing of taking it, information about switching to generic drugs, and the number of times to split the medication.
  • Medical history information includes, for example, the patient's name, date of birth, gender, My Number information, the symbol number of the insurance card, address, emergency contact information, the name of the insurance medical institution that prescribed the medicine, and the name and prescription of the insurance doctor.
  • Dose status information includes, for example, information regarding the remaining amount of prescribed medicine (for example, the amount of medicine remaining if the patient accidentally forgets to take it or does not intentionally take it) , Timing information regarding visits to the hospital/office (e.g., the period required from the scheduled prescription end date (scheduled dosing end date) to the actual visit/office visit (e.g., if you come to the hospital/office earlier than planned, or when you come to the office earlier than planned) patients' complaints about medication (e.g., if you keep taking a certain medicine, you get hives, or if you take a certain medicine and it's too effective) It is desirable that the information is configured to include information regarding symptoms (including complaints about physical condition and subjective symptoms such as feeling dizzy and dizzy).
  • My Number information or the insured card number of the health insurance that the individual (user) subscribes to is used to identify the individual (user), and the health and medical information related to the individual is used.
  • Related information may be collected and accumulated in association with each other.
  • the "health and medical related information” may include, for example, PHR and the like.
  • PHR is an abbreviation that stands for Personal Health Record, and refers to information regarding personal health, medical care, and nursing care.
  • the aim is for each person to be able to receive excellent services that match their own health status by managing and utilizing information regarding their personal health, medical care, and nursing care in a chronological manner throughout their lifetime.
  • each citizen has recorded a large amount of health and medical information in paper media such as various notebooks and documents. The medium and location in which these records are kept differ depending on the life stage (milestone of life) at the time.
  • the "access control unit" 202 is configured to have a function of controlling disclosure of the health and medical information stored in the health and medical information storage unit to a third party via the network. For example, as described below, for access from a third party terminal, there is a function to analyze IP packets, a function to determine the destination IP address, a function to obtain the access ID/user ID, access subject/user attributes, etc. It is desirable to have a configuration that has the function of acquiring the information and the function of performing access control based on these.
  • the "incentive management unit" 204 is configured to have a function of providing incentives to individuals in order to promote unified management of health and medical information regarding whether or not to disclose personal health and medical information.
  • FIG. 2e is a diagram illustrating an example of the functional configuration of the health and medical related information unified management system according to the first embodiment.
  • the incentive will be linked to the individual (user) who has accessed using a third party terminal, that is, the individual (user) who owns My Number information "123456789012", and which health and medical related information will be given an incentive.
  • Information indicating whether or not the individual has consented to the provision of information is stored and managed in a list format.
  • the health and medical information will be allowed to be disclosed to a third party, that is, an incentive will be given. In the case of disagreement, the health and medical information will not be disclosed to third parties, that is, no incentives will be given. It is desirable that information regarding these incentives be kept up-to-date by the incentive management department regularly communicating with the health and medical information storage department. For example, in the case of FIG. 2e, it is stored and managed whether or not the individual has consented to each piece of health and medical related information. The " ⁇ " mark indicates the individual's consent. If you click, touch, or tap the display item listed in the health and medical information field (for example, "regular medical checkup results") on the terminal screen, more detailed information will appear on a pop-up screen or other transition screen.
  • the date and time of consent or disagreement may be displayed on a pop-up screen.
  • health and medical related information marked with a " ⁇ " mark in the consent column be stored and managed in association with incentives to be described later. Note that health and medical information for which there is no mark in the consent or non-consent column indicates that the individual (user) has not yet expressed consent or non-consent.
  • the "incentive function unit” 205 includes at least the “incentive management unit” 204, and has functions such as a function to control access to information regarding incentives, a function to obtain consent information, a function to process incentives, etc., as described later. It is composed of FIG. 2e is a diagram illustrating an example of the functional configuration of the health care-related information unified management system according to the first embodiment.
  • the incentive function section allows access when the individual enters My Number information and password information in the corresponding fields and matching information exists in the system.
  • the explanation is based on a method in which the user directly inputs the information, but for example, if the user uses a smartphone, they can use the smartphone's IC card reading function to insert the My Number card into the smartphone. It may also be possible to automatically read and input predetermined information such as My Number information by holding it up. For example, if you fail to enter your My Number information and/or password information three times in a row, it will become locked and you will be asked to go to the local government (municipal office, etc.) and have it unlocked. You may also do so. Alternatively, the terminal may be temporarily locked and a warning such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or warning sound. .
  • the information be stored and managed in such a way that it can be easily determined which healthcare-related information an individual (user) has consented to or not.
  • incentive processing it is desirable to be configured to process how much incentive to give to health and medical related information to which the user has consented. For example, in the example shown in FIG. 2e, 100p (points) is calculated and awarded based on a predetermined calculation rule for health and medical related information regarding one individual.
  • weighting processing is performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical information, and different incentives are calculated for each health and medical information. It may also be processed to give.
  • infectious diseases including malignant neoplasms (cancer), which is the leading cause of death in Japan, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, and new coronavirus infections, which have a large number of patients.
  • cancer malignant neoplasms
  • ⁇ Treatment Control Act'' and unique diseases with few cases worldwide it should be considered that the disclosure of health and medical information to third parties can greatly contribute to the advancement of medicine. For example, calculation rules could be set to provide more (higher) incentives than for other diseases.
  • ⁇ incentive'' simply means ⁇ motivation or reward,'' and it means intentionally providing stimulation with the aim of getting someone to take some action.
  • “incentives” include, in addition to the points mentioned above, individual information services and general information services for information providers, provision of individual drugs and supplements, provision of books and other products, and provision of information. Provision of passwords and IDs for various purposes, provision of items that can be used on the network, provision of rights, for example, provision of the right to receive a medical examination, provision of the right to receive a diagnosis, provision of the right to undergo a test, provision of various items on the network This may include providing the right to receive services, providing specific software (e.g., a health management app), providing points for prepaid or postpaid electronic money, providing product coupons, travel coupons, or cash. good.
  • specific software e.g., a health management app
  • providing points for prepaid or postpaid electronic money providing product coupons, travel coupons, or cash. good.
  • the disclosure permission information indicating whether or not to permit disclosure to a third party is already stored and managed in relation to health and medical related information regarding an individual, or when the individual (user) It can be applied in any case where health and medical information related to oneself is newly registered in the health and medical information storage unit, and the disclosure permission information has not yet been associated and stored and managed.
  • health and medical information related to individuals is not held within the unified health and medical information management system, for example, personal health and medical information is held on terminals owned by individuals, and this information cannot be directly accessed.
  • incentives will be given according to the results.
  • the incentive function unit can be configured to function in the following manner.
  • the access control unit of the present system may be configured so as not to deny access to view health and medical information from a third party. However, it may be configured to partially deny or restrict access depending on the type or qualification of the third party.
  • uploading personal health and medical information to this system may be a transfer, and the source of the transfer may not be an individual's terminal but a system that stores other health and medical information.
  • health and medical-related information stored in maternal and child health record information servers, PHRs (Personal Health Records), nursing care information servers, dental care information servers, rehabilitation information servers, etc. can be transferred to this system with the consent of individuals. It can be configured to be forwarded.
  • the incentive function section can be configured to function when personal health and medical information is uploaded from the maternal and child handbook information server and the formal check is completed.
  • FIG. 2c is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 211 that performs various calculation processes, and a “main memory” 212. It also includes a “nonvolatile memory” 213 that holds predetermined information, and a "network I/F (interface)” 214 that sends and receives information to and from a plurality of third party terminals 216 and an administrator terminal 217.
  • These devices are interconnected by a data communication path such as a “bus” 215, and transmit, receive, and process information.
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the “main memory” and “nonvolatile memory,” and programs executed by the “CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the programs stored in the "main memory” include a health and medical information storage program, an access control program, an incentive management program, and the like.
  • the "main memory” and “nonvolatile memory” store health and medical related information, incentive management information, etc.
  • the "CPU” executes the health and medical information storage program stored in the "main memory” and collects health and medical information related to the individual sent from a third party terminal through the "network I/F", for example.
  • electronic medical record information various test information, prescription information, medication history information, medication status information, vital information (e.g. body temperature, blood pressure, heart rate, etc.) and other health and medical related information is stored in “main memory” and “non-volatile memory”.
  • Store in It also executes an access control program stored in the "main memory” to control access to health and medical related information about the individual.
  • the incentive management program stored in the "main memory” is executed to grant and manage incentives for the individual's desired health and medical information, and the information regarding those incentives is stored in the "main memory”. and stored in "non-volatile memory”.
  • FIG. 2d is a diagram showing the flow of processing when the unified health and medical information management system in this embodiment is used.
  • this processing method includes a health and medical information storage step S221, an access control step S222, and an incentive management step S223.
  • These processing methods involve a health and medical information storage unit that accumulates and centrally manages health and medical information related to individuals, and a health and medical information storage unit that stores the health and medical information stored in the health and medical information storage unit through a network.
  • incentives to individuals in order to promote the unified management of health and medical information regarding the access control section to control disclosure to third parties and whether or not to disclose health and medical information related to individuals.
  • an incentive function unit including at least an incentive management unit.
  • Health and medical related information accumulation step S221 refers to health and medical related information about an individual sent from a third party terminal via a network, such as electronic medical record information, various test information, prescription information, drug history information, etc. This is the stage of accumulating medication status information, vital information (for example, body temperature, blood pressure, heart rate, etc.).
  • Access control step S222 is a step of controlling access to the health and medical information related to the individual stored in the health and medical information storage unit.
  • “Incentive management step” S223 is a stage in which incentives are given and managed for the health and medical related information desired by the individual.
  • the present invention provides a unified health and medical information management system that provides incentives to individuals in order to promote unified management of health and medical information regarding whether or not to disclose health and medical information related to individuals. I can do it.
  • the present invention increases the opportunity for individuals to disclose health and medical information to third parties by providing incentives to individuals and allowing them to disclose their health and medical information to third parties. This will lead to a reduction in national medical costs, improve the health of the entire population, and reduce the time and costs spent on drug discovery by research institutions and pharmaceutical companies, ultimately contributing to the advancement of medicine. can.
  • drug discovery refers to the process by which compounds and chemical substances (also called seeds) that form the basis of pharmaceuticals are turned into products and sold.
  • steps (1) to (5) are essential before a compound or chemical substance can be sold as a drug.
  • Select candidates for drug discovery targets compounds/chemical substances
  • Select candidate substances that will become the basis for pharmaceuticals by screening their effects.
  • There are various types such as high-efficiency screening that utilizes AI robot technology and AI robot technology.
  • Animal experiments Detailed investigation and confirmation of safety and effectiveness using animals or cultured cells. Drugs whose safety and effectiveness have been confirmed at this stage are called ⁇ investigational drugs.'' (4) Clinical trial The investigational drug is actually used on humans to investigate its effectiveness and safety in detail, and to confirm whether it is useful for actual treatment.
  • Approval application and review Drugs that have passed all tests (1) to (4) above are submitted to the Ministry of Health, Labor and Welfare.
  • drug discovery is said to take approximately 10 to 18 years, and the probability that a compound or chemical substance will become a new drug is approximately 1 in 10,000. Furthermore, the total cost for successful drug discovery is said to be close to 20 billion yen.
  • this embodiment includes an access authentication processing unit that performs access authentication from a third party terminal via a network to the incentive function unit of the health and medical information unified management system. It has characteristics. From now on, descriptions of functions, hardware configurations, and processing flows that overlap those of the first embodiment will be omitted as appropriate.
  • FIG. 3a is a diagram illustrating the functional configuration of a unified health and medical information management system.
  • an "access authentication processing unit" 301 is included in the incentive function unit and is configured to have a function of authenticating whether or not to permit access by an individual to the incentive management unit. be done.
  • FIG. 11a is a diagram showing an example of a user interface in the health and medical related information unified management system of the present invention.
  • a third party terminal accesses the health and medical information unified management system using a web browser.
  • the user (individual) enters his/her own My Number information and password information in the corresponding fields, and if matching information exists in the system, access is permitted.
  • the user inputs the information directly, but if the user uses a smartphone, for example, the user can use the smartphone's IC card reading function to insert the My Number card into the smartphone.
  • It may also be a format in which predetermined information such as My Number information is automatically read and input by holding it up. For example, if you fail to enter your My Number information and/or password information three times in a row, it will become locked and you will be asked to go to the local government (city, ward, town, or village office, etc.) and have it unlocked. You may also do so.
  • the terminal may be temporarily locked and a warning such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or warning sound. .
  • FIG. 3b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 311 that performs various calculation processes and a “main memory” 312. It also includes a “nonvolatile memory” 313 that holds predetermined information, and a "network I/F (interface)” 314 that sends and receives information to and from a plurality of third party terminals 316 and an administrator terminal 317.
  • These devices are interconnected by a data communication path such as a “bus” 315, and transmit, receive, and process information.
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the “main memory” and “nonvolatile memory,” and programs executed by the “CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the program stored in the "main memory” is an access authentication processing program.
  • "main memory” and “nonvolatile memory” store My Number information, password information, etc.
  • the "CPU” executes the access authentication processing program stored in the "main memory” and accepts input of My Number information and password information sent from third-party terminals through the "network I/F". , authenticate whether matching information exists.
  • My Number information and password information are stored in “main memory” and “nonvolatile memory.”
  • FIG. 3c is a diagram showing the flow of processing when the unified health and medical information management system in this embodiment is used. As shown in the figure, this processing method consists of access authentication processing step S301.
  • Access authentication processing step S301 is a step in which input of My Number information and password information regarding the user sent from a third party terminal is accepted, and it is authenticated whether matching information exists in the system.
  • ⁇ Summary> access to incentive-related information can be restricted to the individual (user) by first performing access authentication on the login screen of the unified health and medical information management system.
  • the present embodiment includes a consent information acquisition section that acquires consent information that is information indicating consent to accept an incentive provided by the incentive management section. From now on, descriptions of functions, hardware configurations, and processing flows that overlap those of Embodiments 1 and 2 will be omitted as appropriate.
  • FIG. 4a is a diagram showing the functional configuration of the health and medical related information unified management system.
  • the "consent information acquisition unit” 402 is included in the incentive function unit, and after being authenticated by the access authentication processing unit 401, the “consent information acquisition unit” 402 receives information indicating consent to accept the incentive from the incentive management unit. It is configured to have a function to obtain consent information.
  • FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • FIG. 11c is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • a user interface such as a check box is prepared in the consent or disagreement field, and by clicking, touching, or tapping it, a " ⁇ " mark is added, and the user (individual) ) It is preferable to accept the intention of accepting or not accepting the incentive.
  • FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen.
  • the OK button corresponding to "(B) Viewing process"
  • a screen transitions to a screen where the relationship between health and medical related information regarding the individual (user) and the granted incentive can be viewed.
  • FIG. 11d is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • FIG. 11f is a diagram showing an example of a user interface in the health and medical related information unified management system of the present invention.
  • the health and medical related information of the individual concerned and the corresponding consent/non-consent status in an easy-to-understand manner, such as in a list format.
  • individuals (users) can enter a " ⁇ " mark in the check box format consent/disagree column and click the OK button. By clicking, touching, or tapping, the granting of incentives, etc. is processed.
  • individuals (users) may review it as appropriate and change the information from consent to non-consent, for example.
  • the update process can be performed by changing from disapproval to consent and clicking, touching or tapping the OK button. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen in FIG. 11b.
  • FIG. 4b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 411 that performs various calculation processes, and a “main memory” 412. It also includes a “nonvolatile memory” 413 that holds predetermined information, and a “network I/F (interface)” 414 that sends and receives information to and from a plurality of third party terminals 416 and an administrator terminal 417.
  • These devices are connected to each other by a data communication path such as a “bus” 415, and transmit, receive, and process information.
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the “main memory” and “nonvolatile memory,” and programs executed by the “CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the programs stored in the "main memory” are an access authentication processing program and a consent information acquisition program. Additionally, the "main memory” and “nonvolatile memory” store My Number information, password information, consent information, etc.
  • the "CPU” executes the access authentication processing program stored in the "main memory” and accepts input of My Number information and password information sent from third-party terminals through the "network I/F”. , authenticate whether matching information exists.
  • My Number information and password information are stored in “main memory” and “nonvolatile memory.”
  • the "CPU” executes the consent information acquisition program stored in the “main memory” and collects each individual's (use consent information indicating the intention of the person) is obtained. Additionally, consent information is stored in “main memory” or “nonvolatile memory.”
  • FIG. 4c is a diagram showing the flow of processing when the unified health and medical information management system in this embodiment is used. As shown in the figure, this processing method consists of an access authentication processing step S401 and a consent information acquisition step S402.
  • Acquisition of consent information step S402 is a step of acquiring consent information, which is information indicating consent to accept an incentive from the incentive management unit, after being authenticated in the access authentication processing step.
  • consent information which is information indicating consent to accept an incentive, can be acquired from health and medical related information regarding an individual (user).
  • this embodiment includes an incentive processing unit for performing incentive processing, which is processing for providing incentives when consent information is acquired by the consent information acquisition unit.
  • FIG. 5a is a diagram showing the functional configuration of the health and medical related information unified management system.
  • the "incentive processing unit” 503 is included in the incentive function unit and has a function of performing incentive processing to provide an incentive when consent information is acquired by the consent information acquisition unit. It is configured as follows.
  • FIG. 11d is a diagram showing an example of a user interface in the health care related information unified management system of the present invention. In this case, based on predetermined calculation rules, the information will be automatically granted to health and medical related information marked with a " ⁇ " in the consent column to indicate permission for disclosure. This shows that the necessary incentives have been calculated and granted.
  • 100 points are calculated and assigned based on a predetermined calculation rule for health and medical related information regarding one individual.
  • weighting processing is performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical information, and different incentives are calculated for each health and medical information. It may also be processed to give.
  • infectious diseases including malignant neoplasms (cancer), which is the leading cause of death in Japan, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, and new coronavirus infections, which have a large number of patients.
  • ⁇ incentive'' simply means ⁇ motivation or reward,'' and it means intentionally providing stimulation with the aim of getting someone to take some action.
  • incentives include, in addition to the points mentioned above, individual information services and general information services for information providers, provision of individual drugs and supplements, provision of books and other products, and provision of information.
  • Provision of passwords and IDs for various purposes provision of items that can be used on the network, provision of rights, for example, provision of the right to receive a medical examination, provision of the right to receive a diagnosis, provision of the right to undergo a test, provision of various items on the network
  • This may include providing the right to receive services, providing specific software (e.g., a health management app), providing points for prepaid or postpaid electronic money, providing product coupons, travel coupons, or cash. good.
  • the disclosure permission information indicating whether or not to permit disclosure to a third party is already stored and managed in relation to health and medical related information regarding an individual, or when the individual (user) It can be applied in any case where health and medical information related to oneself is newly registered in the health and medical information storage unit, and the disclosure permission information has not yet been associated and stored and managed.
  • health and medical information related to individuals is not held within the unified health and medical information management system, for example, personal health and medical information is held on terminals owned by individuals, and this information cannot be directly accessed.
  • incentives will be given according to the results.
  • the incentive function section described above can be configured to function.
  • the access control unit of the present system may be configured so as not to deny access to view health and medical information from a third party. However, it may be configured to partially deny or restrict access depending on the type or qualification of the third party.
  • uploading personal health and medical information to this system may be a transfer, and the source of the transfer may not be an individual's terminal but a system that stores other health and medical information.
  • health and medical information stored in maternal and child health record information servers, PHRs (Personal Health Records), nursing care information servers, dental care information servers, rehabilitation information servers, etc. can be transferred to this system with the individual's consent. It can be configured to be forwarded.
  • FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen.
  • the OK button corresponding to "(B) Viewing process
  • a screen transitions to a screen where the relationship between health and medical related information regarding the individual (user) and the granted incentive can be viewed.
  • FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen.
  • clicking, touching, or tapping the OK button corresponding to "(B) Viewing process” a screen transitions to a screen where the relationship between health and medical related information regarding the individual (user) and the
  • FIG. 11d is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • FIG. 11f is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
  • the health and medical related information of the individual concerned and the corresponding consent/non-consent status in an easy-to-understand manner, such as in a list format.
  • individuals can enter a " ⁇ " mark in the check box format consent/disagree column and click the OK button. By clicking, touching, or tapping, the granting of incentives, etc. is processed.
  • FIG. 5b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 511 that performs various calculation processes, and a “main memory” 512. It also includes a “nonvolatile memory” 513 that holds predetermined information, and a “network I/F (interface)” 514 that sends and receives information to and from a plurality of third party terminals 516 and an administrator terminal 517.
  • These devices are connected to each other by a data communication path such as a “bus” 515, and transmit, receive, and process information.
  • a data communication path such as a “bus” 515
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the “main memory” and “nonvolatile memory,” and programs executed by the “CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the programs stored in the "main memory” are an access authentication processing program, a consent information acquisition program, and an incentive processing program. Additionally, the "main memory” and “nonvolatile memory” store My Number information, password information, consent information, incentive information, etc.
  • the "CPU” executes the access authentication processing program stored in the "main memory” and accepts input of My Number information and password information sent from third-party terminals through the "network I/F". , authenticate whether matching information exists.
  • My Number information and password information are stored in “main memory” and “nonvolatile memory.”
  • the "CPU” executes the consent information acquisition program stored in the “main memory” and collects each individual's (usage consent information indicating the intention of the person) is obtained.
  • consent information is stored in “main memory” or “nonvolatile memory.”
  • the "CPU” executes the incentive processing program stored in the "main memory” to provide an incentive, which is a process for providing incentives when consent is obtained for health and medical information related to individuals. Perform processing.
  • FIG. 5c is a diagram showing the flow of processing when the unified health and medical information management system according to this embodiment is used. As shown in the figure, this processing method includes an access authentication processing step S501, a consent information acquisition step S502, and an incentive processing step S503.
  • “Incentive processing step” S503 is a step of executing incentive processing, which is processing for providing incentives, when consent information is obtained by the consent information obtaining unit.
  • incentive processing is a process for providing incentives, with respect to health and medical related information regarding an individual (user) when the user has consented, and to provide health and medical information related to the individual.
  • Appropriate incentive processing can be applied to related information.
  • Embodiments 1 to 4 includes a health and medical information storage section that stores health and medical information related to individuals, and a network for the health and medical information stored in the health and medical information storage section. and an access control unit for allowing a third party to access the IP packet, and the access control unit includes IP packet analysis means for analyzing an IP packet sent via the network, and an IP header section of the IP packet.
  • a destination IP address determination means for extracting a destination IP address from the source and determining whether or not the destination IP address is addressed to the user's own health and medical information unified management system; an access ID/user ID acquisition means for acquiring an access ID indicating an access subject and a user ID indicating a user belonging to the access subject from the IP payload when the IP address is an IP address; an access subject user attribute acquisition means for acquiring corresponding access subject information, user information, and user attribute information (here, information indicating whether the user is a medical worker or a non-medical worker); , access control means that controls access to health and medical information from third parties, and disclosure permission information storage that holds disclosure permission information that indicates whether or not to permit disclosure of personal health and medical information to third parties.
  • We provide a unified management system for health and medical information including: Note that descriptions of functions, hardware configurations, and processing flows similar to those of Embodiments 1 to 4 will be omitted as appropriate.
  • FIG. 6a is a diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 5.
  • the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID/user ID acquisition means, an access subject user attribute acquisition means, an access control means, and disclosure permission information. It is equipped with a holding part.
  • IP packet analysis means of access control unit The "IP packet analysis means" 601 is configured to have a function of analyzing IP packets sent via a network (particularly, the Internet). Generally, an IP packet is composed of an IP header section and an IP payload section, and various information and data are stored therein. The "IP packet analysis means" 601 has the role of analyzing and examining what kind of information and data are included in them.
  • the "destination IP address determination means" 602 has a function of extracting the destination IP address from the header of the sent IP packet and determining whether the IP address is addressed to the own health and medical information unified management system. configured to have.
  • an IP packet includes at least a source IP address representing a source and a destination IP address representing a destination in an IP header section.
  • "Destination IP address determination means" 602 refers to the destination IP address extracted from the IP header section and determines whether or not the IP packet is sent to its own health and medical related information unified management system, If it is determined that the message was sent to the user, the process proceeds to the next step. Note that if it is determined that the IP packet is not addressed to itself, it ignores the IP packet and takes no further action.
  • Access ID/user ID acquisition means of access control unit> "Access ID/User ID acquisition means" 603 is an access ID/user ID acquisition means that is used to identify the accessing entity stored in the IP payload when it is determined that the IP packet has been sent to the user's health and medical information unified management system.
  • the access ID is configured to have a function of extracting and acquiring an access ID indicating the access ID and a user ID indicating the user belonging to the access subject.
  • Access subject user attribute acquisition means of access control unit> includes access subject information corresponding to the access ID and user ID, user information belonging to the access subject, and user attribute information for the user (here, if the user The device is configured to have a function of acquiring information indicating whether the person is a medical worker or a non-medical worker.
  • the access subject information is information specifically representing the access subject, and is represented by a name such as "Edogawa Central Hospital” or "Edogawa Pharmaceutical", for example.
  • the user information is information that specifically represents the employee who belongs to the accessing entity, such as "Ichiro Suzuki” who is an employee who belongs to "Edogawa Central Hospital” or an employee who belongs to "Edogawa Pharmaceutical”. It is expressed by names such as ⁇ Fumiko Maeda'', which is a member of the group.
  • user attribute information is associated with user information and is attribute information indicating whether the user is a medical worker or a non-medical worker. '' (abbreviated as ⁇ medical care'') and ⁇ non-medical personnel'' (abbreviated as ⁇ non-medical care').
  • “medical workers” are at least doctors, dentists, pharmacists, public health nurses, midwives, nurses, associate nurses, physical therapists, occupational therapists, orthoptists, speech therapists, and prosthetics and orthotics.
  • family medical personnel e.g., family doctors, family pharmacists, family dentists
  • the role is very important: to have access to personal health and medical information stored in the health and medical information repository, and to be authorized to edit, add, and delete health and medical information as appropriate and necessary.
  • a "family doctor” is someone you can talk to about anything, is familiar with the latest medical information, can refer you to specialists and specialized medical institutions when necessary, and is a familiar and reliable general practitioner who is responsible for local medical care, health, and welfare. This refers to a doctor who has a certain level of ability.
  • a "family pharmacist” has the following functions: (1) one pharmacist manages the medication status of one patient in one pharmacy, and continues to do so (for example, to ensure that medicines are administered safely and securely); In order to encourage patients to use the drugs, we collect information on the drugs patients are using, such as prescription drugs and over-the-counter drugs, in one place, check for duplication of drugs and combinations of drugs, check whether the drugs are working, and whether there are any side effects. (2) A function that provides 24-hour support and visits patients at their homes to provide home medical care (for example, even outside of pharmacy opening hours, such as on holidays or at night, we provide telephone support).
  • a "family dentist” not only provides safe and secure dental care, but also has a wide range of knowledge and insight related to medical care and nursing care, and aims to maintain and improve the oral function of local residents throughout their lives.
  • dentists who can fulfill their responsibilities as a person who plays a role in local medical care.
  • a "family dentist” (1) provides appropriate dental treatment and health guidance for continuous management and prevention of aggravation according to life stages from infancy to old age, and maintains and improves oral and systemic health.
  • non-medical workers include at least life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, gyms, banks, credit unions, JA ( Agricultural cooperatives), health insurance associations, Kenpo associations, mutual aid associations, municipal national health insurance associations, public relations companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers , employees of public offices, local governments, independent administrative agencies, etc. are preferably included.
  • the "access control means" 605 is configured to have a function of controlling access when a third party accesses the health and medical information storage unit via the network.
  • FIG. 6b is a diagram illustrating an example of the functional configuration of the health and medical related information unified management system in this embodiment.
  • the IP packet analysis means analyzes the sent IP packet 608 to find out what information and data it contains. For example, it is analyzed and checked to see if the IP header section of the IP packet contains a source IP address and a destination IP address.
  • the destination IP address determination means extracts the destination IP address included in the sent IP packet 608, and determines whether it is addressed to the own health and medical related information unified management system.
  • the access control unit 609 stores an IP address table 610, and refers to the table to determine whether or not the address is for the own health and medical related information unified management system.
  • the access ID/user ID acquisition means determines the access information stored in the IP payload of the IP packet.
  • the access ID indicating the subject and the user ID indicating the user belonging to the access subject are extracted and obtained.
  • the access subject user attribute acquisition means obtains access subject information, user information, and user attribute information from the extracted access ID and user ID.
  • the access control unit 609 stores an access ID/user ID table 611, and refers to the table to obtain specific access subject information, user information, and user attribute information.
  • the access ID is "A0001”
  • the access subject information is "Edogawa Chuo Hospital”
  • the user ID is "C0001”
  • the user information is "Ichiro Suzuki”
  • the user attribute information is is a "medical worker.”
  • the access ID is "B0001”
  • the access subject information is "Edogawa Pharmaceutical”
  • the user information is "Fumiko Maeda”
  • the user attribute information is " Non-medical workers”.
  • the access control means allows the viewing range of healthcare-related information to vary depending on whether the third party is a medical professional or a non-medical professional. For example, if the user belonging to the third-party access entity (in this case, "Edogawa Central Hospital”) is "Ichiro Suzuki" and his attribute information is "medical worker," then All medical related information can be viewed.
  • the user belonging to the third party accessing entity in this case, "Edogawa Pharmaceutical” is "Fumiko Maeda" and her attribute information is "non-medical worker," It is possible to view part (including all) of health and medical related information related to the above, or health and medical related information that has been anonymized using a predetermined anonymization method described below. In this way, it is possible to determine who a third party user is and whether their attribute information is a "medical worker” or “non-medical worker", thereby providing information on the health and medical care of an individual. It becomes possible to change the viewing range of related information.
  • these tables mentioned above allow the administrator responsible for managing and operating the unified health and medical information management system to register, edit, and delete information using an administrator terminal.
  • the access subject information, user information, and user attribute information ("medical worker" or “non-medical worker") are also associated with third party identification information, which will be described later.
  • the "disclosure permission information holding unit" 606 determines whether or not to disclose the health and medical information of the individual to a third party who has accessed the health and medical information related to the individual via the network. It is configured to have a function of holding disclosure permission information indicating whether the Specifically, a third-party terminal 206 as shown in FIG. 2b issues a "permission to publish” or “refuse to publish” to the access control unit 202 of the healthcare-related information unified management system 200 via the network 205. It is desirable that the system be configured so that the information displayed can be set according to the individual's will.
  • the disclosure permission/denial information may be such that it can be set whether or not to disclose a predetermined group of health and medical related information. For example, among medical departments, health and medical information related to internal medicine may be set to "disclosure permission," while health and medical information related to psychiatry may be set to "disclosure prohibited.”
  • the disclosure permission/denial information can be used in combination with third party identification information (described later) to determine whether the third party is a specific medical professional. It may also be possible to set them separately.
  • the third-party identifying information represents a "doctor”
  • the individual's health and medical information will be "permitted to be released”
  • the third-party identifying information represents a "doctor” person, accountant, etc.
  • FIG. 6c is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the access control unit in this embodiment includes a "CPU (central processing unit)" 621 that performs various calculation processes and a “main memory” 622. It also includes a “nonvolatile memory” 623 that holds predetermined information, and a “network I/F (interface)” 624 that sends and receives information to and from a plurality of third party terminals 626 and an administrator terminal 627. These devices are interconnected by a data communication path such as a “bus” 625, and transmit, receive, and process information.
  • a data communication path such as a “bus” 625
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the “main memory” and “nonvolatile memory,” and programs executed by the “CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the programs stored in the "main memory” include a health and medical information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID/user ID acquisition program, and an access subject user attribute acquisition program. program, disclosure permission information retention program, and access control program.
  • “main memory” and “nonvolatile memory” contain health and medical information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, disclosure permission information, etc. is stored.
  • the "CPU” executes the health and medical information storage program stored in the "main memory” and collects health and medical information related to the individual sent from a third party terminal through the "network I/F", for example.
  • electronic medical record information various test information, prescription information, drug history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.) and other health and medical related information is stored in the "main memory” and “nonvolatile memory.” It also executes an IP packet analysis program stored in the "main memory” to analyze IP packets sent via the network (particularly the Internet).
  • the destination IP address determination program stored in the "main memory” determines whether the destination IP address sent is the IP address for its own health and medical information sharing system, and then If it is determined that the IP address is the destination, the IP address is stored in "main memory” and "nonvolatile memory".
  • the access ID/user ID acquisition program stored in the "main memory” the access ID indicating the access subject stored in the IP payload of the sent IP packet and the access ID belonging to the access subject are stored in the IP payload of the sent IP packet.
  • the user ID indicating the user is extracted and acquired, and is stored in the "main memory” and “nonvolatile memory”.
  • the access subject user attribute acquisition program stored in the "main memory” is executed to obtain access subject information, user information, and user attribute information (here, user information) corresponding to the access ID and user ID. information indicating whether the person is a medical worker or a non-medical worker (e.g., “medical worker” or “non-medical worker"), as well as “main memory” ”.
  • the program executes the disclosure permission information retention program stored in the "main memory” to obtain disclosure permission information indicating whether or not to disclose personal health and medical information to a third party, and and stored in "non-volatile memory”. It also executes an access control program stored in the "main memory” to control access to health and medical information related to the individual.
  • FIG. 6d is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used.
  • a health and medical information accumulation step S601 an IP packet analysis step S602, a destination IP address determination step S603, an access ID/user ID acquisition step S604, and an access subject user attribute acquisition step S605
  • This processing method includes a disclosure permission information holding step S606, and an access control step S607.
  • Health and medical related information accumulation step S601 refers to health and medical related information regarding an individual sent from a third party terminal via a network, such as electronic medical record information, various test information, prescription information, drug history information, etc. This is the stage of accumulating vital information (for example, body temperature, blood pressure, heart rate, etc.).
  • IP packet analysis step S602 is a step in which an IP packet sent via a network (particularly the Internet) is analyzed.
  • Disposination IP address determination step S603 is a step in which the destination IP address is extracted from the IP header section of the IP packet and it is determined whether the IP address is addressed to the own health and medical related information unified management system.
  • Access ID/user ID acquisition step S604 refers to the access ID indicating the access subject from the IP payload and the This is the stage of acquiring a user ID indicating a user belonging to the .
  • Access subject user attribute acquisition step S605 refers to access subject information corresponding to the access ID and user ID, user information, and user attribute information (here, whether the user is a medical worker or This is the stage of acquiring information indicating whether the person is a non-medical worker (for example, “medical worker” or “non-medical worker”).
  • Disclosure permission/denial information retention step S606 is a step of holding disclosure permission/denial information indicating whether or not to permit disclosure of personal health and medical information to a third party.
  • Access control step S607 is a step in which access to the health and medical related information unified management system is controlled.
  • FIG. 7a is a diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 6. As shown in this figure, the present embodiment is characterized in that, in addition to the fifth embodiment, a third party identification information holding section is provided.
  • FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
  • the third party identification information holding unit by providing the third party identification information holding unit, it is possible to identify whether the third party is a medical worker or a non-medical worker.
  • FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
  • Embodiment 5 differences from Embodiment 5 will be mainly explained.
  • the “third party identification information holding unit” 707 determines whether a third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical professional or a non-medical professional. It is configured to have a function to hold third party identification information to identify whether the person is a medical worker.
  • the third party identification information is, for example, information created by combining 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information, health insurance card number, etc. may be used.
  • the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information (“medical worker” or “non-medical worker”). Further, the third party identification information may be registered, edited, and deleted by the above-mentioned administrator using an administrator terminal. Furthermore, due to the combination of the above-mentioned disclosure permission information and third party identification information, even if the disclosure permission information indicates "disclosure permission", if the third party is a specific medical professional, access may be prohibited. It may also be possible to make settings for cases in which permission is permitted and cases in which permission is not permitted.
  • the third-party identifier represents a "doctor,” it may allow access to healthcare-related information, but if the third-party identifier represents a (person in charge, etc.), it may be possible to disallow access to healthcare-related information. Also, for example, by adding information indicating the department to which the third party belongs to the third party identification information, it is possible to control permission or disallowance of access to healthcare-related information based on the information indicating the department to which the person belongs. Good too. In addition, for example, permission to access healthcare-related information may be granted based on information regarding the user's specialty identified by third-party identification information (e.g., the specialty and years of experience of a "doctor" or "nurse").
  • a person in charge of a PCR test who is a medical worker, transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by a patient himself.
  • the above-mentioned administrator uses the administrator terminal to register the combination of these information in the above-mentioned access control unit in advance in table format, etc., so that it can be edited or deleted as needed. It is possible to do so.
  • medical professionals include doctors, dentists, and pharmacists, and at least part of their third-party identification information includes the medical registration number written on the doctor's license (e.g.
  • the third party identification information may include at least a part of the number written on the qualification license.
  • the symbol and number including branch number
  • the user may be identified using third party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).
  • FIG. 7b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 721 that performs various calculation processes and a "main memory” 722. It also includes a "nonvolatile memory” 723 that holds predetermined information, and a "network I/F” 724 that sends and receives information to and from a third party terminal 726 and an administrator terminal 727. These devices are interconnected by a data communication path such as a “bus” 725, and transmit, receive, and process information.
  • a data communication path such as a “bus” 725
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the "main memory” and “nonvolatile memory,” and programs executed by the "CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the program in addition to the program stored in the "main memory” in the fifth embodiment, the program is a third party identification information holding program.
  • third party identification information and the like are stored in the "main memory” and “nonvolatile memory”.
  • the "CPU” executes the third party identification information holding program stored in the "main memory” and accesses the health and medical information stored in the health and medical information storage section via the network.
  • Third party identification information for identifying whether the three parties are medical workers or non-medical workers is stored in “main memory” and “nonvolatile memory.”
  • FIG. 7c is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used.
  • this processing method includes a third party identification information holding step S707.
  • “Third party identification information holding step” S707 means whether the third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical worker or This is the stage of retaining third-party identification information to identify non-medical personnel.
  • Embodiments 1 to 6 This embodiment is based on Embodiments 1 to 6, and the disclosure permission information held in the release permission information storage unit indicates permission to release, and the third party identification information held in the third party identification information storage unit is Provided is a health and medical related information unified management system that allows a medical professional to view health and medical related information accumulated in a health and medical related information storage unit when the person indicates that the person is a medical professional.
  • FIG. 8a is a diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 7. From now on, descriptions of functions, hardware configurations, and processing flows similar to those of the fifth and sixth embodiments will be omitted as appropriate.
  • FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
  • FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
  • the “disclosure permission/denial information holding unit” 806 holds disclosure permission/denial information indicating whether or not to disclose the health and medical information of the individual to a third party who has accessed the health and medical information related to the individual via the network. It is configured to have the function of Specifically, a third-party terminal 206 as shown in FIG. 2b issues "permission to publish” or “refuse to publish” to the access control unit 202 of the healthcare-related information unified management system 200 via the network 205. It is desirable that the information displayed be configured so that the information can be set according to the individual's will.
  • the disclosure permission/denial information may be such that it can be set whether or not to disclose a predetermined group of health and medical related information. For example, among medical departments, health and medical information related to internal medicine may be set to "disclosure permission," while health and medical information related to psychiatry may be set to "disclosure prohibited.”
  • the disclosure permission/denial information can be used in combination with the third party identification information described above to determine whether the third party is a specific medical professional, whether the disclosure is permitted or the disclosure is refused. It may also be possible to set them separately.
  • the third-party identifying information represents a "doctor”
  • the individual's health and medical information will be “permitted to be released” but on the other hand, if the third-party identifying information represents a "doctor,” the individual's health and medical information will be “permitted to be released,” but on the other hand, if the third-party identifying information represents a "doctor” person, accountant, etc.), it may be possible to ⁇ refuse disclosure'' of personal health and medical information.
  • the “third party identification information holding unit” 807 determines whether a third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical professional or a non-medical professional. It is configured to have a function to hold third party identification information to identify whether the person is a medical worker.
  • the third party identification information is, for example, information created by combining 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information, health insurance card number, etc. may be used.
  • the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information (“medical worker” or “non-medical worker”). Further, the third party identification information may be registered, edited, and deleted by the above-mentioned administrator using an administrator terminal. Furthermore, due to the combination of the above-mentioned disclosure permission information and third party identification information, even if the disclosure permission information indicates "disclosure permission", if the third party is a specific medical professional, access may be prohibited. It may also be possible to make settings for cases in which permission is permitted and cases in which permission is not permitted.
  • the third-party identifier represents a "doctor,” it may allow access to healthcare-related information, but if the third-party identifier represents a (person in charge, etc.), it may be possible to disallow access to healthcare-related information. Also, for example, by adding information indicating the department to which the third party belongs to the third party identification information, it is possible to control permission or disallowance of access to healthcare-related information based on the information indicating the department to which the person belongs. Good too. In addition, for example, permission to access healthcare-related information may be granted based on information regarding the user's specialty identified by third-party identification information (e.g., the specialty and years of experience of a "doctor" or "nurse").
  • a person in charge of a PCR test who is a medical worker, transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by a patient himself.
  • the above-mentioned administrator uses the administrator terminal to register the combination of these information in the above-mentioned access control unit in advance in table format, etc., so that it can be edited or deleted as needed. It is possible to do so.
  • medical professionals include doctors, dentists, and pharmacists, and at least part of their third-party identification information includes the medical registration number written on the doctor's license (e.g.
  • the third party identification information may include at least a part of the number written on the qualification license.
  • the symbol and number including branch number
  • the user may be identified using third party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).
  • access control means of access control unit controls access when a third party accesses the health and medical information storage unit via the network, and determines whether the disclosure permission information held in the disclosure permission information storage unit is and the third party identification information indicates that the third party is a medical worker, the third party identification information is configured to have a function of allowing viewing of the health and medical related information stored in the health and medical related information storage section.
  • FIG. 7b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 721 that performs various calculation processes, and a “main memory” 722. It also includes a "nonvolatile memory” 723 that holds predetermined information, and a "network I/F” 724 that sends and receives information to and from a third party terminal 726 and an administrator terminal 727. These devices are interconnected by a data communication path such as a “bus” 725, and transmit, receive, and process information.
  • a data communication path such as a “bus” 725
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the “main memory” and “nonvolatile memory,” and programs executed by the "CPU” can exchange data with each other by identifying and accessing these addresses. It is now possible to carry out and process.
  • the programs stored in the "main memory” are a release permission information holding program, a third party identification information holding program, and an access control program.
  • main memory and nonvolatile memory store disclosure permission information, third party identification information, and the like.
  • the ⁇ CPU'' executes the release permission information holding program stored in the ⁇ main memory'' to notify a third party who has accessed the health and medical information related to the individual via the network that the individual's health and medical related information is stored. Disclosure permission information indicating whether or not to disclose information is stored in "main memory” and "nonvolatile memory.”
  • a third party who accesses the health and medical information stored in the health and medical information storage unit via the network by executing the third party identification information retention program stored in the "main memory” , third-party identification information for identifying whether the person is a medical worker or a non-medical worker is stored in the "main memory” and "nonvolatile memory.”
  • the access control program stored in the "main memory” is executed to determine if the disclosure permission information indicates disclosure permission and the third party identification information indicates that the person is a medical professional. To enable viewing of health and medical related information accumulated in the information storage section.
  • FIG. 7c is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used. As shown in the figure, this processing method includes a disclosure permission information holding step S706, a third party identification information holding step S707, and an access control step S708.
  • Disclosure permission/denial information retention step S706 refers to disclosure permission/denial information indicating whether or not to disclose the health and medical information of the individual to a third party who has accessed the health and medical information related to the individual via the network. This is the stage of holding.
  • “Third party identification information holding step” S707 means whether the third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical worker or This is the stage of retaining third-party identification information to identify non-medical personnel.
  • Access control step S708 means that if the disclosure permission information held in the disclosure permission information holding unit indicates permission to publish and the third party identification information indicates that the person is a medical worker, the health and medical related information storage This is the stage where the health and medical information accumulated in the department can be viewed.
  • Embodiments 1 to 6 This embodiment is characterized in that anonymization method information is held based on Embodiments 1 to 6. From now on, descriptions of functions, hardware configurations, and processing flows similar to those of Embodiments 1 to 6 will be omitted as appropriate.
  • FIG. 9a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes an anonymization method information holding unit.
  • FIG. 8a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
  • differences from Embodiments 5 and 6 will be mainly explained.
  • Anonymization method information holding unit of access control unit The “anonymization method information holding unit” 908 is configured to have a function of holding information representing an anonymization method.
  • the anonymization method information is, for example, information created by combining six-digit numbers, letters, symbols, etc., and may be information that can uniquely identify the anonymization method.
  • the anonymization method information may be registered, edited, and deleted by the administrator described above using an administrator terminal.
  • k-anonymization (here k represents a natural number of 2 or more) is an attribute that cannot identify an individual by itself, but can identify an individual with high probability by combining multiple attributes (for example, gender , age, place of residence, occupation, etc.), no matter what combination of attribute values, k or more values must exist in the target data.
  • Pridentization refers to replacing something with another description, etc., using a method that does not have regularity that allows it to be deleted or restored.
  • Generalization means replacing the value of an attribute with a higher value or concept. For example, cucumbers may be given as a superordinate vegetable in 10-year increments.
  • Top (bottom) coding refers to grouping numerical attributes into particularly large or small attribute values. For example, people who are 100 years old or older may be referred to as “100 years old or older.” "Noise (error) addition” means adding random number noise according to a certain distribution to numerical attributes. "Swaping (data exchange)” means (probabilistically) exchanging attribute values between records for category attributes. Also called data swap. “Sampling” refers to randomly extracting data at a fixed rate and number from the entire original data. “Grouping” refers to replacing detailed items in attributes and history with certain groups or classifications.
  • the "access control means" 905 controls access when a third party accesses the health and medical information storage unit via the network, and determines whether the disclosure permission information held in the disclosure permission information storage unit is and the third party identification information indicates that the third party is a non-medical worker, some (including all) of the health and medical information stored in the health and medical information storage unit or a predetermined
  • the system is configured to have a function that allows viewing of health and medical related information that has been anonymized using anonymization method.
  • FIG. 9b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment.
  • the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 911 that performs various calculation processes and a "main memory” 912. It also includes a "nonvolatile memory” 913 that holds predetermined information, and a "network I/F” 914 that sends and receives information to and from a third party terminal 916 and an administrator terminal 917. These devices are interconnected by a data communication path such as a “bus” 915, and transmit, receive, and process information.
  • a data communication path such as a “bus” 915
  • the "main memory” reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs.
  • multiple addresses are assigned to each of the "main memory” and “nonvolatile memory,” and programs executed by the "CPU” can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process.
  • the program stored in the "main memory” is an anonymization method information holding program.
  • anonymization method information and the like are stored in the "main memory” and “nonvolatile memory.”
  • the "CPU” executes the anonymization method information holding program stored in the “main memory” and stores the anonymization method information representing the anonymization method in the “main memory” and “nonvolatile memory”. do. After this, the access control program stored in the "main memory” is executed, and if the disclosure permission information indicates disclosure permission and the third party identification information indicates that the person is a non-medical worker, the health care It is possible to view part (including all) of the health and medical related information stored in the related information storage unit, or health and medical related information anonymized by a predetermined anonymization method.
  • FIG. 8c is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used. The following will focus on the differences from the fifth and sixth embodiments. As shown in the figure, this processing method includes an anonymization method information holding step S908 and an access control step S909.
  • “Anonymization method information retention step” S908 is a step of retaining anonymization method information that is information representing a method for anonymizing health and medical related information.
  • Access control step S909 refers to health and medical related information when the disclosure permission/denial information held in the disclosure permission/denial information holding unit indicates permission to publish and the third party identification information indicates that the person is a non-medical worker. This is a stage where part (including all) of the health and medical related information accumulated in the storage unit or health and medical related information anonymized by a predetermined anonymization method can be viewed.
  • FIGS. 10a to 10c are diagrams illustrating an example of an anonymization method.
  • An example of an anonymization method will be briefly explained using these.
  • the table shown in Figure 10a is a list of patients at a fictitious medical institution in Minato-ku, Tokyo, Japan, who have not yet been anonymized. This includes six attributes (name, age, gender, place of residence, religion, disease name) and data for 12 people. Among these, "name” is information that constitutes personal data, and is information that may identify an individual by itself. Additionally, "age”, “gender”, “place of residence”, “religion”, and “disease name” are information that constitutes personal data and are not accumulated over time and are used alone.
  • the disclosure permission/denial information held in the disclosure permission/denial information holding unit indicates permission to release, and the third party identification information indicates that the person is a non-medical worker
  • the information stored in the health and medical information storage unit is Part (including all) of the health and medical related information or health and medical related information that has been anonymized using a predetermined anonymization method can be made viewable.
  • Health and medical information unified management system 200 Health and medical information storage department: 201 Access control section: 202 Incentive management department: 203 Incentive function department: 204 Network: 205 Third party terminal: 206 Administrator terminal: 207

Abstract

Provided is a health/medical-related information central management system that, with respect to approval/denial of publication of health/medical-related information of individuals, provides an incentive to an individual to promote central management of the health/medical-related information.　A health/medical-related information central management system is provided, comprising: a health/medical-related information accumulation unit in which health/medical-related information related to individuals is accumulated for central management; an access control unit for controlling disclosure of the health/medical-related information accumulated in the health/medical-related information accumulation unit to a third party via a network; and an incentive function unit that, with respect to approval/denial of publication of health/medical-related information of individuals, includes at least an incentive management unit for providing an incentive to an individual to promote central management of the health/medical-related information.

Description

健康医療情報一元管理システムHealth and medical information unified management system
本件出願は、優先権の基礎出願として出願されるものであり、その趣旨は、出願人自身が承諾していることである。
本発明は、個人の健康医療に関連する情報である健康医療関連情報を蓄積して一元管理するための健康医療関連情報一元管理システムに関するものである。 This application is filed as a basic application for priority rights, and the applicant himself has consented to this application.
The present invention relates to a unified health and medical information management system for accumulating and centrally managing health and medical information that is information related to personal health and medical care.
最近、患者の医療情報などを複数の医療機関で共有するようなシステムやサービスが検討され始めている。 Recently, systems and services that share patient medical information among multiple medical institutions have begun to be considered.
そのようなシステムの一例として、特許文献１に記載された発明が提案されていた。この発明では、所定の医療機関で作成した電子カルテのような診療情報を、他の医師や医療機関には必要な項目についてのみ開示して、患者本人が開示を希望しない項目については開示しないようにする医療情報管理システムを提供するというものであった。 As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, medical information such as electronic medical records created by a predetermined medical institution is disclosed to other doctors and medical institutions only for necessary items, and items that the patient himself/herself does not wish to be disclosed are not disclosed. The aim was to provide a medical information management system for
特開２００４－２８７７７４JP2004-287774
しかしながら、上述した発明では、患者の診療情報の開示許否について、診療情報の一元管理化を促すために、患者に対してインセンティブを提供するという観点までは開示されていないという課題があった。 However, the above-mentioned invention has a problem in that it does not disclose whether or not to disclose patient's medical information from the perspective of providing incentives to patients in order to promote unified management of medical information.
本発明は、上述したような課題を踏まえ、個人の健康医療関連情報の公開許否に関して、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供する健康医療関連情報一元管理システムを提供しようとするものである。 In view of the above-mentioned problems, the present invention provides a unified management of health and medical information that provides incentives to individuals in order to promote the unified management of health and medical information regarding whether or not to disclose personal health and medical information. The aim is to provide a system.
具体的には、本発明は、個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積部と、健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御部と、個人に関する健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供するためのインセンティブ管理部を少なくとも含むインセンティブ機能部と、を有する健康医療関連情報一元管理システムを提供する。 Specifically, the present invention provides a health and medical information storage unit for accumulating and centrally managing health and medical information related to individuals, and a network for the health and medical information accumulated in the health and medical information storage unit. In order to promote the unified management of health and medical information, we will provide incentives to individuals, including an access control section to control disclosure to third parties through the An incentive function section including at least an incentive management section for providing health and medical information.
また、本発明は、前記特徴に加えて、インセンティブ管理部に対してアクセスするための認証を行うアクセス認証処理部をさらに有する健康医療関連情報一元管理システムを提供する。 Furthermore, the present invention provides a health and medical related information unified management system which, in addition to the above characteristics, further includes an access authentication processing section that performs authentication for accessing the incentive management section.
　また、本発明は、前記特徴に加えて、アクセス認証処理部で認証された後、インセンティブ管理部によるインセンティブを受け入れることを了承する旨の情報である同意情報を取得する同意情報取得部をさらに有する健康医療関連情報一元管理システムを提供する。 Further, in addition to the above characteristics, the present invention further includes a consent information acquisition unit that acquires consent information that is information indicating consent to accept the incentive provided by the incentive management unit after being authenticated by the access authentication processing unit. Provides a unified management system for health and medical information.
また、本発明は、前記特徴に加えて、同意情報取得部により同意情報の取得があった場合に、インセンティブを提供するための処理であるインセンティブ処理をするためのインセンティブ処理部をさらに有する健康医療関連情報一元管理システムを提供する。 In addition to the above-mentioned features, the present invention provides a health care system that further includes an incentive processing section for performing incentive processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition section. Provides a related information unified management system.
また、本発明は、個人が自身の健康医療関連情報の第三者への公開を許可するか否かを示す公開許否情報を保持する公開許否情報保持部をさらに有する健康医療関連情報一元管理システムを提供する。 Further, the present invention provides a health and medical related information unified management system that further includes a disclosure permission information holding unit that holds disclosure permission information indicating whether or not an individual is permitted to disclose his or her health and medical information to a third party. I will provide a.
また、本発明は、第三者が医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する第三者識別情報保持部を有する健康医療関連情報一元管理システムを提供する。 Further, the present invention provides a health care system having a third party identification information holding unit that holds third party identification information for identifying whether a third party is a medical worker or a non-medical worker. Provides a related information unified management system.
また、本発明は、アクセス制御部は、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報保持部に保持された第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を医療従事者に閲覧させる健康医療関連情報一元管理システムを提供する。 Further, the present invention provides that the access control unit determines whether the disclosure permission information held in the disclosure permission information storage unit indicates permission to publish, and the third party identification information held in the third party identification information storage unit is a medical professional. Provided is a unified health and medical information management system that allows medical personnel to view health and medical information stored in a health and medical information storage unit.
また、本発明は、アクセス制御部は、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報保持部に保持された第三者識別情報が非医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報の一部（全部を含む）、又は、予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を非医療従事者に閲覧させる健康医療関連情報一元管理システムを提供する。 Further, the present invention provides that the access control section determines whether the disclosure permission information held in the disclosure permission information storage section indicates permission for disclosure, and the third party identification information held in the third party identification information storage section is non-medical. When indicating that the person is a worker, some (including all) of the health and medical information stored in the health and medical information storage unit, or health and medical information that has been anonymized using a predetermined anonymization method. Provides a unified health and medical information management system that allows non-medical personnel to view related information.
また、本発明は、匿名加工化方法は、少なくともｋ（ｋは２以上の自然数）－匿名化、仮名化、一般化、トップ（ボトム）コーディング、ノイズ（誤差）付加、スワッピング（データ交換）、サンプリング、グルーピングの匿名加工化方法の何れか、あるいは、それらの組合せにより行われる健康医療関連情報一元管理システムを提供する。 Further, the present invention provides that the anonymization method includes at least k (k is a natural number of 2 or more) anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), The present invention provides a unified management system for health and medical information that is performed using sampling, grouping anonymization methods, or a combination thereof.
また、本発明は、医療従事者は、医師、歯科医師、薬剤師、保健師、助産師、看護師、准看護師、理学療法士、作業療法士、視能訓練士、言語聴覚士、義肢装具士、診療放射線技師、診療エックス線技師、臨床検査技師、衛生検査技師、臨床工学技士、歯科衛生士、歯科技工士、救急救命士、あん摩マッサージ指圧師、はり師、きゅう師、柔道整復師、管理栄養士、栄養士、精神福祉士、社会福祉士、介護福祉士、公認心理士、臨床心理士、医療事務者の少なくとも１以上を含む健康医療関連情報一元管理システムを提供する。 In addition, the present invention can be applied to medical professionals such as doctors, dentists, pharmacists, public health nurses, midwives, nurses, associate nurses, physical therapists, occupational therapists, orthoptists, speech therapists, and prosthetics and orthotics. Medical radiologist, medical X-ray technician, clinical laboratory technician, sanitary laboratory technician, clinical engineer, dental hygienist, dental technician, emergency medical technician, anma massage shiatsu therapist, acupuncture therapist, massage therapist, judo therapist, management We provide a unified management system for health and medical information that includes at least one of the following: a dietician, a nutritionist, a mental health worker, a social worker, a certified care worker, a certified psychologist, a clinical psychologist, and a medical administrator.
また、本発明は、非医療従事者は、生命保険会社、損害保険会社、証券会社、製薬会社、創薬ベンチャー会社、食品会社、健康器具会社、フィットネスクラブ、スポーツジム、銀行、信用金庫、ＪＡ（農業協同組合）、組合健保、協会けんぽ、共済組合、市町村国保、国保組合、ＰＲ会社、総合研究所、大学および大学院（附属の研究機関も含む）、高等専門学校、農林水産系会社、肥料メーカー、官公庁、自治体、独立行政法人に属する従業員の少なくとも１以上を含む健康医療関連情報一元管理システムを提供する。
する。 The present invention also applies to non-medical workers such as life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Kyokai Kenpo, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizers We provide a unified management system for health and medical information that includes at least one of the following: manufacturers, government offices, local governments, and independent administrative agency employees.
do.
更に、上述した健康医療関連情報一元管理システムについて、それらを実現するため、コンピュータである健康医療関連情報一元管理システムの動作方法、並びに、計算機である健康医療関連情報一元管理システムに読み取り実行可能に記述した健康医療関連情報一元管理システムの動作プログラムを提供する。 Furthermore, in order to realize the above-mentioned health and medical related information unified management system, there is a method for operating the health and medical related information unified management system, which is a computer, and a system that can be read and executed by the health and medical related information unified management system, which is a computer. An operating program for the described health and medical information unified management system is provided.
具体的には、本発明は、健康医療関連情報一元管理システムにおけるＣＰＵが実行する方法であって、個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積ステップと、健康医療関連情報蓄積ステップで蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御ステップと、個人に関する健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供するためのインセンティブ管理ステップを少なくとも含むインセンティブ機能ステップと、を有する方法を提供する。 Specifically, the present invention is a method executed by a CPU in a health and medical information unified management system, which includes a health and medical information accumulation step for accumulating and centrally managing health and medical information related to individuals; An access control step for controlling the disclosure of health and medical information accumulated in the medical information storage step to a third party via the network, and a health and medical In order to promote unified management of related information, a method is provided having an incentive function step including at least an incentive management step for providing incentives to individuals.
具体的には、本発明は、健康医療関連情報一元管理システムにおけるＣＰＵが実行する方法であって、個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積ステップと、健康医療関連情報蓄積ステップで蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御ステップと、個人に関する健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供するためのインセンティブ管理ステップを少なくとも含むインセンティブ機能ステップと、を含む計算機である健康医療関連情報一元管理システムに読み取り実行に記述した健康医療関連情報一元管理システムの動作プログラムを提供する。 Specifically, the present invention is a method executed by a CPU in a health and medical information unified management system, which includes a health and medical information accumulation step for accumulating and centrally managing health and medical information related to individuals; An access control step for controlling the disclosure of health and medical information accumulated in the medical information storage step to a third party via the network, and a health and medical In order to promote unified management of related information, an incentive function step including at least an incentive management step for providing incentives to individuals; Provides an operating program for a unified health and medical information management system.
以上より、本発明では、健康医療関連情報の公開許否に関して、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供する健康医療関連情報一元管理システムを提供することができる。 As described above, the present invention can provide a unified health and medical information management system that provides incentives to individuals in order to promote the unified management of health and medical information regarding whether or not to disclose health and medical information. .
本件発明に適用されるハードウェア構成を示す図Diagram showing the hardware configuration applied to the present invention 本件発明における健康医療関連情報一元管理システムの全体的な構成を示す図Diagram showing the overall configuration of the unified health and medical information management system according to the present invention 実施形態１における健康医療関連情報一元管理システムの機能的構成を示す図A diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 1 実施形態１における健康医療関連情報一元管理システムのハードウェア構成を示す図A diagram showing the hardware configuration of the health and medical related information unified management system in Embodiment 1 実施形態１における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 1 実施形態１における健康医療関連情報一元管理システムの機能的構成を示す図A diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 1 実施形態２における健康医療関連情報一元管理システムの機能的構成を示す図Diagram showing the functional configuration of the health and medical related information unified management system in Embodiment 2 実施形態２における健康医療関連情報一元管理システムのハードウェア構成を示す図Diagram showing the hardware configuration of the health and medical related information unified management system in Embodiment 2 実施形態２における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 2 実施形態３における健康医療関連情報一元管理システムの機能的構成を示す図Diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 3 実施形態３における健康医療関連情報一元管理システムのハードウェア構成を示す図A diagram showing the hardware configuration of a health and medical related information unified management system in Embodiment 3 実施形態３における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 3 実施形態４における健康医療関連情報一元管理システムの機能的構成を示す図Diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 4 実施形態４における健康医療関連情報一元管理システムのハードウェア構成を示す図Diagram showing the hardware configuration of a health and medical related information unified management system in Embodiment 4 実施形態４における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 4 実施形態５における健康医療関連情報一元管理システムの機能的構成を示す図A diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 5 実施形態５における健康医療関連情報一元管理システムの機能的構成の一例を示す図A diagram illustrating an example of the functional configuration of a unified health and medical information management system in Embodiment 5. 実施形態５における健康医療関連情報一元管理システムのハードウェア構成を示す図A diagram showing the hardware configuration of a health and medical related information unified management system in Embodiment 5 実施形態５における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 5 実施形態６における健康医療関連情報一元管理システムの機能的構成を示す図A diagram illustrating the functional configuration of a unified health and medical information management system in Embodiment 6 実施形態６における健康医療関連情報一元管理システムのハードウェア構成を示す図A diagram showing the hardware configuration of a health and medical related information unified management system in Embodiment 6 実施形態６における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 6 実施形態７における健康医療関連情報一元管理システムの機能的構成を示す図Diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 7 実施形態７における健康医療関連情報一元管理システムのハードウェア構成を示す図A diagram showing the hardware configuration of a health and medical related information unified management system in Embodiment 7 実施形態７における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 7 実施形態８における健康医療関連情報一元管理システムの機能的構成を示す図Diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 8 実施形態８における健康医療関連情報一元管理システムのハードウェア構成を示す図A diagram showing the hardware configuration of a health and medical related information unified management system in Embodiment 8 実施形態８における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図Diagram showing the flow of processing when using the unified health and medical information management system in Embodiment 8 匿名加工化方法の一例を示す図Diagram showing an example of anonymization method 匿名加工化方法の一例を示す図Diagram showing an example of anonymization method 匿名加工化方法の一例を示す図Diagram showing an example of anonymization method 本件発明の健康医療関連情報一元管理システムのユーザーインターフェースの一例を示す図A diagram showing an example of a user interface of the unified health and medical information management system of the present invention 本件発明の健康医療関連情報一元管理システムのユーザーインターフェースの一例を示す図A diagram showing an example of a user interface of the unified health and medical information management system of the present invention 本件発明の健康医療関連情報一元管理システムのユーザーインターフェースの一例を示す図A diagram showing an example of a user interface of the unified health and medical information management system of the present invention 本件発明の健康医療関連情報一元管理システムのユーザーインターフェースの一例を示す図A diagram showing an example of a user interface of the unified health and medical information management system of the present invention 本件発明の健康医療関連情報一元管理システムのユーザーインターフェースの一例を示す図A diagram showing an example of a user interface of the unified health and medical information management system of the present invention 本件発明の健康医療関連情報一元管理システムのユーザーインターフェースを示す図＜本発明を構成し得るハードウェアについて＞Diagram showing the user interface of the unified health and medical information management system of the present invention <About the hardware that can constitute the present invention>
図１は、本件発明に適用されるハードウェア構成を示す図である。
本件発明は、原則的に電子計算機を利用する発明であるが、ソフトウェアによって実現され、ハードウェアによっても実現され、ソフトウェアとハードウェアの協働によっても実現される。本件発明の各構成要件の全部又は一部を実現するハードウェアでは、コンピュータの基本的構成であるＣＰＵ、メモリ、バス、入出力装置、各種周辺機器、ユーザーインターフェースなどによって構成される。各種周辺機器には、記憶装置、インターネット等インターフェース、インターネット等機器、ディスプレイ、キーボード、マウス、スピーカー、カメラ、ビデオ、テレビ、実験室又は工場などでの生産状態を把握するための各種センサ（流量センサ、温度センサ、重量センサ、液量センサ、赤外線センサ、出荷個数計数機、梱包個数計数機、異物検査装置、不良品計数機、放射線検査装置、表面状態検査装置、回路検査装置、人感センサ、作業者作業状況把握装置（映像、ＩＤ、ＰＣ作業量などで）等）、ＣＤ装置、ＤＶＤ装置、ブルーレイ装置、ＵＳＢメモリ、ＵＳＢメモリインターフェース、着脱可能タイプのハードディスク、一般的なハードディスク、プロジェクタ装置、ＳＳＤ、電話、ファックス、コピー機、印刷装置、ムービー編集装置、各種センサ装置などが含まれる。また、本システムは、必ずしも一つの筐体によって構成されている必要はなく、複数の筐体を通信で結合して構成されるものであってもよい。また、通信は、ＬＡＮであってもＷＡＮ、Ｗｉｆｉ、ブルートゥース（登録商標）、赤外線通信、超音波通信であってもよく、さらに、一部が国境を跨いで設置されていてもよい。さらに、複数の筐体のそれぞれが異なる主体によって運営されていてもよく、一の主体によって運営されていてもよい。本件発明のシステムの運用主体は、単数であるか複数であるかは問わない。また、本システムの他に第三者の利用する端末、さらに他の第三者の利用する端末を含むシステムとしても発明を構成することができる。また、これらの端末は国境を越えて設置されていてもよい。さらに、本システムや前記端末の他に第三者の関連情報や、関連人物の登録のために利用される装置、登録の内容を記録するためのデータベースに利用される装置などが用意されてもよい。これらは、本システムに備えてもよいし、本システム外に備えてこれらの情報を、利用可能に本システムを構成してもよい。 FIG. 1 is a diagram showing a hardware configuration applied to the present invention.
The present invention is an invention that basically utilizes an electronic computer, but it is also realized by software, hardware, and cooperation between software and hardware. The hardware that realizes all or part of each component of the present invention is comprised of the basic components of a computer, such as a CPU, memory, bus, input/output devices, various peripheral devices, and a user interface. Various peripheral devices include storage devices, interfaces such as the Internet, devices such as the Internet, displays, keyboards, mice, speakers, cameras, videos, televisions, and various sensors (flow rate sensors, , temperature sensor, weight sensor, liquid level sensor, infrared sensor, shipment counting machine, packaging counting machine, foreign object inspection device, defective product counting machine, radiation inspection device, surface condition inspection device, circuit inspection device, human sensor, Devices for understanding worker work status (video, ID, PC workload, etc.), CD devices, DVD devices, Blu-ray devices, USB memory, USB memory interfaces, removable hard disks, general hard disks, projector devices, This includes SSDs, telephones, faxes, copy machines, printing devices, movie editing devices, various sensor devices, etc. Further, the present system does not necessarily need to be configured by one housing, but may be configured by connecting multiple housings through communication. Further, the communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, or ultrasonic communication, and furthermore, some of the communication may be located across national borders. Furthermore, each of the plurality of cases may be operated by a different entity, or may be operated by one entity. It does not matter whether the system of the present invention is operated by a single entity or a plurality of entities. In addition to this system, the invention can also be configured as a system including a terminal used by a third party, and a terminal used by another third party. Furthermore, these terminals may be installed across national borders. Furthermore, in addition to this system and the above-mentioned terminals, devices used for registering related information of third parties, related persons, and devices used for databases for recording registration contents may also be prepared. good. These may be provided in the present system, or may be provided outside the present system and the present system may be configured so that these information can be used.
この図にあるように、計算機は、マザーボード上に構成される、チップセット、ＣＰＵ、不揮発性メモリ、メインメモリ、各種バス、ＢＩＯＳ、ＵＳＢやＨＤＭＩ（登録商標）やＬＡＮなどの各種インターフェース、リアルタイムクロック等からなる。これらはオペレーティングシステムやデバイスドライバ（ＵＳＢ、ＨＤＭＩ（登録商標）などの各種インターフェース、カメラ、マイク、スピーカー又はヘッドホン、ディスプレイなどの各種機器組込み用）、各種プログラムなどと協働して動作する。本発明を構成する各種プログラムや各種データはこれらのハードウェア資源を効率的に利用して各種の処理を実行するように構成されている。
　≪チップセット≫ As shown in this figure, a computer is configured on a motherboard, including a chipset, CPU, nonvolatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, and a real-time clock. Consists of etc. These operate in cooperation with an operating system, device drivers (for embedding various interfaces such as USB and HDMI (registered trademark), and various devices such as cameras, microphones, speakers or headphones, and displays), various programs, and the like. Various programs and various data constituting the present invention are configured to efficiently utilize these hardware resources to execute various processes.
≪Chip set≫
「チップセット」は、計算機のマザーボードに実装され、ＣＰＵの外部バスと、メモリや周辺機器を接続する標準バスとの連絡機能、つまりブリッジ機能を集積した大規模集積回路（ＬＳＩ）のセットである。２チップセット構成を採用する場合と、１チップセット構成を採用する場合とがある。ＣＰＵやメインメモリに近い側をノースブリッジ、遠い側で比較的低速な外部Ｉ／Ｏとのインターフェースの側にサウスブリッジが設けられる。 A "chip set" is a set of large-scale integrated circuits (LSI) that are mounted on a computer's motherboard and integrate a bridge function, which is a communication function between the CPU's external bus and a standard bus that connects memory and peripheral devices. . There are cases where a two-chip set configuration is adopted and cases where a one-chip set configuration is adopted. A north bridge is provided on the side closer to the CPU and main memory, and a south bridge is provided on the side that is far away and interfaces with relatively low-speed external I/O.
　（ノースブリッジ）
ノースブリッジには、ＣＰＵインターフェース、メモリコントローラ、グラフィックインターフェースが含まれる。従来のノースブリッジの機能のほとんどをＣＰＵに担わせてもよい。ノースブリッジは、メインメモリのメモリスロットとはメモリバスを介して接続し、グラフィックカードのグラフィックカードスロットとは、ハイスピードグラフィックバス（ＡＧＰ、ＰＣＩ　Ｅｘｐｒｅｓｓ）で接続される。 (North Bridge)
The northbridge includes a CPU interface, memory controller, and graphics interface. Most of the functions of a conventional northbridge may be performed by the CPU. The northbridge is connected to a memory slot of the main memory via a memory bus, and is connected to a graphics card slot of a graphics card via a high-speed graphics bus (AGP, PCI Express).
　（サウスブリッジ）
サウスブリッジには、ＰＣＩインターフェース（ＰＣＩスロット）とはＰＣＩバスを介して接続し、ＡＴＡ（ＳＡＴＡ）インターフェース、ＵＳＢインターフェース、ＥｔｈｅｒｎｅｔインターフェースなどとのＩ／Ｏ機能やサウンド機能を担う。高速な動作が必要でない、あるいは、不可能であるようなＰＳ／２ポート、フロッピーディスクドライブ、シリアルポート、パラレルポート、ＩＳＡバスをサポートする回路を組み込むことは、チップセット自体の高速化の足かせとなるためサウスブリッジのチップから分離させ、スーパーＩ／Ｏチップと呼ばれる別のＬＳＩに担当させることとしてもよい。ＣＰＵ（ＭＰＵ）と、周辺機器や各種制御部を繋ぐためにバスが用いられる。バスはチップセットによって連結される。メインメモリとの接続に利用されるメモリバスは、高速化を図るために、これに代えてチャネル構造を採用してもよい。バスとしてはシリアルバスかパラレルバスを採用できる。パラレルバスは、シリアルバスが１ビットずつデータを転送するのに対して、元データそのものや元データから切り出した複数ビットをひとかたまりにして、同時に複数本の通信路で伝送する。クロック信号の専用線がデータ線と平行して設け、受信側でのデータ復調の同期を行う。ＣＰＵ（チップセット）と外部デバイスをつなぐバスとしても用いられ、ＧＰＩＢ、ＩＤＥ／（パラレル）ＡＴＡ、ＳＣＳＩ、ＰＣＩなどがある。高速化に限界があるため、ＰＣＩの改良版ＰＣＩ ＥｘｐｒｅｓｓやパラレルＡＴＡの改良版シリアルＡＴＡでは、データラインはシリアルバスでもよい。 (South Bridge)
The south bridge is connected to a PCI interface (PCI slot) via a PCI bus, and is responsible for I/O functions and sound functions with ATA (SATA) interface, USB interface, Ethernet interface, etc. Incorporating circuits to support PS/2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses that do not require or are not possible to operate at high speeds will hinder the speeding up of the chipset itself. Therefore, it may be separated from the south bridge chip and placed in another LSI called a super I/O chip. A bus is used to connect the CPU (MPU) with peripheral devices and various control units. The buses are connected by chipsets. The memory bus used for connection with the main memory may alternatively have a channel structure in order to increase speed. A serial bus or parallel bus can be used as the bus. Whereas a serial bus transfers data one bit at a time, a parallel bus bundles the original data itself or multiple bits extracted from the original data and simultaneously transmits them over multiple communication paths. A dedicated line for clock signals is provided in parallel with the data line to synchronize data demodulation on the receiving side. It is also used as a bus to connect the CPU (chip set) and external devices, and includes GPIB, IDE/(parallel) ATA, SCSI, and PCI. Since there is a limit to speeding up, the data line may be a serial bus in PCI Express, an improved version of PCI, and Serial ATA, an improved version of parallel ATA.
　≪ＣＰＵ≫ <<CPU>>
ＣＰＵはメインメモリ上にあるプログラムと呼ばれる命令列を順に読み込んで解釈・実行することで信号からなる情報を同じくメインメモリ上に出力する。ＣＰＵは計算機内での演算を行なう中心として機能する。なお、ＣＰＵは演算の中心となるＣＰＵコア部分と、その周辺部分とから構成され、ＣＰＵ内部にレジスタ、キャッシュメモリや、キャッシュメモリとＣＰＵコアとを接続する内部バス、ＤＭＡコントローラ、タイマー、ノースブリッジとの接続バスとのインターフェースなどが含まれる。なお、ＣＰＵコアは一つのＣＰＵ（チップ）に複数備えられていてもよい。また、ＣＰＵに加えて、グラフィックインターフェース（ＧＰＵ）若しくはＦＰＵによって、処理を行っても良い。なお、実施形態での説明は２コアタイプのものであるが、これに限定されない。またＣＰＵ内にプログラムを内蔵することもできる。 The CPU sequentially reads, interprets, and executes a sequence of instructions called a program stored in the main memory, and outputs information consisting of signals to the main memory as well. The CPU functions as the center for performing calculations within the computer. Note that a CPU is composed of a CPU core part that is the center of calculations and its peripheral parts, and inside the CPU there are registers, cache memory, an internal bus that connects the cache memory and the CPU core, a DMA controller, a timer, and a north bridge. This includes the connection bus and interface. Note that one CPU (chip) may include a plurality of CPU cores. Further, in addition to the CPU, processing may be performed by a graphic interface (GPU) or FPU. Note that although the description in the embodiment is of a two-core type, the present invention is not limited to this. Moreover, the program can also be built into the CPU.
　≪不揮発性メモリ≫ <<Non-volatile memory>>
　（ＨＤＤ） (HDD)
ハードディスクドライブの基本構造は、磁気ディスク、磁気ヘッド、および磁気ヘッドを搭載するアームから構成される。外部インターフェースは、ＳＡＴＡ（過去ではＡＴＡ）を採用することができる。高機能なコントローラ、例えばＳＣＳＩを用いて、ハードディスクドライブ間の通信をサポートする。例えば、ファイルを別のハードディスクドライブにコピーする時、コントローラがセクタを読み取って別のハードディスクドライブに転送して書き込むといったことができる。この時ホストＣＰＵのメモリにはアクセスしない。したがってＣＰＵの負荷を増やさないで済む。 The basic structure of a hard disk drive consists of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can be SATA (ATA in the past). A sophisticated controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard drive, the controller can read sectors and transfer them to the other hard drive for writing. At this time, the memory of the host CPU is not accessed. Therefore, there is no need to increase the load on the CPU.
　≪メインメモリ≫ <<Main memory>>
ＣＰＵが直接アクセスしてメインメモリ上の各種プログラムを実行する。メインメモリは揮発性のメモリでＤＲＡＭが用いられる。メインメモリ上のプログラムはプログラムの起動命令を受けて不揮発性メモリからメインメモリ上に展開される。その後もプログラム内で各種実行命令や、実行手順に従ってＣＰＵがプログラムを実行する。 The CPU directly accesses and executes various programs on the main memory. The main memory is a volatile memory, and DRAM is used. The program on the main memory is expanded from the non-volatile memory onto the main memory in response to a program activation command. Thereafter, the CPU continues to execute the program according to various execution instructions and execution procedures within the program.
　≪オペレーティングシステム（ＯＳ）≫ <<Operating system (OS)>>
オペレーティングシステムは計算機上の資源をアプリケーションに利用させるための管理をしたり、各種デバイスドライバを管理したり、ハードウェアである計算機自身を管理するために用いられる。小型の計算機ではオペレーティングシステムとしてファームウェアを用いることもある。 An operating system is used to manage the resources on a computer so that they can be used by applications, to manage various device drivers, and to manage the computer itself, which is hardware. Small computers sometimes use firmware as an operating system.
　≪ＢＩＯＳ≫ <<BIOS>>
ＢＩＯＳは、計算機のハードウェアを立ち上げてオペレーティングシステムを稼働させるための手順をＣＰＵに実行させるもので、最も典型的には計算機の起動命令を受けるとＣＰＵが最初に読取りに行くハードウェアである。ここには、ディスク（不揮発性メモリ）に格納されているオペレーティングシステムのアドレスが記載されており、ＣＰＵに展開されたＢＩＯＳによってオペレーティングシステムが順次メインメモリに展開されて稼働状態となる。なお、ＢＩＯＳは、バスに接続されている各種デバイスの有無をチェックするチェック機能をも有している。チェックの結果はメインメモリ上に保存され、適宜オペレーティングシステムによって利用可能な状態となる。なお、外部装置などをチェックするようにＢＩＯＳを構成してもよい。以上については、すべての実施形態でも同様である。 The BIOS causes the CPU to execute the steps to start up the computer's hardware and run the operating system, and is most typically the first piece of hardware that the CPU reads when it receives a computer startup command. . The address of the operating system stored on the disk (non-volatile memory) is written here, and the operating system is sequentially loaded into the main memory by the BIOS loaded on the CPU and becomes operational. Note that the BIOS also has a check function that checks the presence or absence of various devices connected to the bus. The results of the check are stored in main memory and made available to the operating system as appropriate. Note that the BIOS may be configured to check external devices and the like. The above is the same in all embodiments.
図に示すように、本発明は基本的に汎用計算機プログラム、各種デバイスで構成することが可能である。計算機の動作は基本的に不揮発性メモリに記録されているプログラムをメインメモリにロードして、メインメモリとＣＰＵと各種デバイスとで処理を実行していく形態をとる。デバイスとの通信はバス線と繋がったインターフェースを介して行われる。インターフェースには、ディスプレイインターフェース、キーボード、通信バッファ等が考えられる。以下、本発明の実施の形態を図示例と共に説明する。 As shown in the figure, the present invention can basically be configured by a general-purpose computer program and various devices. Basically, a computer operates by loading a program stored in a non-volatile memory into the main memory, and executing the process using the main memory, CPU, and various devices. Communication with devices is performed via an interface connected to a bus line. Possible interfaces include a display interface, a keyboard, and a communication buffer. Embodiments of the present invention will be described below along with illustrated examples.
　＜本発明の自然法則の利用性の充足＞ <Satisfaction of usability of natural laws of the present invention>
本発明は、コンピュータと通信設備とソフトウェアとの協働で機能するものである。具体的には、個人の健康医療に関連する情報である健康医療関連情報を蓄積して一元管理するための健康医療関連情報一元管理システムに関するものであり、ネットワークを介して、第三者端末並びに管理者端末などの間で様々な情報やデータがハードウェア資源を用いてやり取りされている。従って、この観点から本願発明はコンピュータなどのリソースを請求項や明細書に記載された事項と、それらの事項に関係する技術常識に基づいて判断すれば、本願発明は全体として自然法則を利用したものであり、また、コンピュータ・ソフトウェア関連発明に該当するものである。 The present invention functions in cooperation with a computer, communication equipment, and software. Specifically, it is related to a unified health and medical information management system for accumulating and centrally managing health and medical information that is information related to personal health and medical care, and it is possible to collect and centrally manage health and medical information, which is information related to personal health and medical care. Various information and data are exchanged between administrator terminals and the like using hardware resources. Therefore, from this point of view, if the claimed invention is judged based on the matters stated in the claims and specification, as well as the common general knowledge related to these matters, the claimed invention as a whole utilizes the laws of nature. This invention also falls under computer software-related inventions.
　＜特許法で求められる自然法則の利用の意義＞ <Significance of the use of natural laws required by patent law>
特許法で求められる自然法則の利用とは、法目的に基づいて、発明が産業上利用性を有し、産業の発達に寄与するものでなければならないとの観点から、産業上有用に利用することができる発明であることを担保するために求められるものである。つまり、産業上有用であること、すなわち出願に際して宣言した発明の効果がその発明の実施によってある一定の確実性の下再現できることを求めるものである。この観点から自然法則利用性とは、発明の効果を発揮するための発明の構成である発明特定事項（発明構成要件）のそれぞれが発揮する機能が自然法則を利用して発揮されるものであればよい、と解釈される。さらに言えば、発明の効果とはその発明を利用する利用者に所定の有用性を提供できる可能性があればよいのであって、その有用性を利用者がどのように感じたり、考えたりするかという観点で見るべきではない。したがって、利用者が本システムによって得る効果が心理的な効果であったとしても、その効果自体は求められる自然法則の利用性の対象外の事象である。 The use of natural laws required by the Patent Act refers to the use of natural laws that are industrially useful, from the viewpoint that inventions must have industrial applicability and contribute to the development of industry based on the legal purpose. This is required to ensure that the invention is capable of In other words, it requires that the invention be industrially useful, that is, that the effects of the invention declared at the time of filing the application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the usability of natural laws means that the functions of each of the invention specifying matters (invention constituent elements), which are the composition of the invention to achieve the effects of the invention, are achieved by utilizing natural laws. It is interpreted as bayoi. Furthermore, the effectiveness of an invention is defined as the possibility of providing a certain level of usefulness to the users who use the invention, and it is not sufficient to define the effectiveness of an invention as long as it has the potential to provide a certain level of usefulness to the users who use the invention. It should not be viewed from that perspective. Therefore, even if the effect that the user obtains from this system is a psychological effect, that effect itself is a phenomenon that is not subject to the required usability of natural laws.
以下、本件発明の実施の形態について、添付図面を用いて説明する。なお、実施形態と請求項の相互の関係は以下の通りである。主として、実施形態１の説明は請求項１、１２および１３に関し、実施形態２の説明は請求項２に関し、実施形態３の説明は請求項３に関し、実施形態４の説明は請求項４に関し、実施形態５の説明は請求項５に関し、実施形態６の説明は請求項６に関し、実施形態７の説明は請求項７に関し、実施形態８の説明は請求項８に関するものである。本件発明は、これら実施形態に何ら限定されるべきものではなく、その要旨を逸脱しない範囲において、種々なる態様で実施し得る。 Embodiments of the present invention will be described below with reference to the accompanying drawings. Note that the mutual relationship between the embodiments and the claims is as follows. Primarily, the description of Embodiment 1 relates to claims 1, 12 and 13, the description of Embodiment 2 relates to claim 2, the description of Embodiment 3 relates to claim 3, the description of Embodiment 4 relates to claim 4, The description of the fifth embodiment is related to claim 5, the description of the sixth embodiment is related to claim 6, the description of embodiment 7 is related to claim 7, and the description of embodiment 8 is related to claim 8. The present invention should not be limited to these embodiments in any way, and may be implemented in various forms without departing from the spirit thereof.
＜本件発明の健康医療関連情報一元管理システムの全体的な構成＞
図２ａは、本件発明における健康医療関連情報一元管理システムの全体的な構成の一例を示す図である。
健康医療関連情報一元管理システム２００は、個人に関する電子カルテ情報、各種検査情報（健診、検診などを含んでもよい）、処方箋情報、薬歴情報、服用状況情報、バイタル情報（例えば、体温、血圧、脈拍、心拍数、身長、体重、血糖値、体脂肪率、動脈血中酸素飽和度、脳波、心電図、歩数、呼吸数、心音、尿測定情報（例えば、尿糖、尿タンパク、尿潜血、ウロビリノーゲン、ｐＨ、ビリルビン、ケトン体、亜硝酸塩など）、睡眠時間などを少なくとも含み、これに限られない）、問診票の情報、健康促進アプリのデータ、対話型健康促進ＳＮＳの会話データなどの何れか１以上の情報を含む健康医療関連情報を蓄積する健康医療関連情報蓄積部２０１と、健康医療関連情報蓄積部２０１に蓄積された健康医療関連情報を、ネットワークを介して、第三者に公開することを制御するためのアクセス制御部２０２と、個人の健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供するインセンティブ管理部２０３を少なくとも含み、インセンティブに関する情報へのアクセス制御、同意情報取得、インセンティブ処理などの機能を有するインセンティブ機能部２０４とから構成される。また、健康医療関連情報一元管理システム２００は、ネットワーク２０５（例えば、インターネット、ＷＡＮ、ＬＡＮなど）を介して、第三者端末２０６や管理者端末２０７と電気的に接続できるように構成されている。ここで、第三者端末２０６や管理者端末２０７は、有線又は無線のインターフェース（例えば、通信ケーブルやＷｉＦｉルーターなど）を介して、ネットワーク２０５に接続可能な電子機器（例えば、パーソナルコンピュータ、タブレット端末、スマートフォンなど）であってもよい。また、本件発明において、「第三者」とは、個人（患者自身やその家族なども含み、これに限られない）や、後述する医療従事者や非医療従事者などを指していう。また、「管理者」とは、健康医療関連情報一元管理システムの全体を管理、運営する役割を担う者（例えば、個人、あるいは、その個人が属する機関、団体、法人が含まれてもよい。また、官公庁や自治体の職員、あるいは、官公庁や自治体から委託を受けた機関、団体、法人などが含まれてもよい。）であり、健康医療関連情報一元管理システムにおける各種情報について編集、追加、削除を行う権限を有していてもよい。 <Overall configuration of the unified health and medical information management system of the present invention>
FIG. 2a is a diagram showing an example of the overall configuration of the health and medical related information unified management system according to the present invention.
The unified health and medical information management system 200 includes electronic medical record information regarding individuals, various test information (which may include medical examinations, medical examinations, etc.), prescription information, drug history information, medication status information, and vital information (for example, body temperature, blood pressure, etc.). , pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds, urine measurement information (e.g., urine sugar, urine protein, urine occult blood, urobilinogen) , pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), information from medical questionnaires, data from health promotion apps, conversation data from interactive health promotion SNS, etc. The health and medical information storage unit 201 stores health and medical information including one or more pieces of information, and the health and medical information stored in the health and medical information storage unit 201 is disclosed to a third party via a network. an access control unit 202 for controlling the disclosure of personal health and medical information, and an incentive management unit 203 for providing incentives to individuals in order to promote the unified management of health and medical related information regarding permission to disclose personal health and medical information. and an incentive function unit 204 that has functions such as access control to incentive-related information, consent information acquisition, and incentive processing. Further, the health and medical related information unified management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, WAN, LAN, etc.). . Here, the third party terminal 206 and the administrator terminal 207 are electronic devices (for example, a personal computer, a tablet terminal, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable or a WiFi router). , smartphone, etc.). Furthermore, in the present invention, a "third party" refers to an individual (including, but not limited to, the patient himself/herself, his/her family, etc.), a medical worker, a non-medical worker, etc., which will be described later. Furthermore, the term "administrator" may include a person (for example, an individual, or an institution, group, or corporation to which the individual belongs) who is responsible for managing and operating the entire health and medical information unified management system. This may also include employees of government offices and local governments, or institutions, organizations, and corporations commissioned by government offices and local governments. The user may also have the authority to perform deletion.
また、「電子カルテ情報」には、例えば、患者に関する基本情報（例えば、患者ＩＤ、氏名、生年月日、連絡先、緊急連絡先、家族歴、身長・体重、アレルギー情報、喫煙や飲酒の状況、既往歴など）、診察に関する情報（例えば、患者の主訴（自覚症状や体調などの訴え）、各種検査結果、お薬の情報、診断名、治療方針、医師による診察記録、医師からの指示など）、看護や経過に関する情報（例えば、バイタル情報（例えば、体温、血圧、脈拍、心拍数、身長、体重、血糖値、体脂肪率、動脈血中酸素飽和度、脳波、心電図、歩数、呼吸数、心音、尿測定情報（例えば、尿糖、尿タンパク、尿潜血、ウロビリノーゲン、ｐＨ、ビリルビン、ケトン体、亜硝酸塩など）、睡眠時間などを少なくとも含み、これに限られない）、観察結果、尿や便などの記録、食事内容と摂取量の記録、看護ケアの記録など）、検査に関する情報（例えば、検査指示、検査結果、画像検査により得られた画像（一部）、その画像に対するレポートなど）、処置や手術に関する情報（例えば、処置や手術の指示、処置や手術の経過と結果、病理診断を行った場合にはその方法と診断結果など）、お薬に関する情報（例えば、創薬の指示、投薬日時と薬剤、投薬の結果など）、治療後又は術後の経過観察情報などが含まれていてもよい。 In addition, "electronic medical record information" includes, for example, basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height/weight, allergy information, smoking and drinking status). , medical history, etc.), medical examination information (e.g., patient's chief complaint (complaints about subjective symptoms and physical condition), various test results, medication information, diagnosis name, treatment policy, doctor's examination records, doctor's instructions, etc.) ), information related to nursing care and progress (e.g., vital information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), observation results, urine and Records of stool, etc., records of meal contents and intake, records of nursing care, etc.), information regarding tests (for example, test instructions, test results, images (partial) obtained from image tests, reports on those images, etc.) , information on treatments and surgeries (e.g. instructions for treatments and surgeries, progress and results of treatments and surgeries, methods and results of pathological diagnoses, etc.), information on medicines (e.g. instructions for drug discovery) , medication date and time, drug, medication results, etc.), post-treatment or post-surgery follow-up observation information, etc. may also be included.
また、「処方箋情報」には、例えば、保険者番号、氏名・生年月日・性別、医療機関名・連絡先・処方した医師の名前、お薬の名前・お薬の形（錠剤、カプセル剤、液剤、散剤、顆粒剤など）・お薬の量（１回あたりに飲む量）・１日に飲む回数・飲むタイミング、ジェネリック医薬品への変更についての情報、分割調剤の回数などが含まれていてもよい。
また、「薬歴情報」には、例えば、患者の氏名・生年月日・性別・マイナンバー情報または被保険者証の記号番号・住所・緊急時連絡先、処方した保険医療機関名及び保険医氏名・処方日・処方内容、調剤日・処方内容に関する照会の要点等、患者の体質・アレルギー歴・副作用歴、患者又はその家族等からの相談事項の要点、服薬状況、残薬の状況の確認、服薬中の体調の変化、併用薬、合併症を含む既往歴に関する情報、他科受診の有無、副作用が疑われる症状の有無、飲食物（薬剤との相互作用）の摂取状況、後発医薬品の使用に関する患者の意向、手帳による情報提供の状況、服薬指導の要点、指導した保険薬剤師の氏名などが含まれていてもよい。 In addition, "prescription information" includes, for example, insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablets, capsules). , liquids, powders, granules, etc.), the amount of medicine (amount to take at a time), the number of times you take it per day, the timing of taking it, information about switching to generic drugs, and the number of times you need to split the medication. You can.
In addition, "medication history information" includes, for example, the patient's name, date of birth, gender, My Number information, the symbol number of the insurance card, address, emergency contact information, the name of the insurance medical institution that prescribed the medicine, and the insurance physician. Confirmation of name, prescription date, prescription details, key points for inquiries regarding dispensing date and prescription details, patient's constitution, allergy history, history of side effects, key points of consultation from patients or their families, medication status, status of leftover medication, etc. , changes in physical condition while taking the medication, concomitant medications, past medical history including complications, presence or absence of visits to other departments, presence or absence of symptoms that suggest side effects, status of intake of food and drink (drug interactions), information on generic drugs. The information may include the patient's intention regarding use, the status of information provided in the notebook, key points of medication guidance, and the name of the insurance pharmacist who provided the guidance.
また、「服用状況情報」は、例えば、処方された薬の残量に関する情報（例えば、患者がうっかり飲み忘れた場合や、患者が意図的に飲まなかった場合などに残った薬の量などを含む）、来院／来局に関するタイミング情報（例えば、予定処方終了日（予定服用終了日）から実際に来院／来局するまでに要する期間（例えば、予定よりも早く来院／来局した場合や、予定よりも遅く来院／来局した場合なども含む）など）、服用についての患者の訴え（例えば、ある薬を飲み続けたら、じん麻疹が出てしまった、あるいは、ある薬を飲んだら、効きすぎてしまい、身体がふらふらするなどの自覚症状や体調に関する訴えを含む）に関する情報などが含まれていてもよい。 In addition, "dose status information" includes, for example, information regarding the remaining amount of prescribed medicine (e.g., the amount of medicine remaining if the patient accidentally forgets to take it or does not intentionally take it). (including), timing information regarding visits to the hospital/office (e.g., the period required from the scheduled prescription end date (scheduled dosing end date) to the actual visit/office visit (for example, if you come to the hospital/office earlier than planned, patients' complaints about medication (for example, if you keep taking a certain medicine, you get hives, or if you take a certain medicine and it doesn't work). (including complaints about physical condition and subjective symptoms such as feeling light-headed and feeling light-headed).
また、「健康医療関連情報」は、例えば、ＰＨＲ等を含むようにしてもよい。ここで、ＰＨＲとは、Ｐｅｒｓｏｎａｌ　Ｈｅａｌｔｈ　Ｒｅｃｏｒｄの頭文字をとった略語で、個人の健康・医療・介護に関する情報のことを指していう。個人の健康・医療・介護に関する情報を一人ひとりが自分自身で生涯にわたって時系列的に管理・活用することによって、自己の健康状態に合った優良なサービスの提供を受けることができることを目指すものである。例えば、国民一人ひとりは、これまで、たくさんの健康や医療に関する情報を、種々の手帳や書類の紙媒体に記録を残してきている。それらの記録はその時のライフステージ（人生の節目）によって、記録が残る媒体や場所も異なっている。例えば、出産に際しては「母子健康手帳」、学校教育を受ける時期には「学校健康診断の結果」、就職に際しては「定期健康診断の結果」等である。また、体調によっては「疾病管理手帳」や「お薬手帳」等によって、自身の健康管理をすることになり、高齢層になれば「介護予防手帳」や「かかりつけ連携手帳」に記録されることになる。このような、もともとある「手帳文化」をデジタル化し、データとして一元的にまとめることにより、自分自身で管理・活用していくという考え方や仕組みが存在し、今後更に普及してくることが予想されている。 Further, the "health and medical related information" may include, for example, PHR and the like. Here, PHR is an abbreviation that stands for Personal Health Record, and refers to information regarding personal health, medical care, and nursing care. The aim is for each person to be able to receive excellent services that match their own health status by managing and utilizing information regarding their personal health, medical care, and nursing care in a chronological manner throughout their lifetime. . For example, each citizen has recorded a large amount of health and medical information in paper media such as various notebooks and documents. The medium and location in which these records are kept differ depending on the life stage (milestone of life) at the time. For example, when giving birth, a ``maternal and child health handbook'' is required, when receiving school education, ``school health checkup results'' are required, and when finding a job, ``periodic health checkup results'' are required. Also, depending on your physical condition, you may need to manage your own health using a ``disease management notebook'' or ``medication notebook,'' and if you are an elderly person, it may be recorded in a ``nursing care prevention notebook'' or ``family cooperation notebook.'' become. There is a concept and system that allows people to manage and utilize their own data by digitizing the original "notebook culture" and centralizing it as data, and it is expected that it will become even more popular in the future. ing.
なお、本件発明では、健康医療関連情報蓄積部２０１と、アクセス制御部２０２とが同一のサーバで機能するように構成されることを前提として説明するが、これに限らず、それぞれ別個のサーバで機能を担うように構成されてもよい。あるいは、複数のサーバが用意され、それらのサーバ間で情報やデータのやり取りを行い、連携又は協働して各種機能を実行できるように構成してもよい。例えば、健康医療関連情報蓄積部２０１とアクセス制御部２０２とがクラウドサーバで構成されるようにしてもよい。 Although the present invention will be described on the assumption that the health and medical information storage unit 201 and the access control unit 202 are configured to function on the same server, the present invention is not limited to this, and they may be configured to function on separate servers. It may be configured to take on a function. Alternatively, a configuration may be adopted in which a plurality of servers are prepared, information and data are exchanged between the servers, and various functions can be executed in coordination or cooperation. For example, the health and medical information storage section 201 and the access control section 202 may be configured as a cloud server.
同様にして、本件発明では、健康医療関連情報蓄積部２０１およびアクセス制御部２０２と、インセンティブ管理部２０３を少なくとも含むインセンティブ機能部２０４とが別個のサーバで機能するように構成されることを前提として説明するが、これに限らず、同一のサーバでそれぞれの機能を担うように構成されてもよい。あるいは、複数のサーバが用意され、それらのサーバ間で情報やデータのやり取りを行い、連携又は協働して各種機能を実行できるように構成してもよい。例えば、健康医療関連情報蓄積部２０１、アクセス制御部２０２およびインセンティブ機能部２０４（インセンティブ管理部２０３を少なくとも含む）がクラウドサーバで構成されるようにしてもよい。 Similarly, the present invention assumes that the health and medical information storage section 201, the access control section 202, and the incentive function section 204, which includes at least the incentive management section 203, are configured to function as separate servers. Although this will be described, the configuration is not limited to this, and the same server may be configured to perform the respective functions. Alternatively, a configuration may be adopted in which a plurality of servers are prepared, information and data are exchanged between the servers, and various functions can be executed in coordination or cooperation. For example, the health and medical information storage unit 201, the access control unit 202, and the incentive function unit 204 (including at least the incentive management unit 203) may be configured as a cloud server.
＜実施形態１（主に請求項１、請求項１２および請求項１３に対応）＞
＜実施形態１　概要＞
本実施形態は、個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積部と、健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御部と、個人に関する健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供するためのインセンティブ管理部を少なくとも含むインセンティブ機能部と、を有する健康医療関連情報一元管理システムを提供する。また、それを実現するため、健康医療関連情報一元管理システムにおけるＣＰＵが実行する方法、並びに、計算機である健康医療関連情報一元管理システムに読み取り実行可能に記述した健康医療関連情報一元管理システムの動作プログラムを提供する。 <Embodiment 1 (mainly corresponding to claims 1, 12, and 13)>
<Embodiment 1 Overview>
This embodiment includes a health and medical information storage unit for accumulating and centrally managing health and medical information related to individuals, and a health and medical information storage unit that stores the health and medical information accumulated in the health and medical information storage unit through a network. An access control section to control disclosure to third parties, and a system to provide incentives to individuals in order to promote the unified management of health and medical information regarding whether or not to disclose health and medical information related to individuals. An incentive function section including at least an incentive management section. In addition, in order to achieve this, we will explain the method executed by the CPU in the unified health and medical information management system, and the operation of the unified health and medical information management system written in a manner readable and executable by the unified health and medical information management system, which is a computer. Provide programs.
＜実施形態１　機能的構成＞
図２ｂは、実施形態１における健康医療関連情報一元管理システムの機能的構成を示す図である。本実施形態では、健康医療関連情報蓄積部と、アクセス制御部と、インセンティブ管理部を少なくとも含むインセンティブ機能部とを備えている。 <Embodiment 1 Functional configuration>
FIG. 2b is a diagram showing the functional configuration of the health and medical related information unified management system according to the first embodiment. This embodiment includes a health and medical information storage section, an access control section, and an incentive function section including at least an incentive management section.
＜実施形態１　構成の説明：健康医療関連情報蓄積部＞
「健康医療関連情報蓄積部」２０１は、個人に関する電子カルテ情報、各種検査情報（健診、検診などを含んでもよい）、処方箋情報、薬歴情報、服用状況情報、バイタル情報（例えば、体温、血圧、脈拍、心拍数、身長、体重、血糖値、体脂肪率、動脈血中酸素飽和度、脳波、心電図、歩数、呼吸数、心音、尿測定情報（例えば、尿糖、尿タンパク、尿潜血、ウロビリノーゲン、ｐＨ、ビリルビン、ケトン体、亜硝酸塩など）、睡眠時間などを少なくとも含み、これに限られない）、問診票の情報、健康促進アプリのデータ、対話型健康促進ＳＮＳの会話データなどの何れか１以上の情報を含む健康医療関連情報を蓄積する機能を有するように構成される。
「電子カルテ情報」は、例えば、患者に関する基本情報（例えば、患者ＩＤ、氏名、生年月日、連絡先、緊急連絡先、家族歴、身長・体重、アレルギー情報、喫煙や飲酒の状況、既往歴など）、診察に関する情報（例えば、患者の主訴（自覚症状や体調などの訴え）、各種検査結果、お薬の情報、診断名、治療方針、医師による診察記録、医師からの指示など）、看護や経過に関する情報（例えば、バイタル情報（例えば、体温、血圧、脈拍、心拍数、身長、体重、血糖値、体脂肪率、動脈血中酸素飽和度、脳波、心電図、歩数、呼吸数、心音、尿測定情報（例えば、尿糖、尿タンパク、尿潜血、ウロビリノーゲン、ｐＨ、ビリルビン、ケトン体、亜硝酸塩など）、睡眠時間などを少なくとも含み、これに限られない）、観察結果、尿や便などの記録、食事内容と摂取量の記録、看護ケアの記録など）、検査に関する情報（例えば、検査指示、検査結果、画像検査により得られた画像（一部）、その画像に対するレポートなど）、処置や手術に関する情報（例えば、処置や手術の指示、処置や手術の経過と結果、病理診断を行った場合にはその方法と診断結果など）、お薬に関する情報（例えば、創薬の指示、投薬日時と薬剤、投薬の結果など）、治療後又は術後の経過観察情報などが含まれるように構成されることが望ましい。
「処方箋情報」は、例えば、保険者番号、氏名・生年月日・性別、医療機関名・連絡先・処方した医師の名前、お薬の名前・お薬の形（錠剤、カプセル剤、液剤、散剤、顆粒剤など）・お薬の量（１回あたりに飲む量）・１日に飲む回数・飲むタイミング、ジェネリック医薬品への変更についての情報、分割調剤の回数などが含まれるように構成されることが望ましい。
「薬歴情報」は、例えば、患者の氏名・生年月日・性別・マイナンバー情報または被保険者証の記号番号・住所・緊急時連絡先、処方した保険医療機関名及び保険医氏名・処方日・処方内容、調剤日・処方内容に関する照会の要点等、患者の体質・アレルギー歴・副作用歴、患者又はその家族等からの相談事項の要点、服薬状況、残薬の状況の確認、服薬中の体調の変化、併用薬、合併症を含む既往歴に関する情報、他科受診の有無、副作用が疑われる症状の有無、飲食物（薬剤との相互作用）の摂取状況、後発医薬品の使用に関する患者の意向、手帳による情報提供の状況、服薬指導の要点、指導した保険薬剤師の氏名などが含まれるように構成されることが望ましい。
「服用状況情報」は、例えば、処方された薬の残量に関する情報（例えば、患者がうっかり飲み忘れた場合や、患者が意図的に飲まなかった場合などに残った薬の量などを含む）、来院／来局に関するタイミング情報（例えば、予定処方終了日（予定服用終了日）から実際に来院／来局するまでに要する期間（例えば、予定よりも早く来院／来局した場合や、予定よりも遅く来院／来局した場合なども含む）など）、服用についての患者の訴え（例えば、ある薬を飲み続けたら、じん麻疹が出てしまった、あるいは、ある薬を飲んだら、効きすぎてしまい、身体がふらふらするなどの自覚症状や体調に関する訴えを含む）に関する情報などが含まれるように構成されることが望ましい。
なお、本件発明においては、個人（利用者）を識別するためにマイナンバー情報、あるいは、個人（利用者）が加入している健康保険の被保険者証番号を使用し、それに個人に関する健康医療関連情報を関連付けて、収集・蓄積するようにしてもよい。 <Embodiment 1 Configuration description: Health and medical information storage unit>
The “health and medical information storage unit” 201 stores electronic medical record information related to individuals, various test information (which may include medical examinations, medical examinations, etc.), prescription information, drug history information, medication status information, vital information (for example, body temperature, Blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial oxygen saturation, electroencephalogram, electrocardiogram, number of steps, breathing rate, heart sounds, urine measurement information (e.g., urine sugar, urine protein, urine occult blood, (including, but not limited to, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), information from medical questionnaires, data from health promotion apps, conversation data from interactive health promotion SNS, etc. The device is configured to have a function of accumulating health and medical related information including one or more of the above information.
"Electronic medical record information" includes, for example, basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height/weight, allergy information, smoking and drinking status, medical history) ), medical examination information (e.g., patient's chief complaint (complaints about subjective symptoms and physical condition), various test results, medication information, diagnosis name, treatment policy, doctor's examination records, doctor's instructions, etc.), nursing care and information regarding progress (e.g., vital information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds, urine) Measurement information (e.g., urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), including but not limited to sleep time, etc.), observation results, urine and stool, etc. information about the test (e.g., test instructions, test results, some images obtained from an imaging test, reports for those images, etc.), information about the procedure and Information regarding surgery (e.g. instructions for treatment or surgery, progress and results of treatment or surgery, method and results of pathological diagnosis, etc.), information regarding medicines (e.g. instructions for drug discovery, date and time of administration, etc.) It is desirable that the information is configured to include information on information such as medical information, drugs, medication results, etc.), post-treatment or post-surgery follow-up information, etc.
"Prescription information" includes, for example, insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablets, capsules, liquid, etc.) It is structured to include information such as the amount of medicine (powders, granules, etc.), the amount of medicine (amount to take at a time), the number of times to take the medicine per day, the timing of taking it, information about switching to generic drugs, and the number of times to split the medication. It is desirable that
"Medication history information" includes, for example, the patient's name, date of birth, gender, My Number information, the symbol number of the insurance card, address, emergency contact information, the name of the insurance medical institution that prescribed the medicine, and the name and prescription of the insurance doctor. day/prescription details, dispensing date/key points for inquiries regarding prescription details, patient's constitution, allergy history, history of side effects, key points for consultation from patients or their families, confirmation of medication status, remaining medication status, medication status, etc. Patients regarding changes in their physical condition, concomitant medications, medical history including complications, whether they have visited other departments, whether they have symptoms suspected of having side effects, intake status of food and drinks (drug interactions), and use of generic drugs. It is desirable to include information such as the patient's intentions, the status of providing information in the notebook, the main points of medication guidance, and the name of the insurance pharmacist who provided the guidance.
"Dose status information" includes, for example, information regarding the remaining amount of prescribed medicine (for example, the amount of medicine remaining if the patient accidentally forgets to take it or does not intentionally take it) , Timing information regarding visits to the hospital/office (e.g., the period required from the scheduled prescription end date (scheduled dosing end date) to the actual visit/office visit (e.g., if you come to the hospital/office earlier than planned, or when you come to the office earlier than planned) patients' complaints about medication (e.g., if you keep taking a certain medicine, you get hives, or if you take a certain medicine and it's too effective) It is desirable that the information is configured to include information regarding symptoms (including complaints about physical condition and subjective symptoms such as feeling dizzy and dizzy).
In addition, in this invention, My Number information or the insured card number of the health insurance that the individual (user) subscribes to is used to identify the individual (user), and the health and medical information related to the individual is used. Related information may be collected and accumulated in association with each other.
また、「健康医療関連情報」は、例えば、ＰＨＲ等を含むようにしてもよい。ここで、ＰＨＲとは、Ｐｅｒｓｏｎａｌ　Ｈｅａｌｔｈ　Ｒｅｃｏｒｄの頭文字をとった略語で、個人の健康・医療・介護に関する情報のことを指していう。個人の健康・医療・介護に関する情報を一人ひとりが自分自身で生涯にわたって時系列的に管理・活用することによって、自己の健康状態に合った優良なサービスの提供を受けることができることを目指すものである。例えば、国民一人ひとりは、これまで、たくさんの健康や医療に関する情報を、種々の手帳や書類の紙媒体に記録を残してきている。それらの記録はその時のライフステージ（人生の節目）によって、記録が残る媒体や場所も異なっている。例えば、出産に際しては「母子健康手帳」、学校教育を受ける時期には「学校健康診断の結果」、就職に際しては「定期健康診断の結果」等である。また、体調によっては「疾病管理手帳」や「お薬手帳」等によって、自身の健康管理をすることになり、高齢層になれば「介護予防手帳」や「かかりつけ連携手帳」に記録されることになる。このような、もともとある「手帳文化」をデジタル化し、データとして一元的にまとめることにより、自分自身で管理・活用していくという考え方や仕組みが存在し、今後更に普及してくることが予想されている。 Further, the "health and medical related information" may include, for example, PHR and the like. Here, PHR is an abbreviation that stands for Personal Health Record, and refers to information regarding personal health, medical care, and nursing care. The aim is for each person to be able to receive excellent services that match their own health status by managing and utilizing information regarding their personal health, medical care, and nursing care in a chronological manner throughout their lifetime. . For example, each citizen has recorded a large amount of health and medical information in paper media such as various notebooks and documents. The medium and location in which these records are kept differ depending on the life stage (milestone of life) at the time. For example, when giving birth, a ``maternal and child health handbook'' is required, when receiving school education, ``school health checkup results'' are required, and when finding a job, ``periodic health checkup results'' are required. Also, depending on your physical condition, you may need to manage your own health using a ``disease management notebook'' or ``medication notebook,'' and if you are an elderly person, it may be recorded in a ``nursing care prevention notebook'' or ``family cooperation notebook.'' become. There is a concept and system that allows people to manage and utilize their own data by digitizing the original "notebook culture" and centralizing it as data, and it is expected that it will become even more popular in the future. ing.
＜実施形態１　構成の説明：アクセス制御部＞
「アクセス制御部」２０２は、健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するための機能を有するように構成される。例えば、後述するように、第三者端末からのアクセスに対して、ＩＰパケットを解析する機能、宛先ＩＰアドレスを判断する機能、アクセスＩＤ／利用者ＩＤを取得する機能、アクセス主体／利用者属性を取得する機能、これらに基づきアクセス制御を行う機能を有するように構成されることが望ましい。 <Embodiment 1 Configuration description: Access control unit>
The "access control unit" 202 is configured to have a function of controlling disclosure of the health and medical information stored in the health and medical information storage unit to a third party via the network. For example, as described below, for access from a third party terminal, there is a function to analyze IP packets, a function to determine the destination IP address, a function to obtain the access ID/user ID, access subject/user attributes, etc. It is desirable to have a configuration that has the function of acquiring the information and the function of performing access control based on these.
＜実施形態１　構成の説明：インセンティブ管理部＞
「インセンティブ管理部」２０４は、個人の健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供する機能を有するように構成される。
図２ｅは、実施形態１における健康医療関連情報一元管理システムの機能的構成の一例を示す図である。
この場合では、第三者端末を利用してアクセスしてきた個人（利用者）、即ち、マイナンバー情報「１２３４５６７８９０１２」を所有する個人（利用者）に関連付けられ、どの健康医療関連情報に対してインセンティブを提供することについて、当該個人の同意があるか否かを示す情報が一覧表形式のようになって記憶・管理されている。同意がある場合には、その健康医療関連情報について、第三者に公開することを許可する状態、即ち、インセンティブを付与する状態となる。不同意の場合には、その健康医療関連情報について、第三者に公開しない状態、即ち、インセンティブを付与しない状態となる。これらのインセンティブに関する情報は、インセンティブ管理部が健康医療関連情報蓄積部と定期的にやり取りを行い、常に最新の状態に保たれるようにすることが望ましい。
例えば、図２ｅの場合では、健康医療関連情報のひとつ一つに対して、個人の同意がなされているか否かを記憶・管理している。「★」印がその個人の同意の意思を示している。ここで、健康医療関連情報欄に記載された表示項目（例えば、「定期健診結果」など）を、端末の画面でクリック、タッチ又はタップすると、さらに詳細な情報がポップアップ画面又は他の遷移画面に表示されるようにしてもよい。また、同意欄又は不同意欄の「★」印を、端末の画面でクリック、タッチ又はタップすると、同意、あるいは、不同意とした日時がポップアップ画面に表示されるようにしてもよい。特に、同意欄に「★」印が付された健康医療関連情報については、後述するインセンティブに関連付けられて記憶・管理されるようにすることが好ましい。なお、同意欄又は不同意欄に何の印もない健康医療関連情報については、未だ個人（利用者）の同意又は不同意の意思が示されていない状態を表している。 <Embodiment 1 Configuration description: Incentive management department>
The "incentive management unit" 204 is configured to have a function of providing incentives to individuals in order to promote unified management of health and medical information regarding whether or not to disclose personal health and medical information.
FIG. 2e is a diagram illustrating an example of the functional configuration of the health and medical related information unified management system according to the first embodiment.
In this case, the incentive will be linked to the individual (user) who has accessed using a third party terminal, that is, the individual (user) who owns My Number information "123456789012", and which health and medical related information will be given an incentive. Information indicating whether or not the individual has consented to the provision of information is stored and managed in a list format. If consent is given, the health and medical information will be allowed to be disclosed to a third party, that is, an incentive will be given. In the case of disagreement, the health and medical information will not be disclosed to third parties, that is, no incentives will be given. It is desirable that information regarding these incentives be kept up-to-date by the incentive management department regularly communicating with the health and medical information storage department.
For example, in the case of FIG. 2e, it is stored and managed whether or not the individual has consented to each piece of health and medical related information. The "★" mark indicates the individual's consent. If you click, touch, or tap the display item listed in the health and medical information field (for example, "regular medical checkup results") on the terminal screen, more detailed information will appear on a pop-up screen or other transition screen. may be displayed. Further, by clicking, touching, or tapping the "★" mark in the consent column or disagreement column on the screen of the terminal, the date and time of consent or disagreement may be displayed on a pop-up screen. In particular, it is preferable that health and medical related information marked with a "★" mark in the consent column be stored and managed in association with incentives to be described later. Note that health and medical information for which there is no mark in the consent or non-consent column indicates that the individual (user) has not yet expressed consent or non-consent.
＜実施形態１　構成の説明：インセンティブ機能部＞
「インセンティブ機能部」２０５は、少なくとも「インセンティブ管理部」２０４を含み、後述するように、インセンティブに関する情報へのアクセス制御を行う機能、同意情報を取得する機能、インセンティブを処理する機能などを有するように構成される。
図２ｅは、実施形態１における健康医療関連情報一元管理システムの機能的構成の一例を示す図である。
この場合では、インセンティブ機能部は、個人がマイナンバー情報およびパスワード情報を該当欄に入力して、一致する情報がシステム内に存在する場合に、アクセスが許可される。
この図の場合では、利用者が情報を直接入力する方式で説明しているが、例えば、利用者がスマートフォンを利用する場合などではスマートフォンのＩＣカード読み取り機能を使用して、マイナンバーカードをスマートフォンにかざしてマイナンバー情報などの所定の情報を自動的に読み取り、入力するような方式としてもよい。
なお、例えば、マイナンバー情報及び／又はパスワード情報が３回連続して入力に失敗した場合には、ロック状態となって、自治体（市区町村役場など）に行き、ロックを解除してもらうようにしてもよい。あるいは、一時的にロック状態として、「次の日に再度やり直して下さい。」などの注意喚起が端末に表示されたり、あるいは、音声や警告音で利用者に報知されたりするようにしてもよい。
また、個人（利用者）がどの健康医療関連情報に対して同意したか否かが、容易に判別できるように記憶・管理されることが望ましい。
更に、インセンティブ処理については、利用者が同意した健康医療関連情報に対してインセンティブをどの程度付与するかを処理するように構成されることが望ましい。
例えば、図２ｅの例では、１つの個人に関する健康医療関連情報につき１００ｐ（ポイント）であると所定の算出ルールに基づいて算出されて付与されている。また、インセンティブの算出ルールについては、その健康医療関連情報の重要性、緊急性、希少性、有用性などを考慮して、重みづけ処理を行い、健康医療関連情報毎に異なるインセンティブを算出して付与するように処理されてもよい。特に、例えば、日本人の死因のトップである悪性新生物（癌）、患者数の多い高血圧症、糖尿病、脂質異常症、歯周病又は眼の疾患、新型コロナウイルス感染症などを含む「感染症法」で定義された各種感染症、世界的に症例の少ない特異な病気などについては、その健康医療関連情報が第三者に公開されることによって医学の進歩に大きく貢献できる点を考慮すれば、他の病気よりもインセンティブを多く（高く）するように算出ルールを設定することが考えられる。
また、「インセンティブ」とは、簡潔にいうと「動機付け、報酬」ことを指し、何かの行動を起こさせることを狙って意図的に刺激を与えたりすることなどを意味している。本件発明では、「インセンティブ」とは、上記ポイントなどの他に、情報提供者に対する個別的情報サービスや一般的情報サービス、個別的薬剤やサプリメントの提供、書籍、その他の商品などの提供、情報提供のためなどのパスワードやＩＤの提供、ネットワーク上で利用できるアイテムの提供、権利の提供、例えば、診察を受ける権利の提供、診断を受ける権利の提供、検査を受ける権利の提供、ネットワーク上で各種サービスを受ける権利の提供、特定のソフトウエア（例えば健康管理アプリ）の提供、前払い式又は後払い式電子マネーへのポイントの提供、商品クーポンや旅行クーポンまたは現金の提供などが含まれるようにしてもよい。
なお、本件発明では、個人に関する健康医療関連情報について、第三者に公開許可するか否かを示す公開許否情報が既に関連づけられて記憶・管理されているケース、あるいは、個人（利用者）が自身に関わる健康医療関連情報を健康医療関連情報蓄積部に新規に登録する場合であって公開許否情報が未だ関連付けられて記憶・管理されていないケースの何れの場合でも適用することが可能である。即ち、健康医療関連情報一元管理システム内には、個人に関する健康医療関連情報が保持されていないが、例えば、個人が保有する端末にその個人の健康医療関連情報が保持されており、これを本システムにアップロードする場合には、アップロードがされた情報の形式的なチェックによって、その情報が健康医療関連情報として公開可能であると判断された場合には、その結果に応じてインセンティブを付与するようにインセンティブ機能部が機能するように構成することができる。この場合には、本システムのアクセス制御部は、第三者からの健康医療関連情報の閲覧アクセスを拒否することがないように構成されてもよい。但し、第三者の種別や資格に応じて部分的にアクセスを拒否ないしは制限するように構成してもよい。なお、個人の健康医療関連情報を本システムにアップロードすることは転送であってもよく、転送元は個人の端末でなく、他の健康医療関連情報を蓄積しているシステムであってもよい。例えば、母子手帳情報サーバや、ＰＨＲ（Ｐｅｒｓｏｎａｌ　Ｈｅａｌｔｈ　Ｒｅｃｏｒｄ）や、介護情報サーバや、歯科医療情報サーバや、リハビリ情報サーバなどに蓄積されている健康医療関連情報が本システムに個人の承諾のもと転送されるように構成することができる。この場合には、この母子手帳情報サーバなどから個人の健康医療関連情報がアップロードされ、形式的なチェックが完了した時点で、インセンティブ機能部が機能するように構成することができる。 <Embodiment 1 Configuration description: Incentive function section>
The "incentive function unit" 205 includes at least the "incentive management unit" 204, and has functions such as a function to control access to information regarding incentives, a function to obtain consent information, a function to process incentives, etc., as described later. It is composed of
FIG. 2e is a diagram illustrating an example of the functional configuration of the health care-related information unified management system according to the first embodiment.
In this case, the incentive function section allows access when the individual enters My Number information and password information in the corresponding fields and matching information exists in the system.
In the case shown in this figure, the explanation is based on a method in which the user directly inputs the information, but for example, if the user uses a smartphone, they can use the smartphone's IC card reading function to insert the My Number card into the smartphone. It may also be possible to automatically read and input predetermined information such as My Number information by holding it up.
For example, if you fail to enter your My Number information and/or password information three times in a row, it will become locked and you will be asked to go to the local government (municipal office, etc.) and have it unlocked. You may also do so. Alternatively, the terminal may be temporarily locked and a warning such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or warning sound. .
Furthermore, it is desirable that the information be stored and managed in such a way that it can be easily determined which healthcare-related information an individual (user) has consented to or not.
Further, regarding incentive processing, it is desirable to be configured to process how much incentive to give to health and medical related information to which the user has consented.
For example, in the example shown in FIG. 2e, 100p (points) is calculated and awarded based on a predetermined calculation rule for health and medical related information regarding one individual. In addition, regarding the incentive calculation rules, weighting processing is performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical information, and different incentives are calculated for each health and medical information. It may also be processed to give. In particular, we are focusing on infectious diseases, including malignant neoplasms (cancer), which is the leading cause of death in Japan, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, and new coronavirus infections, which have a large number of patients. Regarding various infectious diseases defined in the ``Treatment Control Act'' and unique diseases with few cases worldwide, it should be considered that the disclosure of health and medical information to third parties can greatly contribute to the advancement of medicine. For example, calculation rules could be set to provide more (higher) incentives than for other diseases.
Furthermore, ``incentive'' simply means ``motivation or reward,'' and it means intentionally providing stimulation with the aim of getting someone to take some action. In this invention, "incentives" include, in addition to the points mentioned above, individual information services and general information services for information providers, provision of individual drugs and supplements, provision of books and other products, and provision of information. Provision of passwords and IDs for various purposes, provision of items that can be used on the network, provision of rights, for example, provision of the right to receive a medical examination, provision of the right to receive a diagnosis, provision of the right to undergo a test, provision of various items on the network This may include providing the right to receive services, providing specific software (e.g., a health management app), providing points for prepaid or postpaid electronic money, providing product coupons, travel coupons, or cash. good.
In addition, in the present invention, the disclosure permission information indicating whether or not to permit disclosure to a third party is already stored and managed in relation to health and medical related information regarding an individual, or when the individual (user) It can be applied in any case where health and medical information related to oneself is newly registered in the health and medical information storage unit, and the disclosure permission information has not yet been associated and stored and managed. . In other words, although health and medical information related to individuals is not held within the unified health and medical information management system, for example, personal health and medical information is held on terminals owned by individuals, and this information cannot be directly accessed. When uploading to the system, if it is determined that the uploaded information can be disclosed as health and medical information through a formal check, incentives will be given according to the results. The incentive function unit can be configured to function in the following manner. In this case, the access control unit of the present system may be configured so as not to deny access to view health and medical information from a third party. However, it may be configured to partially deny or restrict access depending on the type or qualification of the third party. Note that uploading personal health and medical information to this system may be a transfer, and the source of the transfer may not be an individual's terminal but a system that stores other health and medical information. For example, health and medical-related information stored in maternal and child health record information servers, PHRs (Personal Health Records), nursing care information servers, dental care information servers, rehabilitation information servers, etc. can be transferred to this system with the consent of individuals. It can be configured to be forwarded. In this case, the incentive function section can be configured to function when personal health and medical information is uploaded from the maternal and child handbook information server and the formal check is completed.
＜実施形態１　健康医療関連情報一元管理システム：ハードウェア構成＞
本実施形態における健康医療関連情報一元管理システムのハードウェア構成について図を用いて説明する。 <Embodiment 1 Health and medical related information unified management system: Hardware configuration>
The hardware configuration of the unified health and medical information management system in this embodiment will be explained using diagrams.
図２ｃは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」２１１と、「メインメモリ」２１２とを備えている。また、所定の情報を保持する「不揮発性メモリ」２１３や、複数の第三者端末２１６や管理者端末２１７と情報の送受信を行う「ネットワークＩ／Ｆ（インターフェース）」２１４を備えている。そして、それらが「バス」２１５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 FIG. 2c is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 211 that performs various calculation processes, and a "main memory" 212. It also includes a "nonvolatile memory" 213 that holds predetermined information, and a "network I/F (interface)" 214 that sends and receives information to and from a plurality of third party terminals 216 and an administrator terminal 217. These devices are interconnected by a data communication path such as a “bus” 215, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、健康医療関連情報蓄積プログラム、アクセス制御プログラム、インセンティブ管理プログラムなどである。また、「メインメモリ」と「不揮発性メモリ」には、健康医療関連情報、インセンティブ管理情報などが格納されている。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, the programs stored in the "main memory" include a health and medical information storage program, an access control program, an incentive management program, and the like. Furthermore, the "main memory" and "nonvolatile memory" store health and medical related information, incentive management information, etc.
「ＣＰＵ」は、「メインメモリ」に格納されている健康医療関連情報蓄積プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきた個人に関する健康医療関連情報、例えば、電子カルテ情報、各種検査情報、処方箋情報、薬歴情報、服用状況情報、バイタル情報（例えば、体温、血圧、心拍数など）などの健康医療関連情報を「メインメモリ」や「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されているアクセス制御プログラムを実行して、個人に関する健康医療関連情報へのアクセスを制御する。また、「メインメモリ」に格納されているインセンティブ管理プログラムを実行して、個人の所望の健康医療関連情報に対して、インセンティブを付与・管理するようにし、それらのインセンティブに関する情報を「メインメモリ」と「不揮発性メモリ」に格納する。 The "CPU" executes the health and medical information storage program stored in the "main memory" and collects health and medical information related to the individual sent from a third party terminal through the "network I/F", for example. , electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information (e.g. body temperature, blood pressure, heart rate, etc.) and other health and medical related information is stored in "main memory" and "non-volatile memory". Store in. It also executes an access control program stored in the "main memory" to control access to health and medical related information about the individual. In addition, the incentive management program stored in the "main memory" is executed to grant and manage incentives for the individual's desired health and medical information, and the information regarding those incentives is stored in the "main memory". and stored in "non-volatile memory".
＜実施形態１　健康医療関連情報一元管理システム：処理の流れ＞
図２ｄは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。図に示されるように、健康医療関連情報蓄積ステップＳ２２１と、アクセス制御ステップＳ２２２と、インセンティブ管理ステップＳ２２３とからなる処理方法である。
これらの処理方法は、個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積部と、健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御部と、個人に関する健康医療関連情報の公開許否について、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供するためのインセンティブ管理部を少なくとも含むインセンティブ機能部と、を有する健康医療関連情報一元管理システムによって実行されるものである。 <Embodiment 1 Health and medical related information unified management system: Processing flow>
FIG. 2d is a diagram showing the flow of processing when the unified health and medical information management system in this embodiment is used. As shown in the figure, this processing method includes a health and medical information storage step S221, an access control step S222, and an incentive management step S223.
These processing methods involve a health and medical information storage unit that accumulates and centrally manages health and medical information related to individuals, and a health and medical information storage unit that stores the health and medical information stored in the health and medical information storage unit through a network. To provide incentives to individuals in order to promote the unified management of health and medical information regarding the access control section to control disclosure to third parties and whether or not to disclose health and medical information related to individuals. and an incentive function unit including at least an incentive management unit.
「健康医療関連情報蓄積ステップ」Ｓ２２１とは、ネットワークを介して、第三者端末から送られてきた個人に関する健康医療関連情報、例えば、電子カルテ情報、各種検査情報、処方箋情報、薬歴情報、服用状況情報、バイタル情報（例えば、体温、血圧、心拍数など）などを蓄積する段階である。 "Health and medical related information accumulation step" S221 refers to health and medical related information about an individual sent from a third party terminal via a network, such as electronic medical record information, various test information, prescription information, drug history information, etc. This is the stage of accumulating medication status information, vital information (for example, body temperature, blood pressure, heart rate, etc.).
「アクセス制御ステップ」Ｓ２２２とは、健康医療関連情報蓄積部に蓄積された個人に関する健康医療関連情報へのアクセスを制御する段階である。 "Access control step" S222 is a step of controlling access to the health and medical information related to the individual stored in the health and medical information storage unit.
「インセンティブ管理ステップ」Ｓ２２３とは、個人の所望の健康医療関連情報に対して、インセンティブを付与・管理する段階である。 "Incentive management step" S223 is a stage in which incentives are given and managed for the health and medical related information desired by the individual.
＜まとめ＞
以上より、本発明では、個人に関する健康医療関連情報の公開許否に関して、健康医療関連情報の一元管理化を促すために、個人に対してインセンティブを提供する健康医療関連情報一元管理システムを提供することができる。
また、本発明では、個人に対するインセンティブの提供によって、個人の健康医療関連情報を第三者への公開の許諾とする構造により、個人が健康医療関連情報を第三者に公開する機会を増やすことに繋がり、国全体の医療費削減や国民全体の健康増進、あるいは、研究機関、製薬企業などが創薬に掛ける時間と費用を軽減させることができ、ひいては、医学の進歩にも貢献することができる。
ここで、「創薬」とは、医薬品の元となる化合物・化学物質（シーズともいわれる）が製品となって販売されるまでの過程のことをいう。また、化合物・化学物質が医薬品となって販売されるまでには次の（１）～（５）の工程が必要不可欠である。
（１）創薬標的（化合物・化学物質）の候補を選出
（２）作用をスクリーニングすることにより、医薬品の元となる候補物質を選定
　スクリーニングには、バイオテクノロジー技術やコンビナトリアル化学（多数の化合物を組み合わせて作り出す技術）、ＡＩロボット技術を活用する高効率スクリーニングなどの種類がある。
（３）動物実験
　動物、もしくは培養細胞を使用して安全性や有効性などを詳細に調査・確認する。この段階で安全性・有効性が確認された薬は「治験薬」と呼ばれる。
（４）治験
　治験薬を実際にヒトに使用して、その効果や安全性を詳しく調べ、実際の治療に役立つかどうかを確認する。
（５）承認申請と審査
　上記（１）～（４）全ての検査をパスした薬を、厚生労働省に申請する。その後、医薬品医療機器総合機構で審査を受け、厚生労働大臣の承認を待つ。承認されて初めて、製品として販売できる医薬品が誕生する。
なお、一般的に、創薬の期間は約１０～１８年といわれており、化合物・化学物質が新薬となる確率は約1万分の1である。また、創薬が成功するまでにかかる費用は、総額２００億円近いといわれている。 <Summary>
As described above, the present invention provides a unified health and medical information management system that provides incentives to individuals in order to promote unified management of health and medical information regarding whether or not to disclose health and medical information related to individuals. I can do it.
In addition, the present invention increases the opportunity for individuals to disclose health and medical information to third parties by providing incentives to individuals and allowing them to disclose their health and medical information to third parties. This will lead to a reduction in national medical costs, improve the health of the entire population, and reduce the time and costs spent on drug discovery by research institutions and pharmaceutical companies, ultimately contributing to the advancement of medicine. can.
Here, "drug discovery" refers to the process by which compounds and chemical substances (also called seeds) that form the basis of pharmaceuticals are turned into products and sold. Furthermore, the following steps (1) to (5) are essential before a compound or chemical substance can be sold as a drug.
(1) Select candidates for drug discovery targets (compounds/chemical substances) (2) Select candidate substances that will become the basis for pharmaceuticals by screening their effects. There are various types such as high-efficiency screening that utilizes AI robot technology and AI robot technology.
(3) Animal experiments: Detailed investigation and confirmation of safety and effectiveness using animals or cultured cells. Drugs whose safety and effectiveness have been confirmed at this stage are called ``investigational drugs.''
(4) Clinical trial The investigational drug is actually used on humans to investigate its effectiveness and safety in detail, and to confirm whether it is useful for actual treatment.
(5) Approval application and review Drugs that have passed all tests (1) to (4) above are submitted to the Ministry of Health, Labor and Welfare. The drug will then undergo a review by the Pharmaceuticals and Medical Devices Agency and await approval from the Minister of Health, Labor and Welfare. Only after approval can a drug be produced that can be sold as a commercial product.
Generally, drug discovery is said to take approximately 10 to 18 years, and the probability that a compound or chemical substance will become a new drug is approximately 1 in 10,000. Furthermore, the total cost for successful drug discovery is said to be close to 20 billion yen.
＜実施形態２（主に請求項２に対応）＞
＜実施形態２　概要＞
本実施形態は、実施形態１に加えて、健康医療関連情報一元管理システムのインセンティブ機能部に対して、ネットワークを介して、第三者端末からアクセス認証を行うアクセス認証処理部を備えた点に特徴がある。これ以降、実施形態１と重複する機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 <Embodiment 2 (mainly corresponding to claim 2)>
<Embodiment 2 Overview>
In addition to Embodiment 1, this embodiment includes an access authentication processing unit that performs access authentication from a third party terminal via a network to the incentive function unit of the health and medical information unified management system. It has characteristics. From now on, descriptions of functions, hardware configurations, and processing flows that overlap those of the first embodiment will be omitted as appropriate.
＜実施形態２　構成の説明：アクセス認証処理部＞
図３ａは、健康医療関連情報一元管理システムの機能的構成を示す図である。この図に示すように、「アクセス認証処理部」３０１は、インセンティブ機能部に含まれ、インセンティブ管理部に対して、個人がアクセスするのを許可するか否かを認証する機能を有するように構成される。
例えば、図１１ａは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。ここでは、第三者端末がＷＥＢブラウザを利用して、健康医療関連情報一元管理システムに対して、アクセスしてきた場合を想定している。
このログイン画面において、利用者（個人）が自身のマイナンバー情報およびパスワード情報を該当欄に入力して、一致する情報がシステム内に存在する場合に、アクセスが許可される。
同図の例では、利用者が情報を直接入力する形式で説明しているが、例えば、利用者がスマートフォンを利用する場合などでは、スマートフォンのＩＣカード読み取り機能を使用して、マイナンバーカードをスマートフォンにかざしてマイナンバー情報などの所定の情報を自動的に読み取り、入力するような形式としてもよい。
なお、例えば、マイナンバー情報及び／又はパスワード情報が３回連続して入力に失敗した場合には、ロック状態となって、自治体（市区町村役場など）に行き、ロックを解除してもらうようにしてもよい。あるいは、一時的にロック状態として、「次の日に再度やり直して下さい。」などの注意喚起が端末に表示されたり、あるいは、音声や警告音で利用者に報知されたりするようにしてもよい。 <Embodiment 2 Configuration Description: Access Authentication Processing Unit>
FIG. 3a is a diagram illustrating the functional configuration of a unified health and medical information management system. As shown in this figure, an "access authentication processing unit" 301 is included in the incentive function unit and is configured to have a function of authenticating whether or not to permit access by an individual to the incentive management unit. be done.
For example, FIG. 11a is a diagram showing an example of a user interface in the health and medical related information unified management system of the present invention. Here, it is assumed that a third party terminal accesses the health and medical information unified management system using a web browser.
On this login screen, the user (individual) enters his/her own My Number information and password information in the corresponding fields, and if matching information exists in the system, access is permitted.
In the example in the figure, the user inputs the information directly, but if the user uses a smartphone, for example, the user can use the smartphone's IC card reading function to insert the My Number card into the smartphone. It may also be a format in which predetermined information such as My Number information is automatically read and input by holding it up.
For example, if you fail to enter your My Number information and/or password information three times in a row, it will become locked and you will be asked to go to the local government (city, ward, town, or village office, etc.) and have it unlocked. You may also do so. Alternatively, the terminal may be temporarily locked and a warning such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or warning sound. .
＜実施形態２　健康医療関連情報一元管理システム：ハードウェア構成＞
本実施形態における健康医療関連情報一元管理システムのハードウェア構成について図を用いて説明する。 <Embodiment 2 Health and medical related information unified management system: Hardware configuration>
The hardware configuration of the health and medical related information unified management system in this embodiment will be explained using diagrams.
図３ｂは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」３１１と、「メインメモリ」３１２とを備えている。また、所定の情報を保持する「不揮発性メモリ」３１３や、複数の第三者端末３１６や管理者端末３１７と情報の送受信を行う「ネットワークＩ／Ｆ（インターフェース）」３１４を備えている。そして、それらが「バス」３１５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 FIG. 3b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 311 that performs various calculation processes and a "main memory" 312. It also includes a "nonvolatile memory" 313 that holds predetermined information, and a "network I/F (interface)" 314 that sends and receives information to and from a plurality of third party terminals 316 and an administrator terminal 317. These devices are interconnected by a data communication path such as a “bus” 315, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、アクセス認証処理プログラムである。また、「メインメモリ」と「不揮発性メモリ」には、マイナンバー情報、パスワード情報などが格納されている。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, the program stored in the "main memory" is an access authentication processing program. In addition, "main memory" and "nonvolatile memory" store My Number information, password information, etc.
「ＣＰＵ」は、「メインメモリ」に格納されているアクセス認証処理プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきたマイナンバー情報及びパスワード情報の入力を受け付け、一致する情報が存在するかどうか認証を行う。また、マイナンバー情報およびパスワード情報を「メインメモリ」や「不揮発性メモリ」に格納する。 The "CPU" executes the access authentication processing program stored in the "main memory" and accepts input of My Number information and password information sent from third-party terminals through the "network I/F". , authenticate whether matching information exists. In addition, My Number information and password information are stored in "main memory" and "nonvolatile memory."
＜実施形態２　健康医療関連情報一元管理システム：処理の流れ＞
図３ｃは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。図に示されるように、アクセス認証処理ステップＳ３０１からなる処理方法である。 <Embodiment 2 Health and medical related information unified management system: Processing flow>
FIG. 3c is a diagram showing the flow of processing when the unified health and medical information management system in this embodiment is used. As shown in the figure, this processing method consists of access authentication processing step S301.
「アクセス認証処理ステップ」Ｓ３０１とは、第三者端末から送られてきた利用者に関するマイナンバー情報及びパスワード情報の入力を受け付け、一致する情報がシステムに存在するかどうか認証を行う段階である。 "Access authentication processing step" S301 is a step in which input of My Number information and password information regarding the user sent from a third party terminal is accepted, and it is authenticated whether matching information exists in the system.
＜まとめ＞
以上より、本発明では、健康医療関連情報一元管理システムのログイン画面において最初にアクセス認証を行うことにより、インセンティブに関連する情報へのアクセスを、個人（利用者）本人に制限することができる。 <Summary>
As described above, in the present invention, access to incentive-related information can be restricted to the individual (user) by first performing access authentication on the login screen of the unified health and medical information management system.
＜実施形態３（主に請求項３に対応）＞
＜実施形態３　概要＞
本実施形態は、実施形態１及び２に加えて、インセンティブ管理部によるインセンティブを受け入れることを了承する旨の情報である同意情報を取得する同意情報取得部を備えた点にある。これ以降、実施形態１及び２と重複する機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 <Embodiment 3 (mainly corresponding to claim 3)>
<Embodiment 3 Overview>
In addition to the first and second embodiments, the present embodiment includes a consent information acquisition section that acquires consent information that is information indicating consent to accept an incentive provided by the incentive management section. From now on, descriptions of functions, hardware configurations, and processing flows that overlap those of Embodiments 1 and 2 will be omitted as appropriate.
＜実施形態３　構成の説明：同意情報取得部＞
図４ａは、健康医療関連情報一元管理システムの機能的構成を示す図である。この図に示すように、「同意情報取得部」４０２は、インセンティブ機能部に含まれ、アクセス認証処理部４０１で認証された後、インセンティブ管理部によるインセンティブを受け入れることを了承する旨の情報である同意情報を取得する機能を有するように構成される。
図１１ｂは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、個人（利用者）が自身のマイナンバー情報及びパスワード情報を該当欄に入力して、一致する情報がシステム内に存在してアクセス認証が行われた後、機能選択画面に移行する。そして、「（Ａ）同意処理」に対応するＯＫボタンをクリック、タッチ又はタップすることにより、個人（利用者）の同意を取得する画面に遷移する。
図１１ｃは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、同意欄又は不同意欄にチェックボックス形式などのユーザーインターフェースを用意しておき、そこをクリック、タッチ又はタップすることにより、例えば、「★」印が付されて、利用者（個人）のインセンティブを受け入れるか否かの同意又は不同意の意思を受け付けるようにすることが好ましい。ＯＫボタンをクリック、タッチ又はタップすることにより、入力された同意情報がインセンティブ管理部に送られて記憶・管理されることとなる。なお、終了ボタンをクリック、タッチ又はタップすることにより、図１１ｂの機能選択画面に戻ることができる。
図１１ｂは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、個人（利用者）が自身のマイナンバー情報及びパスワード情報を該当欄に入力して、一致する情報がシステム内に存在してアクセス認証が行われた後、機能選択画面に移行して、「（Ｂ）閲覧処理」に対応するＯＫボタンをクリック、タッチ又はタップすることにより、個人（利用者）に関する健康医療関連情報と付与されたインセンティブとの関係を閲覧できる画面に遷移する。
図１１ｄは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、対象となる個人の健康医療関連情報と、それに対応して付与されたインセンティブについて、一覧表形式などで分かり易く表示することが好ましい。これにより、閲覧時点で付与されたインセンティブがどの健康医療関連情報に関連付けられているかが一目で分かる。なお、終了ボタンをクリック、タッチ又はタップすることにより、図１１ｂの機能選択画面に戻ることができる。
図１１ｂは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、個人（利用者）が自身のマイナンバー情報及びパスワード情報を該当欄に入力して、一致する情報がシステム内に存在してアクセス認証が行われた後、機能選択画面に移行する。そして、「（Ｃ）メンテナンス処理」に対応するＯＫボタンをクリック、タッチ又はタップすることにより、個人（利用者）に関する健康医療関連情報について、未だ同意／不同意がなされていない健康医療関連情報を表示すると共に、既に同意／不同意がなされている健康医療関連情報も表示される画面に遷移する。
図１１ｆは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、対象となる個人の健康医療関連情報と、それに対応する同意、不同意の状態が一覧表形式などで分かり易く表示することが好ましい。これにより、未だ閲覧時点で同意／不同意がなされていない健康医療関連情報については、個人（利用者）によって、チェックボックス形式の同意欄／不同意欄に「★」印を入力してＯＫボタンをクリック、タッチ又はタップすることにより、インセンティブの付与などが処理される。一方、既に同意欄／不同意欄に「★」印が入力されている健康医療関連情報については、適宜、必要に応じて、個人（利用者）が見直しを行い、例えば、同意から不同意に、あるいは、不同意から同意に変更して、ＯＫボタンをクリック、タッチ又はタップすることにより、更新処理が可能となる。なお、終了ボタンをクリック、タッチ又はタップすることにより、図１１ｂの機能選択画面に戻ることができる。 <Embodiment 3 Configuration description: Consent information acquisition unit>
FIG. 4a is a diagram showing the functional configuration of the health and medical related information unified management system. As shown in this figure, the "consent information acquisition unit" 402 is included in the incentive function unit, and after being authenticated by the access authentication processing unit 401, the “consent information acquisition unit” 402 receives information indicating consent to accept the incentive from the incentive management unit. It is configured to have a function to obtain consent information.
FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen. . Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent Processing", a transition is made to a screen for obtaining consent from the individual (user).
FIG. 11c is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, a user interface such as a check box is prepared in the consent or disagreement field, and by clicking, touching, or tapping it, a "★" mark is added, and the user (individual) ) It is preferable to accept the intention of accepting or not accepting the incentive. By clicking, touching, or tapping the OK button, the input consent information will be sent to the incentive management section and will be stored and managed. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen in FIG. 11b.
FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Viewing process," a screen transitions to a screen where the relationship between health and medical related information regarding the individual (user) and the granted incentive can be viewed.
FIG. 11d is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, it is preferable to display the health and medical related information of the target individual and the corresponding incentives in an easy-to-understand manner, such as in a list format. As a result, it can be seen at a glance which healthcare-related information the incentive granted at the time of viewing is associated with. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen in FIG. 11b.
FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen. . Then, by clicking, touching or tapping the OK button corresponding to "(C) Maintenance processing", the user can access the health and medical information related to the individual (user) for which consent/disapproval has not yet been made. At the same time, the screen changes to a screen that also displays health and medical information for which you have already consented/disapproved.
FIG. 11f is a diagram showing an example of a user interface in the health and medical related information unified management system of the present invention.
In this case, it is preferable to display the health and medical related information of the individual concerned and the corresponding consent/non-consent status in an easy-to-understand manner, such as in a list format. As a result, for health and medical related information for which consent/disagree has not yet been given at the time of viewing, individuals (users) can enter a "★" mark in the check box format consent/disagree column and click the OK button. By clicking, touching, or tapping, the granting of incentives, etc. is processed. On the other hand, for health and medical related information for which a "★" mark has already been entered in the consent/disagree column, individuals (users) may review it as appropriate and change the information from consent to non-consent, for example. Alternatively, the update process can be performed by changing from disapproval to consent and clicking, touching or tapping the OK button. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen in FIG. 11b.
＜実施形態３　健康医療関連情報一元管理システム：ハードウェア構成＞
本実施形態における健康医療関連情報一元管理システムのハードウェア構成について図を用いて説明する。 <Embodiment 3 Health and medical related information unified management system: Hardware configuration>
The hardware configuration of the health and medical related information unified management system in this embodiment will be explained using diagrams.
図４ｂは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」４１１と、「メインメモリ」４１２とを備えている。また、所定の情報を保持する「不揮発性メモリ」４１３や、複数の第三者端末４１６や管理者端末４１７と情報の送受信を行う「ネットワークＩ／Ｆ（インターフェース）」４１４を備えている。そして、それらが「バス」４１５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 FIG. 4b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 411 that performs various calculation processes, and a "main memory" 412. It also includes a "nonvolatile memory" 413 that holds predetermined information, and a "network I/F (interface)" 414 that sends and receives information to and from a plurality of third party terminals 416 and an administrator terminal 417. These devices are connected to each other by a data communication path such as a “bus” 415, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、アクセス認証処理プログラム、同意情報取得プログラムである。また、「メインメモリ」と「不揮発性メモリ」には、マイナンバー情報、パスワード情報、同意情報などが格納されている。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. Additionally, the "main memory" and "nonvolatile memory" store My Number information, password information, consent information, etc.
「ＣＰＵ」は、「メインメモリ」に格納されているアクセス認証処理プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきたマイナンバー情報及びパスワード情報の入力を受け付け、一致する情報が存在するかどうか認証を行う。また、マイナンバー情報およびパスワード情報を「メインメモリ」や「不揮発性メモリ」に格納する。
また、「ＣＰＵ」は「メインメモリ」に格納されている同意情報取得プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきた健康医療関連情報毎に個人（利用者）の意思を示す同意情報が取得される。また、同意情報を「メインメモリ」や「不揮発性メモリ」に格納する。 The "CPU" executes the access authentication processing program stored in the "main memory" and accepts input of My Number information and password information sent from third-party terminals through the "network I/F". , authenticate whether matching information exists. In addition, My Number information and password information are stored in "main memory" and "nonvolatile memory."
In addition, the "CPU" executes the consent information acquisition program stored in the "main memory" and collects each individual's (use consent information indicating the intention of the person) is obtained. Additionally, consent information is stored in "main memory" or "nonvolatile memory."
＜実施形態３　健康医療関連情報一元管理システム：処理の流れ＞
図４ｃは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。図に示されるように、アクセス認証処理ステップＳ４０１、同意情報取得ステップＳ４０２からなる処理方法である。 <Embodiment 3 Health and medical related information unified management system: Processing flow>
FIG. 4c is a diagram showing the flow of processing when the unified health and medical information management system in this embodiment is used. As shown in the figure, this processing method consists of an access authentication processing step S401 and a consent information acquisition step S402.
「同意情報取得ステップ」Ｓ４０２とは、アクセス認証処理ステップで認証された後、インセンティブ管理部によるインセンティブを受け入れることを了承する旨の情報である同意情報を取得する段階である。 "Acquisition of consent information step" S402 is a step of acquiring consent information, which is information indicating consent to accept an incentive from the incentive management unit, after being authenticated in the access authentication processing step.
＜まとめ＞
以上より、本発明では、個人（利用者）に関する健康医療関連情報に対して、インセンティブを受け入れることを了承する旨の情報である同意情報を取得することができる。 <Summary>
As described above, in the present invention, consent information, which is information indicating consent to accept an incentive, can be acquired from health and medical related information regarding an individual (user).
＜実施形態４（主に請求項４に対応）＞
＜実施形態４　概要＞
本実施形態は、実施形態１乃至３に加えて、同意情報取得部により同意情報の取得があった場合に、インセンティブを提供するための処理であるインセンティブ処理をするためのインセンティブ処理部を備えた点にある。これ以降、実施形態１乃至３と重複する機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 <Embodiment 4 (mainly corresponding to claim 4)>
<Embodiment 4 Overview>
In addition to Embodiments 1 to 3, this embodiment includes an incentive processing unit for performing incentive processing, which is processing for providing incentives when consent information is acquired by the consent information acquisition unit. At the point. From now on, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 3 will be omitted as appropriate.
＜実施形態４　構成の説明：インセンティブ処理部＞
図５ａは健康医療関連情報一元管理システムの機能的構成を示す図である。この図に示すように、「インセンティブ処理部」５０３は、インセンティブ機能部に含まれ、同意情報取得部により同意情報の取得があった場合に、インセンティブを提供するためのインセンティブ処理をする機能を有するように構成される。
図１１ｄは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、個人（利用者）の公開許否について、同意欄に公開許可の同意を示す「★」印が付された健康医療関連情報に対して、所定の算出ルールに基づき、自動的に付与すべきインセンティブが算出されて付与されていることを示している。ここでは、１つの個人に関する健康医療関連情報につき、１００ｐ（ポイント）であると所定の算出ルールに基づいて算出されて付与されている。また、インセンティブの算出ルールについては、その健康医療関連情報の重要性、緊急性、希少性、有用性などを考慮して、重みづけ処理を行い、健康医療関連情報毎に異なるインセンティブを算出して付与するように処理されてもよい。特に、例えば、日本人の死因のトップである悪性新生物（癌）、患者数の多い高血圧症、糖尿病、脂質異常症、歯周病又は眼の疾患、新型コロナウイルス感染症などを含む「感染症法」で定義された各種感染症、世界的に症例の少ない特異な病気などについては、その健康医療関連情報が第三者に公開されることによって医学の進歩に大きく貢献できる点を考慮すれば、他の病気よりもインセンティブを多く（高く）するように算出ルールを設定することが考えられる。
また、「インセンティブ」とは、簡潔にいうと「動機付け、報酬」ことを指し、何かの行動を起こさせることを狙って意図的に刺激を与えたりすることなどを意味している。本件発明では、「インセンティブ」とは、上記ポイントなどの他に、情報提供者に対する個別的情報サービスや一般的情報サービス、個別的薬剤やサプリメントの提供、書籍、その他の商品などの提供、情報提供のためなどのパスワードやＩＤの提供、ネットワーク上で利用できるアイテムの提供、権利の提供、例えば、診察を受ける権利の提供、診断を受ける権利の提供、検査を受ける権利の提供、ネットワーク上で各種サービスを受ける権利の提供、特定のソフトウエア（例えば健康管理アプリ）の提供、前払い式又は後払い式電子マネーへのポイントの提供、商品クーポンや旅行クーポンまたは現金の提供などが含まれるようにしてもよい。
なお、本件発明では、個人に関する健康医療関連情報について、第三者に公開許可するか否かを示す公開許否情報が既に関連づけられて記憶・管理されているケース、あるいは、個人（利用者）が自身に関わる健康医療関連情報を健康医療関連情報蓄積部に新規に登録する場合であって公開許否情報が未だ関連付けられて記憶・管理されていないケースの何れの場合でも適用することが可能である。即ち、健康医療関連情報一元管理システム内には、個人に関する健康医療関連情報が保持されていないが、例えば、個人が保有する端末にその個人の健康医療関連情報が保持されており、これを本システムにアップロードする場合には、アップロードがされた情報の形式的なチェックによって、その情報が健康医療関連情報として公開可能であると判断された場合には、その結果に応じてインセンティブを付与するように上述したインセンティブ機能部が機能するように構成することができる。この場合には、本システムのアクセス制御部は、第三者からの健康医療関連情報の閲覧アクセスを拒否することがないように構成されてもよい。但し、第三者の種別や資格に応じて部分的にアクセスを拒否ないしは制限するように構成してもよい。なお、個人の健康医療関連情報を本システムにアップロードすることは転送であってもよく、転送元は個人の端末でなく、他の健康医療関連情報を蓄積しているシステムであってもよい。例えば、母子手帳情報サーバや、ＰＨＲ（Ｐｅｒｓｏｎａｌ　Ｈｅａｌｔｈ　Ｒｅｃｏｒｄ）や、介護情報サーバや、歯科医療情報サーバや、リハビリ情報サーバなどに蓄積されている健康医療関連情報が本システムに個人の承諾のもと転送されるように構成することができる。この場合には、この母子手帳情報サーバなどから個人の健康医療関連情報がアップロードされ、形式的なチェックが完了した時点で、上述したインセンティブ機能部が機能するように構成することができる。
図１１ｂは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、個人（利用者）が自身のマイナンバー情報及びパスワード情報を該当欄に入力して、一致する情報がシステム内に存在してアクセス認証が行われた後、機能選択画面に移行して、「（Ｂ）閲覧処理」に対応するＯＫボタンをクリック、タッチ又はタップすることにより、個人（利用者）に関する健康医療関連情報と付与されたインセンティブとの関係を閲覧できる画面に遷移する。
図１１ｄは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、対象となる個人の健康医療関連情報と、それに対応して付与されたインセンティブについて、一覧表形式などで分かり易く表示することが好ましい。これにより、閲覧時点で付与されたインセンティブがどの健康医療関連情報に関連付けられているかが一目で分かる。なお、終了ボタンをクリック、タッチ又はタップすることにより、図１１ｂの機能選択画面に戻ることができる。
図１１ｂは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、個人（利用者）が自身のマイナンバー情報及びパスワード情報を該当欄に入力して、一致する情報がシステム内に存在してアクセス認証が行われた後、機能選択画面に移行する。そして、「（Ｃ）メンテナンス処理」に対応するＯＫボタンをクリック、タッチ又はタップすることにより、個人（利用者）に関する健康医療関連情報について、未だ同意／不同意がなされていない健康医療関連情報を表示すると共に、既に同意／不同意がなされている健康医療関連情報も表示される画面に遷移する。
図１１ｆは、本件発明の健康医療関連情報一元管理システムにおけるユーザーインターフェースの一例を示す図である。
この場合では、対象となる個人の健康医療関連情報と、それに対応する同意、不同意の状態が一覧表形式などで分かり易く表示することが好ましい。これにより、未だ閲覧時点で同意／不同意がなされていない健康医療関連情報については、個人（利用者）によって、チェックボックス形式の同意欄／不同意欄に「★」印を入力してＯＫボタンをクリック、タッチ又はタップすることにより、インセンティブの付与などが処理される。一方、既に同意欄／不同意欄に「★」印が入力されている健康医療関連情報については、個人（利用者）が見直しを行い、例えば、同意から不同意に、あるいは、不同意から同意に変更して、ＯＫボタンをクリック、タッチ又はタップすることにより、更新処理が可能となる。なお、終了ボタンをクリック、タッチ又はタップすることにより、図１１ｂの機能選択画面に戻ることができる。 <Embodiment 4 Configuration description: Incentive processing unit>
FIG. 5a is a diagram showing the functional configuration of the health and medical related information unified management system. As shown in this figure, the "incentive processing unit" 503 is included in the incentive function unit and has a function of performing incentive processing to provide an incentive when consent information is acquired by the consent information acquisition unit. It is configured as follows.
FIG. 11d is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, based on predetermined calculation rules, the information will be automatically granted to health and medical related information marked with a "★" in the consent column to indicate permission for disclosure. This shows that the necessary incentives have been calculated and granted. Here, 100 points (points) are calculated and assigned based on a predetermined calculation rule for health and medical related information regarding one individual. In addition, regarding the incentive calculation rules, weighting processing is performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical information, and different incentives are calculated for each health and medical information. It may also be processed to give. In particular, we are focusing on infectious diseases, including malignant neoplasms (cancer), which is the leading cause of death in Japan, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, and new coronavirus infections, which have a large number of patients. Regarding various infectious diseases defined in the ``Treatment Control Act'' and unique diseases with few cases worldwide, it should be considered that the disclosure of health and medical information to third parties can greatly contribute to the advancement of medicine. For example, calculation rules could be set to provide more (higher) incentives than for other diseases.
Furthermore, ``incentive'' simply means ``motivation or reward,'' and it means intentionally providing stimulation with the aim of getting someone to take some action. In this invention, "incentives" include, in addition to the points mentioned above, individual information services and general information services for information providers, provision of individual drugs and supplements, provision of books and other products, and provision of information. Provision of passwords and IDs for various purposes, provision of items that can be used on the network, provision of rights, for example, provision of the right to receive a medical examination, provision of the right to receive a diagnosis, provision of the right to undergo a test, provision of various items on the network This may include providing the right to receive services, providing specific software (e.g., a health management app), providing points for prepaid or postpaid electronic money, providing product coupons, travel coupons, or cash. good.
In addition, in the present invention, the disclosure permission information indicating whether or not to permit disclosure to a third party is already stored and managed in relation to health and medical related information regarding an individual, or when the individual (user) It can be applied in any case where health and medical information related to oneself is newly registered in the health and medical information storage unit, and the disclosure permission information has not yet been associated and stored and managed. . In other words, although health and medical information related to individuals is not held within the unified health and medical information management system, for example, personal health and medical information is held on terminals owned by individuals, and this information cannot be directly accessed. When uploading to the system, if it is determined that the uploaded information can be disclosed as health and medical information through a formal check, incentives will be given according to the results. The incentive function section described above can be configured to function. In this case, the access control unit of the present system may be configured so as not to deny access to view health and medical information from a third party. However, it may be configured to partially deny or restrict access depending on the type or qualification of the third party. Note that uploading personal health and medical information to this system may be a transfer, and the source of the transfer may not be an individual's terminal but a system that stores other health and medical information. For example, health and medical information stored in maternal and child health record information servers, PHRs (Personal Health Records), nursing care information servers, dental care information servers, rehabilitation information servers, etc. can be transferred to this system with the individual's consent. It can be configured to be forwarded. In this case, the above-mentioned incentive function section can be configured to function when personal health and medical related information is uploaded from the maternal and child handbook information server or the like and a formal check is completed.
FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Viewing process," a screen transitions to a screen where the relationship between health and medical related information regarding the individual (user) and the granted incentive can be viewed.
FIG. 11d is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, it is preferable to display the health and medical related information of the target individual and the corresponding incentives in an easy-to-understand manner, such as in a list format. As a result, it can be seen at a glance which healthcare-related information the incentive granted at the time of viewing is associated with. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen in FIG. 11b.
FIG. 11b is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, the individual (user) enters his or her My Number information and password information in the relevant fields, and after matching information exists in the system and access authentication is performed, the screen moves to the function selection screen. . Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Processing", the health and medical information related to the individual (user) for which consent/disapproval has not yet been given. At the same time, the screen changes to a screen that also displays health and medical information for which you have already consented/disapproved.
FIG. 11f is a diagram showing an example of a user interface in the health care related information unified management system of the present invention.
In this case, it is preferable to display the health and medical related information of the individual concerned and the corresponding consent/non-consent status in an easy-to-understand manner, such as in a list format. As a result, for health and medical related information for which consent/disagree has not yet been given at the time of viewing, individuals (users) can enter a "★" mark in the check box format consent/disagree column and click the OK button. By clicking, touching, or tapping, the granting of incentives, etc. is processed. On the other hand, for health and medical related information for which a "★" mark has already been entered in the consent/disagree column, the individual (user) will review it and change it from consent to non-consent, or from non-consent to consent. By changing to , and clicking, touching, or tapping the OK button, the update process becomes possible. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen in FIG. 11b.
＜実施形態４　健康医療関連情報一元管理システム：ハードウェア構成＞
本実施形態における健康医療関連情報一元管理システムのハードウェア構成について図を用いて説明する。 <Embodiment 4 Health and medical related information unified management system: Hardware configuration>
The hardware configuration of the unified health and medical information management system in this embodiment will be explained using diagrams.
図５ｂは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」５１１と、「メインメモリ」５１２とを備えている。また、所定の情報を保持する「不揮発性メモリ」５１３や、複数の第三者端末５１６や管理者端末５１７と情報の送受信を行う「ネットワークＩ／Ｆ（インターフェース）」５１４を備えている。そして、それらが「バス」５１５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 FIG. 5b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 511 that performs various calculation processes, and a "main memory" 512. It also includes a "nonvolatile memory" 513 that holds predetermined information, and a "network I/F (interface)" 514 that sends and receives information to and from a plurality of third party terminals 516 and an administrator terminal 517. These devices are connected to each other by a data communication path such as a “bus” 515, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、アクセス認証処理プログラム、同意情報取得プログラム、インセンティブ処理プログラムである。また、「メインメモリ」と「不揮発性メモリ」には、マイナンバー情報、パスワード情報、同意情報、インセンティブ情報などが格納されている。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, the programs stored in the "main memory" are an access authentication processing program, a consent information acquisition program, and an incentive processing program. Additionally, the "main memory" and "nonvolatile memory" store My Number information, password information, consent information, incentive information, etc.
「ＣＰＵ」は、「メインメモリ」に格納されているアクセス認証処理プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきたマイナンバー情報及びパスワード情報の入力を受け付け、一致する情報が存在するかどうか認証を行う。また、マイナンバー情報およびパスワード情報を「メインメモリ」や「不揮発性メモリ」に格納する。
また、「ＣＰＵ」は「メインメモリ」に格納されている同意情報取得プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきた健康医療関連情報毎に個人（利用者）の意思を示す同意情報が取得される。また、同意情報を「メインメモリ」や「不揮発性メモリ」に格納する。
また、「ＣＰＵ」は「メインメモリ」に格納されているインセンティブ処理プログラムを実行して、個人に関する健康医療関連情報について、同意の取得があった場合に、インセンティブを提供するための処理であるインセンティブ処理を行う。 The "CPU" executes the access authentication processing program stored in the "main memory" and accepts input of My Number information and password information sent from third-party terminals through the "network I/F". , authenticate whether matching information exists. In addition, My Number information and password information are stored in "main memory" and "nonvolatile memory."
In addition, the "CPU" executes the consent information acquisition program stored in the "main memory" and collects each individual's (usage consent information indicating the intention of the person) is obtained. Additionally, consent information is stored in "main memory" or "nonvolatile memory."
In addition, the "CPU" executes the incentive processing program stored in the "main memory" to provide an incentive, which is a process for providing incentives when consent is obtained for health and medical information related to individuals. Perform processing.
＜実施形態４　健康医療関連情報一元管理システム：処理の流れ＞
図５ｃは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。図に示されるように、アクセス認証処理ステップＳ５０１、同意情報取得ステップＳ５０２、インセンティブ処理ステップＳ５０３からなる処理方法である。 <Embodiment 4 Health and medical related information unified management system: Processing flow>
FIG. 5c is a diagram showing the flow of processing when the unified health and medical information management system according to this embodiment is used. As shown in the figure, this processing method includes an access authentication processing step S501, a consent information acquisition step S502, and an incentive processing step S503.
「インセンティブ処理ステップ」Ｓ５０３とは、同意情報取得部により同意情報の取得があった場合に、インセンティブを提供するための処理であるインセンティブ処理をするためのインセンティブ処理を実行する段階である。 "Incentive processing step" S503 is a step of executing incentive processing, which is processing for providing incentives, when consent information is obtained by the consent information obtaining unit.
＜まとめ＞
以上より、本発明では、個人（利用者）に関する健康医療関連情報について、本人の同意があった場合に、インセンティブを提供するための処理であるインセンティブ処理を実行することができ、個人に関する健康医療関連情報について、適切なインセンティブ処理を施すことができる。 <Summary>
As described above, in the present invention, it is possible to perform incentive processing, which is a process for providing incentives, with respect to health and medical related information regarding an individual (user) when the user has consented, and to provide health and medical information related to the individual. Appropriate incentive processing can be applied to related information.
＜実施形態５（主に請求項５に対応）＞
＜実施形態５　概要＞
本実施形態は、実施形態１乃至４を基本として、個人に関する健康医療関連情報を蓄積する健康医療関連情報蓄積部と、健康医療関連情報蓄積部に蓄積された健康医療関連情報に、ネットワークを介して、第三者にアクセスさせるためのアクセス制御部と、を有し、アクセス制御部は、ネットワークを介して、送られてきたＩＰパケットを解析するＩＰパケット解析手段と、ＩＰパケットのＩＰヘッダー部から宛先ＩＰアドレスを抽出して自身の健康医療関連情報一元管理システム宛のＩＰアドレスであるか否かを判断する宛先ＩＰアドレス判断手段と、宛先ＩＰアドレスが自身の健康医療関連情報一元管理システム宛のＩＰアドレスであった場合にＩＰペイロードからアクセス主体を示すアクセスＩＤおよびそのアクセス主体に属する利用者を示す利用者ＩＤを取得するアクセスＩＤ／利用者ＩＤ取得手段と、アクセスＩＤおよび利用者ＩＤに対応するアクセス主体情報、利用者情報、利用者属性情報（ここでは、利用者が医療従事者であるか、非医療従事者であるかを示す情報）を取得するアクセス主体利用者属性取得手段と、第三者からの健康医療関連情報へのアクセスを制御するアクセス制御手段と、個人の健康医療関連情報を第三者に公開許可するか否かを示す公開許否情報を保持する公開許否情報保持部と、を有する健康医療関連情報一元管理システムを提供する。なお、実施形態１乃至４と同様の機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 <Embodiment 5 (mainly corresponding to claim 5)>
<Embodiment 5 Overview>
This embodiment is based on Embodiments 1 to 4, and includes a health and medical information storage section that stores health and medical information related to individuals, and a network for the health and medical information stored in the health and medical information storage section. and an access control unit for allowing a third party to access the IP packet, and the access control unit includes IP packet analysis means for analyzing an IP packet sent via the network, and an IP header section of the IP packet. a destination IP address determination means for extracting a destination IP address from the source and determining whether or not the destination IP address is addressed to the user's own health and medical information unified management system; an access ID/user ID acquisition means for acquiring an access ID indicating an access subject and a user ID indicating a user belonging to the access subject from the IP payload when the IP address is an IP address; an access subject user attribute acquisition means for acquiring corresponding access subject information, user information, and user attribute information (here, information indicating whether the user is a medical worker or a non-medical worker); , access control means that controls access to health and medical information from third parties, and disclosure permission information storage that holds disclosure permission information that indicates whether or not to permit disclosure of personal health and medical information to third parties. We provide a unified management system for health and medical information, including: Note that descriptions of functions, hardware configurations, and processing flows similar to those of Embodiments 1 to 4 will be omitted as appropriate.
＜実施形態５　機能的構成＞
図６ａは、実施形態５における健康医療関連情報一元管理システムの機能的構成を示す図である。本実施形態では、アクセス制御部が、ＩＰパケット解析手段と、宛先ＩＰアドレス判断手段と、アクセスＩＤ／利用者ＩＤ取得手段と、アクセス主体利用者属性取得手段と、アクセス制御手段と、公開許否情報保持部を備えている。 <Embodiment 5 Functional configuration>
FIG. 6a is a diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 5. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID/user ID acquisition means, an access subject user attribute acquisition means, an access control means, and disclosure permission information. It is equipped with a holding part.
＜実施形態５　構成の説明：アクセス制御部のＩＰパケット解析手段＞
「ＩＰパケット解析手段」６０１は、ネットワーク（特に、インターネット）を介して、送られてきたＩＰパケットを解析する機能を有するように構成される。一般的に、ＩＰパケットは、ＩＰヘッダー部とＩＰペイロード部から構成され、それらの中に様々な情報やデータが格納されている。それらの中にどのような情報やデータが含まれているかを解析し、調べる役割を「ＩＰパケット解析手段」６０１は担っている。 <Embodiment 5 Configuration description: IP packet analysis means of access control unit>
The "IP packet analysis means" 601 is configured to have a function of analyzing IP packets sent via a network (particularly, the Internet). Generally, an IP packet is composed of an IP header section and an IP payload section, and various information and data are stored therein. The "IP packet analysis means" 601 has the role of analyzing and examining what kind of information and data are included in them.
＜実施形態５　構成の説明：アクセス制御部の宛先ＩＰアドレス判断手段＞
「宛先ＩＰアドレス判断手段」６０２は、送られてきたＩＰパケットのヘッダー部から宛先ＩＰアドレスを抽出して自身の健康医療関連情報一元管理システム宛のＩＰアドレスであるか否かを判断する機能を有するように構成される。一般的に、ＩＰパケットは、ＩＰヘッダー部に少なくとも送信元を表す送信元ＩＰアドレス及び送信先を表す宛先ＩＰアドレスが含まれている。「宛先ＩＰアドレス判断手段」６０２は、ＩＰヘッダー部から抽出された宛先ＩＰアドレスを参照して、自身の健康医療関連情報一元管理システムに送られてきたＩＰパケットであるか否かを判断し、自身宛に送られてきたものであると判断した場合には、次の処理に進む。なお、自身宛に送られてきたものでないと判断した場合には、ＩＰパケットを無視し、それ以上の動作を行わない。 <Embodiment 5 Configuration description: Destination IP address determination means of access control unit>
The "destination IP address determination means" 602 has a function of extracting the destination IP address from the header of the sent IP packet and determining whether the IP address is addressed to the own health and medical information unified management system. configured to have. Generally, an IP packet includes at least a source IP address representing a source and a destination IP address representing a destination in an IP header section. "Destination IP address determination means" 602 refers to the destination IP address extracted from the IP header section and determines whether or not the IP packet is sent to its own health and medical related information unified management system, If it is determined that the message was sent to the user, the process proceeds to the next step. Note that if it is determined that the IP packet is not addressed to itself, it ignores the IP packet and takes no further action.
＜実施形態５　構成の説明：アクセス制御部のアクセスＩＤ／利用者ＩＤ取得手段＞
「アクセスＩＤ／利用者ＩＤ取得手段」６０３は、ＩＰパケットが自身の健康医療関連情報一元管理システム宛に送られてきたものであると判断された場合に、ＩＰペイロードに格納されているアクセス主体を示すアクセスＩＤおよびそのアクセス主体に属する利用者を示す利用者ＩＤを抽出して取得する機能を有するように構成される。 <Embodiment 5 Configuration description: access ID/user ID acquisition means of access control unit>
"Access ID/User ID acquisition means" 603 is an access ID/user ID acquisition means that is used to identify the accessing entity stored in the IP payload when it is determined that the IP packet has been sent to the user's health and medical information unified management system. The access ID is configured to have a function of extracting and acquiring an access ID indicating the access ID and a user ID indicating the user belonging to the access subject.
＜実施形態５　構成の説明：アクセス制御部のアクセス主体利用者属性取得手段＞
「アクセス主体利用者属性取得手段」６０４は、アクセスＩＤおよび利用者ＩＤに対応するアクセス主体情報、そのアクセス主体に属する利用者情報、その利用者に対する利用者属性情報（ここでは、利用者が医療従事者であるか、あるいは、非医療従事者であるかを示す情報）を取得する機能を有するように構成される。アクセス主体情報は、アクセス主体を具体的に表す情報であり、例えば、「江戸川中央病院」や「江戸川製薬」などのような名称等で表される。また、利用者情報は、そのアクセス主体に属する従業員等を具体的に表す情報であり、例えば、「江戸川中央病院」に属する従業員である「鈴木一郎」や、「江戸川製薬」に属する従業員である「前田史子」などのような名前等で表される。更に、利用者属性情報は、利用者情報に関連付けられており、その利用者が医療従事者であるか、あるいは、非医療従事者であるかを示す属性情報であり、例えば、「医療従事者」（省略形では「医療」）や、「非医療従事者」（省略形では「非医療」）等で表される。
ここで、「医療従事者」は、少なくとも医師、歯科医師、薬剤師、保健師、助産師、看護師、准看護師、理学療法士、作業療法士、視能訓練士、言語聴覚士、義肢装具士、診療放射線技師、診療エックス線技師、臨床検査技師、衛生検査技師、臨床工学技士、歯科衛生士、歯科技工士、救急救命士、あん摩マッサージ指圧師、はり師、きゅう師、柔道整復師、管理栄養士、栄養士、精神福祉士、社会福祉士、介護福祉士、公認心理士、臨床心理士、医療事務者等が含まれることが好ましい。
上述したような「医療従事者」のうち、常日頃個人（患者）に対して診察や服薬指導を行っている、所謂、かかりつけ医療従事者（例えば、かかりつけ医師、かかりつけ薬剤師、かかりつけ歯科医）の役割は非常に重要であり、健康医療関連情報蓄積部に蓄積した個人の健康医療関連情報にアクセスでき、適宜、必要に応じて、健康医療関連情報を編集、追加、削除できる権限を付与することが好ましい。
例えば、「かかりつけ医師」とは、何でも相談できる上、最新の医療情報を熟知して、必要な時には専門医、専門医療機関を紹介でき、身近で頼りになる地域医療、保健、福祉を担う総合的な能力を有する医師のことを指していう。
「かかりつけ医師」は、（１）日常行う診療においては、患者の生活背景を把握し、適切な診療及び保健指導を行い、自己の専門性を超えて診療や指導を行えない場合には、地域の医師、医療機関等と協力して解決策を提供することができること、（２）自己の診療時間外も患者にとって最善の医療が継続されるよう、地域の医師、医療機関等と必要な情報を共有し、お互いに協力して休日や夜間も患者に対応できる体制を構築することができること、（３）日常行う診療の他に、地域住民との信頼関係を構築し、健康相談、健診・がん検診、母子保健、学校保健、産業保健、地域保健等の地域における医療を取り巻く社会的活動、行政活動に積極的に参加すると共に保健・介護・福祉関係者との連携を行い、また、地域の高齢者が少しでも長く地域で生活できるよう在宅医療を推進することができること、（４）患者や家族に対して、医療に関する適切かつ分かり易い情報の提供を行うことができること等の機能を担える人材であることが望ましい。
また、例えば、「かかりつけ薬剤師」とは、薬による治療のこと、健康や介護に関することなどに豊富な知識と経験を持ち、患者や生活者のニーズに沿った相談に応じることができる薬剤師のことを指していう。
「かかりつけ薬剤師」は、（１）1人の薬剤師が1人の患者の服薬状況を一カ所の薬局でまとめて管理し、かつ、それを継続して行う機能（例えば、薬を安全・安心に使用してもらうため、処方薬や市販薬等、患者等が使用している薬の情報を一カ所でまとめて把握し、薬の重複や飲み合わせの他、薬が効いているか、副作用がないか等を継続的に確認する）、（２）24時間対応を行ったり、患者の自宅を訪問して在宅医療を行ったりする機能（例えば、休日や夜間等薬局の開局時間外でも、電話で薬の使い方や副作用等、薬に関する相談に応じる。また、必要に応じて夜間や休日も、処方せんに基づいて薬を渡す。外出が難しい高齢者等の患者の自宅を訪問し、薬の説明を行い、残薬（手元に残っている薬）の確認も行う）、（３）処方医や医療機関と連携する機能（例えば、処方内容を確認し、必要に応じて医師への問い合わせや提案を行う。患者に薬を渡した後も患者の状態を見守り、その様子を処方医にフィードバックして、残薬の確認を行う。薬だけでなく、広く健康に関する相談にも応じ、場合によっては医療機関への受診も勧める。また、地域の医療機関とも連携し、チームで患者を支えられる関係を日ごろから構築する）等を担える人材であることが望ましい。
また、例えば、「かかりつけ歯科医」とは、安全・安心な歯科医療の提供のみならず医療・介護に係る幅広い知識と見識を備え、地域住民の生涯に亘る口腔機能の維持・向上を目指し、地域医療の一翼を担う者としてその責任を果たすことができる歯科医師を指していう。
「かかりつけ歯科医」は、（１）乳幼児期から高齢期までのライフステージに応じた継続管理や重症化予防のための適切な歯科治療、保健指導を行い、口腔や全身の健康の維持増進に寄与すること、（２）地域住民のために行政や関係団体と共に歯科検診などの保健活動等を通じて口腔保健向上の役割を果たすこと、（３）地域の関係機関や他業種と連携し、通院が困難な患者に様々な療養の場で切れ目のない在宅歯科医療や介護サービスを提供し、地域包括ケアに積極的に参画すること、等の役割を担える人材であることが望ましい。
また、後述する第三者識別情報にかかりつけ医療従事者であることを識別可能なフラグ情報を付与したり、あるいは、関連付けられていたりしてもよい。なお、かかりつけ医療従事者を示す情報については、適宜、必要に応じて、個人（患者等）、個人が属する会社、個人が加入している健康保険組合、個人が居住している自治体の何れかが、第三者端末を使って、設定、変更、削除を行えるようにしてもよいし、あるいは、上述した管理者が、管理者端末を使って、登録、編集、削除を行えるようにしてもよい。
また、「非医療従事者」は、少なくとも生命保険会社、損害保険会社、証券会社、製薬会社、創薬ベンチャー会社、食品会社、健康器具会社、フィットネスクラブ、スポーツジム、銀行、信用金庫、ＪＡ（農業協同組合）、組合健保、協会けんぽ、共済組合、市町村国保、国保組合、ＰＲ会社、総合研究所、大学および大学院（附属の研究機関も含む）、高等専門学校、農林水産系会社、肥料メーカー、官公庁、自治体、独立行政法人に属する従業員等が含まれることが好ましい。 <Embodiment 5 Configuration description: Access subject user attribute acquisition means of access control unit>
"Access subject user attribute acquisition means" 604 includes access subject information corresponding to the access ID and user ID, user information belonging to the access subject, and user attribute information for the user (here, if the user The device is configured to have a function of acquiring information indicating whether the person is a medical worker or a non-medical worker. The access subject information is information specifically representing the access subject, and is represented by a name such as "Edogawa Central Hospital" or "Edogawa Pharmaceutical", for example. In addition, the user information is information that specifically represents the employee who belongs to the accessing entity, such as "Ichiro Suzuki" who is an employee who belongs to "Edogawa Central Hospital" or an employee who belongs to "Edogawa Pharmaceutical". It is expressed by names such as ``Fumiko Maeda'', which is a member of the group. Further, user attribute information is associated with user information and is attribute information indicating whether the user is a medical worker or a non-medical worker. '' (abbreviated as ``medical care'') and ``non-medical personnel'' (abbreviated as ``non-medical care'').
Here, "medical workers" are at least doctors, dentists, pharmacists, public health nurses, midwives, nurses, associate nurses, physical therapists, occupational therapists, orthoptists, speech therapists, and prosthetics and orthotics. Medical radiologist, medical X-ray technician, clinical laboratory technician, sanitary laboratory technician, clinical engineer, dental hygienist, dental technician, emergency medical technician, anma massage shiatsu therapist, acupuncture therapist, massage therapist, judo therapist, management It is preferable to include a nutritionist, nutritionist, mental health worker, social worker, care worker, certified psychologist, clinical psychologist, medical administrator, etc.
Among the above-mentioned "medical personnel," so-called family medical personnel (e.g., family doctors, family pharmacists, family dentists) who routinely provide medical examinations and medication guidance to individuals (patients). The role is very important: to have access to personal health and medical information stored in the health and medical information repository, and to be authorized to edit, add, and delete health and medical information as appropriate and necessary. is preferred.
For example, a "family doctor" is someone you can talk to about anything, is familiar with the latest medical information, can refer you to specialists and specialized medical institutions when necessary, and is a familiar and reliable general practitioner who is responsible for local medical care, health, and welfare. This refers to a doctor who has a certain level of ability.
(1) In daily medical treatment, a "family doctor" must understand the patient's living background, provide appropriate medical care and health guidance, and if unable to provide medical care or guidance beyond his or her own expertise, (2) To be able to provide solutions in cooperation with local doctors, medical institutions, etc., and (2) to provide necessary information with local doctors, medical institutions, etc. so that the best medical care can be continued for patients even outside of their own clinic hours. (3) In addition to daily medical treatment, we can build relationships of trust with local residents and provide health consultations and checkups. - Actively participate in social and administrative activities surrounding medical care in the community, such as cancer screening, maternal and child health, school health, industrial health, community health, etc., and collaborate with health, nursing care, and welfare related parties. (4) The ability to provide appropriate and easy-to-understand information regarding medical care to patients and their families. It is desirable that the person be able to take on this role.
Furthermore, for example, a "family pharmacist" is a pharmacist who has a wealth of knowledge and experience in matters related to drug treatment, health and nursing care, and is able to respond to consultations tailored to the needs of patients and consumers. Pointing to.
A "family pharmacist" has the following functions: (1) one pharmacist manages the medication status of one patient in one pharmacy, and continues to do so (for example, to ensure that medicines are administered safely and securely); In order to encourage patients to use the drugs, we collect information on the drugs patients are using, such as prescription drugs and over-the-counter drugs, in one place, check for duplication of drugs and combinations of drugs, check whether the drugs are working, and whether there are any side effects. (2) A function that provides 24-hour support and visits patients at their homes to provide home medical care (for example, even outside of pharmacy opening hours, such as on holidays or at night, we provide telephone support). Respond to consultations regarding medicines, such as how to use them and side effects.Also, provide medicines based on prescriptions, even at night and on holidays, if necessary.Visit the homes of patients, such as elderly people, who have difficulty going out and explain medicines. (3) Function to collaborate with prescribing doctors and medical institutions (for example, checking prescription details and making inquiries and suggestions to doctors as necessary). Monitor the patient's condition even after giving the medicine to the patient, provide feedback to the prescribing physician, and check for any remaining medicines.In addition to medicines, we also provide a wide range of health-related consultations, and in some cases provide medical care. It is desirable for the person to be able to take on the following responsibilities: encourage patients to see a patient at an institution, and build relationships with local medical institutions on a daily basis to support patients as a team.
For example, a "family dentist" not only provides safe and secure dental care, but also has a wide range of knowledge and insight related to medical care and nursing care, and aims to maintain and improve the oral function of local residents throughout their lives. Refers to dentists who can fulfill their responsibilities as a person who plays a role in local medical care.
A "family dentist" (1) provides appropriate dental treatment and health guidance for continuous management and prevention of aggravation according to life stages from infancy to old age, and maintains and improves oral and systemic health. (2) To play a role in improving oral health for local residents through health activities such as dental checkups together with the government and related organizations; (3) To work together with local related organizations and other industries to improve oral health. It is desirable to be a person who can take on roles such as providing seamless home dental care and nursing care services to difficult patients in various treatment settings, and actively participating in community comprehensive care.
Additionally, flag information that can identify a family medical worker may be added to or associated with third party identification information, which will be described later. In addition, information indicating the family healthcare worker may be provided by the individual (patient, etc.), the company to which the individual belongs, the health insurance association to which the individual belongs, or the municipality in which the individual resides, as appropriate. However, settings, changes, and deletions may be performed using a third-party terminal, or the above-mentioned administrator may be allowed to register, edit, and delete using an administrator terminal. good.
In addition, "non-medical workers" include at least life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, gyms, banks, credit unions, JA ( Agricultural cooperatives), health insurance associations, Kenpo associations, mutual aid associations, municipal national health insurance associations, public relations companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers , employees of public offices, local governments, independent administrative agencies, etc. are preferably included.
＜実施形態５　構成の説明：アクセス制御部のアクセス制御手段＞
「アクセス制御手段」６０５は、ネットワークを介して、第三者が健康医療関連情報蓄積部に対してアクセスしてきたときのアクセス制御を行う機能を有するように構成される。 <Embodiment 5 Configuration description: access control means of access control unit>
The "access control means" 605 is configured to have a function of controlling access when a third party accesses the health and medical information storage unit via the network.
図６ｂは、本実施形態における健康医療関連情報一元管理システムの機能的構成の一例を示す図である。
まず、初めに、ＩＰパケット解析手段により、送られてきたＩＰパケット６０８を解析して、どのような情報やデータが含まれているかを調べる。例えば、ＩＰパケットのＩＰヘッダー部に送信元ＩＰアドレスや宛先ＩＰアドレスが含まれているか等を解析して調べる。
次に、宛先ＩＰアドレス判断手段により、送られてきたＩＰパケット６０８に含まれる宛先ＩＰアドレスを抽出して、自身の健康医療関連情報一元管理システム宛であるか否かを判断する。このとき、アクセス制御部６０９には、ＩＰアドレス表６１０が記憶されており、その表を参照して、自身の健康医療関連情報一元管理システム宛であるか否かを判断する。記憶されているＩＰアドレス（例えば、１９２．１６８．０．１）と宛先ＩＰアドレスとが一致すれば、自身の健康医療関連情報一元管理システム宛であると判断し、次の処理に進む。ＩＰアドレス表に一致するものがなければ、そのＩＰパケットは無視され、それ以上の処理は行われない。
次に、アクセスＩＤ／利用者ＩＤ取得手段により、送られてきたＩＰパケットが自身の健康医療関連情報一元管理システム宛である場合には、そのＩＰパケットのＩＰペイロードの中に格納されているアクセス主体を示すアクセスＩＤおよびそのアクセス主体に属する利用者を示す利用者ＩＤを抽出して取得する。
次に、アクセス主体利用者属性取得手段により、抽出されたアクセスＩＤおよび利用者ＩＤからアクセス主体情報、利用者情報並びに利用者属性情報を取得する。このとき、アクセス制御部６０９には、アクセスＩＤ／利用者ＩＤ表６１１が記憶されており、その表を参照して、具体的なアクセス主体情報、利用者情報並びに利用者属性情報を取得する。ここでは、アクセスＩＤが「Ａ０００１」の場合、アクセス主体情報は「江戸川中央病院」であり、利用者ＩＤが「Ｃ０００１」の場合、利用者情報は「鈴木一郎」であり、その利用者属性情報は「医療従事者」である。また、アクセスＩＤが「Ｂ０００１」の場合、アクセス主体情報は「江戸川製薬」であり、利用者ＩＤが「Ｄ０００１」の場合、利用者情報は「前田史子」であり、その利用者属性情報は「非医療従事者」である。ここまでの手段による動作により、健康医療関連情報一元管理システムに対してアクセスしてきた第三者が医療従事者であるか、あるいは、非医療従事者であるかを判別することができる。
次に、アクセス制御手段により、第三者が医療従事者であるか、あるいは、非医療従事者であるかによって、健康医療関連情報の閲覧範囲を異ならせるようにする。例えば、第三者であるアクセス主体（この場合、「江戸川中央病院」）に属する利用者が「鈴木一郎」であって、その属性情報が「医療従事者」である場合には、個人に関する健康医療関連情報の全てを閲覧可能とする。一方、例えば、第三者であるアクセス主体（この場合、「江戸川製薬」）に属する利用者が「前田史子」であって、その属性情報が「非医療従事者」である場合には、個人に関する健康医療関連情報の一部（全部を含む）、又は、後述する予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を閲覧可能とする。このように、第三者である利用者が誰なのか、また、その属性情報が「医療従事者」又は「非医療従事者」であるかを判別することができ、それによって個人に関する健康医療関連情報の閲覧範囲を異ならせることができるようになる。
なお、上述したこれらの表は、健康医療関連情報一元管理システムを管理、運営する役割を担う管理者が、管理者端末を使って、情報の登録、編集、削除が行えるようにすることが好ましい。また、これらアクセス主体情報、利用者情報並びに利用者属性情報（「医療従事者」又は「非医療従事者」）は、後述する第三者識別情報とも関連付けられていることが好ましい。 FIG. 6b is a diagram illustrating an example of the functional configuration of the health and medical related information unified management system in this embodiment.
First, the IP packet analysis means analyzes the sent IP packet 608 to find out what information and data it contains. For example, it is analyzed and checked to see if the IP header section of the IP packet contains a source IP address and a destination IP address.
Next, the destination IP address determination means extracts the destination IP address included in the sent IP packet 608, and determines whether it is addressed to the own health and medical related information unified management system. At this time, the access control unit 609 stores an IP address table 610, and refers to the table to determine whether or not the address is for the own health and medical related information unified management system. If the stored IP address (for example, 192.168.0.1) matches the destination IP address, it is determined that the destination is the user's own health and medical information unified management system, and the process proceeds to the next step. If there is no match in the IP address table, the IP packet is ignored and no further processing occurs.
Next, if the sent IP packet is addressed to the own health and medical information unified management system, the access ID/user ID acquisition means determines the access information stored in the IP payload of the IP packet. The access ID indicating the subject and the user ID indicating the user belonging to the access subject are extracted and obtained.
Next, the access subject user attribute acquisition means obtains access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 609 stores an access ID/user ID table 611, and refers to the table to obtain specific access subject information, user information, and user attribute information. Here, when the access ID is "A0001", the access subject information is "Edogawa Chuo Hospital", and when the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is is a "medical worker." Furthermore, when the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", and when the user ID is "D0001", the user information is "Fumiko Maeda", and the user attribute information is " Non-medical workers”. By the operation of the means described above, it is possible to determine whether a third party who has accessed the health and medical information unified management system is a medical worker or a non-medical worker.
Next, the access control means allows the viewing range of healthcare-related information to vary depending on whether the third party is a medical professional or a non-medical professional. For example, if the user belonging to the third-party access entity (in this case, "Edogawa Central Hospital") is "Ichiro Suzuki" and his attribute information is "medical worker," then All medical related information can be viewed. On the other hand, for example, if the user belonging to the third party accessing entity (in this case, "Edogawa Pharmaceutical") is "Fumiko Maeda" and her attribute information is "non-medical worker," It is possible to view part (including all) of health and medical related information related to the above, or health and medical related information that has been anonymized using a predetermined anonymization method described below. In this way, it is possible to determine who a third party user is and whether their attribute information is a "medical worker" or "non-medical worker", thereby providing information on the health and medical care of an individual. It becomes possible to change the viewing range of related information.
In addition, it is preferable that these tables mentioned above allow the administrator responsible for managing and operating the unified health and medical information management system to register, edit, and delete information using an administrator terminal. . Further, it is preferable that the access subject information, user information, and user attribute information ("medical worker" or "non-medical worker") are also associated with third party identification information, which will be described later.
＜実施形態５　構成の説明：アクセス制御部の公開許否情報保持部＞
図６ａに示されるように、「公開許否情報保持部」６０６は、ネットワークを介して、個人に関する健康医療関連情報にアクセスしてきた第三者に対して自身の健康医療関連情報を公開するか否かを示す公開許否情報を保持する機能を有するように構成される。具体的には、図２ｂに示すような第三者端末２０６から、ネットワーク２０５を介して、健康医療関連情報一元管理システム２００のアクセス制御部２０２に対して「公開許可」又は「公開拒否」を示す情報を個人の意思で設定できるように構成されることが望ましい。例えば、「公開許可」は「１」とし、「公開拒否」は「０」とする２値情報（フラグ情報）としてもよい。また、公開許否情報は、健康医療関連情報のうち、所定の一塊の単位で公開するかしないかを設定できるようにしてもよい。例えば、診療科のうち、内科に関する健康医療関連情報ついては「公開許可」とする一方、精神科に関する健康医療関連情報については「公開拒否」と設定することが考えられる。また、公開許否情報は、後述する第三者識別情報との組み合わせにより、第三者が特定の医療従事者である場合には、「公開許可」する場合と、「公開拒否」する場合とに区別して設定することができるようにしてもよい。例えば、第三者識別情報が「医師」を表す場合には、個人の健康医療関連情報を「公開許可」とするが、一方、第三者識別情報が特定の医療従事者（例えば、経理担当者や会計担当者等）を表す場合には、個人の健康医療関連情報を「公開拒否」とすることが考えられる。 <Embodiment 5 Configuration description: Publication permission information holding unit of access control unit>
As shown in FIG. 6a, the "disclosure permission information holding unit" 606 determines whether or not to disclose the health and medical information of the individual to a third party who has accessed the health and medical information related to the individual via the network. It is configured to have a function of holding disclosure permission information indicating whether the Specifically, a third-party terminal 206 as shown in FIG. 2b issues a "permission to publish" or "refuse to publish" to the access control unit 202 of the healthcare-related information unified management system 200 via the network 205. It is desirable that the system be configured so that the information displayed can be set according to the individual's will. For example, it may be binary information (flag information) in which "publication permission" is set to "1" and "publication refusal" is set to "0". Furthermore, the disclosure permission/denial information may be such that it can be set whether or not to disclose a predetermined group of health and medical related information. For example, among medical departments, health and medical information related to internal medicine may be set to "disclosure permission," while health and medical information related to psychiatry may be set to "disclosure prohibited." In addition, when the third party is a specific medical professional, the disclosure permission/denial information can be used in combination with third party identification information (described later) to determine whether the third party is a specific medical professional. It may also be possible to set them separately. For example, if the third-party identifying information represents a "doctor," the individual's health and medical information will be "permitted to be released," but on the other hand, if the third-party identifying information represents a "doctor" person, accountant, etc.), it may be possible to ``refuse disclosure'' of personal health and medical information.
＜実施形態５　健康医療関連情報一元管理システム：ハードウェア構成＞
本実施形態における健康医療関連情報一元管理システムのハードウェア構成について、図を用いて説明する。 <Embodiment 5 Health and medical related information unified management system: Hardware configuration>
The hardware configuration of the unified health and medical information management system in this embodiment will be explained using figures.
図６ｃは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態におけるアクセス制御部は、各種演算処理を行う「ＣＰＵ（中央演算装置）」６２１と、「メインメモリ」６２２とを備えている。また、所定の情報を保持する「不揮発性メモリ」６２３や、複数の第三者端末６２６や管理者端末６２７と情報の送受信を行う「ネットワークＩ／Ｆ（インターフェース）」６２４を備えている。そして、それらが「バス」６２５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 FIG. 6c is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the access control unit in this embodiment includes a "CPU (central processing unit)" 621 that performs various calculation processes and a "main memory" 622. It also includes a "nonvolatile memory" 623 that holds predetermined information, and a "network I/F (interface)" 624 that sends and receives information to and from a plurality of third party terminals 626 and an administrator terminal 627. These devices are interconnected by a data communication path such as a “bus” 625, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、健康医療関連情報蓄積プログラム、ＩＰパケット解析プログラム、宛先ＩＰアドレス判断プログラム、アクセスＩＤ／利用者ＩＤ取得プログラム、アクセス主体利用者属性取得プログラム、公開許否情報保持プログラム、アクセス制御プログラムである。また、「メインメモリ」と「不揮発性メモリ」には、健康医療関連情報、ＩＰアドレス情報、アクセスＩＤ情報、利用者ＩＤ情報、アクセス主体情報、利用者情報、利用者属性情報、公開許否情報などが格納されている。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, the programs stored in the "main memory" include a health and medical information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID/user ID acquisition program, and an access subject user attribute acquisition program. program, disclosure permission information retention program, and access control program. In addition, "main memory" and "nonvolatile memory" contain health and medical information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, disclosure permission information, etc. is stored.
「ＣＰＵ」は、「メインメモリ」に格納されている健康医療関連情報蓄積プログラムを実行して、「ネットワークＩ／Ｆ」を通じて、第三者端末から送られてきた個人に関する健康医療関連情報、例えば、電子カルテ情報、各種検査情報、処方箋情報、薬歴情報、バイタル情報（例えば、体温、血圧、心拍数など）などの健康医療関連情報を「メインメモリ」や「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されているＩＰパケット解析プログラムを実行して、ネットワーク（特に、インターネット）を介して、送られてきたＩＰパケットを解析する。また、「メインメモリ」に格納されている宛先ＩＰアドレス判断プログラムを実行して、送られてきた宛先ＩＰアドレスが自身の健康医療情報共有システム宛のＩＰアドレスであるか否かを判断し、自身宛であると判断した場合、そのＩＰアドレスを「メインメモリ」と「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されているアクセスＩＤ／利用者ＩＤ取得プログラムを実行して、送られてきたＩＰパケットのＩＰペイロードに格納されているアクセス主体を示すアクセスＩＤおよびそのアクセス主体に属する利用者を示す利用者ＩＤを抽出して取得すると共に、「メインメモリ」と「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されているアクセス主体利用者属性取得プログラムを実行して、アクセスＩＤおよび利用者ＩＤに対応するアクセス主体情報、利用者情報並びに利用者属性情報（ここでは、利用者が医療従事者であるか、あるいは、非医療従事者であるかを示す情報。例えば、「医療従事者」又は「非医療従事者」）を取得すると共に、「メインメモリ」や「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されている公開許否情報保持プログラムを実行して、個人の健康医療関連情報を第三者に公開するか否かを示す公開許否情報を取得し、「メインメモリ」および「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されているアクセス制御プログラムを実行して、個人に関する健康医療関連情報に対してアクセスを制御する。 The "CPU" executes the health and medical information storage program stored in the "main memory" and collects health and medical information related to the individual sent from a third party terminal through the "network I/F", for example. , electronic medical record information, various test information, prescription information, drug history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.) and other health and medical related information is stored in the "main memory" and "nonvolatile memory." It also executes an IP packet analysis program stored in the "main memory" to analyze IP packets sent via the network (particularly the Internet). In addition, it executes the destination IP address determination program stored in the "main memory" to determine whether the destination IP address sent is the IP address for its own health and medical information sharing system, and then If it is determined that the IP address is the destination, the IP address is stored in "main memory" and "nonvolatile memory". In addition, by executing the access ID/user ID acquisition program stored in the "main memory", the access ID indicating the access subject stored in the IP payload of the sent IP packet and the access ID belonging to the access subject are stored in the IP payload of the sent IP packet. The user ID indicating the user is extracted and acquired, and is stored in the "main memory" and "nonvolatile memory". In addition, the access subject user attribute acquisition program stored in the "main memory" is executed to obtain access subject information, user information, and user attribute information (here, user information) corresponding to the access ID and user ID. information indicating whether the person is a medical worker or a non-medical worker (e.g., "medical worker" or "non-medical worker"), as well as "main memory" ”. In addition, the program executes the disclosure permission information retention program stored in the "main memory" to obtain disclosure permission information indicating whether or not to disclose personal health and medical information to a third party, and and stored in "non-volatile memory". It also executes an access control program stored in the "main memory" to control access to health and medical information related to the individual.
＜実施形態５　健康医療関連情報一元管理システム：処理の流れ＞
図６ｄは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。図に示されるように、健康医療関連情報蓄積ステップＳ６０１と、ＩＰパケット解析ステップＳ６０２と、宛先ＩＰアドレス判断ステップＳ６０３と、アクセスＩＤ／利用者ＩＤ取得ステップＳ６０４と、アクセス主体利用者属性取得ステップＳ６０５と、公開許否情報保持ステップＳ６０６と、アクセス制御ステップＳ６０７とからなる処理方法である。 <Embodiment 5 Health and medical related information unified management system: Processing flow>
FIG. 6d is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used. As shown in the figure, a health and medical information accumulation step S601, an IP packet analysis step S602, a destination IP address determination step S603, an access ID/user ID acquisition step S604, and an access subject user attribute acquisition step S605 This processing method includes a disclosure permission information holding step S606, and an access control step S607.
「健康医療関連情報蓄積ステップ」Ｓ６０１とは、ネットワークを介して、第三者端末から送られてきた個人に関する健康医療関連情報、例えば、電子カルテ情報、各種検査情報、処方箋情報、薬歴情報、バイタル情報（例えば、体温、血圧、心拍数など）などを蓄積する段階である。 "Health and medical related information accumulation step" S601 refers to health and medical related information regarding an individual sent from a third party terminal via a network, such as electronic medical record information, various test information, prescription information, drug history information, etc. This is the stage of accumulating vital information (for example, body temperature, blood pressure, heart rate, etc.).
「ＩＰパケット解析ステップ」Ｓ６０２とは、ネットワーク（特に、インターネット）を介して、送られてきたＩＰパケットを解析する段階である。 "IP packet analysis step" S602 is a step in which an IP packet sent via a network (particularly the Internet) is analyzed.
「宛先ＩＰアドレス判断ステップ」Ｓ６０３とは、ＩＰパケットのＩＰヘッダー部から宛先ＩＰアドレスを抽出して自身の健康医療関連情報一元管理システム宛のＩＰアドレスであるか否かを判断する段階である。 "Destination IP address determination step" S603 is a step in which the destination IP address is extracted from the IP header section of the IP packet and it is determined whether the IP address is addressed to the own health and medical related information unified management system.
「アクセスＩＤ／利用者ＩＤ取得ステップ」Ｓ６０４とは、宛先ＩＰアドレスが自身の健康医療関連情報一元管理システム宛のＩＰアドレスであった場合に、ＩＰペイロードからアクセス主体を示すアクセスＩＤおよびそのアクセス主体に属する利用者を示す利用者ＩＤを取得する段階である。 "Access ID/user ID acquisition step" S604 refers to the access ID indicating the access subject from the IP payload and the This is the stage of acquiring a user ID indicating a user belonging to the .
「アクセス主体利用者属性取得ステップ」Ｓ６０５とは、アクセスＩＤおよび利用者ＩＤに対応するアクセス主体情報、利用者情報並びに利用者属性情報（ここでは、利用者が医療従事者であるか、あるいは、非医療従事者であるかを示す情報。例えば、「医療従事者」又は「非医療従事者」）を取得する段階である。 "Access subject user attribute acquisition step" S605 refers to access subject information corresponding to the access ID and user ID, user information, and user attribute information (here, whether the user is a medical worker or This is the stage of acquiring information indicating whether the person is a non-medical worker (for example, "medical worker" or "non-medical worker").
「公開許否情報保持ステップ」Ｓ６０６とは、個人の健康医療関連情報について、第三者に公開許可するか否かを示す公開許否情報を保持する段階である。 "Disclosure permission/denial information retention step" S606 is a step of holding disclosure permission/denial information indicating whether or not to permit disclosure of personal health and medical information to a third party.
「アクセス制御ステップ」Ｓ６０７とは、健康医療関連情報一元管理システムに対するアクセスの制御を行う段階である。 "Access control step" S607 is a step in which access to the health and medical related information unified management system is controlled.
＜まとめ＞
以上により、個人（利用者）に関する健康医療関連情報について、第三者に公開許可するか否かを示す公開許否情報を保持することができる。即ち、個人の意思により、公開許可又は公開許否を選択して設定することができる。 <Summary>
As described above, it is possible to hold disclosure permission information indicating whether or not to permit disclosure to a third party regarding health and medical related information regarding an individual (user). That is, an individual can select and set whether or not to permit publication based on his/her will.
＜実施形態６（主に請求項６に対応）＞
＜実施形態６　概要＞ <Embodiment 6 (mainly corresponding to claim 6)>
<Embodiment 6 Overview>
本実施形態は、実施形態１乃至５を基本として、第三者が医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する第三者識別情報保持部を備えた健康医療関連情報一元管理システムを提供する。なお、実施形態１乃至５と同様の機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。
図７ａは、実施形態６における健康医療関連情報一元管理システムの機能的構成を示す図である。この図に示すように、本実施形態は、実施形態５に加えて、第三者識別情報保持部を設けた点に特徴がある。 This embodiment is based on Embodiments 1 to 5, and describes a third party who holds third party identification information for identifying whether the third party is a medical worker or a non-medical worker. A unified health and medical information management system equipped with an identification information storage unit is provided. Note that descriptions of functions, hardware configurations, and processing flows similar to those of Embodiments 1 to 5 will be omitted as appropriate.
FIG. 7a is a diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 6. As shown in this figure, the present embodiment is characterized in that, in addition to the fifth embodiment, a third party identification information holding section is provided.
以下、本実施形態における健康医療関連情報一元管理システムについて、機能的構成、ハードウェア構成および処理の流れについて、順に説明する。これ以降、実施形態５と同様の機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 Hereinafter, the functional configuration, hardware configuration, and processing flow of the health and medical related information unified management system in this embodiment will be explained in order. From now on, descriptions of functions, hardware configurations, and processing flows similar to those of the fifth embodiment will be omitted as appropriate.
＜実施形態６　機能的構成＞
図７ａは、本実施形態における健康医療関連情報一元管理システムの機能的構成を示す図である。本実施形態では、第三者識別情報保持部を備えることにより、第三者が医療従事者であるか、あるいは、非医療従事者であるかを識別することができる。 <Embodiment 6 Functional configuration>
FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment. In this embodiment, by providing the third party identification information holding unit, it is possible to identify whether the third party is a medical worker or a non-medical worker.
＜実施形態６　健康医療関連情報一元管理システム：機能的構成＞
図７ａは、本実施形態における健康医療関連情報一元管理システムの機能的構成を示す図である。ここでは、実施形態５と相違する点を中心に説明する。 <Embodiment 6 Health and medical related information unified management system: functional configuration>
FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment. Here, differences from Embodiment 5 will be mainly explained.
＜実施形態６　構成の説明：アクセス制御部の第三者識別情報保持部＞
「第三者識別情報保持部」７０７は、ネットワークを介して、健康医療関連情報蓄積部に蓄積された健康医療関連情報にアクセスしてきた第三者が、医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する機能を有するように構成される。ここで、第三者識別情報は、例えば、１２桁からなる数字、文字、記号などを組み合わせて作られた情報であって、第三者を一意に識別可能な情報としてもよい。例えば、具体的には、マイナンバー情報や被健康保険者証番号などを用いてもよい。また、第三者識別情報は、上述したアクセス主体情報、利用者情報並びに利用者属性情報（「医療従事者」又は「非医療従事者」）と関連付けられていることが好ましい。また、第三者識別情報は、上述した管理者が、管理者端末を使って、登録、編集、削除を行えるようにしてもよい。
なお、上述した公開許否情報および第三者識別情報の組み合わせにより、公開許否情報が「公開許可」を示す場合であっても、第三者が特定の医療従事者である場合には、アクセスを許可する場合と許可しない場合とに区別して設定することができるようにしてもよい。
例えば、第三者識別情報が「医師」を表す場合には、健康医療関連情報へのアクセスを許可するが、一方、第三者識別情報が特定の医療従事者（例えば、経理担当者や会計担当者等）を表す場合には、健康医療関連情報へのアクセスを不許可とすることができるようにしてもよい。
また、例えば、第三者識別情報の中に所属部門を示す情報を追加し、その所属部門を示す情報により、健康医療関連情報へのアクセスの許可、不許可をコントロールすることができるようにしてもよい。また、例えば、第三者識別情報で特定される利用者の専門性に関する情報（例えば、「医師」や「看護師」の専門分野や経験年数等）により、健康医療関連情報へのアクセスの許可、不許可をコントロールすることができるようにしてもよい。また、例えば、公開許否情報、第三者識別情報に関わる所属部門や専門性の組み合わせにより、第三者による健康医療関連情報の取得方法（例えば、閲覧のみ可能、情報のテキスト化が可能、コピー可能、転送可能、匿名加工化された情報のバルクダウンロード可能等）を変えることができるようにしてもよい。なお、ダウンロード可能とする場合には、データ改ざん防止のために電子透かし技術やＮＦＴ（Ｎｏｎ－Ｆｕｎｇｉｂｌｅ　Ｔｏｋｅｎ：非代替性トークン）技術などを利用できるようにすることが好ましい。また、例えば、公開許否情報、第三者識別情報に関わる所属部門や専門性の組み合わせにより、患者本人へのアクセス権限を第三者に付与することができるようにしてもよい。例えば、医療従事者であるＰＣＲ検査担当者が、ＰＣＲ検査の結果を医師が使う第三者端末に送信すると共に、患者本人が使う第三者端末に送信することが想定される。
これら情報の組み合わせについては、上述した管理者が、管理者端末を使って、上述したアクセス制御部に予め表形式等で登録しておき、適宜、必要に応じて、編集や削除ができるようにすることが考えられる。
また、例えば、医療従事者として、医師、歯科医師、薬剤師が挙げられるが、これらの第三者識別情報については、少なくとも、その一部として、医師免許証に記載されている医籍登録番号（例えば、６桁の数字からなる番号）、歯科医師免許証に記載されている歯科医籍登録番号（例えば、６桁の数字からなる番号）、薬剤師免許証に記載されている薬剤師名簿登録番号（例えば、６桁の数字からなる番号）が含まれるようにしてもよい。同様に、その他の医療従事者についても、第三者識別情報については、少なくとも、その一部として、資格免許証に記載されている番号が含まれるようにしてもよい。
また、利用者が加入している健康保険組合の被保険者証に記載されている記号や番号（枝番含む）、運転免許証の番号、マイナンバーカードに記載されているマイナンバー情報などが少なくとも第三者識別情報の一部として含まれていてもよい。なお、Ｇｏｏｇｌｅ（登録商標）やＦａｃｅｂｏｏｋ（登録商標）等のプラットフォーマーによる第三者認証を利用して利用者を識別することができるようにしてもよい。 <Embodiment 6 Configuration description: Third party identification information holding unit of access control unit>
The “third party identification information holding unit” 707 determines whether a third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical professional or a non-medical professional. It is configured to have a function to hold third party identification information to identify whether the person is a medical worker. Here, the third party identification information is, for example, information created by combining 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information, health insurance card number, etc. may be used. Further, it is preferable that the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information (“medical worker” or “non-medical worker”). Further, the third party identification information may be registered, edited, and deleted by the above-mentioned administrator using an administrator terminal.
Furthermore, due to the combination of the above-mentioned disclosure permission information and third party identification information, even if the disclosure permission information indicates "disclosure permission", if the third party is a specific medical professional, access may be prohibited. It may also be possible to make settings for cases in which permission is permitted and cases in which permission is not permitted.
For example, if the third-party identifier represents a "doctor," it may allow access to healthcare-related information, but if the third-party identifier represents a (person in charge, etc.), it may be possible to disallow access to healthcare-related information.
Also, for example, by adding information indicating the department to which the third party belongs to the third party identification information, it is possible to control permission or disallowance of access to healthcare-related information based on the information indicating the department to which the person belongs. Good too. In addition, for example, permission to access healthcare-related information may be granted based on information regarding the user's specialty identified by third-party identification information (e.g., the specialty and years of experience of a "doctor" or "nurse"). , it may be possible to control disallowance. For example, depending on the combination of department and expertise related to disclosure permission information and third-party identification information, we will determine how third parties can obtain health and medical information (for example, viewing only, converting information to text, copying) (transferable, bulk downloadable of anonymously processed information, etc.) may be changed. Note that if the data is made downloadable, it is preferable to use digital watermark technology, NFT (Non-Fungible Token) technology, etc. to prevent data tampering. Further, for example, it may be possible to grant access authority to a patient to a third party based on a combination of the department to which the patient belongs and the specialty related to the disclosure permission information and the third party identification information. For example, it is assumed that a person in charge of a PCR test, who is a medical worker, transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by a patient himself.
The above-mentioned administrator uses the administrator terminal to register the combination of these information in the above-mentioned access control unit in advance in table format, etc., so that it can be edited or deleted as needed. It is possible to do so.
In addition, for example, medical professionals include doctors, dentists, and pharmacists, and at least part of their third-party identification information includes the medical registration number written on the doctor's license (e.g. , a 6-digit number), a dental registration number written on a dentist's license (e.g. a 6-digit number), a pharmacist directory registration number written on a pharmacist's license (e.g. A 6-digit number) may also be included. Similarly, for other medical professionals, the third party identification information may include at least a part of the number written on the qualification license.
In addition, at least the symbol and number (including branch number) written on the insurance card of the health insurance association to which the user belongs, the number of the driver's license, and the My Number information written on the My Number card, etc. It may be included as part of the third party identification information. Note that the user may be identified using third party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).
＜実施形態６　健康医療関連情報一元管理システム：ハードウェア構成＞
図７ｂは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」７２１と、「メインメモリ」７２２とを備えている。また、所定の情報を保持する「不揮発性メモリ」７２３や、第三者端末７２６や管理者端末７２７と情報の送受信を行う「ネットワークＩ／Ｆ」７２４を備えている。そして、それらが「バス」７２５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 <Embodiment 6 Health and medical related information unified management system: Hardware configuration>
FIG. 7b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 721 that performs various calculation processes and a "main memory" 722. It also includes a "nonvolatile memory" 723 that holds predetermined information, and a "network I/F" 724 that sends and receives information to and from a third party terminal 726 and an administrator terminal 727. These devices are interconnected by a data communication path such as a “bus” 725, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、実施形態５に加えて、第三者識別情報保持プログラムである。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, in addition to the program stored in the "main memory" in the fifth embodiment, the program is a third party identification information holding program.
また、「メインメモリ」と「不揮発性メモリ」には、実施形態５に加えて、第三者識別情報などが格納されている。 In addition to the fifth embodiment, third party identification information and the like are stored in the "main memory" and "nonvolatile memory".
「ＣＰＵ」は、「メインメモリ」に格納されている第三者識別情報保持プログラムを実行して、ネットワークを介して、健康医療関連情報蓄積部に蓄積された健康医療関連情報にアクセスしてきた第三者が、医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を「メインメモリ」と「不揮発性メモリ」に格納する。 The "CPU" executes the third party identification information holding program stored in the "main memory" and accesses the health and medical information stored in the health and medical information storage section via the network. Third party identification information for identifying whether the three parties are medical workers or non-medical workers is stored in "main memory" and "nonvolatile memory."
＜実施形態６　健康医療関連情報一元管理システム：処理の流れ＞
図７ｃは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。ここでは、実施形態５と相違する点を中心に説明する。
図に示されるように、第三者識別情報保持ステップＳ７０７からなる処理方法である。 <Embodiment 6 Health and medical related information unified management system: Processing flow>
FIG. 7c is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used. Here, differences from Embodiment 5 will be mainly explained.
As shown in the figure, this processing method includes a third party identification information holding step S707.
「第三者識別情報保持ステップ」Ｓ７０７とは、ネットワークを介して、健康医療関連情報蓄積部に蓄積された健康医療関連情報にアクセスしてきた第三者が、医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する段階である。 "Third party identification information holding step" S707 means whether the third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical worker or This is the stage of retaining third-party identification information to identify non-medical personnel.
＜まとめ＞
以上より、第三者が医療従事者であるか、あるいは、非医療従事者であるかを識別することができる。 <Summary>
From the above, it is possible to identify whether the third party is a medical worker or a non-medical worker.
＜実施形態７（主に請求項７に対応）＞
＜実施形態７　概要＞ <Embodiment 7 (mainly corresponding to claim 7)>
<Embodiment 7 Overview>
本実施形態は、実施形態１乃至６を基本として、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報保持部に保持された第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を医療従事者に閲覧させる健康医療関連情報一元管理システムを提供する。
図８ａは、実施形態７における健康医療関連情報一元管理システムの機能的構成を示す図である。これ以降、実施形態５乃至６と同様の機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 This embodiment is based on Embodiments 1 to 6, and the disclosure permission information held in the release permission information storage unit indicates permission to release, and the third party identification information held in the third party identification information storage unit is Provided is a health and medical related information unified management system that allows a medical professional to view health and medical related information accumulated in a health and medical related information storage unit when the person indicates that the person is a medical professional.
FIG. 8a is a diagram showing the functional configuration of a health and medical related information unified management system in Embodiment 7. From now on, descriptions of functions, hardware configurations, and processing flows similar to those of the fifth and sixth embodiments will be omitted as appropriate.
以下、本実施形態における健康医療関連情報一元管理システムについて、機能的構成、ハードウェア構成および処理の流れについて、順に説明する。 Hereinafter, the functional configuration, hardware configuration, and processing flow of the health and medical related information unified management system in this embodiment will be explained in order.
＜実施形態７　機能的構成＞
図７ａは、本実施形態における健康医療関連情報一元管理システムの機能的構成を示す図である。このような構成を取ることにより、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を閲覧可能とすることができるようになる。 <Embodiment 7 Functional configuration>
FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment. By adopting such a configuration, if the disclosure permission/denial information held in the disclosure permission/denial information holding unit indicates permission to release, and the third party identification information indicates that the person is a medical professional, the health and medical related information will not be stored. It becomes possible to view health and medical related information accumulated in the department.
＜実施形態７　健康医療関連情報一元管理システム：機能的構成＞
図７ａは、本実施形態における健康医療関連情報一元管理システムの機能的構成を示す図である。 <Embodiment 7 Health and medical related information unified management system: functional configuration>
FIG. 7a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment.
＜実施形態７　構成の説明：アクセス制御部の公開許否情報保持部＞
「公開許否情報保持部」８０６は、ネットワークを介して、個人に関する健康医療関連情報にアクセスしてきた第三者に対して自身の健康医療関連情報を公開するか否かを示す公開許否情報を保持する機能を有するように構成される。具体的には、図２ｂに示すような第三者端末２０６から、ネットワーク２０５を介して、健康医療関連情報一元管理システム２００のアクセス制御部２０２に対して「公開許可」又は「公開拒否」を示す情報を、個人の意思で設定できるように構成されることが望ましい。例えば、「公開許可」は「１」とし、「公開拒否」は「０」とする２値情報（フラグ情報）としてもよい。また、公開許否情報は、健康医療関連情報のうち、所定の一塊の単位で公開するかしないかを設定できるようにしてもよい。例えば、診療科のうち、内科に関する健康医療関連情報については「公開許可」とする一方、精神科に関する健康医療関連情報については「公開拒否」と設定することが考えられる。また、公開許否情報は、上述する第三者識別情報との組み合わせにより、第三者が特定の医療従事者である場合には、「公開許可」する場合と、「公開拒否」する場合とに区別して設定することができるようにしてもよい。例えば、第三者識別情報が「医師」を表す場合には、個人の健康医療関連情報を「公開許可」とするが、一方、第三者識別情報が特定の医療従事者（例えば、経理担当者や会計担当者等）を表す場合には、個人の健康医療関連情報を「公開拒否」とすることが考えられる。 <Embodiment 7 Configuration description: Publication permission information holding unit of access control unit>
The “disclosure permission/denial information holding unit” 806 holds disclosure permission/denial information indicating whether or not to disclose the health and medical information of the individual to a third party who has accessed the health and medical information related to the individual via the network. It is configured to have the function of Specifically, a third-party terminal 206 as shown in FIG. 2b issues "permission to publish" or "refuse to publish" to the access control unit 202 of the healthcare-related information unified management system 200 via the network 205. It is desirable that the information displayed be configured so that the information can be set according to the individual's will. For example, it may be binary information (flag information) in which "publication permission" is set to "1" and "publication refusal" is set to "0". Further, the disclosure permission/denial information may be such that it can be set whether or not to disclose a predetermined group of health and medical related information. For example, among medical departments, health and medical information related to internal medicine may be set to "disclosure permission," while health and medical information related to psychiatry may be set to "disclosure prohibited." In addition, when the third party is a specific medical professional, the disclosure permission/denial information can be used in combination with the third party identification information described above to determine whether the third party is a specific medical professional, whether the disclosure is permitted or the disclosure is refused. It may also be possible to set them separately. For example, if the third-party identifying information represents a "doctor," the individual's health and medical information will be "permitted to be released," but on the other hand, if the third-party identifying information represents a "doctor," the individual's health and medical information will be "permitted to be released," but on the other hand, if the third-party identifying information represents a "doctor" person, accountant, etc.), it may be possible to ``refuse disclosure'' of personal health and medical information.
＜実施形態７　構成の説明：アクセス制御部の第三者識別情報保持部＞
「第三者識別情報保持部」８０７は、ネットワークを介して、健康医療関連情報蓄積部に蓄積された健康医療関連情報にアクセスしてきた第三者が、医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する機能を有するように構成される。ここで、第三者識別情報は、例えば、１２桁からなる数字、文字、記号などを組み合わせて作られた情報であって、第三者を一意に識別可能な情報としてもよい。例えば、具体的には、マイナンバー情報や、被健康保険者証番号などを使用してもよい。
また、第三者識別情報は、上述したアクセス主体情報、利用者情報並びに利用者属性情報（「医療従事者」又は「非医療従事者」）と関連付けられていることが好ましい。また、第三者識別情報は、上述した管理者が、管理者端末を使って、登録、編集、削除を行えるようにしてもよい。
なお、上述した公開許否情報および第三者識別情報の組み合わせにより、公開許否情報が「公開許可」を示す場合であっても、第三者が特定の医療従事者である場合には、アクセスを許可する場合と許可しない場合とに区別して設定することができるようにしてもよい。
例えば、第三者識別情報が「医師」を表す場合には、健康医療関連情報へのアクセスを許可するが、一方、第三者識別情報が特定の医療従事者（例えば、経理担当者や会計担当者等）を表す場合には、健康医療関連情報へのアクセスを不許可とすることができるようにしてもよい。
また、例えば、第三者識別情報の中に所属部門を示す情報を追加し、その所属部門を示す情報により、健康医療関連情報へのアクセスの許可、不許可をコントロールすることができるようにしてもよい。また、例えば、第三者識別情報で特定される利用者の専門性に関する情報（例えば、「医師」や「看護師」の専門分野や経験年数等）により、健康医療関連情報へのアクセスの許可、不許可をコントロールすることができるようにしてもよい。また、例えば、公開許否情報、第三者識別情報に関わる所属部門や専門性の組み合わせにより、第三者による健康医療関連情報の取得方法（例えば、閲覧のみ可能、情報のテキスト化が可能、コピー可能、転送可能、匿名加工化された情報のバルクダウンロード可能等）を変えることができるようにしてもよい。なお、ダウンロード可能とする場合には、データ改ざん防止のために電子透かし技術やＮＦＴ（Ｎｏｎ－Ｆｕｎｇｉｂｌｅ　Ｔｏｋｅｎ：非代替性トークン）技術などを利用できるようにすることが好ましい。また、例えば、公開許否情報、第三者識別情報に関わる所属部門や専門性の組み合わせにより、患者本人へのアクセス権限を第三者に付与することができるようにしてもよい。例えば、医療従事者であるＰＣＲ検査担当者が、ＰＣＲ検査の結果を医師が使う第三者端末に送信すると共に、患者本人が使う第三者端末に送信することが想定される。
これら情報の組み合わせについては、上述した管理者が、管理者端末を使って、上述したアクセス制御部に予め表形式等で登録しておき、適宜、必要に応じて、編集や削除ができるようにすることが考えられる。
また、例えば、医療従事者として、医師、歯科医師、薬剤師が挙げられるが、これらの第三者識別情報については、少なくとも、その一部として、医師免許証に記載されている医籍登録番号（例えば、６桁の数字からなる番号）、歯科医師免許証に記載されている歯科医籍登録番号（例えば、６桁の数字からなる番号）、薬剤師免許証に記載されている薬剤師名簿登録番号（例えば、６桁の数字からなる番号）が含まれるようにしてもよい。同様に、その他の医療従事者についても、第三者識別情報については、少なくとも、その一部として、資格免許証に記載されている番号が含まれるようにしてもよい。
また、利用者が加入している健康保険組合の被保険者証に記載されている記号や番号（枝番含む）、運転免許証の番号、マイナンバーカードに記載されているマイナンバー情報などが少なくとも第三者識別情報の一部として含まれていてもよい。なお、Ｇｏｏｇｌｅ（登録商標）やＦａｃｅｂｏｏｋ（登録商標）等のプラットフォーマーによる第三者認証を利用して利用者を識別することができるようにしてもよい。 <Embodiment 7 Configuration description: Third party identification information holding unit of access control unit>
The “third party identification information holding unit” 807 determines whether a third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical professional or a non-medical professional. It is configured to have a function to hold third party identification information to identify whether the person is a medical worker. Here, the third party identification information is, for example, information created by combining 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information, health insurance card number, etc. may be used.
Further, it is preferable that the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information (“medical worker” or “non-medical worker”). Further, the third party identification information may be registered, edited, and deleted by the above-mentioned administrator using an administrator terminal.
Furthermore, due to the combination of the above-mentioned disclosure permission information and third party identification information, even if the disclosure permission information indicates "disclosure permission", if the third party is a specific medical professional, access may be prohibited. It may also be possible to make settings for cases in which permission is permitted and cases in which permission is not permitted.
For example, if the third-party identifier represents a "doctor," it may allow access to healthcare-related information, but if the third-party identifier represents a (person in charge, etc.), it may be possible to disallow access to healthcare-related information.
Also, for example, by adding information indicating the department to which the third party belongs to the third party identification information, it is possible to control permission or disallowance of access to healthcare-related information based on the information indicating the department to which the person belongs. Good too. In addition, for example, permission to access healthcare-related information may be granted based on information regarding the user's specialty identified by third-party identification information (e.g., the specialty and years of experience of a "doctor" or "nurse"). , it may be possible to control disallowance. For example, depending on the combination of department and expertise related to disclosure permission information and third-party identification information, we will determine how third parties can obtain health and medical information (for example, viewing only, converting information to text, copying) (transferable, bulk downloadable of anonymously processed information, etc.) may be changed. Note that if the data is made downloadable, it is preferable to use digital watermark technology, NFT (Non-Fungible Token) technology, etc. to prevent data tampering. Further, for example, it may be possible to grant access authority to a patient to a third party based on a combination of the department to which the patient belongs and the specialty related to the disclosure permission information and the third party identification information. For example, it is assumed that a person in charge of a PCR test, who is a medical worker, transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by a patient himself.
The above-mentioned administrator uses the administrator terminal to register the combination of these information in the above-mentioned access control unit in advance in table format, etc., so that it can be edited or deleted as needed. It is possible to do so.
In addition, for example, medical professionals include doctors, dentists, and pharmacists, and at least part of their third-party identification information includes the medical registration number written on the doctor's license (e.g. , a 6-digit number), a dental registration number written on a dentist's license (e.g. a 6-digit number), a pharmacist directory registration number written on a pharmacist's license (e.g. A number consisting of 6 digits) may be included. Similarly, for other medical professionals, the third party identification information may include at least a part of the number written on the qualification license.
In addition, at least the symbol and number (including branch number) written on the insurance card of the health insurance association to which the user belongs, the number of the driver's license, and the My Number information written on the My Number card, etc. It may be included as part of the third party identification information. Note that the user may be identified using third party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).
＜実施形態７　構成の説明：アクセス制御部のアクセス制御手段＞
「アクセス制御手段」７０５は、ネットワークを介して、第三者が健康医療関連情報蓄積部に対してアクセスしてきたときのアクセス制御に関し、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を閲覧可能とする機能を有するように構成される。 <Embodiment 7 Description of configuration: access control means of access control unit>
The "access control means" 705 controls access when a third party accesses the health and medical information storage unit via the network, and determines whether the disclosure permission information held in the disclosure permission information storage unit is and the third party identification information indicates that the third party is a medical worker, the third party identification information is configured to have a function of allowing viewing of the health and medical related information stored in the health and medical related information storage section.
＜実施形態７　健康医療関連情報一元管理システム：ハードウェア構成＞
図７ｂは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」７２１と、「メインメモリ」７２２とを備えている。また、所定の情報を保持する「不揮発性メモリ」７２３や、第三者端末７２６や管理者端末７２７と情報の送受信を行う「ネットワークＩ／Ｆ」７２４を備えている。そして、それらが「バス」７２５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 <Embodiment 7 Health and medical related information unified management system: Hardware configuration>
FIG. 7b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 721 that performs various calculation processes, and a "main memory" 722. It also includes a "nonvolatile memory" 723 that holds predetermined information, and a "network I/F" 724 that sends and receives information to and from a third party terminal 726 and an administrator terminal 727. These devices are interconnected by a data communication path such as a “bus” 725, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、公開許否情報保持プログラム、第三者識別情報保持プログラム、アクセス制御プログラムである。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing these addresses. It is now possible to carry out and process. In this embodiment, the programs stored in the "main memory" are a release permission information holding program, a third party identification information holding program, and an access control program.
また、「メインメモリ」と「不揮発性メモリ」には、公開許否情報、第三者識別情報などが格納されている。 Additionally, the "main memory" and "nonvolatile memory" store disclosure permission information, third party identification information, and the like.
「ＣＰＵ」は、「メインメモリ」に格納されている公開許否情報保持プログラムを実行して、ネットワークを介して、個人に関する健康医療関連情報にアクセスしてきた第三者に対して自身の健康医療関連情報を公開するか否かを示す公開許否情報を「メインメモリ」と「不揮発性メモリ」に格納する。また、「メインメモリ」に格納されている第三者識別情報保持プログラムを実行して、ネットワークを介して、健康医療関連情報蓄積部に蓄積された健康医療関連情報にアクセスしてきた第三者が、医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を「メインメモリ」と「不揮発性メモリ」に格納する。この後、「メインメモリ」に格納されているアクセス制御プログラムを実行して、公開許否情報が公開許可を示し、かつ、第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を閲覧可能にする。 The ``CPU'' executes the release permission information holding program stored in the ``main memory'' to notify a third party who has accessed the health and medical information related to the individual via the network that the individual's health and medical related information is stored. Disclosure permission information indicating whether or not to disclose information is stored in "main memory" and "nonvolatile memory." In addition, a third party who accesses the health and medical information stored in the health and medical information storage unit via the network by executing the third party identification information retention program stored in the "main memory" , third-party identification information for identifying whether the person is a medical worker or a non-medical worker is stored in the "main memory" and "nonvolatile memory." After this, the access control program stored in the "main memory" is executed to determine if the disclosure permission information indicates disclosure permission and the third party identification information indicates that the person is a medical professional. To enable viewing of health and medical related information accumulated in the information storage section.
＜実施形態７　健康医療関連情報一元管理システム：処理の流れ＞
図７ｃは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。
図に示されるように、公開許否情報保持ステップＳ７０６と、第三者識別情報保持ステップＳ７０７と、アクセス制御ステップＳ７０８とからなる処理方法である。 <Embodiment 7 Health and medical related information unified management system: Processing flow>
FIG. 7c is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used.
As shown in the figure, this processing method includes a disclosure permission information holding step S706, a third party identification information holding step S707, and an access control step S708.
「公開許否情報保持ステップ」Ｓ７０６とは、ネットワークを介して、個人に関する健康医療関連情報にアクセスしてきた第三者に対して自身の健康医療関連情報を公開するか否かを示す公開許否情報を保持する段階である。 "Disclosure permission/denial information retention step" S706 refers to disclosure permission/denial information indicating whether or not to disclose the health and medical information of the individual to a third party who has accessed the health and medical information related to the individual via the network. This is the stage of holding.
「第三者識別情報保持ステップ」Ｓ７０７とは、ネットワークを介して、健康医療関連情報蓄積部に蓄積された健康医療関連情報にアクセスしてきた第三者が、医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する段階である。 "Third party identification information holding step" S707 means whether the third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical worker or This is the stage of retaining third-party identification information to identify non-medical personnel.
「アクセス制御ステップ」Ｓ７０８とは、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を閲覧可能とする段階である。 "Access control step" S708 means that if the disclosure permission information held in the disclosure permission information holding unit indicates permission to publish and the third party identification information indicates that the person is a medical worker, the health and medical related information storage This is the stage where the health and medical information accumulated in the department can be viewed.
＜まとめ＞
以上より、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報を閲覧可能とすることができる。 <Summary>
From the above, if the disclosure permission/denial information held in the disclosure permission/denial information storage unit indicates permission to release, and the third party identification information indicates that the person is a medical worker, the health information stored in the health and medical information storage unit Medical related information can be viewed.
＜実施形態８（主に請求項８に対応）＞
＜実施形態８　概要＞ <Embodiment 8 (mainly corresponding to claim 8)>
<Embodiment 8 Overview>
本実施形態は、実施形態１乃至６を基本として、匿名加工化方法情報を保持するようにした点に特徴がある。これ以降、実施形態１乃至６と同様の機能、ハードウェア構成、処理の流れについては、適宜、説明を省略する。 This embodiment is characterized in that anonymization method information is held based on Embodiments 1 to 6. From now on, descriptions of functions, hardware configurations, and processing flows similar to those of Embodiments 1 to 6 will be omitted as appropriate.
以下、本実施形態における健康医療関連情報一元管理システムについて、機能的構成、ハードウェア構成および処理の流れについて、順に説明する。これ以降、実施形態１乃至６と相違する点を中心に説明を行う。 Hereinafter, the functional configuration, hardware configuration, and processing flow of the health and medical related information unified management system in this embodiment will be explained in order. From now on, the explanation will focus on the points that are different from the first to sixth embodiments.
＜実施形態８　機能的構成＞
図９ａは、本実施形態における健康医療関連情報一元管理システムの機能的構成を示す図である。本実施形態における健康医療関連情報一元管理システムは、実施形態５および６に加えて、匿名加工化方法情報保持部を備えている。 <Embodiment 8 Functional configuration>
FIG. 9a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment. In addition to the fifth and sixth embodiments, the health and medical related information unified management system in this embodiment includes an anonymization method information holding unit.
＜実施形態８　健康医療関連情報一元管理システム：機能的構成＞
図８ａは、本実施形態における健康医療関連情報一元管理システムの機能的構成を示す図である。ここでは、実施形態５および６と相違する点を中心に説明する。 <Embodiment 8 Health and medical related information unified management system: functional configuration>
FIG. 8a is a diagram showing the functional configuration of the health and medical related information unified management system in this embodiment. Here, differences from Embodiments 5 and 6 will be mainly explained.
＜実施形態８　構成の説明：アクセス制御部の匿名加工化方法情報保持部＞
「匿名加工化方法情報保持部」９０８は、匿名加工化方法を表す情報を保持する機能を有するように構成される。ここで、匿名加工化方法情報とは、例えば、６桁からなる数字、文字、記号などを組み合わせて作られた情報であって、匿名加工化方法を一意に識別可能な情報としてもよい。なお、匿名加工化方法情報については、上述した管理者が、管理者端末を使って、登録、編集、削除を行えるようにしてもよい。 <Embodiment 8 Configuration description: Anonymization method information holding unit of access control unit>
The “anonymization method information holding unit” 908 is configured to have a function of holding information representing an anonymization method. Here, the anonymization method information is, for example, information created by combining six-digit numbers, letters, symbols, etc., and may be information that can uniquely identify the anonymization method. Note that the anonymization method information may be registered, edited, and deleted by the administrator described above using an administrator terminal.
匿名加工化方法にはいくつかの方法が存在し、これらを単独又は組み合わせて使用されることが多い。主な匿名加工化方法について、以下簡単に説明する。
「ｋ－匿名化」（ここでｋは２以上の自然数を表す）とは、単独では個人を識別できないが、複数を組み合わせることで個人を高い確率で識別することが可能な属性（例えば、性別、年齢、居住地、職業等）について、どの属性値の組み合わせでも、対象とするデータ中に必ずｋ件以上存在する状態にすることである。
「仮名化」とは、削除又は復元することのできる規則性を有しない方法により他の記述等に置き換えることである。
「一般化」とは、属性の値を上位の値や概念に置き換えることである。例えば、１０歳刻み、キュウリを上位概念の野菜にするなどがある。
「トップ（ボトム）コーディング」とは、数値属性に対して、特に大きい、もしくは小さい属性値にまとめることである。例えば、１００歳以上の人を「１００歳以上」とするなどがある。
「ノイズ（誤差）付加」とは、数値属性に対して、一定の分布に従った乱数的なノイズを加えることである。
「スワッピング（データ交換）」とは、カテゴリ属性に対して、レコード間で属性値を（確率的に）入れ替えることである。データスワップとも呼ぶ。
「サンプリング」とは、元データ全体から一定の割合・個数でランダムに抽出することである。
「グルーピング」とは、属性や履歴において、詳細な項目を一定のまとまりや区分に置き換えることである。 There are several anonymization methods, and these are often used alone or in combination. The main anonymization methods will be briefly explained below.
"k-anonymization" (here k represents a natural number of 2 or more) is an attribute that cannot identify an individual by itself, but can identify an individual with high probability by combining multiple attributes (for example, gender , age, place of residence, occupation, etc.), no matter what combination of attribute values, k or more values must exist in the target data.
"Pseudonymization" refers to replacing something with another description, etc., using a method that does not have regularity that allows it to be deleted or restored.
"Generalization" means replacing the value of an attribute with a higher value or concept. For example, cucumbers may be given as a superordinate vegetable in 10-year increments.
"Top (bottom) coding" refers to grouping numerical attributes into particularly large or small attribute values. For example, people who are 100 years old or older may be referred to as "100 years old or older."
"Noise (error) addition" means adding random number noise according to a certain distribution to numerical attributes.
"Swaping (data exchange)" means (probabilistically) exchanging attribute values between records for category attributes. Also called data swap.
“Sampling” refers to randomly extracting data at a fixed rate and number from the entire original data.
"Grouping" refers to replacing detailed items in attributes and history with certain groups or classifications.
＜実施形態８　構成の説明：アクセス制御部のアクセス制御手段＞
「アクセス制御手段」９０５は、ネットワークを介して、第三者が健康医療関連情報蓄積部に対してアクセスしてきたときのアクセス制御に関し、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が非医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報の一部（全部を含む）、又は、予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を閲覧可能とする機能を有するように構成される。 <Embodiment 8 Configuration description: access control means of access control unit>
The "access control means" 905 controls access when a third party accesses the health and medical information storage unit via the network, and determines whether the disclosure permission information held in the disclosure permission information storage unit is and the third party identification information indicates that the third party is a non-medical worker, some (including all) of the health and medical information stored in the health and medical information storage unit or a predetermined The system is configured to have a function that allows viewing of health and medical related information that has been anonymized using anonymization method.
＜実施形態８　健康医療関連情報一元管理システム：ハードウェア構成＞
図９ｂは、本実施形態における健康医療関連情報一元管理システムのハードウェア構成を示す図である。この図に示すように、本実施形態における健康医療関連情報一元管理システムは、各種演算処理を行う「ＣＰＵ（中央演算装置）」９１１と、「メインメモリ」９１２とを備えている。また、所定の情報を保持する「不揮発性メモリ」９１３や、第三者端末９１６や管理者端末９１７と情報の送受信を行う「ネットワークＩ／Ｆ」９１４を備えている。そして、それらが「バス」９１５などのデータ通信経路によって相互に接続され、情報の送受信や処理を行う。 <Embodiment 8 Healthcare-related information unified management system: Hardware configuration>
FIG. 9b is a diagram showing the hardware configuration of the health and medical related information unified management system in this embodiment. As shown in this figure, the health and medical related information unified management system in this embodiment includes a "CPU (Central Processing Unit)" 911 that performs various calculation processes and a "main memory" 912. It also includes a "nonvolatile memory" 913 that holds predetermined information, and a "network I/F" 914 that sends and receives information to and from a third party terminal 916 and an administrator terminal 917. These devices are interconnected by a data communication path such as a “bus” 915, and transmit, receive, and process information.
ここに「メインメモリ」は、各種処理を行うプログラムを「ＣＰＵ」に実行させるために読み出すと同時に、そのプログラムの作業領域でもあるワーク領域を提供する。また、この「メインメモリ」や「不揮発性メモリ」にはそれぞれ複数のアドレスが割り当てられており、「ＣＰＵ」で実行されるプログラムは、そのアドレスを特定しアクセスすることで相互にデータのやり取りを行い、処理を行うことが可能になっている。本実施形態において、「メインメモリ」に格納されているプログラムは、実施形態５および６に加えて、匿名加工化方法情報保持プログラムである。 Here, the "main memory" reads out programs for performing various processes in order to be executed by the "CPU", and at the same time provides a work area that is a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "nonvolatile memory," and programs executed by the "CPU" can exchange data with each other by identifying and accessing those addresses. It is possible to carry out and process. In this embodiment, in addition to the fifth and sixth embodiments, the program stored in the "main memory" is an anonymization method information holding program.
また、「メインメモリ」と「不揮発性メモリ」には、実施形態５および６に加えて、匿名加工化方法情報などが格納されている。 In addition to the fifth and sixth embodiments, anonymization method information and the like are stored in the "main memory" and "nonvolatile memory."
「ＣＰＵ」は、「メインメモリ」に格納されている匿名加工化方法情報保持プログラムを実行して、匿名加工化方法を表す匿名加工化方法情報を「メインメモリ」と「不揮発性メモリ」に格納する。この後、「メインメモリ」に格納されているアクセス制御プログラムを実行して、公開許否情報が公開許可を示し、かつ、第三者識別情報が非医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報の一部（全部を含む）、又は、予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を閲覧可能とする。 The "CPU" executes the anonymization method information holding program stored in the "main memory" and stores the anonymization method information representing the anonymization method in the "main memory" and "nonvolatile memory". do. After this, the access control program stored in the "main memory" is executed, and if the disclosure permission information indicates disclosure permission and the third party identification information indicates that the person is a non-medical worker, the health care It is possible to view part (including all) of the health and medical related information stored in the related information storage unit, or health and medical related information anonymized by a predetermined anonymization method.
＜実施形態８　健康医療関連情報一元管理システム：処理の流れ＞
図８ｃは、本実施形態における健康医療関連情報一元管理システムを利用した場合の処理の流れを示す図である。実施形態５および６と相違する点を中心に説明する。
図に示されるように、匿名加工化方法情報保持ステップＳ９０８と、アクセス制御ステップＳ９０９とからなる処理方法である。 <Embodiment 8 Health and medical related information unified management system: Processing flow>
FIG. 8c is a diagram showing the flow of processing when the health and medical care related information unified management system in this embodiment is used. The following will focus on the differences from the fifth and sixth embodiments.
As shown in the figure, this processing method includes an anonymization method information holding step S908 and an access control step S909.
「匿名加工化方法情報保持ステップ」Ｓ９０８とは、健康医療関連情報を匿名加工化する方法を表す情報である匿名加工化方法情報を保持する段階である。 "Anonymization method information retention step" S908 is a step of retaining anonymization method information that is information representing a method for anonymizing health and medical related information.
「アクセス制御ステップ」Ｓ９０９とは、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が非医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報の一部（全部を含む）、又は、予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を閲覧可能とする段階である。 "Access control step" S909 refers to health and medical related information when the disclosure permission/denial information held in the disclosure permission/denial information holding unit indicates permission to publish and the third party identification information indicates that the person is a non-medical worker. This is a stage where part (including all) of the health and medical related information accumulated in the storage unit or health and medical related information anonymized by a predetermined anonymization method can be viewed.
＜匿名加工化方法の一例の説明＞
図１０ａ乃至図１０ｃは、匿名加工化方法の一例を示す図である。これらを用いて、匿名加工化方法の一例を簡潔に説明する。
図１０ａに示された表は、まだ匿名化されていない日本の東京都港区にある架空の医療機関における患者の一覧である。ここでは、６つの属性（名前、年齢、性別、居住地、宗教、病気名）と１２人分のデータが含まれている。このうち、「氏名」は、個人データを構成する情報であって、それ単体で個人を特定する可能性のある情報である。また、「年齢」、「性別」、「居住地」、「宗教」、「病気名」は、個人データを構成する情報であって、経時的にデータが積み重ねられることのない情報で、それ単体では個人を特定することができないものの、他の属性との組合せや外部の情報との照合により、個人を特定する可能性のある情報である。特に、「病気名」は、個人データにおいて、非常にセンシティブな属性情報である。これらの情報は、上述した健康医療関連情報蓄積部に蓄積された個人の健康医療関連情報に相当する。この場合、あるｋ（ｋは２以上の自然数）の値に対して、ｋ－匿名性を達成するには次のような処理を施せばよい。
最初に、「仮名化」という処理を行い、ある属性の一定の値をアスタリスク「＊」で置換する。その列の全て、又は、一部の値が「＊」に置換される。図１０ｂで示された表では、「名前」の全ての値と、「宗教」の全ての値を「＊」に置換している。
続いて、「一般化」という処理を行い、個々の属性値を広い範囲に置換する。例えば、「年齢」については、「２９歳」を「２０代」に、「３５歳」を「３０代」にといった具合に、幅を持たせた値に置換する。また、「居住地」については、都道府県と市区町村からなる値であるが、その市区町村を削除して、都道府県だけに変える。
図１０ｂは、匿名化した表を示している。ここで、同一の準識別子（「年齢」、「性別」、「居住地」）の組合せを持つ同値類は４つ存在する。
図１０ｃは、匿名化した表を分かり易くグループ化したものを示している。この表から分かるように、何れのグループ（グループＡないしグループＤ）でも、「年齢」、「性別」、「居住地」において、３－匿名性を達成している。何故なら、これらの属性の組合せではどの組合せにおいても３人以上になるためである。
このようにして、上述した健康医療関連情報蓄積部に蓄積された個人に関する健康医療関連情報を匿名加工化することで、個人を特定されるリスクを低減することができる。 <Explanation of an example of anonymization method>
FIGS. 10a to 10c are diagrams illustrating an example of an anonymization method. An example of an anonymization method will be briefly explained using these.
The table shown in Figure 10a is a list of patients at a fictitious medical institution in Minato-ku, Tokyo, Japan, who have not yet been anonymized. This includes six attributes (name, age, gender, place of residence, religion, disease name) and data for 12 people. Among these, "name" is information that constitutes personal data, and is information that may identify an individual by itself. Additionally, "age", "gender", "place of residence", "religion", and "disease name" are information that constitutes personal data and are not accumulated over time and are used alone. Although it cannot identify an individual, it is information that may identify an individual when combined with other attributes or compared with external information. In particular, "disease name" is extremely sensitive attribute information in personal data. These pieces of information correspond to the personal health and medical information stored in the health and medical information storage unit described above. In this case, the following process may be performed to achieve k-anonymity for a certain value of k (k is a natural number of 2 or more).
First, a process called "pseudonymization" is performed to replace a certain value of a certain attribute with an asterisk "*". All or part of the values in that column are replaced with "*". In the table shown in FIG. 10b, all values of "name" and all values of "religion" are replaced with "*".
Next, a process called "generalization" is performed to replace each attribute value with a wide range. For example, regarding "age,""29 years old" is replaced with "20s,""35 years old" is replaced with "30s," and so on. Furthermore, the "place of residence" is a value consisting of the prefecture and city, ward, town, or village, but the city, ward, town, or village is deleted and changed to only the prefecture.
Figure 10b shows an anonymized table. Here, there are four equivalence classes having the same combination of quasi-identifiers (“age,” “gender,” and “place of residence”).
Figure 10c shows anonymized tables grouped for ease of understanding. As can be seen from this table, all groups (Group A to Group D) achieved 3-anonymity in terms of "age,""gender," and "place of residence." This is because any combination of these attributes results in three or more people.
In this way, by anonymizing the health and medical information related to the individual stored in the health and medical information storage unit described above, it is possible to reduce the risk of the individual being identified.
＜まとめ＞
以上より、公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、第三者識別情報が非医療従事者であることを示す場合、健康医療関連情報蓄積部に蓄積された健康医療関連情報の一部（全部を含む）、又は、予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を閲覧可能とすることができる。 <Summary>
Based on the above, if the disclosure permission/denial information held in the disclosure permission/denial information holding unit indicates permission to release, and the third party identification information indicates that the person is a non-medical worker, the information stored in the health and medical information storage unit is Part (including all) of the health and medical related information or health and medical related information that has been anonymized using a predetermined anonymization method can be made viewable.
健康医療関連情報一元管理システム：２００
健康医療関連情報蓄積部：２０１
アクセス制御部：２０２
インセンティブ管理部：２０３
インセンティブ機能部：２０４
ネットワーク：２０５
第三者端末：２０６
管理者端末：２０７ Health and medical information unified management system: 200
Health and medical information storage department: 201
Access control section: 202
Incentive management department: 203
Incentive function department: 204
Network: 205
Third party terminal: 206
Administrator terminal: 207

Claims (13)

  1. 　個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積部と、
    　前記健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御部と、
    　個人に関する健康医療関連情報の公開許否について、前記健康医療関連情報の一元管理化を促すために、前記個人に対してインセンティブを提供するためのインセンティブ管理部を少なくとも含むインセンティブ機能部と、
    を有することを特徴とする健康医療関連情報一元管理システム。     a health and medical information storage department for accumulating and centrally managing health and medical information related to individuals;
    an access control unit for controlling disclosure of the health and medical related information accumulated in the health and medical related information storage unit to a third party via a network;
    an incentive function unit that includes at least an incentive management unit for providing incentives to the individual in order to promote unified management of the health and medical information regarding whether or not to disclose the health and medical information related to the individual;
    A unified management system for health and medical information, characterized by having:
  2. 　前記インセンティブ管理部に対してアクセスするための認証を行うアクセス認証処理部をさらに有することを特徴とする請求項１に記載の健康医療関連情報一元管理システム。 The health and medical related information unified management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.
  3. 　前記アクセス認証処理部で認証された後、前記インセンティブ管理部によるインセンティブを受け入れることを了承する旨の情報である同意情報を取得する同意情報取得部をさらに有する請求項２に記載の健康医療関連情報一元管理システム。 The health and medical related information according to claim 2, further comprising a consent information acquisition unit that acquires consent information that is information indicating consent to accept the incentive from the incentive management unit after being authenticated by the access authentication processing unit. Centralized management system.
  4. 　前記同意情報取得部により同意情報の取得があった場合に、インセンティブを提供するための処理であるインセンティブ処理をするためのインセンティブ処理部をさらに有する請求項３に記載の健康医療関連情報一元管理システム。 The health and medical related information unified management system according to claim 3, further comprising an incentive processing unit for performing incentive processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition unit. .
  5. 　個人が自身の健康医療関連情報の第三者への公開を許可するか否かを示す公開許否情報を保持する公開許否情報保持部をさらに有することを特徴とする請求項１に記載の健康医療関連情報一元管理システム。 The health care device according to claim 1, further comprising a disclosure permission information storage unit that holds disclosure permission information indicating whether or not an individual is permitted to disclose his/her health and medical information to a third party. Related information unified management system.
  6. 　前記第三者が医療従事者であるか、あるいは、非医療従事者であるかを識別するための第三者識別情報を保持する第三者識別情報保持部をさらに有することを特徴とする請求項５に記載の健康医療関連情報一元管理システム。 The claim further comprises a third party identification information holding unit that holds third party identification information for identifying whether the third party is a medical worker or a non-medical worker. The unified health and medical information management system described in item 5.
  7. 　前記アクセス制御部は、前記公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、前記第三者識別情報保持部に保持された第三者識別情報が医療従事者であることを示す場合、前記健康医療関連情報蓄積部に蓄積された健康医療関連情報を前記医療従事者に閲覧させることを特徴とする請求項６に記載の健康医療関連情報一元管理システム。 The access control unit is configured such that the disclosure permission/denial information held in the release permission/denial information storage unit indicates permission to publish, and the third party identification information held in the third party identification information storage unit is a medical worker. 7. The integrated health and medical information management system according to claim 6, wherein the health and medical information integrated management system allows the medical worker to view the health and medical information stored in the health and medical information storage section.
  8. 　前記アクセス制御部は、前記公開許否情報保持部に保持された公開許否情報が公開許可を示し、かつ、前記第三者識別情報保持部に保持された第三者識別情報が非医療従事者であることを示す場合、前記健康医療関連情報蓄積部に蓄積された健康医療関連情報の一部（全部を含む）、又は、予め定められた匿名加工化方法によって匿名加工化された健康医療関連情報を前記非医療従事者に閲覧させることを特徴とする請求項６に記載の健康医療関連情報一元管理システム。 The access control unit is configured to determine whether the disclosure permission/denial information held in the release permission/denial information storage unit indicates permission to publish, and the third party identification information held in the third party identification information storage unit is a non-medical worker. If it indicates that there is, part (including all) of the health and medical information accumulated in the health and medical information storage unit, or health and medical information that has been anonymized using a predetermined anonymization method. 7. The health and medical related information unified management system according to claim 6, wherein the non-medical personnel are allowed to view the information.
  9. 　前記匿名加工化方法は、少なくともｋ（ｋは２以上の自然数）－匿名化、仮名化、一般化、トップ（ボトム）コーディング、ノイズ（誤差）付加、スワッピング（データ交換）、サンプリング、グルーピングの匿名加工化方法の何れか、あるいは、それらの組合せにより行われることを特徴とする請求項８に記載の健康医療関連情報一元管理システム。 The anonymization method includes at least k (k is a natural number of 2 or more) anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping anonymization. 9. The integrated health and medical information management system according to claim 8, characterized in that the processing is performed by any one of processing methods or a combination thereof.
  10. 　前記医療従事者は、医師、歯科医師、薬剤師、保健師、助産師、看護師、准看護師、理学療法士、作業療法士、視能訓練士、言語聴覚士、義肢装具士、診療放射線技師、診療エックス線技師、臨床検査技師、衛生検査技師、臨床工学技士、歯科衛生士、歯科技工士、救急救命士、あん摩マッサージ指圧師、はり師、きゅう師、柔道整復師、管理栄養士、栄養士、精神福祉士、社会福祉士、介護福祉士、公認心理士、臨床心理士、医療事務者の少なくとも１以上を含むことを特徴とする請求項６に記載の健康医療関連情報一元管理システム。 The medical professionals include doctors, dentists, pharmacists, public health nurses, midwives, nurses, associate nurses, physical therapists, occupational therapists, orthoptists, speech therapists, prosthetists, and radiology technicians. , Medical X-ray technician, Clinical laboratory technician, Hygiene laboratory technician, Clinical engineer, Dental hygienist, Dental technician, Emergency medical technician, Anma massage shiatsu therapist, Acupuncture therapist, Kyushu therapist, Judo therapist, Registered dietitian, Nutritionist, Psychiatrist 7. The unified health and medical information management system according to claim 6, comprising at least one of a certified social worker, a certified social worker, a certified care worker, a certified psychologist, a clinical psychologist, and a medical administrator.
  11. 　前記非医療従事者は、生命保険会社、損害保険会社、証券会社、製薬会社、創薬ベンチャー会社、食品会社、健康器具会社、フィットネスクラブ、スポーツジム、銀行、信用金庫、ＪＡ（農業協同組合）、組合健保、協会けんぽ、共済組合、市町村国保、国保組合、ＰＲ会社、総合研究所、大学および大学院（附属の研究機関も含む）、高等専門学校、農林水産系会社、肥料メーカー、官公庁、自治体、独立行政法人に属する従業員の少なくとも１以上を含むことを特徴とする請求項６に記載の健康医療関連情報一元管理システム。 The non-medical workers include life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, gyms, banks, credit unions, and JA (agricultural cooperatives). , health insurance associations, health insurance associations, mutual aid associations, municipalities, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government offices, and local governments. 7. The integrated health and medical information management system according to claim 6, characterized in that the system includes at least one employee of an independent administrative agency.
  12. 　健康医療関連情報一元管理システムにおけるＣＰＵが実行する方法であって、
    　個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積ステップと、
    　前記健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御ステップと、
    　個人に関する健康医療関連情報の公開許否について、前記健康医療関連情報の一元管理化を促すために、前記個人に対してインセンティブを提供するためのインセンティブ管理ステップを少なくとも含むインセンティブ機能ステップと、
    を有することを特徴とする方法。     A method executed by a CPU in a unified health and medical information management system, the method comprising:
    a health and medical information accumulation step for accumulating and centrally managing health and medical information related to individuals;
    an access control step for controlling disclosure of the health and medical related information accumulated in the health and medical related information storage unit to a third party via a network;
    an incentive function step including at least an incentive management step for providing an incentive to the individual in order to encourage central management of the health and medical information regarding whether or not to disclose the health and medical information related to the individual;
    A method characterized by having the following.
  13. 　個人に関する健康医療関連情報を蓄積して一元管理するための健康医療関連情報蓄積ステップと、
    　前記健康医療関連情報蓄積部に蓄積された健康医療関連情報を、ネットワークを介して、第三者に開示することを制御するためのアクセス制御ステップと、
    　個人に関する健康医療関連情報の公開許否について、前記健康医療関連情報の一元管理化を促すために、前記個人に対してインセンティブを提供するためのインセンティブ管理ステップを少なくとも含むインセンティブ機能ステップと、
    を含むことを特徴とする計算機である健康医療関連情報一元管理システムに読み取り実行に記述した健康医療関連情報一元管理システムの動作プログラム。     a health and medical information accumulation step for accumulating and centrally managing health and medical information related to individuals;
    an access control step for controlling disclosure of the health and medical related information accumulated in the health and medical related information storage unit to a third party via a network;
    an incentive function step including at least an incentive management step for providing an incentive to the individual in order to encourage unified management of the health and medical information regarding whether or not to disclose the health and medical information related to the individual;
    An operating program for a unified health and medical information management system written to be read and executed by the unified health and medical information management system, which is a computer characterized by including the following.
PCT/JP2022/047347 2022-07-15 2022-12-22 Health/medical information central management system WO2024014012A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2022113728A JP2024011594A (en) 2022-07-15 2022-07-15 Health and medical information unitary management system
JP2022-113728 2022-07-15

Publications (1)

Publication Number Publication Date
WO2024014012A1 true WO2024014012A1 (en) 2024-01-18

Family

ID=89536292

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2022/047347 WO2024014012A1 (en) 2022-07-15 2022-12-22 Health/medical information central management system

Country Status (2)

Country Link
JP (2) JP2024011594A (en)
WO (1) WO2024014012A1 (en)

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140136237A1 (en) * 2012-11-13 2014-05-15 Nicholas G. Anderson Healthcare data management system
US20140244309A1 (en) * 2011-11-08 2014-08-28 Revon Systems, Llc Systems and methods for assembling electronic medical records
WO2015040713A1 (en) * 2013-09-19 2015-03-26 株式会社日立製作所 Medicine user data collection device, system, and method
JP2018514831A (en) * 2015-03-09 2018-06-07 コーニンクレッカ フィリップス エヌ ヴェＫｏｎｉｎｋｌｉｊｋｅ Ｐｈｉｌｉｐｓ Ｎ．Ｖ． Motivation for wearable technology sensor data sharing
WO2020257647A1 (en) * 2019-06-19 2020-12-24 Electronic Health Record Data, Inc. Electronic health record data blockchain system and process
WO2021130489A1 (en) * 2019-12-24 2021-07-01 Geromics Ltd Method and system for digital attestation
JP2022025166A (en) * 2020-07-29 2022-02-10 Ａｄｖａｎｃｅｄ Ｍｅｄｉｃａｌ ＩｎｆｏＴｅｃ株式会社 Information system

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140244309A1 (en) * 2011-11-08 2014-08-28 Revon Systems, Llc Systems and methods for assembling electronic medical records
US20140136237A1 (en) * 2012-11-13 2014-05-15 Nicholas G. Anderson Healthcare data management system
WO2015040713A1 (en) * 2013-09-19 2015-03-26 株式会社日立製作所 Medicine user data collection device, system, and method
JP2018514831A (en) * 2015-03-09 2018-06-07 コーニンクレッカ フィリップス エヌ ヴェＫｏｎｉｎｋｌｉｊｋｅ Ｐｈｉｌｉｐｓ Ｎ．Ｖ． Motivation for wearable technology sensor data sharing
WO2020257647A1 (en) * 2019-06-19 2020-12-24 Electronic Health Record Data, Inc. Electronic health record data blockchain system and process
WO2021130489A1 (en) * 2019-12-24 2021-07-01 Geromics Ltd Method and system for digital attestation
JP2022025166A (en) * 2020-07-29 2022-02-10 Ａｄｖａｎｃｅｄ Ｍｅｄｉｃａｌ ＩｎｆｏＴｅｃ株式会社 Information system

Also Published As

Publication number Publication date
JP2024011594A (en) 2024-01-25
JP2024012205A (en) 2024-01-25

Similar Documents

Publication Publication Date Title
O’Leary et al. Patients’ and healthcare providers’ perceptions of a mobile portal application for hospitalized patients
Curry eHealth research and healthcare delivery: Beyond intervention effectiveness
US20120239432A1 (en) Method and system for healthcare information data storage
Sockolow et al. Incorporating home healthcare nurses’ admission information needs to inform data standards
Serrano et al. Does the primary care behavioral health model reduce emergency department visits?
Helmer et al. Empowering patients through personal health records: A survey of existing third-party web-based PHR products
Müller et al. Integration of mobile sensors in a telemedicine hospital system: remote-monitoring in COVID-19 patients
WO2023120702A1 (en) Health care information sharing system
Okoniewska et al. The Seamless Transfer-of-Care Protocol: a randomized controlled trial assessing the efficacy of an electronic transfer-of-care communication tool
WO2024014012A1 (en) Health/medical information central management system
JP7232436B1 (en) Shared health and medical information third-party disclosure system
JP7133136B1 (en) Shared health and medical information third-party disclosure system
JP7204271B1 (en) Shared health and medical information third-party disclosure system
JP7187089B1 (en) Health and medical information sharing system
Donaldson Using patient-reported outcomes in clinical oncology practice: benefits, challenges and next steps
JP7421251B1 (en) Risk assessment system
JP2022006681A (en) Electronic medical chart system, processing method thereof, and program
Ross et al. Increasing access to safe medical cannabis
Grain Changes in doctor-patient relationships for realizing the personal health paradigm
Sawarkar et al. An Android Application for Electronic Health Record System
Zuckerman et al. Personal health records
Kern et al. Active patient role in recording health data
Burton-Shepherd Medicines optimisation in patients with long-term conditions
Haghani Reduction of Blood Pressure Among Adult Hypertensive Patients Using Remote Patient Monitoring Followed by Telehealth
Johansson et al. The effect of internet-administered support (carer eSupport) on preparedness for caregiving in informal caregivers of patients with head and neck cancer compared with support as usual: a study protocol for a randomized controlled trial

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22951218

Country of ref document: EP

Kind code of ref document: A1