JP4098017B2 - Report originality verification system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a report originality certification system used to prove the originality of an inspection report created in an inspection institution performing various types of inspections on the basis of a contract from a medical institution.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, electronic authentication technology (electronic notary system) exists as a proof for electronic documents. The electronic authentication technique is a technique for preventing spoofing of a communication partner and data falsification during communication. The electronic authentication technique includes an electronic signature technique in which signature information is added to an electronic document. When it is proved that the document is not legitimate or falsified using this digital signature technique, it is performed by adding a digital signature to the digitized document using a public key cryptosystem. That is, the electronic data (electronic signature) is encrypted using a secret key, and the encrypted electronic signature is decrypted using a public key. In this public key cryptosystem, the electronic signature can be decrypted with the public key only when it is encrypted by the private key holder, so the document may not be legitimate or falsified. Proven.
[0003]
[Problems to be solved by the invention]
By the way, in the inspection organization, when various inspections are performed based on the commission from the medical institution, the inspection is reported from the inspection institution to the medical institution that commissions the inspection. The inspection report is performed by digitizing the inspection report and transmitting it from the inspection institution to the medical institution via the network. In this case, the inspection organization that is the issuer of the inspection report is made clear in advance. Therefore, it is sufficient that the inspection report received by the medical institution is issued by the inspection institution that commissioned the inspection, that is, it is sufficient that the originality of the inspection report is proved. The need to prove the legitimacy of is low.
[0004]
However, when an existing electronic signature technique or the like is used to prove the originality of the inspection report, a high cost is generated. In other words, when digital signature technology is used, the existence of a certification body that issues a highly reliable public key certificate that proves the validity of the public key is indispensable. There is a problem in that it becomes necessary to perform fastening and the cost increases.
[0005]
An object of the present invention is to provide a report originality verification system that can easily prove at low cost that an inspection report acquired at a medical institution is an original of an inspection report issued at an inspection institution that entrusted the inspection. Is to provide.
[0006]
[Means for Solving the Problems]
The report originality certification system according to claim 1 is characterized in that the attribute data of the inspection report is associated with the medical institution system installed in the medical institution and the first certification data calculated from the data of the inspection report. In a report originality certification system that is connected to a certification data storage system that stores data via a network, the medical institution system uses the second certification data calculated from the acquired test report data as the second certification data. Second proof data transmitting means for transmitting to the proof data storage system, attribute data collating means for collating the attribute data of the inspection report transmitted from the proof data storage system with the attribute data of the acquired inspection report The proof data storage system includes the second proof data and the first proof data transmitted from the medical institution system. Proof data collating means for collating the data, and the attribute data of the examination report stored in correspondence with the first proof data determined to match the second proof data by the proof data collating means Attribute data transmitting means for transmitting to the institution system, and in the medical institution system, the attribute data collating means determines that the attribute data of the examination report matches the attribute data of the acquired examination report. The originality of the acquired inspection report is proved.
[0007]
According to the report originality proof system described in claim 1, in the medical institution system, the second proof data is calculated from the acquired test report data and transmitted to the proof data storage system. Then, the attribute data of the inspection report stored in correspondence with the first certification data that matches the second certification data transmitted from the certification data storage system is collated with the attribute data of the acquired examination report. Yes. That is, by verifying the attribute data, it is possible to prove the originality of the test report acquired in the medical institution system. Therefore, the originality of the inspection report can be proved easily and at low cost.
[0008]
The report originality certification system according to claim 2, further comprising an issuer system for issuing the examination report connected to the medical institution system and the certification data storage system via a network. The operator system includes an inspection report issuing means for issuing the inspection report, an inspection report data transmitting means for transmitting data of the issued inspection report to the medical institution system, and data of the inspection report. Data transmission means for transmitting the calculated first certification data and attribute data of the inspection report to the certification data storage system.
[0009]
According to the report originality proof system described in claim 2, the inspection report is issued in the issuer system, and the first proof data calculated from the data of the issued inspection report and the attribute data of the inspection report Is sent to the certification data storage system. Therefore, the second proof data is transmitted from the medical institution system to the proof data storage system, and the attribute data of the test report stored in correspondence with the first proof data matching the second proof data from the proof data storage system is stored. It is sent to the medical institution system. Then, in the medical institution system, it is possible to easily prove the originality of the test report by comparing the attribute data of the transmitted test report with the attribute data of the acquired test report.
[0010]
The report originality certification system according to claim 3, wherein the issuer system calculates the first certification data by using the certification data calculation program from the data of the issued inspection report. It further has a calculation means.
[0011]
The report originality certification system according to claim 4, wherein the medical institution system calculates the second certification data by using the certification data calculation program from the acquired test report data. It further has a calculation means.
[0012]
According to the report originality proof system according to claims 3 and 4, the issuer system calculates the first proof data and the medical institution system calculates the second proof data. Therefore, it is not necessary to transmit / receive the inspection report data via the network in order to calculate the certification data, and the risk of wiretapping of the inspection report data can be reduced.
[0013]
Further, in the report originality certification system according to claim 5, the certification data calculation means used when the examination report data transmission means calculates the first certification data together with the data of the issued examination report. Use program data indicating a program is transmitted to the medical institution system, and the medical institution system stores a proof data calculation program for storing a proof data calculation program for calculating the second proof data from the acquired test report data. The second proof data calculation means further includes a proof data calculation program indicated by the use program data among the proof data calculation programs stored in the proof data calculation program storage means. And calculating the second certification data from the acquired inspection report data. And wherein the door.
[0014]
According to the report originality proof system described in claim 5, the second proof data is calculated in the medical institution system using the proof data calculation program indicated by the used program data. Therefore, even when a plurality of proof data calculation programs are used in the issuing system and the medical institution system, the same proof data calculation program can be used, and the originality of the test report can be proved accurately.
[0015]
Further, in the report originality proof system according to claim 6, the attribute data of the inspection report includes data indicating an issuer and an issue date of the inspection report, and the attribute data of the acquired inspection report is , Including data indicating the issuer and issue date and time of the acquired inspection report.
[0016]
According to the report originality proof system described in claim 6, the attribute data includes the issuer and date of issue of the inspection report. Therefore, when the attribute data of the inspection report and the attribute data of the acquired inspection report match, the inspection report is issued at a predetermined date and time by the issuer included in the attribute data, that is, The originality of the acquired inspection report can be proved.
[0017]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, with reference to the drawings, the originality proof processing of a report in the report originality proof system according to the embodiment of the present invention will be described.
[0018]
FIG. 1 is a block diagram of a report originality certification system according to an embodiment. As shown in FIG. 1, this report originality certification system is composed of an inspection organization system (issuer system) 2 and an inspection organization system 2 installed in an inspection organization that performs various inspections entrusted by a medical institution. The certification data storage system 4 installed separately and the medical institution systems 6a and 6b installed in each of a plurality of medical institutions are provided. Further, the inspection institution system 2, the certification data storage system 4, and the medical institution systems 6 a and 6 b are connected to each other via a network 8.
[0019]
As shown in FIG. 1, the inspection organization system 2 includes a data control unit 10 that controls data processing in the inspection organization system 2. The data control unit 10 stores a communication control unit 12 that controls communication between the certification data storage system 4 and the medical institution systems 6a and 6b, and data of an inspection report related to an inspection performed in the inspection institution. A data storage unit 14 is connected.
[0020]
The data storage unit 14 stores data of a test report relating to a test performed at a test facility on behalf of a medical institution, for example, a test of a sample such as blood or tissue taken from a patient's body. The Further, a proof data calculation program, that is, a program used for calculating proof data (first proof data) from the data of the issued inspection report is stored.
[0021]
As the proof data calculation program, a program in which it is difficult to estimate the original data from the calculated proof data and the probability that the proof data of different data match is extremely small is used. For example, a pseudo-random number (hash value) generated by using a hash function as the proof data calculation program and disturbing the data and compressed to a certain length can be used as the proof data. In addition, an encoding program for performing error correction is used as the proof data calculation program, the data is divided, and the total value (checksum) calculated by regarding the data in each divided block as a numerical value is used as proof data. Can be used. If there are a plurality of proof data calculation programs, each proof data calculation program is stored in the data storage unit 14 in association with the program number assigned to each proof data calculation program.
[0022]
The certification data storage system 4 receives certification data (first certification data) transmitted from the inspection organization system 2 via the network 8 and attribute data of the issued examination report, and corresponds to the received first certification data And store the attribute data of the inspection report. The attribute data includes the name of the inspection organization (issuer name) that issued the inspection report, the date of issue, and the issue time and second.
[0023]
The medical institution system 6a includes a data control unit 20 that controls processing of data in the medical institution system 6a. The data controller 20 is connected to a communication controller 22 that controls communication between the inspection institution system 2 and the certification data storage system 4. Further, the data control unit 20 stores the data of the inspection report transmitted via the network 8 from the inspection organization system 2 installed in the inspection organization entrusted with the inspection and received via the communication control unit 22. A data storage unit 24 is connected. Note that the medical institution system 6a has the same configuration as the medical institution system 6a, and thus the description thereof is omitted.
[0024]
Further, the data storage unit 24 stores the same proof data calculation program as the proof data calculation program stored in the data storage unit 14 of the inspection institution system 2. In addition, when each of a plurality of proof data calculation programs is stored in correspondence with the program number in the data storage unit 14 of the inspection institution system 2, the same proof data calculation program corresponds to the same program number. And stored in the data storage unit 24.
[0025]
Next, with reference to the flowcharts of FIGS. 2 and 3, the originality proof processing of the report in the report originality proof system according to this embodiment will be described.
[0026]
First, processing in the inspection organization system 2 will be described using the flowchart of FIG. In the following, a case where an inspection report related to an inspection commissioned by a medical institution where the medical institution system 6a is installed is described as an example.
[0027]
First, an inspection report related to an inspection commissioned by a medical institution where the medical institution system 6a is installed is issued (step S10), and data of the issued inspection report is stored in the data storage unit 14 (step S11). For example, a test report showing patient name, contracted medical institution name, date of consignment, issuer name, issue date, issue time / minute / second, and test result is issued, and data of the issued test report is stored in the data storage unit. 14 stored.
[0028]
Next, the test report data issued in step S10 is transmitted to the medical institution system 6a via the communication control unit 12 (step S12). Here, in order to avoid wiretapping of test report data on the network 8, the test report data is encrypted and transmitted to the medical institution system 6a via the network 8. In addition, the program number (use program data) assigned to the certification data calculation program used when calculating the first certification data from the issued examination report data is transmitted to the medical institution system 6a together with the examination report data. .
[0029]
Next, proof data is calculated from the data of the inspection report created in step S10 using a proof data calculation program (step S13). That is, the test data stored in the data storage unit 14 is stored in the data storage unit 14 using a proof data calculation program stored in correspondence with the program number transmitted to the medical institution system 6a, for example, a hash function. A hash value (first proof data) is calculated from the data.
[0030]
Next, the attribute data of the inspection report issued in step S10 is created (step S14). That is, based on the inspection report data stored in the data storage unit 14, the inspection report attribute data including the inspection report issuer name, issue date, and issue time / minute / second is created.
[0031]
Next, the first certification data calculated in step S13 and the attribute data created in step S14 are transmitted to the certification data storage system 4 via the communication control unit 12 (step S15). That is, the attribute data of the inspection report including the calculated hash value, the issuer name of the inspection report, the issuance date, and the issue time and second is transmitted to the certification data storage system 4 via the network 8.
[0032]
Here, the certification data storage system 4 receives the first certification data and the attribute data of the inspection report transmitted from the inspection organization system 2 via the network 8. Then, the attribute data of the received inspection report is stored in correspondence with the received first certification data.
[0033]
Next, processing in the medical institution system 6a according to the embodiment will be described with reference to the flowchart in FIG.
[0034]
First, an inspection report related to the inspection entrusted to the inspection organization is received (step S20). That is, the program number given to the certification data calculation program used when calculating the data of the inspection report and the first certification data transmitted from the inspection organization system 2 via the network 8 is received via the communication control unit 22. To do. Since the received inspection report data is encrypted, the inspection report data is decrypted and stored in the data storage unit 24.
[0035]
Next, certification data (second certification data) is calculated from the data of the received inspection report (step S21). That is, first, a proof data calculation program with the same program number as the received program number is searched from among the proof data calculation programs stored in the data storage unit 24. Then, the second proof data, that is, the hash value is calculated from the received inspection report data by using the retrieved proof data calculation program, for example, a hash function.
[0036]
Next, the second proof data calculated in step S21, that is, the calculated hash value is transmitted to the proof data storage system 4 via the communication control unit 22 (step S22).
[0037]
Here, the proof data storage system 4 receives the second proof data transmitted via the network 8. Next, the stored first proof data is compared with the received second proof data. When the first proof data that matches the second proof data is not stored, a notification that the first proof data that matches the second proof data is not stored is sent via the network 8 to the medical institution system. To 6a.
[0038]
On the other hand, when the first proof data that matches the second proof data is stored, the attribute data of the examination report stored in association with the first proof data is transmitted via the network 8 to the medical institution system 6a. Send to. When a plurality of first proof data that matches the second proof data is stored, all the attribute data of the examination report stored in correspondence with each first proof data are stored in the medical institution system 6a. Send.
[0039]
The medical institution system 6a receives data transmitted from the certification data storage system 4 via the network 8 (step S23). That is, the data transmitted from the certification data storage system 4 is received via the communication control unit 22.
[0040]
Next, when the data received in step S23 is not attribute data of the inspection report, that is, notification data indicating that the first proof data that matches the second proof data is not stored (step S24). The process is terminated. That is, it is determined that the received inspection report is not the original inspection report issued by the inspection organization, but the originality is denied.
[0041]
On the other hand, when the data received in step S23 is the attribute data of the inspection report (step S24), the received attribute data is collated with the attribute data of the inspection report received in step S20 (step S25). . That is, the issuer name, issue date, and issue time / second issued by the inspection report are compared with the issuer name, issue date, issue time / second contained in the received inspection report data. When a plurality of attribute data are received, it is checked whether or not there is attribute data that matches the attribute data of the received inspection report among the plurality of attribute data.
[0042]
Here, if the received attribute data matches the attribute data of the inspection report received in step S20, the inspection report issued in step S20 is issued by the inspection organization outsourced to the inspection report. It can be judged that the originality of the inspection report has been proved. Similarly, if there is attribute data that matches the attribute data of the inspection report received in step S20 among the plurality of attribute data, the inspection that the inspection report received in step S20 has entrusted the inspection. This is the original inspection report issued by the organization, and it can be determined that the originality of the inspection report has been proved.
[0043]
On the other hand, when the received attribute data and the attribute data of the inspection report received in step S20 do not match, the inspection report received in step S20 is issued by the inspection organization outsourced to the inspection report. It can be determined that the originality is not denied.
[0044]
According to the report originality proof system according to the embodiment of the present invention, the inspection report issued in correspondence with the first proof data calculated from the data of the inspection report issued in the inspection body system. The attribute data is stored in the certification data storage system. In this proof data storage system, the second proof data calculated from the test report data received in the medical institution system is received and stored in correspondence with the first proof data that matches the second proof data. The attribute data of the inspection report is transmitted to the medical institution system. In the medical institution system, the attribute data transmitted from the certification data storage system is compared with the attribute data of the received inspection report. Therefore, by comparing the attribute data of the test report, the originality of the received test report can be easily proved in the medical institution that has received the test report.
[0045]
In addition, since the medical institution system that received the test report can easily determine whether the original test report has been proved or not, it proves the validity of the test report as in the case of using digital signature technology. Therefore, it is not necessary to provide a certification body, and the originality of the inspection report can be easily proved with a simple system configuration.
[0046]
Further, since it is not necessary to transmit the inspection report data itself via the network when verifying the originality of the inspection report, the risk of eavesdropping on the communication path can be reduced.
[0047]
In the report originality certification system according to the above-described embodiment, a certification data storage system is installed separately from the inspection organization system. However, the inspection organization system may also serve as the certification data storage system. Good. That is, the attribute data of the test report is stored in correspondence with the first proof data calculated in the test institution system, and stored in correspondence with the first proof data that matches the second proof data transmitted from the medical institution system. The attribute data that has been set may be transmitted to the medical institution system.
[0048]
In the report originality proof system according to the above-described embodiment, the program number of the proof data calculation program used when calculating the first proof data from the data of the test report is calculated together with the data of the test report. Although it is transmitted to the institution system, the certification data calculation program may be transmitted together with the inspection report data.
[0049]
Alternatively, only the test report data may be transmitted to the medical institution system. In this case, in response to a request from the medical institution system, a proof data calculation program used when calculating the first proof data from the data of the inspection report may be transmitted from the inspection institution system to the medical institution system. .
[0050]
【The invention's effect】
According to the present invention, the attribute data of the inspection report is stored in the certification data storage system in correspondence with the first certification data calculated from the data of the examination report. Further, in this certification data storage system, the attribute data of the examination report stored in correspondence with the first certification data that matches the second certification data calculated from the examination report data acquired in the medical institution system. Is sent to the medical institution system. In the medical institution system, the originality of the test report can be proved by comparing the attribute data of the test report transmitted from the certification data storage system with the attribute data of the acquired test report. . Therefore, the originality of the acquired test report can be proved easily at a medical institution that has acquired the test report data at low cost with a simple system configuration.
[Brief description of the drawings]
FIG. 1 is a block configuration diagram of a report originality certification system according to an embodiment of the present invention.
FIG. 2 is a flowchart for explaining processing in the inspection engine system according to the embodiment of the present invention;
FIG. 3 is a flowchart for explaining processing in the medical institution system according to the embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 2 ... Examination organization system, 4 ... Certification data storage system, 6a, 6b ... Medical institution system, 8 ... Network, 10 ... Data control part, 12 ... Communication control part, 14 ... Data storage part, 20 ... Data control part, 22 ... communication control unit, 24 ... data storage unit.

Claims (6)

A medical institution system installed in the medical institution and a certification data storage system storing attribute data of the inspection report in correspondence with the first certification data calculated from the data of the inspection report form a network. In the report originality proof system connected via
The medical institution system is
Second proof data transmitting means for transmitting second proof data calculated from the acquired inspection report data to the proof data storage system;
Attribute data collating means for collating the attribute data of the inspection report transmitted from the certification data storage system with the attribute data of the acquired inspection report,
The certification data storage system includes:
Proof data collating means for collating the second proof data and the first proof data transmitted from the medical institution system;
Attribute data transmitting means for transmitting attribute data of the examination report stored in association with the first proof data determined to match the second proof data by the proof data collating means to the medical institution system; With
In the medical institution system, when the attribute data matching unit determines that the attribute data of the inspection report and the attribute data of the acquired inspection report match, the originality of the acquired inspection report A report originality proof system characterized by An issuer system for issuing the inspection report connected to the medical institution system and the certification data storage system via a network;
The issuer system is:
Inspection report issuing means for issuing the inspection report;
A test report data transmitting means for transmitting data of the issued test report to the medical institution system;
2. The report according to claim 1, further comprising data transmission means for transmitting the first certification data calculated from the data of the inspection report and the attribute data of the inspection report to the certification data storage system. Originality proof system. The issuer system is:
3. The report originality proof system according to claim 2, further comprising first proof data calculation means for calculating the first proof data from the data of the issued inspection report using a proof data calculation program. . The medical institution system is
4. The report originality proving system according to claim 3, further comprising second proof data calculating means for calculating the second proof data from the acquired inspection report data using the proof data calculating program. . The test report data transmission means transmits use program data indicating the certification data calculation program used when calculating the first certification data to the medical institution system together with the data of the issued examination report,
The medical institution system is
Proof data calculation program storage means for storing a proof data calculation program for calculating the second proof data from the acquired inspection report data;
The second proof data calculation means is obtained by using the proof data calculation program indicated by the use program data among the proof data calculation programs stored in the proof data calculation program storage means. 5. The report originality proof system according to claim 4, wherein the second proof data is calculated from inspection report data. The attribute data of the inspection report includes data indicating an issuer of the inspection report and an issue date and time,
6. The report according to claim 1, wherein the attribute data of the acquired inspection report includes data indicating an issuer and an issue date and time of the acquired inspection report. 7. Originality proof system.

Images