JP7129064B2 - Systems, programs and methods for electronically handling patient-related documents - Google Patents

Description

Application of Patent Law Article 30, Paragraph 2 February 1, 2018 University Hospital Information Management Department Liaison Conference 2017 Art Hotel Asahikawa (6-29-2, 7-jo-dori, Asahikawa-shi, Hokkaido)

The present invention relates to a system, program and method for electronically handling patient-related documents by a computer system comprising a server and an operation terminal.

2. Description of the Related Art Conventionally, there is known a patient information database management system that reads a format such as an interview sheet written by a patient and digitizes it as image data (see, for example, Patent Document 1).

According to the system of Patent Literature 1, a reading device connected to a terminal reads a format such as a medical questionnaire and digitizes it as image data, and a user such as a doctor or a pharmacist views the digitized format, If necessary, it is possible to enclose with a colored marker or line, or write a predetermined symbol or the like.

JP-A-2005-25277

Once the questionnaire and consent form are created, the contents of the interview and consent can be revised and added.

However, in the system of Patent Document 1, a user such as a doctor or a pharmacist can put a color marker, a line, or a predetermined symbol in any part of electronic data in a format such as a read medical questionnaire as necessary. can only be written, and the content of the interview and the content of the consent are not considered.

In addition, the patients who visit the hospital are various, such as those who are accustomed to operating computers and those who are not good at operating computers.

However, in the system of Patent Document 1, only operations by specialists such as doctors and pharmacists are considered. Therefore, even if the contents of the interview and consent are modified and additional functions are added, it is difficult for patients who are not good at operating computers to operate the computer, or they cannot operate it in the first place. and may not be added.

In addition, the contents of the questionnaire and consent form are important materials that record the patient's awareness of the medical condition and the patient's consent to the treatment policy, so the hospital prepared the questionnaire and consent form. It is required to ensure that the person is the patient himself and that the contents of the questionnaire and consent form have not been tampered with.

However, the system of Patent Literature 1 only has a function of authenticating users, such as doctors and pharmacists, and a function of recording a history of valid operations using the functions of the system. Since it does not have a function to ensure that the person who created the questionnaire is the patient and that the contents of the electronic medical questionnaire and consent form have not been tampered with, the authenticity of the electronic medical questionnaire and consent form cannot be verified. I have a question.

In view of the above circumstances, the present invention makes it possible to easily modify and add the contents of interviews and consent contents for patient information including electronic medical questionnaires or consent forms, and to It is an object of the present invention to provide a system for electronically handling patient-related documents that can ensure the authenticity of information content.

A system for electronically handling patient-related documents according to the present invention includes:
In a computer system comprising a server and an operating terminal,
The server has a storage means for storing patient information including interview content or consent content for each patient in chronological order,
The operation terminal is
output means for acquiring the past patient information of the patient from the storage means and outputting the acquired patient information;
input means for receiving input of the patient information by an operator;
a storage means for adding an electronic signature to information including the patient information and storing the information in the storage means;
The output means includes printing means for printing the acquired patient information and display means for displaying the acquired patient information,
The input means comprises reading means for reading patient information printed by the printing means and manual input receiving means for receiving manual input by the operator,
The reading means is configured to receive an operator's input relating to addition or correction of information to the patient information printed by the printing means,
The manual input reception means is characterized in that it is configured to receive input relating to addition or correction of information by an operator to the patient information displayed by the display means.

The server of the system of the present invention has a storage means for storing patient information including contents of medical interviews or consent contents for each patient in chronological order.

The operation terminal includes output means for obtaining past patient information of a given patient from the server and outputting the patient information, input means for receiving input of the patient information by the operator, and electronic signature for information including the patient information. and a storing means for giving and storing in a storage means.

According to the system of this configuration, an electronic signature is added to information including patient information that has been input, and the information is stored in the storage means of the server.

As a result, it is possible to guarantee that the patient information has not been tampered with after the patient information is created, so that the authenticity of the patient information can be ensured.

The output means of the operation terminal includes printing means for printing the patient information acquired from the server and display means for displaying the patient information acquired from the server.

Further, the input means of the operation terminal comprises reading means for reading patient information printed by the printing means and manual input receiving means for receiving manual input by the operator. The manual input means is configured to receive an input relating to addition or correction of information by an operator to the patient information, and the manual input means accepts an input relating to addition or correction of information by the operator to the patient information displayed by the display means. is configured to

For that reason, print the past patient information including the electronic questionnaire or consent form, physically add or modify the interview content or consent content to the printed patient information, and then modify or add the questionnaire or By the method of reading the consent form, or by displaying past patient information including an electronic medical questionnaire or consent form on a computer display, etc., electronically adding the contents of the questionnaire or the contents of consent to the displayed patient information Alternatively, the content of the medical interview or the content of consent can be added or corrected by a method of making corrections.

As a result, those who are accustomed to computer operation can use the electronic method, and those who are not good at computer operation can use the physical method using printed materials. It is possible to easily modify and add the content of the interview and the content of consent.

In this way, according to the present invention, it is possible to easily modify and add the content of the interview and the content of consent regarding the patient information including the electronic medical questionnaire and consent form, and the patient information including the electronic medical questionnaire and consent form. The authenticity of the content can be assured.

In a system according to the invention,
It is preferable that the storage means is configured to add a time stamp to information including the patient information and store the information in the storage means.

When electronically managing patient information, including medical questionnaires and consent forms, it is important to accurately record not only the content but also the date and time when the patient information was recorded. This is important to ensure the authenticity of the content of patient information, including documents.

The system of the present invention adds an electronic signature to information including patient information that has been input, adds a time stamp, and stores the information in the storage means of the server.

This makes it possible to accurately record the date and time when the patient information was recorded, and to ensure that the patient information has not been tampered with since that date and time. Authenticity can be secured more reliably.

Thus, according to the present invention, the authenticity of patient information including electronic medical questionnaires and consent forms can be ensured more reliably.

In a system according to the invention,
It is preferable to provide detection means for detecting whether or not the patient information has been falsified using the electronic signature and the time stamp.

The system of the present invention can detect whether or not patient information has been tampered with using electronic signatures and time stamps.

As a result, the operator can easily confirm at any time that the patient information has not been tampered with since the date and time when the patient information was recorded, so that the system can be used with peace of mind.

As described above, according to the present invention, the authenticity of patient information, including electronic medical questionnaires and consent forms, can be ensured while giving the operator a sense of security.

In a system according to the invention,
It is preferable that the manual input receiving means is configured to receive input of characters by the operator and recognize the handwriting of the received characters as a part of the patient information.

Handwriting has characteristics peculiar to an individual, so it is important information for ensuring the authenticity of patient information including electronic medical questionnaires and consent forms.

The manual input receiving means of the system of the present invention can receive input of characters by the operator. In addition, the handwriting of the received characters can be recognized as part of the patient information.

As a result, the operator can confirm whether or not the patient information is written by the patient himself/herself or by the agent who has obtained the patient's consent. be able to.

As described above, according to the present invention, the authenticity of patient information including electronic medical questionnaires and consent forms can be ensured while giving the operator a high sense of security.

1 is a configuration diagram showing an example of the overall configuration of a system according to an embodiment; FIG. The figure which shows an example of a structure of the patient information database of the system of this embodiment. The figure which shows an example of the conversion table which the system of this embodiment references. 4 is a flowchart showing an example of the processing flow of the system according to the present embodiment; 4 is a flowchart showing an example of the flow of new creation processing for the system of the present embodiment; 4 is a flowchart showing an example of the flow of correction processing of the system according to the embodiment; 4 is a flowchart showing an example of the flow of correction processing of the system according to the embodiment; 4 is a flowchart showing an example of the flow of display/manual input processing of the system of the present embodiment; 4 is a flowchart showing an example of the flow of print/read processing in the system of the present embodiment;

First, with reference to FIGS. 1 and 2, the configuration of a system for electronically handling patient-related documents according to the present embodiment will be described.

The system of this embodiment includes a server 10 and an operation terminal 20. The server 10 and the operation terminal 20 are connected via a communication network 30 so as to be able to communicate with each other.

The server 10 is a computer having a server storage section 100 , a server control section 110 and a server communication section 120 .

The server storage unit 100 includes a storage device such as a ROM (Read Only Memory), a RAM (Random Access Memory), and a HDD (Hard Disk Drive). The processing result of the unit 110 is stored.

The patient information database 101 is a database that stores patient information including interview contents or consent contents for each patient in chronological order. It contains information on captured images, electronic signatures, and time stamps.

A patient ID is an ID that uniquely identifies a patient, and is composed of, for example, a combination of alphabets, numbers, and symbols.

A form ID is an ID that uniquely identifies a form corresponding to patient information, and is composed of, for example, a combination of alphabets, numbers, and symbols.

The date is the date when the patient information was stored, and the time is the hour, minute, and second when the patient information was stored.

The content is the content of n pieces of information (content 1 to content n) included in the patient information, and the value of each content can be stored in various data types such as text type and Yes/No type.

The read image is, for example, an ID that uniquely identifies an image of patient information read by the reading unit 211 . In this case, the image itself is stored in another storage area of the server storage unit. Alternatively, as the read image, for example, the image itself of the patient information read by the reading unit 211 may be stored.

A captured image is an ID that uniquely identifies an image (still image or moving image) of the operator U captured by the imaging unit 220 . In this case, the image itself is stored in another storage area of the server storage unit. Alternatively, the image itself of the operator U captured by the imaging unit 220 may be stored as the captured image, for example. Also, if the sound at the time of imaging can be acquired, the sound may be stored together with the image.

An electronic signature is an electronic signature attached to information including patient information and captured images. The time stamp is a time stamp obtained from the certification authority 40 at the date and time when the patient information was stored.

The form layout database 102 is information relating to the layout of forms when printing and displaying each patient information contained in the patient information database 101. For example, a form ID that uniquely identifies each form, a title of each form, and a description of each content. It includes information on characters included in the format such as headings or descriptions, fonts of each character, width and spacing of each line, and arrangement of each content (printing position and display position of each content in each format).

The server control unit 110 includes an arithmetic processing unit such as a CPU (Central Processing Unit), a memory, an I/O (Input/Output) device, and the like. The server control unit 110 may be configured by one processor, or may be configured by a plurality of mutually communicable processors. The server control unit 110 functions as a detection unit 111 that executes arithmetic processing, which will be described later, by reading and executing a predetermined program.

The detection unit 111 is a program that detects whether patient information has been falsified using an electronic signature and a time stamp.

The server communication unit 120 is connected to the communication network 30 via a wired communication cable or communication means compatible with wireless communication standards such as Wi-Fi (registered trademark), Bluetooth (registered trademark), infrared communication, or the like.

The operation terminal 20 has an output unit 200 , an input unit 210 , an imaging unit 220 , a terminal control unit 230 , a terminal storage unit 240 and a terminal communication unit 250 .

The output unit 200 has a function of acquiring past patient information of an arbitrary patient from the storage means and outputting the acquired patient information, and is composed of a printing unit 201 and a display unit 202 .

The printing unit 201 is a printer having a function of acquiring past patient information of an arbitrary patient from a storage unit and printing out the acquired patient information.

The display unit 202 is a part that displays information presented to the operator U by the operation terminal 20, and is, for example, a liquid crystal display or an organic EL display.

The input unit 210 has a function of receiving input of patient information by the operator U, and includes a reading unit 211 and a manual input receiving unit 212 .

A reading unit 211 is a scanner having a function of reading patient information printed by a printing unit. Alternatively, the imaging unit 220 may function as the reading unit 211 as well. Alternatively, the reading unit 211 may be a multifunction device integrated with the printer, which is the printing unit 201, and the reading unit 211 may be configured to operate as part of the functions of the multifunction device.

The manual input reception unit 212 is, for example, a keyboard, a mouse, a touch pad, a touch panel, a touch pen, other pointing devices, or a combination of one or more of these, which has a function of receiving manual input by the operator U.

As described above, the system of this configuration has a printing unit 201, a display unit 202, a reading unit 211, and a manual input reception unit 212. By a method of physically adding or modifying the content of the questionnaire or the content of consent to the printed patient information and reading the questionnaire or consent form after the modification or addition, and including the electronic questionnaire or consent form Additions or corrections to medical interviews or consent details can also be made by displaying past patient information on a computer display, etc., and electronically adding or correcting medical interview details or consent details to the displayed patient information. can be done.

As a result, those who are accustomed to computer operation can use the electronic method, and those who are not good at computer operation can use the physical method using printed materials. It is possible to easily modify and add the content of the interview and the content of consent.

The imaging unit 220 is a camera having a function of imaging a still image or a moving image of the operator U.

The terminal control unit 230 includes an arithmetic processing unit such as a CPU (Central Processing Unit), a memory, an I/O (Input/Output) device, and the like. The terminal control unit 230 may be configured by one processor, or may be configured by a plurality of mutually communicable processors. The terminal control unit 230 functions as a storage unit 231 and a display control unit 232 that execute arithmetic processing, which will be described later, by reading and executing a predetermined program.

The storage unit 231 is a program that gives an electronic signature and time stamp to information including patient information and an image captured by the imaging unit, and stores the information in the server storage unit 100 .

The display control unit 232 is a program for outputting the result of each process of the operation terminal 20 by displaying it on the display unit 202 .

The terminal storage unit 240 is composed of storage devices such as ROM (Read Only Memory), RAM (Random Access Memory), HDD (Hard Disk Drive), etc., and stores the processing results of the terminal control unit 230 .

The terminal communication unit 250 is connected to the communication network 30 via a wired communication cable or communication means compatible with wireless communication standards such as Wi-Fi (registered trademark), Bluetooth (registered trademark), or infrared communication.

The communication network 30 is, for example, a LAN (Local Area Network), a WAN (Wide Area Network), or an Internet communication network.

Next, the processing contents of the system of this embodiment will be described with reference to FIGS. 3 to 5B.

When starting the process, the manual input reception unit 212 of the operation terminal 20 first receives input of the patient ID of the target patient by the operator U (FIG. 3/STEP 100).

Then, the manual input reception unit 212 receives input of information designating the operation content by the operator U (FIG. 3/STEP 200). The operation content is new creation of patient information or correction of patient information.

Then, the operation terminal 20 determines whether or not the designated operation content is new creation (FIG. 3/STEP 300).

If the determination is affirmative (FIG. 3/STEP300: Yes), the operation terminal 20 executes a new creation process (FIG. 3/STEP400) to be described later, and terminates the process.

On the other hand, if the determination is negative (FIG. 3/STEP300: No), the operating terminal 20 executes a correction process (FIG. 3/STEP500) to be described later, and terminates the process.
<New creation process>
When the new creation process is started, the display control unit 232 of the operation terminal 20 first displays a list of patient information formats on the display unit 202 (FIG. 4A/STEP 401). When displaying the list of patient information formats, the display control unit 232 refers to a table such as that shown in FIG. For example, "Consent Form for ○○ Examination", "Medical Questionnaire", etc.) is acquired and the name of the form is displayed as a list. Alternatively, the display control unit 232 may acquire a list of patient information formats from the server 10 .

Next, the manual input reception unit 212 receives information designating the format to be created by the operator U (FIG. 4A/STEP 402). The manual input reception unit 212 receives information designating a format to be created by recognizing an operation by the operator U who clicks or taps a format name displayed in a list of formats, for example.

Then, the operation terminal 20 transmits information designating the format to the server 10 (FIG. 4A/STEP 403).

The server 10 receives the information specifying the format from the operation terminal 20 (FIG. 4A/STEP 411), and transmits the format layout corresponding to the information specifying the format to the operation terminal 20 (FIG. 4A/STEP 412).

In transmitting the format layout corresponding to the information designating the format, the server 10 refers to the format layout database 102 stored in the server storage unit 100, and selects one of the format layouts stored in the format layout database 102. , a format layout corresponding to the information specifying the format received from the operation terminal 20 is obtained.

The operation terminal 20 then receives the format layout from the server 10 (FIG. 4A/STEP 421).

Subsequently, the manual input reception unit 212 receives designation of the output method by the operator U (FIG. 4A/STEP 422). The output method is printing of patient information or display of patient information.

Next, the operation terminal 20 determines whether or not the designated output method is printing (FIG. 4A/STEP 423).

If the determination is negative (FIG. 4A/STEP 423: No), the operation terminal 20 executes display/manual input processing (FIG. 4A/STEP 600) to be described later, and terminates the processing.

On the other hand, if the determination is affirmative (FIG. 4A/STEP 423: Yes), the operation terminal 20 executes printing/manual input processing (FIG. 4A/STEP 700) to be described later, and ends the processing.
<Correction processing>
When the correction process is started, the operation terminal 20 transmits the patient ID accepted in STEP100 to the server 10 (FIG. 4B/STEP501).

Then, the server 10 receives the patient ID from the operation terminal 20 (FIG. 4B/STEP 511), acquires the past patient information of the target patient from the patient information database 101, and sends the patient information list of the patient to the operation terminal 20. (FIG. 4B/STEP 512).

In transmitting the list of patient information, the server 10 refers to the patient information database 101 stored in the server storage unit 100, and among the patient information stored in the patient information database 101, the patient ID is operated in STEP 511. Patient information that matches the patient ID received from the terminal 20 is extracted. Then, the server 10 selects, for example, patient information with the latest date and time for each form ID from the extracted patient information, and based on the patient ID, form ID, date and time of the selected patient information to create a list of patient information and transmit it to the operation terminal 20 .

Then, the display control unit 232 of the operation terminal 20 receives the past patient information list of the target patient from the server 10, and displays it on the display unit 202 (FIG. 4B/STEP 521).

In displaying the list of past patient information of the target patient, the display control unit 232 refers to a table as shown in FIG. For each form ID included in the list of information, the name of the form corresponding to the form ID is acquired, and the name of the acquired form is displayed as a list.

Subsequently, the manual input reception unit 212 receives information designating patient information to be corrected (FIG. 4B/STEP 522). The manual input reception unit 212 receives information designating patient information to be corrected by recognizing an operation by the operator U who clicks or taps the name of a format displayed in a list of past patient information, for example.

The operation terminal 20 then transmits information designating the patient information to be corrected to the server 10 (FIG. 4B/STEP 523). Information specifying patient information to be modified is, for example, patient ID, form ID, date and time.

The server 10 receives information designating patient information to be corrected from the operation terminal 20 (FIG. 4B/STEP 531), and transmits the patient information to be corrected and the format layout corresponding to the patient information to be corrected to the operation terminal 20 (FIG. 4B/STEP 532).

In transmitting the patient information to be corrected and the format layout corresponding to the patient information to be corrected, the server 10 extracts the patient ID, form ID, The patient information corresponding to the date and time is obtained, and the form layout database 102 is referred to to obtain and transmit the form layout corresponding to the form ID included in the information received from the operation terminal 20 .

Then, the operation terminal 20 receives the patient information to be corrected and the format layout corresponding to the patient information to be corrected from the server 10 (FIG. 4C/STEP 541).

Next, the manual input reception unit 212 receives information designating a patient information output method by the operator U (FIG. 4C/STEP 542). The output method of patient information is printing or display.

Then, the operation terminal 20 determines whether or not the specified output method is "printing" (FIG. 4C/STEP 543).

If the determination is negative (FIG. 4C/STEP 543: No), the operation terminal 20 executes display/manual input processing (FIG. 4C/STEP 600), and ends the processing.

On the other hand, if the determination is affirmative (FIG. 4C/STEP 543: Yes), the operation terminal 20 executes print/read processing (FIG. 4C/STEP 700) and ends the processing.
<Display/manual input processing>
When the display/manual input process is started, the operation terminal 20 first determines whether or not the operation content accepted in STEP200 is "new creation" (FIG. 5A/STEP601).

If the determination is negative (FIG. 5A/STEP601: No), the operation terminal 20 further determines whether or not the patient information to be corrected has been manually input (FIG. 5A/STEP602).

The operation terminal 20 determines whether or not the patient information to be corrected has been manually input, based on whether or not the read image is included in the patient information received in STEP 541, for example. That is, if the read image is included in the patient information received in STEP541, the operation terminal 20 determines that the patient information to be corrected has not been manually input. If the image is not included, it is determined that the patient information to be corrected has been entered manually.

Then, if the determination is negative (FIG. 5A/STEP 602: No), the operating terminal 20 activates the second manual input means. The second manual input means is a function capable of correcting the read image included in the patient information to be corrected.

On the other hand, if the specified operation content is "new creation" (FIG. 5A/STEP601: Yes), or if the patient information to be corrected is manually input (FIG. 5A/STEP602: Yes), the operation terminal 20 activates the first manual input means (FIG. 5A/STEP 604). The first manual input means is a function capable of correcting the content (content 1 to content n) included in the patient information to be corrected.

Then, the manual input reception unit 212 displays the patient information format on the display unit 202 (FIG. 5A/STEP 605).

The manual input reception unit 212 responds to the format layout received in STEP 421 when the operation content input in STEP 200 is "create new", and when the operation content input in STEP 200 is "correction". If there is, the patient information format is displayed according to the patient information to be corrected received in STEP 541 and the format layout corresponding to the patient information to be corrected.

That is, the manual input receiving unit 212 displays the format in which the content (content 1 to content n) is not input when the operation content is “new creation”, If there is, the format in which the content of the received patient information (content 1 to content n) is entered is displayed.

Then, the manual input reception unit 212 receives manual input of patient information by the operator U (FIG. 5A/STEP 606), thereby receiving input by the operator U regarding addition or correction of information on the displayed patient information.

Manual input methods include character input using a keyboard, character input using a mouse, touch pad, touch panel, touch pen, and other pointing devices, selection from pull-down lists, and check boxes. sell.

For example, the manual input reception unit 212 is a combination of a touch panel and a stylus, and is configured to receive input of characters by the operator U and recognize the handwriting of the received characters as part of the patient information. good.

As a result, the patient who is the operator U or the agent who has obtained the patient's consent confirms by handwriting whether the patient information has been written by the patient or the agent who has obtained the patient's consent. Therefore, the system can be used with a high sense of security.

Note that the handwriting is, for example, stroke order or stroke pressure. Alternatively, the shape of the entire character (vertical, horizontal, trapezoidal, tilted to one side, etc.), the characteristics of the stop, splash, and stroke (length, angle, thickness, degree of faintness) and other characteristics of the character can be used as handwriting. may be recognized.

Then, the image capturing unit 220 captures an image of the patient who is the operator U, or an image of the agent who has obtained the patient's consent (FIG. 5A/STEP 607). The image capturing unit 220 is, for example, a facial photograph of a patient who is manually inputting patient information or who has finished manually inputting patient information, or all or part of the patient's movement from the start to the end of inputting patient information. Take a video of the part.

Subsequently, the storage unit 231 adds an electronic signature and time stamp to the patient information input in STEP 606 and the image captured in STEP 607, and transmits them to the server 10 (FIG. 5A/STEP 608).

This not only guarantees that the patient information has not been tampered with after the patient information was created, but also guarantees that the patient information was entered by the patient or a proxy with the patient's consent. Therefore, the authenticity of patient information can be ensured.

In addition, by adding a time stamp, it is possible to accurately record the date and time when the patient information was recorded, and it is possible to guarantee that the patient information has not been tampered with since that date and time. Therefore, the authenticity of patient information can be ensured more reliably.

The storage unit 231 uses, as a method of attaching an electronic signature, a method of using information contained in an electronic certificate of the patient himself/herself who is the operator U or a representative who has obtained his/her consent. Various methods can be adopted, such as using information contained in a digital certificate.

The storage unit 231 also acquires the time stamp from the time stamp certification authority 410 via the communication network 30, for example.

Then, the server 10 receives the patient information and the information obtained by attaching the electronic signature and time stamp to the image from the operation terminal 20, stores the received information in the patient information database 101 (FIG. 5A/STEP 611), and starts processing. finish.
<Printing/reading process>
When the printing/reading process is started, the printing unit 201 first prints the patient information format (FIG. 5B/STEP 601).

If the operation content input in STEP 200 is "create new", the printing unit 201 responds to the format layout received in STEP 421, and if the operation content input in STEP 200 is "correction". prints the patient information form according to the patient information to be corrected received in STEP 541 and the form layout corresponding to the patient information to be corrected.

In other words, the printing unit 201 prints a form in which the content (content 1 to content n) is not described when the operation content is "new creation", and when the operation content is "correction". prints the form in which the content of the received patient information (content 1 to content n) is printed.

The printing unit 201 also prints identification information such as a barcode or two-dimensional code on the format. The identification information includes information indicating the patient ID and the form ID.

Then, the operator U, who is the patient himself or a representative who has obtained the patient's consent, writes information corresponding to each content in handwriting on the printed form.

Then, the reading unit 211 reads the format of the patient information (FIG. 5B/STEP 702), thereby accepting input from the operator U regarding addition or correction of information to the printed patient information.

At this time, the reading unit 211 reads the entire form as an image and at the same time reads the identification information included in the form to acquire information indicating the patient ID and the form ID included in the identification information.

Then, the operation terminal 20 attaches an electronic signature and a time stamp to the image of the read patient information, and transmits the image to the server 10 (FIG. 5B/STEP 703). At this time, the operation terminal 20 also transmits information indicating the patient ID and the form ID obtained from the identification information included in the form in STEP 702 to the server 10 .

Then, the server 10 receives information obtained by adding an electronic signature and time stamp to the patient information image, the patient ID, and the form ID from the operation terminal 20, and stores the received information in the patient information database 101 (Fig. 5B/STEP 711), the process ends.
<Falsification detection processing>
The detection unit 111 of the server 10 checks whether or not each patient information stored in the patient information database 101 in the server storage unit 100 has been falsified at a predetermined frequency or as needed using the electronic signature and time stamp of each patient information. to detect.

For example, electronic signatures and time stamps of all or part of the patient information stored in the patient information database 101 at a predetermined frequency (every day, every week, every month, etc. The frequency can be changed as appropriate). Stamps are used to detect the presence or absence of tampering.

In this case, when it is detected that the patient information has been falsified, the server 10 displays warning information to that effect on, for example, the display device of the server 10 or the display unit of the operation terminal 20 The notification may be made by displaying it on 202 or by sending an e-mail to the person in charge of managing the server 10 .

As a result, the operator can easily confirm at any time that the patient information has not been tampered with since the date and time when the patient information was recorded, so that the system can be used with peace of mind.

Alternatively, for example, the server 10 performs a process of "extracting the past patient information of the target patient from the patient information database 101 and transmitting a list of patient information of the patient to the operation terminal 20" during the correction process (FIG. 4B/STEP 512). 2, when the past patient information of the target patient is extracted from the patient information database 101, it may be detected whether or not each extracted patient information has been falsified.

In this case, for example, the display control unit 232, in the process of "receiving and displaying a list of past patient information of the target patient" (FIG. 4B/STEP 521), for patient information detected to have been falsified A warning display to that effect may be included in the patient information list and displayed for patient information that has been detected to have not been tampered with.

Although the embodiments of the present invention have been described above, the present invention is not limited thereto.

For example, the detection unit 111 may be configured to detect falsification of patient information using only an electronic signature. Further, the detection unit 111 may be included in the operation terminal 20, and the operation terminal 20 may detect whether or not the patient information has been falsified.

Either one or both of the addition of the electronic signature and the addition of the time stamp may be executed by the server 10 .

Further, in the present embodiment, a configuration has been described in which the imaging unit 10 captures an image of the operator, the storage unit 231 attaches an electronic signature to information including patient information and the captured image, and stores the electronic signature in the server storage unit 100 . However, it is not limited to this, and the imaging unit 10 may be omitted.

In this case, the captured image is not included in the information stored in the server storage unit 100 by the storage unit 231 .

DESCRIPTION OF SYMBOLS 10... Server 20... Operation terminal 100... Server memory|storage part 200... Output part 201... Printing part 202... Display part 210... Input part 211... Reading part 212... Manual input reception part 220... Imaging Section, 231... Storage section, 232... Display control section.

Claims (6)

In a computer system comprising a server and an operating terminal,
The server has a storage means for storing patient information including interview content or consent content for each patient in chronological order,
The operation terminal is
output means for acquiring the past patient information of the patient from the storage means and outputting the acquired patient information;
input means for receiving input of the patient information by an operator;
a storage means for adding an electronic signature to information including the patient information and storing the information in the storage means;
The output means includes printing means for printing the acquired patient information and display means for displaying the acquired patient information,
The input means comprises reading means for reading patient information printed by the printing means and manual input receiving means for receiving manual input by the operator,
The reading means is configured to receive an operator's input relating to addition or correction of information to the patient information printed by the printing means,
wherein the manual input receiving means is configured to receive an operator's input relating to addition or correction of information to the patient information displayed by the display means; system to handle. The system of claim 1, wherein
The system, wherein the storage means is configured to add a time stamp to information including the patient information and store the information in the storage means. 3. The system of claim 2, wherein
A system, comprising detection means for detecting whether or not the patient information has been falsified using the electronic signature and the time stamp. In the system according to any one of claims 1 to 3,
The system, wherein the manual input receiving means is configured to receive input of characters by the operator and recognize handwriting of the received characters as a part of the patient information. A computer system comprising an operation terminal having an input means and an output means, and a server having a storage means for storing, in chronological order, patient information, including the content of an interview or the content of consent for each patient, input from the operation terminal,
obtaining the past patient information of the patient from the storage means;
a step of outputting by printing the acquired patient information;
a step of outputting by displaying the acquired patient information;
a step of accepting an operator's input for adding or correcting information to the printed patient information by reading the printed matter;
a step of receiving an input by the operator regarding addition or correction of information to the displayed patient information by manual input by the operator;
a step of adding an electronic signature to information including the patient information and storing the electronic signature in the storage means;
A program for electronically manipulating patient-related documents characterized by causing the execution of Executed by a computer system comprising an operation terminal having an input means and an output means, and a server having a storage means for storing, in chronological order, patient information, including the content of an interview or the content of consent for each patient, input from the operation terminal a method for
obtaining the past patient information of the patient from the storage means;
a step of outputting by printing the acquired patient information;
a step of outputting by displaying the acquired patient information;
a step of accepting an operator's input for adding or correcting information to the printed patient information by reading the printed matter;
a step of receiving an input by the operator regarding addition or correction of information to the displayed patient information by manual input by the operator;
a step of adding an electronic signature to information including the patient information and storing the electronic signature in the storage means;
A method of electronically handling patient-related documents, comprising:

Images