JP7759917B2 - Medical information management system and management server - Google Patents

Description

The present invention relates to a medical information management system and a management server.

Patent Document 1 discloses an electronic application system related to background art. The system comprises a user terminal, an e-government server, and a management server. Users create and edit application documents or submit electronic applications by operating the user terminal and accessing the management server. Patent Document 1 also discloses that the e-government server includes a server that provides My Number Portal services.

Japanese Patent Application Laid-Open No. 2022-63919

In Patent Document 1, when a My Number card is used as a health insurance card, the management server accesses the My Number Portal server, allowing users to view specific health checkup information, medication information, etc.

However, the information that can be viewed by accessing the My Number Portal server is limited to specific health checkup information or medication information, etc., and is therefore insufficient.

The present invention was developed in light of these circumstances, and aims to provide a medical information management system and management server that can utilize useful medical information.

A medical information management system according to a first aspect of the present invention comprises a mobile device carried by a target patient, an operation terminal operated by a doctor at the medical institution visited by the target patient, and a management server having a processing unit and a memory unit. The mobile device acquires personal identification information from the target patient's My Number card and transmits the acquired personal identification information to the management server. The memory unit stores multiple pieces of medical information indicating the examination results at one or more medical institutions for each of multiple patients, including the target patient, in association with each patient's insured person number. The processing unit acquires from Mynaportal the insured person number corresponding to the personal identification information received from the mobile device and extracts from the memory the medical information associated with the acquired insured person number, thereby creating a database for the target patient and displaying the created database on the screen of the operation terminal.

According to the first aspect, the storage unit of the management server stores multiple pieces of medical information indicating the examination results at one or more medical institutions for each of multiple patients, including the target patient, in association with each patient's insured person number. The processing unit of the management server obtains from My Number Portal the insured person number corresponding to the personal identification information received from the mobile terminal, and extracts from the storage unit the medical information associated with the obtained insured person number, thereby creating a database for the target patient and displaying the created database on the screen of the operation terminal. This allows doctors at the medical institution visited by the target patient to utilize the database for the target patient, which is useful medical information, when examining or treating the target patient.

In the medical information management system according to the second aspect of the present invention, in the first aspect, the mobile terminal further acquires selection information indicating one or more medical institutions to which disclosure of the medical information selected by the target patient from among all medical institutions is permitted, and transmits the acquired selection information to the management server. In creating the database, the processing unit may create the database by selecting, from the medical information extracted from the storage unit, medical information corresponding to the medical institutions to which disclosure is permitted indicated in the selection information received from the mobile terminal.

According to the second aspect, the target patient can select one or more target medical institutions to which they will permit disclosure of their medical information, thereby improving user convenience.

In a medical information management system according to a third aspect of the present invention, in the first or second aspect, the mobile terminal further transmits disclosure consent information entered by the target patient to the management server, and if the disclosure consent information indicates continued consent, the operation terminal transmits designation information specifying the target patient to the management server, and the management server displays, on a screen on the operation terminal, the database related to the target patient indicated by the designation information received from the operation terminal.

According to the third aspect, the target patient can select continuous consent in the disclosure consent information, thereby improving user convenience.

In a fourth aspect of the medical information management system of any one of the first to third aspects of the present invention, the mobile terminal further transmits disclosure consent information entered by the target patient to the management server, and if the disclosure consent information indicates temporary consent, the management server displays an image indicating a random number on the screen of the operation terminal, the mobile terminal captures the image with a camera provided on the mobile terminal and transmits the random number obtained by capturing the image to the management server, and the management server performs authentication using the random number received from the mobile terminal, thereby displaying the database related to the target patient on the screen of the operation terminal.

According to the fourth aspect, the target patient can select temporary consent in the disclosure consent information, thereby improving user convenience. Furthermore, if temporary consent is selected, the management server can easily and reliably authenticate the operating terminal through authentication using an image showing random numbers.

In a medical information management system according to a fifth aspect of the present invention, in any one of the first to fourth aspects, the processing unit, in acquiring the insured person number, acquires from My Number Portal the current insured person number corresponding to the personal identification information received from the mobile terminal and the past insured person number related to the target patient, and, in creating the database, creates the database by extracting from the storage unit medical information associated with the acquired current insured person number and past insured person number.

According to the fifth aspect, even if the insured person number changes due to the head of household changing jobs, etc., it is possible to create a correct database that includes medical information associated with the previous insured person number.

A sixth aspect of the present invention relates to a medical information management system, and in any one of the first to fifth aspects, the storage unit stores the plurality of pieces of medical information in association with each patient's insured person number and personal information; the mobile terminal further acquires card face information from the target patient's My Number card and transmits the acquired card face information to the management server; and in creating the database, if the insured person number acquired from My Number Portal does not include a subnumber, the processing unit creates the database by extracting from the storage unit medical information associated with the insured person number acquired from My Number Portal and the personal information included in the card face information received from the mobile terminal.

According to the sixth aspect, even if the insured person number does not include a subnumber, it is possible to distinguish between individuals within the same household and create a database for each individual.

A management server according to a seventh aspect of the present invention comprises a memory unit and a processing unit, wherein the memory unit stores multiple pieces of medical information indicating examination results at one or more medical institutions for each of multiple patients, including the target patient, in association with each patient's insured person number, and the processing unit receives, from a mobile device carried by the target patient, personal identification information for the target patient obtained from the target patient's My Number card, obtains from Mynaportal the insured person number corresponding to the received personal identification information, and extracts from the memory unit the medical information associated with the obtained insured person number, thereby creating a database for the target patient, and displays the created database on a screen on an operation terminal operated by a doctor at the medical institution visited by the target patient.

According to the seventh aspect, the storage unit of the management server stores multiple pieces of medical information indicating the examination results at one or more medical institutions for each of multiple patients, including the target patient, in association with each patient's insured person number. The processing unit of the management server obtains from My Number Portal the insured person number corresponding to the personal identification information received from the mobile terminal, and extracts from the storage unit the medical information associated with the obtained insured person number, thereby creating a database for the target patient and displaying the created database on the screen of the operation terminal. This allows doctors at the medical institution visited by the target patient to utilize the database for the target patient, which is useful medical information, when examining or treating the target patient.

This invention makes it possible to utilize useful medical information.

1 is a diagram showing, in a simplified form, the overall configuration of a medical information management system according to an embodiment of the present invention. FIG. 2 is a diagram illustrating a simplified configuration of a management server. FIG. 1 is a simplified diagram illustrating an example of a medical information database. FIG. 2 is a diagram showing a simplified configuration of an operation terminal. FIG. 1 is a diagram showing a simplified configuration of a mobile terminal. 10 is a flowchart showing a process executed by a processing unit of a management server. FIG. 10 is a sequence diagram showing a first example of transmission and reception of information between a management server, a minor portal server, an operation terminal, and a mobile terminal. FIG. 10 is a sequence diagram showing a second example of information transmission and reception between a management server, a minor portal server, an operation terminal, and a mobile terminal. FIG. 2 is a simplified diagram showing an example of a screen display on a display unit of a mobile terminal. FIG. 2 is a simplified diagram showing an example of a screen display on a display unit of a mobile terminal. FIG. 2 is a simplified diagram showing an example of a screen display on a display unit of a mobile terminal. FIG. 2 is a simplified diagram showing an example of a screen display on a display unit of a mobile terminal. FIG. 2 is a simplified diagram showing an example of a screen display on a display unit of an operation terminal. FIG. 2 is a simplified diagram showing an example of a screen display on a display unit of an operation terminal.

Embodiments of the present invention will now be described in detail with reference to the accompanying drawings. Note that elements with the same reference numerals in different drawings indicate the same or corresponding elements.

Figure 1 is a simplified diagram showing the overall configuration of a medical information management system 1 according to an embodiment of the present invention. The medical information management system 1 includes a management server 2, a My Number portal server 3, an operation terminal 4, and a mobile terminal 5. The management server 2, My Number portal server 3, operation terminal 4, and mobile terminal 5 are all connected to a communications network 7. The communications network 7 is any dedicated line network such as an IP (Internet Protocol) network or a public line network.

The mobile terminal 5 is a smartphone or the like carried by the target patient 14, who is a user of the medical information management system 1. The target patient 14 can use his or her own My Number card 6 as a health insurance card by registering in advance. The operation terminal 4 is a PC, tablet, or the like operated by a doctor at the medical institution 13 where the target patient 14 is treated. The management server 2 is managed by the management company 11 that operates the medical information management system 1. The My Number portal server 3 is managed by the Digital Agency 12, a government agency that provides My Number portal services. The My Number portal server 3 associates and stores personal identification information and the insured person number on the health insurance card for each registered user. The personal identification information is the My Number stored on the My Number card 6 or an electronic certificate for user authentication. The insured person number includes a symbol that identifies the business establishment, a number that identifies an employee within the business establishment, and a sub-number that identifies an individual within the employee's household.

Figure 2 is a simplified diagram showing the configuration of the management server 2. The management server 2 comprises a processing unit 21, a memory unit 22, and a communication unit 23. The processing unit 21 comprises a processor such as a CPU. The memory unit 22 comprises a storage medium such as an HDD, SSD, or semiconductor memory. The communication unit 23 comprises a communication module compatible with communication standards such as IP, and transmits and receives information such as data or commands to and from other servers or terminals via the communication network 7. The memory unit 22 stores a medical information database 100.

Figure 3 is a simplified diagram showing an example of the medical information database 100. The medical information database 100 stores multiple pieces of medical information 201-204 indicating the examination results at one or more medical institutions for multiple patients, including the target patient 14, in association with each patient's insured person number. Each of the multiple records in the medical information database 100 corresponds to a respective one of the multiple pieces of medical information 201-204. The medical information database 100 has multiple columns corresponding to medical institution IDs, insured person numbers, card information, and medical record information. However, the medical information database 100 may also include other columns corresponding to other information, such as the name of the medical institution or the patient card number. The card information includes the name and date of birth obtained from the My Number card 6. However, the card information may also include other information, such as the address or gender. The medical record information includes various information indicating the examination results of each patient at each medical institution, such as the date of examination, examination results, and prescribed drug information. Each medical institution periodically transmits medical information to the management server 2 via the communication network 7. The management server 2 creates or updates the medical information database 100 based on the received medical information.

Figure 4 is a simplified diagram showing the configuration of the operation terminal 4. The operation terminal 4 includes a processing unit 41, a memory unit 42, a communication unit 43, a display unit 44, and an input unit 45. The processing unit 41 includes a processor such as a CPU. The memory unit 42 includes a storage medium such as an HDD, SSD, or semiconductor memory. The communication unit 43 includes a communication module compatible with communication standards such as IP, and transmits and receives information such as data or commands to and from other servers or terminals via the communication network 7. The display unit 44 includes an LCD display, an organic EL display, or the like. The input unit 45 includes a mouse, keyboard, touch panel, or the like.

Figure 5 is a simplified diagram showing the configuration of the mobile terminal 5. The mobile terminal 5 includes a processing unit 51, a memory unit 52, a communication unit 53, a display unit 54, an input unit 55, a camera 56, and a reading unit 57. The processing unit 51 includes a processor such as a CPU. The memory unit 52 includes a storage medium such as a semiconductor memory. The communication unit 53 includes a communication module compatible with communication standards such as IP, and transmits and receives information such as data or commands to and from other servers or terminals via the communication network 7. The display unit 54 includes a liquid crystal display or an organic EL display. The input unit 55 includes a touch panel. The camera 56 includes a CMOS image sensor and a lens. The reading unit 57 includes an NFC (Near Field Communication) reader.

Figure 6 is a flowchart showing the processing executed by the processing unit 21 of the management server 2. Figure 7 is a sequence diagram showing a first example of information transmission and reception between the management server 2, the minor portal server 3, the operation terminal 4, and the mobile terminal 5. Figure 8 is a sequence diagram showing a second example of information transmission and reception between the management server 2, the minor portal server 3, the operation terminal 4, and the mobile terminal 5. Figures 9 to 12 are simplified diagrams showing examples of screen displays on the display unit 54 of the mobile terminal 5. Figures 13 and 14 are simplified diagrams showing examples of screen displays on the display unit 44 of the operation terminal 4.

First, the target patient 14 consents to the medical information disclosure service using the medical information management system 1 by accessing the management server 2 from their mobile terminal 5 at the medical institution 13 where they will be treated, or at home or elsewhere before their visit.

When the target patient 14 accesses the management server 2 from the mobile terminal 5, the processing unit 21 causes the display unit 54 to display a message inquiring whether or not the target patient 14 consents to the disclosure of their medical information, as shown in FIG. 9. When the target patient 14 inputs their consent by tapping a checkbox or the like, the processing unit 21 then causes the display unit 54 to display a message instructing the target patient 14 to read their My Number card 6 using the mobile terminal 5, as shown in FIG. 10. When the target patient 14 reads their My Number card 6 using the mobile terminal 5, the reading unit 57 reads the target patient's 14 personal identification information from their My Number card 6. The communication unit 53 transmits data S1 indicating the target patient's 14 personal identification information to the management server 2 via the communication network 7.

In step SP01, the processing unit 21 receives the personal identification information of the target patient 14 indicated in the data S1 transmitted from the mobile terminal 5 via the communication unit 23.

Next, the processing unit 21 uses the API (Application Programming Interface) function to send a signal S2 requesting the insured person number corresponding to the target patient's 14 personal identification information from the communication unit 23 to the My Number Portal server 3 via the communication network 7.

In response to signal S2, the My Number portal server 3 transmits data S3 indicating the insured person number corresponding to the personal identification information of the target patient 14 to the management server 2 via the communication network 7.

In step SP02, the processing unit 21 acquires the insured person number of the target patient 14 indicated in data S3 transmitted from the My Number portal server 3 via the communication unit 23. The processing unit 21 extracts all medical information associated with the insured person number of the target patient 14 from the medical information database 100 stored in the memory unit 22.

Next, the processing unit 21 sends data S4 from the communication unit 23 to the mobile terminal 5, causing the display unit 54 to display a message prompting the user to select medical institutions to which the user is permitted to disclose medical information (hereinafter referred to as "disclosure target medical institutions"), as shown in FIG. 11.

When the target patient 14 selects a medical institution to which disclosure is to be made by, for example, tapping a checkbox, the processing unit 21 then displays on the display unit 54 a message to confirm the selection of the medical institution to which disclosure is to be made, and a message to select whether the current consent to disclosure is continuous or temporary, as shown in FIG. 12. If the target patient 14 wishes to permit the disclosure of their medical information only during their current consultation at the medical institution 13 they are currently being treated at, they select temporary consent. On the other hand, if the target patient 14 wishes to permit the disclosure of their medical information during consultations at other medical institutions as well, they select continuous consent.

The communication unit 53 transmits selection information S5 indicating the medical institution to which disclosure is to be made, and disclosure consent information S6A indicating continued consent or disclosure consent information S6B indicating temporary consent to the management server 2 via the communication network 7.

In step SP03, the processing unit 21 receives the selection information S5 and the disclosure consent information S6A or disclosure consent information S6B transmitted from the mobile terminal 5 via the communication unit 23.

Next, in step SP04, the processing unit 21 creates a personal database 101 for the target patient 14 by selecting, from all the medical information extracted from the memory unit 22 in step SP02, the medical information corresponding to the medical institution to be disclosed, as indicated in the selection information S5 received from the mobile terminal 5.

Next, in step SP05, the processing unit 21 determines whether the disclosure consent information received in step SP03 is disclosure consent information S6A indicating continuous consent or disclosure consent information S6B indicating temporary consent.

If the disclosure consent information received in step SP03 is disclosure consent information S6A (step SP05: YES), then in step SP06, the processing unit 21 assigns a predetermined flag indicating that continuous consent has been given to the personal database 101 created in step SP04, and terminates processing.

A doctor at the medical institution 13 can request medical information about a target patient 14 who has selected continued consent by accessing the management server 2 from the operation terminal 4. The operation terminal 4 transmits designation information S7 specifying the target patient 14 for whom medical information is requested to the management server 2 via the communication network 7. The designation information S7 may include the insured person number of the target patient 14. The processing unit 21 transmits data S8 from the communication unit 23 to the operation terminal 4, causing the display unit 44 to display the personal database 101 for the target patient 14 indicated in the designation information S7 on its screen.

The personal database 101 illustrated in Figure 13 includes a list of medical information corresponding to medical institutions to which information is to be disclosed. The medical information includes the medical institution ID and medical record information. However, the medical information may also include other information such as the name of the medical institution or the patient card number. Also displayed on the personal database 101 are the name and date of birth of the target patient 14 obtained from the information on the face of the My Number card 6, and the insured person number of the target patient 14 obtained from the My Number portal server 3.

If the disclosure consent information received in step SP03 is disclosure consent information S6B (step SP05: NO), the processing unit 21 sends data S11 from the communication unit 23 to the operation terminal 4, thereby causing the display unit 44 to display an image of a QR code (registered trademark) indicating a random number such as a one-time password, and a message instructing the mobile terminal 5 to capture the image, as shown in FIG. 14.

The target patient 14 takes an image of the QR code (registered trademark) using the camera 56 of the mobile terminal 5. The mobile terminal 5 transmits data S12 indicating the random number obtained by taking the image of the QR code (registered trademark) to the management server 2 via the communication network 7.

In step SP08, the processing unit 21 acquires data S12 indicating the random number transmitted from the mobile terminal 5 via the communication unit 23.

Next, in step SP09, the processing unit 21 authenticates the operating terminal 4 by comparing the random number sent to the operating terminal 4 with the random number received from the mobile terminal 5.

If the two random numbers match and authentication of the operation terminal 4 is successful (step SP09: YES), the processing unit 21 sends data S13 from the communication unit 23 to the operation terminal 4, thereby causing the personal database 101 for the target patient 14 indicated in the specification information S7 to be displayed on the display unit 44.

If the two random numbers do not match and authentication of the operating terminal 4 fails (step SP09: NO), the processing unit 21 displays an error message on the display unit 44 and then terminates the processing.

According to this embodiment, the storage unit 22 of the management server 2 stores multiple pieces of medical information 201-204 indicating the examination results at one or more medical institutions for each of multiple patients, including the target patient 14, in association with each patient's insured person number. The processing unit 21 of the management server 2 acquires, from the My Number Portal server 3, the insured person number corresponding to the personal identification information received from the mobile terminal 5. The processing unit 21 also creates a personal database 101 for the target patient 14 by extracting from the storage unit 22 the medical information associated with the acquired insured person number, and displays the created personal database 101 on the screen of the operation terminal 4. As a result, a doctor at the medical institution 13 where the target patient 14 is examined can utilize the personal database 101 for the target patient 14, which is useful medical information, when examining or treating the target patient 14.

Furthermore, according to this embodiment, the target patient 14 can select one or more target medical institutions to which he or she will permit disclosure of his or her medical information using the selection information S5, thereby improving user convenience.

Furthermore, according to this embodiment, the target patient 14 can select continued consent using the disclosure consent information S6A, thereby improving user convenience.

Furthermore, according to this embodiment, the target patient 14 can select temporary consent using the disclosure consent information S6B, thereby improving user convenience. Furthermore, if temporary consent is selected, the management server 2 can easily and reliably authenticate the operation terminal 4 through authentication using an image of a QR code (registered trademark) that indicates a random number.

<First Modification>
The My Number Portal Server 3 stores, for each registered user, personal identification information, a current insured person number, and a past insured person number in association with each other.

In step SP02, the processing unit 21 acquires from the My Number Portal server 3 the current insured number and past insured number of the target patient 14 associated with the personal identification information received from the mobile terminal 5. The processing unit 21 also extracts all medical information associated with the acquired current insured number and past insured number from the medical information database 100 stored in the memory unit 22.

In step SP04, the processing unit 21 creates a personal database 101 for the target patient 14 by selecting, from all the medical information extracted from the memory unit 22 in step SP02, the medical information corresponding to the medical institution to be disclosed, as indicated in the selection information S5 received from the mobile terminal 5.

According to this modified example, even if the insured person number changes due to the head of household changing jobs, etc., it is possible to create a correct personal database 101 that includes medical information associated with the previous insured person number.

<Second Modification>
As shown in FIG. 3, the medical information database 100 stored in the storage unit 22 stores a plurality of pieces of medical information in association with each patient's insured person number and personal information included in the card information.

The mobile terminal 5 acquires the personal identification information and face information from the My Number card 6 of the target patient 14, and transmits data S1 indicating the acquired personal identification information and face information to the management server 2. In step SP01, the processing unit 21 receives the personal identification information and face information of the target patient 14 indicated in data S1 transmitted from the mobile terminal 5 via the communication unit 23.

In step SP02, if the insured person number acquired from the My Number Portal Server 3 does not include a sub-number (for example, Tanaka Ichiro in Figure 3), the processing unit 21 extracts all medical information associated with the insured person number acquired from the My Number Portal Server 3 and the personal information included in the card information received from the mobile terminal 5 from the medical information database 100 stored in the memory unit 22.

In step SP04, the processing unit 21 creates a personal database 101 for the target patient 14 by selecting, from all the medical information extracted from the memory unit 22 in step SP02, the medical information corresponding to the medical institution to be disclosed, as indicated in the selection information S5 received from the mobile terminal 5.

According to this modified example, even if the insured person number does not include a subnumber, it is possible to distinguish between individuals within the same household and create a personal database 101 for each individual.

REFERENCE SIGNS LIST 1 Medical information management system 2 Management server 3 My Number portal server 4 Operation terminal 5 Mobile terminal 6 My Number card 13 Medical institution 14 Target patient 21 Processing unit 22 Storage unit 100 Medical information database 101 Personal database

Claims (7)

A mobile device carried by the target patient;
an operation terminal operated by a doctor at the medical institution where the target patient is examined;
a management server having a processing unit and a storage unit;
Equipped with
The mobile terminal
Obtain personal identification information from the target patient's My Number card,
Transmitting the acquired personal identification information to the management server;
the storage unit stores a plurality of pieces of medical information indicating examination results at one or a plurality of medical institutions for each of a plurality of patients including the target patient, in association with the insured person number of each patient;
The processing unit
obtaining an insured person number corresponding to the individual identification information received from the mobile terminal from My Number Portal;
creating a database of target patients by extracting medical information associated with the acquired insured person number from the storage unit;
Displaying the created database on the screen of the operation terminal.
Medical information management system. The mobile terminal further
Acquire selection information indicating one or more medical institutions to which disclosure of medical information selected by the target patient is permitted from among all medical institutions;
Sending the acquired selection information to the management server;
the processing unit, in creating the database, selects, from the medical information extracted from the storage unit, medical information corresponding to the medical institution to which the information is to be disclosed, which is indicated by the selection information received from the mobile terminal, thereby creating the database;
The medical information management system according to claim 1 . The mobile terminal further transmits the disclosure consent information input by the subject patient to the management server,
If the disclosure consent information indicates continuing consent,
The operation terminal transmits designation information for designating a target patient to the management server;
the management server causes the operation terminal to display, on a screen, the database relating to the target patient indicated by the designation information received from the operation terminal;
The medical information management system according to claim 1 . The mobile terminal further transmits the disclosure consent information input by the subject patient to the management server,
If the disclosure consent information indicates temporary consent,
the management server causes the operation terminal to display an image showing a random number on its screen;
the mobile terminal transmits a random number acquired by capturing the image with a camera provided in the mobile terminal to the management server;
the management server performs authentication using the random number received from the mobile terminal, and causes the database relating to the target patient to be displayed on the screen of the operation terminal;
The medical information management system according to claim 1 . The processing unit
In acquiring the insured person number, a current insured person number corresponding to the individual identification information received from the mobile terminal and a past insured person number related to the target patient are acquired from My Number Portal;
In creating the database, medical information associated with the acquired current insured person number and past insured person number is extracted from the storage unit to create the database.
The medical information management system according to claim 1 . the storage unit stores the plurality of pieces of medical information in association with the insured person number and personal information of each patient;
The mobile terminal further comprises:
Obtain card information from the target patient's My Number card,
Sending the acquired card face information to the management server;
When creating the database, if the insured person number acquired from MynaPortal does not include a branch number, the processing unit creates the database by extracting from the storage unit medical information associated with the insured person number acquired from MynaPortal and the personal information included in the card information received from the mobile terminal.
The medical information management system according to claim 1 . A storage unit and a processing unit are provided,
the storage unit stores a plurality of pieces of medical information indicating examination results at one or a plurality of medical institutions for each of a plurality of patients including the target patient, in association with the insured person number of each patient;
The processing unit
The personal identification information of the target patient obtained from the target patient's My Number card is received from a mobile device carried by the target patient,
The insured person number corresponding to the received personal identification information is obtained from My Number Portal,
creating a database of target patients by extracting medical information associated with the acquired insured person number from the storage unit;
The created database is displayed on a terminal operated by a doctor at the medical institution where the target patient is examined.
Management server.