Medical system

Abstract

The present disclosure relates to a medical system. A medical system has a medical device for generating a medical image and a network device capable of communicating with the medical device. The network device generates identification information corresponding to the examination information, stores the examination information in a first storage area of a storage unit in association with the identification information, and transmits the identification information to the medical device. The medical device receives the identification information transmitted by the network device, and transmits the identification information and the generated medical image to the network device in an associated manner. The network device receives the identification information and the medical image transmitted in association with the medical device, and stores the examination information stored in the first storage area in a second storage area of the storage unit in association with the medical image.

Description

[0001] This application is a divisional application of an application with an application date of March 25, 2019, application number 201980063243.0 (PCT / JP2019 / 012470), and invention name “Medical system, network device, medical device, and examination information processing method”. Technical Field

[0002] The present invention relates to a medical system having a medical device and a network device, the medical device, the network device, and an examination information processing method executed in the medical system. Background Art

[0003] Conventional endoscope systems have a function of storing PHI (Protected Health Information) information in medical devices such as video processors in the system, and store images captured during the examination in association with patient information in the medical device and transmit them to network devices such as servers. Here, PHI information refers to medical information that should be protected as stipulated by HIPAA (Health Insurance Portability and Accountability Act), and patient information is an example of PHI information.

[0004] In recent years, laws and regulations require the protection of PHI information from external cyber attacks, such as data encryption, communication encryption, etc. In addition, when vulnerabilities in the OS (Operating System) or encryption methods are discovered, prompt response is required.

[0005] However, it is not easy to update medical devices, and it is difficult to respond to laws and regulations quickly. This is because, unlike consumer products, medical devices are subject to the following factors: performance tests are required to confirm that the update will not affect the operation of the medical device, and the person who can update the medical device is limited to specific trained personnel.

[0006] As a medical device for preventing leakage of personal information, for example, a medical image diagnosis device disclosed in Patent Document 1 is known. The device includes: an input unit for inputting personal information of a subject to be examined; a communication unit for communicating with a personal information management server that stores the personal information input from the input unit; a determination unit for determining whether the personal information can be sent to the personal information management server; and an examination information storage unit for storing information of the examination result, wherein the communication unit sends the personal information input from the input unit to the personal information management server based on the determination result of the determination unit, receives personal identification information for uncertainly identifying the personal information replied from the personal information management server in response to the sending, and the examination information storage unit stores the personal identification information received by the communication unit in the examination information storage unit.

[0007] Prior art literature

[0008] Patent Literature

[0009] Patent Document 1: Japanese Patent Application Publication No. 2011-150699 Summary of the invention

[0010] Problem that the invention aims to solve

[0011] In view of the above-mentioned actual situation, the present invention aims to provide a medical system, a network device, a medical device, and a method for processing examination information that can quickly respond to network security requirements while maintaining the conventional usability.

[0012] Solutions for solving problems

[0013] The first embodiment of the present invention is a medical system having a medical device for generating a medical image and a network device capable of communicating with the medical device, wherein the medical system is characterized in that the network device comprises: an identification information generating unit, which generates identification information corresponding to examination information; an association unit, which associates the identification information or the medical image with the examination information; a storage unit, which has a first storage area and a second storage area; and a first communication unit, which communicates with the medical device, wherein the medical device comprises: a second communication unit, which communicates with the network device; and an image generating unit, which generates the medical image, wherein the association unit stores the examination information in the first storage area in association with the identification information, the first communication unit sends the identification information to the medical device, the second communication unit receives the identification information sent by the first communication unit, and sends the identification information and the medical image to the network device in an associated manner, the first communication unit receives the identification information and the medical image sent by the second communication unit in an associated manner, and the association unit stores the examination information stored in the first storage area in association with the medical image in the second storage area.

[0014] The second mode of the present invention is characterized in that, in the first mode, the network device further includes an encryption unit, which encrypts the patient information and the identification information contained in the examination information, and the first communication unit sends the encrypted patient information and the identification information to the medical device, the medical device is an endoscope device connected to an endoscope, and the medical device further includes a display control unit, which causes the display device to display a display image containing the medical image and the patient information.

[0015] The third mode of the present invention is characterized in that, in the second mode, the second communication unit receives the encrypted patient information and the identification information sent by the first communication unit, and the medical device also has a decryption unit, which decrypts the encrypted patient information and the identification information.

[0016] The fourth mode of the present invention is characterized in that, in the second mode, the medical system also has a decryption device, which receives the encrypted patient information and the identification information sent by the first communication unit, decrypts the encrypted patient information and the identification information and sends the patient information and the identification information to the medical device, and the second communication unit receives the patient information and the identification information sent by the decryption device.

[0017] A fifth aspect of the present invention is characterized in that, in the second aspect, the medical device further includes a storage setting unit capable of setting whether to store the patient information in a storage area inside the device.

[0018] A sixth aspect of the present invention is characterized in that, in the fifth aspect, the medical device deletes the patient information from a storage area within the device after the examination using the endoscope is completed.

[0019] The seventh mode of the present invention is characterized in that, in the sixth mode, the network device is connected to the plurality of medical devices in a communicative manner to obtain setting contents in the storage setting units of the respective medical devices, and in a case where the setting contents in the plurality of medical devices are a mixture of setting contents for storing the patient information within the device and setting contents for not storing the patient information within the device, the user is informed.

[0020] The eighth aspect of the present invention is characterized in that, in the first aspect, the association unit further stores the associated examination information and the medical image in an external storage device connected to the network device.

[0021] The ninth aspect of the present invention is a medical system having a medical device for generating a medical image and a server capable of communicating with the medical device, wherein the medical system is characterized in that the server comprises: an identification information generating unit, which generates identification information corresponding to examination information; a storage unit, which stores the examination information in association with the identification information; and a first communication unit, which communicates with the medical device, wherein the medical device comprises: a second communication unit, which communicates with the server; and an image generating unit, which generates the medical image, wherein the first communication unit sends the identification information to the medical device, the second communication unit receives the identification information sent by the first communication unit, and sends the identification information and the medical image to the server in an associated manner, and the first communication unit receives the identification information and the medical image sent by the second communication unit in an associated manner.

[0022] A tenth aspect of the present invention is characterized in that, in the ninth aspect, the storage unit further stores the inspection information in association with the medical image.

[0023] The eleventh aspect of the present invention is characterized in that, in the tenth aspect, the storage unit further stores the medical image and the identification information.

[0024] The 12th embodiment of the present invention is a network device capable of communicating with a medical device for generating a medical image, wherein the network device is characterized in that it comprises: an identification information generating unit, which generates identification information corresponding to examination information; an association unit, which associates the identification information or the medical image with the examination information; a storage unit, which has a first storage area and a second storage area; and a communication unit, which communicates with the medical device, wherein the association unit stores the examination information and the identification information in the first storage area in association with each other, the communication unit sends the identification information to the medical device, the communication unit receives the identification information and the medical image sent by the medical device in an associated manner, and the association unit stores the examination information stored in the first storage area in association with the medical image in the second storage area.

[0025] The 13th embodiment of the present invention is a medical device for generating medical images, characterized in that it comprises: a communication unit that communicates with a network device; and an image generating unit that generates the medical image, wherein the communication unit receives identification information corresponding to the examination information sent by the network device, and sends the identification information and the medical image to the network device in an associated manner.

[0026] The 14th embodiment of the present invention is an inspection information processing method, which is an inspection information processing method performed in a medical system, wherein the medical system has a medical device for generating medical images and a network device capable of communicating with the medical device, and the inspection information processing method is characterized in that the network device generates identification information corresponding to the inspection information, the network device stores the inspection information and the identification information in a first storage area of ​​a storage unit in association with each other, the network device sends the identification information to the medical device, the medical device receives the identification information sent by the network device and sends the identification information and the generated medical image to the network device in an associated manner, the network device receives the identification information and the medical image sent by the medical device in an associated manner, and the network device stores the inspection information stored in the first storage area in an associated manner with the medical image in a second storage area of ​​the storage unit.

[0027] Effects of the Invention

[0028] According to the present invention, there is an effect of being able to promptly respond to the demand for network security while maintaining conventional usability. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 It is a diagram showing a configuration example of the medical system according to the first embodiment.

[0030] Figure 2 This is an example of the monitor output image displayed on the monitor.

[0031] Figure 3 This is a diagram showing an example of the hardware configuration.

[0032] Figure 4 This is a flowchart showing an example of the process of the processing executed in the server related to the functions involved in the second embodiment.

[0033] Figure 5 This is a flowchart showing an example of the process of the processing executed in the server, which is a process for setting the processing content when the settings in the security setting management unit are different among multiple video processors.

[0034] Figure 6 This is a diagram showing an example of the structure of the medical system according to the modified example of the first embodiment. Detailed Embodiments

[0035] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

[0036] <First Embodiment>

[0037] Figure 1 This is a diagram showing an example of the structure of the medical system according to the first embodiment.

[0038] As Figure 1 shown, the medical system 1 includes a video processor 5 and a server 6. Among them, the video processor 5 is connected to an endoscope (also referred to as an "observer") 2, a monitor 3, and peripheral devices 4. The video processor 5 and the server 6 are connected to a network such as a LAN (Local Area Network). The network is a network composed of one or both of wired and wireless.

[0039] The endoscope 2 includes an imaging unit 21 and an operation unit 22.

[0040] The imaging unit 21 includes an imaging element such as a CCD (Charge Coupled Device). The imaging unit 21 images the inside of the subject to be imaged as the subject using the imaging element, and outputs an image signal corresponding to the subject.

[0041] The operation unit 22 includes a release button for giving a release instruction. For example, a release instruction signal is output in response to the release button being pressed. The release instruction signal is also a recording instruction signal. In the present embodiment, the release instruction signal is set as a recording instruction signal for a still image.

[0042] The video processor 5 is an example of a medical device for observing a subject and also an example of an endoscope device. The video processor 5 includes an image quality adjustment unit 51, a security setting management unit 52, a monitor output image generation unit 53, an image recording / transmission processing unit 54, a storage unit 55, a communication unit 56, and a decryption unit 57.

[0043] The image quality adjustment unit 51 performs image quality adjustment processing on the image signal input from the endoscope 2 , and outputs the image signal after the image quality adjustment processing.

[0044] The security setting management unit 52 sets the monitor output image generation unit 53 whether to display the patient information on the monitor 3. In addition, the security setting management unit 52 sets the image recording / transmission processing unit 54 whether to record / transmit the patient information. These settings are made based on the user's input operation on the operation panel (not shown) of the video processor 5. That is, the user can freely set whether to display the patient information on the monitor 3 and whether to record / transmit the patient information. In addition, the security setting management unit 52 is an example of a storage setting unit that can set whether to store the patient information in the storage area inside the medical device.

[0045] Furthermore, when a release instruction signal is input from the endoscope 2 , the security setting management unit 52 outputs release instruction information indicating that a release instruction has been issued to the monitor output image generation unit 53 and the image recording / transmission processing unit 54 .

[0046] The monitor output image generation unit 53 generates a monitor output image as follows based on the settings made by the security setting management unit 52 and the presence or absence of input of release instruction information, and outputs a video signal representing the generated monitor output image to the monitor 3 and the image recording / transmission processing unit 54 .

[0047] When the release instruction information is inputted when the setting not to display the patient information (hereinafter also referred to as "patient information non-display setting") is made, the monitor output image generating unit 53 generates a monitor output image not including the patient information based on the image signal inputted from the image quality adjusting unit 51, and outputs the image signal representing the monitor output image to the monitor 3 and the image recording / transmission processing unit 54. In addition, in the generation of the monitor output image not including the patient information, the character information other than the patient information is superimposed on the endoscopic image represented by the image signal, etc. Thus, when the release button is pressed when the patient information non-display setting is made, the image signal not including the patient information is outputted.

[0048] On the other hand, when the patient information non-display setting is performed and the release instruction information is not input, or when the setting to display the patient information (hereinafter also referred to as "patient information display setting") is performed, the monitor output image generation unit 53 generates a monitor output image containing the patient information based on the image signal input from the image quality adjustment unit 51 and the patient information input from the decryption unit 57, and outputs the image signal representing the monitor output image to the monitor 3 and the image recording / transmission processing unit 54. In addition, in the generation of the monitor output image containing the patient information, the character information containing the patient information is superimposed on the endoscopic image represented by the image signal. Thus, when the patient information non-display setting is performed and the release button is not pressed, or when the patient information display setting is performed, the image signal containing the patient information is output.

[0049] In addition, the monitor output image is an example of a medical image related to the subject, and the monitor output image generation unit 53 is an example of a display control unit that causes the display device to display a display image including the medical image and patient information.

[0050] When release instruction information is input, the image recording / transmission processing unit 54 performs the following processing: according to the setting made by the security setting management unit 52, the unique ID (identifier) ​​or patient information is recorded in the storage unit 55 in association with the monitor output image and transmitted to the server 6 as follows.

[0051] When the release instruction information is inputted when the setting not to record / transmit the patient information (hereinafter also referred to as "safe mode setting") is made, the image recording / transmission processing unit 54 performs the following processing: the unique ID inputted from the decryption unit 57 is recorded in the storage unit 55 in association with the monitor output image represented by the video signal inputted from the monitor output image generating unit 53, and the processing is transmitted to the server 6. Thus, when the release button is pressed when the safe mode setting is made, the unique ID is recorded in association with the monitor output image in the storage unit 55, and the processing is transmitted to the server 6.

[0052] On the other hand, when the release instruction information is inputted while the setting for recording / transmitting the patient information is made, the image recording / transmitting processing unit 54 performs the following processing: the patient information inputted from the decryption unit 57 is recorded in the storage unit 55 in association with the monitor output image represented by the video signal inputted from the monitor output image generating unit 53, and the processing is transmitted to the server 6. Thus, when the release button is pressed while the setting for recording / transmitting the patient information is made, the patient information is recorded in the storage unit 55 in association with the monitor output image, and the processing is transmitted to the server 6.

[0053] The storage unit 55 is a nonvolatile storage device, such as a hard disk device, and records the associated monitor output image and unique ID, or the monitor output image and patient information.

[0054] The communication unit 56 is a communication interface for communicating with an external device such as the server 6. The communication unit 56 transmits, for example, the monitor output image and the unique ID, or the monitor output image and the patient information transmitted in an associated manner by the image recording / transmission processing unit 54 to the server 6. In addition, the communication unit 56 receives, for example, the encrypted unique ID and patient ID transmitted from the server 6.

[0055] The decryption unit 57 decrypts the encrypted unique ID and patient ID received by the communication unit 56 and outputs the unique ID and patient information to the image recording / transmission processing unit 54 , and outputs the patient information to the monitor output image generation unit 53 and the peripheral device 4 .

[0056] The monitor 3 is an example of a display device, such as an LCD (Liquid Crystal Display) and displays a monitor output image represented by a video signal input from the monitor output image generating unit 53 .

[0057] The peripheral device 4 is, for example, a printing device for printing the patient information output by the decryption unit 57 .

[0058] The server 6 is an example of a network device capable of communicating with the medical device and includes a command management unit 61 , a unique ID generation unit 62 , an encryption unit 63 , a communication unit 64 , a test information association unit 65 , a storage unit 66 , and an IF (interface) 67 .

[0059] The order management unit 61 stores the examination order information and manages the examination order information in one dimension. The examination order information includes examination information. The examination information includes patient information and information related to the examination date, examination category, etc. The patient information includes information related to the patient ID, the patient's name, etc. For example, in response to the user's input operation to the server 6, the order management unit 61 outputs the examination information included in the examination order information related to the endoscopic examination to be performed next to the unique ID generation unit 62, and outputs the patient information included in the examination information to the encryption unit 63.

[0060] The unique ID generating unit 62 generates a unique ID corresponding to the inspection information output by the command management unit 61. In addition, the unique ID is also identification information of the inspection information. In addition, the unique ID generating unit 62 outputs the generated unique ID and the inspection information to the inspection information association unit 65, and outputs the generated unique ID to the encryption unit 63.

[0061] The encryption unit 63 encrypts the patient information output by the order management unit 61 and the unique ID output by the unique ID generation unit 62 .

[0062] The communication unit 64 is a communication interface for communicating with an external device such as the video processor 5. The communication unit 64 transmits, for example, the patient information and the unique ID encrypted by the encryption unit 63 to the video processor 5. In addition, the communication unit 64 receives, for example, the monitor output image and the unique ID, or the monitor output image and the patient information transmitted by the video processor 5 in an associated manner.

[0063] The examination information associating unit 65 associates the unique ID output by the unique ID generating unit 62 with the examination information and stores it in the first storage area 66a of the storage unit 66. In addition, the examination information associating unit 65 reads the examination information corresponding to the unique ID or patient information associated with the monitor output image received by the communication unit 64 from the first storage area 66a of the storage unit 66, and stores the read examination information in the second storage area 66b in association with the monitor output image. In addition, the examination information associating unit 65 can also output the associated examination information and monitor output image to the IF 67, and store them in an external storage device such as an EMR (Electronic Medical Record) connected to the IF 67.

[0064] The storage unit 66 is a nonvolatile storage device such as a hard disk device. As described above, the storage unit 66 includes a first storage area 66a for storing the unique ID and the examination information in association with each other, and a second storage area 66b for storing the examination information and the monitor output image in association with each other.

[0065] The IF 67 is a connection interface for connecting to an external storage device such as an EMR.

[0066] Next, the processing executed in the medical system 1 will be described.

[0067] In the medical system 1, for example, in response to a user input operation to the video processor 5, the security setting management unit 52 sets the monitor output image generation unit 53 whether to display patient information on the monitor 3, and sets the image recording / transmission processing unit 54 whether to record / transmit patient information.

[0068] In addition, in the medical system 1, for example, when the order management unit 61 outputs the inspection information contained in the inspection order information related to the endoscopic inspection to be performed next to the inherent ID generation unit 62 in response to the user's input operation to the server 6, and outputs the patient information contained in the inspection information to the encryption unit 63, the following processing is performed.

[0069] When acquiring the inspection information output from the command management unit 61 , the unique ID generation unit 62 generates a unique ID corresponding to the inspection information, outputs the unique ID and the inspection information to the inspection information association unit 65 , and outputs the unique ID to the encryption unit 63 .

[0070] When acquiring the unique ID and the inspection information output by the unique ID generating unit 62 , the inspection information associating unit 65 associates the unique ID and the inspection information with each other and stores them in the first storage area 66 a of the storage unit 66 .

[0071] The encryption unit 63 encrypts the patient information and the unique ID when acquiring the patient information output by the order management unit 61 and the unique ID output by the unique ID generation unit 62. Then, the communication unit 64 transmits the encrypted patient information and the unique ID to the video processor 5.

[0072] In the video processor 5, when the communication unit 56 receives the encrypted patient information and the unique ID sent by the server 6, the decryption unit 57 decrypts the encrypted patient information and the unique ID and outputs the patient information and the unique ID to the image recording / transmission processing unit 54, and outputs the patient information to the monitor output image generation unit 53 and the peripheral device 4. For example, the printing device as the peripheral device 4 prints the patient information output by the decryption unit 57.

[0073] After that, when the endoscope inspection related to the inspection information outputted from the command management unit 61 is started, the following processing is started in the video processor 5: the image quality adjustment unit 51 performs image quality adjustment processing on the video signal inputted from the endoscope 2 and outputs the image to the monitor output image generation unit 53. In addition, when a release instruction signal is inputted from the endoscope 2, the security setting management unit 52 outputs the release instruction information to the monitor output image generation unit 53 and the image recording / transmission processing unit 54.

[0074] The monitor output image generation unit 53 generates a monitor output image as described above based on the settings made by the security setting management unit 52 and the presence or absence of input of release instruction information, and outputs a video signal representing the generated monitor output image to the monitor 3 and the image recording / transmission processing unit 54 .

[0075] The monitor 3 displays a monitor output image represented by a video signal input from the monitor output image generating unit 53 .

[0076] Figure 2 It is a diagram showing an example of a monitor output image displayed on the monitor 3 .

[0077] exist Figure 2In the figure, the monitor output image 31 shown on the left is a monitor output image displayed on the monitor 3 when the setting in the monitor output image generating unit 53 is the patient information display setting, or when the setting in the monitor output image generating unit 53 is the patient information non-display setting and the release button is not pressed. It is a monitor output image containing patient information.

[0078] On the other hand, the monitor output image 32 shown on the right is a monitor output image displayed on the monitor 3 when the release button is pressed when the setting in the monitor output image generating unit 53 is the patient information non-display setting, and is a monitor output image that does not include patient information.

[0079] When the release instruction information is input, the image recording / transmission processing unit 54 performs the following processing: according to the setting made by the security setting management unit 52, the unique ID or patient information is recorded in the storage unit 55 in association with the monitor output image as described above, and transmitted to the server 6. The transmission to the server 6 is performed by the transmission to the server 6 by the communication unit 56.

[0080] In the server 6, when the communication unit 64 receives the associated unique ID and monitor output image or the patient information and monitor output image sent by the video processor 5, the examination information associating unit 65 reads the examination information corresponding to the unique ID or patient information associated with the monitor output image from the first storage area 66a of the storage unit 66, and stores the read examination information in the second storage area 66b in association with the monitor output image. In addition, the examination information associating unit 65 may output the associated examination information and monitor output image to the IF 67, and store them in an external storage device such as an EMR connected to the IF 67.

[0081] Then, when the power switch of the video processor 5 is turned off after the endoscopic examination is completed, the video processor 5 deletes all the patient information stored in the storage area inside the device such as the storage unit 55.

[0082] As described above, according to the present embodiment, the patient information can be not recorded in the video processor by setting the monitor output image generation unit 53 not to display the patient information in advance and setting the image recording / transmission processing unit 54 to a safe mode. In addition, the monitor output image generated in the video processor 5 can be associated with the examination information including the patient information in the server 6 using a unique ID that is not the PHI information.

[0083] In this case, the video processor 5 does not store patient information as PHI information, and does not hold data that should be protected from network attacks, thereby reducing the requirements for network security. On the other hand, since patient information and the like are recorded in the server 6, although the requirements for network security must be met, the server 6 can be updated more easily than the video processor 5 as a medical device, so it can be quickly dealt with.

[0084] In addition, according to the present embodiment, the monitor output image generation unit 53 is set to display patient information in advance, and the image recording / transmission processing unit 54 is set to record / transmit patient information, thereby, the patient information can be displayed, recorded / transmitted as before, so that the conventional convenience of use can be maintained. In addition, the patient information can be output to the peripheral device 4 as before.

[0085] In addition, various modifications are possible in this embodiment.

[0086] For example, the following configuration may be adopted: in the monitor output image generating unit 53, when the patient information non-display setting is made, a monitor output image without patient information is always generated regardless of whether the release instruction information is input, and an image signal representing the monitor output image is output to the monitor 3 and the image recording / transmission processing unit 54. Thus, when the patient information non-display setting is made, an image signal without patient information can be always output.

[0087] In addition, for example, the following configuration may be adopted: in the monitor output image generating unit 53, when the patient information non-display setting is made, a monitor output image not including the patient information is generated only during the period from when the endoscope examination is instructed to start until when the endoscope examination is instructed, and an image signal representing the monitor output image is output to the monitor 3 and the image recording / transmission processing unit 54. Thus, when the patient information non-display setting is made, an image signal not including the patient information can be output only during the examination.

[0088] In addition, for example, the following configuration may be adopted: in the monitor output image generation unit 53, when the patient information non-display setting is made, a monitor output image not containing the patient information is generated only during the period from when the moving image recording start is instructed to when the moving image recording end is instructed, and an image signal representing the monitor output image is output to the monitor 3 and the image recording / transmission processing unit 54. Thus, when the patient information non-display setting is made, an image signal not containing the patient information can be output only during the period of the moving image recording. In this case, the following configuration may be adopted: the monitor output image recorded / transmitted by the image recording / transmission processing unit 54 is set to be a moving image based on the video signal input from the monitor output image generation unit 53 during the period from when the moving image recording start is instructed to when the moving image recording end is instructed.

[0089] In addition, for example, the decryption unit 57 may be omitted from the video processor 5, and instead, a decryption device capable of communicating with the video processor 5 and the server 6 may be provided between the video processor 5 and the server 6. In this case, the decryption device receives the encrypted patient information and unique ID sent by the server 6, decrypts the encrypted patient information and unique ID, and sends the patient information and unique ID to the video processor 5. In the video processor 5, the communication unit 56 receives the patient information and unique ID sent by the decryption device, outputs the patient information and unique ID to the image recording / transmission processing unit 54, and outputs the patient information to the monitor output image generation unit 53 and the peripheral device 4. Thus, when a vulnerability in encryption is discovered, it can be dealt with only by updating the decryption device and the server 6.

[0090] In addition, for example, the following configuration may be adopted: in the medical system 1, the examination order information managed in the server 6 can be retrieved according to the user's input operation to the video processor 5. In addition, for example, the following configuration may be adopted: according to the user's input operation to the video processor 5, the examination order information related to the next endoscopic examination is indicated to the server 6. In addition, for example, the following configuration may be adopted: when the user inputs a patient ID to the video processor 5, the video processor 5 obtains information related to the input patient ID from the server 6.

[0091] In addition, for example, considering the situation in which the power of the video processor 5 is disconnected due to replacement of the endoscope 2 during endoscopic inspection, the video processor 5 may be configured as follows: as long as the inherent ID is not overwritten, that is, as long as the next inherent ID is not obtained from the server 6, the inherent ID is maintained, and the image recording / transmission processing unit 54 uses the maintained inherent ID.

[0092] In addition, for example, the following structure may be adopted: in the medical system 1, patient information is not sent from the server 6 to the video processor 5. In this case, the following structure may be adopted: the encryption unit 63 is omitted from the server 6, and the decryption unit 57 is omitted from the video processor 5, and the inherent ID is not encrypted and sent from the server 6 to the video processor 5. In this case, the communication unit 64 sends the inherent ID, and the communication unit 56 receives the inherent ID. In addition, the following structure may be adopted: the setting of the monitor output image generation unit 53 and the image recording / transmission processing unit 54 by the security setting management unit 52 is not performed, and in the monitor output image generation unit 53, as the generation of the monitor output image, only the generation of the monitor output image that does not include the patient information is performed, and in the image recording / transmission processing unit 54, as the association with the monitor output image, only the association of the monitor output image with the inherent ID is performed.

[0093] In addition, for example, the image quality adjustment unit 51, the security setting management unit 52, the monitor output image generation unit 53, the image recording / transmission processing unit 54 and the decryption unit 57 in the video processor 5 can also be implemented by circuits such as FPGA (field-programmable gate array) and ASIC (application specific integrated circuit).

[0094] In addition, for example, the video processor 5 may also Figure 3 The hardware structure shown is implemented.

[0095] Figure 3 This is a diagram showing an example of a hardware configuration.

[0096] Figure 3 The hardware configuration shown includes a CPU 71 , a memory 72 , an input / output device 73 , an input / output IF 74 , a storage device 75 , a portable recording medium drive device 76 for storing a portable recording medium 78 , and a communication IF 77 , and these are connected to each other via a bus 79 .

[0097] The CPU 71 is a computing device that executes a program for processing by the video processor 5. The memory 72 is a RAM and a ROM, the RAM being used as a work area of ​​the CPU 71 and the like, and the ROM nonvolatilely storing the program and information necessary for executing the program.

[0098] The input / output device 73 is an input device such as an operation panel, a touch panel, or a keyboard, and an output device such as a display panel.

[0099] The input / output IF 74 is an interface for transmitting and receiving signals with the endoscope 2 , the monitor 3 , the peripheral device 4 , and the like.

[0100] The storage device 75 is a storage device that stores programs and information required for executing the programs, information obtained by executing the programs, etc. in a non-volatile manner. The storage device 75 is, for example, a hard disk device. The portable recording medium drive device 76 drives the portable recording medium 78 to access its recorded content. The portable recording medium 78 is a memory device, a floppy disk, an optical disk, a magneto-optical disk, etc. The portable recording medium 78 also includes a CD-ROM (Compact Disk Read Only Memory), a DVD (Digital Versatile Disk), a USB (Universal Serial Bus) memory, etc. The portable recording medium 78 is also a storage device that stores programs and information required for executing the programs, information obtained by executing the programs, etc. in a non-volatile manner, similar to the storage device 75.

[0101] The communication IF 77 is an interface connected to a network and used to communicate with an external device such as the server 6 .

[0102] Alternatively, for example, the server 6 may also Figure 3 In this case, Figure 3 In the hardware structure shown, the CPU 71 is a computing device that executes a program for processing by the server 6. The input / output device 73 is an input device such as a keyboard, a mouse, a touch panel, and an output device such as a display device. The input / output IF 74 is an interface for sending and receiving signals with an external storage device such as an EMR. The communication IF 77 is an interface connected to a network and used to communicate with an external device such as the video processor 5.

[0103] <Second Embodiment>

[0104] Next, a second embodiment will be described.

[0105] In the description of the second embodiment, the same components as those of the first embodiment are denoted by the same reference numerals.

[0106] In the medical system 1 according to the second embodiment, a plurality of video processors 5 are connected to a network, and a server 6 is connected to each video processor 5 so as to be able to communicate via the network. Figure 1 As shown, it is connected to the endoscope 2, the monitor 3 and the peripheral equipment 4.

[0107] In each video processor 5, as described in the first embodiment, the user can freely set whether to display the patient information on the monitor 3 in the monitor output image generating unit 53 and whether to record / transmit the patient information in the image recording / transmission processing unit 54. That is, the user can set whether to record the patient information in the video processor 5.

[0108] On the other hand, whether or not to record patient information in the video processor 5 depends on the setting made by the user. Therefore, from the perspective of safety, a structure is required to grasp the setting status in the plurality of video processors 5 and take appropriate measures as needed.

[0109] Therefore, in the medical system 1 according to the second embodiment, the server 6 also has the following functions: a function of acquiring settings (hereinafter also referred to as "settings in the security setting management unit 52") for the monitor output image generation unit 53 and the image recording / transmission processing unit 54 by the security setting management unit 52 from each video processor 5, a function of determining whether the settings in the security setting management unit 52 are different in a plurality of video processors 5, and a function of being able to perform any one or more of notification, announcement, and communication disconnection when the settings in the security setting management unit 52 are different in a plurality of video processors 5.

[0110] Figure 4 This is a flowchart showing an example of the flow of processing related to the above-mentioned function executed in the server 6.

[0111] like Figure 4 As shown, in this process, first, in S401, the server 6 loads the processing content to be executed when the judgment result of S404 described later is "yes". In addition, the case where the judgment result of S404 is "yes" means that the settings in the security setting management unit 52 are different in the plurality of video processors 5 as described later. In addition, the loaded processing content is executed by executing the later described Figure 5 The processing shown is the processing content set to the server 6 at the user's selection.

[0112] Next, in S402 , the server 6 determines whether a communication connection with the video processor 5 is detected.

[0113] When the determination result of S402 is "No", this determination is repeated.

[0114] On the other hand, if the result of determination in S402 is "yes", in S403, the server 6 acquires the settings in the security setting management unit 52 from the video processor 5 for which the communication connection is detected. For example, if the communication connection with a plurality of video processors 5 is detected in S402, the settings in the security setting management unit 52 are acquired from each video processor 5.

[0115] Then, in S404, the server 6 determines whether there is a video processor 5 with different settings in the security setting management unit 52 among the plurality of video processors 5 whose communication connection is detected in S402. If only one video processor 5 whose communication connection is detected in S402 is present, the determination result of S404 is set to "No" for processing.

[0116] If the determination result of S404 is "No", the process returns to S402.

[0117] On the other hand, if the result of determination in S404 is "Yes", in S405, the server 6 executes the processing according to the processing content loaded in S401, and returns to S402.

[0118] Figure 5 This is a flowchart showing an example of the flow of processing executed in the server 6, which is a processing for causing the user to set the content of processing to be executed when the settings in the security setting management unit 52 differ among the plurality of video processors 5.

[0119] like Figure 5 As shown in FIG. 5 , in this process, first, in S501, the server 6 allows the user to select whether to notify a message on the display panel of the video processor 5 of the setting for storing the patient information inside the device in the security setting management unit 52. The setting for storing the patient information inside the device refers to the setting for displaying the patient information in the monitor output image generation unit 53 and / or the setting for recording / transmitting the patient information in the image recording / transmitting processing unit 54.

[0120] If the user's selection in step S501 is "No", the process proceeds to step S505.

[0121] On the other hand, if the user's selection in S501 is "yes", in S502, the server 6 allows the user to select whether the message to be notified by the display panel of the video processor 5 is set to (a) or (b). Message (a) is a message for reminding the user whether the setting in the security setting management unit 52 is wrong. Message (b) is an urging message for the user to change the setting in the security setting management unit 52 to a setting that does not store patient information inside the device. In addition, the setting that does not store patient information inside the device refers to the patient information non-display setting for the monitor output image generation unit 53 and the safety mode setting for the image recording / transmission processing unit 54.

[0122] When the user's selection in S502 is (a), in S503, the server 6 sets a process for executing a process of displaying the message (a) on the display panel of the video processor 5, and the process proceeds to S505.

[0123] On the other hand, when the user's selection in S502 is (b), in S504, the server 6 sets a process for executing a process of displaying the message (b) on the display panel of the video processor 5, and the process proceeds to S505.

[0124] In S505 , the server 6 allows the user to select whether to notify a message on the monitor 3 connected to the video processor 5 in which the security setting management unit 52 is set to store the patient information inside the device.

[0125] If the user's selection in step S505 is "No", the process proceeds to step S509.

[0126] On the other hand, if the user's selection in S505 is "yes", in S506, the server 6 allows the user to select whether to set the message to be notified by the monitor 3 connected to the video processor 5 to (c) or (d). Message (c) is the same as the above-mentioned message (a). Message (d) is the same as the above-mentioned message (b).

[0127] When the user's selection in S506 is (c), in S507, the server 6 sets a process for executing a process of displaying the message (c) on the monitor 3 connected to the video processor 5, and the process proceeds to S509.

[0128] On the other hand, when the user's selection in S506 is (d), in S508, the server 6 sets a process for executing a process of displaying the message (d) on the monitor 3 connected to the video processor 5, and the process proceeds to S509.

[0129] In S509, the server 6 allows the user to select whether to notify the administrator that the settings in the security setting management unit 52 are different among the plurality of video processors 5. Here, the administrator is, for example, the administrator of the medical system 1 or the administrator of the server 6.

[0130] If the user's selection in step S509 is "No", the process proceeds to step S514.

[0131] On the other hand, if the user's selection in S509 is "yes", in S510, the server 6 allows the user to select whether to display a message as a notification to the administrator on the display device provided in the server 6. In addition, the display device provided in the server 6 may be replaced by a display device of a terminal device connected to the server 6 via a network.

[0132] When the user's selection in S510 is "No", the process proceeds to S512.

[0133] On the other hand, if the user's selection in S510 is "Yes", in S511, the server 6 performs settings for executing a process of causing the display device of the server 6 to display a message for calling attention as a notification to the administrator, and the process proceeds to S512.

[0134] In step S512 , the server 6 allows the user to select whether to send a notification to the administrator's email address as a notification to the administrator.

[0135] If the user's selection in step S512 is "No", the process proceeds to step S514.

[0136] On the other hand, if the user's selection in S512 is "Yes", in S513, the server 6 sets a process for executing a notification to the pre-registered administrator's e-mail address as a notification to the administrator, and proceeds to S514.

[0137] In S514 , the server 6 allows the user to select whether to automatically disconnect the communication connection with the video processor 5 that has been set in the security setting management unit 52 to store the patient information inside the server.

[0138] If the user's selection in S514 is "No", Figure 5 The shown processing ends.

[0139] On the other hand, if the user's selection in S514 is "Yes", in S515, the server 6 performs a setting for automatically disconnecting the communication connection with the video processor 5 that is set in the security setting management unit 52 to store the patient information inside the device. Figure 5 The shown processing ends.

[0140] As described above, according to the second embodiment, in the medical system 1, when the settings in the security setting management unit 52 are different in the plurality of video processors 5, one or more of the above-mentioned notification, announcement, and communication disconnection can be performed. Thus, in the plurality of video processors 5, the settings in the security setting management unit 52 are promoted to be unified to the settings that do not store patient information in the device, so that, for example, the risk of patient information leakage when the video processor 5 is attacked by a network can be further reduced.

[0141] In the above, the first embodiment and the second embodiment have been described.

[0142] In each embodiment, a video processor as an example of an endoscope device is used as an example of a medical device for description. However, other medical imaging devices such as an ultrasonic observation device may be used as other examples of the medical device.

[0143] In addition, in the first embodiment, for example, the structure of the endoscope system 1 may be changed to Figure 6 The data transmitted from the video processor 5 to the server 6 is encrypted.

[0144] Figure 6 It is a diagram showing a configuration example of an endoscope system 1 according to a modification of the first embodiment.

[0145] Figure 6 The endoscope system 1 shown is relatively Figure 1 The endoscope system 1 shown is different in that the video processor 5 further includes an encryption unit 58 , and the server 6 further includes a decryption unit 68 .

[0146] The encryption unit 58 is provided between the image recording / transmission processing unit 54 and the communication unit 56, and encrypts the data transmitted by the processing of the image recording / transmission processing unit 54. The encrypted data is transmitted to the server 6 via the communication unit 56.

[0147] The decryption unit 68 is provided between the communication unit 64 and the inspection information associating unit 65 . When the communication unit 64 receives the encrypted data, it decrypts the encrypted data and outputs the decrypted data to the inspection information associating unit 65 .

[0148] Thus, the data transmitted from the video processor 5 to the server 6, that is, the associated unique ID and monitor output image or the patient information and monitor output image, is encrypted, so that the data can be protected.

[0149] In addition, in the first embodiment, the storage unit 66 of the server 6 may also store the monitor output image and the unique ID associated with the monitor output image. In this case, for example, the storage unit 66 may also have a third storage area in which the monitor output image and the unique ID associated with the monitor output image are stored.

[0150] As mentioned above, the present invention is not limited to the above-mentioned embodiments, and the constituent elements can be deformed and concretized in the implementation stage without departing from the scope of the main purpose. In addition, various inventions can be formed by appropriate combinations of multiple constituent elements disclosed in the above-mentioned embodiments. For example, several constituent elements of all constituent elements shown in the embodiments can also be deleted. The constituent elements involved in different embodiments can also be appropriately combined.

[0151] Description of Reference Numerals

[0152] 1: medical system; 2: endoscope; 3: monitor; 4: peripheral equipment; 5: video processor; 6: server; 21: camera unit; 22: operation unit; 31, 32: monitor output image; 51: image quality adjustment unit; 52: security setting management unit; 53: monitor output image generation unit; 54: image recording / transmission processing unit; 55: storage unit; 56: communication unit; 57: decryption unit; 58: encryption unit; 61: command management unit; 62: unique ID generation unit; 63: encryption unit; 64: communication unit; 65: inspection information association unit; 66: storage unit; 66a: first storage area; 66b: second storage area; 67: IF; 68: decryption unit; 71: CPU; 72: memory; 73: input / output device; 74: input / output IF; 75: storage device; 76: portable recording medium drive device; 77: communication IF; 78: portable recording medium; 79: bus.

Claims

1. A medical system comprising a medical device for generating a medical image and a network device capable of communicating with the medical device, The network device comprises: an identification information generating unit that generates identification information corresponding to the inspection information; an associating unit that associates the identification information or the medical image with the examination information; A storage unit having a first storage area and a second storage area; and a first communication unit that communicates with the medical device, The medical device comprises: a second communication unit that communicates with the network device; and an image generating unit, which generates the medical image, in, The identification information generating unit generates unique identification information based on the inspection information and provides the identification information to the associating unit. The associating unit stores the inspection information and the identification information in the first storage area in association with each other. The first communication unit sends the identification information to the medical device, The second communication unit receives the identification information sent by the first communication unit, and sends the identification information and the medical image to the network device in an associated manner. The first communication unit receives the identification information and the medical image sent by the second communication unit in an associated manner, The associating unit stores the examination information stored in the first storage area in association with the medical image in the second storage area.

2. The medical system according to claim 1, in, The network device further includes an encryption unit configured to encrypt the patient information and the identification information included in the examination information. The first communication unit transmits the encrypted patient information and the identification information to the medical device.

3. The medical system according to claim 2, in, The second communication unit receives the encrypted patient information and the identification information sent by the first communication unit, The medical device further includes a decryption unit that decrypts the encrypted patient information and the identification information.

4. The medical system according to claim 2, in, The medical system also has a decryption device, The decryption device receives the encrypted patient information and the identification information sent by the first communication unit, decrypts the encrypted patient information and the identification information, and then sends the patient information and the identification information to the medical device. The second communication unit receives the patient information and the identification information transmitted by the decryption device.

5. The medical system according to claim 2, in, The medical device further includes a storage setting unit capable of setting whether to store the patient information in a storage area inside the device.

6. The medical system according to claim 5, in, After the examination using the endoscope is completed, the medical device deletes the patient information from the storage area inside the device.

7. The medical system according to claim 6, in, The network device is connected to the plurality of medical devices in a communicative manner to obtain setting contents in the storage setting units of the respective medical devices, and informs the user when the setting contents in the plurality of medical devices are a mixture of setting contents for storing the patient information within the device and setting contents for not storing the patient information within the device.

8. The medical system according to claim 1, in, The associating unit further stores the associated examination information and the medical image in an external storage device connected to the network device.

Images