Data analysis system, method for analyzing data, information processor, and program

Abstract

To provide a data analysis system, a method for analyzing data, an information processor, and a program which can efficiently perform statistical processing in an easily anonymizable manner.SOLUTION: A data analysis system 100 includes: a subject data storage unit (storage means) 41 for storing data on a subject; a reception processing unit (reception means) 31 for receiving a transmission instruction by a single action to transmit data on the subject; a data transmission unit (data transmission means) 36 for transmitting data on the subject all together in response to the transmission instruction; and an analysis processing unit (data analysis means) 37 for performing a predetermined analysis on the basis of the data on the subject.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a data analysis system, a data analysis method, an information processing device, and a program. [Background technology]

[0002] Conventionally, there has been known a system that acquires vital data indicating a user's condition using a sensor or the like and notifies the user of the analysis result. For example, Patent Document 1 describes this type of technology.

[0003] Patent Document 1 describes a system having a vital data measuring device that stores and transmits vital data measured by a sensor unit, an analysis program that receives the vital data transmitted from the vital data measuring device and stores the analysis results, and a user terminal that includes a display unit that displays the analysis results of the analysis program. This system allows the user to receive the analysis results by a doctor at the user's request. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2004-358052 A Summary of the Invention [Problem to be solved by the invention]

[0005] Incidentally, when performing statistical analysis of illnesses and health conditions, it is necessary to handle a large amount of data on subjects. The data handled is personal information, and may be anonymized. In this regard, the technology described in Patent Document 1 assumes that individuals manage their own health, and there is room for improvement in terms of efficiently handling statistical processing that handles a large amount of information on the illnesses and health conditions of subjects in a format that is easy to anonymize. In other words, there has been a demand for improving the convenience of handling data used in analysis.

[0006] The present invention has been made in consideration of the above circumstances, and aims to provide a data analysis system, a data analysis method, an information processing device, and a program that can improve convenience in handling data used for analysis. [Means for solving the problem]

[0007] In order to achieve the above-mentioned object, one aspect of the present invention is a data analysis system comprising a storage means for storing data relating to a subject, a receiving means for receiving a single-action transmission instruction for transmitting the data relating to the subject, a data transmitting means for transmitting the data relating to the subject all at once in response to the transmission instruction, and a data analysis means for performing a predetermined analysis based on the data relating to the subject.

[0008] Another aspect of the present invention is a data analysis method by a computer, the data analysis method including a storage step of storing data relating to a subject, a receiving step of receiving a transmission instruction by a single action to transmit the data relating to the subject, a data transmission step of transmitting the data relating to the subject all at once in response to the transmission instruction, and a data analysis step of performing a predetermined analysis based on the data relating to the subject.

[0009] Another aspect of the present invention is an information processing device comprising: a storage means for storing data relating to a subject; a receiving means for receiving a transmission instruction by a single action for transmitting the data relating to the subject; and a data transmitting means for transmitting the data relating to the subject in bulk in response to the transmission instruction to a data analysis means for performing a predetermined analysis based on the data relating to the subject.

[0010] Another aspect of the present invention is a computer program for causing a computer to execute a storage function for storing data relating to a subject, a reception function for receiving a transmission instruction by a single action for transmitting the data relating to the subject, and a data transmission function for transmitting the data relating to the subject in bulk in response to the transmission instruction to a data analysis device that performs a specified analysis based on the data relating to the subject. Effect of the Invention

[0011] According to the present invention, it is possible to provide a data analysis system, a data analysis method, an information processing device, and a program that can improve the convenience in handling data used for analysis. [Brief description of the drawings]

[0012] [Figure 1] 1 is a diagram showing an outline of the configuration of a data analysis system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a block diagram showing a hardware configuration of a management device. [Diagram 3] FIG. 2 is a functional block diagram illustrating an example of a functional configuration of a management device. [Figure 4] 11 is a flowchart showing the operation of a statistical analysis process by the data analysis system. [Diagram 5] 13 is an example of a dashboard including a link button for linking medical information shown in graph format with a statistical analysis device. [Figure 6] FIG. 2 is a diagram showing an example of the configuration of a data analysis system different from that shown in FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] <Overall composition> Hereinafter, this embodiment will be described with reference to the drawings. Fig. 1 is a diagram showing an outline of the configuration of a data analysis system 100 according to one embodiment of the present invention. As shown in Fig. 1, the data analysis system 100 of this embodiment includes a management device 1 that manages medical information, an input device 2, and a statistical analysis device 3.

[0014] The management device 1 is an information processing device that performs extraction processing based on predetermined conditions on medical information, which is data related to subjects, processing for statistical analysis in cooperation with a statistical analysis device 3, anonymization processing on the medical information, and the like.

[0015] The input device 2 is an information processing device in which a user performs operations to execute various processes of the management device 1. The user is, for example, an organization that receives a service of performing statistical analysis, such as a university hospital or a research institute. In FIG. 1 and the description thereof, the user is described as a certain university hospital. The user of this service is not limited to one organization, and multiple organizations may be connected.

[0016] The statistical analysis device 3 is an information processing device that cooperates with the management device 1 to execute statistical processing on medical information.

[0017] In addition, in the data analysis system 100 (management device 1), a subject data storage unit 41, a primary storage area 42, and a linkage data storage unit 43 are constructed as storage means for storing data related to subjects. The data related to subjects (medical information) is not limited to patients receiving medical care. It may be data related to the health of persons not receiving medical care.

[0018] As described above, users of the data analysis system 100 are organizations that receive services for performing statistical analysis, such as university hospitals and research institutes. That is, a specified organization such as a university hospital or research institute owns data on subjects (medical information) such as hospital examination records, medical interviews, and questionnaire results that are managed by the specified organization. Then, people who belong to the specified organization such as a university hospital or research institute (for example, doctors and professors at the university hospital) attempt to conduct research by analyzing the data on subjects (medical information) owned by the specified organization. The data analysis system 100 supports such predetermined organizations.

[0019] Here, when managing data (medical information) relating to subjects that is owned by a university, the university's prescribed rules are usually applied. That is, for example, the first rule applies, which stipulates that data (medical information) on subjects should basically be stored on a network within the university (for example, an intranet, etc.). The second rule applies: in order to store data (medical information) relating to a particular subject outside the university network, certain procedures and processes must be followed.

[0020] Under these assumptions, the management device 1, the input device 2, and the statistical analysis device 3 are connected via a predetermined network. 1, the management device 1, the input device 2, the subject data storage unit 41, and the primary storage area 42 are installed in a network (e.g., an intranet) within the university. The statistical analysis device 3 and the linkage data storage unit 43 are installed in a network (e.g., the Internet) outside the university.

[0021] That is, the first rule is applied to the management device 1, the input device 2, the subject data storage unit 41, and the primary storage area 42. The second rule is applied to the statistical analysis device 3 and the linkage data storage unit 43.

[0022] In other words, in order to transmit data on a subject (medical information) from an information processing device(s) to which the first rule is applied to an information processing device(s) to which the second rule is applied for analysis, the time and effort required to carry out prescribed procedures and to appropriately carry out identifiability reduction processing, which reduces the identifiability of the individual subject as prescribed processing, was an obstacle to efficient analysis (research). The data analysis system 100 reduces such labor and improves the convenience of handling the data used for analysis.

[0023] The medical information in this embodiment includes at least one of the following: medical history, information indicating lifestyle habits (lifestyle information), findings, and genetic information (e.g., information necessary for genome analysis). The medical history includes at least one of disease name, medication, drug administration history, surgical history, and test results. The subject data storage unit 41 stores this medical information in table format for each subject.

[0024] The primary storage area 42 is a storage area in which the medical information or information for identifying the medical information acquired from the subject data storage unit 41 is temporarily stored. The linking data is an area in which the linking data transmitted from the primary storage area 42 and used for statistical processing by the statistical analysis device 3 is stored.

[0025] <Hardware configuration> Next, an example of a hardware configuration constituting the management device 1 will be described. Fig. 2 is a block diagram showing the hardware configuration of the management device 1 according to this embodiment. The management device 1 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a bus 14, an input / output interface 15, an output unit 16, an input unit 17, a storage unit 18, a communication unit 19, and a drive 20.

[0026] The CPU 11 executes various processes according to a program recorded in the ROM 12 or a program loaded from the storage unit 18 to the RAM 13. The RAM 13 also stores data and the like required for the CPU 11 to execute various processes. The CPU 11, the ROM 12, and the RAM 13 are interconnected via a bus 14. An input / output interface 15 is also connected to this bus 14.

[0027] An output unit 16, an input unit 17, a memory unit 18, a communication unit 19, and a drive 20 are connected to the input / output interface 15. The output unit 16 is composed of a display, a speaker, etc., and outputs various information as images and sounds. The input unit 17 is composed of a keyboard, a mouse, etc., and inputs various information. The memory unit 18 is composed of a hard disk, a DRAM (Dynamic Random Access Memory), etc., and stores various data. The communication unit 19 communicates with other devices via a network N including the Internet.

[0028] Removable media 21, which may be a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory, is appropriately attached to the drive 20. Programs read from the removable media 21 by the drive 20 are installed in the storage unit 18 as necessary. The removable media 21 can also store various data stored in the storage unit 18 in the same manner as the storage unit 18.

[0029] Although not shown, the input device 2 and the statistical analysis device 3 also have the same hardware configuration as that shown in FIG.

[0030] <Functional configuration> Next, a description will be given of the functional configuration of the data analysis system 100. Fig. 3 is a functional block diagram showing an example of the functional configuration of the data analysis system 100. The subject data storage unit 41, the primary storage area 42, and the linkage data storage unit 43 are configured by the storage unit 18 of the management device 1 or a storage unit external to the management device 1.

[0031] As shown in FIG. 3, the management device 1 includes, as functional units operating in a CPU 11, an authentication processing unit 30, a reception processing unit 31, an extraction processing unit 32, a display processing unit 33, an anonymity processing unit 34, a data processing unit 35, and a data transmission unit 36.

[0032] The authentication processing unit 30 determines whether or not a user who operates the data analysis system 100 has access rights to medical information, which is data related to subjects, and executes a process for permitting users who have access rights to use the data analysis system 100. The determination of whether or not a user has access rights may be made, for example, by an access ID and a corresponding password, or by using biometric information or an IC card that identifies an individual.

[0033] The reception processing unit 31 is a reception means that receives operation contents of the input device 2 operated by the user. The reception processing unit 31 receives operation contents such as extraction processing for extracting medical information based on certain conditions and linkage processing for performing statistical processing. The reception processing unit 31 stores the received medical information or information identifying the medical information in the primary storage area 42. In this embodiment, the reception processing unit 31 stores the ID of the medical information in the primary storage area 42 as information for identifying the medical information.

[0034] The extraction processing unit 32 extracts a data set of medical information that satisfies the conditions based on the operation content of the extraction process accepted by the acceptance processing unit 31. The extraction processing unit 32 extracts medical information that matches the conditions of the operation content from, for example, a large amount of medical information registered in the subject data storage unit 41. The extraction processing unit 32 stores the extraction conditions, the medical information extracted based on the extraction conditions, or information for identifying the medical information extracted based on the extraction conditions in the primary storage area 42.

[0035] The display processing unit 33 executes a process for displaying medical information to the user based on the operation content accepted by the reception processing unit 31. For example, the display processing unit 33 generates graphs, tables, etc. based on the medical information that matches the conditions extracted by the extraction processing unit 32, and presents them to the user as image information. The image information is displayed on the output unit 16 of the input device 2, for example.

[0036] The anonymization processing unit 34 processes the medical information to reduce the possibility of identifying the subject. Specifically, the anonymization processing unit 34 executes anonymization processing that meets a predetermined standard. Specifically, the anonymization processing is processing that reduces the possibility of identifying an individual by deleting information on the name, sex, medical history, height, etc., or by performing mask processing. The anonymization processing can also include a processing of changing a numerical value, such as changing age to a generation.

[0037] The anonymity processor 34 may perform anonymity processing on the medical information registered in the subject data storage unit 41, or may perform anonymity processing on the medical information stored in the primary storage area 42. The timing at which the anonymity processor 34 performs anonymity processing is not particularly limited. The anonymity processor 34 may perform anonymity processing when the medical information is registered in the subject data storage unit 41, or may perform anonymity processing when the user operates the management device 1.

[0038] The data processing unit 35 processes the medical information that matches the extracted conditions and generates linkage data for performing statistical processing in the statistical analysis device 3. The data processing unit 35 stores the linkage data in the linkage data storage unit 43 used by the statistical analysis device 3. The linkage data may include the medical information itself, or may include information for identifying the medical information. The linkage data in this embodiment is a group of ID information for reading out the medical information from the subject data storage unit 41. The linkage data may also include the extraction conditions, medical information extracted based on the extraction conditions, or information for identifying the medical information extracted based on the extraction conditions.

[0039] When the reception processing unit 31 receives an operation instructing a batch operation of the association data, the data transmission unit 36 ​​executes a process of transmitting the association data in a batch to the statistical analysis device 3 based on the content of the user's operation. In this embodiment, the user's operation instructing a batch operation of multiple association data can be performed by a single action, which is one operation.

[0040] In this embodiment, the data transmission unit 36 ​​transmits, in addition to the ID of the medical information included in the linkage data, the extraction result of the extraction processing unit 32 in a lump sum. That is, the data transmission unit 36 ​​transmits not only the extraction result but also information specifying medical information that does not match the extraction conditions to the statistical analysis device 3. Note that this is not limited to the above configuration, and a configuration in which only medical information that matches the extraction conditions is sent may also be used.

[0041] Next, a description will be given of the functions of the statistical analysis device 3. The statistical analysis device 3 includes an analysis processing unit 37 as a functional unit that operates in the CPU 11 of the statistical analysis device 3.

[0042] The analysis processing unit 37 executes a statistical analysis process on the linked data transmitted from the data transmission unit 36. The analysis processing unit 37 executes the statistical analysis process by using a predetermined statistical processing language such as the R language. The analysis processing unit 37 can display the statistical analysis results in a graph format or a table format.

[0043] Next, an example of the statistical analysis process will be described with reference to Fig. 4. Fig. 4 is a flowchart showing the operation of the statistical analysis process by the data analysis system 100.

[0044] In step S11, the authentication processing unit 30 performs authentication processing on the user who operates the device. The authentication judgment determines whether or not the user has the authority to access medical information. If the authentication judgment is not successful, the process does not proceed to step S12, and the user is requested to perform authentication judgment again, or the process is temporarily terminated.

[0045] In step S12, the reception processing unit 31 executes a reception process for receiving an input of extraction conditions by the user through the input device 2.

[0046] The operation process for the reception processing unit 31 to receive extraction conditions will be described with reference to Fig. 5. Fig. 5 is an example of a dashboard including a link button for performing a link operation between medical information shown in a graph format and the statistical analysis device 3. As shown in Fig. 5, the image of the medical information is an image in which the medical information can be confirmed at a glance using a plurality of graphs, tables, etc., such as a dashboard.

[0047] The upper part of the image in FIG. 5 shows an edit operation unit 51 for editing the extracted medical information, a link operation unit 52 for starting linkage with the statistical analysis device 3, a delete operation unit 53 for deleting the extracted medical information, and a view operation unit 54 for changing the display format. In addition, the middle to lower parts of the image in FIG. 5 show examples of graphs, such as a graph 61 showing the number of cases by gender divided by age, a graph 62 showing the number of patients divided by medication period, a graph 63 showing the number of patients divided by disease name, and a graph 64 showing the number of patients divided by prescription. Furthermore, a condition setting unit 70 for setting extraction conditions is shown on the right side of the image in FIG. 5. Note that the image example in FIG. 5 is merely an example, and other information may be added, or part of the display content in FIG. 5 may be omitted.

[0048] For example, when a user operates the condition setting unit 70 in FIG. 5 and sets an extraction condition to exclude data on subjects in which statins have been administered but the period of statin use is less than 48 months, this information is accepted by the reception processing unit 31 as the extraction condition.

[0049] In step S13, the extraction processing unit 32 extracts medical information that matches the conditions from the medical information of the subject registered in the subject data storage unit 41 based on the operation content accepted by the acceptance processing unit 31.

[0050] In step S14, the display processing unit 33 executes a display process for presenting to the user the medical information extracted by the extraction processing unit 32. In the display process, as described above, an image of the extracted medical information in a graph format or a table format is generated, and the image is presented to the user.

[0051] In step S15, the reception processing unit 31 receives a single action operation for starting statistical analysis by the user through the input unit 17 of the input device 2. In the example of Fig. 5, the reception processing unit 31 detects that a single action operation has been performed when the user selects the cooperative operation unit 52 by a mouse click operation, touch operation, or the like. In this manner, a single action operation indicates a single operation by the user.

[0052] In step S16, the anonymization processor 34 performs a process of anonymizing the medical information by processing the medical information to reduce the possibility of identifying the individual subject.

[0053] In step S17, the data processing unit 35 generates associated data specifying the medical information extracted by the extraction processing unit 32 for performing statistical analysis in the statistical analysis device 3. The associated data is, for example, a list that specifies the ID of the medical information.

[0054] In step S18, the data transmission unit 36 ​​transmits the associated data in a batch to the statistical analysis device 3. The data transmission unit 36 ​​stores the associated data in a location available to the statistical analysis device 3. In this embodiment, after the batch transmission process by the data transmission unit 36, a process is executed in which the screen displayed on the input device 2 transitions from the screen provided by the management device 1 to a screen provided by the statistical analysis device 3.

[0055] In step S19, the analysis processing unit 37 of the statistical analysis device 3 executes statistical processing on the medical information specified by the linked data based on the content described in a predetermined statistical processing language. For example, the user sets analysis conditions for further statistical processing in the statistical analysis device 3 on an operation screen (not shown) presented by the analysis processing unit 37 of the statistical analysis device 3. The analysis processing unit 37 executes statistical processing based on the analysis conditions and the medical information.

[0056] As in the above example, when the extraction condition is to exclude those who have taken statins for less than 48 months, the user sets, as conditions for statistical processing, on the operation screen presented by the analysis processing unit 37, such as excluding medical information without LDLC (Low Density Lipoprotein Cholesterol) testing (for example, Day 0 and Day 30) and with a baseline LDLC result value of less than 140. Based on this setting, the analysis processing unit 37 performs statistical analysis of the medical information and displays data such as graphs and tables grouped into responders and hyporesponders.

[0057] The data analysis system 100 of this embodiment is particularly effective when used in the following environments. That is, as mentioned above, data on subjects (medical information) is personal information. Moreover, information on illnesses and health conditions is also sensitive information. Therefore, university hospitals (an example of a prescribed organization) usually prescribe the following rules: That is, for example, a university hospital (an example of a predetermined organization) prescribes a first rule that data (medical information) on subjects should basically be stored on a network (e.g., an intranet) within the university hospital. Also, for example, the university hospital prescribes a second rule that a predetermined procedure or process is required to store data (medical information) on a predetermined subject outside the university hospital's network.

[0058] When a person belonging to a certain organization (for example, a doctor or professor at a university hospital) analyzes or presents data (medical information) on subjects, there is a need to use his or her own terminal that can be used in a situation where the terminal can be connected to the Internet, or an analysis tool that can be used via the Internet. As a result, at a certain timing when the data (medical information) on subjects is handled, certain procedures and processes are often required.

[0059] Specifically, for example, a procedure may require an application to use data (medical information) relating to the subject, and a procedure may require identifiability reduction processing (e.g., anonymization) to reduce the identifiability of individual subjects in data (medical information) relating to the subject, as specified procedures. The data analysis system 100 of this embodiment reduces such trouble and improves the convenience of handling data used for analysis.

[0060] Furthermore, in the above embodiment, a university hospital (an example of a specified organization) was described as the user, but by adopting the following form, the system can also be made to allow various university hospitals, research institutions, etc. to use data regarding subjects fairly. That is, data (medical information) on subjects owned by each of multiple organizations can be used as linked data by transmitting data (medical information) on subjects that has been processed to reduce identifiability within each organization. At this time, processing conforming to rules stipulated by each of the multiple organizations is performed as the processing to reduce identifiability in each of the multiple organizations. This realizes a system in which various research institutions can use data on subjects fairly.

[0061] As described above, the data analysis system 100 of this embodiment includes a subject data storage unit 41 (storage means) that stores data on subjects, a reception processing unit 31 (reception means) that receives a transmission instruction by a single action for transmitting data on subjects, a data transmission unit 36 ​​(data transmission means) that transmits the data on subjects collectively in response to the transmission instruction, and an analysis processing unit 37 (data analysis means) that performs a predetermined analysis based on the data on subjects. Also, the data analysis method by the computer of this embodiment includes a storage step of storing data on subjects, a reception step of receiving a transmission instruction by a single action for transmitting the data on the subjects, a data transmission step of transmitting the data on the subjects collectively in response to the transmission instruction, and a data analysis step of performing a predetermined analysis based on the data on the subjects.

[0062] This allows a large amount of subject-related data (medical information) required for statistical processing to be sent in a single action to the analysis processing unit 37 in one go. For example, a configuration can be easily realized in which the data on the subject is held on the cloud side and analysis processing can be completed in a cloud environment without outputting the data on the subject to an external storage medium or the like. Furthermore, according to the configuration of this embodiment, the data on the subject can be held on the cloud and anonymization processing can be easily performed. Furthermore, in the conventional technology, data analysis (including application and approval for data use, data output and import work, and statistical analysis processing) took a long time, from several months to half a year, but according to the configuration of this embodiment in which processing is performed on the cloud, statistical processing can be performed quickly.

[0063] Moreover, the data analysis system 100 (management device 1) of this embodiment further includes an extraction processing unit 32 (extraction means) that extracts data related to the subject based on a predetermined condition, and the data transmission unit 36 ​​transmits all of the data related to the subject including the data extracted by the extraction processing unit 32. This makes it possible to extract data related to the subject that meets the predetermined condition at a stage prior to the statistical analysis process, and the extraction result can be used for the statistical analysis.

[0064] In addition, by extracting data on subjects based on predetermined conditions, it is not necessary to extract data each time, improving convenience. In addition, by extracting data, the amount of data to be transmitted on subjects is reduced, and the risk of data leakage is reduced, making it easier to obtain approval for the use of data on subjects by a predetermined organization.

[0065] Moreover, the data analysis system 100 (management device 1) of this embodiment further includes a display processing unit 33 (display means) that displays the extraction results by the extraction processing unit 32. This allows the extraction results to be confirmed before performing statistical analysis.

[0066] The data analysis system 100 (management device 1) of this embodiment further includes an anonymization processing unit 34 that performs identifiability reduction processing on data related to the subject to reduce the identifiability of the individual subject, and transmits the data related to the subject on which the identifiability reduction processing has been performed. As a result, the transmitted data is the data related to the subject on which the identifiability reduction processing has been performed.

[0067] In the data analysis system 100 of this embodiment, a first rule regarding the individual identifiability of the subjects, which is determined by an organization that owns data regarding the subjects, is applied to the management device 1 and the input device 2. In addition, a second rule regarding the individual identifiability, which is determined by the organization, is applied to the statistical analysis device 3. The subject data storage unit 41, the primary storage area 42, the reception processing unit 31, the anonymity processing unit 34, and the data transmission unit 36 ​​are provided in the management device 1. The analysis processing unit 37 is provided in the statistical analysis device 3. Then, the anonymization processor 34 executes a process for converting the data on the subject conforming to the first rule into data on the subject conforming to the second rule as an identifiability reducing process. This ensures that appropriate (rule-compliant) identifiability reduction processing is performed before the subject's data is transmitted. This allows a predetermined organization (e.g., a person in charge of information management) to omit or simplify a predetermined procedure for transmitting data to an information processing device to which the second rule is applied, by using the data analysis system 100, since identifiability reduction processing is performed before the subject's data is transmitted. As a result, for those who belong to a predetermined organization and analyze or present data (medical information) related to subjects, improved convenience in handling the data used for analysis is realized.

[0068] In this embodiment, the data on the subject includes at least one of the following: medical history, information showing lifestyle habits, findings, and genetic information. Statistical processing can be performed using these pieces of information.

[0069] In this embodiment, the medical history includes at least one of the following: disease name, medication, drug administration history, surgery history, and test results. Statistical processing can be performed more accurately by using this information.

[0070] In this embodiment, the analysis processing unit 37 performs statistical analysis or graphing on the data related to the subjects using a predetermined statistical processing language. This allows the results of analysis of large amounts of data to be easily understood through the results of statistical analysis using the predetermined statistical processing language or visually easy-to-understand graphs.

[0071] In this embodiment, the data on the subjects is data that has been subjected to a process for concealing personal information. As a result, even if the data on the subjects includes personal information, the concealment process is performed, so that the privacy of the subjects can be appropriately protected. When handling data for statistical processing on the cloud, it is particularly effective to perform the concealment process when there is a high possibility that multiple users will access the data on the subjects.

[0072] In the present embodiment, the process of concealing personal information is a process of reducing the possibility of identifying an individual, which allows the personal information to be protected while maintaining information necessary for statistical processing, thereby achieving a good balance between statistical processing and personal information protection.

[0073] In this embodiment, the data analysis system 100 (management device 1) further includes an authentication processing unit 30 (authentication means) that determines whether the subject-related data can be used by the user, and restricts the user's access to the subject-related data based on the determination result of the authentication processing unit 30. This ensures that the personal information is protected by the access restriction when the subject-related data includes personal information. In addition, even when a service is provided that allows the user to use statistical processing, the access restriction allows the user to appropriately use the service. In conventional services, data on the subject is extracted and sold piecemeal, but according to the configuration of this embodiment, it is easy to make the subject-related data accessible for a period specified by a contract. In addition, in the past, it was unclear whether the subject-related data was used for an inappropriate purpose after statistical processing, but by managing it on the cloud, a service can be developed in which the subject-related data can be appropriately used for a specific period.

[0074] In this embodiment, the management device 1 includes a subject data storage unit 41 (storage means), a reception processing unit 31 (reception means) that receives a transmission instruction by a single action for transmitting data related to the subject, and a data transmission unit 36 ​​(data transmission means) that transmits data related to the subject in a lump sum in response to the transmission instruction to a data analysis means that performs a predetermined analysis based on the data related to the subject. The program of this embodiment causes a computer to execute a storage function that stores data related to the subject, a reception function that receives a transmission instruction by a single action for transmitting data related to the subject, and a data transmission function that transmits data related to the subject in a lump sum in response to the transmission instruction to a data analysis device that performs a predetermined analysis based on the data related to the subject.

[0075] As a result, even in a configuration in which statistical analysis is performed in cooperation with the management device 1 and the statistical analysis device 3 by sending data about the subjects in a lump sum, as in this embodiment, the cooperative processing can be performed easily and efficiently.

[0076] In the above-mentioned data analysis system 100, the statistical analysis device 3 and the linkage data storage unit 43 have been described as being installed on a network outside the university, but it is preferable to use the configuration shown in FIG. Fig. 6 is a diagram showing an example of the configuration of a data analysis system different from that of Fig. 1. Hereinafter, components that are basically the same as those in Fig. 1 are given the same reference numerals and descriptions thereof will be omitted.

[0077] The statistical analysis device 3 shown in FIG. 6 is an information processing device that is installed in a private network and can execute statistical processing on medical information of the association data stored in the association data storage unit 43. The user terminal 4 is an information processing device that is directly operated by a user who performs analysis (research). The user terminal 4 is connected to the Internet or the like, and is able to access the statistical analysis device 3 after a predetermined authentication process. When a user accesses the statistical analysis device 3 via the user terminal 4, the statistical analysis device 3 provides the user terminal 4 with an analysis environment capable of analyzing the medical information in the linkage data storage unit 43. That is, the statistical analysis device 3 and the association data storage unit 43 shown in FIG. 6 are provided as a virtual environment.

[0078] Specifically, for example, a user can use a virtual desktop (VDI, Virtual Desktop Infrastructure) from a user terminal 4, which allows the user to identify the analysis target using a BI tool such as the dashboard shown in Figure 5, and download the data for integration as a file in a specified format (e.g., CSV, comma separated values ​​format).

[0079] Here, on the virtual desktop provided by the statistical analysis device 3, any statistical tool for which the user has made a contract can be installed. Furthermore, security measures are implemented on the virtual desktop. Specifically, for example, files such as linkage data are controlled so as not to be downloaded to a physical terminal (for example, the user terminal 4). In addition, all operations performed on the virtual desktop are logged and monitored on an individual user basis. This improves convenience for users (eg, medical researchers) who perform analysis (research), and also enhances security in data management.

[0080] That is, as described above, the second rule, which is stricter than the first rule, is prescribed for functional characteristics, security, etc., from the viewpoint of preventing information leakage, etc. According to the second rule, it may be necessary to limit the statistical software to a specific product. That is, for example, the second rule may be adopted such that only specific statistical software is permitted for the statistical analysis device 3 shown in FIG. 1, or in order to comply with the second rule, only specific statistical software may be permitted. However, being limited to specific statistical software is inconvenient for users. As described above, a virtual desktop environment is provided and control such as disabling data downloading is performed, allowing users to use the statistical software they wish to use.

[0081] Although one embodiment of the present invention has been described above, the present invention is not limited to the above-described embodiment, and modifications, improvements, etc. within the scope that can achieve the object of the present invention are included in the present invention.

[0082] Also, for example, the above-mentioned series of processes can be executed by hardware or software. In other words, the above-mentioned functional configuration is merely an example and is not particularly limited. That is, it is sufficient that the information processing system is provided with a function capable of executing the above-mentioned series of processes as a whole, and the type of functional block used to realize this function is not particularly limited to the above example. In addition, the location of the functional block is not particularly limited and may be arbitrary. For example, the functional block of the server may be transferred to another device or the like. Conversely, the functional block of the other device may be transferred to the server or the like. In addition, one functional block may be configured as a single piece of hardware, may be configured as a single piece of software, or may be configured as a combination of them.

[0083] When a series of processes is executed by software, a program constituting the software is installed in a computer or the like from a network or a recording medium. The computer may be a computer built into dedicated hardware. The computer may also be a computer capable of executing various functions by installing various programs, such as a server, a general-purpose smartphone, or a personal computer.

[0084] The recording medium containing such a program may be configured not only as a removable medium (not shown) distributed separately from the device main body in order to provide the program to the user, etc., but also as a recording medium etc. provided to the user in a state in which the medium is pre-installed in the device main body. Since the program can be distributed via a network, the recording medium may be mounted on or accessible to a computer connected or connectable to the network.

[0085] In this specification, the steps describing the program recorded on the recording medium include not only processes performed in chronological order, but also processes that are not necessarily performed in chronological order but are performed in parallel or individually. In addition, in this specification, the term "system" refers to an overall device composed of multiple devices, multiple means, etc.

[0086] In summary, the information processing apparatus to which the present invention is applied is sufficient if it has the following configuration, and can take various different embodiments. That is, an information processing system to which the present invention is applied (for example, the data analysis system 100 shown in FIG. 1 or FIG. 6) A storage means for storing data relating to subjects (e.g., the subject data storage unit 41 in FIG. 1 or FIG. 6 ); A reception unit (e.g., the reception processing unit 31 in FIG. 3) that receives a transmission instruction by a single action for transmitting the data related to the subject; A data transmission means (e.g., the data transmission unit 36 ​​in FIG. 3) that transmits the data related to the subject all at once in response to the transmission instruction; A data analysis means (e.g., the analysis processing unit 37 in FIG. 3) for performing a predetermined analysis based on the data related to the subject; Equipped with.

[0087] The apparatus further includes an extraction unit (e.g., the extraction processing unit 32 in FIG. 3) for extracting data related to the subject based on a predetermined condition, The data transmission means includes: The data relating to the subject, including the data extracted by the extraction means, can be transmitted in a lump sum.

[0088] Moreover, the apparatus may further comprise a display means (for example, the display processing unit 33 in FIG. 3) for displaying the results of extraction by the extraction means.

[0089] Also, an identifiability reduction means (for example, the anonymity processing unit 34 in FIG. 3) that performs identifiability reduction processing on the data related to the subject to reduce the identifiability of the individual of the subject; Further comprising: The data transmission means may transmit data relating to the subject on which the identifiability reducing processing has been performed.

[0090] The information processing system further includes a first information processing device to which a first rule regarding the individual identifiability of the subject, which is determined by an organization that owns data regarding the subject, is applied, and a second information processing device to which a second rule regarding the individual identifiability, which is determined by the organization, is applied (for example, the statistical analysis device 3 in FIG. 1 or FIG. 6 ); The first information processing device is The apparatus includes the storage means, the acceptance means, the identifiability reduction means, and the data transmission means, The identifiability reducing means can execute, as the identifiability reducing processing, a process of converting data about the subject that complies with the first rule into data about the subject that complies with the second rule.

[0091] The data on the subject may include at least one of medical history, information indicating lifestyle habits, findings, and genetic information.

[0092] The medical history may include at least one of the following: disease name, medication, drug administration history, surgical history, and test results.

[0093] The data analysis means can also perform statistical analysis or graphing on the data relating to the subject using a predetermined statistical processing language.

[0094] The method further includes an authentication means for determining whether or not a user is permitted to use the data related to the subject, Based on the result of the authentication means' determination, access to data relating to the subject by a user can be restricted.

[0095] The data analysis means may be provided as a virtual desktop environment. [Explanation of symbols]

[0096] 1: Management device (information processing device) 2: Input device 3: Statistical analysis device 4: User terminal 30: Authentication processing unit (authentication means) 31: Reception processing unit (reception means) 32: Extraction processing unit (extraction means) 33: Display processing unit (display means) 34: Anonymous processing unit (anonymity means) 35: Data processing unit (data processing means) 36: Data transmission unit (data transmission means) 100: Data analysis system

Claims

1. a storage means for storing data relating to a subject; a receiving means for receiving a single-action transmission instruction for transmitting data related to the subject; a data transmission means for transmitting the data related to the subject all at once in response to the transmission instruction; A data analysis means for performing a predetermined analysis based on the data related to the subject; An information processing system comprising:

2. The method further comprises: extracting data on the subject based on a predetermined condition; The data transmission means includes: Transmitting data related to the subject including the data extracted by the extraction means in a lump sum; The information processing system according to claim 1 .

3. The apparatus further includes a display unit for displaying an extraction result by the extraction unit. The information processing system according to claim 2 .

4. identifiability reduction means for performing an identifiability reduction process on the data relating to the subject to reduce the identifiability of the individual of the subject; Further comprising: The data transmission means transmits the data regarding the subject on which the identifiability reduction processing has been performed.

4. An information processing system according to claim 1.

5. The information processing system includes a first information processing device to which a first rule regarding personal identity of the subject, which is determined by an organization that owns data regarding the subject, is applied, and a second information processing device to which a second rule regarding personal identity determined by the organization is applied, The first information processing device, The apparatus includes the storage means, the acceptance means, the identifiability reduction means, and the data transmission means, The identifiability reducing means performs a process of converting data about the subject that complies with the first rule into data about the subject that complies with the second rule as the identifiability reducing process.

5. The information processing system according to claim 4.

6. The data on the subject includes at least one of a medical history, information indicating lifestyle habits, findings, and genetic information.

4. An information processing system according to claim 1.

7. The medical history includes at least one of the following: disease name, medication, drug administration history, surgery history, and test results; 7. The information processing system according to claim 6.

8. The data analysis means performs statistical analysis or graphing on the data related to the subject using a predetermined statistical processing language.

4. An information processing system according to claim 1.

9. The method further includes an authentication means for determining whether or not a user is permitted to use the data related to the subject, restricting access to the data relating to the subject by the user based on the determination result of the authentication means; 4. An information processing system according to claim 1.

10. The data analysis means is provided as a virtual desktop environment. The information processing system according to claim 9.

11. A method for processing information by a computer, comprising the steps of: storing data relating to the subject; a receiving step of receiving a single-action transmission instruction for transmitting data related to the subject; a data transmission step of collectively transmitting data related to the subject in response to the transmission instruction; A data analysis step of performing a predetermined analysis based on the data regarding the subject; An information processing method comprising:

12. a storage means for storing data relating to a subject; a receiving means for receiving a single-action transmission instruction for transmitting data related to the subject; data transmission means for transmitting the data on the subject in a batch in response to the transmission instruction to a data analysis means for performing a predetermined analysis based on the data on the subject; An information processing device comprising:

13. a memory function for storing data relating to the subject; a reception function for receiving a single-action transmission instruction for transmitting data related to the subject; a data transmission function of transmitting the data on the subject in a batch in response to the transmission instruction to a data analysis device that performs a predetermined analysis based on the data on the subject; A program for causing a computer to execute the above.

Images