Medical information provision control device, terminal device, method for controlling provision of medical information, and program for controlling provision of medical information

Abstract

To provide a medical information provision control device or the like which can appropriately control sharing of medical information of a patient on the basis of the request of the patient.SOLUTION: A medical data sharing server S is provided which: acquires medical data provided from a patient P; acquires a share control list showing a person who is not the patient P with whom the medical data should be shared; restricts medical data specifying the person a person with whom the medical data should be shared from being shared with a person other than the person with whom the medical data should be shared on the basis of the acquired share control list; and permits the medical data to be shared with the person with whom the medical data should be shared.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to the technical fields of a medical information provision control device, a terminal device, a medical information provision control method, and a medical information provision control program. More specifically, the present invention relates to a medical information provision control device and a medical information provision control method for controlling the provision or sharing of medical information of a patient who is the subject of a medical procedure to persons other than the patient, a terminal device used by the patient, and a program for the medical information provision control device. [Background technology]

[0002] In recent years, in the medical field, it has become extremely important that various information related to the medical care of a patient is provided in a timely and appropriate manner to the patient receiving said medical care and the doctor in charge. In the following explanation, various information related to the medical care of a patient is simply referred to as "medical information." Examples of documents showing prior art related to the timely and appropriate provision of the above medical information include the following Patent Documents 1 to 3.

[0003] At this time, in the prior art described in Patent Document 1, medical characteristics indicating the medical characteristics of a patient related to a disease are clustered into behavioral medicine characteristics, knowledge medicine characteristics, and cognitive medicine characteristics, and a plurality of behavioral medicine characteristics, a plurality of knowledge medicine characteristics, and a plurality of cognitive medicine characteristics are each associated with one or more treatment methods and stored. Each behavioral medicine characteristic is further associated with at least the cognitive medicine characteristic among the knowledge medicine characteristics and the cognitive medicine characteristics, and a treatment method to be performed is selected from the treatment methods associated with the behavioral medicine characteristic selected as a treatment target from the plurality of behavioral medicine characteristics and the treatment methods associated with each of the knowledge medicine characteristic information and the cognitive medicine characteristic information associated with the selected behavioral medicine characteristic, and treatment method information for the selected treatment method is transmitted to a user terminal, and the user terminal is configured to present information for the treatment method based on this.

[0004] On the other hand, the prior art described in Patent Document 2 is a distribution system that distributes a therapeutic application having a functional unit that functions upon prescription from a medical professional, and is configured to include a receiving unit that receives a prescription request for the therapeutic application from a patient's first terminal, a receiving unit that receives prescription permission information from the medical professional to permit prescription of the therapeutic application for the patient at the first terminal in response to the prescription request, and an enabling unit that enables the above-mentioned functional unit when the prescription permission information is received.

[0005] Furthermore, the prior art described in Patent Document 3 is configured to include a memory unit that stores correspondence information that associates a plurality of behaviors, behavior groups obtained by classifying the plurality of behaviors into similar behaviors, and levels of difficulty for the plurality of behaviors, a first acquisition unit that acquires behavioral goal information regarding behavioral goals for the patient, a second acquisition unit that acquires behavioral information regarding the patient's actual behavior in accordance with the behavioral goal, a third acquisition unit that acquires the degree of deviation between the patient's behavioral goal and the actual behavior based on the behavioral goal information acquired by the first acquisition unit and the behavioral information acquired by the second acquisition unit, and a presentation unit that presents behaviors recorded in the behavioral goal that correspond to the level of difficulty based on the degree of deviation acquired by the third acquisition unit and the correspondence information stored in the memory unit. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] International Publication No. 2019 / 142293 etc. [Patent Document 2] JP 2023-74128 A [Patent Document 3] JP 2023-91198 A Summary of the Invention [Problem to be solved by the invention]

[0007] However, in the prior art described in any of the above patent documents, the scope of the patient's medical information (recipients of the information) is often determined primarily by the doctor, and the decision on the scope of the information provided does not involve the will of the patient, whose medical or health condition is indicated by the medical information to be provided. This is not desirable in today's information society, where protection of personal information is required.

[0008] The present invention has been made in consideration of the above-mentioned problems, and one example of the objective of the present invention is to provide a medical information provision control device and a medical information provision control method that are capable of appropriately controlling the provision of medical information based on the wishes of a patient whose medical condition, etc. is indicated by the medical information, a terminal device to be used by the patient, and a program for the medical information provision control device. [Means for solving the problem]

[0009] In order to solve the above problem, the invention described in claim 1 comprises a first acquisition means such as an interface that acquires medical information of a source provided by the source, a second acquisition means such as a processing unit that acquires destination designation information indicating a destination other than the source to which the acquired medical information should be provided and designated by the source, a restriction means such as a shared control unit that restricts, based on the acquired destination designation information, destination-designated medical information, which is the medical information of the source that designates the destination indicated by the destination designation information, from being provided to anyone other than the destination indicated by the destination designation information, and a permission means such as a shared control unit that permits, based on the acquired destination designation information, the destination-designated medical information to be provided to the destination indicated by the destination designation information.

[0010] In order to solve the above problem, the invention described in claim 9 is a terminal device that can be connected to the medical information provision control device described in claim 1 or claim 2 and is used by the provider, and is equipped with a receiving means such as an operation unit that receives input of the medical information and the destination designation information, and a transmitting means such as an interface that transmits each of the accepted medical information and destination designation information to the medical information provision control device.

[0011] In order to solve the above problem, the invention described in claim 10 is a medical information provision control method executed in a medical information provision control device having a first acquisition means such as an interface, a second acquisition means such as a processing unit, a restriction means such as a shared control unit, and a permission means such as a shared control unit, and includes a first acquisition step of acquiring medical information of a source provided by the source using the first acquisition means, a second acquisition step of acquiring destination designation information indicating a destination other than the source to which the acquired medical information should be provided and designated by the source using the second acquisition means, a restriction step of restricting, based on the acquired destination designation information, destination-designated medical information, which is the medical information of the source that designates the destination indicated by the destination designation information, from being provided to a person other than the destination indicated by the destination designation information, by the restriction means, and a permission step of permitting, based on the acquired destination designation information, by the permission means, the designated destination medical information to be provided to the destination indicated by the destination designation information.

[0012] In order to solve the above problem, the invention described in claim 11 causes a computer included in a medical information provision control device to function as a first acquisition means for acquiring medical information of a source provided by the source, a second acquisition means for acquiring destination designation information indicating a destination other than the source to which the acquired medical information should be provided and designated by the source, a restriction means for restricting, based on the acquired destination designation information, destination-designated medical information, which is the medical information of the source that designates the destination indicated by the destination designation information, from being provided to a person other than the destination indicated by the destination designation information, and a permission means for permitting, based on the acquired destination designation information, the destination-designated medical information to be provided to the destination indicated by the destination designation information.

[0013] According to the invention described in claim 1 or any one of claims 9 to 11, based on the designated recipient information, the provision of the designated recipient medical information to persons other than the recipient to whom the designated recipient medical information is to be provided is restricted, and the provision of the designated recipient medical information to the recipient to whom the designated recipient medical information is to be provided is permitted, so that the provision of the medical information can be appropriately controlled based on the wishes of the provider.

[0014] In order to solve the above problem, the invention described in claim 2 is the medical information provision control device described in claim 1, further comprising a recording means such as a recording unit that records the destination designation information in association with the provider that designated the destination, and an update permission means such as a shared control unit that allows the recorded destination designation information to be updated by the provider that designated the destination indicated by the destination designation information, wherein the restriction means is configured to restrict the provision of the destination-designated medical information to a person not indicated by the recorded destination designation information, and the permission means is configured to permit the provision of the destination-designated medical information to the destination indicated by the recorded destination designation information.

[0015] According to the invention described in claim 2, in addition to the function of the invention described in claim 1, the provision of the designated recipient medical information to a person not specified by the designated recipient information updated by the provider is restricted, and the provision of the designated recipient medical information to a recipient specified by the designated recipient information is permitted. Therefore, the provision of the designated recipient medical information can be reliably controlled based on the provider's intention.

[0016] In order to solve the above problem, the invention described in claim 3 is a medical information provision control device described in claim 1 or claim 2, wherein the destination-designated medical information is any one of blood pressure information indicating the blood pressure of the source of the destination-designated medical information, heart rate information indicating the heart rate of the source, medication history information indicating the drug administration history of the source, health condition document information indicating the health condition of the source, or health condition image information indicating the health condition.

[0017] According to the invention described in claim 3, in addition to the effects of the invention described in claim 1 or 2, the designated recipient medical information is any one of blood pressure information, heart rate information, medication history information, health status document information, and health status image information, so that the provision of the required designated recipient medical information can be reliably controlled.

[0018] In order to solve the above problem, the invention described in claim 4 is a medical information provision control device described in claim 1 or claim 2, wherein the restriction means is configured to prohibit the destination-designated medical information from being provided to the person based on the acquired destination-designated information.

[0019] According to the invention described in claim 4, in addition to the effects of the invention described in claim 1 or 2, the designated recipient medical information is prohibited from being provided to undesired persons, thereby reliably preventing the designated recipient medical information from being provided to such persons.

[0020] In order to solve the above problem, the invention described in claim 5 is a medical information provision control device described in claim 1 or claim 2, wherein the destination designation information includes provision timing designation information that designates the timing at which the destination-designated medical information is to be provided to the destination indicated by the destination designation information, and the permission means is configured to permit the destination-designated medical information to be provided to the destination indicated by the destination designation information at the timing indicated by the provision timing designation information based on the acquired destination designation information.

[0021] According to the invention described in claim 5, in addition to the effects of the invention described in claim 1 or claim 2, the provision of recipient-specified medical information is permitted at the timing indicated by the provision timing designation information, so that the provision of recipient-specified medical information can be controlled at the timing desired by the provider.

[0022] In order to solve the above problem, the invention described in claim 6 is a medical information provision control device described in claim 1 or claim 2, in which, when the destination includes the doctor in charge of the source, the permission means is configured to always permit the provision of the destination-designated medical information, which has the doctor in charge as the designated destination, to the doctor in charge.

[0023] According to the invention described in claim 6, in addition to the effects of the invention described in claim 1 or claim 2, when the doctor in charge at the source is included in the recipients, the provision of designated recipient medical information with the designated doctor in charge as the designated recipient to the designated doctor is always permitted, thereby promoting the provision of necessary medical information to the doctor in charge.

[0024] In order to solve the above problem, the invention described in claim 7 is configured in the medical information provision control device described in claim 1 or claim 2 such that the destination specified by the destination designation information varies depending on the medical information items constituting the destination-designated medical information to which the destination is designated by the destination designation information.

[0025] According to the invention as recited in claim 7, in addition to the effects of the invention as recited in claim 1 or 2, the destination designated by the destination designation information differs depending on the medical information items constituting the destination-designated medical information for which the destination is designated by the destination designation information, so that the destination can be precisely designated according to the medical information item and the provision of the destination can be controlled.

[0026] In order to solve the above problem, the invention described in claim 8 is configured in the medical information provision control device described in claim 1 or claim 2, such that the destination specified by the destination designation information includes the pharmacist or pharmacy in charge of the provider who specified the destination by the destination designation information.

[0027] According to the invention described in claim 8, in addition to the effects of the invention described in claim 1 or claim 2, the recipient designated by the recipient designation information includes the pharmacist or pharmacy responsible for the provider, so that the recipient-designated medical information can be appropriately shared between the pharmacist or pharmacy. Effect of the Invention

[0028] According to the present invention, based on the recipient designation information, the provision of the designated medical information to persons other than the recipient to whom the designated medical information is to be provided is restricted, and the provision of the designated medical information to the recipient to whom the information is to be provided is permitted.

[0029] Therefore, the provision of the medical information can be appropriately controlled based on the provider's wishes. [Brief description of the drawings]

[0030] [Figure 1] 1 is a block diagram showing a configuration of a medical data sharing system according to an embodiment. [Diagram 2]1A and 1B are block diagrams showing the configuration of a medical data sharing server and the like that constitute the medical data sharing system of an embodiment, where (a) is a block diagram showing the configuration, (b) is a diagram illustrating an example of the contents of a medical database of an embodiment, and (c) is a diagram illustrating an example of the contents of a shared control database of an embodiment. [Diagram 3] 2 is a block diagram showing a configuration of a terminal device constituting the medical data sharing system of the embodiment. FIG. [Figure 4] 10 is a flowchart illustrating a medical data sharing control process according to an embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0031] Next, an embodiment of the present invention will be specifically described with reference to Figs. 1 to 4. The embodiment described below is an embodiment in which the present invention is applied to a medical data sharing system that controls the manner of sharing when a patient's medical data is shared with a person other than the patient (i.e., the medical data is provided to the patient). Fig. 1 is a block diagram showing the configuration of the medical data sharing system of the embodiment, and Fig. 2 is a block diagram showing the configuration of a medical data sharing server and the like that constitute the medical data sharing system. Fig. 3 is a block diagram showing the configuration of a terminal device that constitutes the medical data sharing system, and Fig. 4 is a flowchart showing the medical data sharing control process of the embodiment. At this time, specific examples of the medical data include blood pressure data indicating the patient's blood pressure and heart rate data indicating the patient's heart rate. The above medical data corresponds to an example of the "medical information" of the present invention.

[0032] As shown in FIG. 1, the medical data sharing system SS of the embodiment is composed of the patient terminal PT of the embodiment, the family terminal FT of the embodiment, the doctor terminal DT of the embodiment, the third party terminal TT of the embodiment, the medical data sharing server S of the embodiment, and a network NW such as the Internet. At this time, the patient terminal PT is a terminal device realized by a smartphone or the like used by the patient P, and the family terminal FT is a terminal device realized by a smartphone or the like used by a family member F such as the wife or child of the patient P. The doctor terminal DT is a terminal device realized by a personal computer or the like used by, for example, a family doctor DR in charge of health management of the patient P, and the third party terminal TT is a terminal device realized by a smartphone or the like used by a third party TP other than the patient P, the family F, and the doctor DR. Furthermore, the network NW is a network such as the Internet that connects the medical data sharing server S to the patient terminal PT, the family terminal FT, the doctor terminal DT, and the third party terminal TT so that data can be exchanged.

[0033] Here, in the case of the medical data sharing system SS illustrated in FIG. 1, the medical data of the patient P inputted by the patient P in the patient terminal PT can be shared between the family F and the doctor DR who the patient P approves of the sharing, via the family terminal FT and the doctor terminal DT. In this case, the patient P, his family F, and the doctor DR constitute one sharing range A in which the medical data of the patient P is shared. On the other hand, the third party TP is a person who does not enter the sharing range A (i.e., a person who does not approve the patient P to enter the sharing range A), and is a person who corresponds to a stranger from the perspective of the patient P, his family F, and the doctor DR, for example. In this case, there are usually a plurality of third parties TP. Also, there are usually a plurality of patients P, and therefore the above-mentioned sharing range A also exists in correspondence with each of the patients P, and exists in the same number as the number of the patients P. Note that FIG. 1 illustrates a case in which there is one patient P (patient terminal PT) and one third party TP (third party terminal TT).

[0034] In the above configuration, as shown in FIG. 2(a), the medical data sharing server S is composed of a processing unit 1 consisting of a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), etc., a recording unit 2 consisting of a HDD (Hard Disc Drive) or an SSD (Solid State Drive), etc., an interface 3, an operation unit 4 consisting of a keyboard and a mouse or a touch panel, etc., and a display 5 consisting of a liquid crystal display, etc. The processing unit 1 is also composed of a sharing control unit 1A. In this case, the sharing control unit 1A may be realized by a hardware logic circuit constituting the processing unit 1, or may be realized by software by the processing unit 1 reading and executing a program corresponding to the medical data sharing control process of the embodiment described later and pre-recorded in the recording unit 2, for example.

[0035] Next, the recording unit 2 non-volatilely records the medical database MD of the embodiment and the shared control database EC of the embodiment. The medical database MD and the shared control database EC will be described in detail later. On the other hand, the interface 3 controls the exchange of data between the patient terminal PT, the family terminal FT, the doctor terminal DT, or the third party terminal TT and the medical data shared server S via the network NW under the control of the processing unit 1. Also, the operation unit 4 generates an operation signal corresponding to an operation performed on the operation unit 4 by, for example, an administrator who manages the medical data shared server S, and outputs it to the processing unit 1. As a result, the processing unit 1 and the shared control unit 1A execute the medical data shared control process of the embodiment as the medical data shared server S described later based on the operation signal and various data acquired from the patient terminal PT, the family terminal FT, the doctor terminal DT, or the third party terminal TT via the interface 3. At this time, the information to be presented to the administrator is presented, for example, by being displayed on the display 5 under the control of the processing unit 1. The interface 3 corresponds to an example of the "first acquisition means" of the present invention, the processing unit 1 corresponds to an example of the "second acquisition means" of the present invention, the shared control unit 1A corresponds to an example of the "restriction means" of the present invention, an example of the "permission means" and an example of the "update permission means" of the present invention, and the recording unit 2 corresponds to an example of the "recording means" of the present invention.

[0036] Next, the medical database MD and the shared control database EC will each be specifically described.

[0037] First, in the medical database MD, as illustrated in FIG. 2(b), medical data of a patient P associated with a patient ID for identifying each patient P from other patients is stored as medical data D1, medical data D2, medical data D3, medical data D4, ... for each patient P. In the following description, when items common to the medical data D1, medical data D2, medical data D3, and medical data D4 are described, these are collectively referred to as "medical data D". In addition, in the medical data D corresponding to one patient P, blood pressure data, heart rate data, medication data (not shown), etc. of the patient P are stored together with date and time data (indicated as "date" in FIG. 2(b)) indicating the date and time when they were stored in the medical database MD, and in a manner that can be distinguished from the medical data D of other patients P.

[0038] On the other hand, in the sharing control database EC, as shown in FIG. 2(c), data of the sharing control list of the patient P associated with the patient ID is stored as a sharing control list L1, a sharing control list L2, a sharing control list L3, a sharing control list L4, ... for each patient P. In the following description, when items common to the sharing control list L1, the sharing control list L2, the sharing control list L3, and the sharing control list L4 are described, they are collectively referred to as the "sharing control list L". In addition, in the sharing control list L corresponding to one patient P, a sharing approver ID for identifying a person other than the patient P who shares (provides) the medical data D of the patient P approved by the patient P in the medical data sharing control process of the embodiment is stored together with date and time data (shown as "approval date and time" in FIG. 2(c)) indicating the date and time when the shared approver IDs are stored in the sharing control database EC. In this case, in the case of the sharing range A shown in FIG. 1, the people identified by the sharing product IDs are the family F and the doctor DR.

[0039] On the other hand, the patient terminal PT, the family terminal FT, the doctor terminal DT, and the third party terminal TT have the same hardware configuration, and as shown in FIG. 3, the patient terminal PT is a representative of them, and is composed of a processing unit 10 consisting of a CPU, a ROM, a RAM, etc., a recording unit 11 consisting of an HDD or SSD, an interface 12, an operation unit 13 consisting of a keyboard and a mouse or a touch panel, etc., and a display 14 consisting of a liquid crystal display, etc. The recording unit 11 non-volatilely records various data and programs required to execute the medical data sharing control process of the embodiment as the patient terminal PT, the family terminal FT, the doctor terminal DT, or the third party terminal TT. On the other hand, the interface 12 controls the exchange of data with the medical data sharing server S via the network NW under the control of the processing unit 10. The operation unit 13 generates an operation signal corresponding to an operation performed on the operation unit 13 of the patient terminal PT by, for example, a patient P, and outputs the operation signal to the processing unit 10. As a result, the processing unit 10 executes a medical data sharing control process of an embodiment described below as the patient terminal PT, family terminal FT, doctor terminal DT or third party terminal TT based on the operation signal and various data acquired via the interface 12. At this time, information to be presented to the patient P, family member F, doctor DR or third party TP is presented, for example, by being displayed on a display 14 under the control of the processing unit 10. The interface 12 of the patient terminal PT corresponds to an example of the "transmission means" of the present invention, and the operation unit 13 corresponds to an example of the "reception means" of the present invention.

[0040] Next, the medical data sharing control process of the embodiment executed in the medical data sharing system SS having the above-mentioned configuration and operation will be described mainly with reference to Fig. 4. Fig. 4 is a flowchart specifically showing the medical data sharing control process of the embodiment as the medical data sharing server S (hereinafter simply referred to as "medical data sharing control process as the medical data sharing server S") among the medical data sharing control process.

[0041] That is, the medical data sharing control process of the embodiment is started, for example, when a power switch (not shown) of the medical data sharing server S is turned on. Then, as shown in the corresponding flowchart in Fig. 4, when the medical data sharing control process as the medical data sharing server S is started, the processing unit 1 of the medical data sharing server S first judges whether or not a medical data update request for updating the medical data D (see Fig. 2(b)) of a patient P has been transmitted from any one of the patient terminals PT together with a patient ID for identifying the patient P and the contents of the update (for example, the latest blood pressure data and heart rate data of the patient P) (step S1). At this time, the medical data sharing control process as the patient terminal PT has been started, for example, when a power switch (not shown) of the patient terminal PT is turned on, and when the contents of the update of the medical data D are input using the operation unit 13, the input contents are transmitted as the medical data update request together with the patient ID by the processing unit 10 of the patient terminal PT. In the determination of step S1, if a medical data update request or the like is not transmitted from any of the patient terminals PT (step S1: NO), the processing unit 1 proceeds to step S3, which will be described later. On the other hand, in the determination of step S1, if the medical data update request and the contents of the update are transmitted from any of the patient terminals PT (step S1: YES), the processing unit 1 updates the medical data D recorded in the recording unit 2 corresponding to the patient P based on the patient ID and the contents of the update (step S2). As a result, the medical data D is updated based on the contents of the update.

[0042] Next, the processing unit 1 judges whether or not a sharing control list update request for updating the sharing control list L (see FIG. 2(c)) of the patient P has been transmitted from any of the patient terminals PT together with the patient ID for identifying the patient P and the contents of the update (for example, adding a new family member F to the sharing range A for the patient P, or excluding a person who was previously in the sharing range A from the sharing range A) (step S3). At this time, when the contents of the update of the sharing control list L are inputted in the patient terminal PT using the operation unit 13, the inputted contents are transmitted as the sharing control list update request by the processing unit 10 of the patient terminal PT together with the patient ID. If it is judged in step S3 that a sharing control list update request or the like has not been transmitted from any of the patient terminals PT (step S3: NO), the processing unit 1 proceeds to step S5 described later. On the other hand, in the judgment of step S3, if a sharing control list update request and the contents of the update have been transmitted from any of the patient terminals PT (step S3: YES), the processing unit 1 updates the sharing control list L recorded in the recording unit 2 corresponding to that patient P based on that patient ID and the contents of the update (step S4). As a result, the sharing control list L is updated based on the above-mentioned update contents.

[0043] Next, the processing unit 1 judges whether or not a sharing request for requesting sharing (provision) of the medical data D of the patient P has been transmitted from any of the family terminals FT, doctor terminals DT, and third party terminals TT other than the patient terminal PT (hereinafter, when describing matters common to these, they will be simply referred to as "family terminals FT, etc.") along with identification information for identifying the family member F, doctor DR, or third party TP from others and the contents of the sharing request (for example, which medical data D of the patient P is to be shared, etc.) (step S5). At this time, in the family terminal FT, etc., the medical data sharing control process as the family terminal FT, etc. is started from the timing when the power switch (not shown) of the family terminal FT, etc. is turned on, and when the contents of the sharing request for the medical data D are input using the operation unit 13, the input contents are transmitted as the sharing request by the processing unit 10 of the family terminal FT, etc. together with the identification information. If no sharing request is transmitted from any of the family terminals FT, etc. in the judgment of step S5 (step S5: NO), the processing unit 1 proceeds to step S10 described later. On the other hand, if it is determined in step S5 that a sharing request and the contents of the sharing request are sent from one of the family terminals FT, etc. (step S5: YES), the sharing control unit 1A of the processing unit 1 refers to the sharing control list L (see Figure 2(c)) of the patient P with whom the medical data D is to be shared in the sharing control database EC recorded in the recording unit 2 (step S6), and determines whether the identification information included in the sharing request received in step S5 is included as a sharing approver ID in the sharing control list L referenced in step S6 (i.e., whether the person using the family terminal FT, etc. who sent the sharing request has been approved by the patient P as the person with whom the medical data D will be shared) (step S7).In the judgment of step S7, if the identification information included in the sharing request received in step S5 is not included as a sharing approver ID in the sharing control list L referred to in step S6 (step S7: NO), the sharing control unit 1A judges that the person who sent the sharing request is a third party TP (a third party TP using a third party terminal TT) who is not included in the sharing range A illustrated in FIG. 1 for the patient P, and determines that the sharing (provision) of the medical data D of the patient P should be rejected, and transmits warning data to the third party terminal TT that has sent the sharing request, indicating that the sharing is rejected, via the interface 3 and the network NW (step S9). As a result, the processing unit 10 of the third party terminal TT to which the warning data has been sent performs a warning display, etc., indicating that the sharing is not possible, using the display 14 of the third party terminal TT, etc. Thereafter, the processing unit 1 and the sharing control unit 1A proceed to step S10, which will be described later.

[0044] On the other hand, in the judgment of step S7, if the identification information included in the sharing request received in step S5 is included as a sharing approver ID in the sharing control list L referred to in step S6 (step S7: YES), the sharing control unit 1A judges that the person who sent the sharing request is a family member F or a doctor DR within the sharing range A of the patient P illustrated in Fig. 1, and determines that the sharing (provision) of the medical data D of the patient P should be permitted, and transmits the medical data D corresponding to the sharing request to the family terminal FT or doctor terminal DT that sent the sharing request via the interface 3 and the network NW (step S9). As a result, the processing unit 10 of the family terminal FT or doctor terminal DT to which the medical data D was transmitted presents the medical data D to the family member F or doctor DR using the display 5 of the family terminal FT or doctor terminal DT, etc.

[0045] Thereafter, the processing unit 1 judges whether or not to terminate the medical data sharing control process of the embodiment, for example, when an operation to terminate the use of the medical data sharing server S is executed on the operation unit 4 (step S10). If the medical data sharing control process is to be terminated in the judgment of step S10 (step S10: YES), the processing unit 1 terminates the medical data sharing control process of the embodiment. On the other hand, if the medical data sharing control process of the embodiment is to be continued in the judgment of step S10 (step S10: NO), the processing unit 1 returns to the above step S1 and repeats the series of processes described above.

[0046] As described above, according to the configuration and operation of the medical data sharing system SS of the embodiment, based on the sharing control data L, the sharing (provision) of the medical data D to persons other than those to whom the medical data D should be shared (provided) is restricted (see step S9 in Figure 4), while the sharing (provision) of the medical data D to those to whom the medical data D should be shared (provided) is permitted (see step S8 in Figure 4), so that the sharing (provision) of the medical data D can be appropriately controlled based on the wishes of the patient P.

[0047] In addition, the sharing (provision) of medical data D to persons not indicated by the sharing control data L (see step S4 in Figure 4) updated by patient P is restricted (see step S9 in Figure 4), and the sharing (provision) of medical data D to persons indicated by the sharing control data L is permitted (see step S8 in Figure 4), so that the sharing (provision) of the medical data D can be reliably controlled based on the wishes of patient P.

[0048] Furthermore, since the medical data D of patient P is prohibited from being shared (provided) to an unwanted third party TP (see step S9 in Figure 4), it is possible to reliably prevent the medical data D from being shared (provided) to the third party TP.

[0049] Furthermore, if the medical data D includes, for example, blood pressure data or heart rate data, as well as medication data, and either document data or image data indicating the health condition of the patient P, the sharing (provision) of the necessary medical data D can be reliably controlled.

[0050] In the above-described embodiment of the medical data sharing system S, the sharing range A includes the family F (family terminal FT and doctor DR (doctor terminal DT). However, the most important configuration (feature) of the present invention is that the patient P chooses, of his / her own volition, those who will be included in the sharing range A and approve the sharing (provision) of the patient P's medical data D (see steps S3 and S4 in Figure 4). Therefore, those who are included in the sharing range A are not limited to the family F and the doctor DR, but other people (for example, a third party TP who has a specific relationship with the patient P) may also be included in the sharing range A, while there may also be cases where the patient P deliberately excludes the family F and the doctor DR from the sharing range A.

[0051] [Variations] Next, a modified embodiment of the present invention will be described.

[0052] (I) First Variation First, as a first modified embodiment, provision timing designation data that designates the timing at which the medical data D should be shared (provided) to the person indicated by the sharing control data L may be included in the sharing control data L. In this case, the sharing control unit 1A may permit the medical data D to be shared (provided) to the person indicated by the sharing control data L at the timing indicated by the provision timing designation data, based on the sharing control data L. In the case of this first modified embodiment, since the medical data D is permitted to be shared (provided) at the timing indicated by the provision timing designation data, it is possible to control the sharing (provision) of the medical data D at the timing desired by the patient P.

[0053] (II) Second Variation Next, as a second modified embodiment, when the doctor DR in charge of the patient P is included in those indicated by the sharing control data L, the sharing control unit 1A may be configured to always permit sharing (provision) of the medical data D to the doctor DR, regardless of the content of the medical data D. In the case of this second modified embodiment, when the doctor DR in charge of the patient P is included in the sharing control list L, sharing (provision) of the medical data D to the doctor DR is always permitted, so that it is possible to promote sharing (provision) of the necessary medical data D to the doctor DR.

[0054] (III) Third Variation Next, as a third modified embodiment, the person designated by the sharing control list L may differ depending on the medical information item constituting the medical data D corresponding to the sharing control list L. In the case of this third modified embodiment, the sharing (provision) destination can be specified in detail depending on the medical information item, and the sharing (provision) can be controlled.

[0055] (IV) Fourth Variation Next, as a fourth modified embodiment, the persons designated by the shared control list L may include the pharmacist or pharmacy in charge of the patient P corresponding to the shared control list L, or the caregiver or care facility in charge of the patient P. In the case of this fourth modified embodiment, medical data D (more specifically, for example, the contents of a so-called medicine notebook) can be appropriately shared between the pharmacist, the pharmacy, the caregiver, or the care facility.

[0056] (V) Fifth Variation Finally, as a fifth variant, the above program corresponding to the flowchart shown in FIG. 4 can be recorded on a recording medium such as an optical disk or a hard disk, or obtained via a network such as the Internet, and then read out and executed by a general-purpose microcomputer or the like, thereby causing the microcomputer or the like to function as the processing unit 1 or shared control unit 1A of the embodiment. [Industrial Applicability]

[0057] As described above, the present invention can be used in the field of medical data sharing (provision) control devices, and when applied in particular to cases in which medical data D of a patient P is shared (provided) with a person other than the patient P in the medical field, particularly significant effects can be obtained. [Explanation of symbols]

[0058] 1, 10 Processing section 1A shared control section 2, 11 Recording section 3, 12 Interface 4, 13 Operation section 5, 14 Display A. Shared Scope S Medical data sharing server P patient F family SS Medical Data Sharing System PT Patient Terminal FT Family Terminal DT Doctor's Terminal TT Third Party Terminal TP Third party NW Network DR Doctor TR third party MD Medical Database EC Shared Control Database D1, D2, D3, D4 Medical Data L1, L2, L3, L4 Shared Control List

Claims

1. A first acquisition means for acquiring medical information of a provider provided by the provider; a second acquiring means for acquiring destination designation information indicating a destination other than the source to which the acquired medical information should be provided and designated by the source; a limiting means for limiting, based on the acquired destination designation information, the designated destination medical information, which is the medical information of the provider that designates the destination designated by the destination designation information, from being provided to a person other than the destination designated by the destination designation information; a permission means for permitting the designated-destination medical information to be provided to the destination indicated by the designated destination information based on the acquired designated destination information; A medical information provision control device comprising:

2. 2. The medical information provision control device according to claim 1, a recording means for recording the destination designation information in association with the source that designates the destination; an update permission means for permitting the recorded destination designation information to be updated by the provider that designates the destination indicated by the destination designation information; Further comprising: The restriction means restricts the provision of the designated recipient medical information to the person not designated by the recorded designated recipient information, The medical information provision control device, wherein the permission means permits provision of the designated-destination medical information to the destination indicated by the recorded designated-destination information.

3. 3. The medical information provision control device according to claim 1, A medical information provision control device characterized in that the recipient-designated medical information is any one of blood pressure information indicating the blood pressure of the source of the recipient-designated medical information, heart rate information indicating the heart rate of the source, medication history information indicating the source's medication history, health status document information indicating the source's health status, or health status image information indicating the health status.

4. 3. The medical information provision control device according to claim 1, The medical information provision control device, wherein the restriction means prohibits the designated recipient medical information from being provided to the person based on the acquired designated recipient information.

5. 3. The medical information provision control device according to claim 1, The destination designation information includes delivery timing designation information that designates a timing when the destination-designated medical information is to be provided to the destination designated by the destination designation information, The medical information provision control device is characterized in that the permission means permits the destination-designated medical information to be provided to the destination indicated by the destination designation information at the timing indicated by the provision timing designation information based on the acquired destination designation information.

6. 3. The medical information provision control device according to claim 1, A medical information provision control device characterized in that, when the destination includes the doctor in charge of the source, the permission means always permits the provision of the destination-designated medical information, which designates the doctor in charge as the designated destination, to the doctor in charge.

7. 3. The medical information provision control device according to claim 1, A medical information provision control device characterized in that the destination specified by the destination designation information differs depending on the medical information items that constitute the destination designated medical information for which the destination is designated by the destination designation information.

8. 3. The medical information provision control device according to claim 1, 11. A medical information provision control device, comprising: a destination designated by the destination designation information, the destination including a responsible pharmacist or responsible pharmacy of the source who designated the destination by the destination designation information.

9. A terminal device connectable to the medical information provision control device according to claim 1 or 2 and used by the medical information provider, a receiving means for receiving input of the medical information and the recipient designation information; a transmission means for transmitting the received medical information and the destination designation information to the medical information provision control device; A terminal device comprising:

10. A medical information provision control method executed in a medical information provision control device including a first acquisition means, a second acquisition means, a restriction means, and a permission means, a first acquisition step of acquiring medical information of a provider by the first acquisition means; a second acquisition step of acquiring, by the second acquisition means, destination designation information indicating a destination other than the source to which the acquired medical information should be provided and designated by the source; a limiting step of limiting, based on the acquired destination designation information, the designated destination medical information, which is the medical information of the provider that designates the destination designated by the destination designation information, from being provided to a person other than the destination designated by the destination designation information by the limiting means; a permission step of allowing the permission means to provide the designated-destination medical information to the destination indicated by the designated-destination information based on the acquired designated-destination information; A medical information provision control method comprising:

11. A computer included in a medical information provision control device, A first acquisition means for acquiring medical information of a provider provided by the provider; a second acquiring means for acquiring destination designation information indicating a destination other than the source to which the acquired medical information should be provided and designated by the source; A limiting means for limiting, based on the acquired destination designation information, the designated destination medical information, which is the medical information of the provider that designates the destination indicated by the designated destination information, from being provided to a person other than the destination indicated by the designated destination information; and a permission means for permitting the designated-recipient medical information to be provided to the recipient indicated by the designated-recipient information based on the acquired designated-recipient information; A medical information provision control program characterized by causing the program to function as follows.

Images