Healthcare information management system

Abstract

To provide a healthcare-related information management system for providing incentives to individuals to urge them to disclose healthcare-related information by referring to a provision history, the history of providing incentives for every individual as to whether or not to allow disclosure of the healthcare-related information of the individual.SOLUTION: A healthcare-related information management system includes a healthcare-related information storage unit for storing and managing healthcare-related information relating to individuals, an access control unit for controlling disclosure of the healthcare-related information stored in the healthcare-related information storage unit to third parties via a network, an incentive management unit for providing incentives as to whether or not to allow disclosure of the healthcare-related information of individuals, to the individuals to urge them to disclose the healthcare related information by referring to a provision history of a provision history holding unit described below, and the provision history holding unit for holding the provision history, the history of providing the incentives for every individual.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a health care related information management system for accumulating and managing health care related information which is information related to an individual's health care.

Background Art

[0002] Recently, systems and services that enable sharing of medical information of patients and the like among multiple medical institutions have begun to be considered.

[0003] As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problems of avoiding duplication of test items in test data in multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system, and various test results of patients are stored. Then, the medical information sharing server displays the corresponding electronic medical record according to the instructions of medical institution terminals such as medical facility terminals of medical institutions and health examination center terminals, and when conducting a clinical examination, searches for and displays whether the results of test items identical to the test items of the clinical examination scheduled to be conducted are described in the test result DB. An information system is disclosed. In addition, a medical information providing system is provided in the medical information sharing server, and when the medical information providing system sends information to the information recipient, it bills for the consideration of the information, and based on the received consideration, the medical information providing system formulates the reward that can be provided to the user and discloses providing the reward to the user.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the above-described invention, only the point of formulating the rewards that the medical information providing system can offer to users and providing the rewards to users is disclosed. Regarding a health care-related information management system such as the present invention, there is a problem that it is not specified up to the point of having a function of holding a provision history which is a history of providing incentives for each individual, or / and a function of providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history regarding whether or not to disclose health care-related information about the individual.

Means for Solving the Problems

[0006] Based on the above problems, the present invention aims to provide a health care-related information management system that provides an incentive to an individual in order to promote the disclosure of health care-related information about the individual by referring to a provision history which is a history of providing incentives for each individual regarding whether or not to disclose health care-related information about the individual.

[0007] Specifically, the present invention provides a health care-related information management system having a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose health care-related information about the individual, and a provision history holding unit for holding a provision history which is a history of providing incentives for each individual.

[0008] In addition to the above features, the present invention provides a health care-related information management system having an incentive type information holding unit for holding incentive type information which is information indicating types of a plurality of incentives, and the incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit.

[0009] In addition to the above features, the present invention also provides an end request reception unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health and medical related information, from an individual who has stored health and medical related information in the health and medical related information storage unit; an end condition holding unit that holds an end condition, which is a condition for determining whether to end based on information about the individual who made the end request when the end request is received; a determination rule holding unit that holds a determination rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request, the held end condition; an end determination unit that determines whether to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received; and an end control unit that controls the access control unit to end the disclosure of the health and medical related information of the individual when the determination result in the end determination unit is a determination result that it should end, in a health and medical related information management system.

[0010] In addition to the above features, the present invention also provides a health and medical related information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] In addition to the above features, the present invention also provides a health and medical related information management system having a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

[0012] In addition to the above features, the present invention also provides a health and medical related information management system having an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive when consent information is acquired by the consent information acquisition unit.

[0013] In addition to the above features, the present invention provides a health care-related information management system having a disclosure permission information holding unit that holds disclosure permission information indicating whether an individual permits the disclosure of his or her own health care-related information to a third party.

[0014] In addition to the above features, the present invention provides a health care-related information management system having a third-party identification information holding unit that holds third-party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0015] In addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission for disclosure and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a medical practitioner, the health care-related information stored in the health care-related information storage unit is made available for viewing by the medical practitioner.

[0016] In addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission for disclosure and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a non-medical practitioner, a part (including all) of the health care-related information stored in the health care-related information storage unit or health care-related information anonymized by a predetermined anonymization method is made available for viewing by the non-medical practitioner.

[0017] In addition to the above features, the present invention provides a health care-related information management system in which the anonymization method is performed by any one of at least k (where k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0018] In addition to the above features, the present invention provides a health care-related information management system in which the health care-related information storage unit stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical examination forms, data of health promotion apps, and conversation data of interactive health promotion SNSs related to an individual.

[0019] In addition to the above features, the present invention provides a health care-related information management system in which the incentive management unit provides an incentive including any one or more of providing minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books and other products, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (for example, health management apps or pedometer apps), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

[0020] In addition to the above features, the present invention provides a health care-related information management system in which medical staff includes at least one or more of physicians, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0021] In addition to the above features, the present invention provides a health care-related information management system in which non-medical professionals include at least one or more employees belonging to life insurance companies, casualty insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and independent administrative agencies.

[0022] Furthermore, for the above-described health care-related information management system, in order to implement them, a method executed by the CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner are provided.

[0023] Specifically, the present invention provides a method executed by the CPU in the health care-related information management system which is a computer, the method including: a health care-related information accumulation step for accumulating and managing health care-related information about an individual; an access control step for controlling disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; an incentive management step for providing an incentive to an individual in order to encourage disclosure of the health care-related information by referring to the provision history of the provision history retention step described later regarding whether or not to disclose the health care-related information about the individual; and a provision history retention step for retaining a provision history which is a history of providing an incentive to each individual.

[0024] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system that is a computer, the method including an incentive type information holding step of holding incentive type information that is information indicating a plurality of types of incentives, and the incentive management step provides a method of selecting and providing an incentive to be provided to an individual according to a provision history based on the incentive type information held in the incentive type information holding step.

[0025] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system that is a computer, the method including an end request reception step of receiving an end request that is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has accumulated health care-related information in the health care-related information accumulation step, an end condition holding step of holding an end condition that is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received, a determination rule holding step of holding a determination rule that is a rule for determining whether to end the disclosure of health care-related information based on information about the individual who made the end request, the held end condition, an end determination step of determining whether to end when the end request is received based on information about the individual, the held end condition, and the held determination rule, and an end control step in which an access control step controls to end the disclosure of the health care-related information of the individual when the determination result in the end determination step is a determination result that it should end.

[0026] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system that is a computer, the method including an access authentication processing step of performing authentication for accessing the incentive management step.

[0027] In addition, the present invention provides a method executed by a CPU in a health care-related information management system which is a computer. The method includes a consent information acquisition step of acquiring consent information which is information indicating acceptance of receiving an incentive by an incentive management step after being authenticated in an access authentication processing step.

[0028] In addition, the present invention provides a method executed by a CPU in a health care-related information management system which is a computer. The method includes an incentive provision processing step of performing an incentive provision process which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

[0029] In addition, the present invention provides a method executed by a CPU in a health care-related information management system which is a computer. The method includes a public permission / non-permission information retention step of retaining public permission / non-permission information indicating whether an individual permits the disclosure of his / her own health care-related information to a third party.

[0030] In addition, the present invention provides a method executed by a CPU in a health care-related information management system which is a computer. The method includes a third party identification information retention step of retaining third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0031] In addition, the present invention provides a method executed by a CPU in a health care-related information management system which is a computer. When the public permission / non-permission information retained in the public permission / non-permission information retention step indicates public permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner, the access control step allows the medical practitioner to view the health care-related information accumulated in the health care-related information accumulation step.

[0032] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system that is a computer. The access control step is such that when the public release permission / denial information held in the public release permission / denial information holding step indicates public release permission and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical professional, a part (including all) of the health care-related information accumulated in the health care-related information accumulation step or health care-related information anonymized by a predetermined anonymization method is made available for viewing by non-medical professionals.

[0033] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system that is a computer. The anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0034] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system that is a computer. The health care-related information accumulation step is a method of accumulating health care-related information including any one or more of electronic medical record information regarding an individual, various examination information, prescription information, medication history information, medication status information, vital information, information on a medical examination form, data of a health promotion application, and conversation data of an interactive health promotion SNS.

[0035] In addition, the present invention is a method executed by a CPU in a health care-related information management system that is a computer. The incentive management step provides an incentive including any one or more of the following: providing minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books and other products, providing passwords or IDs for information provision, providing items available on a network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on a network, providing specific software (e.g., health management apps or pedometer apps), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons, or cash.

[0036] In addition, the present invention is a method executed by a CPU in a health care-related information management system that is a computer. The medical staff includes at least one or more of the following: doctors, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0037] In addition, the present invention is a method executed by a CPU in a health care-related information management system that is a computer. The non-medical staff includes at least one or more of the following: employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies.

[0038] Specifically, the present invention provides an operation program of a health care related information management system that is readable and executable by a computer having: a health care related information storage step for storing and managing health care related information about an individual; an access control step for controlling disclosure of the health care related information stored in the health care related information storage step to a third party via a network; an incentive management step for providing an incentive to an individual to promote disclosure of the health care related information by referring to the provision history of the provision history holding step described below regarding whether or not to disclose the health care related information about the individual; and a provision history holding step for holding a provision history that is a history of providing incentives to each individual.

[0039] In addition, the present invention provides an operation program of a health care related information management system that is readable and executable by a computer having, in addition to the above features, an incentive type information holding step for holding incentive type information that is information indicating types of a plurality of incentives, and the incentive management step selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step.

[0040] In addition to the above features, the present invention also includes an end request receiving step for receiving an end request which is a request to stop or end the disclosure of already disclosed health and medical related information from an individual who has accumulated health and medical related information in the health and medical related information accumulation step; an end condition holding step for holding an end condition which is a condition for determining whether it is possible to end based on the information of the individual who made the end request when the end request is received; a judgment rule holding step for holding a judgment rule which is a rule for determining whether to end the disclosure of health and medical related information based on the information of the individual who made the end request and the held end condition; an end judgment step for judging whether to end based on the information of the individual, the held end condition, and the held judgment rule when the end request is received; and an end control step for controlling the access control step to end the disclosure of the health and medical related information of the individual when the judgment result in the end judgment step is that it should end. The present invention provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having the above components.

[0041] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having an access authentication processing step for performing authentication for accessing the incentive management step.

[0042] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having a consent information acquisition step for acquiring consent information which is information indicating acceptance of receiving an incentive by the incentive management step after being authenticated in the access authentication processing step.

[0043] In addition to the above features, the present invention also provides an operation program of a health care related information management system that is readable and executable on a computer having an incentive provision processing step for performing incentive provision processing, which is a process for providing an incentive when consent information is obtained in the consent information acquisition step.

[0044] In addition to the above features, the present invention also provides an operation program of a health care related information management system that is readable and executable on a computer having a public permission / non-permission information holding step for holding public permission / non-permission information indicating whether an individual permits the disclosure of his / her own health care related information to a third party.

[0045] In addition to the above features, the present invention also provides an operation program of a health care related information management system that is readable and executable on a computer having a third party identification information holding step for holding third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0046] In addition to the above features, the present invention also provides an operation program of a health care related information management system that is readable and executable on a computer, wherein the access control step allows a medical practitioner to view the health care related information accumulated in the health care related information accumulation step when the public permission / non-permission information held in the public permission / non-permission information holding step indicates public permission and the third party identification information held in the third party identification information holding step indicates that the third party is a medical practitioner.

[0047] In addition to the above features, in the present invention, in the access control step, when the approval / disapproval information held in the approval / disapproval information holding step indicates approval for disclosure and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical professional, a part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method is allowed to be viewed by the non-medical professional. The present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for the health care-related information management system.

[0048] In addition to the above features, in the present invention, the anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof. The present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for the health care-related information management system.

[0049] In addition to the above features, in the present invention, the health care-related information accumulation step accumulates health care-related information including any one or more pieces of information such as electronic medical record information regarding an individual, various examination information, prescription information, medication history information, medication status information, vital information, information on a medical questionnaire, data of a health promotion application, and conversation data of an interactive health promotion SNS. The present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for the health care-related information management system.

[0050] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable by a computer of a health care-related information management system, wherein the incentive management step includes providing at least one of incentives such as providing minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books and other goods, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (e.g., health management apps or pedometer apps), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

[0051] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable by a computer of a health care-related information management system, wherein the medical staff includes at least one or more of physicians, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aid responders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0052] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer including at least one or more employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies, for non-medical workers.

Advantages of the Invention

[0053] As described above, in the present invention, in order to promote the disclosure of health care-related information by referring to the provision history, which is a history of providing incentives for each individual regarding the disclosure permission of health care-related information about an individual, it is possible to provide a health care-related information management system that provides incentives to individuals.

Brief Description of the Drawings

[0054]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Figure 26

Figure 27

Figure 28

Figure 29

Figure 30

Figure 31

Figure 32

Figure 33

Figure 34

Figure 35

Figure 36

Figure 37

Figure 38

Figure 39

Figure 40

Figure 41

Figure 42

Figure 43

Figure 44

[0055] FIG. 1 is a diagram showing the hardware configuration applied to the present invention. The present invention is an invention that in principle utilizes an electronic computer, and can be realized by software, by hardware, or by the cooperation of software and hardware. The hardware that realizes all or part of each constituent element of the present invention is composed of a CPU, memory, bus, input / output devices, various peripheral devices, user interfaces, etc., which are the basic components of a computer. The various peripheral devices include storage devices, interfaces such as the Internet, Internet devices, displays, keyboards, mice, speakers, cameras, videos, TVs, various sensors for grasping production status in a laboratory or factory (flow sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipping quantity counters, packing quantity counters, foreign object inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human sensors, operator work status grasping devices (by video, ID, PC work volume, etc.)), CD devices, DVD devices, Blu-ray devices, USB memories, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, telephones, faxes, copiers, printing devices, movie editing devices, various sensor devices, etc. Also, this system does not necessarily have to be composed of a single housing, and may be composed of a plurality of housings connected by communication. Also, the communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, ultrasonic communication, and furthermore, part of it may be installed across national borders. Furthermore, each of the plurality of housings may be operated by a different entity, or may be operated by a single entity. Whether the operating entity of the system of the present invention is singular or plural does not matter. Also, in addition to this system, the invention can be configured as a system including terminals used by third parties, and further including terminals used by other third parties. Also, these terminals may be installed across national borders. Furthermore, in addition to this system and the above terminals, devices used for registering related information of third parties and related persons, and devices used for a database for recording registration contents may be provided. These may be provided in this system, or may be provided outside this system and configure this system so that these information can be utilized.

[0056] As shown in this figure, a computer is composed of a chipset, a CPU, non-volatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, a real-time clock, etc., which are configured on the motherboard. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), and for various devices incorporated such as cameras, microphones, speakers or headphones, displays, etc.), and various programs. Various programs and various data constituting the present invention are configured to execute various processes by efficiently using these hardware resources. <<Chipset>>

[0057] The "chipset" is a set of large-scale integrated circuits (LSIs) mounted on the motherboard of a computer, which integrates the communication function, that is, the bridge function, between the external bus of the CPU and the standard bus connecting memory and peripheral devices. There are cases of adopting a two-chipset configuration and a one-chipset configuration. The north bridge is provided on the side closer to the CPU and the main memory, and the south bridge is provided on the side farther away and closer to the interface with relatively low-speed external I / O.

[0058] (North Bridge) The north bridge includes a CPU interface, a memory controller, and a graphics interface. Most of the functions of a conventional north bridge may be borne by the CPU. The north bridge is connected to the memory slot of the main memory via a memory bus, and is connected to the graphics card slot of the graphics card via a high-speed graphics bus (AGP, PCI Express).

[0059] (South Bridge) The South Bridge is connected to the PCI interface (PCI slot) via the PCI bus and is responsible for I / O functions such as the ATA (SATA) interface, USB interface, Ethernet interface, and sound functions. Incorporating circuits that support PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are unable to achieve high-speed operation, would act as a hindrance to the speeding up of the chipset itself. Therefore, it may be separated from the South Bridge chip and assigned to another LSI called a Super I / O chip. A bus is used to connect the CPU (MPU) to peripheral devices and various control units. The bus is connected by the chipset. The memory bus used for connection to the main memory may adopt a channel structure instead in order to achieve high speed. As the bus, a serial bus or a parallel bus can be adopted. The parallel bus transfers the original data itself or a plurality of bits cut out from the original data as a single unit simultaneously through a plurality of communication paths, while the serial bus transfers data bit by bit. A dedicated line for the clock signal is provided in parallel with the data line to synchronize data demodulation on the receiving side. It is also used as a bus for connecting the CPU (chipset) to external devices, such as GPIB, IDE / (parallel) ATA, SCSI, and PCI. Since there are limitations in speeding up, in the improved version of PCI, PCI Express, and the improved version of parallel ATA, serial ATA, the data line may also be a serial bus.

[0060] ≪CPU≫

[0061] The CPU reads, interprets, and executes in sequence the instruction sequence called a program on the main memory, and outputs information consisting of signals onto the main memory as well. The CPU functions as the center for performing calculations within the computer. Note that the CPU is composed of a CPU core part that serves as the center of the calculation and its peripheral parts. Inside the CPU, there are registers, cache memory, an internal bus that connects the cache memory and the CPU core, a DMA controller, a timer, and an interface with a connection bus to the north bridge, etc. Note that multiple CPU cores may be provided in one CPU (chip). Also, in addition to the CPU, processing may be performed by a graphics interface (GPU) or an FPU. Note that the description in the embodiment is of a two-core type, but it is not limited to this. Also, a program can be built into the CPU.

[0062] ≪Non-volatile memory≫

[0063] (HDD)

[0064] The basic structure of a hard disk drive is composed of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can adopt SATA (ATA in the past). A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read sectors and transfer and write them to another hard disk drive. At this time, there is no access to the memory of the host CPU. Therefore, the load on the CPU can be increased without increasing it.

[0065] ≪Main memory≫

[0066] The CPU directly accesses and executes various programs on the main memory. The main memory is a volatile memory and DRAM is used. Programs on the main memory are expanded from the non-volatile memory to the main memory upon receiving the program startup instruction. Thereafter, the CPU executes the program according to various execution instructions and execution procedures within the program.

[0067] ≪Operating System (OS)≫

[0068] The operating system is used to manage the resources on the computer for applications to utilize, manage various device drivers, and manage the computer itself as hardware. In small computers, firmware may be used as the operating system.

[0069] ≪BIOS≫

[0070] BIOS causes the CPU to execute the procedures for starting up the computer hardware and operating the operating system. Most typically, it is the hardware that the CPU first reads when receiving the startup instruction of the computer. The address of the operating system stored in the disk (non-volatile memory) is described here, and the operating system is sequentially expanded into the main memory by the BIOS expanded in the CPU and enters the operating state. Note that BIOS also has a check function for checking the presence or absence of various devices connected to the bus. The result of the check is stored on the main memory and can be made available by the operating system as appropriate. Note that BIOS may be configured to check external devices and the like. The above is the same in all embodiments.

[0071] As shown in the figures, the present invention can basically be composed of a general-purpose computer program and various devices. The operation of the computer basically takes the form of loading a program recorded in a non-volatile memory into the main memory and then executing processing with the main memory, the CPU, and various devices. Communication with the devices is carried out via an interface connected to a bus line. Examples of the interface include a display interface, a keyboard, a communication buffer, etc. Hereinafter, embodiments of the present invention will be described together with illustrated examples.

[0072] <Satisfaction of the Availability of the Natural Law of the Present Invention>

[0073] The present invention functions through the cooperation of a computer, communication facilities, and software. Specifically, it relates to a health care-related information management system for accumulating and managing health care-related information, which is information related to an individual's health care. Through a network, various information and data are exchanged using hardware resources among third-party terminals, administrator terminals, etc. Therefore, from this perspective, if the invention of the present application is judged based on the matters described in the claims and the specification and the common technical knowledge related to those matters, the present invention as a whole utilizes natural laws and also falls within the category of computer-software-related inventions.

[0074] <Significance of the Utilization of Natural Laws Required by the Patent Law>

[0075] The utilization of natural laws required by the Patent Law means that, from the perspective that an invention must have industrial applicability and contribute to the development of the industry based on the purpose of the law, it is required to ensure that the invention can be usefully utilized in industry. That is, it requires that the invention be useful in industry, namely, the effects of the invention declared at the time of application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the utilization of natural laws means that as long as the functions exerted by each of the invention-specific matters (invention constituent elements), which are the constitution of the invention for exerting the effects of the invention, are exerted by utilizing natural laws. Furthermore, it should be noted that the effects of the invention only need to have the possibility of providing predetermined usefulness to the users who utilize the invention, and should not be viewed from the perspective of how the users feel or think about such usefulness. Therefore, even if the effects obtained by the users through this system are psychological effects, the effects themselves are events outside the scope of the required utilization of natural laws.

Embodiments for Implementing the Invention

[0076] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. The mutual relationship between the embodiments and the claims is as follows. Mainly, the description of Embodiment 1 relates to Claim 1, Claim 16, and Claim 31; the description of Embodiment 2 relates to Claim 2, Claim 17, and Claim 32; the description of Embodiment 3 relates to Claim 3, Claim 18, and Claim 33; the description of Embodiment 4 relates to Claim 4, Claim 19, and Claim 34; the description of Embodiment 5 relates to Claim 5, Claim 20, and Claim 35; the description of Embodiment 6 relates to Claim 6, Claim 21, and Claim 36; the description of Embodiment 7 relates to Claim 7, Claim 22, and Claim 37; the description of Embodiment 8 relates to Claim 8, Claim 23, and Claim 38; the description of Embodiment 9 relates to Claim 9, Claim 24, and Claim 39; the description of Embodiment 10 relates to Claim 10, Claim 25, and Claim 40. The present invention should not be limited to these embodiments, and can be implemented in various forms without departing from the gist thereof.

[0077] <Overall Configuration of the Health and Medical Related Information Management System of the Present Invention> FIG. 2 is a diagram showing an example of the overall configuration of the health and medical related information management system according to the present invention. The health and medical related information management system 200 includes a health and medical related information storage unit 201 that stores health and medical related information including any one or more of electronic medical record information related to an individual, various examination information (which may include health check-ups, medical examinations, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on inquiry forms, data of a health promotion application, conversation data of an interactive health promotion SNS, etc., and an access control unit 202 that controls the disclosure of the health and medical related information stored in the health and medical related information storage unit 201 to a third party via a network, and an incentive management unit 203 that provides an incentive to an individual in order to promote the disclosure of the health and medical related information by referring to the provision history of the provision history holding unit 204 described later regarding whether or not to disclose the health and medical related information related to the individual, and a provision history holding unit 204 that holds a provision history that is a history of providing an incentive to each individual.

[0078] In addition, the health and medical related information management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, WAN, LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (for example, personal computers, tablet terminals, smartphones, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable, a WiFi router, etc.).

[0079] In the present invention, the term "third party" refers to an individual (including but not limited to the patient himself / herself, his / her family members, and / or caregivers, etc.), medical personnel, non-medical personnel, etc. as described below. Also, the "administrator" is a person who is responsible for managing and operating the entire health care-related information management system (for example, an individual, or an organization, group, or corporation to which the individual belongs may be included. Also, employees of government agencies or local governments, or organizations, groups, or corporations entrusted by government agencies or local governments may be included.). The administrator may have the authority to edit, add, or delete various types of information in the health care-related information management system.

[0080] For example, the "electronic medical record information" includes basic information about the patient (such as patient ID, name, date of birth, contact information, emergency contact information, family history, height, weight, allergy information, smoking and drinking status, past medical history, etc.), information related to diagnosis (such as the patient's chief complaint (complaints such as subjective symptoms and physical condition), various test results, information about medications, diagnosis name, treatment plan, doctor's diagnosis record, doctor's instructions, etc.), information related to nursing and progress (such as vital information (including at least, but not limited to, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (such as urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc.), observation results, records of urine and feces, records of diet content and intake amount, records of nursing care, etc.), information related to examinations (such as examination instructions, examination results, (partial) images obtained by imaging examinations, reports on those images, etc.), information related to treatments and surgeries (such as treatment and surgery instructions, progress and results of treatments and surgeries, when pathological diagnosis is performed, the method and diagnosis results, etc.), information related to medications (such as drug development instructions, dosing date and medications, results of dosing, etc.), and information on follow-up observations after treatment or surgery may also be included.

[0081] Also, for example, the "prescription information" may include the insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount taken at a time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, etc. Also, the "medication history information" may include, for example, the patient's name, date of birth, gender, My Number information or insured person's certificate symbol number, address, emergency contact information, name of the prescribing insurance medical institution and name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding prescription details, etc., the patient's constitution, allergy history, side effect history, key points of consultation matters from the patient or their family, etc., medication status, confirmation of remaining medicine status, changes in physical condition during medication, concomitant medications, information on past history including complications, presence or absence of visits to other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (drug interactions), patient's intention regarding the use of follow-up drugs, status of information provision using a notebook, key points of medication guidance, name of the prescribing insurance pharmacist, etc.

[0082] Also, for example, the "medication status information" may include information regarding the remaining amount of prescribed medicine (e.g., including the amount of medicine remaining when the patient forgets to take it by accident or when the patient intentionally does not take it), timing information regarding hospital / clinic visits (e.g., the period required from the scheduled prescription end date (scheduled medication end date) until the actual hospital / clinic visit (including cases where the patient visits the hospital / clinic earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (e.g., including subjective symptoms and physical condition complaints such as getting hives after continuing to take a certain medicine or feeling overly drugged and dizzy after taking a certain medicine), etc.

[0083] Also, for example, "healthcare-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained from a PHR system or the like via an API. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record, and refers to information regarding an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information regarding their own health, medical care, and nursing care in a chronological manner throughout their lifetime, and thereby receive excellent services tailored to their health status. For example, each individual citizen has hitherto recorded a great deal of health and medical information on paper media such as various notebooks and documents. Depending on the life stage (milestone in life) at that time, the medium and location where the records are kept differ. For example, at the time of childbirth, it is the "Mother and Child Health Handbook", during the period of receiving school education, it is the "Results of School Health Examinations", at the time of employment, it is the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one manages one's own health using a "Disease Management Notebook" or "Medicine Notebook", etc., and in the elderly, it will be recorded in a "Nursing Care Prevention Notebook" or "Family Doctor Collaboration Notebook". By digitizing such an existing "notebook culture" and integrating it as data, there is a concept and mechanism of managing and utilizing it oneself, and it is expected to become even more widespread in the future.

[0084] In addition, in this invention, the description is based on the premise that the healthcare-related information storage unit 201 and the access control unit 202 function on the same server, but it is not limited to this, and they may be configured to perform functions and roles on separate servers. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the healthcare-related information storage unit 201 and the access control unit 202 may be configured as cloud servers.

[0085] Similarly, in the present invention, it is described on the premise that the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 function on separate servers. However, the present invention is not limited to this, and they may be configured to perform their respective functions and roles on the same server. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 may be configured by cloud servers.

[0086] <Embodiment 1 (mainly corresponding to Claim 1, Claim 16, and Claim 31)> <Overview of Embodiment 1> This embodiment provides a health care-related information management system including a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to an individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history holding unit described below regarding whether to disclose the health care-related information about the individual, and a provision history holding unit for holding a provision history that is a history of providing an incentive to each individual. In addition, to realize this, a method executed by a CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner are provided.

[0087] <Functional Configuration of Embodiment 1> FIG. 3 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 1. In this embodiment, a health care-related information storage unit, an access control unit, an incentive management unit, and a provision history holding unit are provided.

[0088] <Embodiment 1 Explanation of Configuration: Health and Medical Related Information Storage Unit> The "Health and Medical Related Information Storage Unit" 201 is configured to have a function of storing health and medical related information including any one or more of information such as electronic medical record information regarding an individual, various examination information (which may include health check-ups, medical examinations, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on medical questionnaires, data of a health promotion app, conversation data of an interactive health promotion SNS, etc.

[0089] Here, the "electronic medical record information" includes, for example, basic information regarding a patient (for example, patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, past history, etc.), information regarding diagnosis (for example, the chief complaint of the patient (complaints such as subjective symptoms and physical condition), various examination results, information on medications, diagnosis name, treatment policy, medical examination records by doctors, instructions from doctors, etc.), information regarding nursing and progress (for example, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), observation results, records of urine and feces, etc., records of diet content and intake amount, records of nursing care, etc.), information regarding examinations (for example, examination instructions, examination results, (part of) images obtained by imaging examinations, reports on those images, etc.), information regarding treatments and surgeries (for example, instructions for treatments and surgeries, progress and results of treatments and surgeries, when pathological diagnosis is performed, the method and diagnosis results, etc.), information regarding medications (for example, instructions for drug development, dosing date and medications, results of dosing, etc.), information on follow-up observations after treatment or surgery, etc. It is desirable that it be configured to include such information.

[0090] In addition, the "prescription information" is preferably configured to include, for example, the insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount taken at one time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, and the like.

[0091] In addition, the "medical history information" is preferably configured to include, for example, the patient's name, date of birth, gender, My Number information or insured person's certificate symbol number, address, emergency contact information, name of the prescribed insurance medical institution and name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding prescription details, the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of remaining medicine status, changes in physical condition during medication, concomitant medications, information on past history including complications, presence or absence of outpatient visits to other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (drug interactions), patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the prescribing insurance pharmacist, and the like.

[0092] In addition, the "medication status information" is preferably configured to include, for example, information on the remaining amount of the prescribed medicine (including, for example, the amount of medicine remaining when the patient forgets to take it or intentionally does not take it), timing information regarding hospital / clinic visits (including, for example, the period required from the scheduled prescription end date (scheduled medication end date) to the actual hospital / clinic visit (including cases where the visit is earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (including, for example, subjective symptoms and physical condition complaints such as getting hives after continuing to take a certain medicine or feeling overly dizzy after taking a certain medicine), and the like. In the present invention, personal number (My Number) information or the insured person identification number of the health insurance the individual (user) subscribes to may be used as identification information for uniquely identifying an individual (user), and health care-related information regarding the individual may be associated therewith for storage and organization.

[0093] Also, for example, "health care-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained via an API from a PHR system or the like. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information regarding an individual's health, medical care, and nursing care. The aim is that each individual can manage and utilize information regarding their own health, medical care, and nursing care in a chronological manner throughout their lifetime, so as to receive excellent services tailored to their health status. For example, each citizen has hitherto left records of a great deal of information regarding their health and medical care on various types of notebooks and paper documents. Depending on the life stage (milestones in life) at that time, the media and locations where the records are left are different. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", during the period of receiving school education, there is the "Results of School Health Examinations", at the time of employment, there are the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one manages their own health using a "Disease Management Notebook" or "Medication Notebook", etc., and in the elderly, it will be recorded in a "Nursing Care Prevention Notebook" or "Family Doctor Collaboration Notebook". There is a concept and mechanism of digitizing such an original "notebook culture", integrating it as data, and then managing and utilizing it oneself, and it is expected to become more widespread in the future.

[0094] <Embodiment 1 Explanation of Configuration: Access Control Unit> The "access control unit" 202 is configured to have a function for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network. For example, as will be described later, it is desirable to be configured to have functions such as analyzing IP packets, determining the destination IP address, obtaining an access ID / user ID, obtaining the access subject / user attributes, and performing access control based on these for access from a third-party terminal.

[0095] <Embodiment 1: Description of Configuration - Incentive Management Unit> The "incentive management unit" 203 is configured to have a function of providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history of the provision history holding unit described later regarding whether to disclose the individual's health care-related information. The operation of "for providing an incentive" includes operations such as actually providing an incentive using electronic data, etc., and operations for executing the necessary processing to transfer the separately performed act of actually providing the incentive to execution, although the act of actually providing the incentive is performed separately. FIG. 10 is a diagram showing the types of incentives. When providing points or electronic data such as information services as incentives, it is an operation for a computer to execute the necessary operations for that purpose. When drugs / supplements, etc. are provided as incentives, for example, the processing operations for sending drugs or supplements to the discloser of health care-related information correspond. That is, since the "operation for ···" is executed by the incentive management unit, it is not necessarily the incentive-providing operation itself. FIG. 44 is a diagram showing an example of the user interface of the health care-related information management system in the present invention. In this case, information indicating whether or not the individual (user) who has accessed using a third-party terminal, that is, the individual (user) who owns the personal number (My Number) information "123456789012", consents to providing incentives for any health and medical-related information is stored and managed in a list format. If there is consent, the health and medical-related information is in a state where it is permitted to be disclosed to a third party, that is, in a state where an incentive is given. If there is no consent, the health and medical-related information is in a state where it is not disclosed to a third party, that is, in a state where an incentive is not given. It is desirable that the information regarding these incentives is regularly exchanged between the Incentive Management Department and the Health and Medical-Related Information Accumulation Department and the Provision History Retention Department described later to always keep it in the latest state. For example, in the case of FIG. 44, it stores and manages whether or not an individual has given consent for each piece of health and medical-related information. Here, the "〇" mark shown in the "Consent / Non-consent" column indicates the individual's consent intention, and the "×" mark indicates the individual's non-consent intention. The input of the "〇" mark or "×" mark in the "Consent / Non-consent" column is preferably configured such that the individual (user) can select the "〇" mark or "×" mark according to their own intention in a pull-down menu format or the like on the terminal screen. Here, when the display item (for example, "Regular Health Check Result", etc.) described in the "Health and Medical-Related Information" column is clicked, touched, or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when the "〇" mark or "×" mark in the "Consent / Non-consent" column is clicked, touched, or tapped on the terminal screen, the date and time of consent or non-consent may be displayed on the pop-up screen. In particular, for the health and medical-related information with a "〇" mark in the "Consent / Non-consent" column, it is preferably stored and managed in the Provision History Retention Department described later. Note that the health and medical-related information with no mark in the "Consent / Non-consent" column represents a state where the consent or non-consent intention of the individual (user) has not yet been shown.

[0096] Figure 40 is a diagram showing the user interface of the health care-related information management system of the present invention. In this case, when an individual inputs personal number (My Number) information and password information in the corresponding fields and the matching information exists in the system, the individual authentication is performed and the access is permitted by the incentive management unit. In the case of this figure, the method of the user directly inputting information is described. However, for example, when the user uses a smartphone, the IC card reading function of the smartphone may be used to hold the My Number card over the smartphone to automatically read and input predetermined information such as personal number (My Number) information. In addition, for example, when the My Number information and / or the password information fails to be input three times in a row, it may be set in a locked state and the user may go to the local government (such as a municipal office) to have the lock released. Alternatively, it may be temporarily set in a locked state, and a caution such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or a warning sound. Also, it is desirable to memorize and manage so that it can be easily determined whether an individual (user) has consented to which health care-related information. Furthermore, for the incentive provision process, it is desirable to be configured to process the degree of incentive to be given to the health care-related information to which the user has consented.

[0097] For example, in the case of the example in FIG. 44, when providing health and medical related information about one individual to one recipient, the minor points are calculated and granted based on a predetermined calculation rule to be 1000p (points). Also, when there are two recipients for the same health and medical related information, the minor points are calculated and granted based on a predetermined calculation rule to be twice as much, i.e., 2000p (points). Regarding the calculation rule of incentives, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical related information, and different incentives may be calculated and granted for each health and medical related information. In particular, for example, various infectious diseases defined in the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the top cause of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye diseases with a large number of patients, and novel coronavirus infections, and specific diseases with few cases worldwide, considering that the health and medical related information can greatly contribute to the progress of medicine by being disclosed to a third party, it is conceivable to set the calculation rule so that the incentives are higher than those for other diseases.

[0098] Also, "incentive" simply refers to "motivation, reward", and means intentionally stimulating something with the aim of causing some action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, individual information services or general information services for information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items that can be used on the network, provision of rights, for example, provision of the right to receive a medical examination, provision of the right to receive a diagnosis, provision of the right to receive an inspection, provision of the right to receive various services on the network, provision of specific software (such as a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc.

[0099] In the present invention, in the case where public disclosure permission information indicating whether or not to permit public disclosure to a third party has already been associated and stored / managed with respect to health care-related information about an individual, or in the case where an individual (user) newly registers health care-related information concerning himself / herself in the health care-related information storage unit and the public disclosure permission information has not yet been associated and stored / managed, the present invention is applicable, that is, it is possible to provide an incentive. That is, although health care-related information about an individual is not held in the health care-related information management system, for example, if the health care-related information of the individual is held in a terminal possessed by the individual and this is uploaded to the present system, when it is determined, by a formal check of the uploaded information, that the information is publicly available as health care-related information, the incentive management unit may be configured to function so as to grant an incentive according to the result. In this case, the access control unit of the present system may be configured so as not to reject browsing access to health care-related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualification of the third party. Note that uploading the health care-related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal but another system that stores other health care-related information. For example, it may be configured such that health care-related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to the present system with the individual's consent. In this case, when the health care-related information of the individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive management unit may be configured to function.

[0100] Here, among the functions of the incentive management unit, the operations on the computer for "refer to... for providing" are, for example, processes such as executing operations for providing incentives if it is confirmed as a result of the reference that incentives have not been provided in the past, executing operations for providing incentives if it is determined that a predetermined period (time) has elapsed since the incentives were provided in the past as a result of the reference, executing operations for providing incentives if it is determined that the disclosure rate of health and medical related information has reached a certain value as a result of the reference, and executing operations for providing incentives when something that has been published but has not actually been viewed by anyone is viewed by someone (in this case, the incentive provision history and the viewing history of health and medical related information have the same meaning). Any one or more of these processes are included, but it is not limited thereto.

[0101] Note that "promote disclosure" is synonymous with "promote revelation". And "disclosure" in the present invention means making all or part of health and medical related information, or processed / transformed information thereof, discloseable to others in some form (even if it is anonymous. However, in the case of a person who is managed and assisted by someone such as a child, a person under guardianship, or a person requiring care, the person providing the management and assistance is not included in others) (excluding oneself). It may be either actually disclosed or in a discloseable state but not actually disclosed. Examples of the disclosure recipients include, but are not limited to, others belonging to medical institutions, medical related organizations, public institutions, pharmaceutical related companies, etc.

[0102] <Embodiment 1 Explanation of Configuration: Provision History Retention Unit> The "provision history retention unit" 204 is configured to have a function of retaining a provision history, which is a history of providing incentives for each individual. "Incentive provision history" refers to any one or more of the history of whether incentives are given, the history of the content of the incentives given, the history of the amount of the incentives given, etc. The time of giving may be associated, or only the fact of giving may be specified. Therefore, even a person who only specifies that something has been given may be acceptable. In the case of a configuration where incentives are generally given for the provision of health care-related information, the incentive provision history is the same as the disclosure history of health care-related information. Therefore, the provision of incentives promotes disclosure by referring to the disclosure history of health care-related information, and the provision of incentives is equivalent to being done by referring to the provision history. Therefore, when the incentive management department refers to the public disclosure history of health care-related information, in the present invention, it may be included in the incentive management department referring to the provision history.

[0103] Regarding the method of providing incentives, various methods can be considered. For example, when an individual gives a public license for all of their personal health and medical related information, all health and medical related information associated with that individual's identification information can be viewed without limitation by an institution or the like with a prescribed right source, but it can also be configured such that only one incentive is given once for that one public license act, or a configuration can be considered where an incentive is given every time the licensed health and medical related information is viewed as a result of the public license. Also, since personal health and medical related information is usually divided into multiple items, a configuration can be adopted where an incentive is given according to the items viewed or used. Furthermore, a configuration can be taken where an incentive is given according to the number of times of viewing and using for each item. Incidentally, the items in the context of health and medical related information can be considered to be various itemizations such as for each disease onset, for each examination, for each prescription issuance, for each disease type, for each generation of drug history information, for each acquisition of medication information, etc. Also, a configuration can be considered where an incentive is given according to the depth of disclosure of health and medical related information. The depth of disclosure here means, for example, when only the disease name is disclosed, when the name, usage, and dosage of the drug prescribed for that disease are further disclosed, when the results of taking that drug (such as improvement of symptoms or onset of side effects) are further disclosed, when what the patient felt about that drug is further disclosed, etc., and it can be configured such that as it gradually becomes deeper, more or greater quality incentives are given.

[0104] Next, the incentive granting process flow will be described. Incentive information is electronically processed by the incentive management department or the incentive output department or the incentive processing department that cooperates with this so that some benefit occurs to the individual who is the patient. Note that this electronic processing may be the incentive granting itself or may be the pre-stage processing for incentive granting. The granting of incentives is triggered by the acceptance of information that all or part of the health care-related information, or the processed / transformed information thereof, is permitted to be disclosed by an individual such as a patient. This trigger may originate from the terminal used by the individual, for example, a smartphone, or from the terminal of a medical institution or the like. For example, in the case of a smartphone, an application that can view or edit the individual's health care-related information within a certain range is installed on the smartphone. Using this application as an entry point, the present invention system is accessed, and the disclosure permission operation of the individual's own health care-related information is executed by entering through the disclosure portal of the health care-related information.

[0105] In addition, instead of the application, it can also be configured so that the same operation can be performed by accessing the web. Also, this access must be strictly security-managed. For example, it is preferably configured to be able to make a public promise using a one-time password. In this case, the health care-related information management system may be a so-called PHR or a system that cooperates with the PHR. Also, this system may be configured to manage the disclosure of health care-related information of all citizens alone, or may be configured so that a plurality of similar systems are juxtaposed to manage the disclosure of health care-related information held in the PHR. In addition, the case where the trigger is pulled from the terminal of a medical institution means that medical staff or the like who are interviewing the individual patient obtain the patient's permission to pull the trigger. In that case, it is preferable to borrow a health insurance card, a personal number (My Number) card, or a certificate equivalent thereto from the patient and use the borrowed certificate to pull the trigger. The medical institutions referred to here may include nursing facilities, pharmacies (including dispensing pharmacies), and other welfare facilities. Also, this may be a medical institution accessed on the Internet. Furthermore, it can also be configured so that terminals used by a predetermined management server of a pharmaceutical company, a public research institution, etc. can pull the trigger. Of course, it is premised on the authentication of an individual such as a patient.

[0106] Figure 6 is a diagram showing an example of the provision history holding unit of the health care-related information management system in the present embodiment. As shown in this figure, it can be seen that the provision history is held and managed separately for each individual, with Mr. X whose personal number (My Number) information is "123456789012" and Mr. Y whose personal number (My Number) information is "456789012345". For example, regarding Mr. X whose personal number (My Number) information is "123456789012", it is shown that the provision history of providing the "Regular Health Check Result (Hospital A)", which is health care-related information with ID "0001", to "Doctor Suzuki (Hospital B)", the recipient, on the provision date and time of "2023 / 04 / 01" with an incentive of "1000 My Points" is held and managed. Similarly, for other health care-related information, the history of providing incentives for each individual is held and managed.

[0107] <Embodiment 1 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in the present embodiment will be described with reference to the drawings.

[0108] Figure 4 is a diagram showing the hardware configuration of the health care-related information management system in the present embodiment. As shown in this figure, the health care-related information management system in the present embodiment includes a "CPU (Central Processing Unit)" 401 that performs various arithmetic operations, and a "main memory" 402. It also includes a "non-volatile memory" 403 that holds predetermined information, a "network I / F (Interface)" 404 that transmits and receives information with a plurality of third-party terminals 406 and an administrator terminal 407. And they are interconnected by a data communication path such as a "bus" 405 to transmit, receive, and process information.

[0109] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area that is also a work area for that program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing. In the present embodiment, the programs stored in the "main memory" are a health care-related information accumulation program, an access control program, an incentive management program, a provision history retention program, and the like. Also, health care-related information, incentive management information, provision history information, etc. are stored in the "main memory" and "non-volatile memory".

[0110] The "CPU" executes the health care-related information accumulation program stored in the "main memory", and through the "network I / F", stores health care-related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.) in the "main memory" or "non-volatile memory". Also, it executes the access control program stored in the "main memory" to control access to health care-related information about an individual. Also, it executes the incentive management program stored in the "main memory" to provide and manage incentives to an individual in order to promote the disclosure of health care-related information by referring to the provision history information regarding the approval or disapproval of the disclosure of health care-related information about the individual. Also, it executes the provision history retention program stored in the "main memory" to store the provision history information, which is the history of providing incentives, in the "main memory" or "non-volatile memory".

[0111] <Embodiment 1 Health Care-Related Information Management System: Flow of Processing> FIG. 5 is a diagram showing the process flow when the health care related information management system according to this embodiment is used. As shown in the figure, it is a processing method consisting of a health care related information accumulation step S501, an access control step S502, an incentive management step S503, and a provision history retention step S504.

[0112] The "health care related information accumulation step" S501 is a stage of accumulating health care related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0113] The "access control step" S502 is a stage of controlling access to the health care related information about an individual accumulated in the health care related information accumulation step.

[0114] The "incentive management step" S503 is a stage of providing an incentive to an individual in order to promote the disclosure of health care related information by referring to the provision history retained in the provision history retention step described later regarding whether or not to disclose the health care related information about the individual.

[0115] The "provision history retention step" S504 is a stage of retaining the provision history, which is the history of providing incentives for each individual.

[0116] <Summary> As described above, in the present invention, it is possible to provide a health care related information management system that provides an incentive to an individual in order to promote the disclosure of health care related information about the individual by referring to the provision history, which is the history of providing incentives for each individual, regarding whether or not to disclose the health care related information. In addition, in the present invention, by providing incentives to individuals, a structure is established where personal health and medical-related information is made available to third parties upon the individual's permission. This leads to an increase in the opportunities for individuals to disclose their health and medical-related information to third parties, which can contribute to reducing the overall medical expenses of the country, improving the health of the entire population, or reducing the time and costs involved in drug development by research institutions, pharmaceutical companies, etc. Ultimately, this can also contribute to the progress of medicine. Here, "drug development" refers to the process from when the compound or chemical substance (also known as a lead) that serves as the basis for a pharmaceutical product is developed until it is sold as a product. In addition, the following steps (1) to (5) are essential for a compound or chemical substance to be sold as a pharmaceutical product. (1) Select candidates for drug development targets (compounds or chemical substances) (2) Select candidate substances that can serve as the basis for pharmaceutical products by screening their effects There are various types of screening, such as high-efficiency screening that utilizes biotechnology techniques, combinatorial chemistry (a technique for creating a large number of combined compounds), and AI robot technology. (3) Animal experiments Use animals or cultured cells to investigate and confirm details such as safety and efficacy in detail. Drugs that have been confirmed to be safe and effective at this stage are called "investigational drugs." (4) Clinical trials Actually use the investigational drug on humans to examine its effects and safety in detail and confirm whether it is useful for actual treatment. (5) Approval application and review Apply to the Ministry of Health, Labour and Welfare for drugs that have passed all the above tests (1) to (4). Then, undergo a review by the Pharmaceuticals and Medical Devices Agency and wait for approval from the Minister of Health, Labour and Welfare. Only after approval can a pharmaceutical product be born that can be sold as a product. Generally, the period of drug development is said to be about 10 to 18 years, and the probability of a compound or chemical substance becoming a new drug is about 1 in 10,000. Also, the total cost required until drug development is successful is said to be nearly 20 billion yen.

[0117] <Embodiment 2 (mainly corresponding to claims 2, 17, and 32)> <Overview of Embodiment 2> This embodiment has an incentive type information holding unit that holds incentive type information which is information indicating a plurality of types of incentives. The incentive management unit is characterized in that it selects and provides an incentive to be provided to an individual based on the provision history according to the incentive type information held in the incentive type information holding unit. Hereinafter, for functions, hardware configurations, and processing flows that overlap with Embodiment 1, explanations will be omitted as appropriate.

[0118] <Explanation of the Configuration of Embodiment 2: Incentive Type Information Holding Unit> FIG. 7 is a diagram showing the functional configuration of the health care related information management system in this embodiment. The "incentive type information holding unit" 701 is configured to have a function of holding incentive type information which is information indicating a plurality of types of incentives. FIG. 10 is a diagram showing an example of the incentive type information holding unit of the health care related information management system in this embodiment. As shown in this figure, the incentive type information and specific incentives related to the incentive type information are associated and held and managed. For example, when the incentive type information is "(A) Points", specific examples of incentives such as "(a) Minor points, (b) Transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) Distribution electronic money (WAON (registered trademark), nanaco (registered trademark), etc.)" are held and managed. Similarly, for other incentive type information, specific examples of incentives are listed and held and managed. When an individual (user) provides his or her own health care related information to an appropriate provider, it becomes possible to select any incentive based on this incentive type information.

[0119] <Explanation of the Configuration of Embodiment 2: Incentive Management Unit Features Specific to Embodiment 2> The selection made by the Incentive Management Department can be divided into two cases: one is when the computer (configured by a program) that constitutes the Incentive Management Department automatically makes the selection, and the other is when the Incentive Management Department makes the selection based on the selection behavior of the provider of health and medical related information (in most cases, the owner of the health and medical related information, but in the case where the person is under some kind of management like a child, it may be the administrator). In the latter case, the computer will accept the human selection behavior and execute the selection based on that selection behavior. As for the case where the computer automatically makes the selection, for example, when providing information on the results of drug use owned by the owner of health and medical related information to a pharmaceutical manufacturer, it can be configured such that the incentive provided by the pharmaceutical manufacturer is automatically selected by the Incentive Management Department. Also, when the provider of health and medical related information resides in Aomori Prefecture, it is conceivable to automatically select an incentive that is only valid in Aomori Prefecture. Thus, the automatic selection can be configured to be automatically performed based on the content of the provided health and medical related information, the attribute information of the owner of the health and medical related information, and so on.

[0120] Whether it is an automatic selection or a selection based on the selection made by the owner (provider) of the health and medical related information, the Incentive Management Department is configured to make the selection by using the selection rule. This selection rule may be configured to be held in the selection rule holding means inside the Incentive Management Department, or it may be configured to make the selection by using the selection rule held outside the Incentive Management Department or outside this system. Also, the selection rule may be configured to be appropriately optimized (not necessarily optimally, including the simple meaning of being changed) according to the provision history of the owner (provider) of the health and medical related information and the public disclosure history of the health and medical related information. For example, it may be configured to be changed by an artificial intelligence for editing or the like. In addition, a selection rule editing unit may be provided so that this rule can be edited by the operation of the administrator of this system or the like. The incentive management department can select and provide incentives to an individual based on the incentive type information held in the incentive type information holding department according to the above-described provision history. That is, it is configured to select and provide incentive type information. FIG. 11 is a diagram showing an example of the incentive management department of the health care-related information management system in the present embodiment. As shown in this figure, by an individual (user) selecting incentive type information or the incentive management department automatically selecting it, it becomes possible to select and provide a specific incentive. For example, in the case of Mr. Y, in addition to "points (negative points and PASMO (registered trademark))", it can be seen that "software / app" and "cash" etc. are selected and provided.

[0121] Also, when the incentive management department selects and provides an incentive based on the incentive type information, the following cases are assumed for the processing until the specific use of the incentive.

[0122] For example, when "points" are selected as the incentive, the following cases can be considered. First, when the incentive is "negative points", the incentive management department in this system triggers by sending information on personal identification information (such as personal numbers (My Number), etc.) and information on the points to be awarded to the management server owned by the organization that manages and operates the My Portal site. In the said server, the points associated with the personal identification information of the negative points associated with the personal identification information are incremented by the amount of the points to be awarded. That is, based on this trigger information, the management server owned by the organization that manages and operates the My Portal site awards negative points to the individual corresponding to the personal identification information, and notifies the terminal (such as a smartphone, etc.) used by the individual of the information regarding the increment of the negative points, so that the individual can use the negative points including the increment. Then, by exchanging these negative points for points of other transportation / distribution electronic money, the individual can purchase the goods he desires or pay as the consideration for various desired services.

[0123] Second, when the incentive is "prepaid card", it becomes possible to purchase goods on AMAZON (registered trademark), etc. using a prepaid card purchased at a convenience store or the like (for example, an amount corresponding to the purchase price is set, and identification information for identifying this card is also provided).

[0124] Also, for example, when "drug / supplement" is selected as an incentive, the incentive management department in this system sends information including personal identification information and its attribute information (for example, personal number (My Number) information, name, postal code, address, phone number, credit card number, etc.) and information for identifying the product to be purchased (for example, product name such as "Supplement ABC", information on the manufacturer / seller, price information, etc.) to the management server managed and operated on the purchase site such as AMAZON (registered trademark) via the network, thereby triggering the process. Then, if there is stock of the specified product in the management server of AMAZON (registered trademark), the home delivery service provider will deliver the product to the home.

[0125] Also, for example, when "provision of rights" is selected as an incentive, the incentive management department in this system sends personal identification information and its attribute information (for example, personal number (My Number) information, name, postal code, address, phone number, credit card number, etc.) and information for identifying the desired rights (for example, identification number indicating an admission ticket to DISNEYLAND (registered trademark), etc.) to the management server owned by the organization that manages and operates the provision of rights via the network, thereby triggering the process. Then, in response to this trigger, the management server sends a QR code (registered trademark) that serves as an admission ticket to DISNEYLAND (registered trademark) to the smartphone used by the individual. And the individual who saves the QR code (registered trademark) on the smartphone goes to DISNEYLAND (registered trademark), which is the rights execution agency, and holds the QR code (registered trademark) in front of the reader at the admission counter. If there is no problem, the individual can enter DISNEYLAND (registered trademark) and enjoy various attractions and meals.

[0126] <Embodiment 2 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0127] FIG. 8 is a diagram showing the hardware configuration of the health care related information management system according to the present embodiment. As shown in this figure, the health care related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 801 that performs various arithmetic processes and a "main memory" 802. Further, it includes a "non-volatile memory" 803 that holds predetermined information, and a "network I / F (Interface)" 804 that transmits and receives information with a plurality of third-party terminals 806 and an administrator terminal 807. And they are mutually connected by a data communication path such as a "bus" 805 to transmit, receive, and process information.

[0128] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processing. In the present embodiment, the program stored in the "main memory" is an incentive type information holding program. In addition, incentive type information, incentive management information, etc. are stored in the "main memory" and "non-volatile memory".

[0129] The "CPU" executes the incentive type information holding program stored in the "main memory" to hold incentive type information, which is information indicating the types of a plurality of incentives, and stores the incentive type information and related incentive management information in the "main memory" and "non-volatile memory".

[0130] <Embodiment 2 Health Care Related Information Management System: Process Flow> FIG. 9 is a diagram showing the process flow when the health care related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S901.

[0131] The "Incentive Type Information Retention Step" S901 is a step of retaining incentive type information, which is information indicating types of a plurality of incentives.

[0132] <Summary> As described above, in the present invention, there is an incentive type information retention unit that retains incentive type information, which is information indicating types of a plurality of incentives. The incentive management unit can select and provide an incentive to be provided to an individual based on the incentive type information retained in the incentive type information retention unit according to the provision history.

[0133] <Embodiment 3 (mainly corresponding to Claim 3, Claim 18, and Claim 33)> <Outline of Embodiment 3> This embodiment includes an end request reception unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health care related information, from an individual who has accumulated health care related information in the health care related information accumulation unit; an end condition retention unit that retains an end condition, which is a condition for determining whether it is appropriate to end based on information about the individual who has made the end request when the end request is received; a determination rule retention unit that retains a determination rule, which is a rule for determining whether to end the disclosure of health care related information based on information about the individual who has made the end request, the retained end condition; an end determination unit that determines whether to end based on the information about the individual, the retained end condition, and the retained determination rule when the end request is received; and an end control unit that controls the access control unit to end the disclosure of the health care related information of the individual when the determination result in the end determination unit is a determination result that it should end. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with Embodiment 1 and Embodiment 2 will be omitted as appropriate.

[0134] <Explanation of Configuration of Embodiment 3: End Request Reception Unit> FIG. 12 is a diagram showing a functional configuration of the health care related information management system in this embodiment. The "Termination Request Reception Unit" 1201 is configured to have a function of receiving a termination request, which is a request to stop or end the disclosure of already disclosed health and medical related information, from an individual who has accumulated health and medical related information in the Health and Medical Related Information Accumulation Unit. For example, on the login screen of the health and medical related information management system shown in FIG. 40, when an individual (user) uses a third-party terminal to input their personal number (My Number) information and password information, and if there is matching information on the system side, authentication of the individual is performed. By accessing the Incentive Management Unit and the Provision History Retention Unit, it becomes possible to view whether their own health and medical related information has been disclosed, who the disclosure destination is, what type of incentive it is, and what the specific incentive is. Also, for example, on the viewing screen shown in FIG. 44, it is desirable to be configured such that, based on the intention of the individual, a termination request to request the system side to stop or end the disclosure of desired health and medical related information from among the already disclosed health and medical related information is transmitted from a third-party terminal, and the system side receives this termination request.

[0135] <Embodiment 3 Explanation of Configuration: Termination Condition Retention Unit> The "Termination Condition Retention Unit" 1202 is configured to have a function of retaining termination conditions, which are conditions for determining whether it is appropriate to end based on information regarding the individual who made this termination request, when the termination request is received. For example, the following cases can be considered as termination conditions. However, it is not necessarily limited to these cases. (1) When the disease has been completely cured / fully cured / remitted · When it is recognized that an individual (user)'s illness or injury has been "completely cured" (which means that the illness or injury has been completely healed. In other words, it means returning to the state before getting the illness or injury), or "fully recovered" (which means that the treatment for the illness or injury is no longer necessary and the individual can lead a normal daily life without problems. However, it does not necessarily mean returning to the state before getting the illness or injury), or "remission" (which means that the illness or injury has temporarily or continuously recovered. It is often used for diseases with a possibility of recurrence such as cancer and leukemia. It is a state where the symptoms are suppressed and continuous treatment or regular examinations may still be required), then, based on the will of this individual, the disclosure of the individual's health and medical related information related to this disease can be stopped or terminated. (2) When the individual (user) has moved to a new residence (changed address) · If the individual (user) has moved to a new residence (changed address), for example, due to job transfer or transfer within the company, and the attending physician (primary care physician) who has been treating the illness or injury so far has changed, then, based on the will of this individual, the disclosure of the individual's health and medical related information can be stopped or terminated. (3) When the attending physician (primary care physician) has changed · If, due to the merger or dissolution of a medical institution such as a hospital, the individual has transferred or moved to another hospital, and the attending physician (primary care physician) who has been treating the illness or injury so far has changed, then, based on the will of this individual, the disclosure of the individual's health and medical related information can be stopped or terminated.

[0136] <Embodiment 3 Explanation of the Configuration: Judgment Rule Retention Unit> The "judgment rule retention unit" 1203 is configured to have a function of retaining a judgment rule, which is a rule for judging whether to terminate the disclosure of health and medical related information based on the information about the individual who has requested termination and the retained termination conditions. For example, it is desirable to formulate a judgment rule, which is a rule for determining whether to terminate the disclosure of health care-related information, based on information indicating that a disease of an individual (user) obtained from the electronic medical record of this system has been cured by treatment and medication of the attending physician, and the termination conditions held in the above-described termination condition holding unit, for example, the above-described condition (1). In this case, regarding the health care-related information about the disease, since it is determined that the disease has been cured, it is expected that the significance and need for disclosure to a third party will be low. Therefore, it is preferable to terminate the disclosure as a judgment rule. Also, when the attending physician of the medical institution (hospital, clinic, etc.) in charge of an individual (user) changes, the significance of disclosing the health care-related information to the original physician disappears. Therefore, it is also preferable to terminate the disclosure as a judgment rule. However, for the newly-assigned attending physician, it is essential to disclose the individual's health care-related information for formulating treatment and medication policies. Therefore, it is desirable to continue the disclosure without terminating it as a judgment rule.

[0137] <Embodiment 3 Explanation of Configuration: End Judgment Unit> When an end request is received, the "end judgment unit" 1203 is configured to have a function of determining whether to end based on the information about the individual, the held end conditions, and the held judgment rules. For example, based on the information in the electronic medical record indicating that an individual's disease or injury has been cured, the above-described end conditions held in the end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, it can be determined that the disclosure of the individual's health care-related information should be terminated. Also, for example, based on the information in the electronic medical record indicating that an individual's disease (for example, cancer, etc.) has entered remission, the above-described end conditions held in the end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, if it is considered that the individual has a high possibility of recurrence constitutionally, it can be determined that the disclosure of the individual's health care-related information should not be terminated. Furthermore, for example, based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating an individual's illness or injury has changed due to various circumstances, the end conditions held in the above-described end condition holding unit (in this case, the above condition (2) or the above condition (3)), and the above-described judgment rules, it can be determined that the disclosure of this individual's health and medical related information should be terminated.

[0138] <Embodiment 3 Description of Configuration: End Control Unit> The "end control unit" 1204 is configured to have a function of controlling the access control unit to terminate the disclosure of this individual's health and medical related information when the judgment result in the end judgment unit is a judgment result that it should be terminated. For example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, when it is determined that the disclosure of this individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's illness or injury has been completely cured and the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), the end control unit can send a control signal to the access control unit to control the access control unit to terminate the disclosure of this individual's health and medical related information. Also, for example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, when it is determined that the disclosure of this individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances and the end conditions held in the above-described end condition holding unit (in this case, the above condition (2) or the above condition (3)), the end control unit can send a control signal indicating the judgment result to the access control unit to control the access control unit to terminate the disclosure of this individual's health and medical related information.

[0139] Incidentally, in relation to the above-mentioned "judgment rule retention unit", for example, a "judgment rule change unit" may be further provided to appropriately change the judgment rule based on, for example, the number or ratio of times the disclosure permission of health and medical related information about an individual has been given, or the number or ratio of times an incentive has been received. In this case, the judgment rule may be automatically changed within this system, or may be manually changed from a terminal used by the target individual or the administrator of this system.

[0140] <Embodiment 3 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0141] FIG. 13 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1301 that performs various arithmetic processes, and a "main memory" 1302. It also includes a "non-volatile memory" 1303 that holds predetermined information, and a "network I / F (Interface)" 1304 that transmits and receives information with a plurality of third-party terminals 1306 and an administrator terminal 1307. And they are interconnected by a data communication path such as a "bus" 1305 to transmit, receive, and process information.

[0142] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area that is also the working area of the program. In addition, a plurality of addresses are assigned to each of this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, making it possible to perform processing. In the present embodiment, the programs stored in the "main memory" include an end request reception program, an end condition holding program, a judgment rule holding program, an end judgment program, an end control program, and the like. Further, end request information, end condition information, judgment rules, end judgment information, end control information, and the like are stored in the "main memory" and the "non-volatile memory".

[0143] The "CPU" executes the termination request reception program stored in the "main memory", and through the "network I / F", receives a termination request, which is a request to stop or end the disclosure of already public health and medical related information of an individual (user) sent from a third-party terminal, and stores the termination request information in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the termination condition holding program stored in the "main memory", and when a termination request is received, holds the termination condition, which is a condition for determining whether it is okay to end based on the information about the individual who made this termination request, and stores the termination condition information in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the judgment rule holding program stored in the "main memory", and holds the judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on the information about the individual who made the termination request and the held termination condition, and stores it in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the termination judgment program stored in the "main memory", and when a termination request is received, determines whether to end based on the information about that individual and the held termination condition, and stores the termination judgment information in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the termination control program stored in the "main memory", and when the judgment result in the termination judgment program is a result that it should end, controls the access control unit to end the disclosure of the individual's health and medical related information, and stores the termination control information in the "main memory" and the "non-volatile memory".

[0144] <Embodiment 3 Health and Medical Related Information Management System: Processing Flow> FIG. 14 is a diagram showing the processing flow when using the health and medical related information management system in this embodiment. As shown in the figure, it is a processing method consisting of a termination request reception step S1401, a termination condition holding step S1402, a judgment rule holding step S1403, a termination judgment step S1404, and a termination control step S1405.

[0145] The "End Request Reception Step" S1401 is the stage of receiving an end request, which is a request to stop or end the disclosure of health and medical related information that has already been disclosed by an individual (user) sent from a third-party terminal.

[0146] The "End Condition Retention Step" S1402 is the stage of retaining an end condition, which is a condition for determining whether it is appropriate to end based on information about the individual who made the end request when the end request is received.

[0147] The "Judgment Rule Retention Step" S1403 is the stage of retaining a judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request and the retained end condition.

[0148] The "End Judgment Step" S1404 is the stage of determining whether to end based on information about the individual, the retained end condition, and the retained judgment rule when the end request is received.

[0149] The "End Control Step" S1405 is the stage where, when the judgment result in the End Judgment Step S1404 is a judgment result that it should end, the access control unit is controlled to end the disclosure of the individual's health and medical related information.

[0150] <Summary> As described above, in the present invention, an individual (user) can stop or end the disclosure of health and medical related information that has already been disclosed according to their own will.

[0151] <Embodiment 4 (mainly corresponding to Claim 4, Claim 19, and Claim 34)> <Outline of Embodiment 4> In addition to Embodiments 1 to 3, this embodiment is characterized by including an access authentication processing unit that performs authentication for accessing the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 3 will be omitted as appropriate.

[0152] <Embodiment 4: Description of Configuration - Access Authentication Processing Unit> FIG. 15 is a diagram showing the functional configuration of a health care related information management system. As shown in this figure, the "access authentication processing unit" 1501 is configured to have a function of performing authentication for an individual to access the incentive management unit. For example, FIG. 40 is a diagram showing an example of a user interface in the health care related information management system of the present invention. Here, it is assumed that a third - party terminal uses a web browser to access the health care related information management system. On this login screen, when the user (individual) enters their personal number (My Number) information and password information in the corresponding fields and the matching information exists in the system, identity authentication is performed and access is permitted. In the example of this figure, it is described in a form where the user directly enters the information. However, for example, when the user uses a smartphone, a form may be adopted in which the IC card reading function of the smartphone is used to hold the My Number card over the smartphone to automatically read and input predetermined information such as personal number (My Number) information. In addition, for example, when the personal number (My Number) information and / or password information fails to be entered successfully three times in a row, it may be set to a locked state and the user may go to the local government (such as a municipal office) to have the lock removed. Alternatively, it may be temporarily set to a locked state, and a notice such as "Please try again the next day." may be displayed on the terminal, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Health Care Related Information Management System - Hardware Configuration> The hardware configuration of the health care related information management system in this embodiment will be described with reference to the drawings.

[0154] FIG. 16 is a diagram showing the hardware configuration of the health care-related information management system according to this embodiment. As shown in this figure, the health care-related information management system according to this embodiment includes a "CPU (Central Processing Unit)" 1601 that performs various arithmetic processes and a "main memory" 1602. Further, it includes a "non-volatile memory" 1603 that holds predetermined information, a "network I / F (Interface)" 1604 that transmits and receives information to and from a plurality of third-party terminals 1606 and an administrator terminal 1607. And they are interconnected by a data communication path such as a "bus" 1605 to transmit, receive, and process information.

[0155] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses and perform processing. In this embodiment, the program stored in the "main memory" is an access authentication processing program. Also, personal number (My Number) information, password information, etc. are stored in the "main memory" and "non-volatile memory".

[0156] The "CPU" executes the access authentication processing program stored in the "main memory", receives the input of personal number (My Number) information and password information sent from a third-party terminal through the "network I / F", authenticates whether matching information exists on the system side, and stores the input personal number (My Number) information and password information in the "main memory" and "non-volatile memory".

[0157] <Embodiment 4 Health Care-Related Information Management System: Processing Flow> FIG. 17 is a diagram showing the processing flow when the health care related information management system according to this embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S1701.

[0158] The "access authentication processing step" S1701 is a stage where the input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0159] <Summary> As described above, in the present invention, by performing access authentication first on the login screen of the health care related information management system, access to information related to incentives can be restricted to the individual (user) himself / herself.

[0160] <Embodiment 5 (mainly corresponding to Claims 5, 20, and 35)> <Outline of Embodiment 5> In addition to Embodiments 1 to 4, this embodiment is characterized in that it includes a consent information acquisition unit that acquires consent information, which is information indicating consent to receive incentives by the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 4 will be omitted as appropriate.

[0161] <Explanation of the Configuration of Embodiment 5: Consent Information Acquisition Unit> FIG. 18 is a diagram showing the functional configuration of the health care related information management system of this embodiment. As shown in this figure, the "consent information acquisition unit" 1802 is configured to have a function of acquiring consent information, which is information indicating consent to receive incentives by the incentive management unit, after being authenticated by the access authentication processing unit 1801. FIG. 41 is a diagram showing an example of a user interface in the health care related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields, and matching information exists in the system for access authentication, the system proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent Process", the system transitions to a screen for obtaining the consent of the individual (user). Figure 42 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to prepare a user interface such as a pull-down menu format in the "Consent / Non-consent" field, and by clicking, touching, or tapping it, for example, either a "〇" mark or an "×" mark is input to accept the consent or non-consent intention of the individual (user) to accept the incentive. By clicking, touching, or tapping the OK button, the input consent information is sent to the incentive management department for storage and management. Note that by clicking, touching, or tapping the End button, it is possible to return to the function selection screen of Figure 41.

[0162] Figure 40 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields, and matching information exists in the system for access authentication, the system proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(B) Browsing Process", the system transitions to a screen where the relationship between the health and medical-related information of the individual (user) and the incentives granted can be viewed. Figure 43 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the incentives granted corresponding thereto in an easy-to-understand manner, such as in a list format. This allows one to immediately see which health and medical related information the incentives granted at the time of viewing are associated with. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41. FIG. 40 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, after the individual (user) enters their My Number information and password information in the corresponding fields and access authentication is performed when the matching information exists in the system, they move to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to “(C) Maintenance Process”, the health and medical related information for which consent / non-consent has not yet been given regarding the health and medical related information of the individual (user) is displayed, and the screen also transitions to a screen where the health and medical related information for which consent / non-consent has already been given is also displayed. FIG. 44 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the corresponding consent / non-consent status in an easy-to-understand manner, such as in a list format. Thus, for the health and medical related information for which consent / non-consent has not yet been given at the time of viewing, the individual (user) prepares a user interface in the form of a pull-down menu, enters an “〇” mark in the “Consent / Non-consent” column, and clicks, touches, or taps the OK button, whereby the granting of incentives and the like are processed. On the other hand, for the health and medical related information for which an “〇” mark or “×” mark has already been entered in the “Consent / Non-consent” column, the individual (user) can review it as appropriate and, for example, change from consent to non-consent or from non-consent to consent, and by clicking, touching, or tapping the OK button, update processing becomes possible. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0163] <Embodiment 5 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0164] FIG. 19 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1901 that performs various arithmetic processes, and a "main memory" 1902. It also includes a "non-volatile memory" 1903 that holds predetermined information, and a "network I / F (Interface)" 1904 that transmits and receives information with a plurality of third-party terminals 1906 and an administrator terminal 1907. And they are interconnected by a data communication path such as a "bus" 1905 to transmit, receive, and process information.

[0165] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also the work area of the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. In addition, my number information, password information, consent information, etc. are stored in the "main memory" and "non-volatile memory".

[0166] The "CPU" executes the access authentication processing program stored in the "main memory", accepts the input of personal number (my number) information and password information sent from the third-party terminal through the "network I / F", authenticates whether there is matching information, and stores the personal number (my number) information and password information in the "main memory" and "non-volatile memory". Also, the "CPU" executes a consent information acquisition program stored in the "main memory", and through the "network I / F", consent information indicating the intention of an individual (user) whether to disclose for each piece of health and medical related information sent from a third-party terminal is acquired. Also, the consent information is stored in the "main memory" or the "non-volatile memory".

[0167] <Embodiment 5 Health and Medical Related Information Management System: Processing Flow> FIG. 20 is a diagram showing the processing flow when the health and medical related information management system in this embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "access authentication processing step" S2001 is a stage where input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0169] The "consent information acquisition step" S2002 is a stage where, after being authenticated in the access authentication processing step, consent information, which is information indicating acceptance of incentives by the incentive management unit, is acquired.

[0170] <Summary> As described above, in the present invention, it is possible to acquire consent information, which is information indicating acceptance of incentives, for health and medical related information regarding an individual (user).

[0171] <Embodiment 6 (Mainly Corresponding to Claim 6, Claim 21, and Claim 36)> <Outline of Embodiment 6> In addition to Embodiments 1 to 5, this embodiment is characterized by including an incentive provision processing unit that performs incentive provision processing, which is processing for providing an incentive when consent information is obtained by a consent information acquisition unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 5 will be omitted as appropriate.

[0172] <Description of the Configuration of Embodiment 6: Incentive Provision Processing Unit> FIG. 21 is a diagram showing the functional configuration of a health care-related information management system. As shown in this figure, the "incentive processing unit" 2103 is configured to have a function of performing incentive provision processing for providing an incentive when consent information is obtained by a consent information acquisition unit. FIG. 44 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, for health care-related information with an "〇" mark indicating consent to public disclosure in the "Consent / Disagreement" column regarding the public disclosure permission of an individual (user), an incentive to be automatically granted is calculated and granted based on a predetermined calculation rule. Here, for health care-related information about one individual, it is calculated and granted as 1000 minor points (points) for one recipient based on a predetermined calculation rule. Also, regarding the incentive calculation rule, a weighting process may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health care-related information, and different incentives may be calculated and granted for each health care-related information. In particular, for example, various infectious diseases defined by the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the leading causes of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease, or eye diseases with a large number of patients, and novel coronavirus infections, and rare diseases with few cases worldwide, considering that the disclosure of such health care-related information to a third party can greatly contribute to medical progress, it is conceivable to set the calculation rule to give more (higher) incentives than other diseases.

[0173] Also, "incentive" simply means "motivation, reward", and it means intentionally stimulating or the like with the aim of causing some action. In the present invention, "incentive" may include, in addition to the above-mentioned minor points, provision of individual information services or general information services to information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items that can be used on the network, provision of rights, for example, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (such as a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc. In the present invention, the disclosure permission information indicating whether or not to permit disclosure to a third party is already associated and stored and managed for health and medical related information about an individual. Or, in the case where an individual (user) newly registers health and medical related information concerning himself / herself in the health and medical related information storage section and the disclosure permission information has not yet been associated and stored and managed, the present invention can be applied to either case. That is, although the health and medical related information management system does not hold health and medical related information about an individual, for example, if the health and medical related information of the individual is held in a terminal owned by the individual and this is uploaded to the present system, when it is determined that the information is publicly available as health and medical related information by a formal check of the uploaded information, the incentive function section described above can be configured to function so as to grant an incentive according to the result. In this case, the access control section of the present system may be configured not to reject the viewing access of health and medical related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualification of the third party. Note that uploading the health and medical related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal but another system that stores other health and medical related information. For example, it can be configured such that the health and medical related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to the present system with the consent of the individual. In this case, when the health and medical related information of the individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive function section described above can be configured to function.

[0174] FIG. 40 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system for access authentication, they move to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Browsing Process", they transition to a screen where they can view the relationship between the health and medical-related information about the individual (user) and the incentives granted. Figure 43 is a diagram showing an example of the user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health and medical-related information of the target individual and the corresponding incentives in an easy-to-understand format such as a list. This allows one to immediately see which health and medical-related information the incentives granted at the time of viewing are associated with. By clicking, touching, or tapping the end button, one can return to the function selection screen in Figure 41.

[0175] Figure 40 is a diagram showing an example of the user interface in the health and medical-related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system for access authentication, they move to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", they transition to a screen that displays the health and medical-related information about the individual (user) for which consent / non-consent has not yet been given, as well as the health and medical-related information for which consent / non-consent has already been given. Figure 44 is a diagram showing an example of the user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health care-related information of the target individual and the corresponding consent or dissent status in an easy-to-understand list format or the like. Thereby, for health care-related information for which consent / dissent has not yet been given at the time of viewing, the individual (user) can input a "〇" mark in the "Consent / Dissent" column in the form of a pull-down menu, click, touch, or tap the OK button, and incentives and the like are processed. On the other hand, for health care-related information for which a "〇" mark or "×" mark has already been input in the "Consent / Dissent" column, the individual (user) can review it and, for example, change from consent to dissent or from dissent to consent, and click, touch, or tap the OK button to enable update processing. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0176] <Embodiment 6 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in this embodiment will be described with reference to the drawings.

[0177] FIG. 22 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2201 that performs various arithmetic processes and a "main memory" 2202. It also includes a "non-volatile memory" 2203 that holds predetermined information, a "network I / F (interface)" 2204 that transmits and receives information with a plurality of third-party terminals 2206 and an administrator terminal 2207. And they are interconnected by a data communication path such as a "bus" 2205 to transmit, receive, and process information.

[0178] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that also serves as a work area for that program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, an incentive provision processing program, and the like. Also, personal number (My Number) information, password information, consent information, incentive information, etc. are stored in the "main memory" and the "non-volatile memory".

[0179] The "CPU" executes the access authentication processing program stored in the "main memory", and through the "network I / F", accepts the input of personal number (My Number) information and password information sent from a third-party terminal, and authenticates whether there is matching information. Also, the My Number information and password information are stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the consent information acquisition program stored in the "main memory", and through the "network I / F", acquires consent information indicating the intention of an individual (user) for each piece of health and medical-related information sent from a third-party terminal. Also, the consent information is stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the incentive provision processing program stored in the "main memory", and for health and medical-related information about an individual, when consent has been obtained, performs incentive provision processing, which is processing for providing an incentive, and stores the incentive information in the "main memory" and the "non-volatile memory".

[0180] <Embodiment 6 Health and Medical-Related Information Management System: Processing Flow> FIG. 23 is a diagram showing the flow of processing when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method including an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "incentive provision processing step" S2303 is a stage in which incentive provision processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition unit, is performed.

[0182] <Summary> As described above, in the present invention, for health care-related information about an individual (user), when the individual gives consent, incentive provision processing, which is processing for providing an incentive, can be executed, and appropriate incentive provision processing can be performed on the health care-related information about the individual.

[0183] <Embodiment 7 (mainly corresponding to claims 7, 22, and 37)> <Outline of Embodiment 7> This embodiment includes a health care related information storage unit that stores health care related information about an individual, and an access control unit that allows a third party to access the health care related information stored in the health care related information storage unit via a network. The access control unit includes an IP packet analysis means for analyzing an IP packet sent via the network, a destination IP address determination means for extracting a destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care related information management system, an access ID / user ID acquisition means for acquiring an access ID indicating an access subject and a user ID indicating a user belonging to the access subject from the IP payload when the destination IP address is the IP address of its own health care related information management system, an access subject / user attribute acquisition means for acquiring access subject information, user information, and user attribute information (here, information indicating whether the user is a medical practitioner or a non-medical practitioner) corresponding to the access ID and the user ID, an access control means for controlling access to health care related information from a third party, and a public permission / denial information storage unit for storing public permission / denial information indicating whether to permit the disclosure of an individual's health care related information to a third party. Note that descriptions of functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 6 are omitted as appropriate.

[0184] <Embodiment 7 Functional Configuration> FIG. 24 is a diagram showing the functional configuration of the health care related information management system in Embodiment 7. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID / user ID acquisition means, an access subject / user attribute acquisition means, an access control means, and a public permission / denial information storage unit.

[0185] <Explanation of Configuration in Embodiment 7: IP Packet Analysis Means of Access Control Unit> The "IP packet analysis means" 2401 is configured to have a function of analyzing IP packets sent via a network (especially the Internet). Generally, an IP packet is composed of an IP header part and an IP payload part, and various information and data are stored therein. The "IP packet analysis means" 2401 is responsible for analyzing and examining what kind of information and data are contained therein.

[0186] <Embodiment 7 Description of Configuration: Destination IP Address Determination Means of Access Control Unit> The "destination IP address determination means" 2402 is configured to have a function of extracting the destination IP address from the header part of the sent IP packet and determining whether it is the IP address of its own health care-related information management system. Generally, an IP packet contains at least a source IP address representing the sender and a destination IP address representing the recipient in the IP header part. The "destination IP address determination means" 2402 refers to the destination IP address extracted from the IP header part to determine whether the IP packet is sent to its own health care-related information management system. If it is determined that the packet is sent to itself, the process proceeds to the next step. If it is determined that the packet is not sent to itself, the IP packet is ignored and no further operation is performed.

[0187] <Embodiment 7 Description of Configuration: Access ID / User ID Acquisition Means of Access Control Unit> When it is determined that the IP packet is sent to its own health care-related information management system, the "access ID / user ID acquisition means" 2403 is configured to have a function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject.

[0188] <Embodiment 7 Description of Configuration: Access Subject User Attribute Acquisition Means of Access Control Unit> The "Access Subject User Attribute Acquisition Means" 2404 is configured to have a function of acquiring access subject information corresponding to the access ID and user ID, user information belonging to the access subject, and user attribute information for the user (here, information indicating whether the user is a medical worker or a non-medical worker). The access subject information is information that specifically represents the access subject, and is represented by, for example, names such as "Edogawa Central Hospital" and "Edogawa Pharmaceutical". The user information is information that specifically represents employees belonging to the access subject, and is represented by, for example, names such as "Ichiro Suzuki", an employee belonging to "Edogawa Central Hospital", and "Hideo Maeda", an employee belonging to "Edogawa Pharmaceutical". Furthermore, the user attribute information is associated with the user information and is attribute information indicating whether the user is a medical worker or a non-medical worker, and is represented by, for example, "medical worker" (abbreviated form "medical"), "non-medical worker" (abbreviated form "non-medical"), etc.

[0189] Here, "medical worker" preferably includes at least physicians, dentists, pharmacists, health nurses, midwives, nurses, assistant nurses, physical therapists, occupational therapists, vision trainers, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, medical office workers, etc. Among the "medical workers" as described above, the role of the so-called primary care medical workers (for example, primary care physicians, primary care pharmacists, primary care dentists) who usually conduct examinations and medication guidance for individuals (patients) on a daily basis is very important, and it is preferable to grant the right to access the personal health and medical related information stored in the health and medical related information storage section and to edit, add, or delete the health and medical related information as appropriate according to needs.

[0190] For example, a "primary care physician" refers to a physician who can be consulted about anything, is well-versed in the latest medical information, can introduce specialists and specialized medical institutions when necessary, and has comprehensive capabilities to undertake local medical care, health care, and welfare that are close at hand and reliable. A "primary care physician" should be able to: (1) In daily medical consultations, understand the patient's life background, provide appropriate medical treatment and health guidance, and when unable to provide medical treatment or guidance beyond their own expertise, cooperate with local physicians, medical institutions, etc. to provide solutions; (2) Share necessary information with local physicians, medical institutions, etc. to build a system that can respond to patients even on holidays and at night, so that the best medical care can continue for patients outside the physician's own consultation hours; (3) In addition to daily medical consultations, build a trust relationship with local residents, actively participate in social activities and administrative activities related to local medical care such as health consultations, health examinations / cancer screenings, maternal and child health care, school health care, industrial health care, and local health care, cooperate with health care, nursing care, and welfare workers, and promote home medical care so that local elderly people can live in the area for as long as possible; (4) It is desirable that they are capable of providing appropriate and easy-to-understand medical information to patients and their families.

[0191] Also, for example, a "primary care pharmacist" refers to a pharmacist who has rich knowledge and experience in drug treatment, health care, and nursing care, and can respond to consultations in line with the needs of patients and consumers. A "designated pharmacist" is preferably a professional who can perform the following functions: (1) A pharmacist manages the medication status of a single patient at a single pharmacy in a comprehensive manner and continuously (for example, to ensure the safe and secure use of medications, comprehensively grasp information on medications used by patients, such as prescription medications and over-the-counter drugs, at a single location, and continuously confirm issues such as medication duplication, drug interactions, the effectiveness of medications, and the absence of side effects); (2) Provide 24-hour support or conduct home medical care by visiting the patient's home (for example, respond to consultations regarding medications, such as how to take medications and side effects, by phone even outside the pharmacy's business hours, such as on holidays and at night. Also, deliver medications based on prescriptions at night and on holidays as needed. Visit the homes of patients who have difficulty going out, such as the elderly, explain the medications, and check the remaining medications); (3) Collaborate with prescribing physicians and medical institutions (for example, confirm the prescription content, make inquiries and proposals to physicians as needed. Monitor the patient's condition even after delivering medications to the patient, feedback the situation to the prescribing physician, and check the remaining medications. Respond not only to consultations regarding medications but also to a wide range of health-related consultations, and in some cases, recommend patients to visit medical institutions. Also, collaborate with local medical institutions to build a relationship where patients can be supported by a team on a daily basis).

[0192] Also, for example, a "designated dentist" refers to a dentist who not only provides safe and secure dental care but also has a wide range of knowledge and insights related to medical care and nursing care, aims to maintain and improve the oral functions of local residents throughout their lives, and can fulfill their responsibilities as a person who contributes to local medical care. A "designated dentist" is preferably a professional who can perform the following functions: (1) Provide appropriate dental treatment and health guidance according to the life stages from infancy to old age for continuous management and prevention of disease progression, and contribute to the maintenance and improvement of oral and overall health; (2) Play a role in improving oral health for local residents through health activities such as dental check-ups together with the government and related organizations; (3) Collaborate with local related institutions and other industries to provide seamless home dental care and nursing services at various places of treatment for patients who have difficulty visiting a hospital, and actively participate in comprehensive local care. In addition, flag information that can identify that the user is an attending medical professional associated with the third-party identification information described later may be added or associated. Regarding the information indicating the attending medical professional, any one of an individual (such as a patient), the company to which the individual belongs, the health insurance cooperative to which the individual belongs, or the local government where the individual resides may, as appropriate and as necessary, use a third-party terminal to perform setting, modification, and deletion, or the above-described administrator may use an administrator terminal to perform registration, editing, and deletion.

[0193] In addition, "non-medical professionals" preferably include at least employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), combined health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies.

[0194] <Embodiment 7 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 2405 is configured to have a function of performing access control when a third party accesses the health care-related information storage unit via a network.

[0195] FIG. 25 is a diagram showing an example of the functional configuration of the health care-related information management system in the present embodiment. First, the IP packet analysis means analyzes the sent IP packet 2501 to check what information and data are included. For example, it analyzes and checks whether the source IP address and destination IP address are included in the IP header part of the IP packet.

[0196] Next, the destination IP address determination means extracts the destination IP address included in the received IP packet 2501 and determines whether it is addressed to its own health care related information management system. At this time, the access control unit 2502 stores an IP address table 2503, and refers to the table to determine whether it is addressed to its own health care related information management system. If the stored IP address (for example, 192.168.0.1) matches the destination IP address, it is determined that it is addressed to its own health care related information management system, and the process proceeds to the next process. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, when the received IP packet is addressed to its own health care related information management system by the access ID / user ID acquisition means, the access ID indicating the access subject stored in the IP payload of the IP packet and the user ID indicating the user belonging to the access subject are extracted and acquired.

[0198] Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores an access ID / user ID table 2504, and refers to the table to acquire specific access subject information, user information, and user attribute information. Here, when the access ID is "A0001", the access subject information is "Edogawa Central Hospital", when the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is "medical staff". Also, when the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", when the user ID is "D0001", the user information is "Hideo Maeda", and the user attribute information is "non-medical staff". By the operations of the means up to this point, it is possible to determine whether a third party who has accessed the health care related information management system is a medical staff or a non-medical staff.

[0199] Next, the access control means varies the viewing range of the health care-related information depending on whether the third party is a medical worker or a non-medical worker. For example, if the user belonging to the third-party access subject (in this case, "Edogawa Central Hospital") is "Ichiro Suzuki" and his / her attribute information is "medical worker", all of the health care-related information regarding the individual can be viewed. On the other hand, for example, if the user belonging to the third-party access subject (in this case, "Edogawa Pharmaceutical") is "Hideo Maeda" and his / her attribute information is "non-medical worker", a part of the health care-related information regarding the individual (including all) or the health care-related information anonymized by a predetermined anonymization method described later can be viewed. In this way, it is possible to determine who the third-party user is and whether his / her attribute information is "medical worker" or "non-medical worker", and thereby vary the viewing range of the health care-related information regarding the individual. It should be noted that it is preferable that these tables described above enable an administrator who is responsible for managing and operating the health care-related information management system to register, edit, and delete information using an administrator terminal. Further, it is preferable that these access subject information, user information, and user attribute information ("medical worker" or "non-medical worker") are also associated with the third-party identification information described later.

[0200] <Embodiment 7 Explanation of Configuration: Public Permission / Prohibition Information Retention Section of Access Control Unit> As shown in FIG. 24, the "publication permission information retention unit" 2406 is configured to have a function of retaining publication permission information indicating whether to publish its own health and medical related information to a third party that has accessed health and medical related information about an individual via a network. Specifically, it is desirable to be configured such that information indicating "publication permission" or "publication rejection" can be set at the discretion of an individual from a third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, "publication permission" may be set as "1" and "publication rejection" may be set as "0" as binary information (flag information). Also, the publication permission information may be configured such that it can be set whether to publish or not publish in units of a predetermined block of the health and medical related information. For example, it is conceivable to set "publication permission" for health and medical related information regarding internal medicine among the medical departments, while setting "publication rejection" for health and medical related information regarding psychiatry. Also, the publication permission information may be configured such that, by combination with third-party identification information described later, when the third party is a specific medical worker, it can be set separately for the case of "publication permission" and the case of "publication rejection". For example, when the third-party identification information represents "doctor", the health and medical related information of an individual is set as "publication permission", while when the third-party identification information represents a specific medical worker (for example, an accounting staff or an accounting staff, etc.), it is conceivable to set the health and medical related information of an individual as "publication rejection".

[0201] <Embodiment 7 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0202] FIG. 26 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the access control unit in the present embodiment includes a "CPU (Central Processing Unit)" 2601 that performs various arithmetic processes, and a "main memory" 2602. Further, it includes a "non-volatile memory" 2603 that holds predetermined information, and a "network I / F (Interface)" 2604 that transmits and receives information to and from a plurality of third-party terminals 2606 and an administrator terminal 2607. And they are interconnected by a data communication path such as a "bus" 2605 to transmit, receive, and process information.

[0203] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processes. In the present embodiment, the programs stored in the "main memory" are a health care-related information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a public permission / non-permission information holding program, an access control program, and the like. Further, health care-related information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, public permission / non-permission information, etc. are stored in the "main memory" and "non-volatile memory".

[0204] The "CPU" executes a health care-related information storage program stored in the "main memory", and stores health care-related information about an individual sent from a third-party terminal, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.), through the "network I / F" in the "main memory" and the "non-volatile memory". Also, it executes an IP packet analysis program stored in the "main memory" to analyze the sent IP packets via a network (especially the Internet). Further, it executes a destination IP address determination program stored in the "main memory" to determine whether the sent destination IP address is the IP address of its own health care information sharing system, and if it is determined to be addressed to itself, stores that IP address in the "main memory" and the "non-volatile memory". Additionally, it executes an access ID / user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the access subject stored in the IP payload of the sent IP packet and the user ID indicating the user belonging to that access subject, and stores them in the "main memory" and the "non-volatile memory". Moreover, it executes an access subject user attribute acquisition program stored in the "main memory" to acquire the access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional. For example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID, and stores them in the "main memory" and the "non-volatile memory". Also, it executes a public release permission information retention program stored in the "main memory" to acquire the public release permission information indicating whether to publicly release an individual's health care-related information to a third party, and stores it in the "main memory" and the "non-volatile memory". Furthermore, it executes an access control program stored in the "main memory" to control access to health care-related information about an individual.

[0205] <Embodiment 7 Health Care-Related Information Management System: Processing Flow> FIG. 27 is a diagram showing the processing flow when using the health care related information management system according to this embodiment. As shown in the figure, it is a processing method including a health care related information accumulation step S2701, an IP packet analysis step S2702, a destination IP address determination step S2703, an access ID / user ID acquisition step S2704, an access subject user attribute acquisition step S2705, a public permission / non-permission information holding step S2706, and an access control step S2707.

[0206] The "health care related information accumulation step" S2701 is a stage of accumulating health care related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0207] The "IP packet analysis step" S2702 is a stage of analyzing the IP packets sent via a network (especially the Internet).

[0208] The "destination IP address determination step" S2703 is a stage of extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care related information management system.

[0209] The "access ID / user ID acquisition step" S2704 is a stage of acquiring the access ID indicating the access subject and the user ID indicating the user belonging to the access subject from the IP payload when the destination IP address is the IP address of its own health care related information management system.

[0210] The "access subject user attribute acquisition step" S2705 is a stage of acquiring the access subject information, user information, and user attribute information corresponding to the access ID and user ID (here, information indicating whether the user is a medical worker or a non-medical worker. For example, "medical worker" or "non-medical worker").

[0211] The "public permission information retention step" S2706 is a step of retaining public permission information indicating whether to permit public disclosure to a third party regarding an individual's health and medical related information.

[0212] The "access control step" S2707 is a step of controlling access to the health and medical related information management system.

[0213] <Summary> As described above, it is possible to retain public permission information indicating whether to permit public disclosure to a third party regarding health and medical related information about an individual (user). That is, according to the individual's will, public permission or non - permission can be selected and set.

[0214] <Embodiment 8 (mainly corresponding to Claim 8, Claim 23, and Claim 38)> <Outline of Embodiment 8>

[0215] FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in Embodiment 8. As shown in this figure, this embodiment is characterized in that, in addition to Embodiments 1 to 7, a third - party identification information retention unit is provided. Hereinafter, regarding the health and medical related information management system in this embodiment, the functional configuration, hardware configuration, and processing flow will be described in order. Hereafter, descriptions of the same functions, hardware configurations, and processing flows as in Embodiments 1 to 7 will be omitted as appropriate.

[0216] <Functional Configuration of Embodiment 8> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment. In this embodiment, by providing a third - party identification information retention unit, it is possible to identify whether a third party is a medical practitioner or a non - medical practitioner.

[0217] <Health and Medical Related Information Management System in Embodiment 8: Functional Configuration> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment.

[0218] <Embodiment 8: Description of Configuration - Third - Party Identification Information Retention Unit of Access Control Unit> The "third - party identification information retention unit" 2807 is configured to have a function of retaining third - party identification information for identifying whether a third party who has accessed the health - care - related information stored in the health - care - related information storage unit via a network is a medical professional or a non - medical professional. Here, the third - party identification information is, for example, information created by combining numbers, letters, symbols, etc. consisting of 12 digits, and may be information that can uniquely identify a third party. For example, specifically, My Number information or the insured person's certificate number may be used. Further, it is preferable that the third - party identification information is associated with the above - mentioned access - subject information, user information, and user - attribute information ("medical professional" or "non - medical professional"). Also, the above - mentioned administrator may be able to register, edit, and delete the third - party identification information using the administrator terminal.

[0219] Note that, even when the public release permission / denial information indicates "public release permission" due to the combination of the above - mentioned public release permission / denial information and third - party identification information, when the third party is a specific medical professional, it may be possible to set it separately for the case of permitting access and the case of not permitting access. For example, when the third - party identification information represents "doctor", access to the health - care - related information is permitted. On the other hand, when the third - party identification information represents a specific medical professional (for example, an accounting staff or an auditing staff, etc.), access to the health - care - related information may be made non - permissible. Also, for example, information indicating the department to which a person belongs may be added to the third-party identification information, and the permission or non-permission to access health care-related information may be controlled based on the information indicating the department to which the person belongs. Also, for example, the permission or non-permission to access health care-related information may be controlled based on information regarding the expertise of the user identified by the third-party identification information (for example, the specialty field and years of experience of a "doctor" or "nurse"). Also, for example, the method of obtaining health care-related information by a third party (for example, only viewable, text conversion of information possible, copyable, transferable, bulk download of anonymized information possible, etc.) may be changed based on a combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise. When it is possible to download, it is preferable to be able to use technologies such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, the access right to the patient himself / herself may be granted to a third party based on a combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise. For example, it is assumed that a PCR test staff member who is a medical worker sends the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0220] Regarding the combination of these pieces of information, it is conceivable that the above-described administrator uses the administrator terminal to register them in advance in a table format or the like in the above-described access control unit so that they can be edited and deleted as appropriate according to the need. In addition, for example, as medical professionals, doctors, dentists, and pharmacists can be mentioned. Regarding these third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist roster registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, at least a part of the third-party identification information may include the number described in the qualification license. In addition, symbols and numbers (including branch numbers) described in the insurance card of the health insurance association to which the user belongs, the number of the driver's license, and the personal number (My Number) information described in the personal number (My Number) card may be included as at least a part of the third-party identification information. Note that it may be possible to identify the user by using third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark).

[0221] <Embodiment 8 Health and Medical Related Information Management System: Hardware Configuration> FIG. 29 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2901 that performs various arithmetic processes, and a "main memory" 2902. It also includes a "non-volatile memory" 2903 that holds predetermined information, and a "network I / F" 2904 that transmits and receives information with a third-party terminal 2906 and an administrator terminal 2907. And they are interconnected by a data communication path such as a "bus" 2905 to transmit, receive, and process information.

[0222] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that is also the working area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In the present embodiment, the program stored in the "main memory" is mainly a third-party identification information holding program and the like. Also, third-party identification information and the like are stored in the "main memory" and the "non-volatile memory".

[0223] The "CPU" executes the third-party identification information holding program stored in the "main memory" to hold third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker, and stores the third-party identification information in the "main memory" and the "non-volatile memory".

[0224] <Embodiment 8 Health Care-Related Information Management System: Processing Flow> FIG. 30 is a diagram showing the processing flow when the health care-related information management system in the present embodiment is used. As shown in this figure, it is a processing method consisting of a third-party identification information holding step S3007.

[0225] The "third-party identification information holding step" S3007 is a stage of holding third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker.

[0226] <Summary> From the above, it is possible to identify whether a third party is a medical worker or a non-medical worker. For example, even among the same medical staff, it is possible to distinguish whether the individual is their attending physician (primary care physician), and even among the same non-medical staff, it is possible to distinguish whether the individual is an employee (including researchers) belonging to a pharmaceutical company that develops and manufactures therapeutic drugs related to their illness, or an employee belonging to a government agency.

[0227] <Embodiment 9 (mainly corresponding to Claim 9, Claim 24, and Claim 39)> <Overview of Embodiment 9>

[0228] FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 9. Hereinafter, the functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 8 will be omitted as appropriate.

[0229] Hereinafter, the health care-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0230] <Functional Configuration of Embodiment 9> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment. By adopting such a configuration, when the disclosure permission / denial information held in the disclosure permission / denial information holding unit indicates disclosure permission and the third-party identification information indicates that the person is a medical staff, it becomes possible to view the health care-related information accumulated in the health care-related information accumulation unit.

[0231] <Health Care-Related Information Management System in Embodiment 9: Functional Configuration> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment.

[0232] <Explanation of the Configuration in Embodiment 9: Disclosure Permission / Denial Information Holding Unit of the Access Control Unit> The "Disclosure Permission / Prohibition Information Retention Unit" 3106 is configured to have a function of retaining disclosure permission / prohibition information indicating whether to disclose its own health and medical related information to a third party that has accessed the health and medical related information about an individual via a network. Specifically, it is preferably configured such that information indicating "Disclosure Permission" or "Disclosure Prohibition" can be set according to an individual's will from a third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, it may be two-value information (flag information) where "Disclosure Permission" is "1" and "Disclosure Prohibition" is "0". Also, the disclosure permission / prohibition information may be set so as to be able to set whether to disclose in units of a predetermined block among the health and medical related information. For example, it is conceivable to set "Disclosure Permission" for the health and medical related information regarding internal medicine among the medical departments, while setting "Disclosure Prohibition" for the health and medical related information regarding psychiatry. Further, the disclosure permission / prohibition information may be set so as to be distinguishable between the case of "Disclosure Permission" and the case of "Disclosure Prohibition" when the third party is a specific medical worker by combination with the above-described third-party identification information. For example, when the third-party identification information represents "physician", the health and medical related information of the individual is set as "Disclosure Permission", while when the third-party identification information represents a specific medical worker (for example, an accounting staff or an accounting officer, etc.), it is conceivable to set the health and medical related information of the individual as "Disclosure Prohibition".

[0233] <Embodiment 9 Explanation of Configuration: Third-Party Identification Information Retention Unit of Access Control Unit> The "Third-Party Identification Information Retention Unit" 3107 is configured to have a function of retaining third-party identification information for identifying whether a third party that has accessed the health and medical related information stored in the health and medical related information storage unit via a network is a medical worker or a non-medical worker. Here, the third-party identification information may be information created by combining, for example, numbers, letters, symbols, etc. consisting of 12 digits and may be information that can uniquely identify a third party. For example, specifically, My Number information, the insured person's certificate number, etc. may be used. In addition, the third-party identification information is preferably associated with the above-described access subject information, user information, and user attribute information ("medical professional" or "non-medical professional"). Further, the administrator may be able to register, edit, and delete the third-party identification information using the administrator terminal as described above.

[0234] Note that even when the public disclosure permission information indicates "public disclosure permitted" due to the combination of the above-described public disclosure permission information and third-party identification information, if the third party is a specific medical professional, it may be possible to set it separately for cases where access is permitted and cases where access is not permitted. For example, when the third-party identification information represents "doctor", access to health care-related information may be permitted. On the other hand, when the third-party identification information represents a specific medical professional (e.g., an accounting staff or an accountant), access to health care-related information may be made not permitted.

[0235] For example, information indicating the department to which a person belongs may be added to the third-party identification information, and based on the information indicating the department to which the person belongs, it may be possible to control the permission or non-permission of access to health care-related information. Also, for example, based on information regarding the expertise of the user identified by the third-party identification information (e.g., the specialty field and number of years of experience of a "doctor" or "nurse"), it may be possible to control the permission or non-permission of access to health care-related information. Further, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise, it may be possible to change the method of obtaining health care-related information by a third party (e.g., only viewable, text conversion of information possible, copyable, transferable, bulk download of anonymized information possible, etc.). When making it downloadable, it is preferable to enable the use of technologies such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise, it may be possible to grant a third party the right of access to the patient himself / herself. For example, it is assumed that a PCR test staff member who is a medical worker transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0236] Regarding the combination of these pieces of information, it is conceivable that the above-described administrator uses an administrator terminal to register them in a table format or the like in advance in the above-described access control unit so that they can be edited and deleted as appropriate according to need. Also, for example, as medical professionals, doctors, dentists, and pharmacists can be mentioned. Regarding this third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist list registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, regarding the third-party identification information, at least a part of it may include the number described in the qualification license. Also, symbols and numbers (including branch numbers) described in the insured certificate of the health insurance association to which the user belongs, the number of the driver's license, personal number (My Number) information described in the personal number (My Number) card, etc. may be included as at least a part of the third-party identification information. In addition, it may be possible to identify the user by using third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark).

[0237] <Embodiment 9 Explanation of Configuration: Access Control Means of Access Control Unit> The "access control means" 3105 is related to access control when a third party accesses the health care-related information storage unit via a network. When the access permission / denial information held in the access permission / denial information storage unit indicates access permission and the third-party identification information indicates that it is a medical professional, it is configured to have a function of making the health care-related information stored in the health care-related information storage unit viewable.

[0238] <Embodiment 9 Health Care-Related Information Management System: Hardware Configuration> FIG. 32 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 3201 that performs various arithmetic processes, and a "main memory" 3202. Further, it includes a "non-volatile memory" 3203 that holds predetermined information, a "network I / F" 3204 that transmits and receives information with a third-party terminal 3206 and an administrator terminal 3207. And they are mutually connected by a data communication path such as a "bus" 3205 to transmit, receive, and process information.

[0239] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing those addresses. In the present embodiment, the programs stored in the "main memory" are a public permission / non-permission information holding program, a third-party identification information holding program, an access control program, and the like. Further, public permission / non-permission information, third-party identification information, and the like are stored in the "main memory" and the "non-volatile memory".

[0240] The "CPU" executes the public permission information retention program stored in the "main memory", and stores the public permission information indicating whether to disclose its own health and medical related information to a third party who has accessed the health and medical related information about an individual via a network in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the third-party identification information retention program stored in the "main memory", and stores the third-party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage section via a network is a medical practitioner or a non-medical practitioner in the "main memory" and the "non-volatile memory". After that, when the "CPU" executes the access control program stored in the "main memory", and the public permission information indicates permission to disclose and the third-party identification information indicates that the third party is a medical practitioner, the health and medical related information stored in the health and medical related information storage section is made viewable.

[0241] <Embodiment 9 Health and Medical Related Information Management System: Processing Flow> Figure 33 is a diagram showing the processing flow when the health and medical related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of a public permission information retention step S3306, a third-party identification information retention step S3307, and an access control step S3308.

[0242] The "public permission information retention step" S3306 is a stage of retaining the public permission information indicating whether to disclose its own health and medical related information to a third party who has accessed the health and medical related information about an individual via a network.

[0243] The "third-party identification information retention step" S3307 is a stage of retaining the third-party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage section via a network is a medical practitioner or a non-medical practitioner.

[0244] The "access control step" S3308 refers to the stage where, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third-party identification information indicates that the person is a medical professional, the health and medical-related information stored in the health and medical-related information storage unit can be viewed.

[0245] <Summary> As described above, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third-party identification information indicates that the person is a medical professional, the health and medical-related information stored in the health and medical-related information storage unit can be viewed.

[0246] <Embodiment 10 (mainly corresponding to Claim 10, Claim 25, and Claim 40)> <Outline of Embodiment 10>

[0247] In addition to Embodiments 1 to 9, this embodiment is characterized in that it holds anonymous processing method information. Hereinafter, descriptions of the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 9 will be omitted as appropriate.

[0248] Hereinafter, the health and medical-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0249] <Functional Configuration of Embodiment 10> FIG. 34 is a diagram showing the functional configuration of the health and medical-related information management system in this embodiment. The health and medical-related information management system in this embodiment includes an anonymous processing method information holding unit.

[0250] <Health and Medical-Related Information Management System in Embodiment 10: Functional Configuration> FIG. 34 is a diagram showing the functional configuration of the health and medical-related information management system in this embodiment.

[0251] <Explanation of Configuration: Anonymous Processing Method Information Holding Unit of Access Control Unit in Embodiment 10> The "Anonymization Method Information Retention Unit" 3408 is configured to have a function of retaining information representing an anonymization method. Here, the anonymization method information may be information created by combining, for example, numbers, characters, symbols, etc. consisting of six digits, and may be information that can uniquely identify the anonymization method. Regarding the anonymization method information, the above-mentioned administrator may be able to perform registration, editing, and deletion using the administrator terminal.

[0252] There are several anonymization methods, and these are often used alone or in combination. The main anonymization methods will be briefly described below. "k-anonymization" (where k represents a natural number of 2 or more) means that for attributes (such as gender, age, place of residence, occupation, etc.) that cannot identify an individual alone but can identify an individual with a high probability when combined, for any combination of attribute values, there must be at least k occurrences in the target data. "Pseudonymization" means replacing with other descriptions or the like by a method that does not have a regularity that can be deleted or restored. "Generalization" means replacing the value of an attribute with a higher value or concept. For example, grouping by 10-year intervals or changing cucumber to the higher concept of vegetable. "Top (bottom) coding" means grouping particularly large or small attribute values for numerical attributes. For example, people aged 100 or above are grouped as "100 years or above". "Noise (error) addition" means adding random noise according to a certain distribution to numerical attributes. "Swapping (data exchange)" means (probabilistically) swapping attribute values between records for categorical attributes. Also called data swap. "Sampling" means randomly extracting a certain proportion or number from the entire original data. "Grouping" means replacing detailed items with a certain grouping or classification in attributes or histories.

[0253] <Embodiment 10 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 3405 relates to access control when a third party accesses the health care-related information storage unit via a network. When the public disclosure permission / non-permission information held in the public disclosure permission / non-permission information storage unit indicates public disclosure permission and the third party identification information indicates that the third party is a non-medical professional, it is configured to have a function of making part (including all) of the health care-related information stored in the health care-related information storage unit or the health care-related information anonymized by a predetermined anonymization method viewable.

[0254] <Embodiment 10 Health Care-Related Information Management System: Hardware Configuration> FIG. 35 is a diagram showing the hardware configuration of the health care-related information management system in the present embodiment. As shown in this figure, the health care-related information management system in the present embodiment includes a "CPU (Central Processing Unit)" 3501 that performs various arithmetic processes and a "main memory" 3502. It also includes a "non-volatile memory" 3503 that holds predetermined information, a "network I / F" 3504 that transmits and receives information with a third party terminal 3506 and an administrator terminal 3507. And they are interconnected by a data communication path such as a "bus" 3505 to transmit, receive, and process information.

[0255] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses and perform processes. In the present embodiment, the program stored in the "main memory" is an anonymization method information holding program. Also, anonymization method information and the like are stored in the "main memory" and the "non-volatile memory".

[0256] The "CPU" executes an anonymization method information retention program stored in the "main memory" and stores anonymization method information representing the anonymization method in the "main memory" and the "non-volatile memory". After that, when the access control program stored in the "main memory" indicates that public release is permitted and the third-party identification information indicates that the person is not a medical professional, a part (including all) of the health care-related information stored in the health care-related information accumulation section, or health care-related information anonymized by a predetermined anonymization method can be viewed.

[0257] <Embodiment 10 Health Care-Related Information Management System: Processing Flow> FIG. 36 is a diagram showing the processing flow when the health care-related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of an anonymization method information retention step S3608 and an access control step S3609.

[0258] The "anonymization method information retention step" S3608 is a stage of retaining anonymization method information, which is information representing a method of anonymizing health care-related information.

[0259] The "access control step" S3609 is a stage where, when the public release permission information held in the public release permission information holding section indicates public release permission and the third-party identification information indicates that the person is not a medical professional, a part (including all) of the health care-related information stored in the health care-related information accumulation section, or health care-related information anonymized by a predetermined anonymization method can be viewed.

[0260] <Explanation of an Example of Anonymization Method> FIGS. 37 to 39 are diagrams showing an example of the anonymization method. Using these, an example of the anonymization method will be briefly explained. The table shown in Figure 37 is a list of patients in an overground medical institution located in Minato Ward, Tokyo, Japan, which has not yet been anonymized. Here, it contains six attributes (name, age, gender, place of residence, religion, disease name) and data for 12 people. Among these, the "name" is information that constitutes personal data and is information that can potentially identify an individual on its own. Also, "age", "gender", "place of residence", "religion", and "disease name" are information that constitutes personal data. They are information that does not accumulate data over time and cannot identify an individual on its own. However, through combinations with other attributes or collation with external information, they are information that can potentially identify an individual. In particular, the "disease name" is very sensitive attribute information in personal data. These information correspond to the personal health and medical related information stored in the above-mentioned Health and Medical Related Information Storage Section. In this case, for a certain value of k (where k is a natural number of 2 or more), the following processing can be performed to achieve k-anonymity.

[0261] First, perform a process called "pseudonymization" and replace certain values of an attribute with an asterisk "*". All or some of the values in that column are replaced with "*". In the table shown in Figure 38, all the values of "name" and all the values of "religion" are replaced with "*". Subsequently, perform a process called "generalization" and replace individual attribute values with a broader range. For example, for "age", replace "29 years old" with "in their 20s" and "35 years old" with "in their 30s", etc., replacing with values having a certain range. Also, for "place of residence", although the value consists of prefecture and city / town / village, delete the city / town / village part and change it to only the prefecture. Figure 38 shows the anonymized table. Here, there are four equivalence classes having the same combination of the same quasi-identifiers ("age", "gender", "place of residence").

[0262] Figure 39 shows an anonymized table grouped in an easy-to-understand manner. As can be seen from this table, in any of the groups (Group A to Group D), 3-anonymity is achieved in terms of "age", "gender", and "residence". This is because in any combination of these attributes, there are more than three people. In this way, by anonymizing the health and medical-related information of individuals stored in the above-mentioned health and medical-related information storage unit, the risk of identifying individuals can be reduced.

[0263] <Summary> As described above, when the publication permission / denial information held in the publication permission / denial information holding unit indicates publication permission and the third-party identification information indicates that the person is not a medical worker, a part (including all) of the health and medical-related information stored in the health and medical-related information storage unit, or the health and medical-related information anonymized by a predetermined anonymization method can be made viewable.

Explanation of Signs

[0264] Health and Medical-Related Information Management System: 200, 300 Health and Medical-Related Information Storage Unit: 201, 301 Access Control Unit: 202, 302 Incentive Management Unit: 203, 303 Provision History Holding Unit: 204, 304 Network: 205 Third-Party Terminal: 206 Administrator Terminal: 207

Claims

1. A health care related information storage unit for storing and managing health care related information about an individual; An access control unit for controlling the disclosure of the health care related information stored in the health care related information storage unit to a third party via a network; An incentive management unit for providing an incentive to the individual in order to promote the disclosure of the health care related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose the health care related information about the individual; A health care related information management system having a provision history holding unit that holds a provision history which is a history of providing incentives to each individual.

2. Further having an incentive type information holding unit that holds incentive type information which is information indicating types of a plurality of incentives, The health care related information management system according to claim 1, wherein the incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit.

3. An end request reception unit that receives an end request which is a request to stop or end the disclosure of health care related information that has already been disclosed from an individual who has stored health care related information in the health care related information storage unit; An end condition holding unit that holds an end condition which is a condition for determining whether or not it is possible to end based on information about the individual who made the end request when the end request is received; A determination rule holding unit that holds a determination rule which is a rule for determining whether or not to end the disclosure of health care related information based on information about the individual who made the end request and the held end condition; An end determination unit that determines whether or not to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received; An end control unit that controls the access control unit to end the disclosure of the health care related information of the individual when the determination result in the end determination unit is a determination result that it should end; The health care related information management system according to claim 1, further comprising.

4. The health care related information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.

5. The health care related information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

6. The health care related information management system according to claim 5, further comprising an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive when consent information is acquired by the consent information acquisition unit.

7. The health care related information management system according to claim 1, further comprising a public permission / denial information retention unit that retains public permission / denial information indicating whether an individual permits the disclosure of his / her own health care related information to a third party.

8. The health care related information management system according to claim 7, further comprising a third party identification information retention unit that retains third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

9. The access control unit causes a medical practitioner to view the health care related information stored in the health care related information storage unit when the public permission / denial information stored in the public permission / denial information retention unit indicates permission to disclose and the third party identification information stored in the third party identification information retention unit indicates that the third party is a medical practitioner. The health care related information management system according to claim 8.

10. The access control unit causes a non-medical practitioner to view a part (including all) of the health care related information stored in the health care related information storage unit or the health care related information anonymized by a predetermined anonymization method when the public permission / denial information stored in the public permission / denial information retention unit indicates permission to disclose and the third party identification information stored in the third party identification information retention unit indicates that the third party is a non-medical practitioner. The health care related information management system according to claim 8.

11. The anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof. The health care related information management system according to claim 10.

12. The health care-related information storage unit stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical questionnaires, data of a health promotion app, and conversation data of an interactive health promotion SNS, for the health care-related information management system according to claim 1.

13. The incentive management unit provides an incentive including any one or more of provision of minor points, provision of individual information services or general information services to information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items available on the network, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (for example, a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, for the health care-related information management system according to claim 1.

14. The medical personnel include at least one or more of physicians, dentists, pharmacists, health care nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers, for the health care-related information management system according to claim 8.

15. The non-medical personnel include at least one or more of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), technical colleges, agricultural and forestry companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies, for the health care-related information management system according to claim 8.

16. A method executed by a CPU in a health care-related information management system that is a computer, comprising: A health care-related information accumulation step for accumulating and managing health care-related information related to an individual, An access control step for controlling the disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network, An incentive management step for providing an incentive to the individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history retention step described later regarding whether or not to disclose the health care-related information related to the individual, A method having a provision history retention step of retaining a provision history which is a history of providing incentives to each individual.

17. A method executed by a CPU in a health care-related information management system which is a computer, Further having an incentive type information retention step of retaining incentive type information which is information indicating types of a plurality of incentives, The method according to claim 16, wherein the incentive management step selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information retained in the incentive type information retention step.

18. A method executed by a CPU in a health care-related information management system which is a computer, An end request reception step of receiving an end request which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who is accumulating health care-related information in the health care-related information accumulation step, An end condition retention step of retaining an end condition which is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received, A judgment rule retention step of retaining a judgment rule which is a rule for determining whether or not to end the disclosure of health care-related information based on information about the individual who made the end request and the retained end condition, An end judgment step of judging whether to end based on the information about the individual, the retained end condition, and the retained judgment rule when the end request is received, An end control step of controlling the access control step to end the disclosure of the health care-related information of the individual when the judgment result in the end judgment step is a judgment result that it should end, The method according to claim 16, further comprising.

19. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 16, further comprising an access authentication processing step of performing authentication for accessing the incentive management step. **Claim 20** A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 19, further comprising a consent information acquisition step of acquiring consent information, which is information indicating acceptance of an incentive by the incentive management step, after being authenticated in the access authentication processing step. **Claim 21** A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 20, further comprising an incentive provision processing step of performing an incentive provision process, which is a process for providing an incentive, when consent information is acquired in the consent information acquisition step. **Claim 22** A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 16, further comprising a public permission / denial information retention step of retaining public permission / denial information indicating whether an individual permits the disclosure of his / her health care related information to a third party. **Claim 23** A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 22, further comprising a third party identification information retention step of retaining third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner. **Claim 24** A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 23, wherein the access control step causes the medical practitioner to view the health care related information accumulated in the health care related information accumulation step when the public permission / denial information retained in the public permission / denial information retention step indicates public permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner. **Claim 25** A method executed by a CPU in a health care related information management system that is a computer, comprising: The access control step is the method according to claim 23, wherein when the publication permission / denial information held in the publication permission / denial information holding step indicates publication permission and the third party identification information held in the third party identification information holding step indicates that the third party is a non-medical professional, a part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method is allowed to be viewed by the non-medical professional.

26. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The anonymization method is performed by at least one of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof, according to the method of claim 25.

27. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The health care-related information accumulation step accumulates health care-related information including any one or more of electronic medical record information about an individual, various examination information, prescription information, medication history information, medication status information, vital information, information on a questionnaire, data of a health promotion app, and conversation data of an interactive health promotion SNS, according to the method of claim 16.

28. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The incentive management step provides an incentive including any one or more of the provision of minor points, the provision of individual or general information services to information providers, the provision of individual drugs or supplements, the provision of books and other goods, the provision of passwords or IDs for information provision, the provision of items available on the network, the provision of the right to receive medical examinations, the provision of the right to receive diagnoses, the provision of the right to receive tests, the provision of the right to receive various services on the network, the provision of specific software (for example, a health management app or a pedometer app), the provision of points to prepaid or postpaid electronic money, the provision of product coupons, travel coupons or cash, according to the method of claim 16.

29. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The method according to claim 23, wherein the medical personnel includes at least one of a doctor, a dentist, a pharmacist, a public health nurse, a midwife, a nurse, an assistant nurse, a physical therapist, an occupational therapist, a vision trainer, a speech therapist, a prosthetist, a diagnostic radiological technologist, a diagnostic X-ray technologist, a clinical laboratory technologist, a sanitary inspector, a clinical engineer, a dental hygienist, a dental technician, a first aider, a massage therapist, an acupuncturist, a moxibustion therapist, a chiropractor, a dietitian, a nutritionist, a mental welfare worker, a social welfare worker, a care welfare worker, a certified psychologist, a clinical psychologist, and a medical office worker.

30. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The method according to claim 23, wherein the non-medical personnel includes at least one of an employee belonging to a life insurance company, a property insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, JA (Agricultural Cooperative), group health insurance, association health insurance, mutual aid association, municipal national health insurance, national health insurance association, PR company, general research institute, university and graduate school (including affiliated research institutions), junior college, agricultural and forestry-related company, fertilizer manufacturer, government agency, local government, and independent administrative institution.

31. A health care-related information accumulation step for accumulating and managing health care-related information about an individual; An access control step for controlling the disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; An incentive management step for providing an incentive to the individual in order to encourage the disclosure of the health care-related information by referring to the provision history of the provision history retention step described below regarding whether or not to disclose the health care-related information about the individual; A health care-related information management system operation program described in a computer-readable and executable manner for a health care-related information management system, which has a provision history retention step for retaining a provision history that is a history of providing incentives for each individual.

32. further comprising an incentive type information retention step for retaining incentive type information that is information indicating types of a plurality of incentives. The operation program of the health care-related information management system described in claim 31 of the computer, wherein the incentive management step selects and provides an incentive to be provided to an individual based on the incentive type information held in the incentive type information holding step according to the provision history.

33. An end request reception step of receiving an end request which is a request to stop or end the disclosure of health care-related information that has already been disclosed from an individual who has accumulated health care-related information in the health care-related information accumulation step; An end condition holding step of holding an end condition which is a condition for determining whether it is possible to end based on the information about the individual who made the end request when the end request is received; A determination rule holding step of holding a determination rule which is a rule for determining whether to end the disclosure of health care-related information based on the information about the individual who made the end request and the held end condition; An end determination step of determining whether to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received; An end control step of controlling the access control step to end the disclosure of the health care-related information of the individual when the determination result in the end determination step is a determination result that it should end; The operation program of the health care-related information management system described in claim 31 of the computer, which further has the above steps.

34. The operation program of the health care-related information management system described in claim 31 of the computer, which further has an access authentication processing step of performing authentication for accessing the incentive management step.

35. The operation program of the health care-related information management system described in claim 34 of the computer, which further has a consent information acquisition step of acquiring consent information which is information indicating consent to receive the incentive by the incentive management step after being authenticated in the access authentication processing step.

36. A health care-related information management system operation program described in a computer-readable and executable manner for the computer according to claim 35, further having an incentive provision processing step that performs incentive provision processing, which is processing for providing an incentive when consent information is obtained in the consent information acquisition step.

37. A health care-related information management system operation program described in a computer-readable and executable manner for the computer according to claim 31, further having a public permission / non-permission information retention step that retains public permission / non-permission information indicating whether an individual permits the disclosure of their own health care-related information to a third party.

38. A health care-related information management system operation program described in a computer-readable and executable manner for the computer according to claim 37, further having a third party identification information retention step that retains third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

39. The access control step causes the medical practitioner to view the health care-related information accumulated in the health care-related information accumulation step when the public permission / non-permission information retained in the public permission / non-permission information retention step indicates permission to disclose, and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner. A health care-related information management system operation program described in a computer-readable and executable manner for the computer according to claim 37.

40. The access control step causes the non-medical practitioner to view part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method, when the public permission / non-permission information retained in the public permission / non-permission information retention step indicates permission to disclose, and the third party identification information retained in the third party identification information retention step indicates that the third party is a non-medical practitioner. A health care-related information management system operation program described in a computer-readable and executable manner for the computer according to claim 37.

41. The anonymization method is at least k (k is a natural number of 2 or more) - anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, or grouping, or a combination thereof. The operation program of the health care-related information management system described in claim 40 that can be read and executed by the computer of the health care-related information management system

42. The health care-related information storage step stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, questionnaire information, data of a health promotion app, and conversation data of an interactive health promotion SNS. The operation program of the health care-related information management system described in claim 31 that can be read and executed by the computer of the health care-related information management system

43. The incentive management step provides an incentive including any one or more of providing minor points, providing individual or general information services to information providers, providing individual drugs or supplements, providing books or other products, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons, or cash. The operation program of the health care-related information management system described in claim 31 that can be read and executed by the computer of the health care-related information management system

44. The operation program of the health care-related information management system described in claim 38, which is readable and executable by a computer of the health care-related information management system, wherein the medical staff includes at least one or more of physicians, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision trainers, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, chiropractors, registered dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

45. The operation program of the health care-related information management system described in claim 38, which is readable and executable by a computer of the health care-related information management system, wherein the non-medical staff includes at least one or more of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies.

Images