Healthcare information management system

Abstract

To provide a healthcare-related information management system for providing incentives to individuals to urge them to disclose healthcare-related information by referring to a provision history, the history of providing incentives for every individual as to whether or not to allow disclosure of the healthcare-related information of the individual.SOLUTION: A healthcare-related information management system includes a healthcare-related information storage unit for storing and managing healthcare-related information relating to individuals, an access control unit for controlling disclosure of the healthcare-related information stored in the healthcare-related information storage unit to third parties via a network, an incentive management unit for providing incentives as to whether or not to allow disclosure of the healthcare-related information of individuals, to the individuals to urge them to disclose the healthcare related information by referring to a provision history of a provision history holding unit described below, and the provision history holding unit for holding the provision history, the history of providing the incentives for every individual.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a health care-related information management system for accumulating and managing health care-related information, which is information related to an individual's health care.

Background Art

[0002] Recently, systems and services that enable sharing of medical information of patients, etc. among multiple medical institutions have begun to be considered.

[0003] As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problems of avoiding duplication of test items in test data in multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system to store various test results of patients. Then, the medical information sharing server displays the corresponding electronic medical record according to the instructions of medical institution terminals such as medical facility terminals of medical institutions and health examination center terminals, and when conducting a clinical examination, searches and displays whether the results of test items identical to the test items of the clinical examination scheduled to be conducted are described in the test result DB, disclosing an information system. Also, a medical information providing system is provided in the medical information sharing server, and when the medical information providing system sends information to the information recipient, it bills for the consideration of the information, and based on the received consideration, formulates the reward that the medical information providing system can provide to the user and provides the reward to the user, which has been disclosed.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the above-described invention, only the point of formulating the rewards that the medical information providing system can offer to users and providing the rewards to users is disclosed. Regarding the health care-related information management system such as the present invention, there is a problem that it is not specified up to the point of having a function of holding a provision history which is a history of providing incentives for each individual, or / and a function of providing incentives to an individual in order to promote the disclosure of health care-related information with reference to the provision history regarding whether or not to disclose health care-related information about the individual.

Means for Solving the Problems

[0006] Based on the above-described problems, the present invention aims to provide a health care-related information management system that provides incentives to an individual in order to promote the disclosure of health care-related information about the individual with reference to a provision history which is a history of providing incentives for each individual regarding whether or not to disclose health care-related information about the individual.

[0007] Specifically, the present invention provides a health care-related information management system having a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to an individual in order to promote the disclosure of health care-related information with reference to the provision history of a provision history holding unit described later regarding whether or not to disclose health care-related information about the individual, and a provision history holding unit for holding a provision history which is a history of providing incentives for each individual.

[0008] In addition to the above features, the present invention provides a health care-related information management system having an incentive type information holding unit for holding incentive type information which is information indicating types of a plurality of incentives, and the incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit.

[0009] In addition to the above features, the present invention also provides a health care-related information management system having an end request reception unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has stored health care-related information in the health care-related information storage unit, an end condition holding unit that holds an end condition, which is a condition for determining whether to end based on information about the individual who made the end request when the end request is received, a determination rule holding unit that holds a determination rule, which is a rule for determining whether to end the disclosure of health care-related information based on information about the individual who made the end request, the held end condition, and a termination determination unit that determines whether to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received, and an end control unit that controls the access control unit to end the disclosure of the health care-related information of the individual when the determination result in the termination determination unit is a determination result that it should end.

[0010] In addition to the above features, the present invention also provides a health care-related information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] In addition to the above features, the present invention also provides a health care-related information management system having a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

[0012] In addition to the above features, the present invention also provides a health care-related information management system having an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive when consent information is acquired by the consent information acquisition unit.

[0013] In addition to the above features, the present invention provides a health care-related information management system having a disclosure permission information holding unit that holds disclosure permission information indicating whether an individual permits the disclosure of his / her own health care-related information to a third party.

[0014] In addition to the above features, the present invention provides a health care-related information management system having a third-party identification information holding unit that holds third-party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0015] In addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission for disclosure and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a medical practitioner, the health care-related information accumulated in the health care-related information accumulation unit is allowed to be viewed by the medical practitioner.

[0016] In addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission for disclosure and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a non-medical practitioner, a part (including all) of the health care-related information accumulated in the health care-related information accumulation unit or health care-related information anonymized by a predetermined anonymization method is allowed to be viewed by the non-medical practitioner.

[0017] In addition to the above features, the present invention provides a health care-related information management system in which the anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0018] In addition to the above features, the present invention provides a health care-related information management system in which a health care-related information storage unit stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, questionnaire information, data of a health promotion app, and conversation data of an interactive health promotion SNS, regarding an individual.

[0019] In addition to the above features, the present invention provides a health care-related information management system in which an incentive management unit provides an incentive including any one or more of provision of minor points, provision of individual information services or general information services to information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items available on a network, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on a network, provision of specific software (for example, a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

[0020] In addition to the above features, the present invention provides a health care-related information management system in which medical staff includes at least one or more of physicians, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, registered dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0021] In addition to the above features, the present invention provides a health care-related information management system in which non-medical workers include at least one or more employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), union health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0022] Furthermore, regarding the above-mentioned health care-related information management system, in order to realize them, a method executed by the CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner are provided.

[0023] Specifically, the present invention provides a method executed by the CPU in the health care-related information management system which is a computer, the method including: a health care-related information accumulation step for accumulating and managing health care-related information about an individual; an access control step for controlling disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; an incentive management step for providing an incentive to an individual in order to encourage disclosure of the health care-related information by referring to the provision history of the provision history retention step described later regarding whether or not to disclose the health care-related information about the individual; and a provision history retention step for retaining a provision history which is a history of providing an incentive to each individual.

[0024] In addition, the present invention, in addition to the above features, is a method executed by a CPU in a health care-related information management system that is a computer, and has an incentive type information holding step of holding incentive type information which is information indicating a plurality of types of incentives, and the incentive management step provides a method of selecting and providing an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step.

[0025] In addition, the present invention, in addition to the above features, is a method executed by a CPU in a health care-related information management system that is a computer, and has an end request reception step of receiving an end request which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has accumulated health care-related information in the health care-related information accumulation step, an end condition holding step of holding an end condition which is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received, a determination rule holding step of holding a determination rule which is a rule for determining whether to end the disclosure of health care-related information based on information about the individual who made the end request, the held end condition, and an end determination step of determining whether to end based on information about the individual, the held end condition, and the held determination rule when the end request is received, and an end control step in which the access control step controls to end the disclosure of the health care-related information of the individual when the determination result in the end determination step is a determination result that it should be ended.

[0026] In addition, the present invention, in addition to the above features, is a method executed by a CPU in a health care-related information management system that is a computer, and provides a method having an access authentication processing step of performing authentication for accessing the incentive management step.

[0027] In addition to the above features, the present invention provides a method executed by a CPU in a health care-related information management system that is a computer, the method having a consent information acquisition step of acquiring consent information, which is information indicating acceptance of receiving an incentive by an incentive management step after being authenticated in an access authentication processing step.

[0028] In addition to the above features, the present invention provides a method executed by a CPU in a health care-related information management system that is a computer, the method having an incentive provision processing step of performing incentive provision processing, which is processing for providing an incentive when consent information is acquired in the consent information acquisition step.

[0029] In addition to the above features, the present invention provides a method executed by a CPU in a health care-related information management system that is a computer, the method having a public disclosure permission / non-permission information retention step of retaining public disclosure permission / non-permission information indicating whether an individual permits the disclosure of their own health care-related information to a third party.

[0030] In addition to the above features, the present invention provides a method executed by a CPU in a health care-related information management system that is a computer, the method having a third party identification information retention step of retaining third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0031] In addition to the above features, the present invention provides a method executed by a CPU in a health care-related information management system that is a computer, wherein the access control step allows a medical practitioner to view the health care-related information accumulated in the health care-related information accumulation step when the public disclosure permission / non-permission information retained in the public disclosure permission / non-permission information retention step indicates public disclosure permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner.

[0032] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer. The access control step is such that when the public release permission / denial information held in the public release permission / denial information holding step indicates public release permission and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-healthcare professional, a part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method is made available for viewing by non-healthcare professionals.

[0033] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer. The anonymization method is performed by at least one of k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0034] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer. The health care-related information accumulation step is a method of accumulating health care-related information including any one or more of electronic medical record information about an individual, various examination information, prescription information, medication history information, medication status information, vital information, information on medical examination forms, data of a health promotion app, and conversation data of an interactive health promotion SNS.

[0035] In addition, the present invention is a method executed by a CPU in a health care-related information management system which is a computer. The incentive management step provides an incentive including any one or more of the provision of minor points, the provision of individual information services or general information services to information providers, the provision of individual drugs or supplements, the provision of books and other goods, the provision of passwords or IDs for information provision, the provision of items available on the network, the provision of the right to receive medical examinations, the provision of the right to receive diagnoses, the provision of the right to receive tests, the provision of the right to receive various services on the network, the provision of specific software (for example, health management apps and pedometer apps), the provision of points to prepaid or postpaid electronic money, the provision of product coupons, travel coupons or cash.

[0036] In addition, the present invention is a method executed by a CPU in a health care-related information management system which is a computer. The medical staff includes at least one or more of physicians, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0037] In addition, the present invention is a method executed by a CPU in a health care-related information management system which is a computer. The non-medical staff includes at least one or more of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies.

[0038] Specifically, the present invention provides an operation program of a health care-related information management system that is described in a computer-readable and executable manner for a health care-related information management system having: a health care-related information storage step for storing and managing health care-related information regarding an individual; an access control step for controlling the disclosure of the health care-related information stored in the health care-related information storage step to a third party via a network; an incentive management step for providing an incentive to an individual in order to promote the disclosure of the health care-related information by referring to the provision history of a provision history holding step described later with respect to whether or not to disclose the health care-related information regarding the individual; and a provision history holding step for holding a provision history that is a history of providing incentives to each individual.

[0039] Further, in addition to the above features, the present invention provides an operation program of a health care-related information management system that is described in a computer-readable and executable manner for a health care-related information management system having an incentive type information holding step for holding incentive type information that is information indicating types of a plurality of incentives, and the incentive management step selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step.

[0040] In addition to the above features, the present invention also includes an end request acceptance step for accepting an end request, which is a request to stop or end the disclosure of already public health and medical related information from an individual who has accumulated health and medical related information in the health and medical related information accumulation step; an end condition holding step for holding an end condition, which is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is accepted; a determination rule holding step for holding a determination rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request and the held end condition; an end determination step for determining whether to end when the end request is accepted, based on information about the individual, the held end condition, and the held determination rule; and an end control step for controlling the access control step to end the disclosure of the individual's health and medical related information when the determination result in the end determination step is that it should end. The present invention provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having the above components.

[0041] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having an access authentication processing step for performing authentication for accessing the incentive management step.

[0042] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having a consent information acquisition step for acquiring consent information, which is information indicating acceptance of receiving an incentive by the incentive management step after being authenticated in the access authentication processing step.

[0043] In addition to the above features, the present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for a health care-related information management system having an incentive provision processing step for performing incentive provision processing, which is a process for providing an incentive when consent information is obtained in the consent information acquisition step.

[0044] In addition to the above features, the present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for a health care-related information management system having a public permission / non-permission information holding step for holding public permission / non-permission information indicating whether an individual permits the disclosure of his / her own health care-related information to a third party.

[0045] In addition to the above features, the present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for a health care-related information management system having a third party identification information holding step for holding third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0046] In addition to the above features, the present invention provides an operation program of a health care-related information management system described in a computer-readable and executable manner for a health care-related information management system in which, when the public permission / non-permission information held in the public permission / non-permission information holding step indicates public permission and the third party identification information held in the third party identification information holding step indicates that the third party is a medical practitioner, the health care-related information accumulated in the health care-related information accumulation step is allowed to be viewed by the medical practitioner.

[0047] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, wherein the access control step allows a non-medical worker to view a part (including all) of the health care-related information stored in the health care-related information storage step, or the health care-related information anonymized by a predetermined anonymization method, when the public disclosure permission / denial information stored in the public disclosure permission / denial information storage step indicates public disclosure permission and the third-party identification information stored in the third-party identification information storage step indicates that the third party is a non-medical worker.

[0048] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, wherein the anonymization method is performed by at least one of k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0049] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, wherein the health care-related information storage step stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical examination forms, data of health promotion apps, and conversation data of interactive health promotion SNSs.

[0050] In addition to the above features, in the present invention, the incentive management step includes providing negative points, providing personalized or general information services to information providers, providing personalized drugs or supplements, providing books and other goods, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash, and provides an operation program of a health care-related information management system described in a computer-readable and executable manner for a health care-related information management system that includes any one or more of the above incentives.

[0051] In addition to the above features, in the present invention, medical staff includes at least one or more of physicians, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, licensed psychologists, clinical psychologists, and medical office workers, and provides an operation program of a health care-related information management system described in a computer-readable and executable manner for a health care-related information management system that is a computer.

[0052] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer including at least one or more employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and incorporated administrative agencies, for non-medical workers.

Advantages of the Invention

[0053] As described above, in the present invention, in order to promote the disclosure of health care-related information by referring to the provision history, which is a history of providing incentives for each individual regarding the permission or non-permission of disclosure of health care-related information about an individual, it is possible to provide a health care-related information management system that provides incentives to individuals.

Brief Description of the Drawings

[0054]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Figure 26

Figure 27

Figure 28

Figure 29

Figure 30

Figure 31

Figure 32

Figure 33

Figure 34

Figure 35

Figure 36

Figure 37

Figure 38

Figure 39

Figure 40

Figure 41

Figure 42

Figure 43

Figure 44

[0055] FIG. 1 is a diagram showing the hardware configuration applied to the present invention. The present invention is an invention that principally utilizes an electronic computer, and can be realized by software, by hardware, or by the cooperation of software and hardware. The hardware that realizes all or part of each component of the present invention is composed of a CPU, memory, bus, input / output devices, various peripheral devices, a user interface, etc., which are the basic components of a computer. The various peripheral devices include storage devices, interfaces such as the Internet, Internet devices, displays, keyboards, mice, speakers, cameras, videos, TVs, various sensors for grasping production status in a laboratory or factory (flow sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipping quantity counters, packing quantity counters, foreign object inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human sensors, operator work status grasping devices (using video, ID, PC workload, etc.)), CD devices, DVD devices, Blu-ray devices, USB memories, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, telephones, faxes, copiers, printing devices, movie editing devices, various sensor devices, etc. Also, this system does not necessarily have to be composed of a single housing, and may be composed of a plurality of housings connected by communication. Also, the communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, ultrasonic communication, and furthermore, part of it may be installed across national borders. Furthermore, each of the plurality of housings may be operated by different entities, or may be operated by a single entity. Whether the operating entity of the system of the present invention is singular or plural does not matter. Also, in addition to this system, the invention can be configured as a system including terminals used by third parties and further including terminals used by other third parties. Also, these terminals may be installed across national borders. Furthermore, in addition to this system and the above terminals, devices used for registering related information of third parties and related persons, and devices used for a database for recording the registration content may be prepared. These may be provided in this system, or may be provided outside this system and configure this system so that these information can be utilized.

[0056] As shown in this figure, a computer is composed of a chipset, a CPU, non-volatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, a real-time clock, etc., which are configured on the motherboard. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), and for integrating various devices such as cameras, microphones, speakers or headphones, and displays), and various programs. Various programs and various data constituting the present invention are configured to execute various processes by efficiently using these hardware resources. ≪Chipset≫

[0057] The "chipset" is a set of large-scale integrated circuits (LSIs) mounted on the motherboard of a computer, which integrates the communication function, that is, the bridge function, between the external bus of the CPU and the standard bus connecting the memory and peripheral devices. There are cases of adopting a two-chipset configuration and a one-chipset configuration. The north bridge is provided on the side closer to the CPU and the main memory, and the south bridge is provided on the side farther away and for the interface with relatively low-speed external I / O.

[0058] (North Bridge) The north bridge includes a CPU interface, a memory controller, and a graphics interface. Most of the functions of the conventional north bridge may be borne by the CPU. The north bridge is connected to the memory slot of the main memory via a memory bus, and is connected to the graphics card slot of the graphics card via a high-speed graphics bus (AGP, PCI Express).

[0059] (South Bridge) The South Bridge is connected to the PCI interface (PCI slot) via the PCI bus and is responsible for I / O functions such as the ATA (SATA) interface, USB interface, Ethernet interface, and sound functions. Incorporating circuits that support PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are incapable of high-speed operation, would impede the speed increase of the chipset itself. Therefore, it may be separated from the South Bridge chip and assigned to another LSI called a Super I / O chip. A bus is used to connect the CPU (MPU) to peripheral devices and various control units. The bus is connected by the chipset. The memory bus used for connection to the main memory may adopt a channel structure instead in order to achieve high speed. As the bus, a serial bus or a parallel bus can be adopted. The parallel bus transfers the original data itself or a plurality of bits cut out from the original data as a single unit simultaneously through a plurality of communication paths, while the serial bus transfers data bit by bit. A dedicated line for the clock signal is provided in parallel with the data line to synchronize data demodulation on the receiving side. It is also used as a bus for connecting the CPU (chipset) to external devices, such as GPIB, IDE / (parallel) ATA, SCSI, and PCI. Due to limitations in speed increase, in the improved version of PCI, PCI Express, and the improved version of parallel ATA, serial ATA, the data line may also be a serial bus.

[0060] ≪CPU≫

[0061] The CPU reads, interprets, and executes in sequence the instruction sequence called a program on the main memory, and outputs information composed of signals to the main memory as well. The CPU functions as the center for performing calculations within the computer. Note that the CPU is composed of a CPU core part that is the center of the calculation and its peripheral parts, and includes registers, cache memory, an internal bus connecting the cache memory and the CPU core, a DMA controller, a timer, and an interface with a connection bus to the north bridge inside the CPU. Note that multiple CPU cores may be provided in one CPU (chip). Also, in addition to the CPU, processing may be performed by a graphics interface (GPU) or an FPU. Note that the description in the embodiment is of a two-core type, but it is not limited to this. Also, a program can be built into the CPU.

[0062] ≪Non-volatile memory≫

[0063] (HDD)

[0064] The basic structure of a hard disk drive is composed of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can adopt SATA (ATA in the past). A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read sectors and transfer and write them to another hard disk drive. At this time, it does not access the memory of the host CPU. Therefore, the load on the CPU can be increased without increasing it.

[0065] ≪Main memory≫

[0066] The CPU directly accesses and executes various programs on the main memory. The main memory is a volatile memory and DRAM is used. Programs on the main memory are expanded from the non-volatile memory to the main memory upon receiving the program startup instruction. Thereafter, the CPU executes the program according to various execution instructions and execution procedures within the program.

[0067] ≪Operating System (OS)≫

[0068] The operating system is used to manage the resources on the computer for the application to utilize, manage various device drivers, and manage the computer itself which is hardware. In small computers, firmware may be used as the operating system.

[0069] ≪BIOS≫

[0070] BIOS causes the CPU to execute the procedure for starting up the computer hardware and operating the operating system. Most typically, it is the hardware that the CPU first reads when receiving the startup instruction of the computer. The address of the operating system stored in the disk (non-volatile memory) is described here, and the operating system is sequentially expanded into the main memory by the BIOS expanded in the CPU and enters the operating state. Note that BIOS also has a check function for checking the presence or absence of various devices connected to the bus. The result of the check is saved on the main memory and can be made available by the operating system as appropriate. Note that BIOS may be configured to check external devices and the like. The above is the same for all embodiments.

[0071] As shown in the figures, the present invention can basically be composed of a general-purpose computer program and various devices. The operation of the computer basically takes the form of loading a program recorded in a non-volatile memory into the main memory and executing processing with the main memory, CPU, and various devices. Communication with the devices is performed via an interface connected to a bus line. Examples of the interface include a display interface, keyboard, communication buffer, etc. Hereinafter, embodiments of the present invention will be described together with illustrated examples.

[0072] <Satisfaction of the Availability of the Natural Law of the Present Invention>

[0073] The present invention functions through the cooperation of a computer, communication equipment, and software. Specifically, it relates to a health care-related information management system for accumulating and managing health care-related information, which is information related to an individual's health care. Through a network, various information and data are exchanged using hardware resources among third-party terminals, administrator terminals, etc. Therefore, from this perspective, if the present invention of the application is judged based on the matters described in the claims and the specification regarding resources such as a computer and common technical knowledge related to those matters, the present invention of the application as a whole utilizes natural laws and also falls within the category of inventions related to computer software.

[0074] <Significance of the Utilization of Natural Laws Required by the Patent Law>

[0075] The utilization of natural laws required by the Patent Law means that, from the perspective that an invention must have industrial applicability and contribute to the development of industry based on the purpose of the law, it is required to ensure that the invention can be usefully utilized in industry. That is, it requires that the invention be useful in industry, that is, the effects of the invention declared at the time of application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the utilization of natural laws means that as long as the functions exerted by each of the invention-specific matters (invention constituent elements), which are the constitution of the invention for exerting the effects of the invention, are exerted by utilizing natural laws. Furthermore, the effects of the invention only need to have the possibility of providing a predetermined usefulness to the users who utilize the invention, and should not be viewed from the perspective of how the users feel or think about the usefulness. Therefore, even if the effects obtained by the users through this system are psychological effects, the effects themselves are events outside the scope of the required utilization of natural laws.

Embodiments for Implementing the Invention

[0076] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. The mutual relationship between the embodiments and the claims is as follows. Mainly, the description of Embodiment 1 relates to Claim 1, Claim 16, and Claim 31; the description of Embodiment 2 relates to Claim 2, Claim 17, and Claim 32; the description of Embodiment 3 relates to Claim 3, Claim 18, and Claim 33; the description of Embodiment 4 relates to Claim 4, Claim 19, and Claim 34; the description of Embodiment 5 relates to Claim 5, Claim 20, and Claim 35; the description of Embodiment 6 relates to Claim 6, Claim 21, and Claim 36; the description of Embodiment 7 relates to Claim 7, Claim 22, and Claim 37; the description of Embodiment 8 relates to Claim 8, Claim 23, and Claim 38; the description of Embodiment 9 relates to Claim 9, Claim 24, and Claim 39; the description of Embodiment 10 relates to Claim 10, Claim 25, and Claim 40. The present invention should not be limited to these embodiments and can be implemented in various modes without departing from the gist thereof.

[0077] <Overall Configuration of the Health and Medical Related Information Management System of the Present Invention> FIG. 2 is a diagram showing an example of the overall configuration of the health and medical related information management system according to the present invention. The health and medical related information management system 200 includes a health and medical related information storage unit 201 that stores health and medical related information including any one or more of electronic medical record information related to an individual, various examination information (which may include health check-ups, medical check-ups, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urinary protein, occult blood in urine, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on questionnaires, data of a health promotion application, conversation data of an interactive health promotion SNS, etc. An access control unit 202 for controlling the disclosure of the health and medical related information stored in the health and medical related information storage unit 201 to a third party via a network, and an incentive management unit 203 for providing an incentive to an individual in order to promote the disclosure of the health and medical related information by referring to the provision history of the provision history holding unit 204 described later regarding whether or not to disclose the health and medical related information related to the individual, and a provision history holding unit 204 that holds a provision history that is a history of providing an incentive to each individual.

[0078] In addition, the health and medical related information management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, WAN, LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (for example, personal computers, tablet terminals, smartphones, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable, a WiFi router, etc.).

[0079] In addition, in the present invention, the term "third party" refers to an individual (including but not limited to the patient himself / herself, his / her family members, and / or caregivers, etc.), medical personnel, non-medical personnel, etc. to be described later. In addition, the "administrator" is a person who is responsible for managing and operating the entire health care-related information management system (for example, an individual, or an organization, group, or corporation to which the individual belongs may be included. Also, employees of government agencies or local governments, or organizations, groups, or corporations entrusted by government agencies or local governments may be included.). The administrator may have the authority to edit, add, or delete various types of information in the health care-related information management system.

[0080] For example, the "electronic medical record information" includes basic information about the patient (for example, patient ID, name, date of birth, contact information, emergency contact information, family history, height / weight, allergy information, smoking and drinking status, past medical history, etc.), information related to diagnosis (for example, the patient's chief complaint (complaints such as subjective symptoms and physical condition), various examination results, information about medications, diagnosis name, treatment plan, doctor's diagnosis record, doctor's instructions, etc.), information related to nursing and progress (for example, vital information (for example, at least including body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., not limited to this), observation results, records of urine and feces, records of diet content and intake amount, records of nursing care, etc.), information related to examinations (for example, examination instructions, examination results, images (partial) obtained by imaging examinations, reports on those images, etc.), information related to treatments and surgeries (for example, instructions for treatments and surgeries, progress and results of treatments and surgeries, if pathological diagnosis is performed, the method and diagnosis results, etc.), information related to medications (for example, instructions for drug development, dosing date and medications, results of dosing, etc.), and information on follow-up observations after treatment or surgery may be included.

[0081] Also, for example, the "prescription information" may include the insurer number, name, date of birth, gender, name of the medical institution, contact information, name of the prescribing doctor, name of the medicine, form of the medicine (tablet, capsule, liquid, powder, granule, etc.), amount of the medicine (amount taken at a time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, etc. Also, the "medication history information" may include, for example, the patient's name, date of birth, gender, My Number information or the symbol number of the insurance card, address, emergency contact information, name of the prescribed insurance medical institution and name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding the prescription details, etc., the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of the status of remaining medicine, changes in physical condition during medication, concomitant medications, information on the past medical history including complications, presence or absence of consultations with other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (interaction with drugs), patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the insurance pharmacist who provided the guidance, etc.

[0082] Also, for example, the "medication status information" may include information on the remaining amount of the prescribed medicine (including, for example, the amount of medicine remaining when the patient forgets to take it by mistake or when the patient intentionally does not take it), timing information regarding hospital / clinic visits (including, for example, the period required from the scheduled prescription end date (scheduled medication end date) to the actual hospital / clinic visit (including cases where the patient visits the hospital / clinic earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (including, for example, subjective symptoms and physical condition complaints such as getting hives after continuing to take a certain medicine or feeling overly dizzy after taking a certain medicine), etc.

[0083] Also, for example, "healthcare-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained via an API from a PHR system or the like. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information related to an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information related to their own health, medical care, and nursing care in a chronological manner throughout their lives, so as to receive excellent services tailored to their own health conditions. For example, each individual citizen has hitherto recorded a great deal of information related to their health and medical care in various paper media such as notebooks and documents. Depending on the life stage (milestone in life) at that time, the media and locations where the records are kept differ. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", during the period of receiving school education, there is the "Results of School Health Examinations", at the time of employment, there are the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one may manage one's own health using a "Disease Management Notebook" or "Medicine Notebook", etc., and in the elderly, it will be recorded in a "Nursing Prevention Notebook" or "Family Doctor Coordination Notebook". By digitizing such an existing "notebook culture" and integrating it as data in a unified manner, there is a concept and mechanism for individuals to manage and utilize it themselves, and it is expected to become more widespread in the future.

[0084] In addition, in the present invention, the description is based on the premise that the healthcare-related information storage unit 201 and the access control unit 202 function on the same server, but it is not limited to this, and they may be configured to perform functions and roles on separate servers. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the healthcare-related information storage unit 201 and the access control unit 202 may be configured as cloud servers.

[0085] Similarly, in the present invention, it is described on the premise that the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history storage unit 204 function on separate servers. However, the present invention is not limited to this, and they may be configured to perform their respective functions and roles on the same server. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history storage unit 204 may be configured by cloud servers.

[0086] <Embodiment 1 (mainly corresponding to Claim 1, Claim 16, and Claim 31)> <Overview of Embodiment 1> This embodiment provides a health care-related information management system including a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to the individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history storage unit described below regarding whether to disclose the health care-related information about the individual, and a provision history storage unit for holding a provision history that is a history of providing an incentive to each individual. Further, to realize the same, a method executed by a CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner are provided.

[0087] <Functional Configuration of Embodiment 1> FIG. 3 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 1. In this embodiment, a health care-related information storage unit, an access control unit, an incentive management unit, and a provision history storage unit are provided.

[0088] <Embodiment 1 Explanation of Configuration: Health and Medical Related Information Storage Unit> The "Health and Medical Related Information Storage Unit" 201 is configured to have a function of storing health and medical related information including any one or more of information such as electronic medical record information related to an individual, various examination information (which may include health check-ups, medical examinations, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on questionnaires, data of a health promotion app, conversation data of an interactive health promotion SNS, etc.

[0089] Here, the "electronic medical record information" includes, for example, basic information related to a patient (for example, patient ID, name, date of birth, contact information, emergency contact information, family history, height / weight, allergy information, smoking and drinking status, past history, etc.), information related to diagnosis (for example, the chief complaint of the patient (complaints such as subjective symptoms and physical condition), various examination results, information on medications, diagnosis name, treatment policy, doctor's diagnosis record, instructions from the doctor, etc.), information related to nursing and progress (for example, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), observation results, records of urine and feces, etc., records of diet content and intake amount, nursing care records, etc.), information related to examinations (for example, examination instructions, examination results, (partial) images obtained by imaging examinations, reports on those images, etc.), information related to treatments and surgeries (for example, instructions for treatments and surgeries, progress and results of treatments and surgeries, if a pathological diagnosis is performed, the method and diagnosis results, etc.), information related to medications (for example, instructions for drug development, dosing date and medications, results of dosing, etc.), follow-up observation information after treatment or surgery, etc. It is desirable that it be configured to include such information.

[0090] In addition, the "prescription information" preferably includes, for example, the insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount taken at a time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, and the like.

[0091] In addition, the "medication history information" preferably includes, for example, the patient's name, date of birth, gender, My Number information or the symbol number of the insurance card, address, emergency contact information, name of the prescribing insurance medical institution and the name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding prescription details, the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of the status of remaining drugs, changes in physical condition during medication, concomitant medications, information on the past medical history including complications, presence or absence of consultations with other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (drug interactions), the patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the prescribing insurance pharmacist, and the like.

[0092] In addition, the "medication status information" preferably includes, for example, information on the remaining amount of the prescribed medicine (including, for example, the amount of medicine remaining when the patient forgets to take it or intentionally does not take it), timing information regarding hospital / clinic visits (including, for example, the period required from the scheduled prescription end date (scheduled medication end date) to the actual hospital / clinic visit (including cases where the visit is earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (including, for example, complaints regarding physical symptoms and physical condition such as hives appearing after taking a certain medicine or feeling overly effective and dizzy after taking a certain medicine), and the like. In the present invention, personal number (My Number) information or the insured person identification number / symbol of the health insurance subscribed by an individual (user) may be used as identification information for uniquely identifying an individual (user), and health care-related information regarding the individual may be accumulated and organized in association therewith.

[0093] Also, for example, "health care-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained via an API from a PHR system or the like. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information regarding an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information regarding their own health, medical care, and nursing care in a chronological manner throughout their life, so as to receive excellent services tailored to their own health condition. For example, each citizen has hitherto recorded a great deal of information regarding their health and medical care in the form of paper media such as various notebooks and documents. These records vary in the media and locations where they are kept depending on the life stage (milestones in life) at that time. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", during the period of receiving school education, there is the "Results of School Health Examinations", at the time of employment, there are the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one manages their own health using a "Disease Management Notebook" or a "Medication Notebook", etc., and in old age, it will be recorded in a "Nursing Care Prevention Notebook" or a "Family Doctor Collaboration Notebook". There is a concept and mechanism of digitizing such an original "notebook culture", integrating it as data, and then managing and utilizing it oneself, and it is expected to become more widespread in the future.

[0094] <Embodiment 1 Explanation of Configuration: Access Control Unit> The "access control unit" 202 is configured to have a function for controlling the disclosure of health and medical related information stored in the health and medical related information storage unit to a third party via a network. For example, as will be described later, it is desirable to be configured to have functions such as analyzing IP packets, determining the destination IP address, obtaining the access ID / user ID, obtaining the access subject / user attributes, and performing access control based on these for access from a third party terminal.

[0095] <Embodiment 1 Description of Configuration: Incentive Management Unit> The "incentive management unit" 203 is configured to have a function of providing an incentive to an individual in order to promote the disclosure of health and medical related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose the individual's health and medical related information. The operation of "for providing an incentive" includes operations such as actually providing an incentive using electronic data etc., and operations for executing the necessary processing for transferring the separately performed act of actually providing the incentive to execution, although the act of actually providing the incentive is separately performed. FIG. 10 is a diagram showing the types of incentives. When providing points or electronic data such as information services as an incentive, it is an operation for a computer to execute the necessary operations therefor. When drugs / supplements etc. are provided as an incentive, for example, the processing operations for sending drugs or supplements to the disclosure person of health and medical related information are applicable. That is, since the "for... " operation is executed by the incentive management unit, it is not necessarily the incentive provision operation itself. FIG. 44 is a diagram showing an example of the user interface of the health and medical related information management system in the present invention. In this case, information indicating whether or not the individual (user) who has accessed using a third-party terminal, that is, the individual (user) who owns the personal number (My Number) information "123456789012", consents to providing incentives for any health and medical-related information is stored and managed in a list format. If there is consent, the health and medical-related information is in a state where it is permitted to be disclosed to a third party, that is, in a state where an incentive is given. If there is no consent, the health and medical-related information is in a state where it is not disclosed to a third party, that is, in a state where an incentive is not given. It is desirable that the information regarding these incentives is regularly exchanged between the Incentive Management Department and the Health and Medical-Related Information Accumulation Department and the Provision History Retention Department described later, so as to always be kept in the latest state. For example, in the case of FIG. 44, it stores and manages whether or not an individual has consented to each piece of health and medical-related information. Here, the "〇" mark shown in the "Consent / Non-consent" column indicates the individual's consent intention, and the "×" mark indicates the individual's non-consent intention. The input of the "〇" mark or "×" mark in the "Consent / Non-consent" column is preferably configured such that the individual (user) can select the "〇" mark or "×" mark according to their own intention, for example, in the form of a pull-down menu on the terminal screen. Here, when the display item (for example, "Regular Health Check Results", etc.) described in the "Health and Medical-Related Information" column is clicked, touched, or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when the "〇" mark or "×" mark in the "Consent / Non-consent" column is clicked, touched, or tapped on the terminal screen, the date and time of consent or non-consent may be displayed on a pop-up screen. In particular, it is preferable that the health and medical-related information marked with "〇" in the "Consent / Non-consent" column is stored and managed in the Provision History Retention Department described later. Note that the health and medical-related information with no mark in the "Consent / Non-consent" column represents a state where the consent or non-consent intention of the individual (user) has not yet been shown.

[0096] Figure 40 is a diagram showing the user interface of the health care-related information management system of the present invention. In this case, when an individual inputs personal number (My Number) information and password information in the corresponding fields and matching information exists in the system, the individual authentication is performed and access is permitted by the incentive management unit. In the case of this figure, the method of the user directly inputting information is described. However, for example, when the user uses a smartphone, the IC card reading function of the smartphone may be used to hold the My Number card in front of the smartphone to automatically read and input predetermined information such as personal number (My Number) information. Note that, for example, when the My Number information and / or password information fails to be input successfully three times in a row, it may be set to a locked state and the user may go to the local government (such as a municipal office) to have the lock removed. Alternatively, it may be temporarily set to a locked state, and a warning such as "Please try again the next day." may be displayed on the terminal, or the user may be notified by voice or a warning sound. Also, it is desirable to store and manage so that it can be easily determined whether an individual (user) has consented to which health care-related information. Furthermore, for the incentive provision process, it is desirable to be configured to process the degree of incentive to be given to the health care-related information to which the user has consented.

[0097] For example, in the case of the example in FIG. 44, when providing health care-related information about one individual to one recipient, the minor points are calculated and granted based on a predetermined calculation rule to be 1000p (points). Also, when there are two recipients for the same health care-related information, the minor points are calculated and granted based on a predetermined calculation rule to be twice as much, i.e., 2000p (points). Regarding the calculation rule of incentives, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health care-related information, and different incentives may be calculated and granted for each health care-related information. In particular, for example, various infectious diseases defined in the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the leading cause of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye diseases with a large number of patients, and novel coronavirus infections, and specific diseases with few cases worldwide, considering that the health care-related information can greatly contribute to the progress of medicine by being disclosed to a third party, it is conceivable to set the calculation rule so that the incentives are higher than those for other diseases.

[0098] Also, "incentive" simply means "motivation, reward", and it means intentionally stimulating something with the aim of causing a certain action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, individual information services or general information services for information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items that can be used on the network, provision of rights, for example, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (such as a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc. Further, the following may be included. Discounting of certain goods or services, for example, discounting or reduction of insurance premiums, and the discount rate of insurance premiums applies. Further, refund of paid fees, awarding of prizes (such as novelties), commendation or recognition, awarding of coupons, etc. may be included. Furthermore, there may be reward points, discounts, free goods, early access to new products, or limited sales. Further, the right to write reviews about brands, introduce friends, or create user-generated content applies. Also, it may be an upgrade of goods or services.

[0099] In addition, in the present invention, in the case where public disclosure permission information indicating whether or not to permit public disclosure to a third party has already been associated and stored and managed for health and medical related information regarding an individual, or in the case where an individual (user) newly registers health and medical related information regarding himself / herself in the health and medical related information storage unit and the public disclosure permission information has not yet been associated and stored and managed, the present invention is applicable in either case, that is, it is possible to provide an incentive. That is, although the health and medical related information management system does not hold health and medical related information regarding an individual, for example, if the health and medical related information of the individual is held in a terminal owned by the individual and this is uploaded to this system, when it is determined that the information is publicly available as health and medical related information by a formal check of the uploaded information, the incentive management unit can be configured to function so as to grant an incentive according to the result. In this case, the access control unit of this system may be configured not to reject the browsing access of health and medical related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualifications of the third party. Note that uploading the health and medical related information of an individual to this system may be a transfer, and the transfer source may not be the individual's terminal but another system that stores other health and medical related information. For example, it can be configured such that health and medical related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to this system with the individual's consent. In this case, when the health and medical related information of the individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive management unit can be configured to function.

[0100] Here, among the functions of the incentive management unit, the operations on the computer for "referring to... and providing for..." include, for example, if it is confirmed as a result of the reference that the incentive has not been provided in the past, performing operations for providing the incentive; if it is determined as a result of the reference that a predetermined period (time) has elapsed since the incentive was provided in the past, performing operations for providing the incentive; if it is determined as a result of the reference that the disclosure rate of the health care-related information has reached a certain value, performing operations for providing the incentive; if a state where it has been published but no one has actually viewed it is viewed by someone (in this case, the incentive provision history and the viewing history of the health care-related information have the same meaning), performing operations for providing the incentive, etc. Any one or more of these are included, but it is not limited to these.

[0101] Note that "promote disclosure" is synonymous with "promote revelation". And "disclosure" in the present invention means making all or part of the health care-related information, or processed / transformed information thereof, available for disclosure to others (excluding oneself. However, in the case of a person who is managed and assisted by someone else, such as a child, a person under guardianship, or a person in need of care, the person providing the management and assistance is not included in others) in any form (which may be anonymous). It may be either actually disclosed or in a state where it can be disclosed but has not been actually disclosed. The disclosure recipients can include others belonging to medical institutions, medical-related organizations, public institutions, pharmaceutical-related companies, etc., but are not limited to these.

[0102] <Embodiment 1 Explanation of the Configuration: Provision History Retention Unit> The "provision history retention unit" 204 is configured to have a function of retaining the provision history, which is the history of providing incentives for each individual. The "provision history" refers to any one or more of the history of whether incentives are granted, the history that specifies the content of the granted incentives, the history that specifies the amount of the granted incentives, etc. The time of granting may be associated, or only the fact of granting may be specified. Therefore, even a person who only has the fact of granting specified may be acceptable. In the case of a configuration where incentives are generally granted for the provision of health care-related information, the incentive provision history is the same as the disclosure history of health care-related information. Therefore, the provision of incentives promotes disclosure by referring to the disclosure history of health care-related information, and the act of providing incentives is equivalent to referring to the provision history. Therefore, when the incentive management department refers to the public disclosure history of health care-related information, in the present invention, it may be included in the incentive management department referring to the provision history.

[0103] Regarding the method of providing incentives, various methods can be considered. For example, when an individual gives a public license for all of their personal health and medical related information, all the health and medical related information associated with that individual identification information can be viewed by an institution or the like with a predetermined right without limitation on the number of times. However, it can also be configured such that only one incentive is given once for each public license act, or a configuration can be considered where an incentive is given every time there is a view of the health and medical related information for which the license has been granted. Also, since personal health and medical related information is usually divided into multiple items, a configuration can be adopted where incentives are provided according to the items viewed or used. Furthermore, a configuration can be taken where incentives are provided according to the number of times of viewing and using for each item. Incidentally, the items in the context of health and medical related information can be considered to be divided into various items such as for each disease onset, each medical examination, each prescription issuance, each disease type, each generation of drug history information, each acquisition of taking information, etc. Also, a configuration can be considered where incentives are given according to the depth of disclosure of health and medical related information. The depth of disclosure here means, for example, when only the disease name is disclosed, when the name, usage, and dosage of the drug prescribed for that disease are further disclosed, when the results of taking that drug (for example, improvement of symptoms or onset of side effects) are further disclosed, when what the patient felt about that drug is further disclosed, etc. It can be configured such that as it gradually becomes deeper, more or greater quality incentives are given.

[0104] Next, the incentive provision processing flow will be described. Incentive information is electronically processed by the incentive management department or the incentive output department or the incentive processing department in cooperation with it so that some benefit occurs to the individual who is the patient. Note that this electronic processing may be the incentive provision itself or may be the pre-stage processing for incentive provision. The granting of incentives is triggered by the acceptance of information that all or part of the health and medical-related information, or the processed / transformed information thereof, is permitted to be disclosed by an individual such as a patient. This trigger may originate from the terminal used by the individual, for example, a smartphone, or may also originate from the terminal of a medical institution or the like. For example, in the case of a smartphone, an application that can view or edit the individual's health and medical-related information within a certain range is installed on the smartphone. Using this application as an entrance, the present invention system is accessed, and the disclosure permission operation of the individual's own health and medical-related information is executed through the disclosure portal of the health and medical-related information.

[0105] In addition, instead of the application, it can also be configured such that the same operation can be performed by accessing the web. Also, this access must be strictly security-managed. For example, it is preferably configured such that public permission can be obtained using a one-time password. In this case, the health and medical-related information management system may be a so-called PHR or a system that cooperates with a PHR. Also, this system may be configured to manage the disclosure of health and medical-related information of all citizens alone, or may be configured such that a plurality of similar systems are juxtaposed to manage the disclosure of health and medical-related information held in a PHR. In addition, the case where the trigger is pulled from the terminal of a medical institution refers to the case where a medical staff member or the like who is interviewing a patient as an individual obtains the patient's permission to pull the trigger. In that case, it is preferably configured to borrow a health insurance card, a personal number (My Number) card, or a proof equivalent thereto from the patient and use the borrowed proof to pull the trigger. The medical institutions referred to here may include nursing facilities, pharmacies (including dispensing pharmacies), and other welfare facilities. Also, this may be a medical institution accessed on the Internet. Furthermore, it can also be configured such that a trigger can be pulled by a terminal used by a predetermined management server of a pharmaceutical company, a public research institution, or the like. Of course, the authentication of an individual such as a patient is a prerequisite.

[0106] Figure 6 is a diagram showing an example of the provision history holding unit of the health care-related information management system in the present embodiment. As shown in this figure, it can be seen that Mr. X with personal number (My Number) information "123456789012" and Mr. Y with personal number (My Number) information "456789012345" are distinguished for each individual, and the provision history is held and managed. For example, regarding Mr. X with personal number (My Number) information "123456789012", the "Regular Health Check Result (Hospital A)", which is health care-related information with ID "0001", was provided to "Dr. Suzuki (Hospital B)", the destination, on the provision date and time of "2023 / 04 / 01", and it is shown that the history of providing "1000 My Points" as an incentive is held and managed. Similarly, for other health care-related information, the history of providing incentives for each individual is held and managed.

[0107] <Embodiment 1 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in the present embodiment will be described with reference to the drawings.

[0108] Figure 4 is a diagram showing the hardware configuration of the health care-related information management system in the present embodiment. As shown in this figure, the health care-related information management system in the present embodiment includes a "CPU (Central Processing Unit)" 401 that performs various arithmetic processes, and a "main memory" 402. It also includes a "non-volatile memory" 403 that holds predetermined information, a "network I / F (Interface)" 404 that transmits and receives information with a plurality of third-party terminals 406 and an administrator terminal 407. And they are interconnected by a data communication path such as a "bus" 405 to transmit, receive, and process information.

[0109] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that also serves as the working area for that program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In the present embodiment, the programs stored in the "main memory" include a health care-related information accumulation program, an access control program, an incentive management program, a provision history retention program, and the like. Also, health care-related information, incentive management information, provision history information, and the like are stored in the "main memory" and the "non-volatile memory".

[0110] The "CPU" executes the health care-related information accumulation program stored in the "main memory" and stores health care-related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.), in the "main memory" or the "non-volatile memory" through the "network I / F". Also, it executes the access control program stored in the "main memory" to control access to the health care-related information about the individual. Further, it executes the incentive management program stored in the "main memory" to provide and manage incentives to the individual in order to promote the disclosure of health care-related information by referring to the provision history information regarding whether to disclose the health care-related information about the individual. Additionally, it executes the provision history retention program stored in the "main memory" to store the provision history information, which is the history of providing incentives, in the "main memory" or the "non-volatile memory".

[0111] <Embodiment 1 Health Care-Related Information Management System: Flow of Processing> FIG. 5 is a diagram showing the flow of processing when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method including a health care-related information storage step S501, an access control step S502, an incentive management step S503, and a provision history retention step S504.

[0112] The "health care-related information storage step" S501 is a stage of storing health care-related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0113] The "access control step" S502 is a stage of controlling access to the health care-related information about an individual stored in the health care-related information storage step.

[0114] The "incentive management step" S503 is a stage of providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history retained in the provision history retention step described later regarding whether or not to disclose the health care-related information about the individual.

[0115] The "provision history retention step" S504 is a stage of retaining the provision history, which is the history of providing incentives to each individual.

[0116] <Summary> As described above, in the present invention, it is possible to provide a health care-related information management system that provides an incentive to an individual in order to promote the disclosure of health care-related information about the individual by referring to the provision history, which is the history of providing incentives to each individual, regarding whether or not to disclose the health care-related information. In addition, in the present invention, by providing incentives to individuals and adopting a structure that allows the disclosure of personal health - related information to third parties upon permission, it leads to an increase in the opportunities for individuals to disclose their health - related information to third parties, which can contribute to reducing the overall medical expenses of the country, improving the health of the entire nation, or reducing the time and costs spent on drug development by research institutions, pharmaceutical companies, etc. Ultimately, it can also contribute to the progress of medicine. Here, "drug development" refers to the process from when a compound or chemical substance (also called a lead) that serves as the basis for a pharmaceutical product is developed until it is sold as a product. In addition, the following steps (1) to (5) are essential for a compound or chemical substance to be sold as a pharmaceutical product. (1) Select candidates for drug - development targets (compounds or chemical substances) (2) Screen the effects to select candidate substances that can be the basis of pharmaceutical products There are various types of screening, such as high - efficiency screening that utilizes biotechnology, combinatorial chemistry (a technology for creating a large number of combinations of compounds), and AI robot technology. (3) Animal experiments Use animals or cultured cells to investigate and confirm safety, efficacy, etc. in detail. Drugs that have been confirmed to have safety and efficacy at this stage are called "investigational drugs". (4) Clinical trials Actually use the investigational drug on humans to examine its effects and safety in detail and confirm whether it is useful for actual treatment. (5) Approval application and review Apply to the Ministry of Health, Labour and Welfare for drugs that have passed all the above - mentioned tests (1) to (4). Then, undergo review by the Pharmaceuticals and Medical Devices Agency and wait for approval from the Minister of Health, Labour and Welfare. Only after approval can a pharmaceutical product that can be sold as a product be born. Generally speaking, the period of drug development is said to be about 10 to 18 years, and the probability that a compound or chemical substance becomes a new drug is about 1 in 10,000. Also, the cost required until drug development is successful is said to be nearly 20 billion yen in total.

[0117] <Embodiment 2 (mainly corresponding to Claim 2, Claim 17, and Claim 32)> <Overview of Embodiment 2> This embodiment has an incentive type information holding unit that holds incentive type information which is information indicating types of a plurality of incentives. The incentive management unit is characterized in that it selects and provides an incentive to be provided to an individual based on the provision history according to the incentive type information held in the incentive type information holding unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows overlapping with those of Embodiment 1 will be omitted as appropriate.

[0118] <Description of Configuration of Embodiment 2: Incentive Type Information Holding Unit> FIG. 7 is a diagram showing a functional configuration of the health care related information management system in this embodiment. The "incentive type information holding unit" 701 is configured to have a function of holding incentive type information which is information indicating types of a plurality of incentives. FIG. 10 is a diagram showing an example of the incentive type information holding unit of the health care related information management system in this embodiment. As shown in this figure, incentive type information and specific incentives related to the incentive type information are associated and held and managed. For example, when the incentive type information is "(A) Points", specific examples of incentives such as "(a) Minor points, (b) Transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) Distribution electronic money (WAON (registered trademark), nanaco (registered trademark), etc.)" are held and managed. Similarly, specific examples of incentives are listed and held and managed for other incentive type information. When an individual (user) provides his or her own health care related information to an appropriate destination, it is possible to select any incentive based on this incentive type information.

[0119] <Description of Configuration of Embodiment 2: Incentive Management Unit Features Specific to Embodiment 2> The selection made by the Incentive Management Department can be divided into two cases: one is when the computer (configured by a program) that constitutes the Incentive Management Department makes an automatic selection, and the other is when the Incentive Management Department makes a selection based on the selection behavior of the provider of health and medical related information (in most cases, the owner of the health and medical related information, but in the case where the person is under some form of management such as a child, it may be the manager). In the latter case, the computer accepts the selection behavior of the person and makes a selection based on that selection behavior. When the computer makes an automatic selection, for example, when providing information on the results of drug taking owned by the owner of health and medical related information to a pharmaceutical manufacturer, it can be configured so that the incentive provided by the pharmaceutical manufacturer is automatically selected by the Incentive Management Department. Also, when the provider of health and medical related information resides in Aomori Prefecture, it is conceivable to automatically select an incentive that is only valid in Aomori Prefecture. Thus, the automatic selection can be configured to be made automatically based on the content of the provided health and medical related information, the attribute information of the owner of the health and medical related information, and so on.

[0120] Whether it is an automatic selection or a selection based on the selection made by the owner (provider) of health and medical related information, the Incentive Management Department is configured to make a selection by using a selection rule. This selection rule may be configured to be held in a selection rule holding means inside the Incentive Management Department, or it may be configured to make a selection by using a selection rule held outside the Incentive Management Department or outside this system. Also, the selection rule may be configured to be appropriately optimized (not necessarily optimally, including the simple meaning of being changed) according to the provision history of the owner (provider) of health and medical related information and the public disclosure history of health and medical related information. For example, it may be configured to be changed by an artificial intelligence for editing or the like. In addition, a selection rule editing unit may be provided so that this rule can be edited by the operation of the administrator of this system or the like. The incentive management department can select and provide incentives to an individual based on the incentive type information held in the incentive type information holding department according to the above-described provision history. That is, it is configured to select and provide incentive type information. FIG. 11 is a diagram showing an example of the incentive management department of the health care-related information management system in the present embodiment. As shown in this figure, by an individual (user) selecting incentive type information or the incentive management department automatically selecting it, it becomes possible to select and provide a specific incentive. For example, in the case of Mr. Y, in addition to "points (negative points and PASMO (registered trademark))", it can be seen that "software / app" and "cash" etc. are selected and provided.

[0121] Also, when the incentive management department selects and provides an incentive based on the incentive type information, the following cases are assumed for the processing until the specific use of the incentive.

[0122] For example, when "points" are selected as the incentive, the following cases can be considered. First, when the incentive is "negative points", the incentive management department in this system triggers by sending information on personal identification information (such as personal numbers (My Number), etc.) and information on the points to be granted to the management server owned by the organization that manages and operates the My Portal site. In the said server, the points associated with the personal identification information of the negative points associated with the personal identification information are incremented by the amount of the points to be granted. That is, based on this trigger information, the management server owned by the organization that manages and operates the My Portal site grants negative points to the individual corresponding to the personal identification information, and notifies the terminal (such as a smartphone, etc.) used by the individual of the information regarding the increment of the negative points, so that the individual can use the negative points including the increment. Then, by exchanging these negative points for points of other transportation / distribution electronic money, the individual can purchase the goods he desires or pay as the consideration for various desired services.

[0123] Second, when the incentive is "prepaid card", it becomes possible to purchase goods on AMAZON (registered trademark), etc. using a prepaid card purchased at a convenience store, etc. (for example, an amount corresponding to the purchase price is set, and identification information for identifying this card is also given).

[0124] Also, for example, when "drug / supplement" is selected as an incentive, the incentive management unit in this system transmits information including personal identification information and its attribute information (e.g., personal number (My Number) information, name, postal code, address, phone number, credit card number, etc.) and information for identifying the product to be purchased (e.g., product name such as "Supplement ABC", information on the manufacturer / seller, price information, etc.) via the network to a management server managed and operated on a purchasing site such as AMAZON (registered trademark), triggering a process. Then, if the specified product is in stock on the AMAZON (registered trademark) management server, the product will be delivered to the home by a delivery company.

[0125] Also, for example, when "provision of rights" is selected as an incentive, the incentive management unit in this system transmits personal identification information and its attribute information (e.g., personal number (My Number) information, name, postal code, address, phone number, credit card number, etc.) and information for identifying the desired rights (e.g., identification number indicating an admission ticket to DISNEYLAND (registered trademark)) via the network to a management server owned by an organization that manages and operates the provision of rights, triggering a process. Then, in response to this trigger, the management server transmits a QR code (registered trademark) that serves as an admission ticket to DISNEYLAND (registered trademark) to the smartphone used by the individual. Then, the individual who saves the QR code (registered trademark) on the smartphone goes to DISNEYLAND (registered trademark), which is the rights execution agency, and holds the QR code (registered trademark) in front of a reader at the admission counter. If there is no problem, the individual can enter DISNEYLAND (registered trademark) and enjoy various attractions and meals.

[0126] <Embodiment 2: Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0127] FIG. 8 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 801 that performs various arithmetic processes, and a "main memory" 802. Further, it includes a "non-volatile memory" 803 that holds predetermined information, and a "network I / F (Interface)" 804 that transmits and receives information with a plurality of third-party terminals 806 and an administrator terminal 807. And they are mutually connected by a data communication path such as a "bus" 805 to transmit, receive, and process information.

[0128] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the program stored in the "main memory" is an incentive type information holding program. In addition, incentive type information, incentive management information, etc. are stored in the "main memory" and "non-volatile memory".

[0129] The "CPU" executes the incentive type information holding program stored in the "main memory" to hold incentive type information, which is information indicating types of a plurality of incentives, and stores the incentive type information and related incentive management information in the "main memory" and "non-volatile memory".

[0130] <Embodiment 2 Health Care-Related Information Management System: Process Flow> FIG. 9 is a diagram showing the process flow when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S901.

[0131] The "Incentive Type Information Retention Step" S901 is a step of retaining incentive type information, which is information indicating types of a plurality of incentives.

[0132] <Summary> As described above, in the present invention, there is an incentive type information retention unit that retains incentive type information, which is information indicating types of a plurality of incentives. The incentive management unit can select and provide an incentive to be provided to an individual based on the incentive type information retained in the incentive type information retention unit according to the provision history.

[0133] <Embodiment 3 (mainly corresponding to Claim 3, Claim 18, and Claim 33)> <Outline of Embodiment 3> This embodiment includes an end request reception unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health care-related information, from an individual who has accumulated health care-related information in the health care-related information accumulation unit; an end condition retention unit that retains an end condition, which is a condition for determining whether it is appropriate to end based on information about the individual who has made the end request when the end request is received; a determination rule retention unit that retains a determination rule, which is a rule for determining whether to end the disclosure of health care-related information based on information about the individual who has made the end request, the retained end condition; an end determination unit that determines whether to end based on the information about the individual, the retained end condition, and the retained determination rule when the end request is received; and an end control unit that controls the access control unit to end the disclosure of the health care-related information of the individual when the determination result in the end determination unit is a determination result that it should end. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiment 1 and Embodiment 2 will be omitted as appropriate.

[0134] <Explanation of Configuration of Embodiment 3: End Request Reception Unit> FIG. 12 is a diagram showing a functional configuration of a health care-related information management system in this embodiment. The "Termination Request Reception Unit" 1201 is configured to have a function of receiving a termination request, which is a request to stop or end the disclosure of already disclosed health and medical related information, from an individual who has accumulated health and medical related information in the Health and Medical Related Information Accumulation Unit. For example, on the login screen of the health and medical related information management system shown in FIG. 40, when an individual (user) uses a third-party terminal to input their personal number (My Number) information and password information, and if there is matching information on the system side, authentication of the person is performed. By accessing the Incentive Management Unit and the Provision History Retention Unit, it becomes possible to view whether one's own health and medical related information has been disclosed, who the disclosure destination is, what type of incentive it is, and what the specific incentive is. Also, for example, on the viewing screen shown in FIG. 44, it is desirable to be configured such that, based on the intention of the individual, a termination request to request the system side to stop or end the disclosure of desired health and medical related information from among the already disclosed health and medical related information is transmitted from a third-party terminal and the system side receives the termination request.

[0135] <Embodiment 3 Explanation of Configuration: Termination Condition Retention Unit> The "Termination Condition Retention Unit" 1202 is configured to have a function of retaining termination conditions, which are conditions for determining whether it is appropriate to end when a termination request is received, based on information about the individual who made this termination request. For example, the following cases can be considered as termination conditions. However, it is not necessarily limited to these cases. (1) When the disease has been completely cured / fully cured / remitted · When it is recognized that an individual (user)'s illness or injury has been "completely cured" (which means that the illness or injury has been completely healed. In other words, it means returning to the state before the illness or injury occurred), or "fully recovered" (which means that the treatment for the illness or injury is no longer necessary and the individual can lead a normal daily life without problems. However, it does not necessarily mean returning to the state before the illness or injury occurred), or "in remission" (which means that the illness or injury has temporarily or continuously recovered. This term is often used for diseases with a possibility of recurrence such as cancer and leukemia. It is a state where the symptoms are suppressed and continued treatment or regular examinations may still be required), then, based on the will of this individual, the disclosure of the individual's health and medical related information related to this disease can be stopped or terminated. (2) When the individual (user) has moved to a new residence (changed address) · When the individual (user) has moved to a new residence (changed address), for example, due to job transfer or transfer within the company, and the attending physician (primary care physician) who has been treating the illness or injury so far has changed, then, based on the will of this individual, the disclosure of the individual's health and medical related information can be stopped or terminated. (3) When the attending physician (primary care physician) has changed · When the attending physician (primary care physician) who has been treating the illness or injury so far has changed due to the merger or dissolution of a medical institution such as a hospital, or due to transfer to another hospital, then, based on the will of this individual, the disclosure of the individual's health and medical related information can be stopped or terminated.

[0136] <Embodiment 3 Explanation of the Configuration: Judgment Rule Retention Unit> The "judgment rule retention unit" 1203 is configured to have a function of retaining a judgment rule that is a rule for determining whether to terminate the disclosure of health and medical related information based on the information about the individual who has requested termination and the retention termination conditions. For example, it is desirable to formulate a judgment rule, which is a rule for determining whether to terminate the disclosure of health care-related information, based on information indicating that a disease of an individual (user) obtained from the electronic medical record of this system has been cured by the treatment and medication of the attending physician, and the termination conditions held in the above-described termination condition holding unit, for example, the above-described condition (1). In this case, regarding the health care-related information about the disease, since it is determined that the disease has been cured, it is expected that the significance and need for disclosure to a third party will be low. Therefore, it is preferable to terminate the disclosure as a judgment rule. Also, when the attending physician of the medical institution (hospital, clinic, etc.) in charge of an individual (user) changes, the significance of disclosing the health care-related information to the original physician disappears. Therefore, it is still preferable to terminate the disclosure as a judgment rule. However, for the newly assigned attending physician, it is essential to disclose the individual's health care-related information for formulating the treatment and medication policy. Therefore, it is desirable to continue the disclosure without terminating the disclosure as a judgment rule.

[0137] <Embodiment 3 Explanation of Configuration: End Judgment Unit> When an end request is received, the "end judgment unit" 1203 is configured to have a function of determining whether to end based on the information about the individual, the held end conditions, and the held judgment rules. For example, based on the information in the electronic medical record indicating that an individual's disease or injury has been cured, the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, it can be determined that the disclosure of the individual's health care-related information should be terminated. Also, for example, based on the information in the electronic medical record indicating that an individual's disease (for example, cancer, etc.) has entered remission, the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, when it is considered that the individual has a high possibility of recurrence constitutionally, it can be determined that the disclosure of the individual's health care-related information should not be terminated. Furthermore, for example, based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances, the end condition (in this case, the above condition (2) or the above condition (3)) held in the above-described end condition holding unit, and the above-described judgment rule, it can be determined that the disclosure of the individual's health and medical related information should be terminated.

[0138] <Embodiment 3 Configuration Explanation: End Control Unit> The "end control unit" 1204 is configured to have a function of controlling the access control unit to terminate the disclosure of the individual's health and medical related information when the judgment result in the end judgment unit is a judgment result that it should be terminated. For example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, when it is determined that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's illness or injury has completely healed and the end condition (in this case, the above condition (1)) held in the above-described end condition holding unit, the end control unit can send a control signal to the access control unit to control the access control unit to terminate the disclosure of the individual's health and medical related information. Also, for example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, when it is determined that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances and the end condition (in this case, the above condition (2) or the above condition (3)) held in the above-described end condition holding unit, the end control unit can send a control signal indicating the judgment result to the access control unit to control the access control unit to terminate the disclosure of the individual's health and medical related information.

[0139] Incidentally, in relation to the above-mentioned "judgment rule holding unit", for example, a "judgment rule changing unit" may be further provided to appropriately change the judgment rule based on the number of times or the ratio of the disclosure permission of the health care-related information regarding an individual, or the number of times or the ratio of receiving an incentive. In this case, the judgment rule may be automatically changed within this system, or may be manually changed from a terminal used by the target individual or the administrator of this system.

[0140] <Embodiment 3 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in this embodiment will be described with reference to the drawings.

[0141] FIG. 13 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1301 that performs various arithmetic processes and a "main memory" 1302. Further, it includes a "non-volatile memory" 1303 that holds predetermined information, a "network I / F (Interface)" 1304 that transmits and receives information to and from a plurality of third-party terminals 1306 and an administrator terminal 1307. And they are interconnected by a data communication path such as a "bus" 1305 to transmit, receive, and process information.

[0142] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area that is also the working area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In the present embodiment, the programs stored in the "main memory" include an end request reception program, an end condition holding program, a judgment rule holding program, an end judgment program, an end control program, and the like. Also, end request information, end condition information, judgment rules, end judgment information, end control information, and the like are stored in the "main memory" and the "non-volatile memory".

[0143] The "CPU" executes the end request reception program stored in the "main memory", receives an end request, which is a request to stop or end the disclosure of already publicly disclosed health and medical-related information of an individual (user) sent from a third-party terminal through the "network I / F", and stores the end request information in the "main memory" and the "non-volatile memory". Further, the "CPU" executes the end condition holding program stored in the "main memory", holds an end condition, which is a condition for determining whether to end based on information about the individual who made this end request when the end request is received, and stores the end condition information in the "main memory" and the "non-volatile memory". Further, the "CPU" executes the determination rule holding program stored in the "main memory", holds a determination rule, which is a rule for determining whether to end the disclosure of health and medical-related information based on information about the individual who made the end request and the held end condition, and stores it in the "main memory" and the "non-volatile memory". Further, the "CPU" executes the end determination program stored in the "main memory", determines whether to end based on information about that individual and the held end condition when the end request is received, and stores the end determination information in the "main memory" and the "non-volatile memory". Further, the "CPU" executes the end control program stored in the "main memory", controls the access control unit to end the disclosure of the health and medical-related information of that individual when the determination result in the end determination program is a determination result that it should end, and stores the end control information in the "main memory" and the "non-volatile memory".

[0144] <Embodiment 3 Health and Medical-Related Information Management System: Processing Flow> FIG. 14 is a diagram showing the processing flow when using the health and medical-related information management system in this embodiment. As shown in the figure, it is a processing method consisting of an end request reception step S1401, an end condition holding step S1402, a determination rule holding step S1403, an end determination step S1404, and an end control step S1405.

[0145] The "End Request Reception Step" S1401 is the stage of receiving an end request, which is a request to stop or end the disclosure of health and medical related information that has already been disclosed by an individual (user) sent from a third-party terminal.

[0146] The "End Condition Retention Step" S1402 is the stage of retaining an end condition, which is a condition for determining whether it is appropriate to end based on information about the individual who made this end request when the end request is received.

[0147] The "Judgment Rule Retention Step" S1403 is the stage of retaining a judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request and the retained end condition.

[0148] The "End Judgment Step" S1404 is the stage of determining whether to end based on information about the individual, the retained end condition, and the retained judgment rule when the end request is received.

[0149] The "End Control Step" S1405 is the stage where, when the judgment result in the end judgment step S1404 is a judgment result that it should end, the access control unit is controlled to end the disclosure of the individual's health and medical related information.

[0150] <Summary> As described above, in the present invention, an individual (user) can stop or end the disclosure of health and medical related information that has already been disclosed according to their own will.

[0151] <Embodiment 4 (mainly corresponding to Claims 4, 19, and 34)> <Summary of Embodiment 4> This embodiment is characterized in that, in addition to Embodiments 1 to 3, it includes an access authentication processing unit that performs authentication for accessing the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 3 will be omitted as appropriate.

[0152] <Embodiment 4: Description of Configuration - Access Authentication Processing Unit> FIG. 15 is a diagram showing the functional configuration of a health - care related information management system. As shown in this figure, the "access authentication processing unit" 1501 is configured to have a function of performing authentication for an individual to access the incentive management unit. For example, FIG. 40 is a diagram showing an example of a user interface in the health - care related information management system of the present invention. Here, it is assumed that a third - party terminal accesses the health - care related information management system using a web browser. On this login screen, when a user (individual) enters their personal number (My Number) information and password information in the corresponding fields and matching information exists in the system, identity authentication is performed and access is permitted. In the example of this figure, it is described in a form where the user directly enters the information. However, for example, when the user uses a smartphone, a form may be adopted in which the IC card reading function of the smartphone is used to hold the My Number card over the smartphone to automatically read and input predetermined information such as personal number (My Number) information. Note that, for example, when the personal number (My Number) information and / or password information fails to be entered successfully three times in a row, it may be put into a locked state and the user may go to the local government (such as a municipal office) to have the lock removed. Alternatively, it may be temporarily put into a locked state, and a reminder such as "Please try again the next day." may be displayed on the terminal, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Health - Care Related Information Management System - Hardware Configuration> The hardware configuration of the health - care related information management system in this embodiment will be described with reference to the drawings.

[0154] FIG. 16 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 1601 that performs various arithmetic processes, and a "main memory" 1602. Further, it includes a "non-volatile memory" 1603 that holds predetermined information, and a "network I / F (Interface)" 1604 that transmits and receives information with a plurality of third-party terminals 1606 and an administrator terminal 1607. And they are mutually connected by a data communication path such as a "bus" 1605 to transmit, receive, and process information.

[0155] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the program stored in the "main memory" is an access authentication processing program. Also, personal number (My Number) information, password information, etc. are stored in the "main memory" and "non-volatile memory".

[0156] The "CPU" executes the access authentication processing program stored in the "main memory", accepts the input of personal number (My Number) information and password information sent from the third-party terminal through the "network I / F", authenticates whether matching information exists on the system side, and stores the input personal number (My Number) information and password information in the "main memory" and "non-volatile memory".

[0157] <Embodiment 4 Health Care-Related Information Management System: Processing Flow> FIG. 17 is a diagram showing the flow of processing when using the health care-related information management system according to the present embodiment. As shown in the figure, it is a processing method consisting of an access authentication processing step S1701.

[0158] The "access authentication processing step" S1701 is a stage where input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0159] <Summary> As described above, in the present invention, by performing access authentication first on the login screen of the health care-related information management system, access to information related to incentives can be restricted to the individual (user) himself / herself.

[0160] <Embodiment 5 (mainly corresponding to Claim 5, Claim 20, and Claim 35)> <Outline of Embodiment 5> In addition to Embodiments 1 to 4, the present embodiment is characterized in that it includes a consent information acquisition unit that acquires consent information, which is information indicating consent to receive incentives by the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 4 will be omitted as appropriate.

[0161] <Explanation of Configuration of Embodiment 5: Consent Information Acquisition Unit> FIG. 18 is a diagram showing the functional configuration of the health care-related information management system of the present embodiment. As shown in this figure, the "consent information acquisition unit" 1802 is configured to have a function of acquiring consent information, which is information indicating consent to receive incentives by the incentive management unit, after being authenticated by the access authentication processing unit 1801. FIG. 41 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields, and matching information exists in the system and access authentication is performed, the system proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent Process", the system transitions to a screen for obtaining the consent of the individual (user). Figure 42 is a diagram showing an example of the user interface in the health and medical related information management system of the present invention. In this case, it is preferable to prepare a user interface such as a pull-down menu format in the "Consent / Disapproval" field, and by clicking, touching, or tapping on it, for example, either a "〇" mark or a "×" mark is input, and the system accepts the consent or disapproval intention of the individual (user) regarding whether to accept the incentive. By clicking, touching, or tapping the OK button, the input consent information is sent to the incentive management department and held and managed. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of Figure 41.

[0162] Figure 40 is a diagram showing an example of the user interface in the health and medical related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields, and matching information exists in the system and access authentication is performed, the system moves to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Browsing Process", the system transitions to a screen where the relationship between the health and medical related information of the individual (user) and the incentives granted can be viewed. Figure 43 is a diagram showing an example of the user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical-related information of the target individual and the incentives granted accordingly in an easy-to-understand list format or the like. This makes it immediately clear which health and medical-related information the incentives granted at the time of viewing are associated with. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41. FIG. 40 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, after the individual (user) inputs his or her My Number information and password information in the corresponding fields and access authentication is performed when the matching information exists in the system, the process proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", the health and medical-related information for which consent / non-consent has not yet been given regarding the health and medical-related information of the individual (user) is displayed, and the process also proceeds to a screen that also displays the health and medical-related information for which consent / non-consent has already been given. FIG. 44 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health and medical-related information of the target individual and the corresponding consent and non-consent statuses in an easy-to-understand list format or the like. As a result, for health and medical-related information for which consent / non-consent has not yet been given at the time of viewing, the individual (user) prepares a user interface in the form of a pull-down menu, enters an "〇" mark in the "Consent / Non-consent" column, and clicks, touches, or taps the OK button, whereby processes such as the granting of incentives are performed. On the other hand, for health and medical-related information for which an "〇" mark or an "×" mark has already been entered in the "Consent / Non-consent" column, the individual (user) can review it as appropriate and, for example, change from consent to non-consent or from non-consent to consent, and click, touch, or tap the OK button to enable update processing. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0163] <Embodiment 5 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0164] FIG. 19 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1901 that performs various arithmetic processes, and a "main memory" 1902. It also includes a "non-volatile memory" 1903 that holds predetermined information, and a "network I / F (Interface)" 1904 that transmits and receives information with a plurality of third-party terminals 1906 and an administrator terminal 1907. And they are interconnected by a data communication path such as a "bus" 1905 to transmit, receive, and process information.

[0165] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also the work area of that program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, making it possible to perform processes. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. Also, my number information, password information, consent information, etc. are stored in the "main memory" and "non-volatile memory".

[0166] The "CPU" executes the access authentication processing program stored in the "main memory", accepts the input of personal number (my number) information and password information sent from a third-party terminal through the "network I / F", authenticates whether there is matching information, and stores the personal number (my number) information and password information in the "main memory" and "non-volatile memory". Also, the "CPU" executes a consent information acquisition program stored in the "main memory", and acquires consent information indicating the intention of an individual (user) to disclose or not disclose for each piece of health and medical-related information sent from a third-party terminal through the "network I / F". Also, the consent information is stored in the "main memory" or the "non-volatile memory".

[0167] <Embodiment 5 Health and Medical-Related Information Management System: Processing Flow> FIG. 20 is a diagram showing the processing flow when using the health and medical-related information management system in this embodiment. As shown in the figure, it is a processing method consisting of an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "access authentication processing step" S2001 is a stage where the input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0169] The "consent information acquisition step" S2002 is a stage where, after being authenticated in the access authentication processing step, consent information, which is information indicating the acceptance of incentives by the incentive management unit, is acquired.

[0170] <Summary> As described above, in the present invention, it is possible to acquire consent information, which is information indicating the acceptance of incentives, for health and medical-related information regarding an individual (user).

[0171] <Embodiment 6 (mainly corresponding to Claim 6, Claim 21, and Claim 36)> <Outline of Embodiment 6> In addition to Embodiments 1 to 5, this embodiment is characterized by including an incentive provision processing unit that performs incentive provision processing, which is processing for providing an incentive when consent information is obtained by a consent information acquisition unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 5 will be omitted as appropriate.

[0172] <Description of the Configuration of Embodiment 6: Incentive Provision Processing Unit> FIG. 21 is a diagram showing the functional configuration of a health care-related information management system. As shown in this figure, the "incentive processing unit" 2103 is configured to have a function of performing incentive provision processing for providing an incentive when consent information is obtained by the consent information acquisition unit. FIG. 44 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, regarding the public permission or non-permission of an individual (user), for health care-related information with an "〇" mark indicating consent to public permission in the "Consent / Disagreement" column, an incentive to be automatically granted is calculated and granted based on a predetermined calculation rule. Here, for health care-related information about one individual, it is calculated and granted as 1000p (points) of minor points for one recipient based on a predetermined calculation rule. Also, regarding the incentive calculation rule, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health care-related information, and different incentives may be calculated and granted for each health care-related information. In particular, for example, for various infectious diseases defined by the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the top causes of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease, or eye diseases with a large number of patients, and novel coronavirus infections, considering that the health care-related information can greatly contribute to medical progress by being disclosed to a third party, it is conceivable to set the calculation rule to give more (higher) incentives than other diseases.

[0173] Also, "incentive" simply means "motivation, reward", and it means intentionally stimulating or the like with the aim of causing a certain action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, provision of individual information services or general information services to information providers, provision of individual drugs or supplements, provision of books and other products, provision of passwords or IDs for information provision, provision of items available on the network, provision of rights, for example, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (such as a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc. Further, the following may also be included. Discounting of some product or service, for example, discounting or reducing insurance premiums, and the discount of insurance premium rates applies. Further, refund of paid fees, awarding of prizes (such as novelties), commendation or recognition, awarding of privilege coupons, etc. may also be included. Furthermore, there are reward points, discounts, free products, early access to new products, or limited sales, etc. Further, the right to write reviews about brands, introduce friends, create user-generated content, etc. applies. Also, it may be an upgrade of products or services. In addition, in the present invention, in the case where public permission information indicating whether or not to permit public disclosure of health care-related information about an individual has already been associated and stored, or in the case where an individual (user) newly registers health care-related information concerning himself / herself in the health care-related information storage unit and the public permission information has not yet been associated and stored, the present invention can be applied in either case. That is, although the health care-related information management system does not hold health care-related information about an individual, for example, if the health care-related information of the individual is held in a terminal owned by the individual and is uploaded to this system, when it is determined, by a formal check of the uploaded information, that the information is publicly available as health care-related information, the incentive function unit described above can be configured to function so as to give an incentive according to the result. In this case, the access control unit of this system may be configured not to reject the browsing access of health care-related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualifications of the third party. Note that uploading the health care-related information of an individual to this system may be a transfer, and the transfer source may not be the individual's terminal but another system that stores other health care-related information. For example, it can be configured such that the health care-related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to this system with the individual's consent. In this case, when the health care-related information of the individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive function unit described above can be configured to function.

[0174] FIG. 40 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system for access authentication, the individual moves to the function selection screen and clicks, touches, or taps the OK button corresponding to "(B) Browsing Process", thereby transitioning to a screen where the relationship between the health and medical-related information about the individual (user) and the incentives granted can be viewed. Figure 43 is a diagram showing an example of the user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health and medical-related information of the target individual and the corresponding incentives in an easy-to-understand manner, such as in a list format. This allows one to immediately see which health and medical-related information the incentives granted at the time of viewing are associated with. Note that by clicking, touching, or tapping the end button, one can return to the function selection screen of Figure 41.

[0175] Figure 40 is a diagram showing an example of the user interface in the health and medical-related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system for access authentication, the individual moves to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", a screen is displayed that shows both the health and medical-related information for which consent / non-consent has not yet been given and the health and medical-related information for which consent / non-consent has already been given regarding the health and medical-related information about the individual (user), and the individual transitions to this screen. Figure 44 is a diagram showing an example of the user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the corresponding consent or non-consent status in an easy-to-understand list format. In this way, for health and medical related information for which consent / non-consent has not yet been given at the time of viewing, the individual (user) can input an "〇" mark in the "Consent / Non-consent" column in the form of a pull-down menu, click, touch or tap the OK button, and incentives and the like will be processed. On the other hand, for health and medical related information for which an "〇" mark or "×" mark has already been input in the "Consent / Non-consent" column, the individual (user) can review and, for example, change from consent to non-consent or from non-consent to consent, and click, touch or tap the OK button to enable update processing. Note that by clicking, touching or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0176] <Embodiment 6 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0177] FIG. 22 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2201 that performs various arithmetic processes and a "main memory" 2202. It also includes a "non-volatile memory" 2203 that holds predetermined information, a "network I / F (Interface)" 2204 that transmits and receives information with a plurality of third-party terminals 2206 and an administrator terminal 2207. And they are interconnected by a data communication path such as a "bus" 2205 to transmit, receive and process information.

[0178] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that also serves as a work area for that program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In the present embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, an incentive provision processing program, and the like. Also, personal number (My Number) information, password information, consent information, incentive information, etc. are stored in the "main memory" and the "non-volatile memory".

[0179] The "CPU" executes the access authentication processing program stored in the "main memory" and, through the "network I / F", accepts the input of personal number (My Number) information and password information sent from a third-party terminal, and authenticates whether there is matching information. Also, the My Number information and password information are stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the consent information acquisition program stored in the "main memory" and, through the "network I / F", acquires consent information indicating the intention of an individual (user) for each piece of health and medical-related information sent from a third-party terminal. Also, the consent information is stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the incentive provision processing program stored in the "main memory" and performs incentive provision processing, which is processing for providing an incentive when consent has been obtained regarding health and medical-related information about an individual, and stores the incentive information in the "main memory" and the "non-volatile memory".

[0180] <Embodiment 6 Health and Medical-Related Information Management System: Processing Flow> FIG. 23 is a diagram showing the processing flow when the health care related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "incentive provision processing step" S2303 is a stage where, when consent information is acquired by the consent information acquisition unit, an incentive provision process, which is a process for providing an incentive, is performed.

[0182] <Summary> As described above, in the present invention, for health care related information about an individual (user), when the individual gives consent, an incentive provision process, which is a process for providing an incentive, can be executed, and an appropriate incentive provision process can be performed on the health care related information about the individual.

[0183] <Embodiment 7 (mainly corresponding to claims 7, 22, and 37)> <Outline of Embodiment 7> This embodiment has a health care related information storage unit that stores health care related information about an individual, and an access control unit for allowing a third party to access the health care related information stored in the health care related information storage unit via a network. The access control unit includes an IP packet analysis means for analyzing the IP packets sent via the network, a destination IP address determination means for extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care related information management system, an access ID / user ID acquisition means for acquiring, when the destination IP address is the IP address of its own health care related information management system, the access ID indicating the access subject and the user ID indicating the user belonging to the access subject from the IP payload, an access subject / user attribute acquisition means for acquiring the access subject information, user information, and user attribute information (here, information indicating whether the user is a medical worker or a non-medical worker) corresponding to the access ID and the user ID, an access control means for controlling access to the health care related information from a third party, and a public permission / denial information holding unit for holding public permission / denial information indicating whether to permit the public disclosure of the individual's health care related information to a third party, and provides a health care related information management system. Note that the description of the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 6 will be omitted as appropriate.

[0184] <Embodiment 7 Functional Configuration> FIG. 24 is a diagram showing the functional configuration of the health care related information management system in Embodiment 7. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID / user ID acquisition means, an access subject / user attribute acquisition means, an access control means, and a public permission / denial information holding unit.

[0185] <Explanation of Configuration in Embodiment 7: IP Packet Analysis Means of Access Control Unit> The "IP packet analysis means" 2401 is configured to have a function of analyzing the IP packets sent via a network (especially the Internet). Generally, an IP packet is composed of an IP header part and an IP payload part, and various kinds of information and data are stored therein. The "IP packet analysis means" 2401 is responsible for analyzing and examining what kinds of information and data are included therein.

[0186] <Embodiment 7 Description of Configuration: Destination IP Address Determination Means of Access Control Unit> The "destination IP address determination means" 2402 is configured to have a function of extracting the destination IP address from the header part of the sent IP packet and determining whether it is the IP address for its own health care-related information management system. Generally, an IP packet includes at least a source IP address representing the sender and a destination IP address representing the recipient in the IP header part. The "destination IP address determination means" 2402 refers to the destination IP address extracted from the IP header part to determine whether the IP packet is sent to its own health care-related information management system. If it is determined that the packet is sent to itself, the process proceeds to the next step. If it is determined that the packet is not sent to itself, the IP packet is ignored and no further operation is performed.

[0187] <Embodiment 7 Description of Configuration: Access ID / User ID Acquisition Means of Access Control Unit> When it is determined that the IP packet is sent to its own health care-related information management system, the "access ID / user ID acquisition means" 2403 is configured to have a function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject.

[0188] <Embodiment 7 Description of Configuration: Access Subject User Attribute Acquisition Means of Access Control Unit> The "Access Subject User Attribute Acquisition Means" 2404 is configured to have a function of acquiring access subject information corresponding to the access ID and user ID, user information belonging to the access subject, and user attribute information for the user (here, information indicating whether the user is a medical worker or a non-medical worker). The access subject information is information that specifically represents the access subject, and is represented by, for example, names such as "Edogawa Central Hospital" or "Edogawa Pharmaceutical". Also, the user information is information that specifically represents employees belonging to the access subject, and is represented by, for example, names such as "Ichiro Suzuki", an employee belonging to "Edogawa Central Hospital", or "Hideo Maeda", an employee belonging to "Edogawa Pharmaceutical". Furthermore, the user attribute information is associated with the user information and is attribute information indicating whether the user is a medical worker or a non-medical worker, and is represented by, for example, "medical worker" (abbreviated form "medical"), "non-medical worker" (abbreviated form "non-medical"), etc.

[0189] Here, "medical worker" preferably includes at least physicians, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, acupuncturists, moxibustionists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, medical office workers, etc. Among the "medical workers" as described above, the role of the so-called attending medical workers (for example, attending physicians, attending pharmacists, attending dentists), who usually conduct examinations and medication guidance for individuals (patients) on a daily basis, is very important, and it is preferable to grant the right to access the personal health care-related information stored in the health care-related information storage unit and to edit, add, or delete the health care-related information as appropriate according to need.

[0190] For example, a "primary care physician" refers to a physician who can be consulted about anything, is familiar with the latest medical information, can introduce specialists and specialized medical institutions when necessary, and has comprehensive capabilities to undertake local medical care, health care, and welfare that are close and reliable. A "primary care physician" should be able to: (1) In daily medical consultations, understand the patient's life background, provide appropriate medical treatment and health guidance, and when unable to provide medical treatment or guidance beyond their own expertise, cooperate with local physicians, medical institutions, etc. to provide solutions; (2) Share necessary information with local physicians, medical institutions, etc. to build a system that can respond to patients even on holidays and at night, so that the best medical care for patients can be continued outside their own medical consultation hours; (3) In addition to daily medical consultations, build a trust relationship with local residents, actively participate in social activities and administrative activities related to local medical care such as health consultations, health examinations, cancer screenings, maternal and child health care, school health care, industrial health care, and local health care, cooperate with health care, nursing care, and welfare workers, and promote home medical care so that local elderly people can live in the area for as long as possible; (4) Be a person with the ability to provide appropriate and easy-to-understand information about medical care to patients and their families.

[0191] Also, for example, a "primary care pharmacist" refers to a pharmacist who has rich knowledge and experience in drug treatment, health care, and nursing care, and can respond to consultations according to the needs of patients and consumers. A "designated pharmacist" is preferably a professional who can perform the following functions: (1) A function where one pharmacist comprehensively manages and continuously monitors a patient's medication status at a single pharmacy (for example, to ensure the safe and reliable use of medications, comprehensively grasp information on medications used by patients such as prescription drugs and over-the-counter drugs at a single location, and continuously check for drug duplication, drug interactions, the effectiveness of medications, and the absence of side effects, etc.); (2) A function of providing 24-hour support or conducting home medical care by visiting the patient's home (for example, even outside the pharmacy's business hours such as on holidays and at night, responding to consultations regarding medications such as how to take medications and side effects over the phone. Also, if necessary, delivering medications based on prescriptions even at night and on holidays. Visiting the homes of patients such as the elderly who have difficulty going out, explaining medications, and also checking the remaining medications (medications left at hand)); (3) A function of collaborating with prescribing doctors and medical institutions (for example, verifying prescription details, making inquiries and suggestions to doctors as necessary. After delivering medications to the patient, monitoring the patient's condition and providing feedback to the prescribing doctor regarding the situation, and checking the remaining medications. Responding not only to medication-related consultations but also providing a wide range of health-related consultations, and in some cases, recommending medical consultations at medical institutions. Also, collaborating with local medical institutions to build a relationship where patients can be supported as a team on a daily basis).

[0192] Also, for example, a "designated dentist" refers to a dentist who not only provides safe and reliable dental care but also has extensive knowledge and insights related to medical care and nursing care, aims to maintain and improve the oral functions of local residents throughout their lives, and can fulfill their responsibilities as a person who contributes to local medical care. A "designated dentist" is preferably a professional who can perform the following roles: (1) Conduct appropriate dental treatments and health guidance according to the life stages from infancy to old age for continuous management and prevention of disease progression, contributing to the maintenance and improvement of oral and overall health; (2) Play a role in improving oral health for local residents through health activities such as dental check-ups together with the administration and relevant organizations; (3) Collaborate with local related institutions and other industries to provide seamless home dental care and nursing services at various treatment sites for patients who have difficulty visiting clinics, and actively participate in comprehensive local care. In addition, flag information that can identify that the user is an attending medical professional associated with the third-party identification information described later may be added or associated. Regarding the information indicating the attending medical professional, any one of an individual (such as a patient), a company to which the individual belongs, a health insurance association to which the individual belongs, or a local government where the individual resides may, as appropriate and as necessary, use a third-party terminal to perform setting, modification, and deletion, or the above-described administrator may use an administrator terminal to perform registration, editing, and deletion.

[0193] In addition, "non-medical professionals" preferably include at least employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), combined health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies.

[0194] <Embodiment 7 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 2405 is configured to have a function of performing access control when a third party accesses the health care-related information storage unit via a network.

[0195] FIG. 25 is a diagram showing an example of the functional configuration of the health care-related information management system in the present embodiment. First, the IP packet analysis means analyzes the sent IP packet 2501 to examine what information and data are included. For example, it is analyzed and examined whether the source IP address and destination IP address are included in the IP header part of the IP packet.

[0196] Next, the destination IP address determination means extracts the destination IP address included in the received IP packet 2501 and determines whether it is addressed to its own health care-related information management system. At this time, the access control unit 2502 stores an IP address table 2503, and refers to this table to determine whether it is addressed to its own health care-related information management system. If the stored IP address (for example, 192.168.0.1) matches the destination IP address, it is determined that it is addressed to its own health care-related information management system, and the process proceeds to the next process. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, when the received IP packet is addressed to its own health care-related information management system by the access ID / user ID acquisition means, the access ID indicating the access subject stored in the IP payload of the IP packet and the user ID indicating the user belonging to the access subject are extracted and acquired.

[0198] Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores an access ID / user ID table 2504, and refers to this table to acquire specific access subject information, user information, and user attribute information. Here, when the access ID is "A0001", the access subject information is "Edogawa Central Hospital", when the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is "medical staff". Also, when the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", when the user ID is "D0001", the user information is "Hideo Maeda", and the user attribute information is "non-medical staff". By the operations of the means up to here, it is possible to determine whether a third party who has accessed the health care-related information management system is a medical staff or a non-medical staff.

[0199] Next, the access control means varies the viewing range of the health care-related information depending on whether the third party is a medical worker or a non-medical worker. For example, if the user belonging to the third-party access subject (in this case, "Edogawa Central Hospital") is "Ichiro Suzuki" and the attribute information is "medical worker", then all of the health care-related information regarding the individual can be viewed. On the other hand, for example, if the user belonging to the third-party access subject (in this case, "Edogawa Pharmaceutical") is "Hideo Maeda" and the attribute information is "non-medical worker", then a part of (including all) the health care-related information regarding the individual, or the health care-related information anonymized by a predetermined anonymization method described later can be viewed. In this way, it is possible to determine who the third-party user is and whether the attribute information is "medical worker" or "non-medical worker", and thereby vary the viewing range of the health care-related information regarding the individual. It should be noted that it is preferable that these tables described above enable the administrator responsible for managing and operating the health care-related information management system to register, edit, and delete information using the administrator terminal. Further, it is preferable that these access subject information, user information, and user attribute information ("medical worker" or "non-medical worker") are also associated with the third-party identification information described later.

[0200] <Embodiment 7 Explanation of Configuration: Public Permission Information Retention Unit of Access Control Unit> As shown in FIG. 24, the "publication permission information holding unit" 2406 is configured to have a function of holding publication permission information indicating whether to publish its own health and medical related information to a third party that has accessed the health and medical related information of an individual via a network. Specifically, it is desirable that information indicating "publication permission" or "publication rejection" can be set according to the individual's will from the third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, "publication permission" may be "1" and "publication rejection" may be two-valued information (flag information) of "0". Also, the publication permission information may be set so as to be able to set whether to publish in a predetermined block unit among the health and medical related information. For example, regarding the health and medical related information about internal medicine among the medical departments, "publication permission" may be set, while regarding the health and medical related information about psychiatry, "publication rejection" may be set. Also, the publication permission information may be set so as to be distinguishable between the case of "publication permission" and the case of "publication rejection" when the third party is a specific medical practitioner by combination with the third-party identification information described later. For example, when the third-party identification information represents "doctor", the health and medical related information of the individual is "publication permitted", while when the third-party identification information represents a specific medical practitioner (for example, an accounting staff or an accounting staff, etc.), it is conceivable that the health and medical related information of the individual is "publication rejected".

[0201] <Embodiment 7 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0202] FIG. 26 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the access control unit in the present embodiment includes a "CPU (Central Processing Unit)" 2601 that performs various arithmetic processes, and a "main memory" 2602. Further, it includes a "non-volatile memory" 2603 that holds predetermined information, and a "network I / F (Interface)" 2604 that transmits and receives information with a plurality of third-party terminals 2606 and an administrator terminal 2607. And they are interconnected by a data communication path such as a "bus" 2605 to transmit, receive, and process information.

[0203] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing those addresses. In the present embodiment, the programs stored in the "main memory" are a health care-related information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a public permission / non-permission information holding program, an access control program, and the like. Further, health care-related information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, public permission / non-permission information, etc. are stored in the "main memory" and "non-volatile memory".

[0204] The "CPU" executes a health care-related information storage program stored in the "main memory", and through the "network I / F", stores health care-related information about an individual sent from a third-party terminal, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.) in the "main memory" or "non-volatile memory". Also, it executes an IP packet analysis program stored in the "main memory" to analyze the IP packets sent via a network (especially the Internet). Further, it executes a destination IP address determination program stored in the "main memory" to determine whether the sent destination IP address is the IP address of its own health care information sharing system. If it is determined to be addressed to itself, the IP address is stored in the "main memory" and "non-volatile memory". Additionally, it executes an access ID / user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the access entity stored in the IP payload of the sent IP packet and the user ID indicating the user belonging to the access entity, and stores them in the "main memory" and "non-volatile memory". Moreover, it executes an access entity user attribute acquisition program stored in the "main memory" to acquire the access entity information, user information, and user attribute information corresponding to the access ID and user ID (here, information indicating whether the user is a medical professional or a non-medical professional. For example, "medical professional" or "non-medical professional"), and stores them in the "main memory" or "non-volatile memory". Also, it executes a public release permission information retention program stored in the "main memory" to acquire the public release permission information indicating whether to publicly release an individual's health care-related information, and stores it in the "main memory" and "non-volatile memory". Furthermore, it executes an access control program stored in the "main memory" to control access to the health care-related information about an individual.

[0205] <Embodiment 7: Health Care-Related Information Management System - Processing Flow> Figure 27 is a diagram showing the processing flow when using the health and medical related information management system according to this embodiment. As shown in the figure, it is a processing method including a health and medical related information accumulation step S2701, an IP packet analysis step S2702, a destination IP address determination step S2703, an access ID / user ID acquisition step S2704, an access subject user attribute acquisition step S2705, a public release permission information retention step S2706, and an access control step S2707.

[0206] The "health and medical related information accumulation step" S2701 is a stage of accumulating health and medical related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0207] The "IP packet analysis step" S2702 is a stage of analyzing the IP packets sent via a network (especially the Internet).

[0208] The "destination IP address determination step" S2703 is a stage of extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health and medical related information management system.

[0209] The "access ID / user ID acquisition step" S2704 is a stage of acquiring the access ID indicating the access subject and the user ID indicating the user belonging to the access subject from the IP payload when the destination IP address is the IP address of its own health and medical related information management system.

[0210] The "access subject user attribute acquisition step" S2705 is a stage of acquiring the access subject information, user information, and user attribute information corresponding to the access ID and user ID (here, information indicating whether the user is a medical professional or a non-medical professional. For example, "medical professional" or "non-medical professional").

[0211] The "public permission information retention step" S2706 is a step of retaining public permission information indicating whether to permit disclosure to a third party regarding an individual's health and medical related information.

[0212] The "access control step" S2707 is a step of controlling access to the health and medical related information management system.

[0213] <Summary> As described above, it is possible to retain public permission information indicating whether to permit disclosure to a third party regarding health and medical related information about an individual (user). That is, according to the individual's will, it is possible to select and set public permission or non - permission.

[0214] <Embodiment 8 (mainly corresponding to Claim 8, Claim 23, and Claim 38)> <Outline of Embodiment 8>

[0215] FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in Embodiment 8. As shown in this figure, this embodiment is characterized in that, in addition to Embodiments 1 to 7, a third - party identification information retention unit is provided. Hereinafter, regarding the health and medical related information management system in this embodiment, the functional configuration, hardware configuration, and processing flow will be described in order. Hereafter, for the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 7, the description will be omitted as appropriate.

[0216] <Functional Configuration of Embodiment 8> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment. In this embodiment, by providing a third - party identification information retention unit, it is possible to identify whether a third party is a medical worker or a non - medical worker.

[0217] <Health and Medical Related Information Management System in Embodiment 8: Functional Configuration> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment.

[0218] <Embodiment 8: Description of Configuration - Third Party Identification Information Retention Unit of Access Control Unit> The "third party identification information retention unit" 2807 is configured to have a function of retaining third party identification information for identifying whether a third party who has accessed the health care related information stored in the health care related information storage unit via a network is a medical professional or a non-medical professional. Here, the third party identification information is, for example, information created by combining numbers, characters, symbols, etc. consisting of 12 digits, and may be information that can uniquely identify a third party. For example, specifically, My Number information, the insured person's health insurance card number, etc. may be used. Also, it is preferable that the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information ("medical professional" or "non-medical professional"). Further, the administrator may be able to register, edit, and delete the third party identification information using the administrator terminal.

[0219] Note that even when the public disclosure permission / non-permission information indicates "public disclosure permission" due to the combination of the above-mentioned public disclosure permission / non-permission information and third party identification information, when the third party is a specific medical professional, it may be possible to set it separately for cases where access is permitted and cases where access is not permitted. For example, when the third party identification information represents "doctor", access to the health care related information may be permitted. On the other hand, when the third party identification information represents a specific medical professional (e.g., an accounting staff, an accountant, etc.), it may be possible to disallow access to the health care related information. For example, information indicating the department to which a third party belongs can be added to the third-party identification information, and based on the information indicating the department to which the third party belongs, it may be possible to control the permission or non-permission of access to health care-related information. Also, for example, based on information regarding the expertise of the user identified by the third-party identification information (e.g., the specialty field and years of experience of a "doctor" or "nurse"), it may be possible to control the permission or non-permission of access to health care-related information. Further, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information belongs, and the expertise, it may be possible to change the method of obtaining health care-related information by a third party (e.g., only viewable, text conversion of information possible, copyable, transferable, bulk download of anonymized information possible, etc.). When making it downloadable, it is preferable to be able to use technologies such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information belongs, and the expertise, it may be possible to grant a third party the right of access to the patient himself / herself. For example, it is assumed that a PCR test staff member who is a medical worker transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0220] Regarding the combination of these pieces of information, it is conceivable that the above-described administrator registers them in advance in a tabular format or the like in the above-described access control unit using the administrator terminal, and can edit or delete them as appropriate according to the need. In addition, for example, medical professionals include doctors, dentists, and pharmacists. Regarding these third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist roster registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, at least a part of the third-party identification information may include the number described in the qualification license. Also, symbols and numbers (including branch numbers) described in the insured's certificate of the health insurance association to which the user belongs, the number of the driver's license, and the personal number (My Number) information described in the personal number (My Number) card may be included as at least a part of the third-party identification information. In addition, it may be possible to identify the user by using third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark).

[0221] <Embodiment 8 Health and Medical Related Information Management System: Hardware Configuration> FIG. 29 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2901 that performs various arithmetic processes, and a "main memory" 2902. It also includes a "non-volatile memory" 2903 that holds predetermined information, and a "network I / F" 2904 that transmits and receives information with a third-party terminal 2906 and an administrator terminal 2907. And they are interconnected by a data communication path such as a "bus" 2905 to transmit, receive, and process information.

[0222] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that is also the working area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the program stored in the "main memory" is mainly a third-party identification information holding program and the like. Also, third-party identification information and the like are stored in the "main memory" and the "non-volatile memory".

[0223] The "CPU" executes the third-party identification information holding program stored in the "main memory" to hold third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker, and stores the third-party identification information in the "main memory" and the "non-volatile memory".

[0224] <Embodiment 8 Health Care-Related Information Management System: Process Flow> FIG. 30 is a diagram showing the process flow when the health care-related information management system in the present embodiment is used. As shown in this figure, it is a processing method consisting of a third-party identification information holding step S3007.

[0225] The "third-party identification information holding step" S3007 is a stage of holding third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker.

[0226] <Summary> From the above, it is possible to identify whether a third party is a medical worker or a non-medical worker. For example, even among the same medical staff, it is possible to distinguish whether the individual is their personal attending physician (primary care physician), and even among the same non-medical staff, it is possible to distinguish whether the individual is an employee (including researchers) belonging to a pharmaceutical company that develops and manufactures therapeutic drugs related to their illness, or an employee belonging to a government agency.

[0227] <Embodiment 9 (mainly corresponding to Claim 9, Claim 24, and Claim 39)> <Overview of Embodiment 9>

[0228] Figure 31 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 9. Hereinafter, the functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 8 will be omitted from the description as appropriate.

[0229] Hereinafter, the health care-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0230] <Functional Configuration of Embodiment 9> Figure 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment. By adopting such a configuration, when the public release approval information held in the public release approval information holding unit indicates public release approval and the third-party identification information indicates that the person is a medical staff, it becomes possible to view the health care-related information accumulated in the health care-related information accumulation unit.

[0231] <Health Care-Related Information Management System in Embodiment 9: Functional Configuration> Figure 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment.

[0232] <Explanation of the Configuration in Embodiment 9: Public Release Approval Information Holding Unit of the Access Control Unit> The "Disclosure Permission Information Retention Unit" 3106 is configured to have a function of retaining disclosure permission information indicating whether to disclose its own health and medical related information to a third party who has accessed the health and medical related information about an individual via a network. Specifically, it is preferably configured such that information indicating "Disclosure Permission" or "Disclosure Denial" can be set according to an individual's will from a third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, it may be two-value information (flag information) where "Disclosure Permission" is "1" and "Disclosure Denial" is "0". Also, the disclosure permission information may be set so as to be able to set whether to disclose in units of a predetermined block among the health and medical related information. For example, it is conceivable to set "Disclosure Permission" for the health and medical related information regarding internal medicine among the medical departments, while setting "Disclosure Denial" for the health and medical related information regarding psychiatry. Further, the disclosure permission information may be set so as to be distinguishable between the case of "Disclosure Permission" and the case of "Disclosure Denial" when the third party is a specific medical practitioner by combination with the above-described third-party identification information. For example, when the third-party identification information represents "doctor", the health and medical related information of the individual is set to "Disclosure Permission", while when the third-party identification information represents a specific medical practitioner (for example, an accounting staff or an accounting staff), it is conceivable to set the health and medical related information of the individual to "Disclosure Denial".

[0233] <Embodiment 9 Explanation of Configuration: Third-Party Identification Information Retention Unit of Access Control Unit> The "Third-Party Identification Information Retention Unit" 3107 is configured to have a function of retaining third-party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage unit via a network is a medical practitioner or a non-medical practitioner. Here, the third-party identification information may be, for example, information created by combining numbers, characters, symbols, etc. consisting of 12 digits and may be information that can uniquely identify a third party. For example, specifically, My Number information, the insured person's certificate number, etc. may be used. Further, it is preferable that the third-party identification information is associated with the access subject information, user information, and user attribute information (either "medical professional" or "non-medical professional") described above. Also, the administrator described above may be able to register, edit, and delete the third-party identification information using the administrator terminal.

[0234] In addition, even when the public disclosure permission / non-permission information indicates "public disclosure permission" due to the combination of the public disclosure permission / non-permission information and the third-party identification information described above, when the third party is a specific medical professional, it may be possible to set it separately depending on whether access is permitted or not. For example, when the third-party identification information represents "doctor", access to health care-related information may be permitted. On the other hand, when the third-party identification information represents a specific medical professional (e.g., an accounting staff or an accountant), access to health care-related information may be made non-permissible.

[0235] For example, information indicating the department to which a third party belongs may be added to the third-party identification information, and based on the information indicating the department to which the third party belongs, it may be possible to control the permission or non-permission of access to health care-related information. Also, for example, based on information regarding the expertise of the user identified by the third-party identification information (e.g., the specialized field and years of experience of a "doctor" or "nurse"), it may be possible to control the permission or non-permission of access to health care-related information. Also, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information belongs, and the expertise, it may be possible to change the method by which a third party can obtain health care-related information (e.g., only viewable, text conversion of information possible, copyable, transferable, bulk download of anonymized information possible, etc.). When it is possible to download, it is preferable to be able to use technologies such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information belongs, and the expertise, it may be possible to grant a third party the right to access the patient himself / herself. For example, it is assumed that a PCR test staff member who is a medical worker sends the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0236] Regarding the combination of these pieces of information, it is conceivable that the above-mentioned administrator uses the administrator terminal to register them in a table format or the like in advance in the above-mentioned access control unit so that they can be edited and deleted as appropriate according to the need. In addition, for example, as medical professionals, doctors, dentists, and pharmacists can be mentioned. Regarding this third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist roster registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, regarding the third-party identification information, at least a part of it may include the number described in the qualification license. Also, symbols and numbers (including branch numbers) described in the insured's certificate of the health insurance association to which the user belongs, the number of the driver's license, the personal number (My Number) information described in the personal number (My Number) card, etc. may be included as at least a part of the third-party identification information. In addition, it may be possible to identify the user by using third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark).

[0237] <Embodiment 9 Description of Configuration: Access Control Means of the Access Control Unit> The "access control means" 3105 is related to access control when a third party accesses the health care-related information storage unit via a network. When the access permission / denial information held in the access permission / denial information storage unit indicates access permission and the third-party identification information indicates that it is a medical professional, it is configured to have a function of making the health care-related information stored in the health care-related information storage unit viewable.

[0238] <Embodiment 9 Health Care-Related Information Management System: Hardware Configuration> FIG. 32 is a diagram showing the hardware configuration of the health care related information management system according to the present embodiment. As shown in this figure, the health care related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 3201 that performs various arithmetic processes, and a "main memory" 3202. Further, it includes a "non-volatile memory" 3203 that holds predetermined information, and a "network I / F" 3204 that transmits and receives information to and from a third-party terminal 3206 and an administrator terminal 3207. And they are mutually connected by a data communication path such as a "bus" 3205 to transmit, receive, and process information.

[0239] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing the addresses. In the present embodiment, the programs stored in the "main memory" are a public release permission information holding program, a third-party identification information holding program, an access control program, and the like. Further, public release permission information, third-party identification information, and the like are stored in the "main memory" and the "non-volatile memory".

[0240] The "CPU" executes the public permission information retention program stored in the "main memory", and stores the public permission information indicating whether to disclose its own health and medical related information to a third party that has accessed the health and medical related information of an individual via a network in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the third party identification information retention program stored in the "main memory", and stores the third party identification information for identifying whether a third party that has accessed the health and medical related information stored in the health and medical related information storage unit via a network is a medical worker or a non-medical worker in the "main memory" and the "non-volatile memory". After that, when the "CPU" executes the access control program stored in the "main memory" and the public permission information indicates permission to disclose and the third party identification information indicates that the third party is a medical worker, the health and medical related information stored in the health and medical related information storage unit is made viewable.

[0241] <Embodiment 9 Health and Medical Related Information Management System: Processing Flow> FIG. 33 is a diagram showing the processing flow when the health and medical related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of a public permission information retention step S3306, a third party identification information retention step S3307, and an access control step S3308.

[0242] The "public permission information retention step" S3306 is a stage of retaining the public permission information indicating whether to disclose its own health and medical related information to a third party that has accessed the health and medical related information of an individual via a network.

[0243] The "third party identification information retention step" S3307 is a stage of retaining the third party identification information for identifying whether a third party that has accessed the health and medical related information stored in the health and medical related information storage unit via a network is a medical worker or a non-medical worker.

[0244] The "access control step" S3308 is a stage where, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third-party identification information indicates a medical practitioner, the health care-related information stored in the health care-related information storage unit can be viewed.

[0245] <Summary> As described above, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third-party identification information indicates a medical practitioner, the health care-related information stored in the health care-related information storage unit can be viewed.

[0246] <Embodiment 10 (mainly corresponding to Claim 10, Claim 25, and Claim 40)> <Outline of Embodiment 10>

[0247] In addition to Embodiments 1 to 9, this embodiment is characterized in that it is configured to hold anonymization method information. Hereinafter, the description of the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 9 will be omitted as appropriate.

[0248] Hereinafter, the health care-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0249] <Functional Configuration of Embodiment 10> FIG. 34 is a diagram showing the functional configuration of the health care-related information management system in this embodiment. The health care-related information management system in this embodiment includes an anonymization method information holding unit.

[0250] <Health Care-Related Information Management System in Embodiment 10: Functional Configuration> FIG. 34 is a diagram showing the functional configuration of the health care-related information management system in this embodiment.

[0251] <Explanation of Configuration: Anonymization Method Information Holding Unit of Access Control Unit in Embodiment 10> The "Anonymization Method Information Retention Unit" 3408 is configured to have a function of retaining information representing an anonymization method. Here, the anonymization method information may be information created by combining, for example, six-digit numbers, characters, symbols, etc., and may be information that can uniquely identify the anonymization method. Note that regarding the anonymization method information, the above-described administrator may be able to perform registration, editing, and deletion using the administrator terminal.

[0252] There are several anonymization methods, and these are often used alone or in combination. The main anonymization methods will be briefly described below. "k-anonymization" (where k represents a natural number of 2 or more) means that for attributes (such as gender, age, place of residence, occupation, etc.) that cannot identify an individual alone but can identify an individual with a high probability by combining multiple ones, for any combination of attribute values, there must be at least k occurrences in the target data. "Pseudonymization" means replacing with other descriptions or the like by a method that does not have a regularity that can be deleted or restored. "Generalization" means replacing the value of an attribute with a higher value or concept. For example, grouping by 10-year intervals or changing cucumber to the higher concept of vegetable. "Top (bottom) coding" means grouping particularly large or small attribute values for numerical attributes. For example, people aged 100 or above are grouped as "100 years old or above". "Noise (error) addition" means adding random noise according to a certain distribution to numerical attributes. "Swapping (data exchange)" means (probabilistically) swapping attribute values between records for categorical attributes. Also called data swap. "Sampling" means randomly extracting a certain proportion or number from the entire original data. "Grouping" means replacing detailed items with certain groupings or classifications in attributes or histories.

[0253] <Embodiment 10 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 3405 relates to access control when a third party accesses the health care-related information storage unit via a network. When the access permission / denial information held in the access permission / denial information storage unit indicates public permission and the third party identification information indicates that the third party is a non-medical worker, it is configured to have a function of making part (including all) of the health care-related information stored in the health care-related information storage unit or the health care-related information anonymized by a predetermined anonymization method viewable.

[0254] <Embodiment 10 Health Care-Related Information Management System: Hardware Configuration> FIG. 35 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 3501 that performs various arithmetic processes and a "main memory" 3502. It also includes a "non-volatile memory" 3503 that holds predetermined information, a "network I / F" 3504 that transmits and receives information to and from a third party terminal 3506 and an administrator terminal 3507. And they are interconnected by a data communication path such as a "bus" 3505 to transmit, receive, and process information.

[0255] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also the work area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is an anonymization method information holding program. Also, anonymization method information and the like are stored in the "main memory" and the "non-volatile memory".

[0256] The "CPU" executes an anonymization method information retention program stored in the "main memory" to store anonymization method information representing the anonymization method in the "main memory" and the "non-volatile memory". After that, when the access control program stored in the "main memory" indicates public permission and the third-party identification information indicates that the person is not a medical practitioner, a part (including all) of the health care-related information stored in the health care-related information storage unit, or health care-related information anonymized by a predetermined anonymization method, can be viewed.

[0257] <Embodiment 10 Health Care-Related Information Management System: Processing Flow> FIG. 36 is a diagram showing the processing flow when the health care-related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of an anonymization method information retention step S3608 and an access control step S3609.

[0258] The "anonymization method information retention step" S3608 is a stage of retaining anonymization method information, which is information representing a method of anonymizing health care-related information.

[0259] The "access control step" S3609 is a stage where, when the public permission / denial information held in the public permission / denial information storage unit indicates public permission and the third-party identification information indicates that the person is not a medical practitioner, a part (including all) of the health care-related information stored in the health care-related information storage unit, or health care-related information anonymized by a predetermined anonymization method, can be viewed.

[0260] <Explanation of an Example of Anonymization Method> FIGS. 37 to 39 are diagrams showing an example of the anonymization method. Using these, an example of the anonymization method will be briefly explained. The table shown in Fig. 37 is a list of patients in an overground medical institution in Minato-ku, Tokyo, Japan, which has not yet been anonymized. Here, it contains six attributes (name, age, gender, place of residence, religion, disease name) and data for 12 people. Among these, the "name" is information that constitutes personal data and is information that can potentially identify an individual on its own. Also, "age", "gender", "place of residence", "religion", and "disease name" are information that constitutes personal data. They are information that does not accumulate data over time and cannot identify an individual on its own. However, they are information that can potentially identify an individual through combination with other attributes or collation with external information. In particular, the "disease name" is very sensitive attribute information in personal data. These information correspond to the personal health and medical related information stored in the above-mentioned Health and Medical Related Information Accumulation Department. In this case, for a certain value of k (k is a natural number of 2 or more), the following processing can be performed to achieve k-anonymity.

[0261] First, perform a process called "pseudonymization" and replace certain values of an attribute with an asterisk "*". All or some of the values in that column are replaced with "*". In the table shown in Fig. 38, all the values of "name" and all the values of "religion" are replaced with "*". Subsequently, perform a process called "generalization" and replace individual attribute values with a broader range. For example, for "age", replace "29 years old" with "in their 20s" and "35 years old" with "in their 30s", etc., to replace with values having a range. Also, for "place of residence", although it is a value consisting of prefecture and city / town / village, delete the city / town / village and change it to only the prefecture. Fig. 38 shows the anonymized table. Here, there are four equivalence classes having the same combination of the same quasi-identifiers ("age", "gender", "place of residence").

[0262] Figure 39 shows an anonymized table grouped in an easy-to-understand manner. As can be seen from this table, in any of the groups (Group A to Group D), 3-anonymity is achieved in terms of "age", "gender", and "residence". This is because in any combination of these attributes, there are three or more people. In this way, by anonymizing the health care-related information about individuals stored in the above-mentioned health care-related information storage unit, the risk of identifying individuals can be reduced.

[0263] <Summary> As described above, when the publication permission / denial information held in the publication permission / denial information holding unit indicates publication permission and the third-party identification information indicates that the person is not a medical worker, a part (including all) of the health care-related information stored in the health care-related information storage unit, or the health care-related information anonymized by a predetermined anonymization method can be made viewable.

Explanation of Signs

[0264] Health care-related information management system: 200, 300 Health care-related information storage unit: 201, 301 Access control unit: 202, 302 Incentive management unit: 203, 303 Provision history holding unit: 204, 304 Network: 205 Third-party terminal: 206 Administrator terminal: 207

Claims

1. A health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to the individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose the health care-related information about the individual, and a provision history holding unit for holding a provision history which is a history of providing incentives for each individual, wherein the incentive management unit includes, as its function, a process for executing an operation for providing an incentive when it is determined that the disclosure rate of the health care-related information has reached a certain value as a result of referring to the provision history holding unit, a health care-related information management system.

2. further having an incentive type information holding unit for holding incentive type information which is information indicating types of a plurality of incentives, wherein the incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit, the health care-related information management system according to Claim 1.

3. an end request reception unit for receiving an end request which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has stored the health care-related information in the health care-related information storage unit, an end condition holding unit for holding an end condition which is a condition for determining whether it is possible to end based on information about the individual who has made the end request when the end request is received, a determination rule holding unit for holding a determination rule which is a rule for determining whether to end the disclosure of the health care-related information based on the information about the individual who has made the end request and the held end condition, an end determination unit for determining whether to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received, and an end control unit for controlling the access control unit to end the disclosure of the health care-related information of the individual when the determination result in the end determination unit is a determination result that it should end, further having the health care-related information management system according to Claim 1.

4. The health care-related information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.

5. The health care-related information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

6. The health care-related information management system according to claim 5, further comprising an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive when consent information is acquired by the consent information acquisition unit.

7. The health care-related information management system according to claim 1, further comprising a public permission / denial information holding unit that holds public permission / denial information indicating whether an individual permits the disclosure of his / her health care-related information to a third party.

8. The health care-related information management system according to claim 7, further comprising a third-party identification information holding unit that holds third-party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

9. The access control unit causes the medical practitioner to view the health care-related information stored in the health care-related information storage unit when the public permission / denial information held in the public permission / denial information holding unit indicates permission to disclose and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a medical practitioner. The health care-related information management system according to claim 8.

10. The access control unit causes the non-medical practitioner to view a part (including all) of the health care-related information stored in the health care-related information storage unit or the health care-related information anonymized by a predetermined anonymization method when the public permission / denial information held in the public permission / denial information holding unit indicates permission to disclose and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a non-medical practitioner. The health care-related information management system according to claim 8.

11. The anonymization method is performed by at least k (k is a natural number of 2 or more) - anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping, or a combination thereof. The health care-related information management system according to claim 10.

12. The incentive management unit provides incentives including any one or more of the following: provision of minor points, provision of individual information services or general information services to information providers, provision of individual drugs or supplements, provision of books, DVDs, Blu-rays, health appliances, kitchen supplies, bedding, beds or pillows, provision of passwords or IDs for information provision, provision of items available on the network, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash. The health care-related information management system according to claim 1.

13. The medical staff includes at least one or more of the following: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical staff. The health care-related information management system according to claim 8.

14. The non-medical staff includes at least one or more of the following: employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health appliance companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies. The health care-related information management system according to claim 8.

15. A method executed by a CPU in a health care related information management system which is a computer, comprising: a health care related information storage step for storing and managing health care related information about an individual; an access control step for controlling disclosure of the health care related information stored in the health care related information storage step to a third party via a network; an incentive management step for providing an incentive to the individual in order to encourage disclosure of the health care related information by referring to the provision history of a provision history retention step described later regarding whether or not to disclose health care related information about the individual; a provision history retention step for retaining a provision history which is a history of providing an incentive to each individual; and the incentive management step includes, as its function, a process for executing an operation for providing an incentive when it is determined that the disclosure rate of health care related information has reached a certain value as a result of referring to the provision history retention step.

16. A method executed by a CPU in a health care related information management system which is a computer, comprising: further comprising an incentive type information retention step for retaining incentive type information which is information indicating types of a plurality of incentives; the method according to claim 15, wherein the incentive management step selects and provides an incentive to be provided to an individual according to a provision history based on the incentive type information retained in the incentive type information retention step.

17. A method executed by a CPU in a health care related information management system which is a computer, comprising: an end request reception step for receiving an end request which is a request to stop or end disclosure of health care related information already disclosed from an individual storing the health care related information in the health care related information storage step; an end condition retention step for retaining an end condition which is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received; a determination rule retention step for retaining a determination rule which is a rule for determining whether or not to end disclosure of health care related information based on information about the individual who made the end request and the retained end condition; An end determination step of determining whether to end based on information about the individual, the stored end conditions, and the stored determination rules when an end request is received; An end control step of controlling the access control step to end the disclosure of the individual's health care-related information when the determination result in the end determination step is a determination that it is time to end; The method according to claim 15, further comprising the above.

18. A method executed by a CPU in a health care-related information management system that is a computer, The method according to claim 15, further comprising an access authentication processing step of performing authentication for accessing the incentive management step.

19. A method executed by a CPU in a health care-related information management system that is a computer, The method according to claim 18, further comprising a consent information acquisition step of acquiring consent information, which is information indicating acceptance of the incentive by the incentive management step, after being authenticated in the access authentication processing step.

20. A method executed by a CPU in a health care-related information management system that is a computer, The method according to claim 19, further comprising an incentive provision processing step of performing an incentive provision process, which is a process for providing an incentive, when consent information is acquired in the consent information acquisition step.

21. A method executed by a CPU in a health care-related information management system that is a computer, The method according to claim 15, further comprising a public disclosure permission / non-permission information retention step of retaining public disclosure permission / non-permission information indicating whether the individual permits the disclosure of their health care-related information to a third party.

22. A method executed by a CPU in a health care-related information management system that is a computer, The method according to claim 21, further comprising a third party identification information retention step of retaining third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

23. A method executed by a CPU in a health care-related information management system that is a computer, The access control step is the method according to claim 22, wherein when the publication permission / non-permission information held in the publication permission / non-permission information holding step indicates publication permission and the third party identification information held in the third party identification information holding step indicates that the third party is a medical practitioner, the medical practitioner is allowed to view the health care-related information accumulated in the health care-related information accumulation step.

24. A method executed by a CPU in a health care-related information management system that is a computer, The access control step is the method according to claim 22, wherein when the publication permission / non-permission information held in the publication permission / non-permission information holding step indicates publication permission and the third party identification information held in the third party identification information holding step indicates that the third party is a non-medical practitioner, a part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method is allowed to be viewed by the non-medical practitioner.

25. A method executed by a CPU in a health care-related information management system that is a computer, The anonymization method is performed by at least one of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof, according to the method of claim 24.

26. A method executed by a CPU in a health care-related information management system that is a computer, The incentive management step provides an incentive including any one or more of providing minor points, providing individual or general information services to information providers, providing individual drugs or supplements, providing books, DVDs, Blu-rays, health appliances, kitchen supplies, bedding, beds or pillows, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (for example, health management apps or pedometer apps), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

27. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The medical personnel includes at least one of a doctor, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, vision therapist, speech therapist, prosthetist, diagnostic radiological technologist, diagnostic X-ray technologist, clinical laboratory technologist, sanitary inspector, clinical engineer, dental hygienist, dental technician, emergency medical technician, massage therapist, acupuncturist, moxibustion therapist, chiropractor, registered dietitian, nutritionist, psychiatric welfare worker, social welfare worker, care worker, certified psychologist, clinical psychologist, and medical office worker. The method according to claim 22.

28. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The non-medical personnel includes at least one of an employee belonging to a life insurance company, property insurance company, securities company, pharmaceutical company, drug discovery venture company, food company, health equipment company, fitness club, sports gym, bank, credit union, JA (Agricultural Cooperative), corporate health insurance, association health insurance, mutual aid association, municipal national health insurance, national health insurance association, PR company, general research institute, university and graduate school (including affiliated research institutions), junior college, agricultural and forestry products company, fertilizer manufacturer, government agency, local government, and independent administrative institution. The method according to claim 22.

29. A health care-related information storage step for storing and managing health care-related information about an individual; An access control step for controlling the disclosure of the health care-related information stored in the health care-related information storage step to a third party via a network; An incentive management step for providing an incentive to the individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history retention step described below regarding whether or not to disclose the health care-related information about the individual; A provision history retention step for retaining a provision history that is a history of providing an incentive for each individual; To be executed by a health care-related information management system that is a computer, The incentive management step, as its function, includes a process of executing an operation for providing an incentive when it is determined that the disclosure rate of the health care-related information has reached a certain value as a result of referring to the provision history retention step. The operation program of the health care-related information management system described so as to be readable and executable by the health care-related information management system that is a computer.

30. further comprising an incentive type information holding step for holding incentive type information which is information indicating types of a plurality of incentives; wherein the incentive management step selects and provides an incentive to be provided to an individual according to a provision history based on the incentive type information held in the incentive type information holding step, in the health care related information management system described in the computer according to claim 29 which is described to be readable and executable in the health care related information management system.

31. an end request receiving step for receiving an end request which is a request to stop or end the disclosure of already disclosed health care related information from an individual who has accumulated health care related information in the health care related information accumulation step; an end condition holding step for holding an end condition which is a condition for determining whether or not to end based on information about the individual who has made the end request when the end request is received; a determination rule holding step for holding a determination rule which is a rule for determining whether or not to end the disclosure of health care related information based on information about the individual who has made the end request and the held end condition; an end determination step for determining whether or not to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received; an end control step for controlling the access control step to end the disclosure of the health care related information of the individual when the determination result in the end determination step is a determination result that it should end; further comprising the operation program of the health care related information management system described to be readable and executable in the computer according to claim 29 which is the health care related information management system.

32. further comprising an access authentication processing step for performing authentication for accessing the incentive management step, in the operation program of the health care related information management system described to be readable and executable in the computer according to claim 29 which is the health care related information management system.

33. The operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system according to claim 32, further comprising a consent information acquisition step of acquiring consent information, which is information indicating consent to accept an incentive by the incentive management step after being authenticated in the access authentication processing step.

34. The operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system according to claim 33, further comprising an incentive provision processing step of performing an incentive provision process, which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

35. The operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system according to claim 29, further comprising a public permission / non-permission information retention step of retaining public permission / non-permission information indicating whether an individual permits the disclosure of his / her health care-related information to a third party.

36. The operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system according to claim 35, further comprising a third party identification information retention step of retaining third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

37. The operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system according to claim 36, wherein the access control step causes the medical practitioner to view the health care-related information accumulated in the health care-related information accumulation step when the public permission / non-permission information retained in the public permission / non-permission information retention step indicates public permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner.

38. The access control step allows a non-medical professional to view part (including all) of the health care-related information stored in the health care-related information storage step, or health care-related information anonymized by a predetermined anonymization method, when the approval / disapproval information stored in the approval / disapproval information storage step indicates approval and the third-party identification information stored in the third-party identification information storage step indicates that the third party is a non-medical professional. The operation program of the health care-related information management system described in the computer of claim 36, which is readable and executable by the health care-related information management system.

39. The anonymization method is performed by at least one of k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof. The operation program of the health care-related information management system described in the computer of claim 38, which is readable and executable by the health care-related information management system.

40. The incentive management step provides incentives including any one or more of the following: provision of negative points, provision of individual or general information services to information providers, provision of individual drugs or supplements, provision of books, DVDs, Blu-rays, health appliances, kitchenware, bedding, beds or pillows, provision of passwords or IDs for information provision, provision of items available on the network, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash. The operation program of the health care-related information management system described in the computer of claim 29, which is readable and executable by the health care-related information management system.

41. The healthcare worker includes at least one or more of physicians, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, chiropractors, registered dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers. The operation program of the health and medical-related information management system described in claim 36, which is readable and executable by the computer of the health and medical-related information management system.

42. The non-healthcare worker includes at least one or more of employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies. The operation program of the health and medical-related information management system described in claim 36, which is readable and executable by the computer of the health and medical-related information management system.

Images