Healthcare information management system

Abstract

To provide a healthcare-related information management system for providing incentives to individuals to urge them to disclose healthcare-related information by referring to a provision history, the history of providing incentives for every individual as to whether or not to allow disclosure of the healthcare-related information of the individual.SOLUTION: A healthcare-related information management system includes a healthcare-related information storage unit for storing and managing healthcare-related information relating to individuals, an access control unit for controlling disclosure of the healthcare-related information stored in the healthcare-related information storage unit to third parties via a network, an incentive management unit for providing incentives as to whether or not to allow disclosure of the healthcare-related information of individuals, to the individuals to urge them to disclose the healthcare related information by referring to a provision history of a provision history holding unit described below, and the provision history holding unit for holding the provision history, the history of providing the incentives for every individual.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to a healthcare-related information management system for storing and managing healthcare-related information, which is information relating to the healthcare of an individual. [Background technology]

[0002] Recently, systems and services that enable patients' medical information to be shared among multiple medical institutions have begun to be considered.

[0003] One example of such a system is the invention described in Patent Document 1. In this invention, to solve the problem of avoiding duplication of test items in test data at multiple medical institutions, reducing waste, and cutting medical costs, a medical information sharing server is installed in a regional medical collaboration system to store various patient test results. The medical information sharing server displays corresponding electronic medical records in response to instructions from a medical institution's terminal, such as a medical facility terminal or a medical checkup center terminal, and, when conducting a clinical test, searches the test result database for results of test items that are the same as those of the planned clinical test and displays them. The invention also discloses a medical information provision system installed in the medical information sharing server, which requests payment for the information when sending the medical information to a provider, and then determines the remuneration that can be provided to the user based on the received payment and provides the remuneration to the user. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent Publication No. 2022-25166 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the above-mentioned invention only discloses that the medical information provision system formulates rewards that can be offered to users and provides the rewards to users, and there is an issue in that it does not clearly state that a health and medical related information management system such as the present invention has a function to maintain a provision history, which is a record of incentives provided to each individual, and / or a function to provide incentives to individuals to encourage the disclosure of health and medical related information by referring to the provision history when deciding whether or not to allow the disclosure of health and medical related information about an individual. [Means for solving the problem]

[0006] In light of the above-mentioned problems, the present invention aims to provide a health and medical care related information management system that provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to a provision history, which is a record of incentives provided to each individual, when deciding whether or not to allow the disclosure of health and medical care related information about that individual.

[0007] Specifically, the present invention provides a healthcare and medical care related information management system having a healthcare and medical care related information storage unit for storing and managing healthcare and medical care related information about individuals, an access control unit for controlling the disclosure of the healthcare and medical care related information stored in the healthcare and medical care related information storage unit to third parties via a network, an incentive management unit for providing incentives to individuals to encourage the disclosure of the healthcare and medical care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the healthcare and medical care related information about the individuals, and a provision history storage unit for storing the provision history, which is a history of incentives provided to each individual.

[0008] In addition to the above features, the present invention also provides a health and medical care related information management system having an incentive type information storage unit that stores incentive type information, which is information indicating multiple types of incentives, and an incentive management unit that selects and provides incentives to individuals based on the incentive type information stored in the incentive type information storage unit in accordance with the incentive provision history.

[0009] Furthermore, in addition to the above features, the present invention provides a healthcare and medical care related information management system comprising: a termination request receiving unit that receives a termination request, which is a request to suspend or terminate the disclosure of healthcare and medical care related information that has already been made public, from an individual who stores their healthcare and medical care related information in the healthcare and medical care related information storage unit; a termination condition holding unit that holds termination conditions, which are conditions for determining whether to terminate the disclosure based on information about the individual who made the termination request when a termination request is received; a judgment rule holding unit that holds judgment rules, which are rules for determining whether to terminate the disclosure of the healthcare and medical care related information based on the information about the individual who made the termination request and the held termination conditions; a termination judgment unit that determines whether to terminate the disclosure of the healthcare and medical care related information when a termination request is received based on the information about the individual, the held termination conditions, and the held judgment rules; and a termination control unit that, when the termination judgment unit determines that the disclosure should be terminated, causes the access control unit to control the termination of the disclosure of the individual's healthcare and medical care related information.

[0010] In addition to the above features, the present invention also provides a health and medical care related information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] In addition to the above features, the present invention also provides a health and medical care related information management system having a consent information acquisition unit that acquires consent information, which is information indicating consent to accept an incentive from the incentive management unit, after being authenticated by the access authentication processing unit.

[0012] In addition to the above features, the present invention also provides a health and medical care-related information management system having an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition unit.

[0013] In addition to the above features, the present invention also provides a health and medical care related information management system having a disclosure permission information storage unit that stores disclosure permission information indicating whether an individual permits disclosure of their own health and medical care related information to third parties.

[0014] In addition to the above features, the present invention also provides a health and medical related information management system having a third party identification information storage unit that stores third party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0015] In addition to the above features, the present invention also provides a health and medical care related information management system in which the access control unit allows a medical professional to view the health and medical care related information stored in the health and medical care related information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the medical professional is a medical professional.

[0016] In addition to the above features, the present invention also provides a healthcare-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates disclosure is permitted and the third-party identification information held in the third-party identification information holding unit indicates that the person is a non-healthcare professional, the access control unit allows a non-healthcare professional to view part (including all) of the healthcare-related information stored in the healthcare-related information storage unit, or healthcare-related information that has been anonymized using a predetermined anonymization method.

[0017] In addition to the above features, the present invention also provides a health and medical care-related information management system in which the anonymization method is at least one of the following anonymization methods: k (k is a natural number greater than or equal to 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

[0018] In addition to the above features, the present invention also provides a healthcare-related information management system in which the healthcare-related information storage unit stores healthcare-related information including one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital signs information, questionnaire information, data from health promotion apps, and conversation data from an interactive health promotion SNS regarding an individual.

[0019] In addition to the above features, the present invention provides a health and medical related information management system in which the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books or other products, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

[0020] In addition to the above features, the present invention also provides a health and medical related information management system in which the medical professionals include at least one of doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physiotherapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, orthotists, diagnostic radiologists, diagnostic X-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

[0021] In addition to the above features, the present invention also provides a health and medical related information management system in which the non-medical personnel include at least one of employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0022] Furthermore, to realize the above-mentioned healthcare and medical information management system, the present invention provides a method executed by a CPU in the healthcare and medical information management system, which is a computer, and an operating program for the healthcare and medical information management system, which is written in a readable and executable manner in the healthcare and medical information management system, which is a computer.

[0023] Specifically, the present invention provides a method executed by a CPU in a healthcare and medical care related information management system, which is a computer, comprising: a healthcare and medical care related information accumulation step for accumulating and managing healthcare and medical care related information about individuals; an access control step for controlling the disclosure of the healthcare and medical care related information accumulated in the healthcare and medical care related information accumulation step to third parties via a network; an incentive management step for providing incentives to individuals to encourage the disclosure of the healthcare and medical care related information by referring to the provision history in the provision history retention step described below regarding whether or not to allow the disclosure of the healthcare and medical care related information about the individuals; and a provision history retention step for retaining the provision history, which is a history of incentives provided to each individual.

[0024] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, the method including an incentive type information retention step for retaining incentive type information that is information indicating the types of multiple incentives, and an incentive management step for selecting and providing an incentive to an individual in accordance with the incentive provision history based on the incentive type information retained in the incentive type information retention step.

[0025] Furthermore, in addition to the above features, the present invention provides a method executed by a CPU in a healthcare and medical care related information management system that is a computer, the method comprising: a termination request receiving step for receiving a termination request, which is a request to suspend or terminate the disclosure of already disclosed healthcare and medical care related information, from an individual whose healthcare and medical care related information is accumulated in the healthcare and medical care related information accumulation step; a termination condition retaining step for retaining termination conditions, which are conditions for determining whether or not to terminate the disclosure of the healthcare and medical care related information based on information about the individual who made the termination request, when the termination request is received; a judgment rule retaining step for retaining judgment rules, which are rules for determining whether or not to terminate the disclosure of the healthcare and medical care related information based on information about the individual who made the termination request and the retained termination conditions; a termination judgment step for determining whether to terminate the disclosure of the healthcare and medical care related information based on information about the individual, the retained termination conditions, and the retained judgment rules, when the termination request is received; and a termination control step for controlling the access control step to terminate the disclosure of the individual's healthcare and medical care related information if the judgment result in the termination judgment step is that the disclosure should be terminated.

[0026] In addition to the above features, the present invention also provides a method executed by a CPU in a health care related information management system, which is a computer, and which includes an access authentication processing step for performing authentication for accessing the incentive management step.

[0027] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and which includes a consent information acquisition step of acquiring consent information, which is information indicating consent to accept an incentive through an incentive management step, after being authenticated in the access authentication processing step.

[0028] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and which has an incentive provision processing step that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

[0029] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, comprising a disclosure permission information retention step of retaining disclosure permission information indicating whether an individual permits disclosure of their own health and medical care related information to third parties.

[0030] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and which includes a third party identification information retention step for retaining third party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0031] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, in which the access control step allows a medical professional to view the health and medical care related information accumulated in the health and medical care related information accumulation step if the disclosure permission information held in the disclosure permission information holding step indicates that disclosure is permitted and the third party identification information held in the third party identification information holding step indicates that the third party is a medical professional.

[0032] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, in which the access control step allows a non-healthcare professional to view part (including all) of the health and medical care related information accumulated in the health and medical care related information accumulation step, or the health and medical care related information that has been anonymized by a predetermined anonymization method, when the disclosure permission information held in the disclosure permission information holding step indicates that disclosure is permitted and the third-party identification information held in the third-party identification information holding step indicates that the person is a non-healthcare professional.

[0033] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, wherein the anonymization method is at least one of the following anonymization methods: k (k is a natural number greater than or equal to 2), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

[0034] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, wherein the health and medical care related information accumulation step accumulates health and medical care related information including one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital signs information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS regarding an individual.

[0035] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical related information management system which is a computer, wherein the incentive management step provides incentives including one or more of the following: providing My Number points, providing individual information services or general information services to information providers, providing individual medicines or supplements, providing books or other products, providing passwords or IDs for providing information, providing items that can be used on the network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, product coupons, travel coupons or cash.

[0036] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical related information management system which is a computer, wherein the medical professionals include at least one of: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physiotherapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, orthotists, diagnostic radiologists, diagnostic X-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

[0037] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical related information management system, which is a computer, wherein the non-medical personnel include at least one of employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), health insurance associations, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0038] Specifically, the present invention provides an operating program for a healthcare and medical care related information management system that is written in a manner that can be read and executed by a computer that has: a healthcare and medical care related information accumulation step for accumulating and managing healthcare and medical care related information about individuals; an access control step for controlling the disclosure of the healthcare and medical care related information accumulated in the healthcare and medical care related information accumulation step to third parties via a network; an incentive management step for providing incentives to individuals to encourage the disclosure of the healthcare and medical care related information by referring to the provision history in the provision history retention step described below regarding whether or not to allow the disclosure of the healthcare and medical care related information about the individuals; and a provision history retention step for retaining the provision history, which is a history of incentives provided to each individual.

[0039] In addition to the above features, the present invention also provides an operating program for a healthcare and medical care related information management system, which includes an incentive type information retention step for retaining incentive type information that indicates multiple types of incentives, and an incentive management step for selecting and providing incentives to be provided to individuals based on the incentive type information retained in the incentive type information retention step, the operating program being written in a manner that can be read and executed by the healthcare and medical care related information management system, which is a computer that selects and provides incentives to be provided to individuals in accordance with their provision history based on the incentive type information retained in the incentive type information retention step.

[0040] Furthermore, in addition to the above features, the present invention provides an operating program for a healthcare and medical care related information management system that is written to be readable and executable by a computer that has the following features: a termination request receiving step for receiving a termination request, which is a request to suspend or terminate the disclosure of already disclosed healthcare and medical care related information, from an individual whose healthcare and medical care related information is accumulated in the healthcare and medical care related information accumulation step; a termination condition retaining step for retaining termination conditions, which are conditions for determining whether or not to terminate the disclosure of the healthcare and medical care related information, based on information about the individual who made the termination request, when the termination request is received; a judgment rule retaining step for retaining judgment rules, which are rules for determining whether or not to terminate the disclosure of the healthcare and medical care related information, based on information about the individual who made the termination request and the retained termination conditions; a termination judgment step for determining whether to terminate the disclosure of the healthcare and medical care related information, based on information about the individual, the retained termination conditions, and the retained judgment rules, when the termination request is received; and a termination control step for controlling the access control step to terminate the disclosure of the individual's healthcare and medical care related information, if the judgment result in the termination judgment step is that the disclosure should be terminated.

[0041] In addition to the above features, the present invention also provides an operating program for a health and medical care related information management system, which is written in a readable and executable manner on a computer that has an access authentication processing step for performing authentication for accessing the incentive management step.

[0042] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a readable and executable manner on a computer that has a consent information acquisition step that, after being authenticated in the access authentication processing step, acquires consent information, which is information indicating that the user agrees to accept an incentive through the incentive management step.

[0043] In addition to the above features, the present invention also provides an operating program for a health and medical care related information management system that is written in a manner that can be read and executed by a computer that has an incentive provision processing step that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

[0044] In addition to the above features, the present invention also provides an operating program for a healthcare and medical care related information management system, which is written in a manner that can be read and executed by a computer that has a disclosure permission information retention step for retaining disclosure permission information indicating whether an individual permits disclosure of their own healthcare and medical care related information to third parties.

[0045] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a manner that can be read and executed by a computer that has a third-party identification information retention step that retains third-party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0046] In addition to the above features, the present invention also provides an operating program for a healthcare-related information management system, the operating program being written in a readable and executable manner in a healthcare-related information management system that is a computer that allows healthcare workers to view the healthcare-related information stored in the healthcare-related information storage step, when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third-party identification information stored in the third-party identification information storage step indicates that the third-party identification information is a healthcare worker, in the access control step.

[0047] In addition to the above features, the present invention also provides an operating program for a healthcare and medical care related information management system, the operating program being written in a readable and executable manner on a computer that allows non-healthcare professionals to view part (including all) of the healthcare and medical care related information accumulated in the healthcare and medical care related information accumulation step, or the healthcare and medical care related information that has been anonymized using a predetermined anonymization method, when the disclosure permission information held in the disclosure permission information holding step indicates that disclosure is permitted and the third-party identification information held in the third-party identification information holding step indicates that the person is a non-healthcare professional.

[0048] In addition to the above features, the present invention also provides an operating program for a healthcare-related information management system that is written in a manner that can be read and executed by a computer that performs anonymization using at least one of the following anonymization methods: k (k is a natural number greater than or equal to 2), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

[0049] In addition to the above features, the present invention also provides an operating program for a healthcare-related information management system, the operating program being written in a readable and executable manner on a computer that stores healthcare-related information including one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital signs information, questionnaire information, health promotion app data, and conversation data on an interactive health promotion SNS, regarding an individual:

[0050] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a manner that can be read and executed by a computer that provides incentives, including one or more of the following: providing My Number points, providing individual information services or general information services to information providers, providing individual medicines or supplements, providing books or other products, providing passwords or IDs for providing information, providing items that can be used on the network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, and providing product coupons, travel coupons, or cash.

[0051] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a manner that can be read and executed by a computer that is a health and medical related information management system, wherein the medical professionals include at least one of: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physiotherapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiological technologists, radiological x-ray technicians, clinical laboratory technicians, public health technicians, clinical engineers, dental hygienists, dental technicians, paramedics, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

[0052] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a manner that can be read and executed on a computer that includes at least one of the following non-medical personnel: employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies. [Effects of the Invention]

[0053] As described above, the present invention can provide a health and medical care-related information management system that provides incentives to individuals to encourage them to disclose their health and medical care-related information by referring to the provision history, which is a record of incentives provided to each individual, when deciding whether or not to disclose their health and medical care-related information. [Brief explanation of the drawings]

[0054] [Figure 1] FIG. 1 is a diagram showing a hardware configuration applied to the present invention. [Figure 2] A diagram showing the overall configuration of the healthcare-related information management system of the present invention. [Figure 3] FIG. 1 shows the functional configuration of a health and medical care-related information management system according to a first embodiment. [Figure 4] FIG. 1 is a diagram showing the hardware configuration of a healthcare-related information management system according to a first embodiment. [Figure 5] FIG. 1 is a diagram showing a processing flow when using a health care-related information management system according to the first embodiment. [Figure 6] FIG. 1 is a diagram showing an example of a provision history storage unit of a health and medical care related information management system according to the first embodiment. [Figure 7] FIG. 10 is a diagram showing the functional configuration of a health and medical care-related information management system according to a second embodiment. [Figure 8]FIG. 10 is a diagram showing the hardware configuration of a healthcare-related information management system according to a second embodiment. [Figure 9] FIG. 10 is a diagram showing a processing flow when using a health care related information management system according to the second embodiment. [Figure 10] FIG. 10 is a diagram showing an example of an incentive type information storage unit of the health care related information management system according to the second embodiment. [Figure 11] FIG. 10 is a diagram showing an example of an incentive management unit of the health and medical care related information management system according to the second embodiment. [Figure 12] FIG. 10 is a diagram showing the functional configuration of a health and medical care related information management system according to a third embodiment. [Figure 13] FIG. 10 is a diagram showing the hardware configuration of a healthcare-related information management system according to a third embodiment. [Figure 14] FIG. 10 is a diagram showing a processing flow when using a health care related information management system according to the third embodiment. [Figure 15] FIG. 10 is a diagram showing the functional configuration of a health and medical care related information management system according to a fourth embodiment. [Figure 16] FIG. 10 is a diagram showing the hardware configuration of a healthcare-related information management system according to a fourth embodiment. [Figure 17] FIG. 10 is a diagram showing a processing flow when using a health care related information management system according to the fourth embodiment. [Figure 18] FIG. 10 is a diagram showing the functional configuration of a health and medical care related information management system according to a fifth embodiment. [Figure 19] FIG. 10 is a diagram showing hardware calibration of the healthcare-related information management system according to the fifth embodiment. [Figure 20] FIG. 10 is a diagram showing a processing flow when using a health care related information management system according to a fifth embodiment. [Figure 21] FIG. 14 is a diagram showing the functional configuration of a health and medical care-related information management system according to a sixth embodiment. [Figure 22] FIG. 13 is a diagram showing the hardware configuration of a healthcare-related information management system according to a sixth embodiment. [Figure 23]FIG. 14 is a diagram showing a processing flow when using a health care related information management system according to a sixth embodiment. [Figure 24] FIG. 13 is a diagram showing the functional configuration of a health and medical care related information management system according to a seventh embodiment. [Figure 25] FIG. 13 is a diagram showing an example of an access control unit of the healthcare-related information management system according to the seventh embodiment. [Figure 26] FIG. 13 is a diagram showing the hardware configuration of a healthcare-related information management system according to a seventh embodiment. [Figure 27] FIG. 13 is a diagram showing a processing flow when using a health care related information management system according to a seventh embodiment. [Figure 28] FIG. 13 is a diagram showing the functional configuration of a health and medical care related information management system according to an eighth embodiment. [Figure 29] FIG. 13 is a diagram showing the hardware configuration of a healthcare-related information management system according to an eighth embodiment. [Figure 30] FIG. 13 is a diagram showing a processing flow when using a health care related information management system according to the eighth embodiment. [Figure 31] FIG. 13 is a diagram showing the functional configuration of a health and medical care related information management system according to a ninth embodiment. [Figure 32] FIG. 13 is a diagram showing the hardware configuration of a healthcare-related information management system according to a ninth embodiment. [Figure 33] FIG. 13 is a diagram showing a processing flow when using a health care related information management system according to the ninth embodiment. [Figure 34] FIG. 16 is a diagram showing the functional configuration of a health and medical care related information management system according to a tenth embodiment. [Figure 35] FIG. 16 is a diagram showing the hardware configuration of a healthcare-related information management system according to a tenth embodiment. [Figure 36] FIG. 20 is a diagram showing a processing flow when using the health and medical care related information management system according to the tenth embodiment. [Figure 37] A diagram showing an example of anonymization method [Figure 38] A diagram showing an example of anonymization method [Figure 39] A diagram showing an example of anonymization method [Figure 40] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Figure 41] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Figure 42] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Figure 43] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Figure 44] A diagram showing an example of the user interface of the health and medical care related information management system of the present invention. <Hardware that can constitute the present invention>

[0055] FIG. 1 is a diagram showing a hardware configuration applied to the present invention. The present invention is, in principle, an invention that utilizes a computer, but it can also be realized by software, hardware, or the combination of software and hardware. The hardware that realizes all or part of the constituent elements of the present invention is composed of the basic components of a computer, such as a CPU, memory, bus, input / output devices, various peripheral devices, and a user interface. The various peripheral devices include storage devices, internet interfaces, internet devices, displays, keyboards, mice, speakers, cameras, videos, televisions, various sensors for monitoring production status in laboratories or factories (e.g., flow rate sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipment counters, package counters, foreign body inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, motion sensors, worker work status monitoring devices (e.g., video, ID, PC work volume)), CD drives, DVD drives, Blu-ray drives, USB memory, USB memory interfaces, removable hard disks, general hard disks, projectors, SSDs, telephones, fax machines, copiers, printers, movie editing devices, and various sensor devices. The system does not necessarily have to be configured in a single enclosure; it can also be configured by connecting multiple enclosures via communication. Communication can be via LAN, WAN, Wi-Fi, Bluetooth (registered trademark), infrared communication, or ultrasonic communication. Furthermore, some of the components may be installed across borders. Furthermore, each of the multiple units may be operated by a different entity, or may be operated by a single entity. The system of the present invention may be operated by a single entity or multiple entities. The invention may also be configured as a system that includes, in addition to the present system, a terminal used by a third party, and a terminal used by yet another third party. These terminals may also be installed across borders. Furthermore, in addition to the present system and the terminals, devices may be provided for storing related information about third parties, registering related persons, and creating a database for recording the contents of registration. These may be provided in the present system, or may be provided outside the present system so that the present system can be configured to utilize this information.

[0056] As shown in this diagram, the computer is configured on a motherboard and comprises a chipset, CPU, non-volatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, a real-time clock, etc. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), and various built-in devices such as cameras, microphones, speakers or headphones, and displays), various programs, etc. The various programs and data that make up the present invention are configured to efficiently utilize these hardware resources to execute various processes. Chipset

[0057] A "chipset" is a set of large-scale integrated circuits (LSI) mounted on a computer's motherboard that integrates a communication function, or bridge function, between the CPU's external bus and the standard bus that connects memory and peripheral devices. Two chipset configurations are used, or one chipset configuration. The northbridge is located on the side closest to the CPU and main memory, and the southbridge is located on the side farther away, which interfaces with relatively slow external I / O.

[0058] (Northbridge) The northbridge includes a CPU interface, memory controller, and graphics interface. Most of the functions of a conventional northbridge can be performed by the CPU. The northbridge connects to the main memory slot via a memory bus, and to the graphics card slot via a high-speed graphics bus (AGP, PCI Express).

[0059] (Southbridge) The southbridge connects to the PCI interface (PCI slot) via the PCI bus and handles I / O functions such as ATA (SATA), USB, and Ethernet interfaces, as well as sound functions. Incorporating circuits to support features such as PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are not capable of high-speed operation, would hinder the speed of the chipset itself, so these can be separated from the southbridge chip and placed in a separate LSI called a super I / O chip. Buses are used to connect the CPU (MPU) to peripheral devices and various control units. Buses are connected by the chipset. The memory bus used to connect to main memory may instead use a channel structure for increased speed. A serial bus or a parallel bus can be used as the bus. While a serial bus transfers data one bit at a time, a parallel bus transmits the original data or multiple bits extracted from the original data as a single block over multiple communication paths simultaneously. A dedicated line for the clock signal runs parallel to the data line, synchronizing data demodulation on the receiving side. It is also used as a bus to connect the CPU (chipset) to external devices, and includes GPIB, IDE / (Parallel) ATA, SCSI, PCI, etc. Because there is a limit to how fast it can be made, in PCI Express, an improved version of PCI, and Serial ATA, an improved version of Parallel ATA, the data line can be a serial bus.

[0060] CPU

[0061] A CPU sequentially reads, interprets, and executes a sequence of instructions called a program stored in main memory, outputting signal-based information to the main memory. The CPU functions as the center of computation within a computer. A CPU consists of a CPU core, which is the center of computation, and its peripheral components, including registers, cache memory, an internal bus connecting the cache memory to the CPU core, a DMA controller, a timer, and an interface with the bus connecting to the north bridge. A single CPU (chip) may have multiple CPU cores. Processing may also be performed by a graphics interface (GPU) or FPU in addition to the CPU. While the embodiments are described as being of a two-core type, this is not limiting. Programs may also be embedded within the CPU.

[0062] <Non-volatile memory>

[0063] (HDD)

[0064] The basic structure of a hard disk drive consists of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can be SATA (formerly ATA). A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read the sectors, transfer them to the other hard disk drive, and write them. This does not access the host CPU's memory, so there is no increase in the CPU load.

[0065] <Main memory>

[0066] The CPU directly accesses and executes various programs in main memory. Main memory is volatile memory and uses DRAM. Programs in main memory are expanded from non-volatile memory to main memory upon receiving a program startup command. The CPU then executes the program according to various execution commands and execution procedures within the program.

[0067] Operating System (OS)

[0068] An operating system is used to manage computer resources for use by applications, to manage various device drivers, and to manage the computer itself (the hardware). In small computers, firmware is sometimes used as the operating system.

[0069] ≪BIOS≫

[0070] The BIOS causes the CPU to execute procedures for starting up the computer hardware and running the operating system. It is most typically the hardware that the CPU reads first when it receives a computer startup command. The BIOS contains the address of the operating system stored on the disk (non-volatile memory), and the BIOS loaded into the CPU sequentially loads the operating system into main memory, putting it into operation. The BIOS also has a check function that checks the presence or absence of various devices connected to the bus. The check results are stored in main memory and made available to the operating system as appropriate. The BIOS may also be configured to check for external devices, etc. The above applies to all embodiments.

[0071] As shown in the figure, the present invention can basically be configured with a general-purpose computer program and various devices. The computer basically operates by loading a program recorded in non-volatile memory into main memory, and then executing processing using the main memory, CPU, and various devices. Communication with devices is performed via an interface connected to a bus line. Possible interfaces include a display interface, keyboard, and communication buffer. Below, an embodiment of the present invention will be described with reference to the illustrated examples.

[0072] <Fulfillment of the Laws of Nature of the Invention>

[0073] The present invention functions through the cooperation of a computer, communications equipment, and software. Specifically, it relates to a healthcare-related information management system for accumulating and managing healthcare-related information related to an individual's healthcare, in which various information and data are exchanged between third-party terminals and administrator terminals via a network using hardware resources. Therefore, from this perspective, if we judge the claimed invention based on the computer and other resources described in the claims and specification and the common general knowledge related to those matters, the claimed invention as a whole utilizes the laws of nature and falls under the category of a computer-software-related invention.

[0074] <The significance of utilizing the laws of nature required by patent law>

[0075] The Patent Act requires that an invention be industrially applicable and contribute to the development of industry. This requirement ensures that the invention is industrially applicable. In other words, the invention must be industrially useful; that is, the effects of the invention declared in the application must be reproducible with a certain degree of certainty through the practice of the invention. From this perspective, the application of the laws of nature is interpreted as the use of the laws of nature to achieve the functions of each of the invention's defining features (invention elements), which constitute the invention's effects. Furthermore, the effect of an invention is sufficient if it has the potential to provide a specific utility to users who use the invention, and should not be viewed in terms of how users feel or think about that utility. Therefore, even if the effect users gain from the system is a psychological effect, that effect itself does not fall within the scope of the required application of the laws of nature. DETAILED DESCRIPTION OF THE INVENTION

[0076] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. The relationships between the embodiments and the claims are as follows: The explanation of embodiment 1 mainly relates to claims 1, 16, and 31; the explanation of embodiment 2 relates to claims 2, 17, and 32; the explanation of embodiment 3 relates to claims 3, 18, and 33; the explanation of embodiment 4 relates to claims 4, 19, and 34; the explanation of embodiment 5 relates to claims 5, 20, and 35; the explanation of embodiment 6 relates to claims 6, 21, and 36; the explanation of embodiment 7 relates to claims 7, 22, and 37; the explanation of embodiment 8 relates to claims 8, 23, and 38; the explanation of embodiment 9 relates to claims 9, 24, and 39; and the explanation of embodiment 10 relates to claims 10, 25, and 40. The present invention should not be limited to these embodiments and may be embodied in various forms without departing from the spirit and scope of the present invention.

[0077] <Overall configuration of the health and medical care related information management system of the present invention> FIG. 2 is a diagram showing an example of the overall configuration of a health and medical care related information management system according to the present invention. The health and medical care related information management system 200 stores any one of electronic medical record information, various test information (which may include medical checkups, medical examinations, etc.), prescription information, medication history information, medication status information, vital signs information (including at least, but not limited to, body temperature, blood pressure, pulse rate, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), information from a medical questionnaire, data from a health promotion app, and conversation data from an interactive health promotion SNS. The system is made up of healthcare and medical care related information storage unit 201 which stores healthcare and medical care related information including the above information, access control unit 202 which controls the disclosure of the healthcare and medical care related information stored in healthcare and medical care related information storage unit 201 to third parties via the network, incentive management unit 203 which provides incentives to individuals to encourage the disclosure of their healthcare and medical care related information by referring to the provision history in provision history storage unit 204 described below regarding whether or not to allow the disclosure of the healthcare and medical care related information about an individual, and provision history storage unit 204 which stores the provision history which is a history of incentives provided to each individual.

[0078] Furthermore, the health and medical care related information management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, a WAN, a LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (for example, a personal computer, a tablet terminal, a smartphone, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable or a Wi-Fi router, etc.).

[0079] In addition, in the present invention, "third party" refers to individuals (including, but not limited to, the patient himself / herself, his / her family and / or caregivers), as well as medical professionals and non-medical professionals, as described below. Furthermore, an "administrator" is a person who is responsible for managing and operating the entire health and medical information management system (for example, this may include an individual, or the institution, organization, or corporation to which the individual belongs. It may also include an employee of a government agency or local government, or an institution, organization, or corporation commissioned by a government agency or local government), and may have the authority to edit, add, or delete various types of information in the health and medical information management system.

[0080] For example, "electronic medical record information" may include basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information about the examination (e.g., patient's main complaint (subjective symptoms and complaints about physical condition, etc.), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information about nursing and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood sugar level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds), urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, etc.), etc.), It may also include, but is not limited to, information on blood pressure, blood sugar, blood sugar levels, blood sugar levels (including but not limited to blood sugar levels), ...

[0081] For example, "prescription information" may include the insurer number, name, date of birth, gender, name of medical institution, contact information, name of the prescribing doctor, name of the medication, form of medication (tablet, capsule, liquid, powder, granule, etc.), amount of medication (amount to take per dose), number of times per day, timing of taking, information about switching to generic drugs, number of times dispensed medication, etc. Furthermore, "medication history information" may include, for example, the patient's name, date of birth, sex, My Number information or insurance card number, address, emergency contact information, name of the medical institution and physician that prescribed the prescription, prescription date, prescription content, key points of inquiries regarding the dispensing date and prescription content, the patient's constitution, allergy history, side effect history, key points of inquiries from the patient or their family, medication status, confirmation of remaining medication status, changes in physical condition while taking medication, concomitant medications, information on medical history including complications, whether the patient has visited other departments, whether there are symptoms that are suspected to be side effects, intake of food and drink (interactions with drugs), the patient's intentions regarding the use of generic drugs, status of information provided in the notebook, key points of medication instructions, and the name of the insurance pharmacist who provided the instructions.

[0082] Furthermore, for example, "medication status information" may include information regarding the remaining amount of prescribed medication (including, for example, the amount of medication remaining when the patient accidentally forgets to take the medication or when the patient intentionally does not take it), timing information regarding visits to the hospital / pharmacy (for example, the period from the scheduled end date of the prescription (scheduled end date of medication) to the actual visit to the hospital / pharmacy (including, for example, when the patient visits the hospital / pharmacy earlier or later than scheduled)), and patient complaints regarding medication (including, for example, subjective symptoms and complaints regarding physical condition, such as developing hives after continuing to take a certain medication, or when taking a certain medication and it is too effective and makes the patient feel dizzy).

[0083] Furthermore, for example, "health and medical related information" may include PHRs, etc. Alternatively, it may include various information obtained from PHR systems, etc. via APIs. Here, PHR is an abbreviation for Personal Health Record, and refers to information related to an individual's health, medical care, and nursing care. The aim is for each individual to be able to manage and utilize their own personal health, medical care, and nursing care information chronologically throughout their lifetime, thereby enabling them to receive high-quality services tailored to their own health condition. For example, up until now, each citizen has kept a wealth of health and medical information in various paper documents and notebooks. The media and locations where these records are kept vary depending on the life stage (milestone). For example, a "maternal and child health handbook" is kept at birth, "school health checkup results" at the time of schooling, and "regular health checkup results" at the time of employment. Furthermore, depending on one's physical condition, one may manage one's own health using a "disease management handbook" or "medication handbook," and as one ages, one may record information in a "nursing care prevention handbook" or "family doctor cooperation handbook." There is a concept and system in place that allows individuals to manage and utilize this information by digitizing this existing "handbook culture" and centrally compiling it as data, and this is expected to become even more widespread in the future.

[0084] In the present invention, the explanation is based on the premise that healthcare-related information storage unit 201 and access control unit 202 are configured to function on the same server, but this is not limiting, and each may be configured to perform its respective functions and roles on separate servers. Alternatively, multiple servers may be provided, and these servers may exchange information and data with each other to execute various functions in cooperation or collaboration. For example, healthcare-related information storage unit 201 and access control unit 202 may be configured as a cloud server.

[0085] Similarly, the present invention will be described on the assumption that the healthcare-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 are configured to function on separate servers, but this is not limiting and each unit may be configured to perform its respective functions and roles on the same server. Alternatively, multiple servers may be provided, and these servers may exchange information and data with each other to execute various functions in cooperation or collaboration. For example, the healthcare-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 may be configured on a cloud server.

[0086] <Embodiment 1 (corresponding mainly to claims 1, 16, and 31)> <Outline of Embodiment 1> This embodiment provides a healthcare and medical care-related information management system having a healthcare and medical care-related information storage unit for storing and managing healthcare and medical care-related information about individuals, an access control unit for controlling disclosure of the healthcare and medical care-related information stored in the healthcare and medical care-related information storage unit to third parties via a network, an incentive management unit for providing incentives to individuals to encourage them to disclose their healthcare and medical care-related information by referring to the provision history in the provision history storage unit (described below) regarding whether to allow or disallow disclosure of the healthcare and medical care-related information about the individuals, and a provision history storage unit for storing the provision history of incentives provided to each individual. To achieve this, the present embodiment also provides a method executed by a CPU in the healthcare and medical care-related information management system, which is a computer, and an operating program for the healthcare and medical care-related information management system, which is written in a readable and executable format for the healthcare and medical care-related information management system, which is a computer.

[0087] <Functional Configuration of Embodiment 1> 3 is a diagram showing the functional configuration of the healthcare-related information management system in embodiment 1. This embodiment includes a healthcare-related information storage unit, an access control unit, an incentive management unit, and a provision history storage unit.

[0088] <Configuration of Embodiment 1: Healthcare-related Information Storage Unit> The "health and medical care related information storage unit" 201 is configured to have the function of storing health and medical care related information including one or more of the following information: electronic medical record information about an individual, various test information (which may include health checkups, medical examinations, etc.), prescription information, medication history information, medication status information, vital signs information (including at least, but not limited to, body temperature, blood pressure, pulse rate, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS.

[0089] Here, "electronic medical record information" includes, for example, basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information about the medical examination (e.g., patient's main complaint (subjective symptoms and complaints about physical condition, etc.), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information about nursing and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound), urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinol, etc.), etc.), It is desirable that the record be configured to include at least the following: (i) blood glucose level, (ii) blood glucose level, (iii) blood glucose level (glucose, creatine, thrombocytopenia ...

[0090] In addition, it is desirable that the "prescription information" be configured to include, for example, the insurer number, name, date of birth, sex, name of medical institution, contact information, name of the prescribing doctor, name of the medicine, form of medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount to take per dose), number of times to take per day, timing of taking, information about switching to generic medicines, number of times dispensed in divided doses, etc.

[0091] Furthermore, it is desirable that the "medication history information" be structured to include, for example, the patient's name, date of birth, sex, My Number information or insurance card number, address, emergency contact information, name of the medical institution and physician that prescribed the prescription, prescription date, prescription content, key points of inquiries regarding the dispensing date and prescription content, the patient's constitution, allergy history, side effect history, key points of inquiries from the patient or their family, medication status, confirmation of remaining medication status, changes in physical condition while taking medication, concomitant medications, information on medical history including complications, whether the patient has visited other departments, whether there are symptoms that are suspected to be side effects, intake of food and drink (interactions with drugs), the patient's intentions regarding the use of generic drugs, status of information provided in the notebook, key points of medication instructions, and the name of the insurance pharmacist who provided the instructions.

[0092] Furthermore, it is desirable that the "medication status information" be configured to include, for example, information regarding the remaining amount of prescribed medication (including, for example, the amount of medication remaining if the patient accidentally forgets to take it or if the patient intentionally does not take it), timing information regarding visits to the hospital / pharmacy (for example, the period from the scheduled end date of the prescription (scheduled end date of medication) to the actual visit to the hospital / pharmacy (including, for example, if the patient visits the hospital / pharmacy earlier or later than scheduled)), and patient complaints regarding medication (including subjective symptoms and complaints regarding physical condition, such as developing hives after taking a certain medication for a long time, or if taking a certain medication causes the medication to be too effective and makes the patient feel dizzy). In addition, in the present invention, personal identification number (My Number) information or the health insurance card symbol and number to which the individual (user) is enrolled may be used as identification information to uniquely identify the individual (user), and health and medical related information about the individual may be associated with this and stored and organized.

[0093] Furthermore, for example, "health and medical related information" may include PHRs, etc. Alternatively, it may include various information obtained from PHR systems, etc. via APIs. Here, PHR is an abbreviation for Personal Health Record, and refers to information related to an individual's health, medical care, and nursing care. The aim is for each individual to be able to manage and utilize their own personal health, medical care, and nursing care information chronologically throughout their lifetime, thereby enabling them to receive high-quality services tailored to their own health condition. For example, up until now, each citizen has kept a wealth of health and medical information in various paper documents and notebooks. The media and locations where these records are kept vary depending on the life stage (milestone). For example, a "maternal and child health handbook" is kept at birth, "school health checkup results" at the time of schooling, and "regular health checkup results" at the time of employment. Furthermore, depending on one's physical condition, one may manage one's own health using a "disease management handbook" or "medication handbook," and as one ages, one may record information in a "nursing care prevention handbook" or "family doctor cooperation handbook." There is a concept and system in place that allows individuals to manage and utilize this information by digitizing this existing "handbook culture" and centrally compiling it as data, and this is expected to become even more widespread in the future.

[0094] <Configuration of Embodiment 1: Access Control Unit> The "access control unit" 202 is configured to have a function for controlling the disclosure of healthcare-related information stored in the healthcare-related information storage unit to third parties via a network. For example, as described below, it is desirable that the access control unit be configured to have a function for analyzing IP packets in response to access from a third-party terminal, a function for determining the destination IP address, a function for acquiring an access ID / user ID, a function for acquiring the access subject / user attributes, and a function for performing access control based on these.

[0095] <Configuration of Embodiment 1: Incentive Management Unit> The “incentive management unit” 203 is configured to have the function of providing incentives to individuals to encourage them to disclose their health and medical care-related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the individual's health and medical care-related information. Actions "to provide incentives" include actions to actually provide incentives using electronic data, etc., and actions to execute the processing necessary to put into action the separate action of actually providing incentives. Figure 10 shows types of incentives, but in the case of providing points or electronic data such as information services as incentives, this refers to the operation performed by a computer to perform the necessary operations, and in the case of providing medicines / supplements as incentives, this refers to the processing operations for sending medicines or supplements to publishers of health and medical care-related information, for example. In other words, since the incentive management unit performs the operations "for...", it does not necessarily have to be the operation of providing the incentive itself. FIG. 44 is a diagram showing an example of a user interface of the health and medical care related information management system according to the present invention. In this case, the information is associated with the individual (user) who accessed the system using a third-party terminal, i.e., the individual (user) who possesses the personal identification number (My Number) information "123456789012," and is stored and managed in a list format indicating whether the individual has consented to providing incentives for which health and medical-related information. If consent is given, the health and medical-related information is permitted to be disclosed to third parties, i.e., an incentive is granted. If consent is not given, the health and medical-related information is not disclosed to third parties, i.e., an incentive is not granted. It is desirable that information regarding these incentives be kept up to date by the incentive management unit periodically exchanging it with the health and medical-related information storage unit and the provision history storage unit (described below). For example, in the case of Figure 44, whether or not an individual has given consent is stored and managed for each piece of health and medical care-related information. Here, a "circle" in the "Agree / Disagree" column indicates that the individual has given consent, and an "x" indicates that the individual has not given consent. It is preferable that the input of the "O" or "X" mark in the "Agree / Disagree" column be configured so that the individual (user) can select the "O" or "X" mark of their own volition, for example, using a pull-down menu format on the terminal screen. Here, when a display item listed in the "Healthcare-related information" column (for example, "Regular medical checkup results") is clicked, touched, or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when a "○" or "×" mark in the "Agree / Disagree" column is clicked, touched, or tapped on the terminal screen, the date and time of consent or denial may be displayed on a pop-up screen. In particular, it is preferable that healthcare-related information marked with a "○" in the "Agree / Disagree" column be stored and managed in the provision history storage unit described below. Healthcare-related information with no mark in the "Agree / Disagree" column indicates that the individual (user) has not yet indicated their intention to consent or disagree.

[0096] FIG. 40 is a diagram showing the user interface of the health and medical care related information management system of the present invention. In this case, the incentive management department authenticates an individual when they enter their personal identification number (My Number) and password information into the appropriate fields, and if matching information exists in the system, access is granted. In the case of this diagram, the method is explained in which the user directly inputs the information, but if the user uses a smartphone, for example, the smartphone's IC card reading function can be used, and the user can hold the My Number card up to the smartphone to automatically read and input specified information such as personal identification number (My Number) information. For example, if the user fails to enter the My Number information and / or password information three times in a row, the device may be locked and the user may have to go to a local government (such as a city, ward, town, or village office) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the device, or the user may be notified by voice or a warning sound. It is also desirable that the information be stored and managed in a way that makes it easy to determine whether or not an individual (user) has consented to any health and medical care-related information. Furthermore, the incentive provision process is preferably configured to determine the level of incentive to be given for the health and medical care related information to which the user has given consent.

[0097] For example, in the example shown in Figure 44, when health and medical information about one individual is provided to one recipient, the My Number points are calculated and awarded at 1,000 points based on a predetermined calculation rule. Furthermore, when the same health and medical information is provided to two recipients, the My Number points are calculated and awarded at double the amount, 2,000 points, based on a predetermined calculation rule. The incentive calculation rule may be weighted based on the importance, urgency, rarity, and usefulness of the health and medical information, and different incentives may be calculated and awarded for each health and medical information. In particular, for malignant neoplasms (cancer), which are the leading cause of death among Japanese people; hypertension, diabetes, dyslipidemia, periodontal disease, or eye disease, various infectious diseases defined under the Infectious Diseases Act, including COVID-19, and unique diseases with few cases worldwide, the calculation rule may be set to provide higher incentives than for other diseases, given that disclosing such health and medical information to third parties can significantly contribute to medical advances.

[0098] Furthermore, "incentive" simply means "motivation or reward," meaning intentional stimulation aimed at inducing some kind of behavior. In the present invention, "incentive" may include, in addition to the aforementioned My Number points, personalized or general information services for information providers, provision of personalized medicines or supplements, provision of books or other products, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of rights, such as the right to receive medical treatment, the right to receive a diagnosis, the right to undergo testing, the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash. Furthermore, the following may also be included: Discounts on some goods or services, such as discounts or discounts on insurance premiums, and discounts on insurance premium rates. Furthermore, "incentive" may include refunds of paid fees, the awarding of prizes (e.g., novelties), commendations or awards, and the issuance of complimentary coupons. It could also be reward points, discounts, free products, early access to new products or exclusive sales, the right to write reviews about the brand, refer friends or create user-generated content, or even product or service upgrades.

[0099] The present invention can be applied to both cases, i.e., incentive provision, in which an individual's health and medical-related information is already associated with and stored and managed as disclosure permission information indicating whether or not the information is permitted to be disclosed to a third party, and cases in which an individual (user) newly registers their own health and medical-related information in the health and medical-related information storage unit without associated and stored and managed disclosure permission information. That is, even if the health and medical-related information of an individual is not stored in the health and medical-related information management system, for example, if the individual's health and medical-related information is stored on a device owned by the individual and uploaded to the present system, the incentive management unit can be configured to provide an incentive based on a formal check of the uploaded information if it is determined that the information is publicly available as health and medical-related information. In this case, the access control unit of the present system may be configured not to deny third parties' access to view the health and medical-related information. However, it may also be configured to partially deny or restrict access depending on the type and qualifications of the third party. Uploading an individual's health and medical-related information to the present system may be a transfer, and the source of the transfer may not be the individual's device but may be a system storing other health and medical-related information. For example, health and medical care-related information stored in a maternal and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental care information server, a rehabilitation information server, etc. can be configured to be transferred to this system with the individual's consent. In this case, the incentive management unit can be configured to function once the individual's health and medical care-related information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

[0100] Here, among the functions of the incentive management unit, the computer operation "to refer to and provide" includes, but is not limited to, one or more of the following: a process of executing an operation to provide an incentive if, as a result of the reference, it is confirmed that an incentive has not been provided in the past; a process of executing an operation to provide an incentive if, as a result of the reference, it is determined that a predetermined period (time) has passed since an incentive was provided in the past; a process of executing an operation to provide an incentive if, as a result of the reference, it is determined that the disclosure rate of health and medical care-related information has reached a certain value; and a process of executing an operation to provide an incentive if, as a result of the reference, something that has been made public but that did not appear to be actually viewed by anyone is viewed by someone (in this case, the incentive provision history and the health and medical care-related information viewing history have the same meaning).

[0101] "Encouraging disclosure" is synonymous with "encouraging disclosure." In this invention, "disclosure" refers to making all or part of health and medical-related information, or any processed or modified information thereof, available for disclosure in some form (including anonymously) to others (excluding oneself; however, in the case of a person who is assisted in the care of others, such as a child, an incompetent person, or a person receiving care), the person assisting them is not included in the "other" category. This applies both to actual disclosure and to cases where information is not actually disclosed but is made available for disclosure. Recipients of disclosure include, but are not limited to, others belonging to medical institutions, medical-related organizations, public institutions, pharmaceutical companies, etc.

[0102] <Configuration of Embodiment 1: Provision History Storage Unit> The 'provision history storage unit' 204 is configured to have a function of storing a provision history, which is a history of incentives provided to each individual. "Provision history" refers to one or more of the following: a history of whether or not an incentive was granted, a history specifying the content of the incentive granted, or a history specifying the amount of the incentive granted. The history may be related to the time of granting the incentive, or may simply specify that the incentive was granted. Therefore, since only the fact that the incentive was granted may be specified, in a configuration in which incentives are generally granted for providing healthcare-related information, the incentive provision history is the same as the history of disclosure of healthcare-related information. Therefore, providing incentives by encouraging disclosure by referring to the disclosure history of healthcare-related information is equivalent to providing incentives by referring to the provision history. Therefore, in the present invention, even when the incentive management unit refers to the disclosure history of healthcare-related information, this may be included in the incentive management unit's reference to the provision history.

[0103] Various incentive schemes are possible. For example, if an individual gives permission for the disclosure of all of their health and medical-related information, all health and medical-related information associated with that personal identification information can be accessed an unlimited number of times by authorized institutions, etc. One possible scheme is for one incentive to be granted only once in response to a single act of permission for disclosure, or for an incentive to be granted each time the authorized health and medical-related information is viewed as a result of permission for disclosure. Since an individual's health and medical-related information is typically divided into multiple items, incentives can be granted according to the items viewed or used. Furthermore, incentives can be granted for each item according to the number of times it is viewed or used. Incidentally, the items in health and medical-related information can be divided into various categories, such as the onset of a disease, each medical examination, each prescription issuance, each type of disease, each creation of medication history information, and each acquisition of medication information. Another possible scheme is for incentives to be granted according to the depth of disclosure of health and medical-related information. The depth of disclosure here can be configured so that the incentives given are more numerous or of higher quality as the depth of disclosure increases, for example, when only the name of the disease is disclosed, when the name, usage, and dosage of the medication prescribed for that disease are also disclosed, when the results of taking the medication (for example, improvement of symptoms or onset of side effects) are also disclosed, and when the patient's feelings about the medication are also disclosed.

[0104] Next, the incentive granting process flow will be described. The incentive information is electronically processed by the incentive management unit or an incentive output unit or incentive processing unit linked thereto so that some kind of benefit is generated for the individual patient. Note that this electronic processing may be the granting of the incentive itself or may be a pre-processing step for granting the incentive. The incentive is provided when an individual, such as a patient, gives permission to make public all or part of their health and medical information, or information that has been processed or altered. This trigger may originate from a device used by the individual, such as a smartphone, or from a device at a medical institution, etc. For example, in the case of a smartphone, an application is installed on the smartphone that allows the individual to view and, to a certain extent, edit their health and medical-related information. The individual uses this application as a gateway to access the system of the present invention, enters the health and medical-related information disclosure portal, and performs the operation of permitting disclosure of their own health and medical-related information.

[0105] Alternatively, the system can be configured to allow similar operations via web access instead of an application. This access must be strictly managed securely, and it is preferable to configure the system so that, for example, permission for disclosure can be granted using a one-time password. In this case, the healthcare and medical information management system may be a so-called PHR, or a system linked to a PHR. This system may be configured to independently manage the disclosure of healthcare and medical information for all citizens, or multiple similar systems may coexist and manage the disclosure of healthcare and medical information stored in PHRs. In addition, when the trigger is pulled from a medical institution's terminal, it means that a medical professional or other person interviewing an individual patient pulls the trigger with the patient's permission. In this case, it is preferable to borrow the patient's health insurance card, personal identification number (My Number) card, or equivalent proof and configure the trigger to be pulled using that borrowed proof. Medical institutions here may include nursing homes, pharmacies (including dispensing pharmacies), and other welfare facilities. They may also be medical institutions accessed over the Internet. Furthermore, the trigger can be configured to be pulled by a designated management server of a pharmaceutical company or a terminal used by a public research institution, etc. Of course, authentication of the individual patient or other person is a prerequisite.

[0106] FIG. 6 is a diagram showing an example of the provision history storage unit of the health and medical care related information management system in this embodiment. As shown in this diagram, we can see that the provision history of Mr. X, whose personal identification number (My Number) information is "123456789012," and Mr. Y, whose personal identification number (My Number) information is "456789012345," is stored and managed separately for each individual. For example, for Mr. X, whose personal identification number (My Number) information is "123456789012," the record shows that the health and medical related information "Regular Health Checkup Results (Hospital A)" with ID "0001" was provided to "Dr. Suzuki (Hospital B)" on the date and time of provision, "2023 / 04 / 01," and the history of providing the incentive "1000 My Number Points" is stored and managed. Similarly, for other health and medical care-related information, the history of incentives provided to each individual is maintained and managed.

[0107] <Embodiment 1: Healthcare-related information management system: hardware configuration> The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0108] Figure 4 is a diagram showing the hardware configuration of a healthcare-related information management system according to this embodiment. As shown in this diagram, the healthcare-related information management system according to this embodiment comprises a "CPU (Central Processing Unit)" 401 that performs various types of arithmetic processing, and a "main memory" 402. It also comprises a "non-volatile memory" 403 that stores predetermined information, and a "network I / F (interface)" 404 that transmits and receives information to and from multiple third-party terminals 406 and an administrator terminal 407. These components are interconnected by a data communication path such as a "bus" 405, and perform information transmission and reception and processing.

[0109] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area for the programs. The "main memory" and "non-volatile memory" are each assigned multiple addresses, and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in the "main memory" include a healthcare-related information accumulation program, an access control program, an incentive management program, and a provision history retention program. The "main memory" and "non-volatile memory" also store healthcare-related information, incentive management information, provision history information, and the like.

[0110] The "CPU" executes the health and medical information accumulation program stored in the "main memory" and stores health and medical information about an individual, such as electronic medical record information, various test information, prescription information, medication history information, medication status information, and vital signs information (e.g., body temperature, blood pressure, heart rate, etc.), in the "main memory" or "non-volatile memory" via the "network I / F." It also executes the access control program stored in the "main memory" to control access to the health and medical information about an individual. It also executes the incentive management program stored in the "main memory" to provide and manage incentives to individuals to encourage the disclosure of their health and medical information by referring to provision history information regarding whether or not to allow the disclosure of their health and medical information. It also executes the provision history retention program stored in the "main memory" to store provision history information, which is a history of incentive provision, in the "main memory" or "non-volatile memory."

[0111] <Embodiment 1: Healthcare-related information management system: processing flow> 5 is a diagram showing the processing flow when using the healthcare-related information management system of this embodiment. As shown in the figure, the processing method comprises a healthcare-related information accumulation step S501, an access control step S502, an incentive management step S503, and a provision history retention step S504.

[0112] The "health and medical related information accumulation step" S501 is a stage in which health and medical related information about an individual, such as electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.), etc., is accumulated.

[0113] The "access control step" S502 is a stage for controlling access to the health care related information about an individual stored in the health care related information storage step.

[0114] The "incentive management step" S503 is a step in which incentives are provided to individuals to encourage them to disclose their health and medical care-related information, by referring to the provision history stored in the provision history storage step described below, regarding whether or not to allow the disclosure of health and medical care-related information about the individual.

[0115] The "provision history storage step" S504 is a stage for storing a provision history, which is a history of incentives provided to each individual.

[0116] <Summary> As described above, the present invention can provide a health and medical care-related information management system that provides incentives to individuals to encourage them to disclose their health and medical care-related information by referring to the provision history, which is a record of incentives provided to each individual, when deciding whether or not to disclose their health and medical care-related information. Furthermore, the present invention provides incentives to individuals, allowing them to give permission for the disclosure of their health and medical care-related information to third parties, which will increase the opportunities for individuals to disclose their health and medical care-related information to third parties, thereby reducing medical costs nationwide and improving the health of the entire population, as well as reducing the time and money spent by research institutions and pharmaceutical companies on drug discovery, and ultimately contributing to the advancement of medicine. Here, "drug discovery" refers to the process from compounds and chemical substances (also called seeds) that are the basis for pharmaceuticals to becoming products and being sold. Furthermore, the following steps (1) to (5) are essential for compounds and chemical substances to become pharmaceuticals and be sold. (1) Select candidate drug discovery targets (compounds and chemical substances) (2) By screening the effects, candidate substances that will become the basis for pharmaceuticals are selected. There are various types of screening, including biotechnology techniques, combinatorial chemistry (techniques for creating compounds by combining multiple compounds), and highly efficient screening that utilizes AI robotics technology. (3) Animal experiments Safety and efficacy are investigated and confirmed in detail using animals or cultured cells. Drugs whose safety and efficacy have been confirmed at this stage are called "investigational drugs." (4) Clinical trials The investigational drug is actually used on humans to examine its effectiveness and safety in detail and determine whether it is useful for actual treatment. (5) Application for approval and review Drugs that pass all of the above tests (1) to (4) are submitted to the Ministry of Health, Labor and Welfare. After that, they are examined by the Pharmaceuticals and Medical Devices Agency and await approval from the Minister of Health, Labor and Welfare. Only after approval can the drug be sold as a product. Generally, drug discovery takes about 10 to 18 years, and the probability that a compound or chemical substance will become a new drug is about 1 in 10,000. It is also said that the total cost of successful drug discovery is close to 20 billion yen.

[0117] <Embodiment 2 (corresponding mainly to claims 2, 17, and 32)> <Outline of Embodiment 2> This embodiment is characterized in that it has an incentive type information storage unit that stores incentive type information, which is information indicating the types of multiple incentives, and the incentive management unit selects and provides an incentive to an individual based on the incentive type information stored in the incentive type information storage unit in accordance with the incentive provision history. From here on, explanations of functions, hardware configurations, and processing flows that overlap with those of embodiment 1 will be omitted as appropriate.

[0118] <Configuration of Second Embodiment: Incentive Type Information Storage Unit> FIG. 7 is a diagram showing the functional configuration of the health and medical care related information management system according to this embodiment. The 'storage unit for incentive type information' 701 is configured to have a function of storing incentive type information, which is information indicating the types of multiple incentives. FIG. 10 is a diagram showing an example of the incentive type information storage unit of the health and medical care related information management system according to this embodiment. As shown in this figure, incentive type information and specific incentives related to that incentive type information are stored and managed in association with each other. For example, when the incentive type information is "(A) points," it can be seen that specific examples of incentives are stored and managed, such as "(a) My Number points, (b) transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) distribution electronic money (WAON (registered trademark), nanacо (registered trademark), etc.)." Similarly, specific examples of incentives are listed and stored and managed for other incentive type information as well. When an individual (user) provides his / her own health and medical care related information to an appropriate recipient, the user can select one of the incentives based on the incentive type information.

[0119] <Configuration of the Second Embodiment: Incentive Management Unit - Characteristic Functions of the Second Embodiment> The selection made by the incentive management unit can be made in two ways: automatically by the computer (configured by a program) that constitutes the incentive management unit; or based on the selection made by the provider of the health and medical information (usually the owner of the health and medical information, but sometimes the administrator if the individual is under some kind of supervision, such as a child). In the latter case, the computer accepts a human selection and executes the selection based on that selection. For example, when a health and medical information owner provides a pharmaceutical manufacturer with information on the results of taking a drug owned by the owner of the health and medical information, the incentive management unit can be configured to automatically select an incentive offered by the pharmaceutical manufacturer. Also, if the provider of the health and medical information resides in Aomori Prefecture, an incentive valid only in Aomori Prefecture can be automatically selected. In this way, automatic selection can be configured to be made based on the content of the provided health and medical information, attribute information of the owner of the health and medical information, and the like.

[0120] Whether the selection is automatic or based on a selection made by the owner (provider) of the healthcare-related information, the incentive management unit is configured to use selection rules to make the selection. The selection rules may be stored in a selection rule storage means provided within the incentive management unit, or may be selected using selection rules stored outside the incentive management unit or outside the system. The selection rules may also be optimized (not necessarily optimized, and the simple meaning of being changeable) as appropriate based on the provision history of the owner (provider) of the healthcare-related information and the disclosure history of the healthcare-related information. For example, the selection rules may be changed by an editing artificial intelligence or the like. A selection rule editing unit may be provided so that the rules can be edited by the operation of an administrator of the system. The incentive management unit is capable of selecting and providing an incentive to an individual based on the incentive type information stored in the incentive type information storage unit in accordance with the provision history described above. In other words, the incentive management unit is configured to select and provide incentives based on the incentive type information. FIG. 11 is a diagram showing an example of the incentive management unit of the health and medical care related information management system according to this embodiment. As shown in this diagram, specific incentives can be selected and provided by the individual (user) selecting the incentive type information or by the incentive management unit automatically selecting it. For example, in the case of Mr. Y, in addition to "points (My Number points and PASMO (registered trademark)"), it can be seen that "software / apps" and "cash" have been selected and provided.

[0121] Furthermore, when the incentive management unit selects and provides an incentive based on the incentive type information, the following cases are assumed for the process leading up to the specific use of the incentive.

[0122] For example, if "points" is selected as the incentive, the following cases may occur. First, when the incentive is "My Number Points," the system's incentive management unit triggers the system by sending personal identification information (e.g., personal identification number (My Number)) and information about the points awarded to the system to a management server owned by the organization that manages and operates the My Number Portal Site. Within the server, the My Number Points associated with the personal identification information are incremented by the amount of the points awarded. In other words, the management server owned by the organization that manages and operates the My Number Portal Site awards My Number Points to the individual corresponding to the personal identification information based on this trigger information, and notifies the individual's device (e.g., a smartphone) that the My Number Points have been incremented, allowing the individual to use the My Number Points, including the increment. These My Number Points can then be exchanged for points in other transportation / distribution electronic money systems to purchase desired products or pay for various desired services.

[0123] Second, if the incentive is a "prepaid card," it will be possible to purchase products on AMAZON (registered trademark) or other sites using a prepaid card purchased at a convenience store or the like (for example, a card with an amount set according to the purchase price and identification information to identify the card).

[0124] Also, for example, if "Medicine / Supplement" is selected as an incentive, the incentive management unit of this system will trigger a transaction by sending information including personal identification information and its attribute information (e.g., personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information to identify the product desired for purchase (e.g., product name such as "Supplement ABC," manufacturer / distributor information, price information, etc.) via the network to a management server managed and operated by a purchasing site such as AMAZON (registered trademark). Then, if the specified product is in stock on the AMAZON (registered trademark) management server, a delivery company will deliver the product to your home.

[0125] Furthermore, for example, when "provision of rights" is selected as an incentive, the incentive management unit in this system triggers the transmission of personal identification information and its attribute information (e.g., personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information identifying the desired rights (e.g., an identification number indicating a Disneyland® admission ticket) via a network to a management server owned by an organization that manages and operates the provision of rights. In response to this trigger, the management server transmits a QR code (registered trademark) that serves as a Disneyland® admission ticket to the individual's smartphone. The individual who saved the QR code (registered trademark) on their smartphone then goes to Disneyland®, the rights execution organization, and holds the QR code (registered trademark) over a reader at the entrance reception desk. If there are no problems, the individual can enter Disneyland® and enjoy various attractions, meals, and more.

[0126] <Embodiment 2: Healthcare-related information management system: hardware configuration> The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0127] Figure 8 is a diagram showing the hardware configuration of a healthcare-related information management system according to this embodiment. As shown in this figure, the healthcare-related information management system according to this embodiment comprises a "CPU (Central Processing Unit)" 801 that performs various types of arithmetic processing, and a "main memory" 802. It also comprises a "non-volatile memory" 803 that stores predetermined information, and a "network I / F (interface)" 804 that transmits and receives information to and from multiple third-party terminals 806 and an administrator terminal 807. These components are interconnected by a data communication path such as a "bus" 805, and perform information transmission and reception and processing.

[0128] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area for the programs. The "main memory" and "non-volatile memory" are each assigned multiple addresses, and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the program stored in the "main memory" is an incentive type information storage program. The "main memory" and "non-volatile memory" also store incentive type information, incentive management information, and the like.

[0129] The "CPU" executes the incentive type information retention program stored in the "main memory" to retain incentive type information, which is information indicating the types of multiple incentives, and also stores the incentive type information and related incentive management information in the "main memory" and the "non-volatile memory."

[0130] <Embodiment 2: Healthcare-related information management system: processing flow> 9 is a diagram showing the flow of processing when using the health care related information management system of this embodiment. As shown in the diagram, this is a processing method consisting of an access authentication processing step S901.

[0131] The "step of storing incentive type information" S901 is a stage of storing incentive type information, which is information indicating the types of multiple incentives.

[0132] <Summary> As described above, the present invention has an incentive type information storage unit that stores incentive type information, which is information indicating the types of multiple incentives, and the incentive management unit can select and provide an incentive to an individual based on the incentive type information stored in the incentive type information storage unit, depending on the provision history.

[0133] <Embodiment 3 (corresponding mainly to claims 3, 18, and 33)> <Outline of Embodiment 3> This embodiment is characterized by including: a termination request receiving unit that receives a termination request from an individual whose health care-related information is stored in a health care-related information storage unit to suspend or terminate the disclosure of already-disclosed health care-related information; a termination condition storage unit that stores termination conditions, which are conditions for determining whether to terminate the disclosure of the health care-related information based on information about the individual who made the termination request when the termination request is received; a judgment rule storage unit that stores judgment rules, which are rules for determining whether to terminate the disclosure of the health care-related information based on information about the individual who made the termination request and the stored termination conditions; a termination determination unit that, when the termination request is received, determines whether to terminate the disclosure based on information about the individual, the stored termination conditions, and the stored judgment rules; and a termination control unit that, if the termination determination unit determines that the disclosure should be terminated, controls the access control unit to terminate the disclosure of the individual's health care-related information. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of embodiments 1 and 2 will be omitted as appropriate.

[0134] <Configuration of Third Embodiment: Termination Request Receiving Unit> FIG. 12 is a diagram showing the functional configuration of the health and medical care related information management system according to this embodiment. The 'termination request receiving unit' 1201 is configured to have a function of receiving a termination request, which is a request to stop or terminate the publication of health and medical care related information that has already been made public, from an individual who has stored health and medical care related information in the health and medical care related information storage unit. For example, on the login screen of the health and medical related information management system shown in Figure 40, an individual (user) uses a third-party terminal to enter their personal identification number (My Number) information and password information, and if the system finds matching information, the individual is authenticated.By accessing the incentive management section and provision history storage section, the individual can view whether their own health and medical related information has been made public, to whom it has been provided, the type of incentive, and the specific incentive. Furthermore, for example, on the viewing screen shown in Figure 44, it is desirable to configure the system so that, based on an individual's wishes, a termination request can be sent from a third-party terminal to request the system to suspend or terminate the publication of desired health and medical care-related information from among the health and medical care-related information that has already been published, and the system can then accept the termination request.

[0135] <Configuration of Third Embodiment: Termination Condition Storage Unit> The "termination condition storage unit" 1202 is configured to have the function of storing termination conditions, which are conditions for determining whether termination is permitted based on information about the individual who made the termination request when the termination request is accepted. For example, the termination conditions may be as follows: However, the conditions are not necessarily limited to these. (1) If the disease is completely cured / recovered / in remission If an individual (user) is deemed to have been "cured" (completely cured of the illness or injury; in other words, returned to the state before the illness or injury), or "recovered" (no longer requiring treatment for the illness or injury and able to carry out daily life without problems; however, this does not necessarily mean that the state before the illness or injury has been returned to), or "in remission" (temporary or continuous recovery from the illness or injury; often used for illnesses that may recur, such as cancer or leukemia. This state may occur when symptoms are suppressed, but continued treatment and regular examinations are still required), the disclosure of the individual's health and medical information related to this illness may be suspended or terminated at the individual's discretion. (2) When an individual (user) moves (moves) If an individual (user) moves (relocates) due to, for example, a job change or transfer, and their primary care physician (family doctor) who has been treating their illness or injury changes, they may suspend or terminate the disclosure of their personal health and medical information at their own discretion. (3) If your primary care physician (family doctor) changes If a patient's primary care physician (family doctor) who has been treating the patient for an illness or injury changes due to a transfer or relocation of a hospital or other medical institution due to consolidation or closure of the hospital, the patient may voluntarily suspend or terminate the disclosure of the patient's health and medical information.

[0136] <Configuration of the Third Embodiment: Determination Rule Storage Unit> The “decision rule storage unit” 1203 is configured to have the function of storing decision rules, which are rules for determining whether or not to terminate the disclosure of health and medical care-related information based on information about the individual who requested termination and the stored termination conditions. For example, it is desirable to formulate a judgment rule for determining whether to terminate the disclosure of health and medical care-related information based on information obtained from the electronic medical record of this system that indicates that an individual's (user's) illness has been completely cured through treatment and medication by their doctor (family physician) and the termination condition stored in the termination condition storage unit described above, such as the above-mentioned condition (1). In this case, since it is determined that the illness has been completely cured, it is expected that there will be little significance or need for disclosing the health and medical care-related information to third parties, so it is preferable to terminate the disclosure as a judgment rule. Furthermore, if an individual (user) changes their doctor (family doctor) at a medical institution (hospital, clinic, etc.), there is no longer any point in disclosing their health and medical information to the original doctor, so it is preferable to terminate disclosure as a judgment rule. However, since disclosing the individual's health and medical information to their new doctor (family doctor) is essential for formulating treatment and medication policies, it is preferable to continue disclosing the information rather than terminating it as a judgment rule.

[0137] <Configuration of Third Embodiment: Termination Determination Unit> The "termination decision unit" 1203 is configured to have the function of deciding whether to terminate based on information about the individual, the stored termination conditions, and the stored decision rules when a termination request is accepted. For example, based on information in the electronic medical record indicating that an individual's illness or injury has been completely cured, the termination condition stored in the termination condition storage unit (in this case, the above condition (1)), and the above-mentioned judgment rule, it can be determined that the disclosure of this individual's health and medical related information should be terminated. Furthermore, for example, if it is considered that there is a high possibility of recurrence due to the individual's constitution based on information in the electronic medical record indicating that an individual's illness (e.g., cancer, etc.) has gone into remission, the termination condition stored in the termination condition storage unit (in this case, the above condition (1)), and the above-mentioned judgment rule, it can be determined that the disclosure of this individual's health and medical information should not be terminated. Furthermore, for example, based on information in the electronic medical record indicating that the individual's primary physician (family doctor) who has been treating the individual's illness or injury has changed due to various circumstances, the termination conditions stored in the termination condition storage unit mentioned above (in this case, condition (2) or (3) above), and the judgment rules mentioned above, it can be determined that the disclosure of this individual's health and medical information should be terminated.

[0138] <Embodiment 3: Configuration: Termination Control Unit> The "termination control unit" 1204 is configured to have the function of causing the access control unit to control the termination of the disclosure of the individual's health and medical care related information when the termination determination unit determines that the disclosure should be terminated. For example, if the judgment result of the termination judgment unit mentioned above is that the disclosure should be terminated, that is, if the judgment result is that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's illness or injury has been completely cured and the termination condition stored in the termination condition storage unit mentioned above (in this case, the above condition (1)), the termination control unit can send a control signal to the access control unit, causing the access control unit to control the disclosure of the individual's health and medical related information to be terminated. Furthermore, for example, if the judgment result of the above-mentioned termination judgment unit is that the disclosure should be terminated, that is, if the judgment result is that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's primary physician (family doctor) who has been treating the individual's illness or injury has been changed due to various circumstances and the termination condition stored in the above-mentioned termination condition storage unit (in this case, condition (2) or (3) above), the termination control unit can send a control signal indicating the judgment result to the access control unit, causing the access control unit to control the disclosure of the individual's health and medical related information to be terminated.

[0139] In addition, in relation to the above-mentioned "judgment rule storage unit," a "judgment rule change unit" may be further provided that changes the judgment rule as appropriate, for example, based on the number or percentage of times that an individual has given permission to disclose their health and medical care-related information, or the number or percentage of times that an incentive has been provided. In this case, the judgment rule may be changed automatically within the system, or may be changed manually from a terminal used by the individual or the system administrator.

[0140] Third Embodiment: Healthcare-Related Information Management System: Hardware Configuration The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0141] Figure 13 is a diagram showing the hardware configuration of a healthcare-related information management system according to this embodiment. As shown in this figure, the healthcare-related information management system according to this embodiment comprises a "CPU (Central Processing Unit)" 1301 that performs various types of arithmetic processing, and a "main memory" 1302. It also comprises a "non-volatile memory" 1303 that stores predetermined information, and a "network I / F (interface)" 1304 that transmits and receives information to and from multiple third-party terminals 1306 and an administrator terminal 1307. These components are interconnected by a data communication path such as a "bus" 1305, through which information is transmitted, received, and processed.

[0142] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area for the programs. Furthermore, multiple addresses are assigned to each of the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in the "main memory" include a termination request acceptance program, a termination condition storage program, a judgment rule storage program, a termination judgment program, and a termination control program. Furthermore, the "main memory" and "non-volatile memory" store termination request information, termination condition information, judgment rules, termination judgment information, termination control information, and the like.

[0143] The "CPU" executes a termination request reception program stored in the "main memory" to receive a termination request, which is a request to suspend or terminate the disclosure of an individual's (user's) previously disclosed health and medical-related information, sent from a third-party terminal via the "network I / F," and stores the termination request information in the "main memory" or "non-volatile memory." The "CPU" also executes a termination condition storage program stored in the "main memory" to store termination conditions, which are conditions for determining whether or not to terminate the disclosure based on information about the individual who made the termination request, when a termination request is received, and stores the termination condition information in the "main memory" or "non-volatile memory." The "CPU" also executes a judgment rule storage program stored in the "main memory" to store judgment rules, which are rules for determining whether or not to terminate the disclosure of health and medical-related information based on information about the individual who made the termination request and the stored termination conditions, and stores the judgment rules in the "main memory" and "non-volatile memory." The "CPU" also executes a termination judgment program stored in the "main memory" and, when a termination request is received, judges whether to terminate based on information about the individual and the stored termination conditions, and stores the termination judgment information in the "main memory" or "non-volatile memory." The "CPU" also executes a termination control program stored in the "main memory" and, when the termination judgment program determines that termination is appropriate, controls the access control unit to terminate the disclosure of the individual's health and medical care-related information, and stores the termination control information in the "main memory" or "non-volatile memory."

[0144] <Embodiment 3: Healthcare-related information management system: processing flow> 14 is a diagram showing the processing flow when using the health care related information management system of this embodiment. As shown in the figure, the processing method comprises a termination request receiving step S1401, a termination condition storing step S1402, a judgment rule storing step S1403, a termination judgment step S1404, and a termination control step S1405.

[0145] The "termination request receiving step" S1401 is a stage in which a termination request, which is a request to stop or terminate the disclosure of health and medical care-related information that has already been made public from an individual (user), is received from a third-party terminal.

[0146] The "termination condition holding step" S1402 is a stage in which, when a termination request is accepted, a termination condition is held, which is a condition for determining whether termination is permitted based on information about the individual who made the termination request.

[0147] The "decision rule storage step" S1403 is a step in which decision rules are stored, which are rules for determining whether or not to terminate the disclosure of health and medical-related information based on information about the individual who made the termination request and the stored termination conditions.

[0148] The "termination decision step" S1404 is a stage in which, when a termination request is accepted, a decision is made as to whether to terminate based on information about the individual, the stored termination conditions, and the stored decision rules.

[0149] The "termination control step" S1405 is a step in which, if the determination result in the termination determination step S1404 is that the process should be terminated, the access control unit controls the process to terminate the disclosure of the individual's health and medical care related information.

[0150] <Summary> As described above, the present invention allows individuals (users) to suspend or terminate the publication of health and medical care-related information that has already been made public, at their own will.

[0151] <Embodiment 4 (corresponding mainly to claims 4, 19, and 34)> <Outline of Embodiment 4> This embodiment is characterized in that it includes an access authentication processing unit that performs authentication for accessing the incentive management unit in addition to the components of embodiments 1 to 3. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of embodiments 1 to 3 will be omitted as appropriate.

[0152] <Configuration of Embodiment 4: Access Authentication Processing Unit> 15 is a diagram showing the functional configuration of the health and medical care related information management system. As shown in this figure, an “access authentication processing unit” 1501 is configured to have the function of authenticating individuals to access the incentive management unit. For example, Figure 40 shows an example of a user interface in the healthcare and medical information management system of the present invention. Here, it is assumed that a third-party terminal accesses the healthcare and medical information management system using a web browser. On this login screen, the user (individual) enters their personal identification number (My Number) and password information in the appropriate fields, and if matching information exists in the system, the user is authenticated and access is granted. The example in the figure explains how the user directly inputs information, but if the user uses a smartphone, for example, the smartphone's IC card reading function can be used to hold the My Number card up to the smartphone to automatically read and input specified information such as personal identification number (My Number) information. For example, if the user fails to enter personal identification number (My Number) information and / or password information three times in a row, the device may be locked and the user may have to go to a local government (such as a city, ward, town, or village office) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Healthcare-related information management system: hardware configuration> The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0154] Figure 16 is a diagram showing the hardware configuration of a healthcare-related information management system according to this embodiment. As shown in this figure, the healthcare-related information management system according to this embodiment comprises a "CPU (Central Processing Unit)" 1601 that performs various types of arithmetic processing, and a "main memory" 1602. It also comprises a "non-volatile memory" 1603 that stores predetermined information, and a "network I / F (interface)" 1604 that transmits and receives information to and from multiple third-party terminals 1606 and an administrator terminal 1607. These components are interconnected by a data communication path such as a "bus" 1605, through which information is transmitted, received, and processed.

[0155] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area that is a work area for the programs. Furthermore, multiple addresses are assigned to the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the program stored in the "main memory" is an access authentication processing program. Furthermore, the "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, etc.

[0156] The "CPU" executes the access authentication processing program stored in the "main memory," accepts input of personal identification number (My Number) information and password information sent from a third-party terminal via the "network I / F," verifies whether matching information exists on the system side, and stores the input personal identification number (My Number) information and password information in the "main memory" or "non-volatile memory."

[0157] <Embodiment 4: Healthcare-related information management system: processing flow> 17 is a diagram showing the flow of processing when using the health care related information management system of this embodiment. As shown in the diagram, this is a processing method consisting of an access authentication processing step S1701.

[0158] The "access authentication processing step" S1701 is a step in which input of personal identification number (My Number) information and password information about an individual (user) sent from a third-party terminal is accepted, and authentication is performed to allow access to the incentive management unit.

[0159] <Summary> As described above, in the present invention, by first performing access authentication on the login screen of the health and medical care related information management system, access to incentive-related information can be restricted to the individual (user) himself / herself.

[0160] <Embodiment 5 (corresponding mainly to claims 5, 20, and 35)> <Outline of Embodiment 5> In addition to the features of embodiments 1 to 4, this embodiment includes a consent information acquisition unit that acquires consent information, which is information indicating consent to receiving an incentive from the incentive management unit. From here on, descriptions of functions, hardware configurations, and processing flows that overlap with those of embodiments 1 to 4 will be omitted as appropriate.

[0161] <Configuration of the Fifth Embodiment: Consent Information Acquisition Unit> 18 is a diagram showing the functional configuration of the health and medical care related information management system of this embodiment. As shown in this figure, a "consent information acquisition unit" 1802 is configured to have the function of acquiring consent information, which is information indicating consent to accept an incentive from the incentive management unit, after authentication by the access authentication processing unit 1801. FIG. 41 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their personal identification number (My Number) and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, they are taken to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent Processing," they are taken to a screen for obtaining the individual's (user's) consent. FIG. 42 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to provide a user interface such as a pull-down menu in the "Agree / Disagree" field, and by clicking, touching, or tapping there, for example, enter either a "O" or an "X" to accept the individual's (user's) intention to agree or disagree to accept the incentive. By clicking, touching, or tapping the OK button, the entered consent information is sent to the incentive management unit, where it is stored and managed. Note that by clicking, touching, or tapping the Exit button, you can return to the function selection screen in Figure 41.

[0162] FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their personal identification number (My Number) information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, they are taken to a function selection screen where they can click, touch or tap the OK button corresponding to "(B) Viewing process" to transition to a screen where they can view the relationship between the individual's (user's) health and medical related information and the incentives granted. FIG. 43 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to display the target individual's health care-related information and the corresponding incentives granted in an easy-to-understand format such as a list. This allows the user to see at a glance which health care-related information the incentive granted at the time of viewing is associated with. You can also return to the function selection screen in Figure 41 by clicking, touching, or tapping the Exit button. FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, they are taken to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Processing," they are taken to a screen that displays the health and medical care-related information about the individual (user) that they have not yet consented to, as well as the health and medical care-related information that they have already consented to. FIG. 44 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to display the target individual's health and medical information and its corresponding consent or disagreement status in an easy-to-understand format, such as a list. For health and medical information for which consent or disagreement has not yet been entered at the time of viewing, a pull-down menu-style user interface is provided, allowing the individual (user) to enter a "O" in the "Agree / Disagree" field and click, touch, or tap the OK button to process the granting of incentives, etc. On the other hand, for health and medical information for which a "O" or "X" has already been entered in the "Agree / Disagree" field, the individual (user) can review the information as needed, for example, by changing consent to disagreement or disagreement to consent, and then clicking, touching, or tapping the OK button to update it. Note that clicking, touching, or tapping the Exit button returns to the function selection screen of Figure 41.

[0163] <Fifth embodiment: Healthcare-related information management system: hardware configuration> The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0164] Figure 19 is a diagram showing the hardware configuration of a healthcare-related information management system according to this embodiment. As shown in this figure, the healthcare-related information management system according to this embodiment comprises a "CPU (Central Processing Unit)" 1901 that performs various types of arithmetic processing, and a "main memory" 1902. It also comprises a "non-volatile memory" 1903 that stores predetermined information, and a "network I / F (interface)" 1904 that transmits and receives information to and from multiple third-party terminals 1906 and an administrator terminal 1907. These components are interconnected by a data communication path such as a "bus" 1905, through which information is transmitted, received, and processed.

[0165] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area for the programs. Furthermore, multiple addresses are assigned to the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. Furthermore, the "main memory" and "non-volatile memory" store My Number information, password information, consent information, etc.

[0166] The "CPU" executes the access authentication processing program stored in the "main memory," accepts input of personal identification number (My Number) information and password information sent from a third-party terminal via the "network I / F," authenticates whether matching information exists, and stores the personal identification number (My Number) information and password information in the "main memory" or "non-volatile memory." The "CPU" also executes the consent information acquisition program stored in the "main memory" to acquire, via the "network I / F," consent information indicating the individual's (user's) intention as to whether or not to disclose each piece of health and medical-related information sent from the third-party terminal. The consent information is then stored in the "main memory" or "non-volatile memory."

[0167] <Fifth embodiment: Healthcare-related information management system: processing flow> 20 is a diagram showing the flow of processing when using the health care related information management system of this embodiment. As shown in the diagram, the processing method comprises an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "access authentication processing step" S2001 is a stage in which input of personal identification number (My Number) information and password information about an individual (user) sent from a third-party terminal is accepted, and authentication is performed to allow access to the incentive management unit.

[0169] The "consent information acquisition step" S2002 is a stage in which, after authentication in the access authentication processing step, consent information is acquired, which is information indicating consent to receive an incentive from the incentive management unit.

[0170] <Summary> As described above, in the present invention, consent information, which is information indicating consent to receiving incentives for health and medical care-related information about an individual (user), can be acquired.

[0171] <Embodiment 6 (corresponding mainly to claims 6, 21, and 36)> <Outline of Sixth Embodiment> This embodiment is characterized in that, in addition to the components of embodiments 1 to 5, it includes an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of embodiments 1 to 5 will be omitted as appropriate.

[0172] <Configuration of the Sixth Embodiment: Incentive Providing Processing Unit> Fig. 21 shows the functional configuration of the health and medical care related information management system. As shown in this figure, an "incentive processing unit" 2103 is configured to have the function of performing incentive provision processing to provide an incentive when consent information is acquired by the consent information acquisition unit. FIG. 44 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this example, the incentive to be automatically calculated and granted is based on a predetermined calculation rule for health and medical-related information for which an individual (user) has marked a "○" in the "Agree / Disagree" column indicating consent to disclosure. Here, the calculation rule is based on a calculation of 1,000 My Number points (My Number points) for each individual's health and medical-related information and each recipient. The incentive calculation rule may also be weighted based on the importance, urgency, rarity, and usefulness of the health and medical-related information, allowing different incentives to be calculated and granted for each health and medical-related information. In particular, for example, for malignant neoplasms (cancer), which are the leading cause of death among Japanese people; hypertension, diabetes, dyslipidemia, periodontal disease, or eye disease, various infectious diseases defined under the Infectious Diseases Act, including COVID-19, and unique diseases with few cases worldwide, the calculation rule may be set to provide higher incentives than for other diseases, given that disclosing such health and medical-related information to third parties can significantly contribute to medical advances.

[0173] In addition, "incentive" simply means "motivation, reward," and refers to intentionally providing stimulation with the aim of causing some kind of action. In the present invention, "incentives" may include, in addition to the My Number points mentioned above, personalized or general information services for information providers, provision of personalized medicines or supplements, provision of books or other products, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of rights, such as the right to receive medical treatment, the right to receive a diagnosis, the right to undergo testing, the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash. Furthermore, the following may be included: Discounts on some products or services, such as discounts or discounts on insurance premiums, or discounts on insurance rates. Furthermore, refunds of paid fees, the awarding of free gifts (e.g., novelties), awards or recognition, and the granting of complimentary coupons. Furthermore, reward points, discounts, free products, early access to new products, or limited sales are examples. Furthermore, rights to write brand reviews, refer friends, and create user-generated content are also included. It may also be an upgrade of a product or service. The present invention can be applied to both cases where an individual's health and medical-related information is already associated with and stored and managed as disclosure permission information indicating whether or not the information is permitted to be disclosed to a third party, and cases where an individual (user) newly registers their own health and medical-related information in the health and medical-related information storage unit, but the disclosure permission information has not yet been associated and stored and managed. That is, even if the health and medical-related information of an individual is not stored in the health and medical-related information management system, for example, if the individual's health and medical-related information is stored on a device owned by the individual and uploaded to the present system, the incentive function unit can be configured to provide an incentive based on the result of a formal check of the uploaded information if it is determined that the information is disclosable as health and medical-related information. In this case, the access control unit of the present system may be configured not to deny third parties access to view the health and medical-related information. However, it may also be configured to partially deny or restrict access depending on the type and qualifications of the third party. Uploading an individual's health and medical-related information to the present system may be a transfer, and the source of the transfer may not be the individual's device but may be a system storing other health and medical-related information. For example, health and medical care-related information stored in a maternal and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental care information server, a rehabilitation information server, etc. can be configured to be transferred to this system with the individual's consent. In this case, the incentive function unit can be configured to function once the individual's health and medical care-related information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

[0174] FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their own My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, they are taken to a function selection screen where they can click, touch or tap the OK button corresponding to "(B) Viewing process" to transition to a screen where they can view the relationship between the individual's (user's) health and medical related information and the incentives granted. FIG. 43 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to display the target individual's health care-related information and the corresponding incentives granted in an easy-to-understand format such as a list. This allows the user to see at a glance which health care-related information the incentive granted at the time of viewing is associated with. You can also return to the function selection screen in Figure 41 by clicking, touching, or tapping the Exit button.

[0175] FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, they are taken to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Processing," they are taken to a screen that displays the health and medical care-related information about the individual (user) that they have not yet consented to, as well as the health and medical care-related information that they have already consented to. FIG. 44 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to display the target individual's health and medical care-related information and its corresponding consent or disagreement status in an easy-to-understand format, such as a list. For health and medical care-related information for which consent or disagreement has not yet been entered at the time of viewing, the individual (user) can enter a "O" in the "Agree / Disagree" field in a pull-down menu format and click, touch, or tap the OK button to process the granting of incentives, etc. On the other hand, for health and medical care-related information for which a "O" or "X" has already been entered in the "Agree / Disagree" field, the individual (user) can review the information, for example, by changing consent to disagreement or disagreement to consent, and then clicking, touching, or tapping the OK button to update it. Note that the user can return to the function selection screen in Figure 41 by clicking, touching, or tapping the Exit button.

[0176] Sixth Embodiment: Healthcare-related Information Management System: Hardware Configuration The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0177] Figure 22 is a diagram showing the hardware configuration of a healthcare-related information management system in this embodiment. As shown in this figure, the healthcare-related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 2201 that performs various types of calculation processing, and a "main memory" 2202. It also comprises a "non-volatile memory" 2203 that stores predetermined information, and a "network I / F (interface)" 2204 that sends and receives information to and from multiple third-party terminals 2206 and an administrator terminal 2207. These components are interconnected by a data communication path such as a "bus" 2205, and perform information sending and receiving and processing.

[0178] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area that is a work area for those programs. Furthermore, multiple addresses are assigned to each of the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, and an incentive provision processing program. Furthermore, the "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, consent information, incentive information, and the like.

[0179] The "CPU" executes the access authentication processing program stored in the "main memory," accepts input of personal identification number (My Number) information and password information sent from a third-party terminal via the "network I / F," and verifies whether matching information exists. It also stores the My Number information and password information in the "main memory" and "non-volatile memory." The "CPU" also executes the consent information acquisition program stored in the "main memory" to acquire consent information indicating the individual's (user's) intention for each piece of health and medical-related information sent from the third-party terminal via the "network I / F." The consent information is then stored in the "main memory" and "non-volatile memory." In addition, the "CPU" executes the incentive provision processing program stored in the "main memory" to perform the incentive provision processing, which is a process for providing incentives when consent is obtained for health and medical care-related information about an individual, and stores the incentive information in the "main memory" and the "non-volatile memory."

[0180] <Sixth embodiment: Healthcare-related information management system: processing flow> 23 is a diagram showing the processing flow when using the health care related information management system of this embodiment. As shown in the figure, the processing method comprises an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "incentive providing process step" S2303 is a stage in which, when consent information is acquired by the consent information acquisition unit, an incentive providing process is performed, which is a process for providing an incentive.

[0182] <Summary> As described above, in the present invention, an incentive provision process, which is a process for providing incentives, can be executed for health and medical care-related information related to an individual (user) when the individual gives consent, and appropriate incentive provision process can be performed for health and medical care-related information related to an individual.

[0183] <Embodiment 7 (corresponding mainly to claims 7, 22, and 37)> <Outline of Embodiment 7> This embodiment provides a healthcare-related information management system which includes a healthcare-related information storage unit that stores healthcare-related information about individuals, and an access control unit that allows third parties to access the healthcare-related information stored in the healthcare-related information storage unit via a network. The access control unit includes IP packet analysis means that analyzes IP packets sent via the network, destination IP address determination means that extracts a destination IP address from the IP header of the IP packet and determines whether the IP address is addressed to the healthcare-related information management system's own, access ID / user ID acquisition means that, if the destination IP address is an IP address addressed to the healthcare-related information management system's own, acquires from the IP payload an access ID indicating the accessing entity and a user ID indicating the user belonging to the accessing entity, access entity user attribute acquisition means that acquires access entity information, user information, and user attribute information (here, information indicating whether the user is a healthcare professional or a non-healthcare professional) corresponding to the access ID and user ID, access control means that controls access to the healthcare-related information from third parties, and a disclosure permission information storage unit that stores disclosure permission information indicating whether an individual's healthcare-related information is permitted to be disclosed to third parties. Note that the description of the same functions, hardware configurations, and processing flows as those in the first to sixth embodiments will be omitted where appropriate.

[0184] <Seventh embodiment: Functional configuration> 24 is a diagram showing the functional configuration of a health and medical care related information management system according to embodiment 7. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID / user ID acquisition means, an access subject user attribute acquisition means, an access control means, and a disclosure permission information storage unit.

[0185] <Seventh embodiment: Configuration description: IP packet analysis means of access control unit> The "IP packet analysis means" 2401 is configured to have the function of analyzing IP packets sent via a network (especially the Internet). Generally, an IP packet consists of an IP header section and an IP payload section, and various information and data are stored within these sections. The "IP packet analysis means" 2401 is responsible for analyzing and examining what information and data are contained within these sections.

[0186] <Seventh embodiment: Configuration description: Destination IP address determination means of access control unit> The "destination IP address determination means" 2402 is configured with the function of extracting the destination IP address from the header of a received IP packet and determining whether or not the IP address is addressed to the healthcare-related information management system. Generally, an IP packet contains at least a source IP address indicating the sender and a destination IP address indicating the destination in the IP header. The "destination IP address determination means" 2402 references the destination IP address extracted from the IP header to determine whether or not the IP packet was sent to the healthcare-related information management system, and if it determines that the packet was addressed to the means, it proceeds to the next step. However, if it determines that the packet was not addressed to the means, it ignores the IP packet and does not perform any further operations.

[0187] <Seventh embodiment: Description of configuration: Access ID / user ID acquisition means of access control unit> The "access ID / user ID acquisition means" 2403 is configured to have the function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject when it is determined that the IP packet was sent to the health and medical care related information management system.

[0188] <Configuration of the Seventh Embodiment: Access Subject User Attribute Acquisition Means of the Access Control Unit> The "access subject user attribute acquisition means" 2404 is configured to have the function of acquiring access subject information corresponding to the access ID and user ID, user information belonging to the access subject, and user attribute information for the user (here, information indicating whether the user is a medical professional or a non-medical professional). The access subject information is information that specifically identifies the access subject, and is expressed, for example, by a name such as "Edogawa Central Hospital" or "Edogawa Pharmaceuticals." The user information is information that specifically identifies an employee or the like belonging to the access subject, and is expressed, for example, by a name such as "Ichiro Suzuki," an employee of "Edogawa Central Hospital," or "Hideo Maeda," an employee of "Edogawa Pharmaceuticals." Furthermore, the user attribute information is attribute information associated with the user information and indicates whether the user is a medical professional or a non-medical professional, and is expressed, for example, by a "medical professional" (abbreviated as "medical") or a "non-medical professional" (abbreviated as "non-medical").

[0189] Here, "healthcare professionals" preferably includes at least doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiological technologists, radiological x-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, medical administrators, etc. Among the "healthcare professionals" mentioned above, the role of so-called family healthcare professionals (e.g., family doctors, family pharmacists, family dentists) who regularly provide medical examinations and medication instructions to individuals (patients) is extremely important, and it is preferable that they be granted the authority to access an individual's health care-related information stored in the health care-related information storage unit and to edit, add, and delete the health care-related information as appropriate and necessary.

[0190] For example, a "family doctor" is a doctor who can be consulted about anything, is well-versed in the latest medical information, can refer patients to specialists and specialized medical institutions when necessary, and has the comprehensive capabilities to provide local medical care, health, and welfare services as a reliable and close-knit doctor. A "family doctor" is someone who (1) understands the patient's lifestyle and provides appropriate medical treatment and health guidance in the course of daily medical practice, and is able to cooperate with local doctors, medical institutions, etc. to provide solutions when he or she is unable to provide medical treatment or guidance beyond his or her own area of expertise; (2) is able to share necessary information with local doctors, medical institutions, etc. so that the patient can continue to receive the best possible medical care even outside of his or her own medical practice hours, and through mutual cooperation, is able to establish a system in which patients can be treated on holidays and at night; (3) in addition to providing daily medical practice, is able to build relationships of trust with local residents and actively participate in social and administrative activities surrounding local medical care, such as health consultations, health checkups, cancer screenings, maternal and child health, school health, industrial health, and community health, as well as cooperate with health, nursing, and welfare professionals, and is also able to promote home medical care so that local elderly people can live in the community as long as possible; and (4) is able to provide patients and their families with appropriate and easy-to-understand information about medical care.

[0191] For example, a "family pharmacist" refers to a pharmacist who has extensive knowledge and experience in matters such as pharmaceutical treatment, health, and nursing care, and who can provide consultations that meet the needs of patients and consumers. The role of a "family pharmacist" is (1) to manage the medication status of one patient at one pharmacy, and to continue to do so (for example, to ensure the safe and secure use of medications, the pharmacist keeps track of all the medications the patient is taking, including prescription and over-the-counter medications, in one place, and continually checks for overlaps and drug interactions, as well as whether the medications are working and whether there are any side effects), (2) to provide 24-hour support and visit patients' homes to provide in-home medical care (for example, to answer questions about medications, such as how to use them, and their side effects, over the phone, even outside the pharmacy's opening hours, such as on holidays and at night. In addition, the pharmacist can provide prescriptions at night and on holidays as needed). (2) Provide medications based on prescriptions. Visit the homes of elderly patients and other patients who have difficulty going out, explain the medications, and check for remaining medication (medicines remaining on hand), (3) Work in cooperation with prescribing physicians and medical institutions (for example, check the prescription contents and make inquiries or suggestions to the doctor as necessary. Monitor the patient's condition even after dispensing the medication, provide feedback to the prescribing physician, and check for remaining medication. Provide consultations on a wide range of health-related matters, not just medications, and recommend visiting a medical institution if necessary. Also, work in cooperation with local medical institutions to build relationships that allow the team to support patients on a daily basis).

[0192] For example, a "family dentist" refers to a dentist who not only provides safe and secure dental care but also has a wide range of knowledge and insight regarding medical care and nursing, and who aims to maintain and improve the oral function of local residents throughout their lives, and who is able to fulfill his or her responsibilities as a part of local medical care. It is desirable for a "family dentist" to be a person who can fulfill the following roles: (1) provide appropriate dental treatment and health guidance for ongoing management and prevention of serious illness according to life stages from infancy to old age, thereby contributing to the maintenance and improvement of oral and overall health; (2) play a role in improving oral health for local residents through health activities such as dental checkups, in cooperation with local government and related organizations; and (3) cooperate with related local organizations and other industries to provide seamless home dental care and nursing care services in various treatment facilities for patients who have difficulty visiting a hospital, and actively participate in community-based comprehensive care. In addition, flag information that identifies a personal healthcare professional may be added to or associated with the third-party identification information described below. Note that the information indicating a personal healthcare professional may be set, changed, or deleted as appropriate or necessary by an individual (e.g., a patient), the company to which the individual belongs, the health insurance association to which the individual belongs, or the local government in which the individual resides, using a third-party terminal, or the administrator described above may be able to register, edit, or delete the information using the administrator terminal.

[0193] Furthermore, it is preferable that "non-medical personnel" include at least employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, comprehensive research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0194] <Embodiment 7: Description of Configuration: Access Control Means of Access Control Unit> The 'access control means' 2405 is configured to have a function of controlling access when a third party accesses the health and medical care related information storage unit via a network.

[0195] FIG. 25 is a diagram showing an example of the functional configuration of a health and medical care related information management system according to this embodiment. First, the IP packet analysis means analyzes the received IP packet 2501 to check what information and data it contains. For example, it analyzes and checks whether the source IP address and destination IP address are included in the IP header of the IP packet.

[0196] Next, the destination IP address determination means extracts the destination IP address contained in the received IP packet 2501 and determines whether it is addressed to the access control unit's own healthcare-related information management system. At this time, the access control unit 2502 stores an IP address table 2503, and references this table to determine whether it is addressed to the access control unit's own healthcare-related information management system. If the stored IP address (e.g., 192.168.0.1) matches the destination IP address, it is determined to be addressed to the access control unit's own healthcare-related information management system, and the process proceeds to the next step. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, if the IP packet sent is addressed to the healthcare-related information management system, the access ID / user ID acquisition means extracts and acquires the access ID indicating the accessing entity stored in the IP payload of the IP packet and the user ID indicating the user belonging to the accessing entity.

[0198] Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores an access ID / user ID table 2504, and references this table to acquire specific access subject information, user information, and user attribute information. Here, when the access ID is "A0001," the access subject information is "Edogawa Central Hospital." When the user ID is "C0001," the user information is "Ichiro Suzuki," and the user attribute information is "healthcare professional." When the access ID is "B0001," the access subject information is "Edogawa Pharmaceutical." When the user ID is "D0001," the user information is "Hideo Maeda," and the user attribute information is "non-healthcare professional." Through the operations performed by the above means, it is possible to determine whether a third party accessing the health care-related information management system is a healthcare professional or a non-healthcare professional.

[0199] Next, the access control means determines the scope of access to the health and medical care-related information depending on whether the third party is a medical professional or a non-medical professional. For example, if a user named "Ichiro Suzuki" who belongs to a third-party accessing entity (in this case, "Edogawa Central Hospital") has the attribute information "health and medical care professional," the access control means allows the user to access all of the health and medical care-related information related to the individual. On the other hand, if a user named "Hideo Maeda" who belongs to a third-party accessing entity (in this case, "Edogawa Pharmaceutical") has the attribute information "non-health and medical care professional," the access control means allows the user to access some (including all) of the health and medical care-related information related to the individual, or health and medical care-related information anonymized using a predetermined anonymization method described below. In this way, it is possible to determine who the third-party user is and whether their attribute information is "health and medical care professional" or "non-health and medical care professional," thereby determining the scope of access to the health and medical care-related information related to the individual. It is preferable that the administrator responsible for managing and operating the health and medical care-related information management system can use an administrator terminal to register, edit, and delete information in these tables. It is also preferable that the access subject information, user information, and user attribute information ("healthcare worker" or "non-healthcare worker") are also associated with third-party identification information, which will be described later.

[0200] <Seventh embodiment: Configuration description: Disclosure permission information storage unit of access control unit> As shown in FIG. 24 , the “disclosure permission information storage unit” 2406 is configured to have a function for storing disclosure permission information indicating whether or not to disclose one's own health and medical-related information to a third party accessing the health and medical-related information via the network. Specifically, it is desirable to configure the information to be able to set information indicating “disclosure permission” or “disclosure denial” to the access control unit 202 of the health and medical-related information management system 200 at the individual's discretion from the third-party terminal 206 shown in FIG. 2 via the network 205. For example, the information may be binary information (flag information) in which “disclosure permission” is “1” and “disclosure denial” is “0.” The disclosure permission information may also be configured to determine whether or not to disclose a specific block of health and medical-related information. For example, it is conceivable that health and medical-related information related to internal medicine among medical departments is set to “disclosure permission,” while health and medical-related information related to psychiatry is set to “disclosure denial.” The disclosure permission information may also be configured to distinguish between “disclosure permission” and “disclosure denial” when the third party is a specific medical professional, in combination with third-party identification information (described below). For example, if the third-party identification information represents a "doctor," the individual's health and medical related information may be "permitted to be disclosed," whereas if the third-party identification information represents a specific medical professional (e.g., an accountant or bookkeeper), the individual's health and medical related information may be "denied from disclosure."

[0201] Seventh Embodiment: Healthcare-related Information Management System: Hardware Configuration The hardware configuration of the healthcare-related information management system according to this embodiment will be described with reference to the drawings.

[0202] Figure 26 is a diagram showing the hardware configuration of a health and medical care related information management system in this embodiment. As shown in this figure, the access control unit in this embodiment comprises a "CPU (Central Processing Unit)" 2601 that performs various types of arithmetic processing, and a "main memory" 2602. It also comprises a "non-volatile memory" 2603 that stores predetermined information, and a "network I / F (interface)" 2604 that transmits and receives information to and from multiple third-party terminals 2606 and an administrator terminal 2607. These are then interconnected by a data communication path such as a "bus" 2605, and perform information transmission and reception and processing.

[0203] The "main memory" reads out programs that perform various processes and allows the "CPU" to execute them, while also providing a work area for the programs. The "main memory" and "non-volatile memory" are each assigned multiple addresses, allowing programs executed by the "CPU" to identify and access these addresses to exchange data and perform processing. In this embodiment, the programs stored in the "main memory" include a health and medical information storage program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a disclosure permission information retention program, and an access control program. The "main memory" and "non-volatile memory" also store health and medical information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, disclosure permission information, and other information.

[0204] The "CPU" executes the health and medical information storage program stored in the "main memory" to store in the "main memory" and "non-volatile memory" health and medical information about an individual sent from a third-party terminal via the "network I / F," such as electronic medical record information, various test information, prescription information, medication history information, and vital signs information (e.g., body temperature, blood pressure, heart rate, etc.). It also executes the IP packet analysis program stored in the "main memory" to analyze IP packets sent via a network (especially the Internet). It also executes the destination IP address determination program stored in the "main memory" to determine whether the sent destination IP address is an IP address addressed to its own health and medical information sharing system. If it determines that the IP address is addressed to itself, it stores the IP address in the "main memory" and "non-volatile memory." It also executes the access ID / user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the accessing entity and the user ID indicating the user belonging to the accessing entity, which are stored in the IP payload of the sent IP packet, and store them in the "main memory" and "non-volatile memory." In addition, the access subject user attribute acquisition program stored in the "main memory" is executed to acquire access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional; for example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID, and store them in the "main memory" and "non-volatile memory." In addition, the disclosure permission information retention program stored in the "main memory" is executed to acquire disclosure permission information indicating whether or not an individual's health and medical related information will be disclosed to third parties, and store this in the "main memory" and "non-volatile memory." In addition, the access control program stored in the "main memory" is executed to control access to health and medical related information about an individual.

[0205] <Seventh embodiment: Healthcare-related information management system: processing flow> 27 is a diagram showing the processing flow when the healthcare-related information management system of this embodiment is used. As shown in the figure, the processing method comprises healthcare-related information accumulation step S2701, IP packet analysis step S2702, destination IP address determination step S2703, access ID / user ID acquisition step S2704, access subject user attribute acquisition step S2705, disclosure permission information retention step S2706, and access control step S2707.

[0206] The "health and medical related information accumulation step" S2701 is a step in which health and medical related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various test information, prescription information, medication history information, and vital sign information (e.g., body temperature, blood pressure, heart rate, etc.), is accumulated.

[0207] The "IP packet analysis step" S2702 is a stage in which IP packets sent via a network (particularly the Internet) are analyzed.

[0208] The "destination IP address determination step" S2703 is a stage in which the destination IP address is extracted from the IP header of the IP packet and a determination is made as to whether or not the IP address is addressed to the healthcare-related information management system of the recipient.

[0209] The "Access ID / User ID Acquisition Step" S2704 is a step in which, when the destination IP address is an IP address addressed to the user's own health and medical information management system, the access ID indicating the accessing entity and the user ID indicating the user belonging to the accessing entity are acquired from the IP payload.

[0210] The "access subject user attribute acquisition step" S2705 is a step in which access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional, for example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID are acquired.

[0211] The "step of storing information on whether or not disclosure is permitted" S2706 is a step of storing information on whether or not disclosure of personal health and medical care-related information to a third party is permitted.

[0212] The "access control step" S2707 is a stage in which access to the health and medical care related information management system is controlled.

[0213] <Summary> As a result, disclosure permission information indicating whether or not health and medical care-related information about an individual (user) is permitted to be disclosed to third parties can be stored. In other words, an individual can select and set whether or not to permit disclosure based on their own will.

[0214] <Embodiment 8 (corresponding mainly to claims 8, 23, and 38)> <Outline of Embodiment 8>

[0215] Figure 28 is a diagram showing the functional configuration of a healthcare-related information management system according to embodiment 8. As shown in this diagram, this embodiment is characterized by the addition of a third-party identification information storage unit in addition to the components of embodiments 1 to 7. The functional configuration, hardware configuration, and processing flow of the healthcare-related information management system according to this embodiment will be described below in order. From here on, descriptions of functions, hardware configuration, and processing flow similar to those of embodiments 1 to 7 will be omitted where appropriate.

[0216] <Functional Configuration of Embodiment 8> 28 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment. In this embodiment, by providing a third party identification information storage unit, it is possible to identify whether a third party is a medical professional or a non-medical professional.

[0217] <Embodiment 8: Healthcare-related information management system: functional configuration> FIG. 28 is a diagram showing the functional configuration of a health and medical care related information management system according to this embodiment.

[0218] <Embodiment 8: Configuration: Third-Party Identification Information Storage Unit of Access Control Unit> The "third-party identification information storage unit" 2807 is configured to have the function of storing third-party identification information for identifying whether a third party accessing the healthcare-related information stored in the healthcare-related information storage unit via a network is a healthcare professional or a non-healthcare professional. Here, the third-party identification information may be, for example, information created by combining 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. Specifically, for example, My Number information or a health insurance card number may be used. Furthermore, the third-party identification information is preferably associated with the access subject information, user information, and user attribute information ("healthcare professional" or "non-healthcare professional") described above. Furthermore, the third-party identification information may be registered, edited, and deleted by the administrator using the administrator terminal.

[0219] In addition, by combining the above-mentioned disclosure permission information and third-party identification information, even if the disclosure permission information indicates ``disclosure permitted,'' if the third party is a specific medical professional, it may be possible to set whether access is permitted or not. For example, if the third-party identification information represents a "doctor," access to health and medical related information may be permitted, but if the third-party identification information represents a specific medical professional (e.g., an accountant or bookkeeper), access to health and medical related information may be denied. Furthermore, for example, information indicating the department to which the user belongs may be added to the third-party identification information, and the permission or denial of access to the health and medical care-related information may be controlled based on the information indicating the department. For example, permission or denial of access to the health and medical care-related information may be controlled based on information regarding the user's expertise identified by the third-party identification information (e.g., the specialty and years of experience of "doctor" or "nurse"). For example, the method by which third parties can obtain the health and medical care-related information (e.g., view-only, text conversion, copying, transfer, bulk download of anonymously processed information, etc.) may be changed based on a combination of disclosure permission information and the department and expertise related to the third-party identification information. If downloading is permitted, it is preferable to utilize digital watermarking technology or NFT (Non-Fungible Token) technology to prevent data tampering. For example, the permission or denial of access to the patient may be granted to a third party based on a combination of disclosure permission information and the department and expertise related to the third-party identification information. For example, it is expected that a medical professional who performs PCR testing will send the results of the PCR test to a third-party terminal used by a doctor, as well as to a third-party terminal used by the patient himself / herself.

[0220] It is conceivable that the administrator mentioned above can use the administrator terminal to register these combinations of information in advance in a table format or the like in the access control unit mentioned above, so that they can be edited or deleted as appropriate and as needed. Furthermore, for example, examples of medical professionals include doctors, dentists, and pharmacists, and the third-party identification information for these may include, at least in part, the medical registry registration number (e.g., a six-digit number) listed on their medical license, the dentist registry registration number (e.g., a six-digit number) listed on their dentist license, or the pharmacist registry registration number (e.g., a six-digit number) listed on their pharmacist license. Similarly, for other medical professionals, the third-party identification information may include, at least in part, the number listed on their license. Furthermore, at least part of the third-party identification information may include the symbols and numbers (including branch numbers) printed on the health insurance card of the user's health insurance association, the driver's license number, the personal number (My Number) information printed on the personal number (My Number) card, etc. Note that the user may be identified using third-party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).

[0221] <Embodiment 8: Healthcare-related information management system: hardware configuration> Figure 29 is a diagram showing the hardware configuration of a healthcare-related information management system in this embodiment. As shown in this figure, the healthcare-related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 2901 that performs various types of calculation processing, and a "main memory" 2902. It also comprises a "non-volatile memory" 2903 that stores predetermined information, and a "network I / F" 2904 that sends and receives information to and from a third-party terminal 2906 and an administrator terminal 2907. These components are interconnected by a data communication path such as a "bus" 2905, and perform information sending and receiving and processing.

[0222] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area for the programs. Furthermore, multiple addresses are assigned to the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in the "main memory" are primarily programs for retaining third-party identification information. Furthermore, third-party identification information and the like are stored in the "main memory" and "non-volatile memory."

[0223] The "CPU" executes a third-party identification information retention program stored in the "main memory" to retain third-party identification information for identifying whether a third party who has accessed the health and medical care-related information stored in the health and medical care-related information storage unit via the network is a medical professional or a non-medical professional, and stores the third-party identification information in the "main memory" and the "non-volatile memory."

[0224] <Embodiment 8: Healthcare-related information management system: processing flow> 30 is a diagram showing the flow of processing when using the health care related information management system of this embodiment. As shown in this diagram, the processing method includes a third party identification information holding step S3007.

[0225] The "third party identification information retention step" S3007 is a step of retaining third party identification information to identify whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via the network is a medical professional or a non-medical professional.

[0226] <Summary> From the above, it is possible to identify whether the third party is a medical professional or a non-medical professional. For example, it will be possible to distinguish between the same medical professional as whether he or she is the individual's personal physician (family doctor), and it will also be possible to distinguish between the same non-medical professional as whether he or she is an employee (including researchers) of a pharmaceutical company that develops and manufactures a treatment for the individual's illness, or an employee of a government agency.

[0227] <Embodiment 9 (corresponding mainly to claims 9, 24, and 39)> <Overview of Embodiment 9>

[0228] 31 is a diagram showing the functional configuration of a healthcare-related information management system according to embodiment 9. Hereinafter, descriptions of functions, hardware configurations, and processing flows similar to those of embodiments 1 to 8 will be omitted where appropriate.

[0229] The functional configuration, hardware configuration, and processing flow of the healthcare-related information management system according to this embodiment will be described below.

[0230] <Functional Configuration of Embodiment 9> 31 is a diagram showing the functional configuration of the healthcare-related information management system in this embodiment. With this configuration, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a healthcare professional, the healthcare-related information stored in the healthcare-related information storage unit can be viewed.

[0231] <Embodiment 9: Healthcare-related information management system: functional configuration> FIG. 31 is a diagram showing the functional configuration of a health and medical care related information management system according to this embodiment.

[0232] <Configuration of Embodiment 9: Disclosure Permission Information Storage Unit of Access Control Unit> The "disclosure permission information storage unit" 3106 is configured to have a function for storing disclosure permission information indicating whether or not to disclose one's own health and medical-related information to a third party accessing the health and medical-related information via the network. Specifically, it is desirable to configure the information to be able to set information indicating "disclosure permission" or "disclosure denial" to the access control unit 202 of the health and medical-related information management system 200 at the individual's discretion from the third-party terminal 206 shown in FIG. 2 via the network 205. For example, the information may be binary information (flag information) in which "disclosure permission" is "1" and "disclosure denial" is "0." The disclosure permission information may also be set to indicate whether or not to disclose a specific block of health and medical-related information. For example, it is conceivable that health and medical-related information related to internal medicine among medical departments is set to "disclosure permission," while health and medical-related information related to psychiatry is set to "disclosure denial." The disclosure permission information may also be set to either "disclosure permission" or "disclosure denial" when the third party is a specific medical professional, in combination with the third-party identification information described above. For example, if the third-party identification information represents a "doctor," the individual's health and medical related information may be "permitted to be disclosed," whereas if the third-party identification information represents a specific medical professional (e.g., an accountant or bookkeeper), the individual's health and medical related information may be "denied from disclosure."

[0233] <Configuration of Embodiment 9: Third-Party Identification Information Storage Unit of Access Control Unit> The "third-party identification information storage unit" 3107 is configured to have the function of storing third-party identification information for identifying whether a third party accessing the health and medical care-related information stored in the health and medical care-related information storage unit via a network is a medical professional or a non-medical professional. Here, the third-party identification information may be, for example, information made up of a combination of 12 digits of numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specific examples include My Number information or health insurance card numbers. Furthermore, it is preferable that the third-party identification information is associated with the above-mentioned access subject information, user information, and user attribute information ("healthcare worker" or "non-healthcare worker"). Furthermore, the above-mentioned administrator may be able to register, edit, and delete the third-party identification information using the administrator terminal.

[0234] In addition, by combining the above-mentioned disclosure permission information and third-party identification information, even if the disclosure permission information indicates ``disclosure permitted,'' if the third party is a specific medical professional, it may be possible to set whether access is permitted or not. For example, if the third-party identification information represents a "doctor," access to health and medical related information may be permitted, but if the third-party identification information represents a specific medical professional (e.g., an accountant or bookkeeper), access to health and medical related information may be denied.

[0235] Furthermore, for example, information indicating the department to which the user belongs may be added to the third-party identification information, and the permission or denial of access to the health and medical care-related information may be controlled based on the information indicating the department. For example, permission or denial of access to the health and medical care-related information may be controlled based on information regarding the user's expertise identified by the third-party identification information (e.g., the specialty and years of experience of "doctor" or "nurse"). For example, the method by which third parties can obtain the health and medical care-related information (e.g., view-only, text conversion, copying, transfer, bulk download of anonymously processed information, etc.) may be changed based on a combination of disclosure permission information and the department and expertise related to the third-party identification information. If downloading is permitted, it is preferable to utilize digital watermarking technology or NFT (Non-Fungible Token) technology to prevent data tampering. For example, the permission or denial of access to the patient may be granted to a third party based on a combination of disclosure permission information and the department and expertise related to the third-party identification information. For example, it is expected that a medical professional who performs PCR testing will send the results of the PCR test to a third-party terminal used by a doctor, as well as to a third-party terminal used by the patient himself / herself.

[0236] It is conceivable that the administrator mentioned above can use the administrator terminal to register these combinations of information in advance in a table format or the like in the access control unit mentioned above, so that they can be edited or deleted as appropriate and as needed. Furthermore, for example, examples of medical professionals include doctors, dentists, and pharmacists, and the third-party identification information for these may include, at least in part, the medical registry registration number (e.g., a six-digit number) listed on their medical license, the dentist registry registration number (e.g., a six-digit number) listed on their dentist license, or the pharmacist registry registration number (e.g., a six-digit number) listed on their pharmacist license. Similarly, for other medical professionals, the third-party identification information may include, at least in part, the number listed on their license. Furthermore, at least part of the third-party identification information may include the symbols and numbers (including branch numbers) printed on the health insurance card of the user's health insurance association, the driver's license number, the personal number (My Number) information printed on the personal number (My Number) card, etc. Note that the user may be identified using third-party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).

[0237] <Ninth embodiment: Description of configuration: Access control means of access control unit> The “access control means” 3105 is configured to have a function for controlling access when a third party accesses the health and medical care related information storage unit via a network, and to enable viewing of the health and medical care related information stored in the health and medical care related information storage unit when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a medical professional.

[0238] <Embodiment 9: Healthcare-related information management system: hardware configuration> Figure 32 is a diagram showing the hardware configuration of a healthcare-related information management system in this embodiment. As shown in this figure, the healthcare-related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 3201 that performs various types of calculation processing, and a "main memory" 3202. It also comprises a "non-volatile memory" 3203 that stores predetermined information, and a "network I / F" 3204 that sends and receives information to and from a third-party terminal 3206 and an administrator terminal 3207. These components are interconnected by a data communication path such as a "bus" 3205, and perform information sending and receiving and processing.

[0239] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area for the programs. Furthermore, multiple addresses are assigned to the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in the "main memory" include a program for retaining disclosure permission information, a program for retaining third-party identification information, and an access control program. Furthermore, the "main memory" and "non-volatile memory" store disclosure permission information, third-party identification information, and the like.

[0240] The "CPU" executes a disclosure permission information retention program stored in the "main memory" to store in the "main memory" and "non-volatile memory" disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who accesses the health and medical related information about an individual via a network. The "CPU" also executes a third-party identification information retention program stored in the "main memory" to store in the "main memory" and "non-volatile memory" third-party identification information for identifying whether a third party who accesses the health and medical related information stored in the health and medical related information storage unit via a network is a medical professional or a non-medical professional. The "CPU" then executes an access control program stored in the "main memory" to enable viewing of the health and medical related information stored in the health and medical related information storage unit if the disclosure permission information indicates disclosure permission and the third-party identification information indicates a medical professional.

[0241] <Embodiment 9: Healthcare-related information management system: processing flow> 33 is a diagram showing the processing flow when using the health care related information management system of this embodiment. As shown in this diagram, the processing method comprises a disclosure permission information holding step S3306, a third party identification information holding step S3307, and an access control step S3308.

[0242] The "step of retaining disclosure permission information" S3306 is a step of retaining disclosure permission information indicating whether or not one's own health and medical care related information is to be made public to a third party who has accessed the health and medical care related information of an individual via a network.

[0243] The "third party identification information retention step" S3307 is a step of retaining third party identification information to identify whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via the network is a medical professional or a non-medical professional.

[0244] The "access control step" S3308 is a step in which, if the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a medical professional, the health and medical care-related information stored in the health and medical care-related information storage unit is made viewable.

[0245] <Summary> From the above, if the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a medical professional, the health and medical care-related information stored in the health and medical care-related information storage unit can be viewed.

[0246] <Embodiment 10 (corresponding mainly to claims 10, 25, and 40)> <Outline of Embodiment 10>

[0247] This embodiment is characterized in that it stores anonymization method information in addition to the features of embodiments 1 to 9. Hereinafter, the same functions, hardware configurations, and processing flows as those of embodiments 1 to 9 will be omitted as appropriate.

[0248] The functional configuration, hardware configuration, and processing flow of the healthcare-related information management system according to this embodiment will be described below.

[0249] <Functional Configuration of Embodiment 10> 34 is a diagram showing the functional configuration of the healthcare related information management system in this embodiment. The healthcare related information management system in this embodiment includes an anonymization method information storage unit.

[0250] <Embodiment 10: Healthcare-related information management system: functional configuration> FIG. 34 is a diagram showing the functional configuration of a health and medical care related information management system according to this embodiment.

[0251] <Configuration of Embodiment 10: Anonymization Method Information Storage Unit of Access Control Unit> The "anonymization method information storage unit" 3408 is configured to have a function of storing information indicating the anonymization method. Here, the anonymization method information may be, for example, information created by combining six-digit numbers, letters, symbols, etc., and may be information that can uniquely identify the anonymization method. Note that the anonymization method information may be registered, edited, and deleted by the administrator using the administrator terminal.

[0252] There are several methods for anonymization, and these are often used alone or in combination. The main anonymization methods are briefly explained below. "k-anonymization" (where k is a natural number greater than or equal to 2) refers to the process of creating a data set that contains k or more attributes (such as gender, age, place of residence, occupation, etc.) that cannot be used alone to identify an individual, but that can be used in combination to identify an individual with a high degree of probability, regardless of the combination of attribute values. "Pseudonymization" means replacing information with other descriptions, etc., using a method that does not have any regularity that allows deletion or restoration. "Generalization" means replacing the value of an attribute with a higher value or concept, such as dividing the age into 10 years or making cucumber a higher concept vegetable. "Top (bottom) coding" refers to grouping numerical attributes into particularly large or small attribute values. For example, people over 100 years old can be labeled as "over 100 years old." "Noise (error) addition" means adding random noise that follows a certain distribution to a numerical attribute. "Swapping (data exchange)" refers to (probabilistically) exchanging attribute values between records for categorical attributes. It is also called data swap. "Sampling" means randomly extracting a certain percentage or number of items from the entire original data. "Grouping" refers to replacing detailed items in attributes or history with certain groups or divisions.

[0253] <Configuration of Embodiment 10: Access Control Means of Access Control Unit> The "access control means" 3405 is configured to have a function for controlling access when a third party accesses the healthcare and medical care related information storage unit via a network, and to enable viewing of part (including all) of the healthcare and medical care related information stored in the healthcare and medical care related information storage unit, or healthcare and medical care related information that has been anonymized using a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a non-healthcare professional.

[0254] <Embodiment 10: Healthcare-related information management system: hardware configuration> Figure 35 is a diagram showing the hardware configuration of a healthcare-related information management system in this embodiment. As shown in this figure, the healthcare-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 3501 that performs various types of calculation processing, and a "main memory" 3502. It also includes a "non-volatile memory" 3503 that stores predetermined information, and a "network I / F" 3504 that sends and receives information to and from a third-party terminal 3506 and an administrator terminal 3507. These components are interconnected by a data communication path such as a "bus" 3505, and perform information sending and receiving and processing.

[0255] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU," and also provides a work area that is a work area for the programs. Furthermore, multiple addresses are assigned to the "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the program stored in the "main memory" is a program that holds anonymization method information. Furthermore, the "main memory" and "non-volatile memory" store anonymization method information and the like.

[0256] The "CPU" executes the anonymization method information retention program stored in the "main memory" to store anonymization method information indicating the anonymization method in the "main memory" and the "non-volatile memory." Then, it executes the access control program stored in the "main memory," and when the disclosure permission information indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-healthcare professional, it makes it possible to view part (including all) of the health care-related information stored in the health care-related information storage unit, or health care-related information that has been anonymized using a predetermined anonymization method.

[0257] <Embodiment 10: Healthcare-related information management system: processing flow> 36 is a diagram showing the processing flow when using the health care related information management system of this embodiment. As shown in this diagram, the processing method comprises an anonymization method information storage step S3608 and an access control step S3609.

[0258] The "anonymization method information storage step" S3608 is a stage for storing anonymization method information, which is information indicating a method for anonymizing health and medical care related information.

[0259] The "access control step" S3609 is a step in which, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional, part (including all) of the health and medical care-related information stored in the health and medical care-related information storage unit, or health and medical care-related information that has been anonymized using a predetermined anonymization method, is made available for viewing.

[0260] <Explanation of an example of anonymization method> 37 to 39 are diagrams showing an example of an anonymization method, which will be used to briefly explain an example of the anonymization method. The table shown in Figure 37 is a list of patients at a fictitious medical institution in Minato Ward, Tokyo, Japan, who have not yet been anonymized. It contains six attributes (name, age, gender, place of residence, religion, and disease name) and data for 12 individuals. Of these, "name" is information that constitutes personal data and may potentially identify an individual by itself. Furthermore, "age," "gender," "place of residence," "religion," and "disease name" are also pieces of personal data that are not accumulated over time. While they may not identify an individual by themselves, they may potentially identify an individual by combining them with other attributes or by matching them with external information. In particular, "disease name" is a highly sensitive attribute of personal data. This information corresponds to the individual's health and medical care-related information stored in the health and medical care-related information storage unit described above. In this case, the following process can be performed to achieve k-anonymity for a given value of k (k is a natural number greater than or equal to 2).

[0261] First, a process called "pseudonymization" is performed, replacing certain values of a certain attribute with an asterisk (*). All or some of the values in that column are replaced with "*". In the table shown in Figure 38, all values of "name" and all values of "religion" are replaced with "*". Next, a process called "generalization" is performed, replacing individual attribute values with a wider range. For example, for "age", "29 years old" is replaced with "20s" and "35 years old" is replaced with "30s". Furthermore, for "place of residence", the value consists of prefecture and city / ward / town / village, but the city / ward / town / village is deleted and replaced with only the prefecture. Figure 38 shows an anonymized table. Here, there are four equivalence classes with the same combination of quasi-identifiers ("age", "gender", and "place of residence").

[0262] Figure 39 shows an anonymized table grouped for easy understanding. As can be seen from this table, all groups (Group A to Group D) achieve 3-way anonymity for "age," "gender," and "place of residence." This is because any combination of these attributes results in three or more people. In this way, by anonymizing the health and medical care-related information about individuals stored in the health and medical care-related information storage unit described above, the risk of individuals being identified can be reduced.

[0263] <Summary> From the above, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional, it is possible to make viewable some (including all) of the health and medical care-related information stored in the health and medical care-related information storage unit, or health and medical care-related information that has been anonymized using a predetermined anonymization method. [Explanation of symbols]

[0264] Healthcare information management system: 200, 300 Health and Medical Information Storage Department: 201, 301 Access control section: 202, 302 Incentive Management Department: 203, 303 Provision history storage unit: 204, 304 Network: 205 Third party terminal: 206 Administrator terminal: 207

Claims

1. a health care related information storage unit for storing and managing health care related information about an individual; an access control unit for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network; an incentive management unit for providing incentives to individuals to encourage them to disclose their health and medical care-related information by referring to the disclosure history of the disclosure history storage unit described below when determining whether or not to allow disclosure of the health and medical care-related information of the individuals; a provision history storage unit that stores a provision history that is a history of providing incentives to each individual, A healthcare-related information management system in which the incentive management unit periodically communicates with the healthcare-related information accumulation unit and / or provision history storage unit to keep information on incentives up to date at all times.

2. The system further includes an incentive type information storage unit that stores incentive type information that indicates the types of multiple incentives, 2. The health and medical care related information management system according to claim 1, wherein the incentive management unit selects and provides incentives to individuals according to their incentive provision history based on incentive type information stored in an incentive type information storage unit.

3. a termination request receiving unit that receives a termination request from an individual who has stored their health and medical care-related information in the health and medical care-related information storage unit to stop or terminate the publication of their health and medical care-related information that has already been made public; a termination condition storage unit that stores termination conditions, which are conditions for determining whether termination is permitted based on information about the individual who made the termination request when the termination request is accepted; a decision rule storage unit that stores decision rules for determining whether to terminate the disclosure of health and medical care-related information based on information about the individual who made the termination request and the stored termination conditions; a termination determination unit that, when a termination request is received, determines whether to terminate the process based on information about the individual, the stored termination conditions, and the stored determination rules; a termination control unit that controls the access control unit to terminate the disclosure of the individual's health and medical care related information when the termination determination unit determines that the disclosure should be terminated; The health care related information management system according to claim 1, further comprising:

4. 2. The health care related information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.

5. 5. The health and medical care related information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating consent to accept the incentive provided by the incentive management unit, after authentication by the access authentication processing unit.

6. 6. The health care related information management system according to claim 5, further comprising an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive, when the consent information acquisition unit acquires consent information.

7. 2. The health and medical care related information management system according to claim 1, further comprising a disclosure permission information storage unit that stores disclosure permission information indicating whether an individual permits disclosure of his or her own health and medical care related information to third parties.

8. 8. The health care related information management system according to claim 7, further comprising a third party identification information storage unit that stores third party identification information for identifying whether the third party is a medical professional or a non-medical professional.

9. 9. The healthcare-related information management system according to claim 8, wherein the access control unit allows the healthcare worker to view the healthcare-related information stored in the healthcare-related information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information stored in the third-party identification information storage unit indicates that the third-party identification information is a healthcare worker.

10. 9. The healthcare and medical care related information management system of claim 8, wherein the access control unit allows the non-medical care worker to view part (including all) of the healthcare and medical care related information stored in the healthcare and medical care related information storage unit, or healthcare and medical care related information that has been anonymized using a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information stored in the third-party identification information storage unit indicates that the non-medical care worker is a non-medical care worker.

11. 11. The health and medical care related information management system of claim 10, wherein the anonymization method is at least one of the anonymization methods of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof.

12. 2. The health and medical related information management system of claim 1, wherein the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchen utensils, bedding, beds or pillows, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

13. 9. The health and medical related information management system of claim 8, wherein the medical professionals include at least one of doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiological technologists, radiological x-ray technicians, clinical laboratory technicians, sanitary laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

14. 9. The health and medical related information management system of claim 8, wherein the non-medical personnel include at least one of employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

15. A method executed by a CPU in a health care related information management system that is a computer, comprising: a health and medical care-related information accumulation step for accumulating and managing health and medical care-related information about an individual; an access control step for controlling disclosure of the health and medical care-related information accumulated in the health and medical care-related information accumulation step to a third party via a network; an incentive management step of providing incentives to the individual to encourage the disclosure of the health and medical care-related information by referring to the provision history in the provision history maintaining step described below regarding whether or not to permit the disclosure of the health and medical care-related information of the individual; a provision history maintaining step of maintaining a provision history that is a history of providing incentives to each individual; The incentive management step periodically communicates with the health and medical care related information accumulation step and / or the provision history retention step, thereby keeping the information on incentives up to date at all times.

16. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method further includes an incentive type information holding step for holding incentive type information that is information indicating the types of multiple incentives, 16. The method according to claim 15, wherein the incentive management step selects and provides an incentive to an individual in accordance with the incentive provision history based on the incentive type information stored in the incentive type information storage step.

17. A method executed by a CPU in a health care related information management system that is a computer, comprising: a termination request receiving step of receiving a termination request from an individual who has accumulated the health and medical care-related information in the health and medical care-related information accumulation step, the termination request being a request to stop or terminate the disclosure of the health and medical care-related information that has already been made public; a termination condition holding step for holding a termination condition, which is a condition for determining whether or not termination is permitted based on information about the individual who made the termination request when the termination request is accepted; a decision rule storage step for storing decision rules for determining whether or not to terminate the disclosure of health and medical care-related information based on information about the individual who made the termination request and the stored termination conditions; a termination decision step of deciding whether to terminate the service based on information about the individual, the stored termination conditions, and the stored decision rules when the termination request is accepted; a termination control step in which, when the determination result in the termination determination step is that the access should be terminated, the access control step controls the access to terminate the disclosure of the individual's health and medical care related information; 16. The method of claim 15 further comprising:

18. A method executed by a CPU in a health care related information management system that is a computer, comprising:

16. The method of claim 15, further comprising an access authentication processing step for authenticating access to said incentive management step.

19. A method executed by a CPU in a health care related information management system that is a computer, comprising:

19. The method according to claim 18, further comprising a consent information acquisition step of acquiring consent information, which is information indicating consent to receive the incentive by the incentive management step, after authentication in the access authentication processing step.

20. A method executed by a CPU in a health care related information management system that is a computer, comprising:

20. The method according to claim 19, further comprising an incentive providing processing step of performing an incentive providing process which is a process for providing an incentive when the consent information is acquired in the consent information acquiring step.

21. A method executed by a CPU in a health care related information management system that is a computer, comprising:

16. The method according to claim 15, further comprising a step of retaining disclosure permission information indicating whether an individual permits disclosure of his / her health care related information to a third party.

22. A method executed by a CPU in a health care related information management system that is a computer, comprising:

22. The method of claim 21, further comprising a third party identification information retaining step of retaining third party identification information for identifying whether the third party is a medical professional or a non-medical professional.

23. A method executed by a CPU in a health care related information management system that is a computer, comprising:

23. The method according to claim 22, wherein the access control step allows the medical professional to view the health and medical care-related information stored in the health and medical care-related information storage step if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a medical professional.

24. A method executed by a CPU in a health care related information management system that is a computer, comprising:

23. The method of claim 22, wherein, when the disclosure permission information held in the disclosure permission information holding step indicates that disclosure is permitted and the third-party identification information held in the third-party identification information holding step indicates that the third-party identification information is a non-medical professional, the access control step allows the non-medical professional to view part (including all) of the healthcare-related information accumulated in the healthcare-related information accumulation step, or the healthcare-related information that has been anonymized by a predetermined anonymization method.

25. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 24, wherein the anonymization method is performed by at least one of the following anonymization methods: k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof.

26. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method of claim 15, wherein the incentive management step provides incentives including one or more of the following: providing My Number points, providing individual information services or general information services to information providers, providing individual medicines or supplements, providing books, DVDs, Blu-rays, health equipment, kitchen utensils, bedding, beds or pillows, providing a password or ID for providing information, providing items that can be used on the network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, product coupons, travel coupons or cash.

27. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method of claim 22, wherein the medical professionals include at least one of a physician, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, orthoptist, speech-language-hearing therapist, prosthetist, radiological technologist, radiological technician, clinical laboratory technician, medical laboratory technician, clinical engineer, dental hygienist, dental technician, emergency medical technician, masseur, shiatsu therapist, acupuncturist, moxibustion therapist, judo therapist, registered dietitian, nutritionist, mental health worker, social worker, care worker, certified psychologist, clinical psychologist, and medical administrator.

28. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method of claim 22, wherein the non-medical personnel include at least one of employees belonging to a life insurance company, a non-life insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, a JA (agricultural cooperative), a health insurance association, an insurance association for associations, a mutual aid association, a municipal national health insurance, a national health insurance association, a PR company, a general research institute, a university and a graduate school (including affiliated research institutes), a technical college, an agriculture, forestry and fisheries company, a fertilizer manufacturer, a government agency, a local government, and an independent administrative agency.

29. a health and medical care-related information accumulation step for accumulating and managing health and medical care-related information about an individual; an access control step for controlling disclosure of the health and medical care-related information accumulated in the health and medical care-related information accumulation step to a third party via a network; an incentive management step of providing incentives to the individual to encourage the disclosure of the health and medical care-related information by referring to the provision history in the provision history maintaining step described below regarding whether or not to permit the disclosure of the health and medical care-related information of the individual; a provision history maintaining step of maintaining a provision history that is a history of providing incentives to each individual; is executed by a computer, which is a health care related information management system, The incentive management step is an operating program for the healthcare-related information management system that is written in a readable and executable manner on the healthcare-related information management system, which is a computer that periodically interacts with the healthcare-related information accumulation step and / or the provision history retention step to keep information about incentives up to date at all times.

30. The method further includes an incentive type information holding step for holding incentive type information that is information indicating the types of multiple incentives, 30. An operating program for the health and medical care related information management system, which is a computer according to claim 29, wherein the incentive management step selects and provides an incentive to an individual in accordance with the incentive provision history based on the incentive type information stored in the incentive type information storage step.

31. a termination request receiving step of receiving a termination request from an individual who has accumulated the health and medical care-related information in the health and medical care-related information accumulation step, the termination request being a request to stop or terminate the disclosure of the health and medical care-related information that has already been made public; a termination condition holding step for holding a termination condition, which is a condition for determining whether or not termination is permitted based on information about the individual who made the termination request when the termination request is accepted; a decision rule storage step for storing decision rules for determining whether or not to terminate the disclosure of health and medical care-related information based on information about the individual who made the termination request and the stored termination conditions; a termination decision step of deciding whether to terminate the service based on information about the individual, the stored termination conditions, and the stored decision rules when the termination request is accepted; a termination control step in which, when the determination result in the termination determination step is that the access should be terminated, the access control step controls the access to terminate the disclosure of the individual's health and medical care related information; 30. An operating program for the healthcare related information management system, which is written so as to be readable and executable by the healthcare related information management system, which is a computer according to claim 29, further comprising:

32. 30. An operating program for the health and medical care related information management system, which is written in a readable and executable manner on the health and medical care related information management system, which is a computer as described in claim 29, further comprising an access authentication processing step for performing authentication for accessing the incentive management step.

33. An operating program for the health and medical care related information management system, which is a computer as described in claim 32, further comprising a consent information acquisition step of acquiring consent information which is information indicating consent to accept the incentive through the incentive management step after authentication in the access authentication processing step.

34. An operating program for the health and medical care related information management system, which is a computer as described in claim 33, further comprising an incentive provision processing step that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

35. 30. An operating program for the health and medical care related information management system, which is a computer as described in claim 29, further comprising a disclosure permission information retention step for retaining disclosure permission information indicating whether an individual permits disclosure of their own health and medical care related information to third parties.

36. An operating program for the health and medical care related information management system, which is a computer as described in claim 35, further comprising a third party identification information retention step for retaining third party identification information for identifying whether the third party is a medical professional or a non-medical professional.

37. 37. An operating program for the healthcare related information management system, which is a computer according to claim 36, written in a readable and executable manner in the healthcare related information management system, wherein the access control step allows the healthcare related information stored in the healthcare related information storage step to be viewed by the healthcare related information storage step if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a healthcare professional.

38. 37. An operating program for the healthcare and medical care related information management system written in a readable and executable manner on the healthcare and medical care related information management system, which is a computer according to claim 36, wherein the access control step allows the non-healthcare worker to view part (including all) of the healthcare and medical care related information accumulated in the healthcare and medical care related information accumulation step, or the healthcare and medical care related information anonymized by a predetermined anonymization method, if the disclosure permission information held in the disclosure permission information holding step indicates disclosure is permitted and the third-party identification information held in the third-party identification information holding step indicates that the person is a non-healthcare worker.

39. The anonymization method is at least one of the anonymization methods of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof. An operating program for the healthcare related information management system that is a computer according to claim 38, the operating program being written in a manner that can be read and executed by the healthcare related information management system.

40. The incentive management step provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchen utensils, bedding, beds or pillows, provision of a password or ID for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash. An operating program for the health and medical related information management system written in a readable and executable manner on the health and medical related information management system, which is a computer as described in claim 29.

41. 37. An operating program for the health care related information management system written in a readable and executable manner on the health care related information management system which is a computer according to claim 36, wherein the medical professionals include at least one of: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, orthotists, diagnostic radiologists, diagnostic X-ray technicians, clinical laboratory technicians, public health technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

42. 37. The operating program of the health and medical related information management system written in a readable and executable manner on the health and medical related information management system, which is a computer as described in claim 36, wherein the non-medical personnel include at least one of employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

Images