Information processing system, information processing method and program

Abstract

To provide an information processing system, etc. capable of managing diagnostic information with further high security.SOLUTION: There is provided an information processing system. The information processing system includes at least one processor, and the processor is configured to execute the following steps by reading a program: an acquisition step of acquiring diagnostic information representing a result of a diagnosis on a subject and an identification code, where neither the diagnostic information nor the identification code includes information that can identify an individual subject, and the identification code is a code for identifying the subject; and a management step of managing the diagnostic information in association with the identification code.SELECTED DRAWING: Figure 7

Description

[Technical Field]

[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] Patent Document 1 discloses an image diagnosis support system capable of efficiently collecting necessary information to be used as a reference when diagnosing a case. This system includes a database, a search unit, and an output unit. The database stores, as medical information for each subject, first information including the types of tests the subject underwent, the order of each test, and the examination procedures; second information including medical images acquired by the tests; and third information including the details of treatments the subject underwent based on the test results, in association with each other. The search unit receives patient information for a subject and extracts second information and third information associated with first information of other subjects that partially or completely match the first information extracted from the diagnostic information of the subject and the first information extracted from the medical information of the other subjects. The output unit outputs the extracted second information and third information. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2019-079271 Summary of the Invention [Problem to be solved by the invention]

[0004] However, there is still room for improvement in the functionality of known technologies. For example, there is a demand for higher security technology, not only for handling medical images as disclosed in Patent Document 1, but also for protecting personal information corresponding to diagnostic information.

[0005] In view of the above circumstances, the present invention provides an information processing system and the like that can manage diagnostic information with higher security. [Means for solving the problem]

[0006] According to one aspect of the present invention, there is provided an information processing system. The information processing system includes at least one processor, and the processor is configured to execute the following steps by reading a program. In the acquisition step, diagnostic information indicating the results of a diagnosis on a subject and an identification code are acquired. Neither the diagnostic information nor the identification code includes information that can identify an individual subject, and the identification code is a code for identifying the subject. In the management step, the diagnostic information is managed in association with the identification code.

[0007] According to this aspect, the diagnostic information can be managed with higher security. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a configuration diagram illustrating an information processing system 1 according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing the hardware configuration of the server device 2. [Figure 3] FIG. 2 is a block diagram showing the hardware configuration of a terminal 3. [Figure 4] FIG. 2 is a block diagram showing a functional configuration of a server device 2 according to an embodiment. [Figure 5] 2 is a flowchart showing an outline of processing executed by the information processing system 1. [Figure 6] 2 is an activity diagram showing a specific example of processing executed by the information processing system 1. FIG. [Figure 7] FIG. 10 is a schematic diagram showing an example of an identification code Cd. [Figure 8] FIG. 10 is a schematic diagram showing an example of recombination of an identification code Cd. [Figure 9] FIG. 10 is a schematic diagram showing an example of reference information IF0. [Figure 10]10A and 10B are examples of screens of a browsing site for diagnostic information IF2, in particular, a login screen 5 is shown in FIG. 10A, and a browsing screen 6 is shown in FIG. [Figure 11] 1 shows an example of a voice input instruction screen 7 displayed on the display unit 34 of the terminal 3 (for example, the testing terminal in FIG. 6). [Figure 12] 1 shows an example of a recording screen 8 displayed on the display unit 34 of the terminal 3. [Figure 13] 1 shows an example of an evaluation result display screen 9 displayed on the display unit 34 of the terminal 3. DETAILED DESCRIPTION OF THE INVENTION

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the accompanying drawings. Various features shown in the following embodiments can be combined with each other.

[0010] Incidentally, the program for realizing the software appearing in one embodiment may be provided as a non-transitory computer-readable medium, or may be provided so that it can be downloaded from an external server, or may be provided so that the program is started on an external computer and its functions are realized on a client terminal (so-called cloud computing).

[0011] Furthermore, various information processing according to an embodiment may realize input and output corresponding to the input. Here, the form of information referenced in such information processing (hereinafter referred to as reference information) is not limited as long as an output is obtained as a result of the input. The reference information may be, for example, rule-based information such as a database, a lookup table, or a predetermined function (including a decision formula such as a regression formula constructed using a statistical method), a trained model that has previously trained the correlation between input and output, or a large-scale language model that can output a desired result by inputting a prompt.

[0012] In one embodiment, a "unit" may include, for example, a combination of hardware resources implemented by a circuit in the broad sense and software information processing that can be specifically realized by these hardware resources. In one embodiment, various information is handled, and this information is represented, for example, by physical values ​​of signal values ​​representing voltage and current, high and low signal values ​​as a binary bit set consisting of 0 or 1, or quantum superposition (so-called quantum bits), and communication and calculations can be performed on a circuit in the broad sense.

[0013] Furthermore, a circuit in the broad sense is a circuit realized by at least an appropriate combination of a circuit, circuitry, processor, memory, etc. The processor may be a general-purpose processor or a dedicated circuit. That is, it includes an application specific integrated circuit (ASIC), a programmable logic device (e.g., a simple programmable logic device (SPLD), a complex programmable logic device (CPLD), and a field programmable gate array (FPGA)), etc.

[0014] [Embodiment] 1. Hardware Configuration This section explains the hardware configuration.

[0015] 1.1 Information Processing System 1 FIG. 1 is a configuration diagram illustrating an information processing system 1 according to an embodiment. The information processing system 1 includes a server device 2 and a terminal 3, which are connected via a communication network 11. These components will be further described. Here, a system exemplified as the information processing system 1 is made up of one or more devices or components. Therefore, even the server device 2 or the terminal 3 alone is an example of a system. More specifically, the information processing system 1 may include an element selected from the group consisting of the server device 2 and the terminal 3. Furthermore, multiple server devices 2 or terminals 3 may be used. The unselected elements may not be included in the information processing system 1, but may be electrically connected to the selected elements as external elements.

[0016] 1.2 Server device 2 2 is a block diagram showing the hardware configuration of the server device 2. The server device 2 includes a communication bus 20, a communication unit 21, a storage unit 22, and a processor 23. The communication unit 21, the storage unit 22, and the processor 23 are electrically connected via the communication bus 20 inside the server device 2.

[0017] The communication unit 21 is preferably a wired communication means such as USB, IEEE1394, Thunderbolt (registered trademark), or wired LAN network communication, but may also include wireless LAN network communication, mobile communication such as 3G / LTE / 5G, or BLUETOOTH (registered trademark) communication as needed. That is, it is more preferable to implement it as a collection of multiple communication means. That is, the server device 2 may communicate various information from the outside via the communication unit 21 and the network.

[0018] The storage unit 22 stores various pieces of information defined above. This may be implemented as a storage device such as a solid state drive (SSD), a solid state hybrid drive (SSHD), a hard disk drive (HDD), a universal serial bus (USB) flash drive (USB memory), or an SD memory card that stores various programs and the like related to the server device 2 executed by the processor 23, or as a memory such as a random access memory (RAM) that stores temporarily required information (arguments, arrays, etc.) related to the program operations. The storage unit 22 stores various programs, variables, etc. related to the server device 2 executed by the processor 23.

[0019] The processor 23 processes and controls the overall operations related to the server device 2. The processor 23 is, for example, a central processing unit (CPU) (not shown). The processor 23 realizes various functions related to the server device 2 by reading out predetermined programs stored in the storage unit 22. That is, information processing by software stored in the storage unit 22 is specifically realized by the processor 23, which is an example of hardware, and can be executed as each functional unit included in the processor 23. These will be described in more detail in the next section. Note that the processor 23 is not limited to being single, and multiple processors 23 may be provided for each function. A combination of these may also be used. Furthermore, instead of the processor 23, some or all of these components may be realized by dedicated hardware such as the broadly defined circuit described above.

[0020] 1.3 Terminal 3 3 is a block diagram showing the hardware configuration of the terminal 3. The terminal 3 may be in any form, such as a smartphone, a tablet terminal, a computer, or any other device that can access the server device 2 via an electric communication line. The terminal 3 includes a communication bus 30, a communication unit 31, a storage unit 32, a processor 33, a display unit 34, an input unit 35, and a reading unit 36. The communication unit 31, the storage unit 32, the processor 33, the display unit 34, the input unit 35, and the reading unit 36 ​​are electrically connected via the communication bus 30 inside the terminal 3. The description of the communication unit 31, the storage unit 32, and the processor 33 is omitted here because they are the same as the description of each unit in the server device 2.

[0021] The display unit 34 displays a screen of a graphical user interface (GUI) that can be operated by the user. The display unit 34 may be included in the housing of the terminal 3 or may be externally attached. Specifically, the display unit 34 may be implemented as a display device such as a CRT display, a liquid crystal display, an organic EL display, or a plasma display. It is preferable that these display devices are implemented by selectively using them depending on the type of the terminal 3.

[0022] The input unit 35 accepts operation inputs made by the user. The operation inputs are transferred as command signals to the processor 33 via the communication bus 30. The processor 33 can execute predetermined control or calculations based on the transferred command signals as necessary. The input unit 35 may be included in the housing of the terminal 3 or may be externally attached. For example, the input unit 35 may be implemented as a touch panel integrated with the display unit 34. When the input unit 35 is implemented as a touch panel, the user can input tap operations, swipe operations, etc. to the input unit 35. Instead of a touch panel, the input unit 35 may be implemented as a switch button, a mouse, a QWERTY keyboard, etc. Furthermore, the input unit 35 is not limited to the above-mentioned input operations by contact, and may also be implemented as equipment that accepts audio input from a microphone, etc.

[0023] The reader 36 is configured to read an identification code Cd (described later). For example, the identification code Cd is a one-dimensional code or a two-dimensional code, and the reader 36 is an optical reader. The optical reader is a device equipped with an optical sensor and a signal processing function, and is capable of reading the target identification code Cd, such as a one-dimensional code. The optical reader operates by detecting the black and white stripes on the one-dimensional code with an optical sensor and converting the pattern into a digital signal. The digital signal is analyzed by the signal processing function, and the information contained in the one-dimensional code is extracted. Of course, the reader 36 is not limited to an optical reader. If the identification code Cd is a magnetic stripe, the reader 36 may be a magnetic reader. If the identification code Cd is an NFC tag, the reader 36 may be an NFC reader.

[0024] 2. Functional configuration Next, each functional configuration of the terminal 3 of the information processing system 1 will be described with reference to Fig. 4. Fig. 4 is a block diagram showing the functional configuration of the server device 2 according to one embodiment. As shown in Fig. 4, the processor 23 executes various programs stored in the storage unit 22, thereby functioning as an acquisition unit 231, a reception unit 232, a management unit 233, a transmission unit 234, and a presentation unit 235. In other words, information processing by software stored in the storage unit 22 is specifically realized by the processor 23, which is an example of hardware, and can be executed as each functional unit included in the processor 23.

[0025] The acquisition unit 231 is configured to acquire various pieces of information as an acquisition step. Specifically, the acquisition unit 231 is configured to receive information via the communication unit 21 or the storage unit 22 and read the information into the working memory. Preferably, the acquisition unit 231 acquires diagnostic information IF2 indicating the result of the diagnosis for the subject and an identification code Cd. Details will be described later.

[0026] The reception unit 232 is configured to receive various information or inputs as reception steps. Preferably, the reception unit 232 receives, as a first reception step, an instruction to further bind the second code to a first code other than the first code to which it is subordinate. Also preferably, the reception unit 232 receives, as a second reception step, a request from the user to access the desired diagnostic information IF2. Furthermore, preferably, the reception unit 232 further receives, as a third reception step, a request from the user to access the diagnostic information IF2 or a site where the diagnostic information IF2 can be viewed (e.g., login screen 5). Details will be described later.

[0027] The management unit 233 is configured to manage various pieces of information as a management step. "Managing" means maintaining a state in which various pieces of information are stored in a storage medium and at least this information can be acquired, modified, deleted, etc. The storage medium that stores the various pieces of information may be the storage unit 22 of the server device 2, an external storage medium, or may be managed in a distributed manner using blockchain technology. Preferably, the management unit 233 manages the diagnostic information IF2 in association with the identification code Cd. Details will be described later.

[0028] The transmitting unit 234 is configured to transmit various information as a transmitting step. Preferably, when the transmitting unit receives an access request, the transmitting unit transmits a password input request to the user. Details will be described later.

[0029] As a presentation step, the presentation unit 235 presents various pieces of information stored in the storage unit 22 in a manner recognizable to the user. For example, the presentation unit 235 may cause a screen containing various pieces of information to be displayed on the display unit 34 of the terminal 3 in a visible manner. This allows various pieces of information to be presented to various users operating the terminal 3. The presentation unit 235 also controls the display unit 34 of the terminal 3 to display visual information such as screens, images, icons, and messages. The presentation unit 235 may generate only rendering information for displaying the visual information on the display unit 34. Preferably, as a first presentation step, the presentation unit 235 presents desired diagnostic information IF2 to the user in response to an access request. Preferably, as a second presentation step, the presentation unit 235 presents diagnostic information IF2 or a site to the user when the password is authenticated. Details will be described later.

[0030] 3. Information Processing Method This section describes an information processing method executed by the information processing system 1. Note that the order of processes included in the information processing method can be changed as appropriate, multiple processes may be executed simultaneously, or some processes may be omitted.

[0031] 3.1 Overview As described above, the information processing system 1 includes at least one processor 23, and the processor 23 is configured to execute the following steps by reading a program. In other words, the information processing method includes the following steps of the information processing system 1. From another perspective, the program causes a computer to execute the following steps of the information processing system 1. FIG. 5 is a flowchart showing an outline of the processing executed by the information processing system 1. Each step shown in FIG. 5 will be described below.

[0032] First, as an acquisition step, the acquisition unit 231 acquires diagnostic information IF2 indicating the results of the diagnosis of the subject and an identification code Cd (step S001). Neither the diagnostic information IF2 nor the identification code Cd contains information that can identify the individual subject. The identification code Cd is a code for identifying the subject. As a management step, the management unit 233 manages the diagnostic information IF2 in association with the identification code Cd (step S002). According to this embodiment, even if the diagnostic information IF2 is leaked, it becomes difficult to identify the individual subject corresponding to the diagnostic information IF2, thereby achieving highly secure management.

[0033] 3.2 Specific examples Specific examples may be included within the scope defined in the above-mentioned overview. In the specific examples, the following situation is assumed: First, an administrator who manages the server device 2 provides a highly secure management service for diagnostic information IF2 (hereinafter referred to as the service). In other words, the administrator is the service provider of the service. Various medical facilities where medical professionals such as doctors and nurses work use the service. Each medical facility is assigned a facility code Cd1 by, for example, the administrator to identify the medical facility itself. Furthermore, to ensure security, it is assumed that a database that allows an overview of the facility codes Cd1 assigned to each medical facility is not stored in the memory unit 22 of the server device 2. Below, we focus on a certain medical facility assigned a single facility code Cd1.

[0034] A test for cognitive function is being conducted at a certain medical facility. That is, in one embodiment, the subject is a person who is at risk of cognitive decline and is undergoing a test for cognitive function at a medical facility. In other words, the diagnostic information IF2 includes information regarding the subject's cognitive function. According to this embodiment, it becomes difficult to identify subjects with cognitive decline, and fraud targeting such subjects can be prevented. Preferably, the test for cognitive function is conducted based on voice input from the subject. Details will be described in Section 4.4.

[0035] At the medical facility, each patient, including the subject, is assigned a personal code Cd2 to identify them. The medical facility is equipped with a testing terminal (terminal 3) used for conducting tests and a viewing terminal (terminal 3) for viewing diagnostic information IF2, such as past test results. Medical professionals such as doctors and nurses can use this service to register new diagnostic information IF2, which is the test results of the subject, and / or view already registered diagnostic information IF2.

[0036] 6 is an activity diagram showing a specific example of processing executed by the information processing system 1. Below, an explanation will be given along with each activity shown in FIG.

[0037] First, the process from acquiring diagnostic information IF2 to managing it in server device 2, i.e., the process related to activities A101 to A107, will be described. First, a patient visits a medical facility and presents their patient card. A personal code Cd2 is attached to the patient card as, for example, a one-dimensional code, and reader 36 in terminal 3 reads personal code Cd2 (activity A101). Terminal 3 then accepts personal code Cd2.

[0038] Next, a test on the cognitive function of the subject is started. In the test on cognitive function, the processor 33 of the terminal 3, which is the test terminal, causes the display unit 34 to display a screen including voice input instructions to the subject (activity A102). Next, the subject utters the voice instructed on the screen via a microphone, which is an example of the input unit 35, and the processor 33 of the terminal 3 accepts the voice input (activity A103). Next, the cognitive function of the subject is evaluated based on the input voice (activity A104). The process related to this evaluation may be performed by the processor 33 of the terminal 3 or may be performed via an external server (not shown). Thereafter, diagnostic information IF2, which is the evaluation result of the cognitive function, is transmitted to the server device 2 via the communication unit 31 of the terminal 3 and the communication network 11 (activity A105).

[0039] The server device 2 receives the transmitted diagnostic information IF2 via the communication network 11 and the communication unit 21, and stores the diagnostic information IF2 in the storage unit 22 (activity A106). That is, the acquisition unit 231 acquires the diagnostic information IF2. Then, the management unit 233 manages the acquired diagnostic information IF2 in association with an identification code Cd including at least a facility code Cd1 and a personal code Cd2 (activity A107). Note that the identification code Cd may be provided from the terminal 3 to the server device 2 at any timing. For example, when the personal code Cd2 is read in activity A101, the personal code Cd2 and the facility code Cd1 may be combined and transmitted to the server device 2. Alternatively, the identification code Cd may be transmitted together with the diagnostic information IF2 in activity A105.

[0040] Next, a process for viewing already registered diagnostic information IF2 using terminal 3, which is a viewing terminal, i.e., a process related to activities A201 to A208, will be described. First, a medical professional such as a doctor or nurse attempts to access a viewing site using browser software installed on terminal 3, which is a viewing terminal (activity A201). That is, processor 33 transmits an access request to server device 2 via communication unit 31 and communication network 11 (activity A202). When server device 2 receives the access request, transmission unit 234 transmits a password input request to terminal 3 via communication unit 21 and communication network 11 (activity A203). That is, a screen for inputting, for example, a user ID and password (hereinafter referred to as "password, etc.") is displayed on display unit 34 of terminal 3. Such an example will be described later.

[0041] Next, the processor 33 accepts input of a password or the like by the medical professional via the input unit 35 such as a keyboard (activity A204). The accepted password or the like is sent to the server device 2 via the communication unit 31 and the communication network 11, and authentication processing is executed (activity A205). At this time, if the password or the like is not authenticated, for example, a message indicating that authentication has not been accepted is displayed, and the screen transitions to the state before the access request was sent. If the password or the like is authenticated, the presentation unit 235 displays the browsing site on the display unit 34 of the terminal 3 so that it can be viewed by the medical professional (activity A206). In other words, the medical professional operating the terminal 3 can browse the browsing site.

[0042] Thereafter, the processor 33 receives an input of a desired identification code Cd by the medical professional via the input unit 35 (activity A207). As described above, at least one piece of diagnostic information IF2 is associated with the identification code Cd in the storage unit 22 of the server device 2, and this input serves as an access request for the diagnostic information IF2 from the terminal 3 to the server device 2. The medical professional can view at least one piece of desired diagnostic information IF2 associated with the input identification code Cd (activity A208). In other words, the receiving unit 232 receives an access request for the desired diagnostic information IF2 from the medical professional (an example of a user) as a second receiving step. The access request includes the identification code Cd associated with the desired diagnostic information IF2. As a first presenting step, the presenting unit 235 presents the desired diagnostic information IF2 to the user in response to the access request. According to this embodiment, the user can obtain the desired diagnostic information IF2.

[0043] In the process related to activity A207, the identification code Cd may be read by the reading unit 36 ​​instead of being input by the input unit 35. In such a case, the reading by the reading unit 36 ​​constitutes an access request. In other words, the access request is issued when at least a part of the identification code Cd is read by the reading unit 36. This embodiment allows the user to more easily request the desired diagnostic information IF2. As mentioned above, the identification code Cd is not limited to a one-dimensional code but may be a two-dimensional code, a magnetic stripe, or an NFC tag. Accordingly, the reading unit 36 ​​is not limited to an optical reader but may be a magnetic reader or an NFC reader.

[0044] The above is the flow of processing according to the specific example. Note that the assumptions and flow of processing described above are merely examples and are not limited to these.

[0045] 4. Related technical matters The following describes in detail technical matters related to the above-mentioned information processing method.

[0046] 4.1 Identification Code Cd FIG. 7 is a schematic diagram showing an example of an identification code Cd. As shown in FIG. 7A, the identification code Cd is defined by a character string based on a predetermined rule. The identification code Cd may be composed of, for example, a facility code Cd1 indicating a medical facility, a personal code Cd2 indicating an individual subject, and a check digit Cd3. In this example, the facility code Cd1 is a four-digit character string, the personal code Cd2 is a five-digit character string, and the check digit Cd3 is a one-digit character string. According to this embodiment, the identification code Cd can be defined in a simple manner.

[0047] The check digit Cd3 is a special digital test value used to verify data integrity. It is typically calculated for each data item in a data set and used to verify the validity of the data. The check digit Cd3 is calculated based on a unique algorithm and is usually added to the end of the data. If the data is changed, the value of the check digit Cd3 also changes, making it possible to detect data tampering or errors. In this way, the check digit Cd3 is an important means of ensuring the reliability and integrity of data.

[0048] FIG. 7B shows an example of a specific identification code Cd. The identification code Cd is "T31f103247," the facility code Cd1 is "T31f," the personal code Cd2 is "10324," and the check digit Cd3 is "7." In this way, the identification code Cd may include an embodiment in which the facility code Cd1 (an example of a first code) is combined with the personal code Cd2 (a second code). This embodiment allows the identification code Cd to be defined in a simple manner. More specifically, it should be noted that the identification code Cd is defined in a format in which the second code (e.g., personal code Cd2) is subordinate to the first code (e.g., facility code Cd1).

[0049] A facility code Cd1 may be assigned to each medical facility. Furthermore, codes may also be assigned to the terminal 3 installed within the medical facility and to equipment such as medical devices (not shown). Even in such a case, the identification code Cd may be defined in such a manner that a personal code Cd2 is subordinate to a code related to the medical device. In other words, the identification code Cd includes a first code indicating the location where the diagnosis was performed or the equipment used for the diagnosis, and a personal code Cd2 (an example of a second code) subordinate to the first code for identifying the subject. This embodiment provides two-stage code management, further improving security. Furthermore, when the first code includes both the facility code Cd1 and the aforementioned code related to the medical device, the administrator providing this service may manage them separately, or may manage only the facility code Cd1 and delegate management of the code related to the medical device to each medical facility.

[0050] FIG. 8 is a schematic diagram showing an example of recombining an identification code Cd. In this example, if an identification code Cd exists in which facility code Cd1 "T31f" and personal code Cd2 "10324" are combined, a new identification code Cd is generated by combining facility code Cd1 "O22k" and personal code Cd2 "10324." For example, assume that facility code Cd1 "T31f" is a medical facility located in Tokyo, and facility code Cd1 "O22k" is a medical facility located in Osaka. It is also possible that the two medical facilities are related and share a personal code Cd2. In such a case, the subordinate facility code Cd1 can be changed, as shown in FIG. 8.

[0051] Such a change may be realized, for example, by sending a predetermined request to the server device 2 via the terminal 3 of the medical facility with facility code Cd1 "T31f" or the medical facility with facility code Cd1 "O22k." In other words, as a first reception step, the reception unit 232 receives an instruction to further combine the second code with a dependent first code and another first code. The management unit 233 manages the new identification code Cd issued based on the instruction. According to this embodiment, a new identification code Cd can be easily issued when the same subject uses a different institution or medical device.

[0052] More preferably, even when the second code is further combined with another first code, the management unit 233 manages the original identification code Cd including the second code and the subordinate first code. For example, as described above, even when a new identification code Cd is generated by combining the facility code Cd1 "O22k" with the personal code Cd2 "10324," the original identification code Cd "T31f103247" should continue to be managed. That is, the identification code Cd "T31f103247" and the identification code Cd "O22k103247" can coexist under the management of the server device 2. This embodiment ensures the uniqueness of the identification code Cd. In particular, when the subordinate code is changed, the diagnostic information IF2 associated with the original identification code Cd should be associated with the new identification code Cd. In this case, the association between the original identification code Cd and the diagnostic information IF2 may be released, or past information may remain associated with both identification codes Cd, or not only past information but also diagnostic information IF2 that may be registered in the future may be associated with both identification codes Cd. In the latter case, the new identification code Cd functions as an alias of the original identification code Cd, which is useful when both medical facilities cooperate to support the subject.

[0053] 4.2 Reference Information IF0 FIG. 9 is a schematic diagram showing an example of reference information IF0. The illustrated reference information IF0 manages personal codes Cd2 and personal information IF3 relating to individuals corresponding to each personal code Cd2. In this example, the personal information IF3 corresponding to identification code Cd "10324" is the name "Takken Taro," gender "male," age "64," and address "3-4-3 Kasumigaseki, Chiyoda-ku, Tokyo." The personal information IF3 corresponding to identification code Cd "20325" is the name "Saiban Hanako," gender "female," age "71," and address "4-2 Hayabusa-cho, Chiyoda-ku, Tokyo." The personal information IF3 corresponding to identification code Cd "10326" is the name "Oshitani Masamune," gender "male," age "38," and address "5th floor, TODA BUILDING Aoyama, 8-5-34 Akasaka, Minato-ku, Tokyo." These are merely examples and are not limiting.

[0054] For the administrator managing the server device 2, the personal information IF3 corresponding to the personal code Cd2 is not necessary for providing this service, and therefore the reference information IF0 may be managed in a storage medium other than the storage unit 22 of the server device 2. For example, the reference information IF0 may be managed in a terminal 3 of the medical facility that issued the personal code Cd2 or in a network storage (not shown). Preferably, the reference information IF0 is a lookup table, and when the reading unit 36 ​​reads the one-dimensional code printed on the patient registration card, the reference information IF0 is accessed and the personal information IF3 of the subject corresponding to the read identification code Cd is displayed in an overview format on the medical staff terminal 3.

[0055] If the reading unit 36 ​​is not implemented, the reference information IF0 may be a file containing table data created using general-purpose, commercially available spreadsheet software. In such a case, a medical professional may refer to the file using the terminal 3 and input an identification code Cd for accessing the desired reference information IF0 via the input unit 35. In summary, the identification code Cd is a code that can identify the subject using the reference information IF0. The reference information IF0 is managed in a storage medium (e.g., the storage unit 32 of the terminal 3) different from the identification code Cd managed together with the diagnostic information IF2 in the server device 2. According to this embodiment, unless two or more servers are hacked, personal information IF3, which indicates to whom the diagnostic information IF2 belongs, will not be leaked, thereby achieving more secure management.

[0056] 4.3 Entering passwords etc. 10A shows an example of a screen of the viewing site for diagnostic information IF2, and in particular, FIG. 10A shows a login screen 5, and FIG. 10B shows a viewing screen 6. As mentioned above, it is preferable that the viewing site allows viewing of diagnostic information IF2 when a password or the like is authenticated.

[0057] The login screen 5 shown in FIG. 10A includes an input field 51, an input field 52, and a button 53. The input field 51 is configured to accept input of a user ID. The input field 52 is configured to accept input of a password corresponding to the user ID. The user ID may be an account assigned to each medical professional by an administrator, or the first code such as the facility code Cd1 described above may be used as is. When the button 53 is pressed with the user ID and password entered in the input fields 51 and 52, communication between the terminal 3 and the server device 2 begins, and authentication of the password and the like is performed.

[0058] The viewing screen 6 shown in FIG. 10B includes an input field 61 and an area 62. The input field 61 is configured to accept input of an identification code Cd. It is preferable that the input field 61 accept input of the identification code Cd by reading it using the reading unit 36, instead of manual input using a keyboard or the like. In this example, the identification code Cd is displayed. However, instead of the identification code Cd, a facility code Cd1 and a personal code Cd2 may be separated and entered into separate input fields. Furthermore, if the user ID is the facility code Cd1 itself or is linked to the facility code Cd1, the facility code Cd1 may be displayed as text on the screen rather than as an input field. In either case, when an appropriate identification code Cd is entered into the input field 61, corresponding diagnostic information IF2 is displayed in the area 62. The diagnostic information IF2 may be specific information, or if there is multiple diagnostic information IF2, a list of the diagnostic information IF2 may be displayed first.

[0059] Furthermore, the present invention is not limited to the example shown in FIG. 10 , and may be implemented such that the identification code Cd is input first, and then the input of a password or the like is requested when attempting to access specific diagnostic information IF2. In summary, in a third receiving step, the receiving unit 232 receives a request from the user to access diagnostic information IF2 or a site where the diagnostic information IF2 can be viewed (e.g., login screen 5). When the transmission unit 234 receives the access request, it transmits a request to the user to input a password or the like. In a second presentation step, the presentation unit 235 presents the diagnostic information IF2 or a site (e.g., viewing screen 6) to the user when the password or the like is authenticated. According to this embodiment, it is possible to achieve management with higher security.

[0060] 4.4 Cognitive function tests (Instruction screen 7) 11 shows an example of a voice input instruction screen 7 displayed on the display unit 34 of the terminal 3 (for example, the testing terminal in FIG. 6). The voice input instruction screen 7 has a character 71, an area 72 in which instructions to the subject are displayed, and a button 73.

[0061] As shown in FIG. 11, the character 71 has an appearance that imitates, for example, the appearance of a female medical professional. The character 71 is used as a character that instructs the subject on the specific content of the voice input. For example, if the subject is a woman, the character 71 having a female appearance may be selected. Furthermore, the appearance of the character 71 is not limited to a person, but may also be an animal, a fictional character, or the like.

[0062] As shown in FIG. 11, an instruction to the subject is displayed in area 72: "Please say 'katama' five times in a row." The instruction displayed in area 72 is also presented to the subject through auditory information at the same time. This allows the subject to recognize the intonation of the speech before recording the audio. The character 71 may also be displayed to change in response to the auditory information presented to the subject.

[0063] Furthermore, the visual information IF1 that changes in conjunction with the auditory information is not limited to the character 71. For example, the text information IF11 displayed in the area 72 may be displayed in a manner that changes in conjunction with the auditory information. This allows the subject to better understand the contents of the test. Therefore, when testing the subject for cognitive decline, the subject's psychological anxiety can be reduced.

[0064] 11, button 73 is a button for starting voice input by the subject. For example, when the presentation unit 235 receives input to button 73 from the subject or a medical professional, it transitions the content displayed on the display unit 34 from the instruction screen 7 in FIG. 11 to the recording screen 8 in FIG. 12.

[0065] (Recording screen 8) 12 shows an example of the recording screen 8 displayed on the display unit 34 of the terminal 3. The recording screen 8 includes an area 81, an area 82, a record button 83, a stop button 84, an area 85, an area 86, and an area 87.

[0066] Area 81 is an area where instructions regarding speech are displayed to the subject. As shown in FIG. 12, the instruction "After tapping the record button, please read the following aloud" is drawn in area 81. Area 82 is an area where the specific speech content to be spoken by the subject is displayed. As shown in FIG. 12, area 82 displays the speech content "Katama (5 times)."

[0067] The record button 83 is a button for starting recording. When the processor 33 receives input to the record button 83 from the subject or medical professional, it acquires voice data of the subject's speech. The stop button 84 is a button for stopping recording. When the processor 33 receives input to the stop button 84 from the subject or medical professional, it stops acquiring the voice data.

[0068] Area 85 is an area where it is visibly displayed that the subject's voice is being recorded. When processor 33 receives input from the subject or medical professional via record button 83, it displays "REC" in area 85. When processor 33 receives input from the subject or medical professional via stop button 84, it stops displaying "REC" in area 85.

[0069] Area 86 is an area where the elapsed time from the start of recording is visibly displayed. As shown in FIG. 12, area 86 may display the elapsed time using object IF14. Area 86 may also display the elapsed time using text information IF15 "00:02.00." Area 86 may also visibly display the remaining time.

[0070] Area 87 is an area where information indicating the timing of the subject's speech is displayed. As shown in FIG. 12, area 87 displays information "katamakatama" indicating the content of the subject's speech. Furthermore, the character information displayed in area 87 includes black character information IF12 and white character information IF13. As an example, when the timing to speak arrives, the appearance of the characters indicating the content of the speech is changed from white character information IF13 to black character information IF12. In the example of FIG. 12, the next word that the subject will speak is "ma," and when the timing to speak arrives, the white character information IF13 "ma" changes to black character information.

[0071] Here, the manner in which the timing of speech can be grasped is not limited to this. For example, the manner in which the characters indicating the content of speech are emphasized may change as the timing of speech arrives. Furthermore, the manner in which the characters are emphasized may change to return to their original manner as the timing of speech ends.

[0072] Furthermore, the instruction indicating the timing of speech is not limited to a change in the appearance of characters. For example, an object with the appearance of a metronome may be displayed in area 87. The object displayed in area 87 may be presented to the user in the form of a pendulum needle moving left and right in time with the timing of the subject's speech. Also, for example, an object with the appearance of clapping hands may be displayed in area 87. The object displayed in area 87 may be presented to the user in the form of clapping hands in time with the timing of the subject's speech. According to such an embodiment, the subject can speak while understanding the timing and rhythm of the speech. Therefore, it is possible to obtain voice data that reflects the subject's original speaking state.

[0073] Here, the information indicating the presence or absence or degree of cognitive decline is not limited to a particular format, but preferably includes information indicating a stage in numbers as an evaluation value. More preferably, the evaluation value may be classified into "normal," "cognitive decline," "risk of cognitive decline," or "risk of dementia" depending on the stage. In one embodiment, an example will be described in which the information indicating the presence or absence or degree of cognitive decline is information indicating a stage in numbers. Note that "cognitive decline" refers to mild cognitive impairment, which is a precursor to mild dementia. Furthermore, "dementia" includes mild dementia, moderate dementia, and severe dementia.

[0074] (Evaluation result display screen 9) 13 shows an example of the evaluation result display screen 9 displayed on the display unit 34 of the terminal 3. The evaluation result display screen 9 includes an area 91, an area 92, an area 93, and a remeasurement button 94.

[0075] Preferably, area 91 is an area where information on cognitive decline, which is the subject of evaluation, is displayed. As shown in FIG. 13, area 91 displays "audio evaluation result of cognitive function" as the subject of evaluation. Also preferably, area 92 is an area where measurement result 921 is displayed. In the example of FIG. 13, area 92 displays information that "cognitive function is at a normal level" as measurement result 921.

[0076] More preferably, area 93 is an area where a comparison result 931 showing a comparison between the current evaluation result and the previous evaluation result is displayed when the subject has previously received the same evaluation. For example, comparison result 931 is evaluated based on the amount of change in current evaluation value 934 relative to the previous evaluation value 935, which will be described later. In the example of Fig. 13, area 93 displays information saying "no change" as comparison result 931 showing the comparison with the previous evaluation.

[0077] Preferably, an item 932 "this time", an item 933 "last time", a current evaluation value 934, and a previous evaluation value 935 are further displayed so as to be visible to the subject in the area 93. In the example of Fig. 13, for example, the speech of the subject is evaluated in both the previous measurement and the current measurement and determined to be "normal".

[0078] This allows the subject to understand the level of their own cognitive function, and also allows the progress of the user's cognitive decline to be quantitatively evaluated.

[0079] [others] The information processing system 1 according to the above embodiment may be configured as follows.

[0080] At least one of the devices included in the information processing system 1 may be installed outside Japan. For example, the server device 2 or a server may be installed outside Japan, and the terminal 3 may be installed inside Japan. Similarly, a medical professional may access the server device 2 installed inside Japan from outside Japan using his / her own terminal 3. According to such an embodiment, a more convenient experience can be provided to the user through various management forms.

[0081] In one embodiment, the acquiring unit 231, the accepting unit 232, the managing unit 233, the transmitting unit 234, and the presenting unit 235 are described as functional units implemented by the processor 23 of the server device 2, but at least some of these may be implemented as functional units implemented by another server. Alternatively, they may be implemented as functional units implemented by the processor 33 of the terminal 3. Furthermore, the various pieces of information described in the above example may be stored not only in the storage unit 22 of the server device 2, but also in a distributed manner in other external devices.

[0082] In one embodiment, the test on the cognitive function of the subject is described as being performed by a medical professional using a terminal 3 (test terminal) installed in a medical facility, but instead, the service may be provided by selling or distributing a terminal 3 (dedicated terminal) by an administrator of the server device 2. Furthermore, the test may be performed by the subject himself using a terminal 3 such as a smartphone that he or she owns.

[0083] In one embodiment, a test related to cognitive function is exemplified, but the test is not limited to this and may be a test related to mental illness, or a test performed using a medical imaging diagnostic device such as an MRI, CT scanner, or X-ray diagnostic device. It should be noted that even the diagnostic information IF2 acquired through these tests is associated with the identification code Cd and managed by the management unit 233.

[0084] In one embodiment, the reference information IF0 is exemplified by a lookup table or a file created by a spreadsheet software, but is not limited to this and may be a decryption program that can decrypt personal information from the identification code Cd. Furthermore, the reference information IF0 may be managed by a server managed by a third party instead of being managed by each medical facility.

[0085] The identification code Cd may include other codes. The identification code Cd may include a code related to a medical device or a code related to the date and time of the examination. Furthermore, the diagnostic information IF2 does not include personal information IF3, but may include the date and time of the examination. Furthermore, in one embodiment, although a name is treated as an example of personal information IF3, there is also a definition that a name does not fall under personal information, so a mode in which the subject's name is included in the diagnostic information IF2 may be adopted. However, even in such a case, information other than the name, such as age and address, definitely falls under personal information IF3 and is therefore not included in the diagnostic information IF2.

[0086] When accessing the Service, measures may be added to further strengthen security. For example, unauthorized access using programs can be prevented by various measures, such as authentication using character reading called CAPTCHA or by clicking a check box that says "I am not a robot."

[0087] In one embodiment of the present service, the diagnostic information IF2 and the identification code Cd are associated and managed in the server device 2, but information about prescriptions may also be associated. In such a case, a pharmacist may use a terminal 3 installed in a pharmacy to newly register information about the prescription in association with the identification code Cd, or may view information about existing prescriptions associated with the identification code Cd. In this embodiment, even drug prescriptions are included in the present service, further improving convenience.

[0088] The method by which pharmacies can access prescription information may involve assigning an ID and password to each pharmacy or pharmacist, allowing access only to prescription information based on that information, or it may involve logging into a website dedicated to pharmacies or pharmacists. In the above case, it is preferable that the information accessible to pharmacists or pharmacies does not include diagnostic information IF2, regardless of the login method. By not including diagnostic information IF2, prescription information can be digitized while maintaining security. Furthermore, when a subject transfers to another hospital, the referral letter itself may also be sent by the information processing system 1. Furthermore, when a referral letter is linked to the information processing system 1 and sent as described above, a method may be used in which a notification is sent to the original medical institution after a certain period of time has elapsed, and the linked data is returned to the original medical institution. Furthermore, the data linked to the referral letter may be deleted after the receiving medical institution confirms receipt.

[0089] Furthermore, it may be provided in the following aspects.

[0090] (1) An information processing system comprising at least one processor, the processor being configured to execute each of the following steps by reading a program: in an acquisition step, diagnostic information indicating the results of a diagnosis on a subject and an identification code are acquired, wherein neither the diagnostic information nor the identification code contains any information that can identify the individual subject, and the identification code is a code for identifying the subject; and in a management step, the diagnostic information is managed in association with the identification code.

[0091] According to this embodiment, even if diagnostic information is leaked, the specified rules will not be known, making it difficult to identify the individual subject corresponding to the diagnostic information, thereby enabling highly secure management.

[0092] (2) In the information processing system described in (1) above, the identification code is a code that can identify the subject using reference information, and the reference information is managed in a storage medium different from the identification code.

[0093] According to this embodiment, unless two or more servers are hacked, personal information about who the diagnostic information belongs to will not be leaked, thereby enabling management with higher security.

[0094] (3) In the information processing system described in (1) or (2) above, the identification code includes a first code indicating the location where the diagnosis was performed or the equipment used for the diagnosis, and a second code that is subordinate to the first code and is used to identify the subject.

[0095] According to this embodiment, two-stage code management is achieved, which can further improve security.

[0096] (4) In the information processing system described in (3) above, the identification code includes a form in which the first code and the second code are combined.

[0097] According to this embodiment, the identification code can be defined in a simple manner.

[0098] (5) In the information processing system described in (4) above, in the first reception step, an instruction to further combine the second code with a first code other than the first code to which it is subordinate is received, and in the management step, a system that manages a new identification code issued based on the instruction.

[0099] According to this embodiment, when the same subject uses a different institution or medical device, a new identification code can be easily issued.

[0100] (6) In the information processing system described in (5) above, in the management step, even if the second code is further combined with another first code, the original identification code including the second code and the dependent first code is managed.

[0101] According to this aspect, it is possible to ensure the uniqueness of the identification code.

[0102] (7) In the information processing system according to any one of (1) to (6) above, the identification code is defined by a character string based on a predetermined rule.

[0103] According to this embodiment, the identification code can be defined in a simple manner.

[0104] (8) In the information processing system according to any one of (1) to (7) above, the diagnostic information includes information on the cognitive function of the subject.

[0105] According to this embodiment, it becomes difficult to identify subjects with impaired cognitive function, and fraud targeting such subjects can be prevented.

[0106] (9) In the information processing system described in any one of (1) to (8) above, a second reception step further receives a user's request for access to desired diagnostic information, wherein the access request includes an identification code associated with the desired diagnostic information, and a first presentation step presents the desired diagnostic information to the user in response to the access request.

[0107] According to this aspect, the user can obtain desired diagnostic information.

[0108] (10) In the information processing system described in any one of (1) to (9) above, a third reception step further receives a user's request for access to the diagnostic information or a site where the diagnostic information can be viewed, a transmission step sends the user a request to enter a password when the access request is received, and a second presentation step presents the diagnostic information or the site to the user when the password is authenticated.

[0109] According to this embodiment, management with higher security can be realized.

[0110] (11) In the information processing system described in (9) or (10) above, the access request is issued by reading at least a part of the identification code with a reading unit.

[0111] According to this aspect, the user can more easily request the desired diagnostic information.

[0112] (12) An information processing method, comprising the steps of the information processing system according to any one of (1) to (11) above.

[0113] According to this embodiment, even if diagnostic information is leaked, the specified rules will not be known, making it difficult to identify the individual subject corresponding to the diagnostic information, thereby enabling highly secure management.

[0114] (13) A program that causes a computer to execute each step of the information processing system according to any one of (1) to (11) above.

[0115] According to this embodiment, even if diagnostic information is leaked, the specified rules will not be known, making it difficult to identify the individual subject corresponding to the diagnostic information, thereby enabling highly secure management. Of course, this is not the case.

[0116] Finally, while various embodiments of the present disclosure have been described, they are presented as examples and are not intended to limit the scope of the invention. The novel embodiments may be embodied in various other forms, and various omissions, substitutions, and modifications may be made without departing from the spirit of the invention. Such embodiments and modifications are intended to be included within the scope and spirit of the invention, as well as within the scope of the inventions and their equivalents as defined in the claims. [Explanation of symbols]

[0117] 1: Information processing system 11: Communication Network 2: Server device 20: Communication bus 21: Communications Department 22: Storage section 23: Processor 231: Acquisition Department 232: Reception 233: Management Department 234: Transmission unit 235: Presentation section 3: Terminal 30: Communication bus 31: Communications Department 32: Storage section 33: Processor 34: Display section 35: Input section 36: Reading unit 5: Login screen 51: Input field 52: Input field 53: Button 6: Viewing screen 61: Input field 62 :Area 7: Instruction screen 71: Character 72 :Area 73: Button 8: Recording screen 81 :Area 82 :Area 83: Record button 84: Stop button 85 :Area 86 :Area 87 :Area 9: Evaluation result display screen 91: area 92: area 921: Measurement result 93 :Area 931 :Comparison result 932 :Item 933 :Item 934: Rating value 935: Rating value 94: Remeasurement button Cd: Identification code Cd1: Facility code CD2: Personal Code Cd3: Check digit IF0 : Reference Information IF1: Visual information IF11: Character information IF12: Character information IF13: Character information IF14 :Object IF15: Text information IF2: Diagnostic information IF3: Personal Information

Claims

1. An information processing system, At least one processor is provided, the processor being configured to execute the following steps by reading a program: In the acquisition step, diagnostic information indicating the result of the diagnosis of the subject and an identification code are acquired, Neither the diagnostic information nor the identification code includes information that can identify the individual subject; the identification code is a code for identifying the subject, In the management step, the system manages the diagnostic information in association with the identification code.

2. 2. The information processing system according to claim 1, the identification code is a code that can identify the subject by using reference information, A system in which the reference information is managed in a storage medium different from the identification code.

3. 2. The information processing system according to claim 1, The identification code is a first code indicating the location where the diagnosis was made or the equipment used to make the diagnosis; a second code for identifying the subject, the second code being subordinate to the first code.

4. 4. The information processing system according to claim 3, The system, wherein the identification code includes a combined form of the first code and the second code.

5. 5. The information processing system according to claim 4, Furthermore, in the first receiving step, an instruction to further combine the second code with a first code other than the first code to which the second code depends is received; In the management step, the system manages new identification codes issued based on the instructions.

6. 6. The information processing system according to claim 5, In the management step, the system manages the original identification code including the second code and the dependent first code even when the second code is further combined with another first code.

7. 2. The information processing system according to claim 1, A system in which the identification code is defined by a character string based on predetermined rules.

8. 2. The information processing system according to claim 1, The diagnostic information includes information regarding the subject's cognitive function.

9. 2. The information processing system according to claim 1, moreover a second receiving step of receiving a request from a user to access desired diagnostic information, wherein the access request includes an identification code associated with the desired diagnostic information; In a first presentation step, the system presents the desired diagnostic information to the user in response to the access request.

10. 2. The information processing system according to claim 1, moreover In a third receiving step, a request for access to the diagnostic information or a site where the diagnostic information can be viewed is received from a user; In the transmitting step, when the access request is accepted, a password input request is transmitted to the user; In a second presentation step, if the password is authenticated, the system presents the diagnostic information or the site to the user.

11. 10. The information processing system according to claim 9, A system in which the access request is issued by reading at least a portion of the identification code with a reader.

12. An information processing method, comprising: A method comprising the steps of the information processing system according to any one of claims 1 to 11.

13. A program, A program that causes a computer to execute each step of the information processing system according to any one of claims 1 to 11.

Images