Medical support system, authentication method, and program

Abstract

To enable easy authentication for patients receiving cognitive function-related medical treatment, while maintaining a certain level of security. [Solution] The medical information server performs voiceprint authentication as primary authentication for patients logging into the medical information server regarding cognitive function. This authentication involves comparing the voice input into the medical treatment terminal with the patient's registered voice data stored in the medical information server. Upon successful primary authentication, the medical information server prompts the medical treatment terminal to display patient-specific information associated with the registered voice data whose voiceprint matches. Based on the patient's response indicating whether the presented patient-specific information corresponds to them, the server determines whether secondary authentication has been successful. Upon successful secondary authentication, the medical treatment terminal is permitted to access the medical information.

Description

[Technical Field]

[0001] The present invention relates to a medical care support system, an authentication method, and a program. [Background Art]

[0002] A technology is known in which authentication is performed respectively using three pieces of biometric information of a user, i.e., a fingerprint, a voiceprint, and an iris pattern read by a mobile terminal, and three pieces of pre-registered biometric information of the user, i.e., a fingerprint, a voiceprint, and an iris pattern, and login is enabled when authentication is successful for two or more of the three pieces of biometric information (see, for example, Patent Document 1). [Prior Art Literature] [Patent Literature]

[0003] [Patent Document 1] Japanese Unexamined Patent Application Publication No. 2005-148819 [Summary of the Invention] [Problem to be Solved by the Invention]

[0004] When accessing information (medical information) related to an examinee receiving medical care for cognitive function, and when performing login using the examinee's authentication information, it is preferable to enable easy authentication even for an examinee whose cognitive function decline is progressing to a certain extent. However, simply enabling easy authentication may result in weak security.

[0005] In consideration of the above problem, an object of the present invention is to enable easy authentication while maintaining a certain level or higher security for login by an examinee receiving medical care for cognitive function. [Means for Solving the Problem]

[0006] One aspect of the present invention, which solves the above-mentioned problems, comprises a medical treatment terminal and a medical information server, wherein the medical treatment terminal includes: a voice data acquisition unit that acquires voice data corresponding to the input voice; a primary authentication processing unit that transmits the voice data acquired by the voice data acquisition unit to the medical information server as primary authentication information; a patient information storage unit that stores patient information for each patient, which associates patient-specific information unique to the patient with registered voice data registered in advance corresponding to the patient; a medical information storage unit that stores medical information related to the patient's cognitive function for each patient; and primary authentication by determining whether or not registered voice data whose voiceprint matches the voice data as primary authentication information transmitted from the medical treatment terminal exists in the patient information stored in the patient information storage unit. The medical support system comprises: a primary authentication unit that determines whether or not the authentication has been successful; a confirmation information transmission unit that, when primary authentication is successful on the medical information server, transmits patient-specific information associated with the matching registered voice data to the medical support terminal as confirmation information corresponding to secondary authentication; a secondary authentication processing unit that, when primary authentication is successful on the medical support terminal, displays the confirmation information transmitted from the medical support terminal, accepts input of confirmation information to determine whether or not the displayed secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information; a secondary authentication unit that, when the medical information server indicates that the secondary authentication information transmitted from the medical support terminal corresponds to the patient, determines that secondary authentication has been successful; and an access control unit that, in response to the success of secondary authentication, controls the medical support terminal to allow access to the patient information of the corresponding patient.

[0007] One aspect of the present invention is an authentication method in a medical support system comprising a medical treatment terminal and a medical information server, comprising: a voice data acquisition step in which a voice data acquisition unit in the medical treatment terminal acquires voice data corresponding to an input voice; a primary authentication processing step in which a primary authentication processing unit in the medical treatment terminal transmits the voice data acquired in the voice data acquisition step to the medical information server as primary authentication information; a patient information storage step in which a patient information storage unit in the medical information server stores patient information for each patient, associating patient-specific information unique to the patient with registered voice data registered in advance corresponding to the patient; a medical information storage step in which a medical information storage unit in the medical information server stores medical information related to the patient's cognitive function for each patient; and a primary authentication unit in the medical information server transmits patient information stored in the patient information storage step, where registered voice data whose voiceprint matches the voice data as primary authentication information transmitted from the medical treatment terminal. The authentication method includes: a primary authentication step of determining whether primary authentication has been achieved based on whether or not the patient exists in the specified location; a confirmation information transmission step in which, if primary authentication has been achieved, the confirmation information transmission unit in the medical information server transmits patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication; a secondary authentication processing step in which, if primary authentication has been achieved, the secondary authentication processing unit in the medical treatment terminal presents the confirmation information transmitted from the medical treatment terminal, accepts input of confirmation information to determine whether or not the presented secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information; a secondary authentication step in which, if the secondary authentication unit in the medical information server indicates that the secondary authentication information transmitted from the medical treatment terminal corresponds to the patient, the secondary authentication step of determining that secondary authentication has been achieved; and an access control step in which, in response to the achievement of secondary authentication, the access control unit in the medical information server controls the medical treatment terminal to allow access to the patient information of the corresponding patient.

[0008] One aspect of the present invention relates to a medical support system comprising a medical treatment terminal and a medical information server, wherein the system includes a first program for causing a first computer to function as the medical treatment terminal and a second program for causing a second computer to function as the medical information server, wherein the first program causes the first computer to function as a voice data acquisition unit that acquires voice data corresponding to input voice, the first program causes the first computer to function as a primary authentication processing unit that transmits the voice data acquired by the voice data acquisition unit to the medical information server as primary authentication information, the second program causes the second computer to function as a patient information storage unit that stores patient information for each patient, which associates patient-specific information unique to the patient with registered voice data registered in advance corresponding to the patient, the second program causes the second computer to function as a medical information storage unit that stores medical information related to the patient's cognitive function for each patient, and the second program causes registered voice data whose voiceprint matches the voice data as primary authentication information transmitted from the medical treatment terminal to the medical information server The second computer functions as a primary authentication unit that determines whether primary authentication has been achieved based on whether or not the patient information stored in the patient information storage unit exists; the second program functions as a confirmation information transmission unit that transmits patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication when primary authentication is achieved; the first program functions as a secondary authentication processing unit that presents confirmation information transmitted from the medical treatment terminal, accepts input of confirmation information to determine whether or not the presented secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information; the second program functions as a secondary authentication unit that determines that secondary authentication has been achieved when the secondary authentication information transmitted from the medical treatment terminal indicates that it corresponds to the patient; and the second program functions as an access control unit that controls the medical treatment terminal to enable access to the patient information of the corresponding patient in accordance with the achievement of secondary authentication. [Effects of the Invention]

[0009] According to the present invention, it becomes possible to easily authenticate logins by patients receiving treatment for cognitive function while maintaining a certain level of security. [Brief explanation of the drawing]

[0010] [Figure 1] This figure shows an example of the overall configuration of the medical support system in this embodiment. [Figure 2] This figure shows the primary authentication screen and the secondary authentication screen in this embodiment. [Figure 3] This figure shows an example of the functional configuration of the medical treatment terminal in this embodiment. [Figure 4] This figure shows an example of the functional configuration of the medical information server in this embodiment. [Figure 5] This figure shows an example of the structure of patient information in this embodiment. [Figure 6] This figure shows an example of the structure of medical information in this embodiment. [Figure 7] This figure shows an example of the processing procedure that the medical treatment terminal and the medical information server in this embodiment perform in response to login authentication for logging into the medical information website. [Modes for carrying out the invention]

[0011] <First Embodiment> [Example of an overall configuration of a medical support system] Figure 1 shows an example of the overall configuration of the medical support system of this embodiment. The medical support system of this embodiment supports medical treatment related to cognitive function. In this embodiment, "medical treatment" is a concept that includes at least some of the following: examination, consultation, diagnosis, and treatment.

[0012] As shown in FIG. 1, one or more medical practice institutions 10 can use the medical assistance system of the present embodiment. The medical practice institution 10 may be, for example, a medical institution, a business operator such as an elderly care provider, or a local government that provides services for the elderly.

[0013] The medical practice institution 10 includes a medical service corresponding terminal 100. The medical service corresponding terminal 100 is a terminal used in the corresponding medical practice institution 10 to access medical information of an examinee who receives medical treatment related to cognitive function. The medical service corresponding terminal 100 is communicably connected to the medical information server 300 via a network.

[0014] A medical service corresponding application having a function of accessing medical information may be installed in the medical service corresponding terminal 100. A microphone 200 is connected to the medical service corresponding terminal 100. The microphone 200 collects the voice of the examinee. The medical service corresponding application of the medical service corresponding terminal 100 uses voice data obtained by collection by the microphone 200 for login authentication to log in to a medical information website when accessing the examinee's medical information stored in the medical information server 300. Note that a microphone built into the medical service corresponding terminal 100 may be used instead of the microphone 200.

[0015] The medical service corresponding terminal 100 may be a personal computer, a tablet terminal, a smartphone or the like with the medical service corresponding application installed therein. In addition, the medical service corresponding terminal 100 may be configured as a dedicated device for medical service corresponding in which a function corresponding to the medical service corresponding application is implemented.

[0016] The medical information server 300 stores information related to medical treatment for each examinee (a medical information database). The medical information server 300 has a function as a web server that provides medical information on a website in response to access from the medical service corresponding terminal 100.

[0017] In addition, the medical information server 300 stores examinee information (an examinee information database) for each examinee used for login authentication. The examinee information may include voice data registered in advance for the corresponding examinee (registered voice data) and personal information unique to the corresponding examinee (examinee unique information). For example, the registered voice data may be registered as voice data recorded in advance for an examinee who is going to receive medical treatment at a medical institution 10. Alternatively, the registered voice data may be registered as voice data recorded for an examination or the like when the examinee previously received medical treatment at the medical institution 10. As described above, in the present embodiment, medical information corresponding to an examinee and examinee information are stored so as to be managed as separate pieces of information, respectively.

[0018] The medical information server 300 executes authentication processing for an examinee in response to a login authentication request from the medical correspondence terminal 100. The medical information server 300 permits the medical correspondence terminal 100 to access the medical information of the corresponding examinee when the authentication is successfully completed. The medical correspondence terminal 100 accesses the permitted medical information and outputs the medical information by displaying or the like.

[0019] [Example of Login Authentication Procedure] An example of the login authentication procedure according to the present embodiment will be described with reference to FIGS. 2(A) and 2(B). When it is determined to access the medical information of an examinee receiving medical treatment at a medical institution 10, a medical staff member of the medical institution 10 operates the medical correspondence terminal 100 to activate a medical correspondence application. The medical staff member operates the activated medical correspondence application to perform an operation for declaring that login authentication will be performed (login authentication declaration operation). The following operations of the medical correspondence terminal 100 are performed by the activated medical correspondence application.

[0020] In this embodiment, login authentication is performed using a two-step multi-factor authentication process. Upon execution of the login authentication declaration operation, the medical institution 10 displays a screen corresponding to primary authentication, which is the first step of multi-factor authentication (primary authentication screen), on its display unit.

[0021] Figure 2(A) shows an example of a primary authentication screen. In this embodiment, voiceprint authentication is performed as the primary authentication. In the primary authentication screen shown in the figure, a speech content display area AR11 and a recording button BT11 are arranged. The speech content presentation area AR11 is an area that presents the content (string of characters) that the examinee is asked to utter in order to obtain voice data to be used for voiceprint authentication. There are no particular limitations on the content of the utterance, but specifically, in the speech content presentation area AR11 in the figure, an example is shown in which the utterance "pataka pataka pataka" is presented. The utterance "pataka" is one of the utterances that is considered suitable for use in the diagnosis of cognitive function.

[0022] The recording button BT11 is the button used to initiate audio recording. Furthermore, the recording button BT11 may also function as a button to stop audio recording while recording is in progress.

[0023] The medical staff member starts recording by operating the recording button BT11, and then asks the patient to speak into the microphone the content of the speech presented in the speech content presentation area AR11. Once the patient has finished speaking, the medical staff member stops recording. The recorded audio may be stored in the medical treatment terminal 100. In this case, the medical treatment terminal 100 may be capable of playing back the recorded audio in response to the operation. By being able to play back the recorded audio in this way, the medical staff can accurately determine whether or not the recorded audio is of sufficient quality to be used for voiceprint authentication. Furthermore, the medical treatment terminal 100 may be capable of retrying the recording after the audio has been recorded by operating the recording button BT11 again. Once the medical staff member has finished recording the voice message, they will, for example, operate the authentication instruction button BT12 to initiate the primary authentication process. In the diagram, an example is shown where the authentication instruction button BT12 displays "Start Analysis".

[0024] In response to the operation of the authentication instruction button BT12, the medical treatment terminal 100 sends a primary authentication request, including recorded voice data, to the medical information server 300. The medical information server 300, upon receiving a primary authentication request, performs voiceprint authentication on the voice data included in the received primary authentication request. At this time, the medical information server 300 analyzes the voice data included in the received primary authentication request and compares the feature quantities obtained with the feature quantities of registered voice data contained in the patient information database stored on its own to determine whether or not there is registered voice data whose voiceprint matches that of the voice data included in the received primary authentication request. If registered voice data with a matching voiceprint exists, the medical information server 300 determines that primary authentication has been successful; if no registered voice data with a matching voiceprint exists, it determines that primary authentication has failed. If the medical information server 300 determines that primary authentication has been successful, it sends patient-specific information associated with the registered voice data whose voiceprint matches to the medical treatment terminal 100 as confirmation information to be used for secondary authentication.

[0025] The medical treatment terminal 100 displays a secondary authentication screen upon receiving confirmation information. The secondary authentication screen is used for the second stage of authentication (secondary authentication) in login authentication as multi-factor authentication in this embodiment.

[0026] Figure 2(B) shows an example of a secondary authentication screen. This secondary authentication screen includes a confirmation information display screen AR21, an affirmative button BT21, and a negative button BT22. The confirmation information display screen AR21 is the screen where the received confirmation information is displayed. In the diagram, the case where the confirmation information is the patient's name is used as an example. On the confirmation information display screen AR21 in the diagram, a message prompting confirmation of the name, which is the confirmation information, is displayed, for example, "Is your name ○○ ○○?"

[0027] The medical staff member asks the patient to confirm whether the name displayed on the confirmation information display screen AR21 is indeed their own. If the patient confirms that the name displayed on the confirmation information display screen AR21 is theirs, the medical staff member prompts the patient to operate the affirmative button BT21. The patient operates the affirmative button BT21. When the affirmative button BT21 is operated, the medical treatment terminal 100 sends a secondary authentication request to the medical information server 300 indicating that the confirmation information is correct. On the other hand, if the medical staff confirms that the name displayed on the confirmation information display screen AR21 is not their own, they prompt the patient to operate the negation button BT22. The patient operates the negation button BT22. When the negation button BT22 is operated, the medical treatment terminal 100 sends a secondary authentication request to the medical information server 300 indicating that the confirmation information is incorrect.

[0028] When the medical information server 300 receives a secondary authentication request indicating its legitimacy, it determines that secondary authentication has been successful and grants the medical treatment terminal 100 access to the patient's medical information. On the other hand, if the medical information server 300 receives a secondary authentication request indicating that it is incorrect, it determines that the secondary authentication was unsuccessful and prohibits the medical treatment terminal 100 from accessing the patient's medical information.

[0029] Furthermore, the patient's voice stored in the medical treatment terminal 100 during primary authentication may be erased at a predetermined time after the primary authentication request has been sent. By erasing the patient's voice in this way, security, such as the protection of the patient's personal information, can be enhanced.

[0030] [Example of functional configuration for a medical treatment terminal] Referring to Figure 3, an example of the functional configuration of the medical treatment terminal 100 will be explained. The medical treatment terminal 100 may be configured with hardware such as a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), and storage devices such as an HDD (Hard Disk Drive) or SSD (Solid State Drive). The medical treatment terminal 100 may also be equipped with a GPU (Graphics Processing Unit) as hardware. The functions of the medical treatment terminal 100 shown in the figure are realized by the CPU and GPU equipped in the medical treatment terminal 100 executing programs.

[0031] The medical treatment terminal 100 in the figure comprises a communication unit 101, an input / output interface unit 102, a user interface unit 103, a control unit 104, and a storage unit 105. The communication unit 101 is connected to the medical information server 300 via the network, enabling communication between them.

[0032] The input / output interface unit 102 is a functional unit that performs input and output of data and signals with various devices. In this embodiment, a microphone 200 is connected to the input / output interface unit 102. The input / output interface unit 102 may output audio data input from the microphone 200 to the control unit 104.

[0033] The user interface unit 103 is a functional unit that corresponds to the user interface. The user interface unit 103 includes controls and input devices provided on the medical treatment terminal 100, as well as input devices connected to the medical treatment terminal 100, and accepts input information corresponding to operations performed on the controls and input devices. The user interface unit 103 also includes a display unit for displaying images. The user interface unit 103 may include a touch panel that allows for image display and operation on the display surface. Furthermore, the user interface unit 103 may include a sound output unit that outputs electronic sounds or voices.

[0034] The control unit 104 performs various controls on the medical treatment terminal 100. The control unit 104 in the figure includes an audio data acquisition unit 141, a primary authentication processing unit 142, and a secondary authentication processing unit 143. The examination result presentation unit 144 corresponds to the second embodiment described later, so its description is omitted here. The audio data acquisition unit 141 acquires audio data of the sound picked up by the microphone 200. The primary authentication processing unit 142 executes the processing corresponding to primary authentication in login authentication. The secondary authentication processing unit 143 executes the processing corresponding to secondary authentication in login authentication.

[0035] The memory unit 105 stores various types of information corresponding to the medical treatment terminal 100. For example, the memory unit 105 may store the patient's voice data recorded during primary authentication.

[0036] [Example of a medical information server's functional configuration] Referring to Figure 4, an example of the functional configuration of the medical information server 300 will be described. The medical information server 300 may be configured with hardware such as a CPU, ROM, RAM, and storage devices such as HDDs and SSDs. The medical information server 300 may also be equipped with a GPU as hardware. The functions of the medical information server 300 shown in the figure are realized by the CPU and GPU equipped in the medical information server 300 executing programs.

[0037] The medical information server 300 in the figure comprises a communication unit 301, a control unit 302, and a storage unit 303. The communications unit 301 communicates with the medical treatment terminal 100 via the network.

[0038] The control unit 302 performs various controls on the medical information server 300. The control unit 302 includes a primary authentication unit 321, a confirmation information transmission unit 322, a secondary authentication unit 323, and an access control unit 324. Note that the inspection unit 325 corresponds to the second embodiment described later, so its individual explanation will be omitted.

[0039] The primary authentication unit 321 uses the audio data included in the primary authentication request sent from the medical treatment terminal 100 to perform primary authentication in login authentication.

[0040] When the primary authentication unit 321 determines that primary authentication has been successful, the confirmation information transmission unit 322 transmits patient-specific information corresponding to registered voice data whose voiceprint matches the voice data included in the primary authentication request to the medical treatment terminal 100 as confirmation information to be used for secondary authentication.

[0041] The secondary authentication unit 323 performs secondary authentication in response to a secondary authentication request sent from the medical treatment terminal 100. The secondary authentication unit 323 determines that secondary authentication is successful if the transmitted secondary authentication request indicates a positive result, and determines that secondary authentication is unsuccessful if the transmitted secondary authentication request indicates an error.

[0042] The access control unit 324 controls whether or not the medical treatment terminal 100 can access medical information. If secondary authentication is successful, the access control unit 324 allows login to the website that provides medical information and access to the medical information of the target patient on the website. If primary or secondary authentication is unsuccessful, the access control unit 324 refuses login to the website that provides medical information. Refusal of login also prohibits access to medical information.

[0043] The storage unit 303 stores various types of information from the medical information server 300. The storage unit 303 includes a patient information database (DB) storage unit 331 and a medical information database storage unit 332. The patient information database (DB) storage unit 331 stores the patient information database. The medical information database (DB) storage unit 332 stores the medical information database.

[0044] Figure 5 shows an example of the structure of patient information corresponding to one patient in the patient information database. The patient information in this figure includes the fields for patient ID, patient-specific information, and registered voice data. The Patient ID field stores a unique patient ID that identifies the corresponding patient. The patient-specific information field stores patient-specific information registered for the corresponding patient. In correspondence with the secondary authentication screen in Figure 2(B), the patient-specific information includes the name of the corresponding patient. The Registered Voice Data field stores the registered voice data that has been pre-registered as the voice data of the corresponding patient. The registered voice data is compared with the voice data included in the primary authentication request during primary authentication, which is voiceprint authentication. The Registered Voice Data field may also store feature quantities obtained by analyzing the registered voice data.

[0045] Figure 6 shows an example of the structure of medical information corresponding to one patient in a medical information database. The medical information in this figure includes the fields for patient ID, basic patient information, and medical history information. The Patient ID field stores a unique patient ID that identifies the corresponding patient. The patient basic information field stores patient basic information. Patient basic information is basic information about the patient, and may include, for example, the patient's name, age, gender, address, telephone number, and insurance card number. The medical history information field stores the medical history information of the corresponding patient. The medical history information shows the results of the medical treatments the corresponding patient has received at any of the medical institutions 10 to date. The medical institution 10 may, for example, register medical information showing the results of each treatment with the medical information server 300 using the medical treatment terminal 100 each time a treatment is performed.

[0046] [Example of processing procedure] Referring to the flowchart in Figure 7, an example of the processing procedure performed by the medical treatment terminal 100 and the medical information server 300 in response to login authentication for logging into the medical information website will be explained.

[0047] First, an example of the processing procedure performed by the medical treatment terminal 100 will be described. The processing procedure of the medical treatment terminal 100 shown in the figure is performed while the medical treatment application is running. Step S100: In the medical treatment terminal 100, the user interface unit 103 accepts a login operation.

[0048] Step S102: In response to the login operation being accepted, the primary authentication processing unit 142 displays the primary authentication screen (Figure 2(A)) on the display unit.

[0049] Step S104: The medical staff member operates the recording button BT11 on the primary authentication screen to enter a recording state, and instructs the patient to speak the utterance presented in the utterance content presentation area AR11 into the microphone 200. While recording is in progress, the audio data acquisition unit 141 acquires the audio signal picked up by the microphone 200 as, for example, digital audio data. The audio data acquisition unit 141 may perform recording by storing the acquired audio data in the storage unit 105. Recording is stopped when the recording stop operation is performed.

[0050] Step S106: After the recording in step S104 has stopped, for example, if the medical staff member operates the authentication instruction button BT12 on the primary authentication screen, the primary authentication processing unit 142 sends a primary authentication request to the medical information server 300. The primary authentication request includes the audio data recorded in step S104.

[0051] Step S108: In response to the transmission of the primary authentication request in step S106, the medical information server 300 sends either confirmation information indicating that primary authentication has been successful or a primary authentication error notification indicating that secondary authentication has not been successful as the primary authentication result. The secondary authentication processing unit 143 determines whether the received primary authentication result is confirmation information or not.

[0052] Step S110: If it is determined in step S108 that confirmation information has been received, the secondary authentication processing unit 143 displays the secondary authentication screen (Figure 2(B)) on the display unit. On the confirmation information presentation screen AR21 of the secondary authentication screen, a message is displayed prompting the recipient to confirm the received confirmation information.

[0053] Step S112: The examinee confirms whether the confirmation information presented on the confirmation information display screen AR21 applies to them ("correct" or "incorrect"), and then performs a confirmation operation according to the confirmation result. The confirmation operation is an operation by the examinee on the affirmative button BT21 or the negative button BT22. The secondary authentication processing unit 143 accepts the confirmation operation.

[0054] Step S114: In response to the confirmation operation being accepted in step S112, the secondary authentication processing unit 143 sends confirmation information indicating the result of the confirmation operation to the medical information server 300.

[0055] Step S116: In response to the transmission of confirmation information in Step S114, the medical information server 300 sends either the URL of the medical information screen webpage or a secondary authentication error notification to the medical treatment terminal 100 as the secondary authentication result, depending on whether secondary authentication is successful or not. The access control unit 324 determines whether the received secondary authentication result is the URL of the medical information screen web page (whether secondary authentication is successful or not).

[0056] Step S118: If the received secondary authentication result is the URL of the medical information screen webpage, the control unit 104 logs in to the medical information website and accesses the received URL. At this time, since access to the received URL is permitted by the medical information server 300, the control unit 104 displays the accessed medical information webpage on the display unit.

[0057] Step S120: If it is determined in step S108 that a primary authentication error notification has been received as the primary authentication result, or if it is determined in step S116 that a secondary authentication error notification has been received as the secondary authentication result, the control unit 104 executes error handling processing. In this case, the medical information server 300 rejects the login. As part of the error handling processing, the control unit 104 may display a notification on the display unit indicating that the login failed because primary or secondary authentication was unsuccessful.

[0058] Next, we will describe an example of a processing procedure performed by the medical information server 300. Step S200: In the medical information server 300, the primary authentication unit 321 receives the primary authentication request sent from the medical treatment terminal 100 in step S106.

[0059] The following steps S202 to S208 correspond to primary authentication. Step S202: The primary authentication unit 321 searches for registered voice data whose voiceprint matches the voice data included in the received primary authentication request by comparing the voice data included in the received primary authentication request with the registered voice data stored in the recipient information database.

[0060] Step S204: The primary authentication unit 321 determines whether or not primary authentication has been successful. The primary authentication unit 321 determines that primary authentication has been successful if it has found registered voice data that matches the voice data and voiceprint included in the primary authentication request received in step S202. On the other hand, the primary authentication unit 321 determines that primary authentication has been unsuccessful if it has not found registered voice data that matches the voice data and voiceprint included in the primary authentication request received in step S202.

[0061] Step S206: If it is determined in step S204 that the primary authentication was unsuccessful, the primary authentication unit 321 sends a primary authentication error notification to the medical treatment terminal 100. After the processing in step S206, the processing shown in the figure may be terminated.

[0062] Steps S208-S214 correspond to secondary authentication. Step S208: If it is determined that primary authentication was successful in step S204, the confirmation information transmission unit 322 transmits confirmation information to be used for secondary authentication to the medical treatment terminal 100. The confirmation information is patient-specific information associated with the registered voice data retrieved in step S202.

[0063] Step S210: In response to the transmission of confirmation information in step S208, confirmation information is transmitted from the medical treatment terminal 100. The secondary authentication unit 323 determines whether or not secondary authentication has been successful based on the confirmation information transmitted from the medical treatment terminal 100. The secondary authentication unit 323 determines that secondary authentication is successful if the verification information indicates "correct," and determines that secondary authentication is unsuccessful if the verification information indicates "incorrect."

[0064] Step S212: If it is determined in step S210 that secondary authentication is unsuccessful, the secondary authentication unit 323 sends a secondary authentication error notification to the medical treatment terminal 100.

[0065] Step S214: If it is determined in step S210 that secondary authentication has been successful, the access control unit 324 sets permission to access the medical information of the corresponding patient.

[0066] Step S216: In response to the access permission being set in step S214, the access control unit 324 retrieves the corresponding patient's medical information from the medical information database and generates a web page for the medical information screen that displays the retrieved medical information. The access control unit 324 controls the medical treatment terminal 100 to transition to displaying the generated web page for the medical information screen. Specifically, for example, the access control unit 324 may send the URL of the generated web page for the medical information screen to the medical treatment terminal 100.

[0067] As described above, according to the medical support system of this embodiment, login authentication is performed using multi-factor authentication, which consists of primary authentication by voiceprint authentication using the patient's voice data and secondary authentication by verification of the patient's verification information. Login authentication is generally performed using a user account, which consists of a username and password. However, in this embodiment, the target of login authentication is a patient receiving treatment for cognitive function, making it highly likely that they may not be able to remember their user account. Therefore, in this embodiment, voiceprint authentication is used for login authentication. With voiceprint authentication, login authentication can be performed while maintaining a certain level of security without using a user account.

[0068] Furthermore, in this embodiment, the patient's medical information, which becomes accessible through login, is personal information. Therefore, the medical information itself must be protected by a certain level of security. Considering this point, it is preferable to allow access to the patient's medical information only after an additional authentication step has been taken to further verify the authenticity of the patient, rather than immediately accessing the patient's medical information upon successful voiceprint authentication. Therefore, in this embodiment, after primary authentication using voiceprint authentication, secondary authentication is performed based on whether the recipient's confirmation of unique verification information such as their name is "correct" or "incorrect". Here, the confirmation information must be unique to the patient and be a phrase that the patient is unlikely to forget, even if their cognitive function has progressed to some extent. For example, the name listed as an example of confirmation information in Figure 2(A) is one such phrase that is unlikely to be forgotten even by patients whose cognitive function has progressed to some extent. Other examples of confirmation information may include the patient's place of origin or the names of the patient's relatives.

[0069] <Second Embodiment> Next, a second embodiment will be described. The speech content corresponding to the voice data used for primary authentication is, for example, a fixed utterance, and words suitable for cognitive function testing are defined. Taking this into consideration, in this embodiment, a cognitive function test is performed in parallel with login authentication using the voice data of the examinee that was recorded in response to primary authentication.

[0070] The medical information server 300 of this embodiment includes a testing unit 325 (Figure 4). The testing unit 325 performs cognitive function tests using the patient's voice data included in the primary authentication request transmitted from the medical treatment terminal 100. The testing unit 325 may determine the degree of cognitive decline based, for example, on the accuracy rate of the speech recognition results for the voice data to be tested, and determine the test result. Alternatively, the testing unit 325 may perform the test using a trained model that estimates the degree of cognitive decline corresponding to the input voice data, by training the model with training data in which the degree of cognitive decline is labeled to the voice data of the speech content.

[0071] The testing unit 325 may store the test results by adding them to the medical history information in the patient's medical information. Furthermore, the testing unit 325 may transmit the test results so that they are displayed on the corresponding medical treatment terminal 100.

[0072] The medical treatment terminal 100 of this embodiment includes a test result presentation unit 144. The test result presentation unit 144 may be one of the functions of a medical treatment application installed on the medical treatment terminal 100. The test result presentation unit 144 may present the test results transmitted from the medical information server 300, for example, by displaying them on a display unit.

[0073] In the medical information server, the testing unit 325 immediately performs the test upon receiving a primary authentication request, and, for example, upon successful login authentication, may first send a web page of the test results so that the test results using the voice data are displayed on the medical treatment terminal 100. In this case, the diagnostician can immediately grasp, for example, the current degree of cognitive decline of the patient, albeit in a simplified manner.

[0074] The testing unit 325 may be provided by a testing server other than the medical information server 300. In this case, the medical treatment terminal 100 may transmit the recorded audio data to the testing server upon completion of recording the audio data.

[0075] <Third Embodiment> Next, a third embodiment will be described. If the registered voice data of a patient stored in the patient information database is not updated, the difference in voice quality between the registered voice data and the current voice data may increase due to changes in voice quality caused by, for example, aging or the progression of cognitive decline in the patient, which may reduce the accuracy of voiceprint authentication as primary authentication. Therefore, in this embodiment, the medical information server 300 may, for example, update the registered voice data of the corresponding patient using the voice data used for primary authentication each time login authentication is successful.

[0076] The medical information server 300 may update the registered voice data using the voice data used for primary authentication each time a predetermined number of login authentications are performed, or at regular intervals. Furthermore, the medical information server 300 may update the registered voice data using the voice data used for primary authentication by comparing the degree of cognitive decline examined for the currently registered voice data with the degree of cognitive decline examined for the voice data used for the current primary authentication. If the discrepancy between the two degrees of cognitive decline exceeds a certain level, the medical information server 300 may update the registered voice data using the voice data used for the current primary authentication.

[0077] <Variation> The following describes modified examples corresponding to each of the above embodiments.

[0078] The content of speech recorded by patients in response to primary authentication may vary depending on, for example, the degree of progression of the patient's cognitive decline. Therefore, the medical information server 300 may appropriately modify the content of speech recorded by patients in response to primary authentication based on, for example, the content of medical information and test results to date.

[0079] Furthermore, the medical information server 300 may appropriately change the verification information used for secondary authentication according to the degree of progression of the patient's cognitive decline. In this case, the patient information database may include several additional pieces of information as patient-specific information stored for each patient, such as their name. Each of these pieces of information included in patient-specific information may be labeled to indicate the corresponding degree of progression of cognitive decline. The verification information transmission unit 322 in the medical information server 300 estimates the current degree of progression of the patient's cognitive decline based, for example, the patient's medical history information stored in the patient information database, or the results of tests based on the patient's voice data obtained in response to the current login authentication. The verification information transmission unit 322 may select information corresponding to the estimated degree of progression of cognitive decline from among the multiple pieces of information included in patient-specific information and transmit the selected information to the medical treatment terminal 100 as verification information.

[0080] In the above embodiments, the example given was that a medical treatment application is installed on the medical treatment terminal 100. However, the medical treatment terminal 100 may also be configured to access the medical information server 300 to receive and operate the medical treatment application.

[0081] In each of the above embodiments, the medical information server 300 may be composed of multiple servers, each having a distributed function. Furthermore, the medical information server 300 may be configured as a cloud server.

[0082] Furthermore, the functions of the aforementioned medical treatment terminal 100 and medical information server 300 may be realized by recording the program to realize these functions on a computer-readable recording medium, loading the program recorded on this recording medium into a computer system, and executing it to perform the processing of the aforementioned medical treatment terminal 100 and medical information server 300. Here, "loading the program recorded on the recording medium into a computer system and executing it" includes installing the program into the computer system. Here, "computer system" includes hardware such as the OS and peripheral devices. Also, "computer system" may include multiple computer devices connected via a network including communication lines such as the Internet, WAN, LAN, and dedicated lines. Also, "computer-readable recording medium" refers to portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, and storage devices such as hard disks built into the computer system. Thus, the recording medium storing the program may also be a non-transient recording medium such as a CD-ROM. Also, the recording medium includes internal or external recording media that can be accessed from the distribution server for the purpose of distributing the program. The program code stored on the distribution server's recording medium may be different from the program code in a format executable by the terminal device. In other words, the format in which the program is stored on the distribution server is irrelevant, as long as it can be downloaded from the distribution server and installed in a form that can be executed on the terminal device. Furthermore, the program may be divided into multiple parts, each downloaded at a different time and then combined on the terminal device, and each divided program may be distributed by a different distribution server. In addition, "computer-readable recording medium" includes volatile memory (RAM) within computer systems that act as servers or clients when a program is transmitted over a network, which retains the program for a certain period of time. Moreover, the above program may be intended to implement only a part of the functions described above.Furthermore, the above-mentioned functions may be implemented in combination with programs already recorded in the computer system, such as so-called differential files (differential programs).

[0083] <Note> (1) One aspect of this embodiment comprises a medical treatment terminal (100) and a medical information server (300), wherein the medical treatment terminal includes: a voice data acquisition unit (141) that acquires voice data corresponding to the input voice; a primary authentication processing unit (142) that transmits the voice data acquired by the voice data acquisition unit to the medical information server as primary authentication information; a patient information storage unit (e.g., patient information database storage unit 331) that stores patient information for each patient, associating patient-specific information unique to the patient with registered voice data registered in advance corresponding to the patient; a medical information storage unit (e.g., medical information database storage unit 332) that stores medical information related to the patient's cognitive function for each patient; and a patient information storage unit that stores registered voice data in the patient information storage unit whose voiceprint matches the voice data as primary authentication information transmitted from the medical treatment terminal. The medical support system comprises: a primary authentication unit (321) that determines whether primary authentication has been achieved based on whether or not the information exists; a confirmation information transmission unit (322) that, when primary authentication is achieved on the medical information server, transmits patient-specific information associated with the matching registered voice data to the medical support terminal as confirmation information corresponding to secondary authentication; a secondary authentication processing unit (143) that, when primary authentication is achieved on the medical support terminal, displays the confirmation information transmitted from the medical support terminal, accepts input of confirmation information to determine whether or not the displayed secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information; a secondary authentication unit (323) that, when the medical information server indicates that the secondary authentication information transmitted from the medical support terminal corresponds to the patient, determines that secondary authentication has been achieved; and an access control unit (324) that, when secondary authentication is achieved on the medical information server, controls the medical support terminal to allow access to the patient information of the corresponding patient.

[0084] (2) One aspect of this embodiment is the medical support system described in (1), wherein the medical information server further comprises an examination unit that, in response to the success of secondary authentication, performs an examination of the cognitive function of the corresponding patient based on voice data as primary authentication information transmitted from the medical support terminal.

[0085] (3) One aspect of this embodiment is the medical support system described in (2), wherein the medical support terminal further comprises an examination result presentation unit that presents the examination results of the examination unit transmitted by the medical information server.

[0086] (4) One aspect of this embodiment is the medical support system described in (2) or (3), wherein the examination unit may store the examination results in such a manner that they are included in the medical information of the corresponding patient stored in the medical information storage unit.

[0087] (5) One aspect of this embodiment is a medical support system according to any one of (1) to (4), wherein the medical information server further comprises an information management unit that stores in the patient information storage unit the voice data as primary authentication information transmitted from the medical support terminal as registered voice data of the corresponding patient, in response to the success of secondary authentication.

[0088] (6) One aspect of this embodiment is the medical support system described in (5), wherein the information management unit may update the registered voice data included in the patient information of the corresponding patient with voice data as primary authentication information transmitted from the medical support terminal.

[0089] (7) One aspect of this embodiment is an authentication method in a medical support system comprising a medical treatment terminal and a medical information server, comprising: a voice data acquisition step in which a voice data acquisition unit in the medical treatment terminal acquires voice data corresponding to the input voice; a primary authentication processing step in which a primary authentication processing unit in the medical treatment terminal transmits the voice data acquired in the voice data acquisition step to the medical information server as primary authentication information; a patient information storage step in which a patient information storage unit in the medical information server stores patient information for each patient, associating patient-specific information unique to the patient with registered voice data registered in advance corresponding to the patient; a medical information storage step in which a medical information storage unit in the medical information server stores medical information related to the patient's cognitive function for each patient; and a primary authentication unit in the medical information server that has registered voice data stored in the patient information storage step whose voiceprint matches the voice data as primary authentication information transmitted from the medical treatment terminal. The authentication method includes: a primary authentication step of determining whether primary authentication has been achieved based on whether or not the patient information exists; a confirmation information transmission step in which, if primary authentication is achieved, the confirmation information transmission unit in the medical information server transmits patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication; a secondary authentication processing step in which, if primary authentication is achieved, the secondary authentication processing unit in the medical treatment terminal presents the confirmation information transmitted from the medical treatment terminal, accepts input of confirmation information to determine whether or not the presented secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information; a secondary authentication step in which, if the secondary authentication unit in the medical information server indicates that the secondary authentication information transmitted from the medical treatment terminal corresponds to the patient, the secondary authentication step of determining that secondary authentication has been achieved; and an access control step in which, in response to the achievement of secondary authentication, the access control unit in the medical information server controls the medical treatment terminal to allow access to the patient information of the corresponding patient.

[0090] (8) One aspect of this embodiment is a medical support system comprising a medical treatment terminal and a medical information server, comprising: a first program for causing a first computer to function as the medical treatment terminal; and a second program for causing a second computer to function as the medical information server, wherein the first program causes the first computer to function as a voice data acquisition unit that acquires voice data corresponding to input voice; the first program causes the first computer to function as a primary authentication processing unit that transmits the voice data acquired by the voice data acquisition unit to the medical information server as primary authentication information; the second program causes the second computer to function as a patient information storage unit that stores patient information for each patient, which associates patient-specific information unique to the patient with registered voice data registered in advance corresponding to the patient; the second program causes the second computer to function as a medical information storage unit that stores medical information relating to the patient's cognitive function for each patient; and the second program is as The second computer functions as a primary authentication unit that determines whether primary authentication has been achieved based on whether registered voice data matching the voiceprint of the voice data transmitted from the medical treatment terminal exists in the patient information stored in the patient information storage unit. The second computer functions as a confirmation information transmission unit that, if primary authentication is achieved, transmits patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication. The first computer functions as a secondary authentication processing unit that presents the confirmation information transmitted from the medical treatment terminal, accepts input of confirmation information to determine whether the presented secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information. The second computer functions as a secondary authentication unit that determines that secondary authentication has been achieved when the secondary authentication information transmitted from the medical treatment terminal indicates that it corresponds to the patient.This program causes the second computer to function as an access control unit that controls access to the patient information of the corresponding patient by the medical treatment terminal in accordance with the success of secondary authentication. [Explanation of symbols]

[0091] 10 Medical Treatment Facility, 100 Medical Treatment Terminal, 101 Communication Unit, 102 Input / Output Interface Unit, 103 User Interface Unit, 104 Control Unit, 105 Storage Unit, 141 Voice Data Acquisition Unit, 142 Primary Authentication Processing Unit, 143 Secondary Authentication Processing Unit, 144 Test Result Presentation Unit, 200 Microphone, 300 Medical Information Server, 301 Communication Unit, 302 Control Unit, 303 Storage Unit, 321 Primary Authentication Unit, 322 Confirmation Information Transmission Unit, 323 Secondary Authentication Unit, 324 Access Control Unit, 325 Testing Unit, 331 Patient Information Database Storage Unit, 332 Medical Information Database Storage Unit

Claims

1. Equipped with a medical treatment terminal and a medical information server, The aforementioned medical treatment terminal includes an audio data acquisition unit that acquires audio data corresponding to the input audio, The aforementioned medical treatment terminal includes a primary authentication processing unit that transmits the voice data acquired by the voice data acquisition unit to the medical information server as primary authentication information, The aforementioned medical information server includes a patient information storage unit that stores patient information for each patient, which associates patient-specific information unique to the patient with registered voice data that has been registered in advance for the corresponding patient, The aforementioned medical information server includes a medical information storage unit that stores medical information related to the cognitive function of each patient, The medical information server includes a primary authentication unit that determines whether primary authentication has been achieved based on whether registered voice data whose voiceprint matches the voice data transmitted from the medical treatment terminal as primary authentication information exists in the patient information stored in the patient information storage unit, The aforementioned medical information server includes a confirmation information transmission unit that, when primary authentication is successful, transmits patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication. The aforementioned medical treatment terminal includes a secondary authentication processing unit that displays the confirmation information transmitted from the medical treatment terminal, accepts input of confirmation information to determine whether the displayed secondary authentication confirmation information belongs to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information. The medical information server includes a secondary authentication unit that determines that secondary authentication has been achieved when the secondary authentication information transmitted from the medical treatment terminal indicates that it belongs to the patient, The medical information server includes an access control unit that controls access to the patient information of the corresponding patient by the medical treatment terminal in response to successful secondary authentication. A medical support system equipped with the following features.

2. The aforementioned medical information server further includes an examination unit that, upon successful secondary authentication, performs an examination of the cognitive function of the corresponding patient based on the voice data transmitted from the medical treatment terminal as primary authentication information. The medical support system according to claim 1.

3. The aforementioned medical treatment terminal further includes a test result display unit that displays the test results from the testing unit transmitted by the medical information server. The medical support system according to claim 2.

4. The aforementioned testing unit stores the test results in the medical information storage unit so that they are included in the medical information of the corresponding patient. The medical support system according to claim 2 or 3.

5. The medical information server further includes an information management unit that, upon successful secondary authentication, stores the voice data transmitted from the medical treatment terminal as primary authentication information in the patient information storage unit as the registered voice data of the corresponding patient. A medical support system according to any one of claims 1 to 3.

6. The aforementioned information management unit updates the registered voice data included in the patient information of the patient being treated with the voice data transmitted from the medical treatment terminal as primary authentication information. The medical support system according to claim 5.

7. Authentication method in a medical support system comprising a medical treatment terminal and a medical information server, In the aforementioned medical treatment terminal, the voice data acquisition unit acquires voice data corresponding to the input voice, and In the aforementioned medical treatment terminal, the primary authentication processing unit performs a primary authentication processing step in which it transmits the voice data acquired in the voice data acquisition step to the medical information server as primary authentication information, In the aforementioned medical information server, the patient information storage unit stores patient information for each patient, which is obtained by associating patient-specific information unique to the patient with registered voice data that has been registered in advance for the corresponding patient. In the aforementioned medical information server, the medical information storage unit stores medical information relating to the patient's cognitive function for each patient in a medical information storage step, In the aforementioned medical information server, the primary authentication unit determines whether primary authentication has been achieved based on whether or not registered voice data whose voiceprint matches the voice data transmitted from the medical treatment terminal as primary authentication information exists in the patient information stored in the patient information storage step, In the aforementioned medical information server, when the confirmation information transmission unit is successful, it transmits the patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication in a confirmation information transmission step. The secondary authentication processing step in the aforementioned medical treatment terminal includes: presenting the confirmation information transmitted from the medical treatment terminal, accepting input of confirmation information to determine whether the presented secondary authentication confirmation information belongs to the patient, and transmitting the input confirmation information as secondary authentication information to the medical information server; A secondary authentication step in which the secondary authentication unit of the medical information server determines that secondary authentication has been achieved when the secondary authentication information transmitted from the medical treatment terminal indicates that it corresponds to the patient, In the aforementioned medical information server, the access control unit controls the system so that, in response to the successful completion of secondary authentication, the medical treatment terminal can access the patient information of the corresponding patient. Authentication methods including those mentioned above.

8. A medical support system comprising a medical treatment terminal and a medical information server, comprising: a first program for causing a first computer to function as the medical treatment terminal, and a second program for causing a second computer to function as the medical information server, The first program causes the first computer to function as an audio data acquisition unit that acquires audio data corresponding to the input audio. The first program causes the first computer to function as a primary authentication processing unit that transmits the voice data acquired by the voice data acquisition unit as primary authentication information to the medical information server. The second program causes the second computer to function as a patient information storage unit that stores patient information for each patient, which is obtained by associating patient-specific information unique to the patient with registered voice data that has been registered in advance for the corresponding patient. The second program causes the second computer to function as a medical information storage unit that stores medical information related to the patient's cognitive function for each patient. The second program causes the second computer to function as a primary authentication unit that determines whether primary authentication has been achieved based on whether registered voice data whose voiceprint matches the voice data transmitted from the medical treatment terminal as primary authentication information exists in the patient information stored in the patient information storage unit. The second program, when primary authentication is successful, causes the second computer to function as a confirmation information transmission unit that transmits patient-specific information associated with the matching registered voice data to the medical treatment terminal as confirmation information corresponding to secondary authentication. The first program causes the first computer to function as a secondary authentication processing unit, which presents the confirmation information transmitted from the medical treatment terminal, accepts input of confirmation information to determine whether the presented secondary authentication confirmation information corresponds to the patient, and transmits the input confirmation information to the medical information server as secondary authentication information. The second program causes the second computer to function as a secondary authentication unit that determines that secondary authentication has been achieved when the secondary authentication information transmitted from the medical treatment terminal indicates that it belongs to the patient. The second program is intended to control the second computer as an access control unit that enables the medical treatment terminal to access the patient information of the corresponding patient in response to the successful completion of secondary authentication. program.

Images