Healthcare Information Management System

Abstract

The present invention provides a health and medical care related information management system that provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to a provision history, which is a record of incentives provided to each individual, regarding whether or not to allow the disclosure of health and medical care related information about the individual. [Solution] A health care related information management system is provided which has a health care related information storage unit for storing and managing health care related information about individuals, an access control unit for controlling the disclosure of the health care related information stored in the health care related information storage unit to third parties via a network, an incentive management unit for providing incentives to individuals to encourage the disclosure of the health care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the health care related information about an individual, and a provision history storage unit for storing the provision history, which is a history of incentives provided to each individual.

Description

[Technical field]

[0001] The present invention relates to a health care related information management system for storing and managing health care related information, which is information related to the health care of an individual. [Background technology]

[0002] Recently, systems and services that enable multiple medical institutions to share patient medical information have begun to be considered.

[0003] As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problem of avoiding duplication of test items in test data at multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system and various test results of patients are stored. The medical information sharing server displays corresponding electronic medical records according to instructions from a medical facility terminal of a medical institution or a medical institution terminal such as a medical examination center terminal, and when a clinical test is performed, searches whether the results of the same test items as the test items of the clinical test to be performed are recorded in the test result DB and displays them. In addition, it has been disclosed that a medical information providing system is provided in the medical information sharing server, and when the medical information providing system sends information to a medical information providing destination, it requests a fee for the information, and based on the fee received, the medical information providing system formulates a remuneration that can be provided to the user and provides the remuneration to the user. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent Publication No. 2022-25166 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the above-mentioned invention only discloses that the medical information provision system formulates rewards that can be offered to users and provides the rewards to users, and there is an issue in that it does not clearly state that a health and medical related information management system such as the present invention has a function of retaining a provision history, which is a record of incentives provided to each individual, and / or a function of providing incentives to individuals to encourage the disclosure of health and medical related information by referring to the provision history regarding whether or not to allow the disclosure of health and medical related information about an individual. [Means for solving the problem]

[0006] In consideration of the above-mentioned problems, the present invention aims to provide a health and medical care related information management system that provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to a provision history, which is a record of incentives provided to each individual, when deciding whether or not to disclose health and medical care related information about an individual.

[0007] Specifically, the present invention provides a health and medical care related information management system having a health and medical care related information storage unit for storing and managing health and medical care related information about individuals, an access control unit for controlling the disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network, an incentive management unit for providing incentives to individuals to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the health and medical care related information about an individual, and a provision history storage unit for storing the provision history, which is a history of incentives provided to each individual.

[0008] In addition to the above-mentioned features, the present invention also provides a health and medical related information management system which has an incentive type information holding unit which holds incentive type information which is information indicating multiple types of incentives, and an incentive management unit which selects and provides an incentive to an individual in accordance with the provision history based on the incentive type information held in the incentive type information holding unit.

[0009] In addition to the above-mentioned features, the present invention provides a health care related information management system having a termination request receiving unit that receives a termination request, which is a request to stop or terminate the disclosure of health care related information that has already been made public, from an individual who stores the health care related information in the health care related information storage unit; a termination condition holding unit that holds termination conditions, which are conditions for determining whether or not to terminate based on information about the individual who made the termination request when a termination request is received; a judgment rule holding unit that holds judgment rules, which are rules for determining whether or not to terminate the disclosure of the health care related information based on information about the individual who made the termination request and the held termination condition; a termination judgment unit that determines whether to terminate based on information about the individual, the held termination condition, and the held judgment rule when a termination request is received; and a termination control unit that controls the access control unit to terminate the disclosure of the health care related information of the individual when the judgment result of the termination judgment unit is that termination should be made.

[0010] In addition to the above features, the present invention provides a health care related information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] In addition to the above-mentioned features, the present invention also provides a health and medical related information management system having a consent information acquisition unit that acquires consent information, which is information indicating agreement to accept an incentive by the incentive management unit, after being authenticated by the access authentication processing unit.

[0012] In addition to the above-mentioned features, the present invention also provides a health and medical related information management system having an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition unit.

[0013] In addition to the above-mentioned features, the present invention also provides a health and medical care related information management system having a disclosure permission information holding unit that holds disclosure permission information indicating whether an individual permits the disclosure of their own health and medical care related information to third parties.

[0014] In addition to the above-mentioned features, the present invention also provides a health and medical related information management system having a third party identification information holding unit that holds third party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0015] In addition to the above-mentioned features, the present invention also provides a health and medical related information management system in which the access control unit allows medical personnel to view the health and medical related information stored in the health and medical related information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the third party is a medical personnel.

[0016] In addition to the above-mentioned features, the present invention also provides a health and medical care related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates disclosure permission and the third party identification information held in the third party identification information holding unit indicates that the person is a non-medical professional, the access control unit allows a non-medical professional to view a part (including all) of the health and medical care related information stored in the health and medical care related information storage unit, or the health and medical care related information that has been anonymized using a predetermined anonymization method.

[0017] In addition to the above-mentioned features, the present invention also provides a health and medical care-related information management system in which the anonymization method is at least any one of the anonymization methods including k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

[0018] In addition to the above-mentioned features, the present invention also provides a health and medical care related information management system in which the health and medical care related information storage unit stores health and medical care related information including one or more of an individual's electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS.

[0019] In addition to the above-mentioned features, the present invention provides a health and medical related information management system in which the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services and general information services to information providers, provision of individual medicines and supplements, provision of books and other products, provision of passwords and IDs for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash.

[0020] Furthermore, in addition to the above-mentioned features, the present invention provides a health and medical related information management system in which the medical professionals include at least one of: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physiotherapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical x-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, paramedics, masseurs and shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

[0021] In addition to the above-mentioned features, the present invention also provides a health and medical related information management system, wherein the non-medical personnel include at least one of the following employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including their affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0022] Furthermore, in order to realize the above-mentioned health and medical related information management system, the present invention provides a method executed by a CPU in the health and medical related information management system, which is a computer, and an operating program for the health and medical related information management system, which is written in a readable and executable manner in the health and medical related information management system, which is a computer.

[0023] Specifically, the present invention provides a method executed by a CPU in a health and medical care related information management system, which is a computer, comprising: a health and medical care related information accumulation step for accumulating and managing health and medical care related information relating to individuals; an access control step for controlling the disclosure of the health and medical care related information accumulated in the health and medical care related information accumulation step to a third party via a network; an incentive management step for providing incentives to individuals to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history retention step described below regarding whether or not to allow the disclosure of the health and medical care related information relating to the individuals; and a provision history retention step for retaining the provision history, which is a history of incentives provided to each individual.

[0024] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health care related information management system which is a computer, the method having an incentive type information retention step of retaining incentive type information which is information indicating multiple types of incentives, and an incentive management step of selecting and providing an incentive to an individual in accordance with the incentive provision history based on the incentive type information retained in the incentive type information retention step.

[0025] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, the method having: a termination request receiving step for receiving a termination request which is a request to stop or terminate the disclosure of health and medical care related information that has already been made public from an individual who has accumulated the health and medical care related information in the health and medical care related information accumulation step; a termination condition retaining step for retaining a termination condition which is a condition for determining whether or not to terminate based on information about the individual who made the termination request when the termination request is received; a judgment rule retaining step for retaining a judgment rule which is a rule for determining whether or not to terminate the disclosure of the health and medical care related information based on information about the individual who made the termination request and the retained termination condition; a termination judgment step for determining whether to terminate based on information about the individual, the retained termination condition, and the retained judgment rule when the termination request is received; and a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the judgment result in the termination judgment step is that termination should be made.

[0026] In addition to the above-mentioned characteristics, the present invention also provides a method executed by a CPU in a health care related information management system which is a computer, the method having an access authentication processing step for performing authentication for accessing the incentive management step.

[0027] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health care related information management system which is a computer, the method having a consent information acquisition step of acquiring consent information which is information indicating consent to accepting an incentive through the incentive management step after being authenticated in the access authentication processing step.

[0028] In addition to the above-mentioned characteristics, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and which has an incentive provision processing step that performs an incentive provision processing, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

[0029] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical related information management system which is a computer, the method having a disclosure permission information retention step of retaining disclosure permission information indicating whether an individual permits the disclosure of their own health and medical related information to third parties.

[0030] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, the method having a third party identification information retention step of retaining third party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0031] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, in which the access control step allows a medical professional to view the health and medical care related information accumulated in the health and medical care related information accumulation step if the disclosure permission information held in the disclosure permission information holding step indicates that disclosure is permitted and the third party identification information held in the third party identification information holding step indicates that the third party is a medical professional.

[0032] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, in which the access control step allows a non-medical professional to view a part (including all) of the health and medical care related information accumulated in the health and medical care related information accumulation step, or the health and medical care related information that has been anonymized by a predetermined anonymization method, when the disclosure permission information held in the disclosure permission information holding step indicates that disclosure is permitted and the third party identification information held in the third party identification information holding step indicates that the person is a non-medical professional.

[0033] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health care related information management system, which is a computer, wherein the anonymization method is at least any one of the anonymization methods of k (k is a natural number greater than or equal to 2), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

[0034] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical care related information management system which is a computer, wherein the health and medical care related information accumulation step accumulates health and medical care related information including one or more of an individual's electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS.

[0035] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical related information management system which is a computer, wherein the incentive management step provides incentives including one or more of the following: providing My Number points, providing individual information services or general information services to information providers, providing individual medicines or supplements, providing books and other products, providing a password or ID for providing information, providing items that can be used on the network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, and providing product coupons, travel coupons, or cash.

[0036] Furthermore, in addition to the above-mentioned features, the present invention provides a method executed by a CPU in a health and medical related information management system which is a computer, wherein the medical professionals include at least one of: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physiotherapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical x-ray technicians, clinical laboratory technicians, medical engineers, dental hygienists, dental technicians, paramedics, masseurs, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

[0037] In addition to the above-mentioned features, the present invention also provides a method executed by a CPU in a health and medical related information management system which is a computer, wherein the non-medical personnel include at least one of employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, fitness equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0038] Specifically, the present invention provides an operating program for a health and medical care related information management system that is written in a manner that can be read and executed by a computer that has a health and medical care related information accumulation step for accumulating and managing health and medical care related information about individuals, an access control step for controlling the disclosure of the health and medical care related information accumulated in the health and medical care related information accumulation step to a third party via a network, an incentive management step for providing incentives to individuals to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history retention step described below regarding whether or not to allow the disclosure of the health and medical care related information about the individuals, and a provision history retention step for retaining the provision history, which is a history of incentives provided to each individual.

[0039] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical care related information management system, which has an incentive type information retention step for retaining incentive type information which is information indicating multiple types of incentives, and an incentive management step for selecting and providing incentives to be provided to individuals in accordance with the provision history based on the incentive type information retained in the incentive type information retention step, the operating program being written in a manner readable and executable by the health and medical care related information management system, which is a computer.

[0040] Furthermore, in addition to the above-mentioned features, the present invention provides an operating program for a health care related information management system written in a readable and executable manner in a computer that has the following features: a termination request receiving step for receiving a termination request, which is a request to suspend or terminate the disclosure of health care related information that has already been made public, from an individual who accumulates the health care related information in the health care related information accumulation step; a termination condition retaining step for retaining a termination condition, which is a condition for determining whether or not to terminate the disclosure of the health care related information based on information about the individual who made the termination request, when the termination request is received; a judgment rule retaining step for retaining judgment rules, which are rules for determining whether or not to terminate the disclosure of the health care related information based on information about the individual who made the termination request and the retained termination condition; a termination judgment step for determining whether to terminate the disclosure of the health care related information based on information about the individual, the retained termination condition, and the retained judgment rule, when the termination request is received, whether to terminate the disclosure based on information about the individual, the retained termination condition, and the retained judgment rule; and a termination control step for controlling the access control step to terminate the disclosure of the health care related information of the individual if the judgment result in the termination judgment step is that the disclosure should be terminated.

[0041] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system, which is written in a readable and executable manner in a health and medical related information management system that is a computer having an access authentication processing step for performing authentication for accessing the incentive management step.

[0042] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system, which is written in a readable and executable manner in a computer that has a consent information acquisition step for acquiring consent information, which is information indicating agreement to accept an incentive through an incentive management step, after being authenticated in an access authentication processing step.

[0043] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical related information management system, which is written in a manner that can be read and executed by a computer having an incentive provision processing step that performs an incentive provision process, which is a process for providing an incentive when consent information is acquired by the consent information acquisition step.

[0044] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical related information management system, which is written in a readable and executable manner on a health and medical related information management system that is a computer having a disclosure permission information storage step for storing disclosure permission information indicating whether an individual permits the disclosure of their own health and medical related information to third parties.

[0045] In addition to the above features, the present invention also provides an operating program for a health and medical related information management system, which is written in a manner that can be read and executed by a health and medical related information management system, which is a computer having a third-party identification information storage step for storing third-party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0046] Furthermore, in addition to the above-mentioned features, the present invention provides an operating program for a health and medical related information management system, the operating program being written in a readable and executable manner in a health and medical related information management system, which is a computer that allows medical professionals to view the health and medical related information stored in the health and medical related information storage step, when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a medical professional, in the access control step.

[0047] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical related information management system, the operating program being written in a readable and executable manner in a health and medical related information management system, which is a computer that allows non-medical professionals to view part (including all) of the health and medical related information accumulated in the health and medical related information accumulation step, or the health and medical related information that has been anonymized by a predetermined anonymization method, when the disclosure permission information retained in the disclosure permission information retention step indicates disclosure permission and the third party identification information retained in the third party identification information retention step indicates a non-medical professional.

[0048] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical care related information management system, which is written in a manner that can be read and executed by a computer that performs the anonymization method using at least one of the anonymization methods of k (k is a natural number greater than or equal to 2), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

[0049] Furthermore, in addition to the above-mentioned features, the present invention provides an operating program for a health and medical care related information management system, which is written in a readable and executable manner in a health and medical care related information management system that is a computer that accumulates health and medical care related information including one or more of an individual's electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, health promotion app data, and conversation data of an interactive health promotion SNS, in the health and medical care related information accumulation step.

[0050] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical related information management system, which is written in a readable and executable manner in a computer that provides incentives including one or more of the following: providing My Number points, providing individual information services and general information services to information providers, providing individual medicines and supplements, providing books and other products, providing a password or ID for providing information, providing items that can be used on the network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, and providing product coupons, travel coupons, or cash.

[0051] Furthermore, in addition to the above-mentioned features, the present invention provides an operating program for a health and medical related information management system which is written in a readable and executable manner on a computer where the medical professionals include at least one of the following: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physiotherapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, clinical radiologists, clinical X-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, paramedics, masseurs, shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

[0052] In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical related information management system that is written in a readable and executable manner on a computer that includes at least one of the following non-medical personnel: employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including their affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies. Effect of the Invention

[0053] As described above, the present invention can provide a health and medical care related information management system that provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to a provision history, which is a history of incentives provided to each individual, when deciding whether or not to disclose health and medical care related information about an individual. [Brief description of the drawings]

[0054] [Figure 1] FIG. 1 is a diagram showing a hardware configuration applied to the present invention. [Diagram 2] A diagram showing the overall configuration of the health and medical information management system of the present invention. [Diagram 3] FIG. 1 shows the functional configuration of a health and medical information management system according to a first embodiment. [Figure 4] FIG. 1 is a diagram showing the hardware configuration of a health and medical information management system according to a first embodiment. [Diagram 5] FIG. 1 is a diagram showing a process flow when the health and medical information management system according to the first embodiment is used. [Figure 6] FIG. 1 is a diagram showing an example of a provision history storage unit of the health and medical care related information management system in embodiment 1. [Figure 7] FIG. 1 shows a functional configuration of a health and medical information management system according to a second embodiment. [Figure 8]FIG. 1 shows a hardware configuration of a health and medical information management system according to a second embodiment. [Figure 9] FIG. 13 is a diagram showing a process flow when using the health and medical information management system in the second embodiment. [Figure 10] FIG. 13 is a diagram showing an example of an incentive type information storage unit of the health and medical care related information management system in the second embodiment. [Figure 11] FIG. 13 is a diagram showing an example of an incentive management unit of the health and medical care related information management system according to the second embodiment. [Figure 12] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a third embodiment. [Figure 13] FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a third embodiment. [Figure 14] FIG. 13 is a diagram showing a process flow when using the health and medical information management system in the third embodiment. [Figure 15] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a fourth embodiment. [Figure 16] FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a fourth embodiment. [Figure 17] FIG. 13 is a diagram showing a process flow when using the health and medical information management system in the fourth embodiment. [Figure 18] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a fifth embodiment. [Figure 19] FIG. 13 is a diagram showing hardware calibration of the health and medical information management system according to the fifth embodiment. [Figure 20] FIG. 13 is a diagram showing a process flow when using the health and medical information management system in the fifth embodiment. [Figure 21] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a sixth embodiment. [Figure 22] FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a sixth embodiment. [Figure 23]FIG. 13 is a diagram showing a process flow when using the health and medical information management system according to the sixth embodiment. [Figure 24] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a seventh embodiment. [Diagram 25] FIG. 23 is a diagram showing an example of an access control unit of the health and medical care related information management system according to the seventh embodiment. [Figure 26] FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a seventh embodiment. [Figure 27] FIG. 13 is a diagram showing a process flow when using the health and medical information management system in the seventh embodiment. [Figure 28] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to an eighth embodiment. [Figure 29] FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to an eighth embodiment. [Diagram 30] FIG. 13 is a diagram showing a process flow when using the health and medical information management system according to the eighth embodiment. [Diagram 31] FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a ninth embodiment. [Diagram 32] FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a ninth embodiment. [Diagram 33] FIG. 13 is a diagram showing a process flow when using the health and medical information management system according to the ninth embodiment. [Diagram 34] FIG. 17 shows the functional configuration of a health and medical information management system according to a tenth embodiment. [Diagram 35] FIG. 23 is a diagram showing the hardware configuration of a health and medical information management system according to a tenth embodiment. [Diagram 36] FIG. 23 is a diagram showing a process flow when using the health and medical care related information management system in the tenth embodiment. [Figure 37] A diagram showing an example of anonymization method [Figure 38] A diagram showing an example of anonymization method [Figure 39] A diagram showing an example of anonymization method [Diagram 40] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Diagram 41] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Diagram 42] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Diagram 43] A diagram showing an example of the user interface of the health and medical information management system of the present invention. [Diagram 44] A diagram showing an example of the user interface of the health and medical information management system of the present invention. <Hardware that can constitute the present invention>

[0055] FIG. 1 is a diagram showing a hardware configuration applied to the present invention. The present invention is in principle an invention that utilizes a computer, but it can also be realized by software, hardware, or the combination of software and hardware. The hardware that realizes all or part of each of the constituent elements of the present invention is composed of the basic components of a computer, such as a CPU, memory, bus, input / output devices, various peripheral devices, and a user interface. The various peripheral devices include storage devices, interfaces such as the Internet, devices such as the Internet, displays, keyboards, mice, speakers, cameras, videos, televisions, various sensors for grasping the production status in laboratories or factories (flow rate sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipment counters, package counters, foreign body inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human presence sensors, worker work status grasping devices (with video, ID, PC work volume, etc.)), CD devices, DVD devices, Blu-ray devices, USB memory, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, telephones, fax machines, copy machines, printers, movie editing devices, various sensor devices, etc. In addition, the present system does not necessarily have to be configured by one housing, and may be configured by connecting multiple housings by communication. In addition, communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, or ultrasonic communication, and further, some of the systems may be installed across borders. Furthermore, each of the multiple housings may be operated by a different entity, or may be operated by a single entity. The entity operating the system of the present invention may be single or multiple. The invention may also be configured as a system including, in addition to the present system, a terminal used by a third party, and a terminal used by yet another third party. These terminals may also be installed across borders. Furthermore, in addition to the present system and the terminals, devices used to register related information of third parties, related persons, and databases for recording the contents of registration may be provided. These may be provided in the present system, or may be provided outside the present system to configure the present system so that such information can be used.

[0056] As shown in this diagram, the computer is composed of a chipset, a CPU, a non-volatile memory, a main memory, various buses, a BIOS, various interfaces such as USB, HDMI (registered trademark) and LAN, a real-time clock, etc., which are configured on a motherboard. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), cameras, microphones, speakers or headphones, displays, and other built-in devices), various programs, etc. The various programs and data constituting the present invention are configured to efficiently utilize these hardware resources to execute various processes. Chipset

[0057] A "chipset" is a set of large-scale integrated circuits (LSIs) mounted on a computer's motherboard that integrates a communication function between the CPU's external bus and the standard bus that connects memory and peripheral devices, in other words, a bridge function. There are cases where a two-chipset configuration is used, and cases where a single chipset configuration is used. The side closest to the CPU and main memory is called the northbridge, and the side furthest away, which interfaces with the relatively slow external I / O, is called the southbridge.

[0058] (Northbridge) The northbridge includes a CPU interface, memory controller, and graphics interface. Most of the functions of a conventional northbridge may be handled by the CPU. The northbridge is connected to the main memory's memory slot via a memory bus, and to the graphics card slot of the graphics card via a high-speed graphics bus (AGP, PCI Express).

[0059] (South Bridge) The south bridge is connected to the PCI interface (PCI slot) via the PCI bus, and is responsible for I / O functions such as ATA (SATA) interface, USB interface, and Ethernet interface, as well as sound functions. Incorporating circuits to support PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are impossible to operate at high speed, can hinder the speed of the chipset itself, so they can be separated from the south bridge chip and placed in a separate LSI called a super I / O chip. A bus is used to connect the CPU (MPU) to peripheral devices and various control units. The bus is connected by the chipset. The memory bus used to connect to the main memory can instead adopt a channel structure to increase speed. A serial bus or a parallel bus can be used as the bus. While a serial bus transfers data one bit at a time, a parallel bus transmits the original data itself or multiple bits extracted from the original data as a single block and transmits it simultaneously over multiple communication paths. A dedicated line for the clock signal is set up in parallel with the data line to synchronize the data demodulation on the receiving side. It is also used as a bus to connect the CPU (chipset) to external devices, and includes GPIB, IDE / (Parallel)ATA, SCSI, PCI, etc. Since there is a limit to how fast it can be made, in PCI Express, an improved version of PCI, and Serial ATA, an improved version of Parallel ATA, the data line can be a serial bus.

[0060] CPU

[0061] The CPU sequentially reads and interprets and executes a series of instructions called a program on the main memory, and outputs information consisting of signals to the main memory. The CPU functions as the center of calculations in a computer. The CPU is composed of a CPU core part, which is the center of calculations, and its peripheral parts, and includes registers, cache memory, an internal bus connecting the cache memory and the CPU core, a DMA controller, a timer, and an interface with a connection bus to a north bridge. A single CPU (chip) may have multiple CPU cores. In addition to the CPU, processing may be performed by a graphic interface (GPU) or FPU. The embodiment is described as a two-core type, but is not limited to this. A program can also be built into the CPU.

[0062] <Non-volatile memory>

[0063] (HDD)

[0064] The basic structure of a hard disk drive consists of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can be SATA (previously ATA). A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read the sectors and transfer them to the other hard disk drive for writing. At this time, the host CPU's memory is not accessed. Therefore, there is no increase in the CPU load.

[0065] <Main memory>

[0066] The CPU directly accesses and executes various programs in main memory. Main memory is a volatile memory that uses DRAM. Programs in main memory are expanded from non-volatile memory to main memory upon receiving a program start command. The CPU then executes the program according to various execution commands and execution procedures within the program.

[0067] Operating System (OS)

[0068] An operating system is used to manage the resources available to applications on a computer, to manage various device drivers, and to manage the computer itself (the hardware). In small computers, firmware may be used as the operating system.

[0069] ≪BIOS≫

[0070] The BIOS causes the CPU to execute procedures for starting up the computer hardware and running the operating system, and is most typically the hardware that the CPU reads first when it receives a computer startup command. The address of the operating system stored on the disk (non-volatile memory) is written here, and the operating system is sequentially loaded into the main memory by the BIOS loaded into the CPU and goes into operation. The BIOS also has a check function for checking the presence or absence of various devices connected to the bus. The check results are stored in the main memory and are made available to the operating system as appropriate. The BIOS may be configured to check external devices, etc. The above is the same for all embodiments.

[0071] As shown in the figure, the present invention can basically be configured with a general-purpose computer program and various devices. The computer basically operates in a form in which a program recorded in non-volatile memory is loaded into main memory, and processing is executed by the main memory, CPU, and various devices. Communication with devices is performed via an interface connected to a bus line. Possible interfaces include a display interface, a keyboard, and a communication buffer. Below, an embodiment of the present invention will be described with reference to the illustrated examples.

[0072] <Satisfying the use of the laws of nature in the present invention>

[0073] The present invention functions through the cooperation of a computer, a communication device, and software. Specifically, the present invention relates to a health and medical information management system for accumulating and managing health and medical information, which is information related to an individual's health and medical care, and various information and data are exchanged between a third-party terminal and an administrator terminal via a network using hardware resources. From this perspective, if the present invention is judged based on the resources such as a computer in the claims and the specification and the common general knowledge related to those matters, the present invention as a whole utilizes the laws of nature and falls under a computer-software related invention.

[0074] <The significance of using the laws of nature required in patent law>

[0075] The use of the laws of nature required by the Patent Act is required to ensure that an invention can be used industrially and usefully, based on the purpose of the law, from the viewpoint that an invention must have industrial applicability and contribute to the development of industry. In other words, it is required that the invention be industrially useful, that is, that the effect of the invention declared at the time of application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the use of the laws of nature is interpreted as the function of each of the invention-specific matters (invention constituent elements), which are the components of the invention for achieving the effect of the invention, being achieved by utilizing the laws of nature. Furthermore, the effect of an invention should be one that has the potential to provide a certain usefulness to the user who uses the invention, and should not be viewed from the perspective of how the user feels or thinks about that usefulness. Therefore, even if the effect that the user obtains from this system is a psychological effect, the effect itself is not subject to the required use of the laws of nature. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0076] Hereinafter, the embodiments of the present invention will be described with reference to the accompanying drawings. The mutual relationship between the embodiments and the claims is as follows. Mainly, the explanation of the first embodiment relates to claims 1, 16, and 31, the explanation of the second embodiment relates to claims 2, 17, and 32, the explanation of the third embodiment relates to claims 3, 18, and 33, the explanation of the fourth embodiment relates to claims 4, 19, and 34, the explanation of the fifth embodiment relates to claims 5, 20, and 35, the explanation of the sixth embodiment relates to claims 6, 21, and 36, the explanation of the seventh embodiment relates to claims 7, 22, and 37, the explanation of the eighth embodiment relates to claims 8, 23, and 38, the explanation of the ninth embodiment relates to claims 9, 24, and 39, and the explanation of the tenth embodiment relates to claims 10, 25, and 40. The present invention should not be limited to these embodiments in any way, and may be implemented in various forms without departing from the spirit of the invention.

[0077] <Overall configuration of the health and medical information management system of the present invention> FIG. 2 is a diagram showing an example of the overall configuration of a health and medical care related information management system according to the present invention. The health and medical related information management system 200 stores any one of electronic medical record information, various test information (which may include medical checkups, medical examinations, etc.), prescription information, medical history information, medication status information, vital information (including at least, but not limited to, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, brain waves, electrocardiograms, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), information on medical questionnaires, data from health promotion apps, and conversation data from interactive health promotion SNS. The system is made up of: health and medical care related information storage unit 201 which stores health and medical care related information including the above information; access control unit 202 which controls the disclosure of the health and medical care related information stored in health and medical care related information storage unit 201 to third parties via the network; incentive management unit 203 which provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to the provision history in provision history holding unit 204 described below regarding whether or not to allow the disclosure of the health and medical care related information about an individual; and provision history holding unit 204 which holds the provision history, which is a history of incentives provided to each individual.

[0078] Furthermore, the health and medical care related information management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (e.g., the Internet, a WAN, a LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (e.g., a personal computer, a tablet terminal, a smartphone, etc.) that can be connected to the network 205 via a wired or wireless interface (e.g., a communication cable, a WiFi router, etc.).

[0079] In addition, in the present invention, a "third party" refers to an individual (including, but not limited to, the patient himself / herself, his / her family and / or caregivers), as well as medical professionals and non-medical professionals, as described below. In addition, an “administrator” is a person who is responsible for managing and operating the entire health and medical related information management system (for example, this may include an individual, or an institution, organization, or corporation to which the individual belongs. It may also include an employee of a government agency or local government, or an institution, organization, or corporation commissioned by a government agency or local government), and may have the authority to edit, add, and delete various information in the health and medical related information management system.

[0080] For example, "electronic medical record information" may include basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information about the examination (e.g., the patient's main complaint (subjective symptoms and complaints about physical condition, etc.), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information about nursing and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, brain wave, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urine, etc.)), etc. It may also include, but is not limited to, blood glucose level, blood glucose level (e.g., glucose concentration, riboflavin, ketone bodies, nitrites, etc.), sleep time, etc.), observation results, records of urine and stool, records of dietary content and intake, records of nursing care, etc.), information regarding tests (e.g., test instructions, test results, images (partial) obtained by imaging tests, reports on those images, etc.), information regarding treatment or surgery (e.g., instructions for treatment or surgery, progress and results of treatment or surgery, method and diagnosis results if a pathological diagnosis was performed, etc.), information regarding medication (e.g., drug development instructions, date and time of medication and medication, results of medication, etc.), and follow-up information after treatment or surgery.

[0081] For example, "prescription information" may include the insurer number, name, date of birth, sex, name of the medical institution, contact information, name of the prescribing doctor, name of the medication, form of the medication (tablet, capsule, liquid, powder, granule, etc.), amount of medication (amount to take per dose), number of times to take per day, timing, information about changing to generic drugs, number of times of divided dispensing, etc. In addition, "medicinal history information" may include, for example, the patient's name, date of birth, sex, My Number information or insured card number, address, emergency contact information, name of the insurance medical institution and name of the insured physician that prescribed the medicine, prescription date, prescription contents, dispensing date, key points of inquiries regarding the prescription contents, the patient's constitution, allergy history, side effect history, key points of inquiries from the patient or their family, medication status, confirmation of remaining medication status, changes in physical condition while taking the medication, concomitant medications, medical history information including complications, whether the patient has visited another department, whether or not there are symptoms that are suspected to be side effects, food and drink intake (drug interactions), the patient's wishes regarding the use of generic drugs, the status of information provided in the notebook, key points of medication instructions, and the name of the insurance pharmacist who provided the instructions.

[0082] Furthermore, for example, "medication status information" may include information regarding the remaining amount of prescribed medication (e.g., including the amount of medication remaining if the patient accidentally forgets to take the medication or if the patient intentionally does not take the medication), timing information regarding visits to the hospital / clinic (e.g., the period from the scheduled end date of the prescription (scheduled end date of medication) to the actual visit to the hospital / clinic (e.g., including cases where the patient visits the hospital / clinic earlier than scheduled or later than scheduled)), and patient complaints about medication (e.g., subjective symptoms and complaints about physical condition, such as developing hives after continuing to take a certain medication, or feeling dizzy after taking a certain medication).

[0083] For example, "health and medical related information" may include PHR, etc. Or, it may include various information obtained from PHR systems, etc. via API. Here, PHR is an abbreviation of Personal Health Record, and refers to information related to an individual's health, medical care, and nursing care. The aim is for each individual to be able to receive high-quality services suited to their own health condition by managing and utilizing their own health, medical care, and nursing care information chronologically throughout their lifetime. For example, up until now, each citizen has kept a lot of health and medical information in various notebooks and paper documents. The media and places where these records are kept vary depending on the life stage at that time. For example, at the time of childbirth, it is the "maternal and child health notebook," at the time of schooling, it is the "results of school health checkups," and at the time of employment, it is the "results of regular health checkups." In addition, depending on physical condition, one may manage one's own health using a "disease management notebook" or a "medicine notebook," and when one becomes elderly, one records it in a "nursing care prevention notebook" or a "family doctor cooperation notebook." There is a concept and mechanism for digitalizing this existing "notebook culture" and centralizing it as data so that one can manage and utilize it oneself, and it is expected to become even more widespread in the future.

[0084] In the present invention, the health and medical care related information storage unit 201 and access control unit 202 are described on the assumption that they are configured to function on the same server, but this is not limiting and each may be configured to have a different function or role on a separate server. Alternatively, a configuration may be made in which multiple servers are provided, and information and data are exchanged between these servers to execute various functions in cooperation or collaboration. For example, the health and medical care related information storage unit 201 and access control unit 202 may be configured as a cloud server.

[0085] Similarly, the present invention will be described on the assumption that health and medical information storage unit 201 and access control unit 202, incentive management unit 203 and provision history holding unit 204 are configured to function on separate servers, but this is not limiting and each may be configured to perform each function or role on the same server. Alternatively, multiple servers may be provided, and information and data may be exchanged between these servers to execute various functions in cooperation or collaboration. For example, health and medical information storage unit 201, access control unit 202, incentive management unit 203 and provision history holding unit 204 may be configured as a cloud server.

[0086] <Embodiment 1 (corresponding mainly to claims 1, 16, and 31)> <Overview of embodiment 1> This embodiment provides a health and medical care related information management system having a health and medical care related information storage unit for storing and managing health and medical care related information about individuals, an access control unit for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network, an incentive management unit for providing incentives to individuals to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to permit disclosure of the health and medical care related information about an individual, and a provision history storage unit that stores the provision history which is a history of incentives provided to each individual.In order to achieve this, a method executed by a CPU in the health and medical care related information management system which is a computer, and an operating program for the health and medical care related information management system which is written in a manner readable and executable by the health and medical care related information management system which is a computer are also provided.

[0087] <Functional configuration of embodiment 1> 3 is a diagram showing the functional configuration of the health and medical care related information management system in embodiment 1. In this embodiment, the system includes a health and medical care related information storage unit, an access control unit, an incentive management unit, and a provision history storage unit.

[0088] <Description of the configuration of embodiment 1: Health and medical related information storage unit> The "healthcare related information storage unit" 201 is configured to have the function of storing healthcare related information including one or more of the following information: electronic medical record information on an individual, various test information (which may include health checkups, medical examinations, etc.), prescription information, medication history information, medication status information, vital signs information (including at least, but not limited to, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, brain waves, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), medical questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS.

[0089] Here, "electronic medical record information" refers to, for example, basic information on the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information on medical examination (e.g., patient's main complaint (subjective symptoms and complaints about physical condition, etc.), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information on nursing and progress (e.g., vital information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinol, etc.)), etc. It is desirable to have the record be configured to include at least the following: (i) blood glucose level, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc., but are not limited to these, observation results, records of urine and stool, records of food content and intake, records of nursing care, etc.), information related to tests (e.g., test instructions, test results, images (partially) obtained by imaging tests, reports on those images, etc.), information related to treatment or surgery (e.g., instructions for treatment or surgery, progress and results of treatment or surgery, method and diagnosis results if a pathological diagnosis was performed, etc.), information related to medication (e.g., instructions for drug administration, date and time of medication and medication, results of medication, etc.), and post-treatment or post-operative follow-up information.

[0090] In addition, it is desirable for the "prescription information" to be configured to include, for example, the insurer number, name, date of birth, sex, name of the medical institution, contact information, name of the prescribing doctor, name of the medicine, form of the medicine (tablet, capsule, liquid, powder, granule, etc.), amount of the medicine (amount to take per dose), number of times to take it per day, timing, information about changing to generic medicines, number of times of divided dispensing, etc.

[0091] In addition, it is desirable for the "medication history information" to be configured to include, for example, the patient's name, date of birth, sex, My Number information or insured person's card number, address, emergency contact information, name of the health insurance medical institution and name of the insured physician that prescribed the prescription, prescription date, prescription contents, dispensing date, key points of inquiries regarding the prescription contents, the patient's constitution, allergy history, side effect history, key points of inquiries from the patient or their family, medication status, confirmation of remaining medication status, changes in physical condition while taking the medication, concomitant medications, information on medical history including complications, whether the patient has visited another department, whether or not there are symptoms that are suspected to be side effects, food and drink intake (drug interactions), the patient's wishes regarding the use of generic drugs, the status of information provided in the notebook, key points of medication instructions, and the name of the insured pharmacist who provided the instructions.

[0092] In addition, it is desirable that the "medication status information" be configured to include, for example, information regarding the remaining amount of prescribed medication (including, for example, the amount of medication remaining if the patient accidentally forgets to take the medication or if the patient intentionally does not take it), timing information regarding visits to the hospital / clinic (for example, the period from the scheduled end date of the prescription (scheduled end date of medication) to the actual visit to the hospital / clinic (including, for example, a visit to the hospital / clinic earlier than scheduled or later than scheduled)), and patient complaints about medication (including subjective symptoms and complaints about physical condition, such as developing hives after taking a certain medication continuously, or feeling dizzy after taking a certain medication because it was too effective). In addition, in the present invention, personal identification number (My Number) information or the insured card symbol and number of the health insurance to which the individual (user) is subscribed may be used as identification information for uniquely identifying an individual (user), and health and medical related information regarding the individual may be associated with this and stored and organized.

[0093] For example, "health and medical related information" may include PHR, etc. Or, it may include various information obtained from PHR systems, etc. via API. Here, PHR is an abbreviation of Personal Health Record, and refers to information related to an individual's health, medical care, and nursing care. The aim is for each individual to be able to receive high-quality services suited to their own health condition by managing and utilizing their own health, medical care, and nursing care information chronologically throughout their lifetime. For example, up until now, each citizen has kept a lot of health and medical information in various notebooks and paper documents. The media and places where these records are kept vary depending on the life stage at that time. For example, at the time of childbirth, it is the "maternal and child health notebook," at the time of schooling, it is the "results of school health checkups," and at the time of employment, it is the "results of regular health checkups." In addition, depending on physical condition, one may manage one's own health using a "disease management notebook" or a "medicine notebook," and when one becomes elderly, one records it in a "nursing care prevention notebook" or a "family doctor cooperation notebook." There is a concept and mechanism for digitalizing this existing "notebook culture" and centralizing it as data so that one can manage and utilize it oneself, and it is expected to become even more widespread in the future.

[0094] <Embodiment 1: Description of Configuration: Access Control Unit> The "access control unit" 202 is configured to have a function for controlling the disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network. For example, as described below, it is desirable to configure it to have a function for analyzing IP packets for access from a third party terminal, a function for determining a destination IP address, a function for acquiring an access ID / user ID, a function for acquiring access subject / user attributes, and a function for performing access control based on these.

[0095] <Description of Configuration of Embodiment 1: Incentive Management Unit> The 'incentive management unit' 203 is configured to have a function of providing incentives to individuals to encourage the disclosure of their health and medical care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the individual's health and medical care related information. Actions "to provide an incentive" include actions to actually provide an incentive using electronic data, etc., and actions in which the actual act of providing an incentive is carried out separately, but which involve the execution of processing necessary to put into action the separate action. 10 is a diagram showing types of incentives, but in the case where points are provided as an incentive or electronic data such as an information service is provided, it is an operation that executes the necessary operation by a computer, and in the case where medicine / supplements are provided as an incentive, it is, for example, a processing operation for sending medicine or supplements to the publisher of health and medical care related information. In other words, since the incentive management unit executes the operation "for...", it does not necessarily have to be the incentive providing operation itself. FIG. 44 is a diagram showing an example of a user interface of the health care related information management system according to the present invention. In this case, the information is associated with the individual (user) who has accessed using the third-party terminal, i.e., the individual (user) who possesses the personal identification number (My Number) information "123456789012", and information indicating whether or not the individual has consented to providing an incentive for which health and medical related information is stored and managed in a list format. If consent is given, the health and medical related information is permitted to be disclosed to third parties, i.e., an incentive is granted. If consent is not given, the health and medical related information is not disclosed to third parties, i.e., an incentive is not granted. It is desirable that the incentive information is always kept up to date by the incentive management unit periodically exchanging information with the health and medical related information storage unit and the provision history storage unit described below. For example, in the case of Figure 44, whether or not an individual's consent has been given is stored and managed for each piece of health and medical care related information. Here, a "circle" in the "Agree / Disagree" column indicates the individual's intention to consent, and an "X" indicates the individual's intention to disagree. It is preferable that the input of a "O" or "X" mark in the "Agree / Disagree" column be configured, for example, in a pull-down menu format on the terminal screen so that an individual (user) can select the "O" or "X" mark of their own volition. Here, when a display item (such as "Regular medical checkup results") listed in the "Healthcare related information" column is clicked, touched or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when a "o" or "x" mark in the "Agree / Disagree" column is clicked, touched or tapped on the terminal screen, the date and time of consent or disagreement may be displayed on a pop-up screen. In particular, it is preferable that healthcare related information marked with a "o" mark in the "Agree / Disagree" column is stored and managed in the provision history storage unit described below. Note that healthcare related information with no mark in the "Agree / Disagree" column indicates that the individual (user) has not yet indicated his / her intention to consent or disagree.

[0096] FIG. 40 is a diagram showing the user interface of the health and medical care related information management system of the present invention. In this case, when an individual enters their personal identification number (My Number) and password information into the appropriate fields, if matching information exists within the system, the incentive management department authenticates the individual and grants access. In the case of this diagram, the method is explained as one in which the user directly inputs the information, but if the user uses a smartphone, for example, the smartphone's IC card reading function can be used to hold the My Number card over the smartphone to automatically read and input specified information such as personal identification number (My Number) information. For example, if the user fails to enter the My Number information and / or password information three times in a row, the device may be locked and the user may have to go to a local government (such as a city hall) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the device, or the user may be notified by voice or a warning sound. It is also desirable that information regarding health and medical care to which an individual (user) has given consent or not be stored and managed in a manner that makes it easy to determine. Furthermore, the incentive provision process is preferably configured to determine the degree of incentive to be given for the health and medical care related information to which the user has given consent.

[0097] For example, in the example of FIG. 44, when the health and medical related information of one individual is provided to one provider, the My Number points are calculated and awarded based on a predetermined calculation rule to be 1000p (points). In addition, when the same health and medical related information is provided to two providers, the My Number points are calculated and awarded based on a predetermined calculation rule to be doubled to 2000p (points). In addition, the calculation rule for the incentive may be weighted in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical related information, and a different incentive may be calculated and awarded for each health and medical related information. In particular, for example, malignant neoplasms (cancer), which are the leading cause of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, various infectious diseases defined in the Infectious Diseases Act including COVID-19, and unique diseases with few cases worldwide, it is possible to set the calculation rule so that the incentive is more (higher) than for other diseases, considering that the disclosure of the health and medical related information to a third party can greatly contribute to the progress of medicine.

[0098] In addition, "incentive" simply means "motivation, reward" and means intentionally giving a stimulus with the aim of causing some action. In the present invention, "incentive" may include, in addition to the above-mentioned My Number points, individual information services or general information services for information providers, provision of individual medicines or supplements, provision of books and other products, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of rights, such as provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management application or pedometer application), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash, etc. Furthermore, the following may be included: Discounting some product or service, for example, discounting or discounting insurance premiums, discounting insurance premium rates. Furthermore, it may include refund of paid fees, award of prizes (e.g., novelties, etc.), awards or recognition, and provision of complimentary coupons. It could also be reward points, discounts, free products, early access to new products or exclusive sales, the right to write reviews about the brand, refer friends or create user-generated content, or an upgrade to a product or service.

[0099] In addition, the present invention can be applied to both cases, that is, incentives can be provided, in the case where the health and medical care related information of an individual is already associated with and stored and managed with disclosure permission information indicating whether or not disclosure to a third party is permitted, and the case where an individual (user) newly registers health and medical care related information related to himself / herself in the health and medical care related information storage unit and the disclosure permission information is not yet associated and stored and managed. In other words, the health and medical care related information of an individual is not stored in the health and medical care related information management system, but, for example, when the health and medical care related information of the individual is stored in a terminal owned by the individual and is uploaded to the present system, if it is determined that the uploaded information is available for disclosure as health and medical care related information by a formal check, the incentive management unit can be configured to function to provide an incentive according to the result. In this case, the access control unit of the present system may be configured not to deny access to view the health and medical care related information from a third party. However, it may be configured to partially deny or restrict access depending on the type or qualification of the third party. Uploading the health and medical care related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal but a system that stores other health and medical care related information. For example, the system can be configured so that health and medical information stored in a maternal and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc., can be transferred to this system with the individual's consent. In this case, the incentive management unit can be configured to function when the individual's health and medical information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

[0100] Here, among the functions of the incentive management unit, the computer operation for "referring to and providing" includes, for example, one or more of a process of executing an operation to provide an incentive when it is confirmed that an incentive has not been provided in the past, a process of executing an operation to provide an incentive when it is determined that a predetermined period (time) has passed since an incentive was provided in the past, a process of executing an operation to provide an incentive when it is determined that a certain value has been disclosed as a result of the reference, and a process of executing an operation to provide an incentive when something that was made public but not actually viewed by anyone is viewed by someone (in this case, the incentive provision history and the health and medical information viewing history have the same meaning).

[0101] In addition, "encouraging disclosure" is synonymous with "encouraging disclosure." In the present invention, "disclosure" refers to making all or part of health and medical related information, or processed or transformed information thereof, available in some form (which may be anonymous) to others (not including oneself. However, in the case of a person who is assisted in managing the information by someone, such as a child, an incompetent person, or a person receiving care, the person assisting the person in managing the information is not included in others), and may refer to either the case where the information is actually disclosed or the case where the information is not actually disclosed but is in a state where it can be disclosed. The recipients of disclosure may include, but are not limited to, others belonging to medical institutions, medical-related organizations, public institutions, pharmaceutical-related companies, etc.

[0102] <Description of the configuration of embodiment 1: provision history storage unit> The 'providing history storage unit' 204 is configured to have a function of storing a providing history, which is a history of incentives provided to each individual. The "provision history" refers to one or more of a history of whether an incentive was granted, a history clearly indicating the content of the incentive granted, a history clearly indicating the amount of the incentive granted, etc., and may be related to the time of grant, or may only clearly indicate that the incentive was granted. Therefore, since it may be a person who only clearly indicates that an incentive was granted, in a configuration in which an incentive is essentially granted for the provision of health and medical care-related information, the incentive provision history is the same as the history of disclosure of health and medical care-related information. Therefore, the provision of an incentive is equivalent to encouraging disclosure by referring to the disclosure history of health and medical care-related information, and the provision of an incentive is equivalent to referring to the provision history. Therefore, in the present invention, even when the incentive management unit refers to the disclosure history of health and medical care-related information, this may be included in the incentive management unit's reference to the provision history.

[0103] Various methods of providing incentives are possible. For example, when an individual gives permission to disclose all of his / her health and medical related information, all the health and medical related information associated with the individual identification information can be viewed by an institution having a certain authority without any limit on the number of times. It is possible to configure the system so that one incentive is provided only once in response to one act of permission to disclose, or to provide an incentive every time the permitted health and medical related information is viewed as a result of permission to disclose. In addition, since an individual's health and medical related information is usually divided into multiple items, it is also possible to adopt a configuration in which incentives are provided according to the items viewed or used. Furthermore, it is also possible to provide incentives for each item according to the number of times the information is viewed and used. Incidentally, the items in the health and medical related information can be divided into various categories, such as by onset of disease, by medical examination, by issuance of prescription, by type of disease, by generation of medical history information, and by acquisition of medication information. It is also possible to provide incentives according to the depth of disclosure of health and medical related information. The depth of disclosure here can be configured to provide more or higher quality incentives as the disclosure becomes increasingly deeper, for example, from disclosing only the name of the disease, to further disclosing the name, usage, and dosage of the medication prescribed for that disease, to further disclosing the results of taking the medication (e.g., improvement of symptoms, onset of side effects, etc.), to disclosing the patient's feelings about the medication.

[0104] Next, the incentive awarding process flow will be described. The incentive information is electronically processed by the incentive management unit or an incentive output unit or an incentive processing unit linked thereto so that some kind of benefit is generated for the individual patient. Note that this electronic processing may be the granting of the incentive itself, or may be a preliminary process for granting the incentive. The incentive is provided when an individual, such as a patient, gives permission to make public all or part of their health and medical information, or information that has been processed or altered. This trigger may be initiated by a device used by the individual, such as a smartphone, or may be initiated by a device of a medical institution, etc. For example, in the case of a smartphone, an application is installed on the smartphone that allows the individual to view and, to a certain extent, edit their health and medical related information. The individual uses the application as an entry point to access the system of the present invention, enters the health and medical related information disclosure portal, and performs the operation of granting permission for the disclosure of their own health and medical related information.

[0105] It is also possible to configure the system so that the same operations can be performed by accessing the web instead of using an application. This access must be strictly managed in terms of security, and it is preferable to configure the system so that permission to disclose can be given using a one-time password, for example. In this case, the health and medical related information management system may be a so-called PHR, or a system linked to a PHR. This system may be configured to independently manage the disclosure of health and medical related information for all citizens, or multiple similar systems may be configured in parallel to manage the disclosure of health and medical related information stored in the PHR. Incidentally, when the trigger is pulled from a terminal at a medical institution, it means that a medical professional who is interviewing an individual who is a patient pulls the trigger with the patient's permission. In that case, it is preferable to borrow a health insurance card, a personal identification number (My Number) card, or an equivalent proof from the patient, and configure the system so that the trigger is pulled using the borrowed proof. The medical institution referred to here may include a nursing home, a pharmacy (including a dispensing pharmacy), and other welfare facilities. It may also be a medical institution accessed over the Internet. Furthermore, it may be configured so that a designated management server of a pharmaceutical company or a terminal used by a public research institution, etc., can pull the trigger. Of course, authentication of the individual who is the patient, etc. is a prerequisite.

[0106] FIG. 6 is a diagram showing an example of the provision history storage unit of the health and medical care related information management system in this embodiment. As shown in this diagram, we can see that the provision history of Mr. X, whose personal identification number (My Number) information is "123456789012", and Mr. Y, whose personal identification number (My Number) information is "456789012345", is stored and managed separately for each individual. For example, for Mr. X, whose personal number (My Number) information is "123456789012", it is shown that the history of providing the incentive "My Number Points 1000p" to the recipient "Dr. Suzuki (Hospital B)" of the health and medical related information "Regular Health Check Results (Hospital A)" with ID "0001" on the date and time of provision "2023 / 04 / 01" is retained and managed. Similarly, for other health and medical related information, the history of incentives provided to each individual is maintained and managed.

[0107] <Embodiment 1: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0108] Fig. 4 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this diagram, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 401 that performs various calculation processes, and a "main memory" 402. It also comprises a "non-volatile memory" 403 that holds predetermined information, and a "network I / F (interface)" 404 that transmits and receives information to and from multiple third party terminals 406 and an administrator terminal 407. These are then interconnected by a data communication path such as a "bus" 405, and perform the transmission and reception of information and processing.

[0109] Here, the "main memory" reads out programs that perform various processes in order to have the "CPU" execute them, and also provides a work area that is a working area for those programs. In addition, this "main memory" and "non-volatile memory" are each assigned multiple addresses, and the programs executed by the "CPU" can identify and access those addresses to exchange data with each other and perform processing. In this embodiment, the programs stored in the "main memory" include a health and medical care related information accumulation program, an access control program, an incentive management program, and a provision history retention program. In addition, the "main memory" and "non-volatile memory" store health and medical care related information, incentive management information, provision history information, and the like.

[0110] The "CPU" executes a health and medical information accumulation program stored in the "main memory" to store health and medical information on an individual, such as electronic medical record information, various examination information, prescription information, medical history information, medication status information, and vital information (e.g., body temperature, blood pressure, heart rate, etc.), in the "main memory" or "non-volatile memory" via the "network I / F". It also executes an access control program stored in the "main memory" to control access to the health and medical information on an individual. It also executes an incentive management program stored in the "main memory" to provide and manage incentives to individuals to encourage the disclosure of health and medical information by referring to provision history information regarding whether or not to permit disclosure of the health and medical information on an individual. It also executes a provision history retention program stored in the "main memory" to store provision history information, which is a history of incentive provision, in the "main memory" or "non-volatile memory".

[0111] <Embodiment 1: Healthcare-related information management system: Processing flow> 5 is a diagram showing a process flow when using the health and medical care related information management system in this embodiment. As shown in the diagram, the processing method includes a health and medical care related information accumulation step S501, an access control step S502, an incentive management step S503, and a provision history storage step S504.

[0112] The "healthcare related information accumulation step" S501 is a step of accumulating healthcare related information on an individual, such as electronic medical record information, various examination information, prescription information, medical history information, medication status information, and vital information (such as body temperature, blood pressure, heart rate, etc.).

[0113] The "access control step" S502 is a stage for controlling access to the health and medical care related information on an individual stored in the health and medical care related information storage step.

[0114] The “incentive management step” S503 is a step in which incentives are provided to individuals to encourage the disclosure of health and medical care-related information by referring to the provision history stored in the provision history storage step described below regarding whether or not to allow the disclosure of health and medical care-related information about the individual.

[0115] The "providing history storage step" S504 is a stage for storing a providing history, which is a history of incentives provided to each individual.

[0116] <Summary> As described above, the present invention can provide a health and medical care related information management system that provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to a provision history, which is a history of incentives provided to each individual, when deciding whether or not to disclose health and medical care related information about an individual. Furthermore, the present invention provides incentives to individuals, which allows them to give permission for the disclosure of their health and medical information to third parties, thereby increasing the opportunities for individuals to disclose their health and medical information to third parties, thereby reducing medical expenses across the country and improving the health of the entire population, as well as reducing the time and money spent by research institutions, pharmaceutical companies, and others on drug discovery, and ultimately contributing to the advancement of medicine. Here, "drug discovery" refers to the process from compounds and chemical substances (also called seeds) that are the basis of pharmaceuticals to products that are sold. In addition, the following steps (1) to (5) are essential for compounds and chemical substances to become pharmaceuticals and be sold. (1) Select candidate drug discovery targets (compounds and chemical substances) (2) Screening the effects of drugs to select candidate substances There are various types of screening, including biotechnology techniques, combinatorial chemistry (techniques for creating compounds by combining a large number of compounds), and highly efficient screening that utilizes AI robotics technology. (3) Animal experiments Safety and efficacy are thoroughly investigated and confirmed using animals or cultured cells. Drugs whose safety and efficacy have been confirmed at this stage are called "investigational drugs." (4) Clinical trials The investigational drug is actually administered to humans to thoroughly examine its effectiveness and safety and to determine whether it is useful for actual treatment. (5) Application for approval and review Drugs that pass all of the above tests (1) to (4) are submitted to the Ministry of Health, Labor and Welfare. After that, they are examined by the Pharmaceuticals and Medical Devices Agency, and approval by the Minister of Health, Labor and Welfare is awaited. Only after approval can a drug be sold as a product. In general, it is said that drug discovery takes about 10 to 18 years, and the probability that a compound or chemical substance will become a new drug is about 1 in 10,000. It is also said that the total cost of successful drug discovery is close to 20 billion yen.

[0117] <Embodiment 2 (corresponding mainly to claims 2, 17, and 32)> <Overview of the Second Embodiment> This embodiment is characterized in that it has an incentive type information storage unit that stores incentive type information, which is information indicating the types of multiple incentives, and the incentive management unit selects and provides an incentive to an individual according to the incentive provision history based on the incentive type information stored in the incentive type information storage unit. Hereafter, explanations of functions, hardware configurations, and process flows that overlap with those of the first embodiment will be omitted as appropriate.

[0118] <Description of the configuration of the second embodiment: Incentive type information storage unit> FIG. 7 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment. The 'incentive type information storage unit' 701 is configured to have a function of storing incentive type information, which is information indicating the types of a plurality of incentives. FIG. 10 is a diagram showing an example of the incentive type information storage unit of the health and medical care related information management system in this embodiment. As shown in this figure, incentive type information and specific incentives related to that incentive type information are stored and managed in association with each other. For example, when the incentive type information is "(A) points", it can be seen that specific examples of incentives are stored and managed, such as "(a) My Number points, (b) transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) distribution electronic money (WAON (registered trademark), nanacо (registered trademark), etc.)". Similarly, specific examples of incentives are listed and stored and managed for other incentive type information. When an individual (user) provides his / her own health and medical care related information to an appropriate recipient, the individual can select one of the incentives based on this incentive type information.

[0119] <Description of the configuration of the second embodiment: Incentive management unit - characteristic functions of the second embodiment> The selection made by the incentive management unit can be of two types: the selection is made automatically by a computer (configured by a program) constituting the incentive management unit, and the selection is made by the incentive management unit based on the selection action of the provider of the health and medical-related information (usually the owner of the health and medical-related information, but in cases where the person is under some kind of supervision, such as a child, it may be the administrator). In the latter case, the computer accepts a person's selection action and executes a selection based on the selection action. In the case where the computer automatically makes a selection, for example, when providing a pharmaceutical manufacturer with information on the results of taking medicines owned by the owner of the health and medical-related information, it is possible to configure the incentive management unit to automatically select an incentive provided by the pharmaceutical manufacturer. Also, if the provider of the health and medical-related information lives in Aomori Prefecture, it is possible to automatically select an incentive that is valid only in Aomori Prefecture. In this way, the automatic selection can be configured to be made automatically based on the content of the provided health and medical-related information and attribute information of the owner of the health and medical-related information.

[0120] In both the case of automatic selection and the case of selection based on a selection made by the owner (provider) of the health and medical care-related information, the incentive management unit is configured to make a selection by utilizing a selection rule. The selection rule may be stored in a selection rule storage means provided in the incentive management unit, or may be selected by utilizing a selection rule stored outside the incentive management unit or outside the present system. The selection rule may be configured to be optimized (not necessarily optimized, and the simple meaning of being changed is also included) as appropriate according to the provision history of the owner (provider) of the health and medical care-related information and the disclosure history of the health and medical care-related information. For example, the selection rule may be configured to be changed by an editing artificial intelligence or the like. A selection rule editing unit may be provided so that the rule can be edited by an operation by an administrator of the present system or the like. The incentive management unit is capable of selecting and providing an incentive to an individual based on the incentive type information stored in the incentive type information storage unit in accordance with the provision history described above. In other words, the incentive management unit is configured to select and provide incentive type information. FIG. 11 is a diagram showing an example of the incentive management unit of the health and medical care related information management system in this embodiment. As shown in this figure, a specific incentive can be selected and provided by an individual (user) selecting the incentive type information or by the incentive management unit automatically selecting it. For example, in the case of Mr. Y, in addition to "points (My Number points and PASMO (registered trademark)", it can be seen that "software / apps" and "cash" were selected and provided.

[0121] Furthermore, when the incentive management unit selects and provides an incentive based on the incentive type information, the following cases are assumed for the process leading up to the specific use of the incentive.

[0122] For example, if "points" are selected as the incentive, the following cases may occur: First, when the incentive is "My Number Points", the incentive management unit in this system sends information on personal identification information (e.g., personal number (My Number)) and points granted to the system to a management server owned by an organization that manages and operates the My Number Portal Site, which triggers the system. In the server, the points associated with the personal identification information of the My Number Points associated with the personal identification information are incremented by the amount of points granted. In other words, the management server owned by the organization that manages and operates the My Number Portal Site grants My Number Points to an individual corresponding to the personal identification information based on this trigger information, and notifies the terminal (e.g., a smartphone) used by the individual of information that the My Number Points have been incremented, allowing the individual to use the My Number Points including the increment. Then, the My Number Points can be exchanged for other transportation / distribution electronic money points to purchase products that the individual desires, or to pay for various services that the individual desires.

[0123] Second, if the incentive is a "prepaid card," a prepaid card (for example, a card with an amount set according to the purchase price and identification information for identifying the card) purchased at a convenience store or the like can be used to purchase products on AMAZON (registered trademark) or the like.

[0124] Also, for example, when "Medicine / Supplements" is selected as an incentive, the incentive management unit in this system triggers the sending of information including personal identification information and its attribute information (e.g., personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information for identifying the product desired to be purchased (e.g., product name such as "Supplement ABC", manufacturer / distributor information, price information, etc.) via the network to a management server managed and operated by a purchasing site such as AMAZON (registered trademark). Then, if the specified product is in stock on the AMAZON (registered trademark) management server, a delivery company will deliver the product to your home.

[0125] Also, for example, when "provision of rights" is selected as an incentive, the incentive management unit in this system transmits personal identification information and its attribute information (for example, personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information for identifying the desired rights (for example, an identification number indicating an admission ticket to Disneyland (registered trademark)) via a network to a management server owned by an organization that manages and operates the provision of rights, which triggers the transmission. In response to this trigger, the management server transmits a QR code (registered trademark) that serves as an admission ticket to Disneyland (registered trademark) to a smartphone used by the individual. Then, the individual who has saved the QR code (registered trademark) on his / her smartphone goes to Disneyland (registered trademark), which is the rights execution organization, and holds the QR code (registered trademark) over a reader at the entrance reception desk, and if there are no problems, the individual can enter Disneyland (registered trademark) and enjoy various attractions, meals, etc.

[0126] <Embodiment 2: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0127] Figure 8 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 801 that performs various calculation processes, and a "main memory" 802. It also comprises a "non-volatile memory" 803 that holds predetermined information, and a "network I / F (interface)" 804 that transmits and receives information to and from multiple third party terminals 806 and an administrator terminal 807. These are then interconnected by a data communication path such as a "bus" 805, and perform the transmission and reception of information and processing.

[0128] Here, the "main memory" reads out programs that perform various processes in order to have the "CPU" execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is an incentive type information retention program. In addition, incentive type information, incentive management information, etc. are stored in the "main memory" and "non-volatile memory."

[0129] The "CPU" executes the incentive type information retention program stored in the "main memory" to retain incentive type information, which is information indicating multiple incentive types, and also stores the incentive type information and related incentive management information in the "main memory" and / or the "non-volatile memory."

[0130] <Embodiment 2: Healthcare-related information management system: Processing flow> 9 is a diagram showing a process flow when using the health care related information management system in this embodiment. As shown in the diagram, this is a processing method including an access authentication process step S901.

[0131] The "incentive type information storage step" S901 is a stage for storing incentive type information, which is information indicating the types of a plurality of incentives.

[0132] <Summary> As described above, the present invention has an incentive type information holding unit that holds incentive type information, which is information indicating multiple types of incentives, and the incentive management unit can select and provide an incentive to an individual based on the incentive type information held in the incentive type information holding unit, depending on the provision history.

[0133] <Embodiment 3 (corresponding mainly to claims 3, 18, and 33)> <Overview of the Third Embodiment> This embodiment is characterized by having a termination request receiving unit that receives a termination request, which is a request to stop or terminate the disclosure of already disclosed health care related information from an individual who stores health care related information in the health care related information storage unit, a termination condition storage unit that stores a termination condition, which is a condition for determining whether or not to terminate the disclosure based on information about the individual who made the termination request when the termination request is received, a judgment rule storage unit that stores a judgment rule, which is a rule for determining whether or not to terminate the disclosure of the health care related information based on information about the individual who made the termination request and the stored termination condition, a termination judgment unit that determines whether or not to terminate the disclosure based on information about the individual, the stored termination condition, and the stored judgment rule when the termination request is received, and a termination control unit that controls the access control unit to terminate the disclosure of the health care related information of the individual when the judgment result of the termination judgment unit is that the disclosure should be terminated. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of the first and second embodiments will be omitted as appropriate.

[0134] <Embodiment 3: Configuration of Termination Request Reception Unit> FIG. 12 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment. The 'termination request receiving unit' 1201 is configured to have a function of receiving a termination request, which is a request to stop or terminate the publication of already-disclosed health and medical care related information, from an individual who has stored health and medical care related information in the health and medical care related information storage unit. For example, on the login screen of the health and medical related information management system shown in Figure 40, an individual (user) uses a third-party terminal to input their own personal identification number (My Number) information and password information, and if there is matching information on the system side, the individual is authenticated. By accessing the incentive management section and provision history storage section, the individual can view whether their own health and medical related information has been made public, to whom it has been provided, the type of incentive, the specific incentive, etc. Furthermore, for example, in the viewing screen shown in FIG. 44, it is desirable to configure the system so that a termination request can be sent from a third-party terminal, requesting the system to suspend or terminate the publication of desired health and medical care-related information from among already published health and medical care-related information, based on an individual's wishes, and the system can accept the termination request.

[0135] <Embodiment 3: Configuration of Termination Condition Storage Unit> The 'termination condition storage unit' 1202 is configured to have a function of storing termination conditions, which are conditions for determining whether or not termination is permitted based on information about the individual who made the termination request when the termination request is accepted. For example, the termination conditions may be as follows: However, the termination conditions are not necessarily limited to these. (1) If the disease is cured / completely cured / in remission If an individual (user) is deemed to have been "cured" (meaning that the illness or injury has been completely cured. In other words, that the condition has returned to the state before the illness or injury), or "recovered" (meaning that treatment for the illness or injury is no longer necessary and that the individual is able to live their daily life without problems. However, this does not necessarily mean that the individual will return to the state before the illness or injury), or "in remission" (meaning that the illness or injury has been temporarily or continuously recovered. This term is often used for illnesses that may recur, such as cancer or leukemia. This term refers to a state in which symptoms are suppressed, but continued treatment and regular examinations may be required.), the disclosure of the individual's health and medical information related to this illness may be suspended or terminated at the individual's will. (2) When an individual (user) moves (relocates) If an individual (user) moves (relocates) due to, for example, a job change or transfer, and their primary doctor (family doctor) who has been treating their illness or injury changes, they may, at their own will, suspend or terminate the disclosure of their personal health and medical information. (3) If your primary care physician (family doctor) changes If a patient's primary care physician (family doctor) who has been treating the patient for an illness or injury changes due to a transfer or reassignment of hospitals or other medical institutions, the patient may voluntarily suspend or terminate the disclosure of the patient's health and medical information.

[0136] <Embodiment 3: Description of the Configuration: Determination Rule Storage Unit> The “judgment rule storage unit” 1203 is configured to have the function of storing judgment rules, which are rules for determining whether or not to terminate the disclosure of health and medical related information based on information about the individual who requested termination and the stored termination conditions. For example, it is desirable to formulate a judgment rule for judging whether or not to terminate the disclosure of health and medical related information based on information obtained from the electronic medical record of this system that indicates that an individual's (user's) illness has been completely cured by the treatment and medication of the attending physician (family doctor) and the termination condition stored in the termination condition storage unit described above, for example, the above-mentioned condition (1).In this case, since it is determined that the illness has been completely cured, it is expected that there will be little significance or need for disclosing the health and medical related information to third parties, so it is preferable to terminate the disclosure as a judgment rule. Furthermore, when the attending physician (family doctor) at the medical institution (hospital, clinic, etc.) that treated an individual (user) changes, there is no longer any point in disclosing health and medical information to the original doctor, so it is also preferable to terminate disclosure as a judgment rule.However, for the new attending physician (family doctor), disclosing the individual's health and medical information is essential for formulating treatment and medication policies, so it is preferable to continue disclosing the information rather than terminating it as a judgment rule.

[0137] <Embodiment 3: Configuration of Termination Determination Unit> The “termination decision unit” 1203 is configured to have the function of determining whether or not to terminate, when a termination request is accepted, based on information about the individual, the stored termination conditions, and the stored decision rules. For example, based on electronic medical record information indicating that an individual's illness or injury has been cured, the termination condition stored in the termination condition storage unit described above (in this case, condition (1) above), and the judgment rule described above, it can be determined that the disclosure of this individual's health and medical related information should be terminated. Furthermore, for example, if it is considered that the individual is highly likely to relapse due to their constitution based on electronic medical record information indicating that an individual's illness (e.g., cancer, etc.) has gone into remission, the termination condition stored in the termination condition storage unit described above (in this case, condition (1) above), and the judgment rule described above, it can be determined that the disclosure of this individual's health and medical information should not be terminated. Furthermore, for example, it can be determined that the disclosure of this individual's health and medical related information should be terminated based on information in the electronic medical record indicating that the individual's primary physician (family doctor) who has been treating his or her illness or injury has been changed for various reasons, the termination conditions stored in the termination condition storage unit described above (in this case, condition (2) or condition (3) above), and the judgment rules described above.

[0138] <Embodiment 3: Configuration of Termination Control Unit> The 'termination control unit' 1204 is configured to have a function of controlling the access control unit to terminate the disclosure of the individual's health and medical care related information when the termination determination unit determines that the disclosure should be terminated. For example, if the judgment result of the above-mentioned termination judgment unit is that the disclosure should be terminated, that is, if the judgment result is that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's illness or injury has been completely cured and the termination condition stored in the above-mentioned termination condition storage unit (in this case, the above condition (1)), the termination control unit can send a control signal to the access control unit, causing the access control unit to control the disclosure of the individual's health and medical related information to be terminated. Also, for example, if the judgment result of the above-mentioned termination judgment unit is that the disclosure should be terminated, that is, if the judgment result is that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's primary physician (family doctor) who has been treating the individual's illness or injury has been changed for various reasons and the termination condition stored in the above-mentioned termination condition storage unit (in this case, condition (2) or condition (3) above), the termination control unit can send a control signal indicating the judgment result to the access control unit, and control the access control unit to terminate the disclosure of the individual's health and medical related information.

[0139] In relation to the above-mentioned "judgment rule storage unit," a "judgment rule change unit" may be further provided that changes the judgment rule as appropriate, for example, based on the number or percentage of times that the disclosure of health and medical information about an individual is permitted, or the number or percentage of times that an incentive is provided, etc. In this case, the judgment rule may be changed automatically within the system, or may be changed manually from a terminal used by the target individual or the administrator of the system.

[0140] <Embodiment 3: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0141] Figure 13 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 1301 that performs various calculation processes, and a "main memory" 1302. It also comprises a "non-volatile memory" 1303 that holds predetermined information, and a "network I / F (interface)" 1304 that transmits and receives information to and from multiple third party terminals 1306 and an administrator terminal 1307. These are then interconnected by a data communication path such as a "bus" 1305, and perform the transmission and reception of information and processing.

[0142] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU", and also provides a work area for the programs. In addition, a plurality of addresses are assigned to each of the "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing the addresses. In this embodiment, the programs stored in the "main memory" include a termination request receiving program, a termination condition holding program, a judgment rule holding program, a termination judgment program, and a termination control program. In addition, the "main memory" and the "non-volatile memory" store termination request information, termination condition information, judgment rules, termination judgment information, termination control information, and the like.

[0143] The "CPU" executes a termination request reception program stored in the "main memory" to receive a termination request, which is a request to stop or terminate the disclosure of an individual's (user's) already disclosed health and medical-related information, sent from a third-party terminal via the "network I / F", and stores the termination request information in the "main memory" and / or "non-volatile memory". The "CPU" also executes a termination condition retention program stored in the "main memory" to retain termination conditions, which are conditions for determining whether or not to terminate the disclosure based on information about the individual who made the termination request, when a termination request is received, and stores the termination condition information in the "main memory" and / or "non-volatile memory". The "CPU" also executes a judgment rule retention program stored in the "main memory" to retain judgment rules, which are rules for determining whether or not to terminate the disclosure of health and medical-related information based on information about the individual who made the termination request and the retained termination conditions, and stores the judgment rules in the "main memory" and / or "non-volatile memory". The "CPU" also executes a termination judgment program stored in the "main memory", and when a termination request is received, judges whether to terminate based on information about the individual and the stored termination conditions, and stores the termination judgment information in the "main memory" or the "non-volatile memory". The "CPU" also executes a termination control program stored in the "main memory", and when the termination judgment program judges that termination should be performed, controls the access control unit to terminate the disclosure of the individual's health and medical information, and stores the termination control information in the "main memory" or the "non-volatile memory".

[0144] <Embodiment 3: Healthcare-related information management system: Processing flow> 14 is a diagram showing the flow of processing when the health care related information management system of this embodiment is used. As shown in the diagram, the processing method comprises a termination request receiving step S1401, a termination condition storing step S1402, a judgment rule storing step S1403, a termination judgment step S1404, and a termination control step S1405.

[0145] The "termination request receiving step" S1401 is a stage for receiving a termination request, which is a request to stop or terminate the disclosure of health and medical care-related information that has already been made public from an individual (user), sent from a third-party terminal.

[0146] The "termination condition holding step" S1402 is a stage for holding a termination condition, which is a condition for judging whether or not termination is permitted based on information about the individual who has made the termination request, when the termination request is accepted.

[0147] The “decision rule storage step” S1403 is a step for storing decision rules, which are rules for determining whether or not to terminate the disclosure of health and medical related information based on information about the individual who made the termination request and the stored termination conditions.

[0148] The "termination decision step" S1404 is a stage in which, when a termination request is accepted, it is decided whether to terminate based on information about the individual, the retained termination conditions, and the retained decision rules.

[0149] The "termination control step" S1405 is a stage in which, if the determination result in the termination determination step S1404 is that the disclosure should be terminated, the access control unit controls the disclosure of the individual's health and medical care related information to be terminated.

[0150] <Summary> As described above, in the present invention, an individual (user) can, at his / her own will, suspend or terminate the publication of health and medical care-related information that has already been made public.

[0151] <Embodiment 4 (corresponding mainly to claims 4, 19, and 34)> <Overview of embodiment 4> This embodiment is characterized in that it includes an access authentication processing unit that performs authentication for accessing the incentive management unit in addition to the components of embodiments 1 to 3. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of embodiments 1 to 3 will be omitted as appropriate.

[0152] <Embodiment 4: Description of Configuration: Access Authentication Processing Unit> 15 is a diagram showing the functional configuration of the health and medical care related information management system. As shown in this figure, an "access authentication processing unit" 1501 is configured to have a function of authenticating individuals for access to the incentive management unit. For example, Fig. 40 shows an example of a user interface in the health and medical information management system of the present invention. Here, it is assumed that a third-party terminal uses a web browser to access the health and medical information management system. On this login screen, a user (individual) enters their personal identification number (My Number) and password information into the appropriate fields, and if matching information exists within the system, the user is authenticated and access is granted. The example in the figure shows a format in which the user directly inputs the information, but in cases where the user uses a smartphone, for example, the smartphone's IC card reading function can be used to hold the My Number card up to the smartphone to automatically read and input specific information such as personal identification number (My Number) information. For example, if the user fails to enter personal number (My Number) information and / or password information three times in a row, the device may be locked and the user may go to a local government (such as a city, ward, town, or village office) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0154] 16 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this diagram, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 1601 that performs various calculation processes, and a "main memory" 1602. It also comprises a "non-volatile memory" 1603 that holds predetermined information, and a "network I / F (interface)" 1604 that transmits and receives information to and from multiple third party terminals 1606 and an administrator terminal 1607. These are then interconnected by a data communication path such as a "bus" 1605, and perform the transmission and reception of information and processing.

[0155] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU", and at the same time provides a work area that is also a working area for those programs. In addition, this "main memory" and "non-volatile memory" are each assigned multiple addresses, and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is an access authentication processing program. In addition, the "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, etc.

[0156] The "CPU" executes the access authentication processing program stored in the "main memory", accepts input of personal identification number (My Number) information and password information sent from a third-party terminal via the "network I / F", authenticates whether matching information exists on the system side, and stores the input personal identification number (My Number) information and password information in the "main memory" or "non-volatile memory".

[0157] <Embodiment 4: Healthcare-related information management system: Processing flow> 17 is a diagram showing a process flow when using the health care related information management system in this embodiment. As shown in the diagram, this is a processing method including an access authentication process step S1701.

[0158] The "access authentication processing step" S1701 is a stage in which input of personal identification number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is accepted, and authentication is performed to allow access to the incentive management unit.

[0159] <Summary> As described above, in the present invention, by first performing access authentication on the login screen of the health and medical care related information management system, access to incentive related information can be restricted to the individual (user) himself / herself.

[0160] <Embodiment 5 (corresponding mainly to claims 5, 20, and 35)> <Outline of the fifth embodiment> This embodiment is different from the first to fourth embodiments in that it includes a consent information acquisition unit that acquires consent information, which is information indicating consent to receiving an incentive from the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of the first to fourth embodiments will be omitted as appropriate.

[0161] <Description of the configuration of the fifth embodiment: consent information acquisition unit> 18 is a diagram showing the functional configuration of the health and medical care related information management system of this embodiment. As shown in this figure, an "agreement information acquisition unit" 1802 is configured to have a function of acquiring consent information, which is information indicating consent to receiving an incentive from the incentive management unit, after being authenticated by the access authentication processing unit 1801. FIG. 41 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their personal number (My Number) information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, the screen moves to the function selection screen. Then, by clicking, touching or tapping the OK button corresponding to "(A) Consent Processing", the screen moves to the screen for obtaining the individual's (user's) consent. FIG. 42 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to prepare a user interface such as a pull-down menu in the "Agree / Disagree" field, and by clicking, touching or tapping there, for example, enter either a "O" or an "X" mark, thereby accepting the individual's (user's) intention to agree or disagree to accept the incentive. By clicking, touching or tapping the OK button, the entered consent information is sent to the incentive management section, where it is stored and managed. Note that by clicking, touching or tapping the Exit button, the user can return to the function selection screen of FIG. 41.

[0162] FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their own personal identification number (My Number) information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, they will move to a function selection screen and click, touch or tap the OK button corresponding to "(B) Viewing process," thereby transitioning to a screen where they can view the relationship between the individual's (user's) health and medical related information and the incentives granted. FIG. 43 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding incentives granted in an easy-to-understand format such as a list. This allows the user to see at a glance which health and medical care-related information the incentive granted at the time of viewing is associated with. By clicking, touching or tapping the Exit button, the user can return to the function selection screen in FIG. 41. FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their own My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, the screen transitions to the function selection screen. Then, by clicking, touching or tapping the OK button corresponding to "(C) Maintenance Processing", the screen transitions to one that displays the health and medical related information concerning the individual (user) that has not yet been consented to / not consented to, as well as the health and medical related information for which consent / not consent has already been given. FIG. 44 is a diagram showing an example of a user interface in the health care related information management system of the present invention. In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding consent or disagreement state in an easy-to-understand format such as a list. As a result, for health and medical care-related information for which consent / disagreement has not yet been determined at the time of viewing, a user interface in the form of a pull-down menu is prepared for the individual (user), and incentives are granted by inputting a "○" mark in the "Agree / Disagree" column and clicking, touching, or tapping the OK button. On the other hand, for health and medical care-related information for which a "○" mark or an "×" mark has already been input in the "Agree / Disagree" column, the individual (user) can review the information as appropriate and necessary, for example, by changing consent to disagreement or disagreement to consent, and clicking, touching, or tapping the OK button to perform update processing. It is to be noted that the user can return to the function selection screen of FIG. 41 by clicking, touching, or tapping the exit button.

[0163] <Embodiment 5: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0164] Figure 19 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 1901 that performs various calculation processes, and a "main memory" 1902. It also comprises a "non-volatile memory" 1903 that holds predetermined information, and a "network I / F (interface)" 1904 that transmits and receives information to and from multiple third party terminals 1906 and an administrator terminal 1907. These are then interconnected by a data communication path such as a "bus" 1905, and perform the transmission and reception of information and processing.

[0165] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU", and also provides a work area that is a working area for the programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. In addition, the "main memory" and "non-volatile memory" store My Number information, password information, consent information, etc.

[0166] The "CPU" executes the access authentication processing program stored in the "main memory", accepts input of personal identification number (My Number) information and password information sent from a third-party terminal via the "network I / F", authenticates whether matching information exists, and stores the personal identification number (My Number) information and password information in the "main memory" or "non-volatile memory". The "CPU" also executes the consent information acquisition program stored in the "main memory" to acquire consent information indicating the individual's (user's) intention as to whether or not to disclose each piece of health and medical related information sent from the third-party terminal via the "network I / F." The consent information is also stored in the "main memory" and "non-volatile memory."

[0167] <Embodiment 5: Healthcare-related information management system: processing flow> 20 is a diagram showing the flow of processing when using the health care related information management system in this embodiment. As shown in the diagram, the processing method includes an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "access authentication processing step" S2001 is a stage in which input of personal identification number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is accepted, and authentication is performed to allow access to the incentive management unit.

[0169] The "consent information acquisition step" S2002 is a stage for acquiring consent information, which is information indicating consent to receiving an incentive from the incentive management unit, after authentication has been performed in the access authentication processing step.

[0170] <Summary> As described above, in the present invention, consent information, which is information indicating consent to receiving an incentive for health and medical care related information regarding an individual (user), can be obtained.

[0171] <Embodiment 6 (corresponding mainly to claims 6, 21, and 36)> <Overview of embodiment 6> This embodiment is characterized in that, in addition to the features of the first to fifth embodiments, an incentive provision processing unit is provided that performs an incentive provision process, which is a process for providing an incentive, when the consent information acquisition unit acquires consent information. Hereinafter, descriptions of functions, hardware configurations, and process flows that overlap with those of the first to fifth embodiments will be omitted as appropriate.

[0172] <Configuration of the Sixth Embodiment: Incentive Providing Processing Unit> Fig. 21 is a diagram showing the functional configuration of the health and medical care related information management system. As shown in this figure, an "incentive processing unit" 2103 is configured to have a function of performing incentive provision processing for providing an incentive when consent information is acquired by the consent information acquisition unit. FIG. 44 is a diagram showing an example of a user interface in the health care related information management system of the present invention. In this case, the incentive to be automatically granted is calculated and granted based on a predetermined calculation rule for health and medical related information for which a "○" indicating consent to disclosure is marked in the "Agree / Disagree" column for the individual (user)'s permission for disclosure. Here, it is calculated and granted based on a predetermined calculation rule that 1000 My Number points (points) are to be granted to one recipient for health and medical related information related to one individual. In addition, the calculation rule for the incentive may be processed so that a weighting process is performed taking into consideration the importance, urgency, rarity, usefulness, etc. of the health and medical related information, and a different incentive is calculated and granted for each health and medical related information. In particular, for example, for malignant neoplasms (cancer), which are the leading cause of death in Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, which has a large number of patients, various infectious diseases defined in the Infectious Diseases Act including COVID-19, and unique diseases with few cases worldwide, it is possible to set the calculation rule so that the incentive is more (higher) than for other diseases, considering that the disclosure of the health and medical related information to a third party can greatly contribute to medical progress.

[0173] In addition, "incentive" simply means "motivation, reward," and refers to intentionally providing stimulation with the aim of causing some kind of action. In the present invention, "incentives" may include, in addition to the above-mentioned My Number points, individual information services or general information services for information providers, provision of individual medicines or supplements, provision of books or other products, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of rights, such as provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash. In addition, the following may be included. Discounting some products or services, such as discounting or discounting insurance premiums, and discounting insurance premium rates. In addition, refunds of paid fees, awards of prizes (e.g., novelties, etc.), awards or recognition, and provision of coupons. In addition, reward points, discounts, free products, early access to new products, or limited sales. In addition, rights to write reviews about brands, introduce friends, and create user-generated content are included. It may also be an upgrade of a product or service. The present invention can be applied to both cases where the health and medical care-related information of an individual is already associated with and stored / managed with disclosure permission / denial information indicating whether or not disclosure to a third party is permitted, and where an individual (user) newly registers health and medical care-related information related to himself / herself in the health and medical care-related information storage unit, but the disclosure permission / denial information is not yet associated and stored / managed. That is, in the health and medical care-related information management system, health and medical care-related information of an individual is not stored, but for example, when the health and medical care-related information of the individual is stored in a terminal owned by the individual and is uploaded to the present system, if the uploaded information is judged to be publicly available as health and medical care-related information by a formal check, the incentive function unit described above can be configured to function so as to provide an incentive according to the result. In this case, the access control unit of the present system may be configured not to deny access to view the health and medical care-related information from a third party. However, it may be configured to partially deny or restrict access according to the type or qualification of the third party. Uploading the health and medical care-related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal, but may be a system storing other health and medical care-related information. For example, the system can be configured so that health and medical care-related information stored in a maternal and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical care information server, a rehabilitation information server, etc., is transferred to this system with the individual's consent. In this case, the system can be configured so that the incentive function unit described above starts functioning when the individual's health and medical care-related information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

[0174] FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their own My Number information and password information into the appropriate fields, and after matching information is found in the system and access authentication is performed, they will move to a function selection screen and click, touch or tap the OK button corresponding to "(B) Viewing process," thereby transitioning to a screen where they can view the relationship between the individual's (user's) health and medical related information and the incentives granted. FIG. 43 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding incentives granted in an easy-to-understand format such as a list. This allows the user to see at a glance which health and medical care-related information the incentive granted at the time of viewing is associated with. By clicking, touching or tapping the Exit button, the user can return to the function selection screen in FIG. 41.

[0175] FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. In this case, the individual (user) enters their own My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, the screen transitions to the function selection screen. Then, by clicking, touching or tapping the OK button corresponding to "(C) Maintenance Processing", the screen transitions to one that displays the health and medical related information concerning the individual (user) that has not yet been consented to / not consented to, as well as the health and medical related information for which consent / not consent has already been given. FIG. 44 is a diagram showing an example of a user interface in the health care related information management system of the present invention. In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding consent or disagreement state in an easy-to-understand format such as a list. As a result, for health and medical care-related information for which consent / disagreement has not yet been determined at the time of viewing, the individual (user) can enter a "o" mark in the "agree / disagree" column in a pull-down menu format and click, touch, or tap the OK button to grant an incentive, etc. On the other hand, for health and medical care-related information for which a "o" mark or an "x" mark has already been entered in the "agree / disagree" column, the individual (user) can review the information, for example, by changing consent to disagree, or disagree to consent, and then clicking, touching, or tapping the OK button to perform update processing. It is to be noted that the user can return to the function selection screen of FIG. 41 by clicking, touching, or tapping the exit button.

[0176] <Embodiment 6: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0177] Figure 22 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 2201 that performs various calculation processes, and a "main memory" 2202. It also comprises a "non-volatile memory" 2203 that holds predetermined information, and a "network I / F (interface)" 2204 that transmits and receives information to and from multiple third party terminals 2206 and an administrator terminal 2207. These are then interconnected by a data communication path such as a "bus" 2205, and perform the transmission and reception of information and processing.

[0178] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU", and also provides a work area that is a working area for the programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, and an incentive provision processing program. In addition, the "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, consent information, incentive information, etc.

[0179] The "CPU" executes the access authentication processing program stored in the "main memory", accepts input of personal number (My Number) information and password information sent from a third-party terminal via the "network I / F", and performs authentication to see if matching information exists. It also stores the My Number information and password information in the "main memory" and "non-volatile memory". In addition, the "CPU" executes the consent information acquisition program stored in the "main memory" to acquire consent information indicating the intention of the individual (user) for each piece of health and medical related information sent from the third-party terminal via the "network I / F." The consent information is also stored in the "main memory" and "non-volatile memory." In addition, the "CPU" executes an incentive provision processing program stored in the "main memory" to perform incentive provision processing, which is a process for providing incentives when consent is obtained for health and medical related information relating to an individual, and stores the incentive information in the "main memory" and / or the "non-volatile memory."

[0180] <Embodiment 6: Healthcare-related information management system: Processing flow> 23 is a diagram showing a process flow when using the health care related information management system in this embodiment. As shown in the diagram, the processing method includes an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "incentive providing process step" S2303 is a stage for performing an incentive providing process, which is a process for providing an incentive, when the consent information has been acquired by the consent information acquisition unit.

[0182] <Summary> As described above, in the present invention, incentive provision processing, which is processing for providing incentives, can be executed for health and medical care related information related to an individual (user) when the individual gives consent, and appropriate incentive provision processing can be applied to the health and medical care related information related to the individual.

[0183] <Embodiment 7 (corresponding mainly to claims 7, 22, and 37)> <Overview of embodiment 7> This embodiment provides a health care related information management system which has a health care related information storage unit which stores health care related information about individuals, and an access control unit which allows a third party to access the health care related information stored in the health care related information storage unit via a network, wherein the access control unit has IP packet analysis means which analyzes IP packets sent via the network, destination IP address determination means which extracts a destination IP address from the IP header part of the IP packet and determines whether or not the IP address is addressed to the health care related information management system of the user, access ID / user ID acquisition means which, if the destination IP address is an IP address addressed to the user's health care related information management system, acquires an access ID indicating the access subject and a user ID indicating a user belonging to the access subject from the IP payload, access subject user attribute acquisition means which acquires access subject information, user information and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional) corresponding to the access ID and user ID, access control means which controls access to the health care related information from third parties, and a disclosure permission information storage unit which stores disclosure permission information indicating whether or not an individual's health care related information is permitted to be disclosed to third parties. Note that descriptions of functions, hardware configurations, and processing flows similar to those of the first to sixth embodiments will be omitted where appropriate.

[0184] <Functional configuration of embodiment 7> Fig. 24 is a diagram showing the functional configuration of the health care related information management system in embodiment 7. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID / user ID acquisition means, an access subject user attribute acquisition means, an access control means, and a disclosure permission information storage unit.

[0185] <Seventh embodiment: Description of configuration: IP packet analysis means of access control unit> The "IP packet analysis means" 2401 is configured to have a function of analyzing IP packets sent via a network (particularly the Internet). Generally, an IP packet is composed of an IP header section and an IP payload section, in which various information and data are stored. The "IP packet analysis means" 2401 is responsible for analyzing and examining what information and data are contained therein.

[0186] <Seventh embodiment: Description of configuration: destination IP address determination means of access control unit> The "destination IP address determination means" 2402 is configured to have the function of extracting the destination IP address from the header of the received IP packet and determining whether or not the IP address is addressed to its own healthcare related information management system. Generally, an IP packet contains at least a source IP address indicating the sender and a destination IP address indicating the destination in the IP header. The "destination IP address determination means" 2402 references the destination IP address extracted from the IP header and determines whether or not the IP packet was sent to its own healthcare related information management system, and if it determines that the packet was addressed to itself, it proceeds to the next process. However, if it determines that the packet was not addressed to itself, it ignores the IP packet and does not perform any further action.

[0187] <Embodiment 7 Configuration: Access ID / User ID Acquisition Means of Access Control Unit> The “access ID / user ID acquisition means” 2403 is configured to have the function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject when it is determined that the IP packet was sent to the health and medical care related information management system.

[0188] <Seventh embodiment: Configuration description: Access subject user attribute acquisition means of access control unit> The "access subject user attribute acquisition means" 2404 is configured to have a function of acquiring access subject information corresponding to an access ID and a user ID, user information belonging to the access subject, and user attribute information for the user (here, information indicating whether the user is a medical professional or a non-medical professional). The access subject information is information that specifically indicates the access subject, and is expressed, for example, by a name such as "Edogawa Central Hospital" or "Edogawa Pharmaceuticals". Furthermore, the user information is information that specifically indicates an employee or the like that belongs to the access subject, and is expressed, for example, by a name such as "Suzuki Ichiro" who is an employee of "Edogawa Central Hospital" or "Maeda Hideo" who is an employee of "Edogawa Pharmaceuticals". Furthermore, the user attribute information is attribute information associated with the user information and indicates whether the user is a medical professional or a non-medical professional, and is expressed, for example, by a "medical professional" (abbreviated as "medical") or a "non-medical professional" (abbreviated as "non-medical"), etc.

[0189] Here, "healthcare professionals" preferably includes at least doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical x-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, medical administrators, etc. Among the "healthcare professionals" mentioned above, the role of so-called family medical professionals (e.g., family doctor, family pharmacist, family dentist) who regularly provide medical examinations and medication instructions to individuals (patients) is extremely important, and it is preferable to grant them the authority to access an individual's health and medical related information stored in the health and medical related information storage unit, and to edit, add, and delete the health and medical related information as appropriate and necessary.

[0190] For example, a "family doctor" is a doctor with whom you can consult about anything, who is well-versed in the latest medical information, can refer you to specialists or specialized medical institutions when necessary, and has the comprehensive capabilities to be responsible for local medical care, health, and welfare, and is a reliable, close-by person. It is desirable for a "family doctor" to be a person who can fulfill the following functions: (1) In the course of daily medical practice, understands the patient's living background, provides appropriate medical treatment and health guidance, and, when he or she is unable to provide medical treatment or guidance beyond the scope of his or her own expertise, can cooperate with local doctors, medical institutions, etc. to provide a solution; (2) is able to share necessary information with local doctors, medical institutions, etc., so that the patient can continue to receive the best medical care even outside of his or her own medical practice hours, and can cooperate with each other to establish a system in which patients can be treated on holidays and at night; (3) In addition to daily medical practice, is able to build relationships of trust with local residents and actively participate in social and administrative activities surrounding medical care in the community, such as health consultations, health checkups, cancer screenings, maternal and child health care, school health care, industrial health care, and community health care, as well as cooperate with health, nursing, and welfare workers, and promote home medical care so that local elderly people can live in the community for as long as possible; and (4) is able to provide patients and their families with appropriate and easy-to-understand information about medical care.

[0191] For example, a "family pharmacist" is a pharmacist who has extensive knowledge and experience in pharmaceutical treatment, health and nursing care, and is able to provide consultation based on the needs of patients and consumers. The role of a "family pharmacist" is to (1) manage the medication status of one patient at one pharmacy, and to continue to do so (for example, to ensure that medications are used safely and with peace of mind, the pharmacist will keep track of all information about the medications that the patient is taking, including prescription and over-the-counter medications, in one place, and will continually check for overlaps and drug interactions, as well as whether the medications are working and whether there are any side effects), and (2) provide 24-hour support and visit the patient's home to provide in-home medical care (for example, to answer questions over the phone about how to use medications, side effects, etc., even outside the pharmacy's opening hours, such as on holidays and at night. In addition, the pharmacist will provide prescriptions at night and on holidays as necessary). It is desirable for the pharmacy professional to be able to take on the following roles: (1) Distribute medication based on prescriptions. Visit the homes of elderly and other patients who have difficulty going out, explain the medication, and check for remaining medication (medicine remaining on hand), (2) Work with prescribing physicians and medical institutions (for example, check the prescription and make inquiries and suggestions to the doctor as necessary. Monitor the patient's condition even after distributing the medication, provide feedback on the situation to the prescribing physician, and check for remaining medication. Answer general health inquiries in addition to medication, and recommend visits to medical institutions if necessary. Also, work with local medical institutions to build relationships on a daily basis that allow them to support patients as a team).

[0192] For example, a "family dentist" refers to a dentist who not only provides safe and secure dental care, but also has a wide range of knowledge and insight related to medical care and nursing, and is able to fulfill his or her responsibilities as a member of local medical care, aiming to maintain and improve the oral function of local residents throughout their lives. It is desirable for a "family dentist" to be a person who can take on the following roles: (1) contribute to the maintenance and promotion of oral and overall health by providing appropriate dental treatment and health guidance for ongoing management and prevention of serious illness according to the life stage from infancy to old age, (2) play a role in improving oral health through health activities such as dental checkups in cooperation with the government and related organizations for the benefit of local residents, and (3) cooperate with related local organizations and other industries to provide seamless home dental medical care and nursing care services in various medical facilities for patients who have difficulty visiting hospitals, and actively participate in community-based comprehensive care. In addition, flag information that can identify a personal medical professional may be added to or associated with third-party identification information, which will be described later. Note that the information indicating a personal medical professional may be set, changed, or deleted using a third-party terminal by an individual (e.g., a patient), a company to which the individual belongs, a health insurance association to which the individual belongs, or a local government in which the individual resides, as appropriate and necessary, or the administrator described above may be able to register, edit, or delete the information using an administrator terminal.

[0193] It is preferable that "non-medical personnel" include at least employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0194] <Embodiment 7: Description of the Configuration: Access Control Means of the Access Control Unit> The 'access control means' 2405 is configured to have a function of controlling access when a third party accesses the health and medical care related information storage unit via a network.

[0195] FIG. 25 is a diagram showing an example of the functional configuration of the health and medical care related information management system in this embodiment. First, the IP packet analysis means analyzes the received IP packet 2501 to check what information and data it contains. For example, it analyzes and checks whether the source IP address and destination IP address are included in the IP header of the IP packet.

[0196] Next, the destination IP address determination means extracts the destination IP address contained in the received IP packet 2501 and determines whether it is addressed to its own healthcare related information management system. At this time, the access control unit 2502 stores an IP address table 2503, and refers to this table to determine whether it is addressed to its own healthcare related information management system. If the stored IP address (e.g., 192.168.0.1) matches the destination IP address, it is determined that the address is addressed to its own healthcare related information management system, and the process proceeds to the next step. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, if the IP packet sent is addressed to the health and medical information management system, the access ID / user ID acquisition means extracts and acquires the access ID indicating the access subject stored in the IP payload of the IP packet and the user ID indicating the user belonging to the access subject.

[0198] Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores an access ID / user ID table 2504, and the access control unit 2502 acquires specific access subject information, user information, and user attribute information by referring to the table. Here, when the access ID is "A0001", the access subject information is "Edogawa Central Hospital", and when the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is "medical worker". When the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", and when the user ID is "D0001", the user information is "Hideo Maeda", and the user attribute information is "non-medical worker". Through the operations of the means described above, it is possible to determine whether a third party who has accessed the health and medical information management system is a medical worker or a non-medical worker.

[0199] Next, the access control means changes the viewing range of the health and medical related information depending on whether the third party is a medical professional or a non-medical professional. For example, if a user belonging to a third party accessing entity (in this case, "Edogawa Central Hospital") is "Suzuki Ichiro" and his attribute information is "medical professional", all of the health and medical related information of the individual can be viewed. On the other hand, for example, if a user belonging to a third party accessing entity (in this case, "Edogawa Pharmaceutical") is "Maeda Hideo" and his attribute information is "non-medical professional", a part (including all) of the health and medical related information of the individual, or health and medical related information anonymized by a predetermined anonymization method described later, can be viewed. In this way, it is possible to determine who the third party user is and whether his attribute information is "medical professional" or "non-medical professional", and accordingly it becomes possible to change the viewing range of the health and medical related information of the individual. It is preferable that the administrator who manages and operates the health and medical information management system can register, edit, and delete information in these tables using an administrator terminal. It is also preferable that the access subject information, user information, and user attribute information ("medical worker" or "non-medical worker") are associated with third-party identification information, which will be described later.

[0200] <Seventh embodiment: Description of configuration: Disclosure permission information storage unit of access control unit> As shown in FIG. 24, the "disclosure permission information storage unit" 2406 is configured to have a function of storing disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who has accessed the health and medical related information of an individual via a network. Specifically, it is preferable that information indicating "disclosure permission" or "disclosure refusal" can be set at the individual's will to the access control unit 202 of the health and medical related information management system 200 from the third party terminal 206 as shown in FIG. 2 via the network 205. For example, it may be binary information (flag information) in which "disclosure permission" is "1" and "disclosure refusal" is "0". The disclosure permission information may be set to indicate whether or not to disclose a predetermined block of health and medical related information. For example, it is considered that the health and medical related information of the medical department related to internal medicine is set to "disclosure permission", while the health and medical related information of the medical department related to psychiatry is set to "disclosure refusal". The disclosure permission information may be set to distinguish between "disclosure permission" and "disclosure refusal" when the third party is a specific medical professional, in combination with third party identification information described later. For example, if the third-party identification information represents a "doctor," the individual's health and medical related information may be "permitted to be disclosed," whereas, if the third-party identification information represents a specific medical professional (e.g., an accountant or bookkeeper), the individual's health and medical related information may be "denied from disclosure."

[0201] <Embodiment 7: Healthcare-related information management system: hardware configuration> The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

[0202] Fig. 26 is a diagram showing the hardware configuration of a health and medical care related information management system in this embodiment. As shown in this figure, the access control unit in this embodiment is equipped with a "CPU (Central Processing Unit)" 2601 that performs various calculation processes, and a "main memory" 2602. It also has a "non-volatile memory" 2603 that holds predetermined information, and a "network I / F (interface)" 2604 that transmits and receives information to and from multiple third party terminals 2606 and an administrator terminal 2607. These are then interconnected by a data communication path such as a "bus" 2605, and perform the transmission and reception of information and processing.

[0203] Here, the "main memory" reads out programs that perform various processes to be executed by the "CPU", and at the same time provides a work area that is also a work area for the programs. In addition, a plurality of addresses are assigned to each of the "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing the addresses. In this embodiment, the programs stored in the "main memory" are a health and medical related information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a disclosure permission information holding program, an access control program, etc. In addition, the "main memory" and the "non-volatile memory" store health and medical related information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, disclosure permission information, etc.

[0204] The "CPU" executes a health and medical information accumulation program stored in the "main memory" to store in the "main memory" and "non-volatile memory" the health and medical information on an individual sent from a third-party terminal through the "network I / F", such as electronic medical record information, various examination information, prescription information, medical history information, and vital information (e.g., body temperature, blood pressure, heart rate, etc.). The "CPU" also executes an IP packet analysis program stored in the "main memory" to analyze IP packets sent via a network (particularly the Internet). The "CPU" also executes a destination IP address determination program stored in the "main memory" to determine whether the destination IP address sent is an IP address addressed to the system's own health and medical information sharing system, and if it is determined to be addressed to the system, stores the IP address in the "main memory" and "non-volatile memory". The "CPU" also executes an access ID / user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the access subject stored in the IP payload of the sent IP packet and the user ID indicating the user belonging to the access subject, and stores them in the "main memory" and "non-volatile memory". In addition, an access subject user attribute acquisition program stored in the "main memory" is executed to acquire access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional; for example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID, and store them in the "main memory" and "non-volatile memory." In addition, a disclosure permission information retention program stored in the "main memory" is executed to acquire disclosure permission information indicating whether or not an individual's health and medical related information will be disclosed to a third party, and store this in the "main memory" and "non-volatile memory." In addition, an access control program stored in the "main memory" is executed to control access to health and medical related information concerning an individual.

[0205] <Embodiment 7: Healthcare-related information management system: Processing flow> Fig. 27 is a diagram showing a process flow when the health and medical care related information management system of this embodiment is used. As shown in the diagram, the processing method comprises health and medical care related information accumulation step S2701, IP packet analysis step S2702, destination IP address determination step S2703, access ID / user ID acquisition step S2704, access subject user attribute acquisition step S2705, disclosure permission information retention step S2706, and access control step S2707.

[0206] The "healthcare related information accumulation step" S2701 is a step in which healthcare related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various test information, prescription information, medical history information, and vital sign information (e.g., body temperature, blood pressure, heart rate, etc.), is accumulated.

[0207] The "IP packet analysis step" S2702 is a stage in which an IP packet transmitted via a network (particularly the Internet) is analyzed.

[0208] The "destination IP address determination step" S2703 is a stage for extracting the destination IP address from the IP header of the IP packet and determining whether or not it is an IP address addressed to the healthcare related information management system of the client.

[0209] The “access ID / user ID acquisition step” S2704 is a step in which, when the destination IP address is an IP address addressed to the healthcare related information management system itself, an access ID indicating the access subject and a user ID indicating the user belonging to the access subject are acquired from the IP payload.

[0210] The "access subject user attribute acquisition step" S2705 is a step in which access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional, for example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID are acquired.

[0211] The "step of storing disclosure permission information" S2706 is a step of storing disclosure permission information indicating whether or not disclosure of an individual's health and medical care related information to a third party is permitted.

[0212] An "access control step" S2707 is a step for controlling access to the health and medical care related information management system.

[0213] <Summary> In this way, disclosure permission information indicating whether or not disclosure of health and medical information about an individual (user) to a third party is permitted can be stored. In other words, an individual can select and set whether or not disclosure is permitted based on their own will.

[0214] <Embodiment 8 (corresponding mainly to claims 8, 23, and 38)> <Overview of embodiment 8>

[0215] Figure 28 is a diagram showing the functional configuration of a health care related information management system in embodiment 8. As shown in this diagram, this embodiment is characterized in that a third-party identification information storage unit is provided in addition to embodiments 1 to 7. The functional configuration, hardware configuration, and processing flow of the health care related information management system in this embodiment will be described below in order. From here on, descriptions of functions, hardware configuration, and processing flow similar to those of embodiments 1 to 7 will be omitted as appropriate.

[0216] <Functional Configuration of Embodiment 8> 28 is a diagram showing the functional configuration of the health care related information management system in this embodiment. In this embodiment, by providing a third party identification information storage unit, it is possible to identify whether a third party is a medical professional or a non-medical professional.

[0217] <Embodiment 8: Healthcare-related information management system: Functional configuration> FIG. 28 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.

[0218] <Embodiment 8: Configuration of Third Party Identification Information Storage Unit of Access Control Unit> The "third party identification information storage unit" 2807 is configured to have a function of storing third party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via a network is a medical professional or a non-medical professional. Here, the third party identification information may be information made up of, for example, a combination of 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information or a health insurance certificate number may be used. In addition, it is preferable that the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information ("medical professional" or "non-medical professional"). In addition, the above-mentioned administrator may be able to register, edit, and delete the third party identification information using the administrator terminal.

[0219] In addition, by combining the above-mentioned disclosure permission information and third-party identification information, even if the disclosure permission information indicates “disclosure permitted,” if the third party is a specific medical professional, it may be possible to set a distinction between allowing access and not allowing it. For example, if the third-party identification information represents a "doctor," access to the health and medical related information may be permitted, but on the other hand, if the third-party identification information represents a particular medical professional (e.g., an accountant or bookkeeper), access to the health and medical related information may be denied. Also, for example, information indicating the department to which the user belongs may be added to the third-party identification information, and permission or denial of access to the health and medical care-related information may be controlled by the information indicating the department to which the user belongs. Also, for example, permission or denial of access to the health and medical care-related information may be controlled by information on the expertise of the user specified by the third-party identification information (for example, the specialty field and years of experience of "doctor" or "nurse"). Also, for example, the method of obtaining the health and medical care-related information by a third party (for example, only viewing is possible, information can be converted to text, copy is possible, transfer is possible, bulk download of anonymously processed information is possible, etc.) may be changed by a combination of the disclosure permission information and the department and expertise related to the third-party identification information. Note that, when downloading is possible, it is preferable to use electronic watermark technology or NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, the combination of the disclosure permission information and the department and expertise related to the third-party identification information may give the third party access authority to the patient himself / herself. For example, it is expected that a medical professional who performs PCR testing will transmit the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0220] It is conceivable that the administrator mentioned above could use the administrator terminal to register combinations of this information in advance in the access control unit mentioned above in table format or the like, and allow editing or deletion as appropriate and necessary. For example, medical professionals include doctors, dentists, and pharmacists, and the third-party identification information for these may include, at least as a part, the medical registration number (e.g., a six-digit number) listed on the medical license, the dentist registration number (e.g., a six-digit number) listed on the dentist license, and the pharmacist registration number (e.g., a six-digit number) listed on the pharmacist license. Similarly, the third-party identification information for other medical professionals may include, at least as a part, the number listed on the license. Also, the third-party identification information may include at least a symbol or number (including a branch number) printed on the health insurance certificate of the health insurance association to which the user belongs, a driver's license number, and personal number (My Number) information printed on a personal number (My Number) card, etc. The user may be identified by using third-party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).

[0221] <Embodiment 8: Healthcare-related information management system: hardware configuration> Figure 29 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 2901 that performs various calculation processes, and a "main memory" 2902. It also comprises a "non-volatile memory" 2903 that holds predetermined information, and a "network I / F" 2904 that transmits and receives information to and from a third party terminal 2906 and an administrator terminal 2907. These are then interconnected by a data communication path such as a "bus" 2905, and perform the transmission and reception of information and processing.

[0222] Here, the "main memory" reads out programs that perform various processes in order to have the "CPU" execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" are mainly third-party identification information holding programs, etc. Furthermore, third-party identification information, etc. are stored in the "main memory" and "non-volatile memory."

[0223] The "CPU" executes a third-party identification information retention program stored in the "main memory" to retain third-party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage unit via the network is a medical professional or a non-medical professional, and stores the third-party identification information in the "main memory" and the "non-volatile memory."

[0224] <Embodiment 8: Healthcare-related information management system: Processing flow> 30 is a diagram showing a process flow when using the health care related information management system in this embodiment. As shown in this diagram, the processing method includes a third party identification information holding step S3007.

[0225] The "third party identification information retaining step" S3007 is a step for retaining third party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via a network is a medical professional or a non-medical professional.

[0226] <Summary> From the above, it is possible to identify whether a third party is a medical professional or a non-medical professional. For example, it will be possible to distinguish between the same medical professional as whether he or she is the individual's primary physician (family doctor), and it will also be possible to distinguish between the same non-medical professional as whether he or she is an employee (including researchers) of a pharmaceutical company that develops and manufactures treatments for the individual's illness, or an employee of a government agency.

[0227] <Embodiment 9 (corresponding mainly to claims 9, 24, and 39)> <Overview of embodiment 9>

[0228] 31 is a diagram showing the functional configuration of a health care related information management system in embodiment 9. Hereinafter, descriptions of functions, hardware configurations, and processing flows similar to those in embodiments 1 to 8 will be omitted as appropriate.

[0229] The functional configuration, hardware configuration, and processing flow of the health care related information management system according to this embodiment will be described below.

[0230] <Functional Configuration of Embodiment 9> 31 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment. With this configuration, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the person is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit can be viewed.

[0231] <Embodiment 9: Healthcare-related information management system: Functional configuration> FIG. 31 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.

[0232] <Ninth embodiment: Description of configuration: Disclosure permission information storage unit of access control unit> The "disclosure permission information storage unit" 3106 is configured to have a function of storing disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who has accessed the health and medical related information of an individual via a network. Specifically, it is preferable that information indicating "disclosure permission" or "disclosure refusal" can be set at the individual's will to the access control unit 202 of the health and medical related information management system 200 from the third party terminal 206 as shown in FIG. 2 via the network 205. For example, it may be binary information (flag information) in which "disclosure permission" is "1" and "disclosure refusal" is "0". Furthermore, the disclosure permission information may be set so that it is possible to set whether or not to disclose a predetermined block of health and medical related information. For example, it is considered that "disclosure permission" is set for health and medical related information related to internal medicine among medical departments, while "disclosure refusal" is set for health and medical related information related to psychiatry among medical departments. Furthermore, the disclosure permission information may be set so that when the third party is a specific medical professional, the disclosure permission information can be set to "disclosure permission" and "disclosure refusal" in combination with the third party identification information described above. For example, if the third-party identification information represents a "doctor," the individual's health and medical related information may be "permitted to be disclosed," whereas, if the third-party identification information represents a specific medical professional (e.g., an accountant or bookkeeper), the individual's health and medical related information may be "denied from disclosure."

[0233] <Ninth embodiment: Description of configuration: Third-party identification information storage unit of access control unit> The "third party identification information storage unit" 3107 is configured to have a function of storing third party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via a network is a medical professional or a non-medical professional. Here, the third party identification information may be, for example, information made up of a combination of 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information or health insurance card number, etc. may be used. In addition, it is preferable that the third-party identification information is associated with the above-mentioned access subject information, user information, and user attribute information ("medical worker" or "non-medical worker"). In addition, the above-mentioned administrator may be able to register, edit, and delete the third-party identification information using an administrator terminal.

[0234] In addition, by combining the above-mentioned disclosure permission information and third-party identification information, even if the disclosure permission information indicates “disclosure permitted,” if the third party is a specific medical professional, it may be possible to set a distinction between allowing access and not allowing it. For example, if the third-party identification information represents a "doctor," access to the health and medical related information may be permitted, but on the other hand, if the third-party identification information represents a particular medical professional (e.g., an accountant or bookkeeper), access to the health and medical related information may be denied.

[0235] Also, for example, information indicating the department to which the user belongs may be added to the third-party identification information, and permission or denial of access to the health and medical care-related information may be controlled by the information indicating the department to which the user belongs. Also, for example, permission or denial of access to the health and medical care-related information may be controlled by information on the expertise of the user specified by the third-party identification information (for example, the specialty field and years of experience of "doctor" or "nurse"). Also, for example, the method of obtaining the health and medical care-related information by a third party (for example, only viewing is possible, information can be converted to text, copy is possible, transfer is possible, bulk download of anonymously processed information is possible, etc.) may be changed by a combination of the disclosure permission information and the department and expertise related to the third-party identification information. Note that, when downloading is possible, it is preferable to use electronic watermark technology or NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, the combination of the disclosure permission information and the department and expertise related to the third-party identification information may give the third party access authority to the patient himself / herself. For example, it is expected that a medical professional who performs PCR testing will transmit the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0236] It is conceivable that the administrator mentioned above could use the administrator terminal to register combinations of this information in advance in the access control unit mentioned above in table format or the like, and allow editing or deletion as appropriate and necessary. For example, medical professionals include doctors, dentists, and pharmacists, and the third-party identification information for these may include, at least as a part, the medical registration number (e.g., a six-digit number) listed on the medical license, the dentist registration number (e.g., a six-digit number) listed on the dentist license, and the pharmacist registration number (e.g., a six-digit number) listed on the pharmacist license. Similarly, the third-party identification information for other medical professionals may include, at least as a part, the number listed on the license. Also, the third-party identification information may include at least a symbol or number (including a branch number) printed on the health insurance certificate of the health insurance association to which the user belongs, a driver's license number, and personal number (My Number) information printed on a personal number (My Number) card, etc. The user may be identified by using third-party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).

[0237] <Embodiment 9: Description of Configuration: Access Control Means of Access Control Unit> “Access control means” 3105 is configured to have a function regarding access control when a third party accesses the health and medical care related information storage unit via a network, such that if the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit can be viewed.

[0238] <Embodiment 9: Healthcare-related information management system: hardware configuration> Figure 32 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 3201 that performs various calculation processes, and a "main memory" 3202. It also comprises a "non-volatile memory" 3203 that holds predetermined information, and a "network I / F" 3204 that transmits and receives information to and from a third party terminal 3206 and an administrator terminal 3207. These are then interconnected by a data communication path such as a "bus" 3205, and perform the transmission and reception of information and processing.

[0239] Here, the "main memory" reads out programs that perform various processes in order to have the "CPU" execute them, and at the same time provides a work area that is also a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" include a program for holding disclosure permission information, a program for holding third-party identification information, and an access control program. In addition, the "main memory" and "non-volatile memory" store disclosure permission information, third-party identification information, etc.

[0240] The "CPU" executes a disclosure permission information holding program stored in the "main memory" to store in the "main memory" and the "non-volatile memory" disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who has accessed the health and medical related information of an individual via the network. It also executes a third party identification information holding program stored in the "main memory" to store in the "main memory" and the "non-volatile memory" third party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage unit via the network is a medical professional or a non-medical professional. Thereafter, it executes an access control program stored in the "main memory" to make the health and medical related information stored in the health and medical related information storage unit viewable when the disclosure permission information indicates disclosure permission and the third party identification information indicates a medical professional.

[0241] <Embodiment 9: Healthcare-related information management system: Processing flow> 33 is a diagram showing the process flow when using the health care related information management system in this embodiment. As shown in this diagram, the processing method comprises a disclosure permission information holding step S3306, a third party identification information holding step S3307, and an access control step S3308.

[0242] The "disclosure permission information storage step" S3306 is a step of storing disclosure permission information indicating whether or not one's own health and medical care related information is to be disclosed to a third party who has accessed the health and medical care related information on an individual via a network.

[0243] The "third party identification information retaining step" S3307 is a step for retaining third party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via a network is a medical professional or a non-medical professional.

[0244] The “access control step” S3308 is a step in which, if the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit is made viewable.

[0245] <Summary> From the above, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the third party is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit can be made viewable.

[0246] <Embodiment 10 (corresponding mainly to claims 10, 25, and 40)> <Overview of embodiment 10>

[0247] This embodiment is characterized in that anonymization method information is stored in addition to the features of the first to ninth embodiments. Hereinafter, the description of the same functions, hardware configurations, and processing flows as those of the first to ninth embodiments will be omitted as appropriate.

[0248] The functional configuration, hardware configuration, and processing flow of the health care related information management system according to this embodiment will be described below.

[0249] <Functional configuration of embodiment 10> 34 is a diagram showing the functional configuration of the health care related information management system in this embodiment. The health care related information management system in this embodiment includes an anonymization method information storage unit.

[0250] <Embodiment 10: Healthcare-related information management system: Functional configuration> FIG. 34 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.

[0251] <Configuration of embodiment 10: anonymization method information storage unit of access control unit> The "anonymization method information storage unit" 3408 is configured to have a function of storing information indicating the anonymization method. Here, the anonymization method information may be information created by combining, for example, six-digit numbers, letters, symbols, etc., and may be information that can uniquely identify the anonymization method. Note that the above-mentioned administrator may be able to register, edit, and delete the anonymization method information using the administrator terminal.

[0252] There are several methods for anonymization, and these are often used alone or in combination. The main anonymization methods are briefly explained below. "k-anonymization" (where k is a natural number greater than or equal to 2) refers to creating a situation in which, for attributes that cannot identify an individual by themselves but can identify an individual with a high degree of probability when combined (such as gender, age, place of residence, occupation, etc.), there are always k or more combinations of attribute values ​​in the target data. "Pseudonymization" refers to replacing information with other descriptions, etc., using a method that has no regularity that allows deletion or restoration. "Generalization" means replacing the value of an attribute with a higher-level value or concept, such as dividing age into 10-year increments or making cucumber a higher-level vegetable. "Top (bottom) coding" refers to grouping numerical attributes into particularly large or small attribute values. For example, people over 100 years old might be coded as "over 100 years old." "Noise (error) addition" refers to adding random noise that follows a certain distribution to a numerical attribute. "Swapping (data exchange)" refers to (probabilistically) exchanging attribute values ​​between records for categorical attributes. It is also called data swap. "Sampling" means randomly extracting a certain percentage or number of items from the entire original data. "Grouping" refers to replacing detailed items in attributes or history with certain groups or divisions.

[0253] <Embodiment 10: Description of Configuration: Access Control Means of Access Control Unit> “Access control means” 3405 is configured to have a function regarding access control when a third party accesses the health and medical care related information storage unit via a network, such that when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a non-medical professional, part (including all) of the health and medical care related information stored in the health and medical care related information storage unit, or the health and medical care related information that has been anonymized using a predetermined anonymization method, can be viewed.

[0254] <Embodiment 10: Healthcare-related information management system: hardware configuration> Figure 35 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 3501 that performs various calculation processes, and a "main memory" 3502. It also comprises a "non-volatile memory" 3503 that holds predetermined information, and a "network I / F" 3504 that transmits and receives information to and from a third party terminal 3506 and an administrator terminal 3507. These are then interconnected by a data communication path such as a "bus" 3505, and perform the transmission and reception of information and processing.

[0255] Here, the "main memory" reads out programs that perform various processes in order to have the "CPU" execute them, and also provides a work area that is a working area for the programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is a program that retains information on the anonymization method. In addition, the "main memory" and "non-volatile memory" store information on the anonymization method and the like.

[0256] The "CPU" executes the anonymization method information retention program stored in the "main memory" to store anonymization method information indicating the anonymization method in the "main memory" and the "non-volatile memory." Thereafter, the "CPU" executes the access control program stored in the "main memory" to enable viewing of a part (including all) of the health and medical related information stored in the health and medical related information storage unit, or the health and medical related information that has been anonymized using a predetermined anonymization method, when the disclosure permission information indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional.

[0257] <Embodiment 10: Healthcare-related information management system: Processing flow> 36 is a diagram showing the flow of processing when using the health care related information management system in this embodiment. As shown in this diagram, the processing method is composed of anonymization method information holding step S3608 and access control step S3609.

[0258] The "anonymization method information storage step" S3608 is a stage for storing anonymization method information, which is information indicating a method for anonymizing health and medical care related information.

[0259] The “access control step” S3609 is a step in which, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional, part (including all) of the health and medical related information stored in the health and medical related information storage unit, or the health and medical related information that has been anonymized using a predetermined anonymization method, is made viewable.

[0260] <An example of anonymization method> 37 to 39 are diagrams showing an example of an anonymization method. Using these figures, an example of an anonymization method will be briefly described. The table shown in FIG. 37 is a list of patients at a fictitious medical institution in Minato-ku, Tokyo, Japan, who have not yet been anonymized. Here, six attributes (name, age, sex, place of residence, religion, and disease name) and data for 12 people are included. Among these, "name" is information constituting personal data, and is information that may identify an individual by itself. Also, "age", "sex", "place of residence", "religion", and "disease name" are information constituting personal data, and are information that is not accumulated over time, and are information that cannot identify an individual by itself, but may identify an individual by combining with other attributes or by matching with external information. In particular, "disease name" is very sensitive attribute information in personal data. These pieces of information correspond to the health and medical care-related information of individuals stored in the above-mentioned health and medical care-related information storage unit. In this case, the following processing may be performed to achieve k-anonymity for a certain value of k (k is a natural number equal to or greater than 2).

[0261] First, a process called "pseudonymization" is performed to replace certain values ​​of a certain attribute with an asterisk "*". All or some of the values ​​in that column are replaced with "*". In the table shown in Figure 38, all values ​​of "name" and all values ​​of "religion" are replaced with "*". Next, a process called "generalization" is performed to replace individual attribute values ​​with a wider range. For example, for "age", "29 years old" is replaced with "20s" and "35 years old" is replaced with values ​​with a wider range, such as "30s". In addition, for "place of residence", the value consists of prefecture and city / ward / town / village, but the city / ward / town / village is deleted and changed to only prefecture. Figure 38 shows an anonymized table. Here, there are four equivalence classes with the same combination of quasi-identifiers ("age", "gender", and "place of residence").

[0262] Figure 39 shows an anonymized table grouped for easy understanding. As can be seen from this table, all of the groups (Group A to Group D) have achieved 3-anonymity for "age," "gender," and "place of residence." This is because any combination of these attributes results in three or more people. In this way, by anonymizing the health and medical care related information about individuals stored in the above-mentioned health and medical care related information storage unit, it is possible to reduce the risk of individuals being identified.

[0263] <Summary> From the above, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional, it is possible to make viewable some (including all) of the health and medical related information stored in the health and medical related information storage unit, or the health and medical related information that has been anonymized using a predetermined anonymization method. [Explanation of symbols]

[0264] Healthcare related information management system: 200, 300 Health and Medical Information Storage Division: 201, 301 Access control unit: 202, 302 Incentive Management Department: 203, 303 Provision history storage unit: 204, 304 Network: 205 Third party terminal: 206 Administrator terminal: 207

Claims

1. a health and medical care related information storage unit for storing and managing health and medical care related information on an individual; an access control unit for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network; an incentive management unit for providing incentives to encourage disclosure of health and medical care related information of an individual by referring to a provision history in a provision history storage unit described below with respect to whether or not to permit disclosure of the health and medical care related information of the individual; a provision history storage unit that stores a provision history that is a history of providing incentives to each individual, The incentive management unit performs a first process of executing an operation to provide an incentive when, as a result of referring to the provision history, it is determined that a disclosure rate of an individual's health and medical care related information has reached a certain value, or when, as a result of referring to the provision history, something that was made public but not actually viewed by anyone is viewed by someone (in this case, the provision history and the viewing history of the health and medical care related information have the same meaning. The same applies below. and a third process of executing an operation to provide an incentive when it is determined, as a result of referring to the first process, the second process, and the provision history, that a predetermined period (time) has elapsed since an incentive was provided to an individual in the past.

2. The system further includes an incentive type information storage unit that stores incentive type information that is information indicating the types of multiple incentives, 2. The health care related information management system according to claim 1, wherein the incentive management unit selects and provides incentives to individuals according to incentive provision history, based on incentive type information stored in an incentive type information storage unit.

3. a termination request receiving unit that receives a termination request, which is a request to stop or terminate the publication of already-disclosed health and medical care related information, from an individual who has stored health and medical care related information in the health and medical care related information storage unit; a termination condition storage unit that stores a termination condition, which is a condition for determining whether or not to terminate the service based on information about the individual who made the termination request when the termination request is accepted; a decision rule storage unit that stores decision rules for determining whether or not to end the disclosure of health and medical care related information based on information about the individual who made the end request and the stored end condition; a termination determination unit that, when the termination request is accepted, determines whether to terminate the process based on information about the individual, the stored termination condition, and the stored determination rule; a termination control unit that controls the access control unit to terminate the disclosure of the individual's health and medical care related information when the termination determination unit determines that the disclosure should be terminated; The health care related information management system according to claim 1 , further comprising:

4. 2. The health care related information management system according to claim 1, further comprising an access authentication processing unit for performing authentication for accessing the incentive management unit.

5. 5. The health and medical related information management system of claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating consent to accepting an incentive by the incentive management unit, after being authenticated by the access authentication processing unit.

6. 6. The health care related information management system according to claim 5, further comprising an incentive provision processing unit that performs an incentive provision process for providing an incentive when the consent information acquisition unit acquires the consent information.

7. 2. The health and medical care related information management system according to claim 1, further comprising a disclosure permission information holding unit for holding disclosure permission information indicating whether an individual permits disclosure of his or her own health and medical care related information to a third party.

8. 8. The health care related information management system according to claim 7, further comprising a third party identification information holding unit for holding third party identification information for identifying whether the third party is a medical professional or a non-medical professional.

9. 9. The health care related information management system of claim 8, wherein the access control unit allows the medical professional to view the health care related information stored in the health care related information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the third party is a medical professional.

10. 9. The health and medical related information management system of claim 8, wherein the access control unit allows the non-medical professional to view a part (including all) of the health and medical related information stored in the health and medical related information storage unit, or health and medical related information that has been anonymized using a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the non-medical professional is a non-medical professional.

11. The health care related information management system of claim 10, wherein the anonymization method is at least any one of the anonymization methods of k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

12. 2. The health care related information management system of claim 1, wherein the health care related information storage unit stores health care related information including one or more of electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS regarding an individual.

13. The health and medical related information management system of claim 1, wherein the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchen utensils, bedding, beds or pillows, provision of a password or ID for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, product coupons, travel coupons or cash.

14. The health and medical related information management system of claim 8, wherein the medical professionals include at least one of the following: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, clinical radiologists, clinical X-ray technicians, clinical laboratory technicians, sanitary laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

15. The health and medical related information management system of claim 8, wherein the non-medical personnel include at least one of employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

16. A method executed by a CPU in a health care related information management system that is a computer, comprising: a health and medical related information accumulation step for accumulating and managing health and medical related information relating to an individual; an access control step for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage step to a third party via a network; an incentive management step for providing an incentive to encourage disclosure of health and medical care-related information of an individual by referring to a provision history in a provision history storage step described later with respect to whether or not the disclosure of the health and medical care-related information of the individual is permitted; a provision history storage step for storing a provision history that is a history of providing incentives to each individual, The incentive management step is a first process of executing an operation for providing an incentive when, as a result of referring to the provision history, it is determined that an individual's disclosure rate of health and medical care related information has reached a certain value, or when, as a result of referring to the provision history, something that was made public but not actually viewed by anyone is viewed by someone (in this case, the provision history and the viewing history of the health and medical care related information have the same meaning; the same applies below). ), and a third process of executing an operation to provide an incentive if it is determined, as a result of referring to the first process, the second process, and the provision history, that a predetermined period (time) has elapsed since an incentive was provided to an individual in the past.

17. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method further includes an incentive type information holding step for holding incentive type information which is information indicating the types of a plurality of incentives; 17. The method according to claim 16, wherein said incentive management step selects and provides an incentive to an individual in accordance with the incentive provision history based on the incentive type information stored in said incentive type information storage step.

18. A method executed by a CPU in a health care related information management system that is a computer, comprising: a termination request receiving step of receiving a termination request, which is a request to stop or terminate the disclosure of the already disclosed health and medical care related information, from an individual who has accumulated the health and medical care related information in the health and medical care related information accumulation step; a termination condition holding step for holding a termination condition, which is a condition for determining whether or not termination is permitted based on information about an individual who has made the termination request, when the termination request is accepted; a decision rule storage step for storing a decision rule for determining whether or not to terminate the disclosure of health and medical care related information based on information about the individual who made the termination request and the stored termination condition; a termination decision step of deciding whether to terminate the process based on information about the individual, the stored termination condition, and the stored decision rule when the termination request is accepted; a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the determination result in the termination determination step is that the disclosure should be terminated; 20. The method of claim 16 further comprising:

19. A method executed by a CPU in a health care related information management system that is a computer, comprising:

17. The method according to claim 16, further comprising an access authentication processing step for performing authentication for accessing said incentive management step.

20. A method executed by a CPU in a health care related information management system that is a computer, comprising:

20. The method according to claim 19, further comprising a consent information acquisition step of acquiring consent information, which is information indicating consent to accepting the incentive by the incentive management step, after authentication is performed in the access authentication processing step.

21. A method executed by a CPU in a health care related information management system that is a computer, comprising:

21. The method according to claim 20, further comprising an incentive providing process step of performing an incentive providing process which is a process for providing an incentive when the consent information is acquired in the consent information acquiring step.

22. A method executed by a CPU in a health care related information management system that is a computer, comprising:

17. The method according to claim 16, further comprising a disclosure permission information holding step of holding disclosure permission information indicating whether an individual permits disclosure of his / her health care related information to a third party.

23. A method executed by a CPU in a health care related information management system that is a computer, comprising:

23. The method of claim 22, further comprising a third party identification information retaining step of retaining third party identification information for identifying whether the third party is a medical professional or a non-medical professional.

24. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 23, wherein the access control step allows a medical professional to view the health and medical related information stored in the health and medical related information storage step if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a medical professional.

25. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 23, wherein the access control step allows the non-medical professional to view a part (including all) of the health and medical related information accumulated in the health and medical related information accumulation step, or the health and medical related information that has been anonymized by a predetermined anonymization method, if the disclosure permission information retained in the disclosure permission information retaining step indicates that disclosure is permitted and the third party identification information retained in the third party identification information retaining step indicates that the person is a non-medical professional.

26. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 25, wherein the anonymization method is performed by at least any one of the following anonymization methods: k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof.

27. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method according to claim 16, wherein the health and medical related information accumulation step accumulates health and medical related information including one or more of electronic medical record information, various test information, prescription information, medical history information, medication information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS regarding an individual.

28. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method of claim 16, wherein the incentive management step provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchen utensils, bedding, beds or pillows, provision of a password or ID for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, product coupons, travel coupons or cash.

29. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method of claim 23, wherein the medical professionals include at least one of the following: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical x-ray technicians, clinical laboratory technicians, sanitary laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

30. A method executed by a CPU in a health care related information management system that is a computer, comprising: The method of claim 23, wherein the non-medical personnel include at least one of employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), cooperative health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

31. a health and medical related information accumulation step for accumulating and managing health and medical related information relating to an individual; an access control step for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage step to a third party via a network; an incentive management step for providing an incentive to encourage disclosure of health and medical care-related information of an individual by referring to a provision history in a provision history storage step described later with respect to whether or not the disclosure of the health and medical care-related information of the individual is permitted; a provision history storage step for storing a provision history that is a history of providing incentives to each individual, The incentive management step is a first process of executing an operation for providing an incentive when, as a result of referring to the provision history, it is determined that an individual's disclosure rate of health and medical care related information has reached a certain value, or when, as a result of referring to the provision history, something that was made public but not actually viewed by anyone is viewed by someone (in this case, the provision history and the viewing history of the health and medical care related information have the same meaning; the same applies below). and a third process of executing an operation to provide an incentive when it is determined that a predetermined period (time) has elapsed since an incentive was provided to an individual in the past as a result of referring to the first process, the second process, and the provision history.

32. The method further includes an incentive type information holding step for holding incentive type information which is information indicating the types of a plurality of incentives; The incentive management step selects and provides incentives to be provided to individuals in accordance with the incentive provision history based on the incentive type information stored in the incentive type information storage step.

33. a termination request receiving step of receiving a termination request, which is a request to stop or terminate the disclosure of the already disclosed health and medical care related information, from an individual who has accumulated the health and medical care related information in the health and medical care related information accumulation step; a termination condition holding step for holding a termination condition, which is a condition for determining whether or not termination is permitted based on information about an individual who has made the termination request, when the termination request is accepted; a decision rule storage step for storing a decision rule for determining whether or not to terminate the disclosure of health and medical care related information based on information about the individual who made the termination request and the stored termination condition; a termination decision step of deciding whether to terminate the process based on information about the individual, the stored termination condition, and the stored decision rule when the termination request is accepted; a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the determination result in the termination determination step is that the disclosure should be terminated; 32. An operating program for a health and medical care related information management system, the operating program being written in a readable and executable manner in the health and medical care related information management system which is a computer according to claim 31.

34. 32. An operating program for a health and medical care related information management system written in a readable and executable manner in a health and medical care related information management system which is a computer as claimed in claim 31, further comprising an access authentication processing step for performing authentication for accessing said incentive management step.

35. An operating program for a health and medical related information management system written in a readable and executable manner in a health and medical related information management system which is a computer as described in claim 34, further comprising a consent information acquisition step of acquiring consent information which is information indicating agreement to accept the incentive through the incentive management step after being authenticated in the access authentication processing step.

36. An operating program for a health and medical related information management system written in a readable and executable manner in a health and medical related information management system which is a computer as described in claim 35, further comprising an incentive provision processing step which performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

37. An operating program for a health and medical related information management system written in a readable and executable manner in a health and medical related information management system which is a computer as described in claim 31, further comprising a disclosure permission information storage step for storing disclosure permission information indicating whether an individual permits the disclosure of his or her own health and medical related information to third parties.

38. An operating program for a health and medical related information management system written in a readable and executable manner in a health and medical related information management system which is a computer as described in claim 37, further comprising a third party identification information retention step for retaining third party identification information for identifying whether the third party is a medical professional or a non-medical professional.

39. 39. An operating program for a health care related information management system written in a readable and executable manner in a health care related information management system which is a computer as described in claim 38, wherein the access control step allows the medical professional to view the health care related information stored in the health care related information storage step if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the medical professional is a medical professional.

40. The access control step allows the non-medical professional to view a part (including all) of the health and medical related information stored in the health and medical related information accumulation step, or the health and medical related information anonymized by a predetermined anonymization method, if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the non-medical professional is a non-medical professional.

41. The anonymization method is at least any one of the anonymization methods of k (k is a natural number greater than or equal to 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof. An operating program for a health and medical care related information management system written in a readable and executable manner on a health and medical care related information management system which is a computer as described in claim 40.

42. The health and medical related information storage step stores health and medical related information including one or more of an individual's electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, health promotion app data, and interactive health promotion SNS conversation data.

43. The incentive management step provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchen utensils, bedding, beds or pillows, provision of a password or ID for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash. An operating program of a health care related information management system written in a readable and executable manner in a health care related information management system that is a computer as described in claim 31.

44. The medical professionals include at least one of the following: doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical X-ray technicians, clinical laboratory technicians, sanitary laboratory technicians, clinical engineers, dental hygienists, dental technicians, paramedics, masseurs, shiatsu therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators. An operating program for a health and medical related information management system written in a readable and executable manner into a computer that is the health and medical related information management system described in claim 38.

45. The non-medical personnel include at least one of the following employees: life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), union health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies. An operating program for a health and medical related information management system written in a readable and executable manner into a health and medical related information management system that is a computer as described in claim 38.

Images