Healthcare Information Management System

Abstract

In order to encourage the disclosure of health and medical related information about individuals by referring to the provision history, which is a history of providing incentives for each individual, regarding whether to disclose health and medical related information about individuals, it is intended to provide a health and medical related information management system that provides incentives to individuals. 【Solution means】A health and medical related information storage unit for storing and managing health and medical related information about individuals, an access control unit for controlling the disclosure of the health and medical related information stored in the health and medical related information storage unit to a third party via a network, and an incentive management unit for providing incentives to individuals in order to encourage the disclosure of health and medical related information by referring to the provision history of the provision history holding unit described below regarding whether to disclose health and medical related information about individuals, and a provision history holding unit for holding the provision history, which is a history of providing incentives for each individual, to provide a health and medical related information management system having the same.

Description

Technical Field

[0001] The present invention relates to a health care-related information management system for accumulating and managing health care-related information, which is information related to an individual's health care.

Background Art

[0002] Recently, systems and services that enable sharing of patients' medical information and the like among multiple medical institutions have begun to be considered.

[0003] As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problems of avoiding duplication of test items in test data in multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system to store various test results of patients. Then, the medical information sharing server displays the corresponding electronic medical record according to the instructions of medical institution terminals such as medical facility terminals of medical institutions and health examination center terminals, and when conducting a clinical test, searches for and displays whether the results of test items identical to the test items of the clinical test to be performed are described in the test result DB. An information system is disclosed. In addition, a medical information providing system is provided in the medical information sharing server, and when the medical information providing system sends information to the information recipient, it bills for the consideration of the information, and based on the received consideration, formulates the rewards that the medical information providing system can provide to users and provides rewards to users.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the above-described invention, only the point of formulating the reward that the medical information providing system can offer to users and providing the reward to users is disclosed. Regarding a health care-related information management system such as the present invention, there is a problem that it is not specified up to the point of having a function of holding a provision history which is a history of providing incentives for each individual, or / and a function of providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history regarding whether or not to disclose health care-related information about the individual.

Means for Solving the Problems

[0006] Based on the problems as described above, the present invention aims to provide a health care-related information management system that provides an incentive to an individual in order to promote the disclosure of health care-related information about the individual by referring to a provision history which is a history of providing incentives for each individual regarding whether or not to disclose health care-related information about the individual.

[0007] Specifically, the present invention provides a health care-related information management system having a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history of a provision history holding unit described later regarding whether or not to disclose health care-related information about the individual, and a provision history holding unit for holding a provision history which is a history of providing incentives for each individual.

[0008] In addition to the above features, the present invention provides a health care-related information management system having an incentive type information holding unit for holding incentive type information which is information indicating types of a plurality of incentives, and the incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit.

[0009] In addition to the above features, the present invention also provides an end request receiving unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health and medical related information, from an individual who has stored health and medical related information in the health and medical related information storage unit; an end condition holding unit that holds end conditions, which are conditions for determining whether to end based on information about the individual who made the end request when the end request is received; a determination rule holding unit that holds a determination rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request, the held end conditions, and the held determination rules; an end determination unit that determines whether to end based on information about the individual, the held end conditions, and the held determination rules when the end request is received; and an end control unit that controls the access control unit to end the disclosure of the health and medical related information of the individual when the determination result in the end determination unit is that it should end, in a health and medical related information management system.

[0010] In addition to the above features, the present invention also provides a health and medical related information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] In addition to the above features, the present invention also provides a health and medical related information management system having a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

[0012] In addition to the above features, the present invention also provides a health and medical related information management system having an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive when consent information is acquired by the consent information acquisition unit.

[0013] Further, in addition to the above features, the present invention provides a health care-related information management system having a disclosure permission information holding unit that holds disclosure permission information indicating whether or not an individual permits the disclosure of his or her own health care-related information to a third party.

[0014] Further, in addition to the above features, the present invention provides a health care-related information management system having a third-party identification information holding unit that holds third-party identification information for identifying whether a third party is a medical worker or a non-medical worker.

[0015] Further, in addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission to disclose and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a medical worker, the health care-related information stored in the health care-related information storage unit is allowed to be viewed by the medical worker.

[0016] Further, in addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission to disclose and the third-party identification information held in the third-party identification information holding unit indicates that the third party is a non-medical worker, a part (including all) of the health care-related information stored in the health care-related information storage unit or the health care-related information anonymized by a predetermined anonymization method is allowed to be viewed by the non-medical worker.

[0017] Further, in addition to the above features, the present invention provides a health care-related information management system in which the anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0018] In addition to the above features, the present invention provides a health care-related information management system in which the health care-related information storage unit stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical examination forms, data of a health promotion app, and conversation data of an interactive health promotion SNS, regarding an individual.

[0019] In addition to the above features, the present invention provides a health care-related information management system in which the incentive management unit provides an incentive including any one or more of the provision of minor points, the provision of individual information services or general information services to information providers, the provision of individual drugs or supplements, the provision of books and other products, the provision of passwords or IDs for information provision, the provision of items available on the network, the provision of the right to receive medical examinations, the provision of the right to receive diagnoses, the provision of the right to receive tests, the provision of the right to receive various services on the network, the provision of specific software (for example, a health management app or a pedometer app), the provision of points to prepaid or postpaid electronic money, the provision of product coupons, travel coupons or cash.

[0020] In addition to the above features, the present invention provides a health care-related information management system in which medical staff includes at least one or more of physicians, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, medical X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, osteopaths, registered dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, licensed psychologists, clinical psychologists, and medical office workers.

[0021] In addition to the above features, the present invention provides a health care-related information management system in which non-medical workers include at least one or more employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0022] Furthermore, regarding the above-described health care-related information management system, in order to realize them, a method executed by the CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner are provided.

[0023] Specifically, the present invention provides a method executed by the CPU in the health care-related information management system which is a computer, the method including: a health care-related information accumulation step for accumulating and managing health care-related information regarding an individual; an access control step for controlling disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; an incentive management step for providing an incentive to an individual in order to encourage disclosure of the health care-related information by referring to the provision history of the provision history retention step described later regarding whether or not to disclose the health care-related information regarding the individual; and a provision history retention step for retaining a provision history which is a history of providing an incentive for each individual.

[0024] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system which is a computer, the method including an incentive type information holding step of holding incentive type information which is information indicating a plurality of types of incentives, and the incentive management step provides a method of selecting and providing an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step.

[0025] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system which is a computer, the method including an end request receiving step of receiving an end request which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has accumulated health care-related information in the health care-related information accumulation step, an end condition holding step of holding an end condition which is a condition for determining whether it is possible to end based on information regarding the individual who has made the end request when the end request is received, a determination rule holding step of holding a determination rule which is a rule for determining whether to end the disclosure of health care-related information based on information regarding the individual who has made the end request, the held end condition, an end determination step of determining whether to end based on information regarding the individual, the held end condition, and the held determination rule when the end request is received, and an end control step in which the access control step is controlled to end the disclosure of the health care-related information of the individual when the determination result in the end determination step is a determination result that it should end.

[0026] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system which is a computer, the method including an access authentication processing step of performing authentication for accessing the incentive management step.

[0027] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health and medical related information management system which is a computer, the method including a consent information acquisition step of acquiring consent information which is information indicating acceptance of receiving an incentive by an incentive management step after being authenticated in an access authentication processing step.

[0028] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health and medical related information management system which is a computer, the method including an incentive provision processing step of performing incentive provision processing which is processing for providing an incentive when consent information is acquired in the consent information acquisition step.

[0029] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health and medical related information management system which is a computer, the method including a public permission / non - permission information holding step of holding public permission / non - permission information indicating whether an individual permits the disclosure of his / her own health and medical related information to a third party.

[0030] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health and medical related information management system which is a computer, the method including a third - party identification information holding step of holding third - party identification information for identifying whether a third party is a medical practitioner or a non - medical practitioner.

[0031] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health and medical related information management system which is a computer, the method being such that in the access control step, when the public permission / non - permission information held in the public permission / non - permission information holding step indicates public permission and the third - party identification information held in the third - party identification information holding step indicates that the third party is a medical practitioner, the health and medical related information accumulated in the health and medical related information accumulation step is allowed to be viewed by the medical practitioner.

[0032] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system which is a computer, wherein the access control step allows a non-medical professional to view part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method, when the public disclosure permission / non-permission information held in the public disclosure permission / non-permission information holding step indicates public disclosure permission and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical professional.

[0033] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system which is a computer, wherein the anonymization method is performed by at least one of k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0034] In addition, the present invention provides, in addition to the above features, a method executed by a CPU in a health care-related information management system which is a computer, wherein the health care-related information accumulation step accumulates health care-related information including any one or more of electronic medical record information regarding an individual, various examination information, prescription information, medication history information, medication status information, vital information, information on medical interview forms, data of a health promotion application, and conversation data of an interactive health promotion SNS.

[0035] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer. The incentive management step includes providing at least one of the following incentives: providing minor points, providing individualized or general information services to information providers, providing individualized drugs or supplements, providing books and other commodities, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

[0036] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer. The medical staff includes at least one of the following: doctors, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0037] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer. The non-medical staff includes at least one of the following: employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), group health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies.

[0038] Specifically, the present invention provides an operation program of a health care related information management system, which is described in a computer-readable and executable manner, and includes: a health care related information accumulation step for accumulating and managing health care related information about an individual; an access control step for controlling the disclosure of the health care related information accumulated in the health care related information accumulation step to a third party via a network; an incentive management step for providing an incentive to an individual in order to promote the disclosure of the health care related information by referring to the provision history of the provision history retention step described later regarding whether or not to disclose the health care related information about the individual; and a provision history retention step for retaining a provision history, which is a history of providing incentives for each individual.

[0039] In addition, the present invention provides an operation program of a health care related information management system, which is described in a computer-readable and executable manner, and in addition to the above features, includes an incentive type information retention step for retaining incentive type information, which is information indicating types of a plurality of incentives. The incentive management step selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information retained in the incentive type information retention step.

[0040] In addition to the above features, the present invention also includes an end request acceptance step of accepting an end request, which is a request to stop or end the disclosure of already public health and medical related information from an individual who has accumulated health and medical related information in the health and medical related information accumulation step; an end condition holding step of holding an end condition, which is a condition for determining whether it is possible to end based on the information of the individual who made the end request when the end request is accepted; a judgment rule holding step of holding a judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on the information of the individual who made the end request, the held end condition, and the held judgment rule; an end judgment step of judging whether to end based on the information of the individual, the held end condition, and the held judgment rule when the end request is accepted; and an end control step of controlling the access control step to end the disclosure of the health and medical related information of the individual when the judgment result in the end judgment step is that it should end. The present invention provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having the above steps.

[0041] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having an access authentication processing step of performing authentication for accessing the incentive management step.

[0042] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having a consent information acquisition step of acquiring consent information, which is information indicating acceptance of receiving an incentive by the incentive management step after being authenticated in the access authentication processing step.

[0043] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer having an incentive provision processing step for performing incentive provision processing, which is a process for providing an incentive when consent information is obtained in the consent information acquisition step.

[0044] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer having a public disclosure permission / non-permission information retention step for retaining public disclosure permission / non-permission information indicating whether an individual permits the disclosure of his / her own health care-related information to a third party.

[0045] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer having a third party identification information retention step for retaining third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0046] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer, wherein the access control step allows a medical practitioner to view the health care-related information accumulated in the health care-related information accumulation step when the public disclosure permission / non-permission information retained in the public disclosure permission / non-permission information retention step indicates public disclosure permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner.

[0047] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, where the access control step allows a non-medical professional to view part (including all) of the health care-related information accumulated in the health care-related information accumulation step or the health care-related information anonymized by a predetermined anonymization method when the publication permission / denial information held in the publication permission / denial information holding step indicates publication permission and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical professional.

[0048] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, where the anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0049] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, where the health care-related information accumulation step accumulates health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical interview forms, data of health promotion apps, and conversation data of interactive health promotion SNSs.

[0050] In addition to the above features, the present invention provides a computer-readable and executable operation program for a health care-related information management system, wherein the incentive management step includes providing at least one of the following incentives: providing minor points, providing individual or general information services to information providers, providing individual drugs or supplements, providing books and other goods, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

[0051] In addition to the above features, the present invention provides a computer-readable and executable operation program for a health care-related information management system, wherein the medical staff includes at least one of the following: doctors, dentists, pharmacists, nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aid responders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0052] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer including at least one or more employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), union health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies, for non-medical workers.

Advantages of the Invention

[0053] As described above, in the present invention, in order to encourage the disclosure of health care-related information by referring to the provision history, which is a history of providing incentives for each individual regarding the permission or non-permission of the disclosure of health care-related information about an individual, it is possible to provide a health care-related information management system that provides incentives to individuals.

Brief Description of the Drawings

[0054]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Figure 26

Figure 27

Figure 28

Figure 29

Figure 30

Figure 31

Figure 32

Figure 33

Figure 34

Figure 35

Figure 36

Figure 37

Figure 38

Figure 39

Figure 40

Figure 41

Figure 42

Figure 43

Figure 44

[0055] FIG. 1 is a diagram showing the hardware configuration applied to the present invention. The present invention is an invention that principally uses an electronic computer, and can be realized by software, by hardware, or by the cooperation of software and hardware. The hardware that realizes all or part of each component of the present invention is composed of a CPU, memory, bus, input / output devices, various peripheral devices, user interfaces, etc., which are the basic components of a computer. The various peripheral devices include storage devices, interfaces such as the Internet, Internet devices, displays, keyboards, mice, speakers, cameras, videos, TVs, various sensors for grasping the production status in a laboratory or factory (flow sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipping quantity counters, packing quantity counters, foreign object inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human sensors, operator work status grasping devices (using video, ID, PC workload, etc.)), CD devices, DVD devices, Blu-ray devices, USB memories, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, phones, faxes, copiers, printing devices, movie editing devices, various sensor devices, etc. Also, this system does not necessarily have to be composed of a single housing, and may be composed of a plurality of housings connected by communication. Also, the communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, ultrasonic communication, and furthermore, part of it may be installed across national borders. Furthermore, each of the plurality of housings may be operated by different entities, or may be operated by a single entity. Whether the operating entity of the system of the present invention is singular or plural does not matter. Also, in addition to this system, the invention can also be configured as a system including terminals used by third parties and further including systems with terminals used by other third parties. Also, these terminals may be installed across national borders. Furthermore, in addition to this system and the said terminals, there may be prepared devices used for third-party related information, devices used for registering related persons, and devices used for databases that record the registration content. These may be provided in this system, or may be provided outside this system and configure this system so that this information can be used.

[0056] As shown in this figure, a computer consists of a chipset, a CPU, non-volatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, a real-time clock, etc., which are configured on the motherboard. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), and for embedding various devices such as cameras, microphones, speakers or headphones, and displays), and various programs. Various programs and various data constituting the present invention are configured to execute various processes by efficiently using these hardware resources. ≪Chipset≫

[0057] The "chipset" is a set of large-scale integrated circuits (LSIs) mounted on the motherboard of a computer, which integrates the communication function, that is, the bridge function, between the external bus of the CPU and the standard bus connecting memory and peripheral devices. There are cases of adopting a two-chipset configuration and a one-chipset configuration. The north bridge is provided on the side closer to the CPU and the main memory, and the south bridge is provided on the side farther away and for the interface with relatively low-speed external I / O.

[0058] (North Bridge) The north bridge includes a CPU interface, a memory controller, and a graphics interface. Most of the functions of a conventional north bridge may be borne by the CPU. The north bridge is connected to the memory slot of the main memory via a memory bus, and is connected to the graphics card slot of the graphics card via a high-speed graphics bus (AGP, PCI Express).

[0059] (South Bridge) The South Bridge is connected to the PCI interface (PCI slot) via the PCI bus and is responsible for I / O functions such as the ATA (SATA) interface, USB interface, Ethernet interface, and sound functions. Incorporating circuits that support PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are unable to achieve high-speed operation, would be a hindrance to the speed increase of the chipset itself. Therefore, it may be separated from the South Bridge chip and assigned to another LSI called a Super I / O chip. A bus is used to connect the CPU (MPU) to peripheral devices and various control units. The bus is connected by the chipset. The memory bus used for connection to the main memory may adopt a channel structure instead in order to achieve higher speed. As the bus, a serial bus or a parallel bus can be adopted. The parallel bus transfers the original data itself or a plurality of bits cut out from the original data as a single unit simultaneously through a plurality of communication paths, while the serial bus transfers data bit by bit. A dedicated line for the clock signal is provided in parallel with the data lines to synchronize data demodulation on the receiving side. It is also used as a bus to connect the CPU (chipset) to external devices, such as GPIB, IDE / (parallel)ATA, SCSI, and PCI. Due to limitations in speed increase, in the improved version of PCI, PCI Express, and the improved version of parallel ATA, serial ATA, the data lines may also be a serial bus.

[0060] ≪CPU≫

[0061] The CPU reads, interprets, and executes in sequence the instruction sequence called a program stored in the main memory, and outputs information composed of signals to the main memory as well. The CPU functions as the center for performing calculations within the computer. Note that the CPU is composed of a CPU core part that serves as the center of the calculation and its peripheral parts, and includes registers, cache memory, an internal bus connecting the cache memory and the CPU core, a DMA controller, a timer, and an interface with a connection bus to the north bridge inside the CPU. Note that multiple CPU cores may be provided in one CPU (chip). In addition to the CPU, processing may also be performed by a graphics interface (GPU) or an FPU. Note that the description in the embodiment is of a dual-core type, but it is not limited to this. Also, a program can be built into the CPU.

[0062] ≪Non-volatile memory≫

[0063] (HDD)

[0064] The basic structure of a hard disk drive is composed of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can adopt SATA (ATA in the past). A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read the sector and transfer it to and write it to another hard disk drive. At this time, it does not access the memory of the host CPU. Therefore, the load on the CPU can be increased without.

[0065] ≪Main memory≫

[0066] The CPU directly accesses and executes various programs on the main memory. The main memory is a volatile memory and DRAM is used. Programs on the main memory are deployed from the non-volatile memory to the main memory upon receiving the program startup instruction. Thereafter, the CPU executes the program according to various execution instructions and execution procedures within the program.

[0067] ≪Operating System (OS)≫

[0068] The operating system is used to manage the resources on the computer for applications to utilize, manage various device drivers, and manage the computer itself as hardware. In small computers, firmware may be used as the operating system.

[0069] ≪BIOS≫

[0070] BIOS causes the CPU to execute the procedures for starting up the computer hardware and operating the operating system. Most typically, it is the hardware that the CPU first reads when receiving the startup instruction of the computer. The address of the operating system stored in the disk (non-volatile memory) is described here, and the operating system is sequentially deployed to the main memory by the BIOS deployed in the CPU and enters the operating state. Note that BIOS also has a check function for checking the presence or absence of various devices connected to the bus. The results of the check are saved on the main memory and are made available by the operating system as appropriate. Note that BIOS may be configured to check external devices, etc. The above is the same for all embodiments.

[0071] As shown in the figures, the present invention can basically be composed of a general-purpose computer program and various devices. The operation of the computer basically takes the form of loading a program recorded in a non-volatile memory into the main memory and then executing processing with the main memory, the CPU, and various devices. Communication with the devices is performed via an interface connected to a bus line. Examples of the interface include a display interface, a keyboard, a communication buffer, etc. Hereinafter, embodiments of the present invention will be described together with illustrated examples.

[0072] <Satisfaction of the availability of the natural law of the present invention>

[0073] The present invention functions through the cooperation of a computer, communication facilities, and software. Specifically, it relates to a health care-related information management system for accumulating and managing health care-related information, which is information related to an individual's health care. Through a network, various information and data are exchanged using hardware resources among third-party terminals, administrator terminals, etc. Therefore, from this perspective, if the invention of the present application is judged based on the matters described in the claims and the specification regarding resources such as a computer and the common general technical knowledge related to those matters, the present invention as a whole utilizes natural laws and also falls within the scope of computer software-related inventions.

[0074] <Significance of the utilization of natural laws required by the Patent Law>

[0075] The utilization of natural laws required by the Patent Act means that, from the perspective that an invention must have industrial applicability and contribute to the development of the industry based on the purpose of the law, it is required to ensure that the invention can be usefully utilized in industry. That is, it requires that the invention be useful in industry, that is, the effects of the invention declared at the time of filing can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the utilization of natural laws means that as long as the functions exerted by each of the invention-specific matters (invention constituent elements), which are the constitution of the invention for exerting the effects of the invention, are exerted by utilizing natural laws. Further, the effects of the invention only need to have the possibility of providing predetermined usefulness to the users who utilize the invention, and should not be viewed from the perspective of how the users feel or think about the usefulness. Therefore, even if the effects obtained by the users through this system are psychological effects, the effects themselves are events outside the scope of the required utilization of natural laws.

Embodiments for Implementing the Invention

[0076] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. The mutual relationship between the embodiments and the claims is as follows. Mainly, the description of Embodiment 1 relates to Claim 1, Claim 16, and Claim 31, the description of Embodiment 2 relates to Claim 2, Claim 17, and Claim 32, the description of Embodiment 3 relates to Claim 3, Claim 18, and Claim 33, the description of Embodiment 4 relates to Claim 4, Claim 19, and Claim 34, the description of Embodiment 5 relates to Claim 5, Claim 20, and Claim 35, the description of Embodiment 6 relates to Claim 6, Claim 21, and Claim 36, the description of Embodiment 7 relates to Claim 7, Claim 22, and Claim 37, the description of Embodiment 8 relates to Claim 8, Claim 23, and Claim 38, the description of Embodiment 9 relates to Claim 9, Claim 24, and Claim 39, and the description of Embodiment 10 relates to Claim 10, Claim 25, and Claim 40. The present invention should not be limited to these embodiments, and can be implemented in various modes without departing from the gist thereof.

[0077] <Overall Configuration of the Health and Medical Related Information Management System of the Present Invention> FIG. 2 is a diagram showing an example of the overall configuration of the health and medical related information management system according to the present invention. The health and medical related information management system 200 includes a health and medical related information storage unit 201 that stores health and medical related information including at least one of electronic medical record information related to an individual, various examination information (which may include health check-ups, medical examinations, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urinary protein, occult blood in urine, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on inquiry forms, data of a health promotion app, conversation data of an interactive health promotion SNS, etc.; an access control unit 202 that controls the disclosure of the health and medical related information stored in the health and medical related information storage unit 201 to a third party via a network; an incentive management unit 203 that provides an incentive to an individual in order to promote the disclosure of the health and medical related information by referring to the provision history of the provision history holding unit 204 described later regarding whether or not to disclose the health and medical related information related to the individual; and a provision history holding unit 204 that holds a provision history that is a history of providing an incentive to each individual.

[0078] Further, the health and medical related information management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, WAN, LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (for example, personal computers, tablet terminals, smartphones, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable, a WiFi router, etc.).

[0079] In addition, in the present invention, the term "third party" refers to an individual (including, but not limited to, the patient himself / herself, his / her family members, and / or caregivers, etc.), medical professionals, non-medical professionals, etc. as described below. In addition, the "administrator" is a person who is responsible for managing and operating the entire health care-related information management system (for example, an individual, or an organization, group, or corporation to which the individual belongs may be included. In addition, it may include employees of government agencies or local governments, or organizations, groups, or corporations entrusted by government agencies or local governments). The administrator may have the authority to edit, add, or delete various types of information in the health care-related information management system.

[0080] For example, the "electronic medical record information" includes basic information about the patient (for example, patient ID, name, date of birth, contact information, emergency contact information, family history, height / weight, allergy information, smoking and drinking status, medical history, etc.), information related to diagnosis (for example, the patient's chief complaint (reported symptoms such as subjective symptoms and physical condition), various test results, information about medications, diagnosis name, treatment plan, doctor's diagnosis record, doctor's instructions, etc.), information related to nursing and progress (for example, vital information (including at least, but not limited to, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (such as urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc.), observation results, records of urine and feces, records of diet content and intake amount, records of nursing care, etc.), information related to examinations (for example, examination instructions, examination results, (part of) images obtained by imaging examinations, reports on those images, etc.), information related to treatments and surgeries (for example, treatment and surgery instructions, progress and results of treatments and surgeries, in the case of pathological diagnosis, the method and diagnosis results, etc.), information related to medications (for example, drug development instructions, dosing date and medications, results of dosing, etc.), and information on post-treatment or post-operative follow-up observations, etc. may be included.

[0081] Also, for example, the "prescription information" may include the insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount taken at a time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, and so on. Also, the "medical history information" may include, for example, the patient's name, date of birth, gender, My Number information or insured person's certificate symbol number, address, emergency contact information, name of prescribing insurance medical institution and name of insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding prescription details, etc., the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of remaining medicine status, changes in physical condition during medication, concomitant medications, information on past history including complications, presence or absence of consultations with other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (drug interactions), patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the prescribing insurance pharmacist, and so on.

[0082] Also, for example, the "medication status information" may include information on the remaining amount of prescribed medicine (e.g., the amount of medicine remaining when the patient forgets to take it by accident or when the patient intentionally does not take it), timing information regarding hospital / clinic visits (e.g., the period from the scheduled prescription end date (scheduled medication end date) to the actual hospital / clinic visit (including cases where the visit is earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (e.g., including subjective symptoms and physical condition complaints such as getting hives after continuing to take a certain medicine or feeling overly dizzy after taking a certain medicine), and so on.

[0083] Also, for example, "healthcare-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained from a PHR system or the like via an API. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information related to an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information related to their own health, medical care, and nursing care in a chronological manner throughout their life and thereby receive excellent services tailored to their health status. For example, each individual citizen has hitherto recorded a great deal of information related to their health and medical care on paper media such as various notebooks and documents. Depending on the life stage (milestone in life) at that time, the medium and location where the records are kept vary. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", during the period of receiving school education, there is the "Result of School Health Examination", and at the time of employment, there is the "Result of Regular Health Examination", etc. Also, depending on one's physical condition, one manages one's own health using a "Disease Management Notebook" or "Medicine Notebook", etc., and in the elderly, it will be recorded in a "Nursing Care Prevention Notebook" or "Family Doctor Collaborative Notebook". By digitizing such an original "notebook culture" and integrating it as data in a unified manner, there is a concept and mechanism for individuals to manage and utilize it themselves, and it is expected to become more widespread in the future.

[0084] In addition, in the present invention, the description is based on the premise that the healthcare-related information storage unit 201 and the access control unit 202 function on the same server, but it is not limited to this, and they may be configured to perform functions and roles on separate servers respectively. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the healthcare-related information storage unit 201 and the access control unit 202 may be configured by a cloud server.

[0085] Similarly, in the present invention, on the premise that the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 function on separate servers, the description will be made, but it is not limited to this, and they may be configured to perform their respective functions and roles on the same server. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 may be configured by cloud servers.

[0086] <Embodiment 1 (mainly corresponding to claims 1, 16, and 31)> <Overview of Embodiment 1> This embodiment provides a health care-related information management system having a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to an individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose the health care-related information about the individual, and a provision history holding unit for holding a provision history that is a history of providing an incentive to each individual. Further, to realize this, a method executed by the CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system which is a computer are provided.

[0087] <Functional Configuration of Embodiment 1> FIG. 3 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 1. In this embodiment, a health care-related information storage unit, an access control unit, an incentive management unit, and a provision history holding unit are provided.

[0088] <Embodiment 1: Description of the Configuration - Health and Medical - Related Information Storage Unit> The "Health and Medical - Related Information Storage Unit" 201 is configured to have a function of storing health and medical - related information including any one or more of information such as electronic medical record information regarding an individual, various examination information (which may include health check - up, medical examination, etc.), prescription information, medication history information, medication status information, vital information (for example, at least including body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and not limited thereto), information on inquiry forms, data of health promotion apps, conversation data of interactive health promotion SNS, etc.

[0089] Here, the "electronic medical record information" includes, for example, basic information regarding a patient (for example, patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, past history, etc.), information regarding diagnosis (for example, the patient's chief complaint (complaints such as subjective symptoms and physical condition), various examination results, information on medications, diagnosis name, treatment policy, doctor's diagnosis record, doctor's instructions, etc.), information regarding nursing and progress (for example, vital information (for example, at least including body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and not limited thereto), observation results, records of urine and feces, etc., records of diet content and intake amount, nursing care records, etc.), information regarding examinations (for example, examination instructions, examination results, (partial) images obtained by imaging examinations, reports on those images, etc.), information regarding treatments and surgeries (for example, treatment and surgery instructions, progress and results of treatments and surgeries, when pathological diagnosis is performed, the method and diagnosis results, etc.), information regarding medications (for example, drug discovery instructions, medication date and drugs, results of medication, etc.), and follow - up observation information after treatment or surgery, etc. It is desirable that it be configured to include such information.

[0090] In addition, the "prescription information" is preferably configured to include, for example, the insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing doctor, name of medicine, form of medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount taken at a time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, and the like.

[0091] In addition, the "medication history information" is preferably configured to include, for example, the patient's name, date of birth, gender, My Number information or the symbol number of the insured person's certificate, address, emergency contact information, name of the prescribing insurance medical institution and name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding prescription details, the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of the status of remaining medicine, changes in physical condition during medication, concomitant medications, information on past history including complications, presence or absence of consultations with other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (drug interactions), patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the prescribing insurance pharmacist, and the like.

[0092] In addition, the "medication status information" is preferably configured to include information such as information on the remaining amount of the prescribed medicine (including, for example, the amount of medicine remaining when the patient forgets to take it or intentionally does not take it), timing information regarding hospital / medical clinic visits (including, for example, the period required from the scheduled prescription end date (scheduled medication end date) until the patient actually visits the hospital / medical clinic (including cases where the patient visits earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (including, for example, subjective symptoms and physical condition complaints such as getting hives after continuing to take a certain medicine or feeling overly effective and dizzy after taking a certain medicine), and the like. In the present invention, personal number (My Number) information or the insured person's certificate number of the health insurance that the individual (user) subscribes to may be used as identification information for uniquely identifying an individual (user), and health care-related information regarding the individual may be associated therewith and accumulated and organized.

[0093] Further, for example, the "health care-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained via an API from a PHR system or the like. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information regarding an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information regarding their own health, medical care, and nursing care in a time-series manner throughout their life and thereby receive excellent services tailored to their health condition. For example, each citizen has hitherto left records of a great deal of information regarding their health and medical care on various paper media such as notebooks and documents. Depending on the life stage (milestones in life) at that time, the media and locations where the records are left differ. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", at the time of receiving school education, there is the "Results of School Health Examinations", at the time of employment, there are the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one manages one's own health using a "Disease Management Notebook" or a "Medication Notebook", etc., and in old age, it will be recorded in a "Nursing Care Prevention Notebook" or a "Family Doctor Collaboration Notebook". There is a concept and mechanism in which such an original "notebook culture" is digitized and unified as data for self-management and utilization, and it is expected to become more widespread in the future.

[0094] <Embodiment 1 Explanation of Configuration: Access Control Unit> The "access control unit" 202 is configured to have a function for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network. For example, as will be described later, it is desirable to be configured to have functions such as analyzing IP packets, determining the destination IP address, obtaining the access ID / user ID, obtaining the access subject / user attributes, and performing access control based on these for access from a third-party terminal.

[0095] <Embodiment 1: Description of Configuration: Incentive Management Unit> The "incentive management unit" 203 is configured to have a function of providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose the individual's health care-related information. The operation of "for providing an incentive" includes operations such as actually providing an incentive using electronic data, etc., and operations for executing the necessary processing to transfer to execution the separately performed act of actually providing the incentive. FIG. 10 is a diagram showing the types of incentives. When providing points or electronic data such as information services as an incentive, it is an operation for a computer to execute the necessary operations for that. When drugs / supplements, etc. are provided as an incentive, for example, the processing operations for sending drugs or supplements to the disclosure person of the health care-related information correspond. That is, since the "for... " operation is executed by the incentive management unit, it is not necessarily the incentive provision operation itself. FIG. 44 is a diagram showing an example of the user interface of the health care-related information management system in the present invention. In this case, information indicating whether or not the individual (user) who has accessed using a third-party terminal, that is, the individual (user) who owns the personal number (My Number) information "123456789012", consents to providing incentives for any health and medical-related information is stored and managed in a list format. If there is consent, the health and medical-related information is in a state where it is permitted to be disclosed to a third party, that is, in a state where an incentive is given. If there is no consent, the health and medical-related information is in a state where it is not disclosed to a third party, that is, in a state where an incentive is not given. It is desirable that the information regarding these incentives is regularly exchanged between the Incentive Management Department and the Health and Medical-Related Information Accumulation Department and the Provision History Retention Department described later, so as to always be kept in the latest state. For example, in the case of FIG. 44, for each piece of health and medical-related information, it is stored and managed whether or not the individual has given consent. Here, the "〇" mark shown in the "Consent / Non-consent" column indicates the individual's consent intention, and the "×" mark indicates the individual's non-consent intention. The input of the "〇" mark or "×" mark in the "Consent / Non-consent" column is preferably configured such that the individual (user) can select the "〇" mark or "×" mark according to their own intention, for example, in the form of a pull-down menu on the terminal screen. Here, when the display item (for example, "Regular Health Check Result", etc.) described in the "Health and Medical-Related Information" column is clicked, touched, or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when the "〇" mark or "×" mark in the "Consent / Non-consent" column is clicked, touched, or tapped on the terminal screen, the date and time of consent or non-consent may be displayed on the pop-up screen. In particular, for the health and medical-related information with a "〇" mark in the "Consent / Non-consent" column, it is preferably stored and managed in the Provision History Retention Department described later. Note that the health and medical-related information with no mark in the "Consent / Non-consent" column represents a state where the consent or non-consent intention of the individual (user) has not yet been shown.

[0096] FIG. 40 is a diagram showing the user interface of the health and medical care related information management system of the present invention. In this case, the incentive management department authenticates an individual when they enter their personal identification number (My Number) and password information into the appropriate fields, and if matching information exists in the system, access is granted. In the case of this diagram, the method is explained as one in which the user directly inputs the information, but if the user uses a smartphone, for example, the smartphone's IC card reading function can be used to hold the My Number card over the smartphone to automatically read and input specified information such as personal identification number (My Number) information. For example, if the user fails to enter the My Number information and / or password information three times in a row, the device may be locked and the user may have to go to a local government (such as a city hall) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the device, or the user may be notified by voice or a warning sound. It is also desirable that the information be stored and managed in a way that makes it easy to determine whether or not an individual (user) has consented to any health and medical care-related information. Furthermore, the incentive provision process is preferably configured to determine the level of incentive to be given for the health and medical care related information to which the user has given consent.

[0097] For example, in the case of the example in FIG. 44, when providing health care-related information about one individual to one recipient, the minor points are calculated and granted based on a predetermined calculation rule to be 1000p (points). Also, when there are two recipients for the same health care-related information, the minor points are calculated and granted based on a predetermined calculation rule to be twice as much, i.e., 2000p (points). Regarding the calculation rule of incentives, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health care-related information, and different incentives may be calculated and granted for each health care-related information. In particular, for example, various infectious diseases defined by the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the leading cause of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye diseases with a large number of patients, and novel coronavirus infection, and specific diseases with few cases worldwide, considering that the health care-related information can greatly contribute to the progress of medicine by being disclosed to a third party, it is conceivable to set the calculation rule so that the incentives are higher than those for other diseases.

[0098] Also, "incentive" simply refers to "motivation, reward", meaning intentionally stimulating or the like with the aim of causing a certain action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, individual information services or general information services for information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items available on the network, provision of rights, for example, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (such as a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc. Furthermore, the following may also be included. Discounting of certain goods or services, for example, discounting or reducing insurance premiums, and the discounting of insurance rates applies. Furthermore, refund of paid fees, awarding of prizes (such as novelties), commendation or recognition, awarding of coupons, etc. may also be included. Furthermore, there may be reward points, discounts, free goods, early access to new products, or limited sales. Furthermore, the right to write reviews about brands, introduce friends, create user-generated content, etc. applies. Also, it may be an upgrade of goods or services.

[0099] In the present invention, in the case where public disclosure permission information indicating whether or not to permit public disclosure to a third party has already been associated and stored and managed for health and medical related information about an individual, or in the case where an individual (user) newly registers health and medical related information concerning himself / herself in the health and medical related information storage section and the public disclosure permission information has not yet been associated and stored and managed, the present invention is applicable, that is, it is possible to provide an incentive. That is, although the health and medical related information management system does not hold health and medical related information about an individual, for example, if the health and medical related information of the individual is held in a terminal owned by the individual and this is uploaded to the present system, when it is determined that the information is publicly available as health and medical related information by a formal check of the uploaded information, the incentive management section can be configured to function so as to grant an incentive according to the result. In this case, the access control section of the present system may be configured not to reject browsing access to health and medical related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualifications of the third party. Note that uploading the health and medical related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal but another system that stores other health and medical related information. For example, it can be configured such that health and medical related information stored in a mother and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to the present system with the individual's consent. In this case, when the health and medical related information of the individual is uploaded from the mother and child health handbook information server, etc. and the formal check is completed, the incentive management section can be configured to function.

[0100] Here, among the functions of the incentive management unit, the operations on the computer for "referring to... and providing for..." include, for example, processes such as executing operations for providing incentives if it is confirmed as a result of the reference that incentives have not been provided in the past, executing operations for providing incentives if it is determined that a predetermined period (time) has elapsed since the incentives were provided in the past as a result of the reference, executing operations for providing incentives if it is determined that the disclosure rate of health care-related information has reached a certain value as a result of the reference, and executing operations for providing incentives when something that was in a state of being publicly disclosed but not actually viewed by anyone is viewed by someone (in this case, the incentive provision history and the viewing history of health care-related information have the same meaning). Any one or more of these processes are included, but not limited thereto.

[0101] Note that "promote disclosure" is synonymous with "promote revelation". And "disclosure" in the present invention means making all or part of health care-related information, or processed / transformed information thereof, discloseable in some form (which may be anonymous) to others (excluding oneself. However, in the case of a person who is managed and assisted by someone else, such as a child, a person under guardianship, or a person requiring care, the person providing the management and assistance is not included in others). It may be either the case where it is actually disclosed or the case where it is in a discloseable state but not actually disclosed. Examples of the disclosure recipients include, but are not limited to, others belonging to medical institutions, medical-related organizations, public institutions, pharmaceutical-related companies, etc.

[0102] <Description of the Configuration in Embodiment 1: Provision History Retention Unit> The "provision history retention unit" 204 is configured to have a function of retaining a provision history, which is a history of providing incentives for each individual. The "provision history" refers to any one or more of the history of whether incentives are granted, the history that specifies the content of the granted incentives, the history that specifies the amount of the granted incentives, etc. It may be associated with the time of granting, or it may only indicate that it has been granted. Therefore, even a person who only indicates that it has been granted may be acceptable. In the case of a configuration where incentives are basically granted for the provision of health care-related information, the incentive provision history is the same as the disclosure history of health care-related information. Therefore, the provision of incentives promotes disclosure by referring to the disclosure history of health care-related information, and conducting the provision of incentives is equivalent to doing so by referring to the provision history. Therefore, when the incentive management department refers to the public disclosure history of health care-related information, in the present invention, it may be included in the incentive management department referring to the provision history.

[0103] Regarding the method of providing incentives, various methods can be considered. For example, when an individual gives a public license for all of their personal health and medical related information, all health and medical related information associated with that individual's identification information can be viewed without limitation by an institution or the like that has a predetermined right source, but it can also be configured such that only one incentive is given once for each public license act. It is also possible to consider a configuration where an incentive is given every time there is a viewing of the health and medical related information that has been licensed as a result of the public license. In addition, since personal health and medical related information is usually divided into multiple items, it is also possible to adopt a configuration where incentives are provided according to the items viewed or used. Furthermore, it is also possible to adopt a configuration where incentives are provided according to the number of times of viewing and using for each item. Incidentally, the items in the context of health and medical related information can be considered to be divided into various items such as for each disease onset, for each medical examination, for each prescription issuance, for each disease type, for each generation of drug history information, for each acquisition of medication information, etc. It is also possible to consider a configuration where incentives are given according to the depth of disclosure of health and medical related information. The depth of disclosure here means, for example, when only the disease name is disclosed, when the name, usage, and dosage of the drug prescribed for that disease are further disclosed, when the results of taking that drug (such as improvement of symptoms or onset of side effects) are further disclosed, when what the patient felt about that drug is further disclosed, etc. It can be configured such that as it gradually becomes deeper, more or higher quality incentives are given.

[0104] Next, the incentive provision processing flow will be described. Incentive information is electronically processed by an incentive management department or an incentive output department or an incentive processing department that cooperates with this so that some kind of benefit occurs to the individual who is the patient. Note that this electronic processing may be the incentive provision itself or may be the pre-stage processing for incentive provision. The granting of incentives is triggered by the acceptance of information that all or part of the health and medical-related information, or its processed and transformed information, is publicly permitted by an individual such as a patient. This trigger may originate from the terminal used by the individual, for example, a smartphone, or from the terminal of a medical institution or the like. For example, in the case of a smartphone, an application that can view or edit the individual's health and medical-related information within a certain range is installed on the smartphone. Using this application as an entrance, access is made to the system of the present invention, and the disclosure permission operation of the individual's health and medical-related information is executed from the disclosure portal of the health and medical-related information.

[0105] In addition, instead of the application, it can also be configured so that the same operation can be performed by accessing the web. Also, this access must be strictly security-managed. For example, it is preferably configured so that public permission can be obtained using a one-time password. In this case, the health and medical-related information management system may be a so-called PHR or a system that cooperates with the PHR. Also, this system may be configured to manage the disclosure of health and medical-related information of all citizens alone, or may be configured to manage the disclosure of health and medical-related information held in the PHR by a plurality of similar systems standing side by side. In addition, the case where the trigger is pulled from the terminal of a medical institution means that a medical staff member or the like who is interviewing a patient as an individual obtains the patient's permission to pull the trigger. In that case, it is preferably configured to borrow a health insurance card, a personal number (My Number) card, or a certificate equivalent to these from the patient and use the borrowed certificate to pull the trigger. The medical institutions referred to here may include nursing facilities, pharmacies (including dispensing pharmacies), and other welfare facilities. Also, this may be a medical institution accessed on the Internet. Furthermore, it can also be configured so that a trigger can be pulled by a terminal used by a predetermined management server of a pharmaceutical company, a public research institution, or the like. Of course, it is premised on the authentication of an individual such as a patient.

[0106] FIG. 6 is a diagram showing an example of the provision history holding unit of the health care-related information management system in the present embodiment. As shown in this figure, it can be seen that the provision history is held and managed separately for each individual, with Mr. X having personal number (My Number) information "123456789012" and Mr. Y having personal number (My Number) information "456789012345". For example, regarding Mr. X with personal number (My Number) information "123456789012", it is shown that the history of providing the incentive "1000 My Points" to "Dr. Suzuki (Hospital B)", which is the recipient, at the provision date and time of "2023 / 04 / 01" for the health care-related information with ID "0001", namely the "Regular Health Check Result (Hospital A)", is held and managed. Similarly, for other health care-related information, the history of providing incentives for each individual is held and managed.

[0107] <Embodiment 1 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in the present embodiment will be described with reference to the drawings.

[0108] FIG. 4 is a diagram showing the hardware configuration of the health care-related information management system in the present embodiment. As shown in this figure, the health care-related information management system in the present embodiment includes a "CPU (Central Processing Unit)" 401 that performs various arithmetic processes, and a "main memory" 402. It also includes a "non-volatile memory" 403 that holds predetermined information, a "network I / F (Interface)" 404 that transmits and receives information with a plurality of third-party terminals 406 and an administrator terminal 407. And they are interconnected by a data communication path such as a "bus" 405 to transmit, receive, and process information.

[0109] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that is also the work area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing. In the present embodiment, the programs stored in the "main memory" include a health care-related information accumulation program, an access control program, an incentive management program, a provision history retention program, and the like. Also, health care-related information, incentive management information, provision history information, and the like are stored in the "main memory" and "non-volatile memory".

[0110] The "CPU" executes the health care-related information accumulation program stored in the "main memory" and stores health care-related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.), in the "main memory" or "non-volatile memory" through the "network I / F". Also, the "CPU" executes the access control program stored in the "main memory" to control access to the health care-related information about the individual. Also, the "CPU" executes the incentive management program stored in the "main memory" to provide and manage incentives to the individual in order to promote the disclosure of health care-related information by referring to the provision history information regarding whether or not to disclose the health care-related information about the individual. Also, the "CPU" executes the provision history retention program stored in the "main memory" and stores the provision history information, which is the history of providing incentives, in the "main memory" or "non-volatile memory".

[0111] <Embodiment 1 Health Care-Related Information Management System: Processing Flow> FIG. 5 is a diagram showing the processing flow when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method including a health care-related information storage step S501, an access control step S502, an incentive management step S503, and a provision history retention step S504.

[0112] The "health care-related information storage step" S501 is a stage of storing health care-related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0113] The "access control step" S502 is a stage of controlling access to the health care-related information about an individual stored in the health care-related information storage step.

[0114] The "incentive management step" S503 is a stage of providing an incentive to an individual in order to encourage the disclosure of health care-related information by referring to the provision history retained in the provision history retention step described later regarding whether or not to disclose the health care-related information about the individual.

[0115] The "provision history retention step" S504 is a stage of retaining the provision history, which is the history of providing incentives for each individual.

[0116] <Summary> As described above, in the present invention, it is possible to provide a health care-related information management system that provides an incentive to an individual in order to encourage the disclosure of health care-related information about the individual by referring to the provision history, which is the history of providing incentives for each individual, regarding whether or not to disclose the health care-related information. In addition, in the present invention, by providing incentives to individuals, a structure is established that allows individuals to permit the disclosure of their health and medical-related information to third parties. This leads to an increase in the opportunities for individuals to disclose their health and medical-related information to third parties, which can contribute to reducing the overall medical expenses of the country, improving the health of the entire population, or reducing the time and costs involved in drug development by research institutions, pharmaceutical companies, etc. Ultimately, it can also contribute to the progress of medicine. Here, "drug development" refers to the process from the stage where a compound or chemical substance (also known as a lead) that serves as the basis for a pharmaceutical product is developed until it is sold as a product. In addition, the following steps (1) to (5) are essential for a compound or chemical substance to be sold as a pharmaceutical product. (1) Select candidates for drug development targets (compounds or chemical substances) (2) Select candidate substances that can be used as the basis for pharmaceutical products by screening their effects There are various types of screening, such as high-efficiency screening that utilizes biotechnology, combinatorial chemistry (a technology for creating a large number of combinations of compounds), and AI robot technology. (3) Animal experiments Use animals or cultured cells to investigate and confirm details such as safety and efficacy in detail. Drugs that have been confirmed to be safe and effective at this stage are called "investigational drugs." (4) Clinical trials Actually use the investigational drug on humans, examine its effects and safety in detail, and confirm whether it is useful for actual treatment. (5) Approval application and review Apply to the Ministry of Health, Labour and Welfare for drugs that have passed all the above tests (1) to (4). After that, undergo a review by the Pharmaceuticals and Medical Devices Agency and wait for approval from the Minister of Health, Labour and Welfare. Only after approval can a pharmaceutical product be born that can be sold as a product. Generally, the period for drug development is said to be about 10 to 18 years, and the probability of a compound or chemical substance becoming a new drug is about 1 in 10,000. In addition, the total cost required until drug development is successful is said to be nearly 20 billion yen.

[0117] <Embodiment 2 (mainly corresponding to Claims 2, 17, and 32)> <Overview of Embodiment 2> This embodiment has an incentive type information holding unit that holds incentive type information which is information indicating types of a plurality of incentives. The incentive management unit is characterized in that it selects and provides an incentive to be provided to an individual based on the provision history according to the incentive type information held by the incentive type information holding unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiment 1 will be omitted as appropriate.

[0118] <Description of Configuration of Embodiment 2: Incentive Type Information Holding Unit> FIG. 7 is a diagram showing a functional configuration of the health care related information management system in this embodiment. The "incentive type information holding unit" 701 is configured to have a function of holding incentive type information which is information indicating types of a plurality of incentives. FIG. 10 is a diagram showing an example of the incentive type information holding unit of the health care related information management system in this embodiment. As shown in this figure, incentive type information and specific incentives related to the incentive type information are associated and held and managed. For example, when the incentive type information is "(A) Points", specific examples of incentives such as "(a) Minor points, (b) Transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) Distribution electronic money (WAON (registered trademark), nanaco (registered trademark), etc.)" are held and managed. Similarly, specific examples of incentives are listed and held and managed for other incentive type information. When an individual (user) provides his / her own health care related information to an appropriate destination, he / she can select any incentive based on this incentive type information.

[0119] <Description of Configuration of Embodiment 2: Incentive Management Unit Features Specific to Embodiment 2> The selection made by the Incentive Management Department may be either a selection automatically made by a computer (configured by a program) that constitutes the Incentive Management Department, or a selection made by the Incentive Management Department based on the selection action of a provider of health care-related information (in most cases, the owner of the health care-related information, but in the case where the person is under some form of management such as a child, it may be the manager). In the latter case, the computer will accept the selection action of a person and execute a selection based on that selection action. As for the case where the computer makes an automatic selection, for example, when a pharmaceutical manufacturer is requested to provide information on the results of taking a drug owned by the owner of health care-related information, it is conceivable to configure the incentives provided by that pharmaceutical manufacturer to be automatically selected by the Incentive Management Department. Also, when the provider of health care-related information resides in Aomori Prefecture, it is also conceivable to automatically select incentives that are only valid in Aomori Prefecture. In this way, the automatic selection can be configured to be made automatically based on the content of the provided health care-related information, the attribute information of the owner of the health care-related information, and the like.

[0120] Whether it is an automatic selection or a selection based on the selection made by the owner (provider) of the health care-related information, the Incentive Management Department is configured to make a selection by using a selection rule. This selection rule may be configured to be held in a selection rule holding means inside the Incentive Management Department, or may be configured to make a selection by using a selection rule held outside the Incentive Management Department or outside this system. Also, the selection rule may be configured to be appropriately optimized (not necessarily optimally, but also including the simple meaning of being changed) according to the provision history of the owner (provider) of the health care-related information and the disclosure history of the health care-related information. For example, it may be configured to be changed by an artificial intelligence for editing or the like. In addition, a selection rule editing unit may be provided so that this rule can be edited by an operation of an administrator of this system or the like. The incentive management department can select and provide incentives to individuals based on the incentive type information held in the incentive type information holding department according to the above-described provision history. That is, it is configured to select and provide incentive type information. FIG. 11 is a diagram showing an example of the incentive management department of the health care-related information management system in the present embodiment. As shown in this figure, by an individual (user) selecting incentive type information or the incentive management department automatically selecting it, it becomes possible to select and provide a specific incentive. For example, in the case of Mr. Y, in addition to "points (negative points and PASMO (registered trademark))", it can be seen that "software / app" and "cash" are selected and provided.

[0121] Also, when the incentive management department selects and provides an incentive based on the incentive type information, the following cases are assumed for the processing until the specific use of the incentive.

[0122] For example, when "points" are selected as the incentive, the following cases can be considered. First, when the incentive is "negative points", the incentive management department in this system triggers by sending information on personal identification information (such as personal numbers (My Number), etc.) and information on the points to be granted to the management server owned by the organization that manages and operates the My Portal site. In the said server, the points associated with the personal identification information of the negative points associated with the personal identification information are incremented by the amount of the points to be granted. That is, based on this trigger information, the management server owned by the organization that manages and operates the My Portal site grants negative points to the individual corresponding to the personal identification information, and notifies the terminal (such as a smartphone, etc.) used by the individual of the information regarding the increment of the negative points, so that the individual can use the negative points including the increment. Then, by exchanging these negative points for points of other transportation / circulation system electronic money, the individual can purchase the goods he desires or pay as the consideration for various desired services.

[0123] Second, when the incentive is "prepaid card", it becomes possible to purchase goods on AMAZON (registered trademark), etc. using a prepaid card purchased at a convenience store, etc. (for example, an amount corresponding to the purchase price is set, and identification information for identifying this card is also given).

[0124] Also, for example, when "drug / supplement" is selected as an incentive, the incentive management unit in this system transmits information including personal identification information and its attribute information (e.g., personal number (My Number) information, name, postal code, address, phone number, credit card number, etc.) and information for identifying the product to be purchased (e.g., product name such as "Supplement ABC", information on the manufacturer / seller, price information, etc.) via the network to a management server managed and operated on a purchase site such as AMAZON (registered trademark), thereby triggering a process. And if there is stock of the designated product in the management server of AMAZON (registered trademark), the home delivery service provider will deliver the product to the home.

[0125] Also, for example, when "provision of rights" is selected as an incentive, the incentive management unit in this system transmits personal identification information and its attribute information (e.g., personal number (My Number) information, name, postal code, address, phone number, credit card number, etc.) and information for identifying the desired rights (e.g., identification number indicating an admission ticket to DISNEYLAND (registered trademark)) via the network to a management server owned by the organization that manages and operates the provision of rights, thereby triggering a process. Then, in response to this trigger, the management server transmits a QR code (registered trademark) that serves as an admission ticket to DISNEYLAND (registered trademark) to the smartphone used by the individual. And the individual who saves the QR code (registered trademark) on the smartphone goes to DISNEYLAND (registered trademark), which is the rights execution institution, and holds the QR code (registered trademark) in front of the reader at the admission counter. If there is no problem, the individual can enter DISNEYLAND (registered trademark) and enjoy various attractions and meals.

[0126] <Embodiment 2 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0127] FIG. 8 is a diagram showing the hardware configuration of the health care related information management system according to the present embodiment. As shown in this figure, the health care related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 801 that performs various arithmetic processes, and a "main memory" 802. Further, it includes a "non-volatile memory" 803 that holds predetermined information, and a "network I / F (Interface)" 804 that transmits and receives information with a plurality of third-party terminals 806 and an administrator terminal 807. And they are mutually connected by a data communication path such as a "bus" 805 to transmit, receive, and process information.

[0128] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the program stored in the "main memory" is an incentive type information holding program. Further, incentive type information, incentive management information, etc. are stored in the "main memory" and "non-volatile memory".

[0129] The "CPU" executes the incentive type information holding program stored in the "main memory" to hold incentive type information, which is information indicating the types of a plurality of incentives, and stores the incentive type information and incentive management information related thereto in the "main memory" and "non-volatile memory".

[0130] <Embodiment 2 Health Care Related Information Management System: Processing Flow> FIG. 9 is a diagram showing the processing flow when the health care related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S901.

[0131] The "Incentive Type Information Retention Step" S901 is a step of retaining incentive type information, which is information indicating types of a plurality of incentives.

[0132] <Summary> As described above, in the present invention, there is an incentive type information retention unit that retains incentive type information, which is information indicating types of a plurality of incentives. The incentive management unit can select and provide an incentive to be provided to an individual based on the incentive type information retained in the incentive type information retention unit according to the provision history.

[0133] <Embodiment 3 (mainly corresponding to Claim 3, Claim 18, and Claim 33)> <Outline of Embodiment 3> This embodiment includes an end request reception unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health care-related information, from an individual who has accumulated health care-related information in the health care-related information accumulation unit; an end condition retention unit that retains an end condition, which is a condition for determining whether it is possible to end based on information about the individual who has made the end request when the end request is received; a determination rule retention unit that retains a determination rule, which is a rule for determining whether to end the disclosure of health care-related information based on information about the individual who has made the end request, the retained end condition; an end determination unit that determines whether to end based on the information about the individual, the retained end condition, and the retained determination rule when the end request is received; and an end control unit that controls the access control unit to end the disclosure of the health care-related information of the individual when the determination result in the end determination unit is a determination result that it should end. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiment 1 and Embodiment 2 will be omitted as appropriate.

[0134] <Description of Configuration of Embodiment 3: End Request Reception Unit> FIG. 12 is a diagram showing a functional configuration of a health care-related information management system in this embodiment. The "Termination Request Reception Unit" 1201 is configured to have a function of receiving a termination request, which is a request to stop or terminate the disclosure of already disclosed health care-related information, from an individual who has accumulated health care-related information in the Health Care-Related Information Accumulation Unit. For example, on the login screen of the health care-related information management system shown in FIG. 40, when an individual (user) uses a third-party terminal to input their personal number (My Number) information and password information, and if there is matching information on the system side, identity authentication is performed. By accessing the Incentive Management Unit or the Provision History Retention Unit, it becomes possible to view whether one's own health care-related information has been disclosed, who the disclosure destination is, what type of incentive it is, and what the specific incentive is. Also, for example, on the viewing screen shown in FIG. 44, it is desirable to be configured such that, based on the individual's intention, a termination request to request the system side to stop or terminate the disclosure of desired health care-related information from among the already disclosed health care-related information is transmitted from a third-party terminal, and the system side receives this termination request.

[0135] <Embodiment 3 Explanation of Configuration: Termination Condition Retention Unit> The "Termination Condition Retention Unit" 1202 is configured to have a function of retaining termination conditions, which are conditions for determining whether it is appropriate to terminate when a termination request is received, based on information about the individual who made this termination request. For example, the following cases can be considered as termination conditions. However, it is not necessarily limited to these cases. (1) When the disease has been completely cured / fully recovered / in remission · When it is recognized that an individual (user)'s illness or injury has been "completely cured" (which means that the illness or injury has been completely healed. In other words, it means returning to the state before getting the illness or injury), or "fully recovered" (which means that the treatment of the illness or injury is no longer necessary and daily life can be carried out without problems. However, it does not necessarily mean returning to the state before getting the illness or injury), or "remission" (which means that the illness or injury has recovered temporarily or continuously. It is often used for diseases with a possibility of recurrence such as cancer and leukemia. It is a state where symptoms are suppressed and continuous treatment or regular examinations may still be required), then, based on the will of this individual, the disclosure of the individual's health and medical related information related to this disease can be stopped or terminated. (2) When an individual (user) moves to a new residence (moves house) · When an individual (user) moves to a new residence (moves house) due to, for example, changing jobs or being transferred, and the attending physician (primary care physician) who has been treating the illness or injury so far changes, then, based on the will of this individual, the disclosure of the individual's health and medical related information can be stopped or terminated. (3) When the attending physician (primary care physician) changes · When, due to the merger or abolition of a medical institution such as a hospital, an individual is transferred or moves to another hospital, and the attending physician (primary care physician) who has been treating the illness or injury so far changes, then, based on the will of this individual, the disclosure of the individual's health and medical related information can be stopped or terminated.

[0136] <Embodiment 3 Explanation of the Configuration: Judgment Rule Retention Unit> The "judgment rule retention unit" 1203 is configured to have a function of retaining a judgment rule, which is a rule for judging whether to terminate the disclosure of health and medical related information based on the information about the individual who has requested termination and the retained termination conditions. For example, based on information indicating that an individual's (user's) illness has been cured through the treatment and medication of the attending physician, and the end conditions held in the above-described end condition holding unit, for example, the above-described condition (1), it is desirable to formulate a judgment rule for determining whether to end the disclosure of health and medical related information. In this case, regarding the health and medical related information about the illness, since it is determined that the illness has been cured, it is expected that the significance and need for disclosure to a third party will be low. Therefore, it is preferable to end the disclosure as a judgment rule. Also, when the attending physician of the medical institution (hospital, clinic, etc.) in charge of the individual (user) changes, the significance of disclosing the health and medical related information to the original physician disappears. Therefore, it is still preferable to end the disclosure as a judgment rule. However, for the newly assigned attending physician, it is essential to disclose the individual's health and medical related information for formulating treatment and medication policies. Therefore, it is desirable to continue the disclosure without ending it as a judgment rule.

[0137] <Embodiment 3: Description of the Configuration: End Judgment Unit> When an end request is received, the "end judgment unit" 1203 is configured to have a function of determining whether to end based on the information about the individual, the held end conditions, and the held judgment rules. For example, based on the information in the electronic medical record indicating that the individual's illness or injury has been cured, the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, it can be determined that the disclosure of the individual's health and medical related information should be ended. Also, for example, based on the information in the electronic medical record indicating that the individual's illness (for example, cancer, etc.) has entered remission, the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, when it is considered that the individual has a high possibility of recurrence constitutionally, it can be determined that the disclosure of the individual's health and medical related information should not be ended. Furthermore, for example, based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances, the end conditions held in the above-described end condition holding unit (in this case, the above condition (2) or the above condition (3)), and the above-described judgment rules, it can be determined that the disclosure of the individual's health and medical related information should be terminated.

[0138] <Embodiment 3 Configuration Explanation: End Control Unit> The "end control unit" 1204 is configured to have a function of controlling the access control unit to terminate the disclosure of the individual's health and medical related information when the judgment result in the end judgment unit is a judgment result that it should be terminated. For example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, based on the information in the electronic medical record indicating that the individual's illness or injury has been completely cured and the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), when it is a judgment result that the disclosure of the individual's health and medical related information should be terminated, the end control unit can send a control signal to the access control unit to control the access control unit to terminate the disclosure of the individual's health and medical related information. Also, for example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances and the end conditions held in the above-described end condition holding unit (in this case, the above condition (2) or the above condition (3)), when it is a judgment result that the disclosure of the individual's health and medical related information should be terminated, the end control unit can send a control signal indicating the judgment result to the access control unit to control the access control unit to terminate the disclosure of the individual's health and medical related information.

[0139] Incidentally, in relation to the above-described "judgment rule holding unit", for example, a "judgment rule changing unit" may be further provided to appropriately change the judgment rule based on, for example, the number of times or ratio of permission to disclose health care-related information about an individual, or the number of times or ratio of receiving incentives. In this case, the judgment rule may be automatically changed within this system, or may be manually changed from a terminal used by the target individual or the administrator of this system.

[0140] <Embodiment 3 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in this embodiment will be described with reference to the drawings.

[0141] FIG. 13 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1301 that performs various arithmetic processes, and a "main memory" 1302. It also includes a "non-volatile memory" 1303 that holds predetermined information, and a "network I / F (Interface)" 1304 that transmits and receives information with a plurality of third-party terminals 1306 and an administrator terminal 1307. And they are mutually connected by a data communication path such as a "bus" 1305 to transmit, receive, and process information.

[0142] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area that is also a working area for that program. Also, a plurality of addresses are assigned to each of this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the programs stored in the "main memory" include an end request reception program, an end condition holding program, a judgment rule holding program, an end judgment program, an end control program, and the like. Further, end request information, end condition information, judgment rules, end judgment information, end control information, and the like are stored in the "main memory" and the "non-volatile memory".

[0143] The "CPU" executes the termination request reception program stored in the "main memory", and through the "network I / F", receives a termination request, which is a request to stop or end the disclosure of already publicly disclosed health and medical related information of an individual (user) sent from a third-party terminal, and stores the termination request information in the "main memory" or the "non-volatile memory". Also, the "CPU" executes the termination condition holding program stored in the "main memory", and when a termination request is received, holds the termination condition, which is a condition for determining whether it is possible to end based on the information about the individual who made this termination request, and stores the termination condition information in the "main memory" or the "non-volatile memory". Also, the "CPU" executes the judgment rule holding program stored in the "main memory", and holds the judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on the information about the individual who made the termination request and the held termination condition, and stores it in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the termination judgment program stored in the "main memory", and when a termination request is received, determines whether to end based on the information about that individual and the held termination condition, and stores the termination judgment information in the "main memory" or the "non-volatile memory". Also, the "CPU" executes the termination control program stored in the "main memory", and when the judgment result in the termination judgment program is a result that it should end, controls the access control unit to end the disclosure of the health and medical related information of that individual, and stores the termination control information in the "main memory" or the "non-volatile memory".

[0144] <Embodiment 3 Health and Medical Related Information Management System: Process Flow> FIG. 14 is a diagram showing the process flow when using the health and medical related information management system in this embodiment. As shown in the figure, it is a processing method consisting of a termination request reception step S1401, a termination condition holding step S1402, a judgment rule holding step S1403, a termination judgment step S1404, and a termination control step S1405.

[0145] The "End Request Reception Step" S1401 is the stage of receiving an end request, which is a request to stop or end the disclosure of health and medical-related information that has already been made public by an individual (user) sent from a third-party terminal.

[0146] The "End Condition Retention Step" S1402 is the stage of retaining an end condition, which is a condition for determining whether it is possible to end based on information about the individual who made this end request when the end request is received.

[0147] The "Judgment Rule Retention Step" S1403 is the stage of retaining a judgment rule, which is a rule for determining whether to end the disclosure of health and medical-related information based on information about the individual who made the end request and the retained end condition.

[0148] The "End Judgment Step" S1404 is the stage of determining whether to end based on information about the individual, the retained end condition, and the retained judgment rule when the end request is received.

[0149] The "End Control Step" S1405 is the stage where, when the judgment result in the end judgment step S1404 is a judgment result that it should end, the access control unit is controlled to end the disclosure of the individual's health and medical-related information.

[0150] <Summary> As described above, in the present invention, an individual (user) can stop or end the disclosure of health and medical-related information that has already been made public according to their own will.

[0151] <Embodiment 4 (mainly corresponding to Claim 4, Claim 19, and Claim 34)> <Outline of Embodiment 4> In addition to Embodiments 1 to 3, this embodiment is characterized by including an access authentication processing unit that performs authentication for accessing the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 3 will be omitted as appropriate.

[0152] <Embodiment 4: Description of Configuration - Access Authentication Processing Unit> FIG. 15 is a diagram showing the functional configuration of a health care-related information management system. As shown in this figure, the "access authentication processing unit" 1501 is configured to have a function of performing authentication for an individual to access the incentive management unit. For example, FIG. 40 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. Here, it is assumed that a third-party terminal uses a web browser to access the health care-related information management system. On this login screen, when the user (individual) enters their personal number (My Number) information and password information in the corresponding fields and the matching information exists in the system, authentication of the person is performed and access is permitted. In the example of this figure, it is described in a form where the user directly enters information. However, for example, when the user uses a smartphone, a form may be adopted in which the IC card reading function of the smartphone is used to hold the My Number card over the smartphone to automatically read and input predetermined information such as personal number (My Number) information. Note that, for example, when the personal number (My Number) information and / or password information fails to be entered successfully three times in a row, it may be put into a locked state and the user may go to the local government (such as a municipal office) to have the lock removed. Alternatively, it may be temporarily put into a locked state, and a caution such as "Please try again the next day." may be displayed on the terminal, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Health Care-Related Information Management System - Hardware Configuration> The hardware configuration of the health care-related information management system in this embodiment will be described with reference to the drawings.

[0154] FIG. 16 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 1601 that performs various arithmetic processes, and a "main memory" 1602. Further, it includes a "non-volatile memory" 1603 that holds predetermined information, and a "network I / F (Interface)" 1604 that transmits and receives information with a plurality of third-party terminals 1606 and an administrator terminal 1607. And they are mutually connected by a data communication path such as a "bus" 1605 to transmit, receive, and process information.

[0155] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processes. In the present embodiment, the program stored in the "main memory" is an access authentication processing program. In addition, personal number (My Number) information, password information, etc. are stored in the "main memory" and "non-volatile memory".

[0156] The "CPU" executes the access authentication processing program stored in the "main memory", receives the input of personal number (My Number) information and password information sent from a third-party terminal through the "network I / F", and authenticates whether matching information exists on the system side, and stores the input personal number (My Number) information and password information in the "main memory" and "non-volatile memory".

[0157] <Embodiment 4 Health Care-Related Information Management System: Processing Flow> FIG. 17 is a diagram showing the processing flow when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S1701.

[0158] The "access authentication processing step" S1701 is a stage where input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0159] <Summary> As described above, in the present invention, by performing access authentication first on the login screen of the health care-related information management system, access to information related to incentives can be restricted to the individual (user) himself / herself.

[0160] <Embodiment 5 (mainly corresponding to Claims 5, 20, and 35)> <Outline of Embodiment 5> In addition to Embodiments 1 to 4, the present embodiment is characterized in that it includes a consent information acquisition unit that acquires consent information, which is information indicating consent to receive incentives by the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 4 will be omitted as appropriate.

[0161] <Explanation of Configuration of Embodiment 5: Consent Information Acquisition Unit> FIG. 18 is a diagram showing the functional configuration of the health care-related information management system of the present embodiment. As shown in this figure, the "consent information acquisition unit" 1802 is configured to have a function of acquiring consent information, which is information indicating consent to receive incentives by the incentive management unit, after being authenticated by the access authentication processing unit 1801. FIG. 41 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields and access authentication is performed when matching information exists in the system, the user proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent process", the user is redirected to a screen for obtaining the consent of the individual (user). Figure 42 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to prepare a user interface such as a pull-down menu format in the "Consent / Disapproval" field, and by clicking, touching, or tapping on it, for example, either an "〇" mark or an "×" mark is input to accept the consent or disapproval intention of whether to accept the incentive of the individual (user). By clicking, touching, or tapping the OK button, the input consent information is sent to the incentive management department for retention and management. Note that by clicking, touching, or tapping the end button, the user can return to the function selection screen of Figure 41.

[0162] Figure 40 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields and access authentication is performed when matching information exists in the system, the user moves to the function selection screen and, by clicking, touching, or tapping the OK button corresponding to "(B) Browsing process", the user is redirected to a screen where they can view the relationship between the health and medical related information about the individual (user) and the incentives granted. Figure 43 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the incentives provided correspondingly in an easy-to-understand format such as a list. This allows one to immediately see which health and medical related information the incentives provided at the time of viewing are associated with. Note that by clicking, touching, or tapping the end button, one can return to the function selection screen of Fig. 41. Fig. 40 is a diagram showing an example of the user interface in the health and medical related information management system of the present invention. In this case, after the individual (user) enters their My Number information and password information in the corresponding fields and access authentication is performed when the matching information exists in the system, they move to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", a screen is displayed that shows both the health and medical related information for which consent / non-consent has not yet been given and the health and medical related information for which consent / non-consent has already been given regarding the health and medical related information of the individual (user). Fig. 44 is a diagram showing an example of the user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the corresponding consent / non-consent status in an easy-to-understand format such as a list. As a result, for health and medical related information for which consent / non-consent has not yet been given at the time of viewing, the individual (user) prepares a user interface in the form of a pull-down menu, enters a "〇" mark in the "Consent / Non-consent" column, and clicks, touches, or taps the OK button to process the granting of incentives, etc. On the other hand, for health and medical related information for which a "〇" mark or "×" mark has already been entered in the "Consent / Non-consent" column, the individual (user) can review it as appropriate and, for example, change from consent to non-consent or from non-consent to consent, and click, touch, or tap the OK button to enable update processing. Note that by clicking, touching, or tapping the end button, one can return to the function selection screen of Fig. 41.

[0163] <Embodiment 5 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0164] FIG. 19 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1901 that performs various arithmetic processes, and a "main memory" 1902. It also includes a "non-volatile memory" 1903 that holds predetermined information, and a "network I / F (Interface)" 1904 that transmits and receives information with a plurality of third-party terminals 1906 and an administrator terminal 1907. And they are interconnected by a data communication path such as a "bus" 1905 to transmit, receive, and process information.

[0165] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also the work area of the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. Also, my number information, password information, consent information, etc. are stored in the "main memory" and "non-volatile memory".

[0166] The "CPU" executes the access authentication processing program stored in the "main memory", receives the input of personal number (my number) information and password information sent from the third-party terminal through the "network I / F", authenticates whether there is matching information, and stores the personal number (my number) information and password information in the "main memory" and "non-volatile memory". The "CPU" also executes a consent information acquisition program stored in the "main memory" to obtain consent information indicating the intention of an individual (user) to disclose or not disclose, for each piece of health and medical-related information sent from a third-party terminal, through the "network I / F". The consent information is also stored in the "main memory" or the "non-volatile memory".

[0167] <Embodiment 5 Health and Medical-Related Information Management System: Processing Flow> FIG. 20 is a diagram showing the processing flow when the health and medical-related information management system in this embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "access authentication processing step" S2001 is a stage where the input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0169] The "consent information acquisition step" S2002 is a stage where, after being authenticated in the access authentication processing step, consent information, which is information indicating acceptance of the incentive by the incentive management unit, is obtained.

[0170] <Summary> As described above, in the present invention, it is possible to obtain consent information, which is information indicating acceptance of an incentive, for health and medical-related information regarding an individual (user).

[0171] <Embodiment 6 (Mainly Corresponding to Claim 6, Claim 21, and Claim 36)> <Overview of Embodiment 6> In addition to Embodiments 1 to 5, this embodiment is characterized by including an incentive provision processing unit that performs incentive provision processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 5 will be omitted as appropriate.

[0172] <Description of Configuration of Embodiment 6: Incentive Provision Processing Unit> FIG. 21 is a diagram showing a functional configuration of a health care-related information management system. As shown in this figure, the "incentive processing unit" 2103 is configured to have a function of performing incentive provision processing for providing an incentive when consent information is acquired by the consent information acquisition unit. FIG. 44 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, regarding the public permission or non-permission of an individual (user), for health care-related information marked with an "〇" indicating consent to public permission in the "Consent / Non-consent" column, an incentive to be automatically granted is calculated and granted based on a predetermined calculation rule. Here, for health care-related information about one individual, it is calculated and granted as 1000 minor points (points) for one recipient based on a predetermined calculation rule. Also, regarding the incentive calculation rule, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health care-related information, and different incentives may be calculated and granted for each health care-related information. In particular, for example, various infectious diseases defined by the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the top causes of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease, or eye diseases with a large number of patients, and novel coronavirus infections, and rare diseases with few cases worldwide, considering that the disclosure of such health care-related information to a third party can greatly contribute to medical progress, it is conceivable to set the calculation rule to give more (higher) incentives than other diseases.

[0173] Also, "incentive" simply refers to "motivation, reward", meaning intentionally stimulating or the like with the aim of causing a certain action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books and other products, providing passwords or IDs for information provision, providing items that can be used on the network, providing rights, for example, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash, etc. Further, the following may also be included. Discounting certain products or services, for example, discounting or reducing insurance premiums, and the insurance premium rate discount applies. Further, refunding paid fees, awarding prizes (such as novelties), commendations or honors, awarding discount coupons, etc. may also be included. Furthermore, there may be reward points, discounts, free products, early access to new products, or limited sales. Further, the right to write reviews about brands, introduce friends, create user-generated content, etc. applies. Also, it may be an upgrade of products or services. In addition, in the present invention, in the case where public disclosure permission information indicating whether or not to permit public disclosure to a third party has already been associated and stored / managed with respect to health care-related information regarding an individual, or in the case where an individual (user) newly registers health care-related information regarding himself / herself in the health care-related information storage unit and the public disclosure permission information has not yet been associated and stored / managed, the present invention can be applied to either case. That is, although health care-related information regarding an individual is not held within the health care-related information management system, for example, if the health care-related information of that individual is held in a terminal owned by the individual and this is uploaded to the present system, when it is determined, by a formal check of the uploaded information, that the information is publicly available as health care-related information, the incentive function unit described above can be configured to function so as to provide an incentive according to the result. In this case, the access control unit of the present system may be configured so as not to reject browsing access to health care-related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualifications of the third party. Note that uploading the health care-related information of an individual to the present system may be a transfer, and the transfer source may not be an individual's terminal but another system that stores health care-related information. For example, it can be configured so that health care-related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to the present system with the consent of the individual. In this case, when the health care-related information of the individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive function unit described above can be configured to function.

[0174] FIG. 40 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system and access authentication is performed, the individual (user) proceeds to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Browsing Process", the individual (user) is redirected to a screen where they can view the relationship between their health and medical-related information and the incentives granted. Figure 43 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health and medical-related information of the target individual and the corresponding incentives in an easy-to-understand format such as a list. This allows for a quick understanding of which health and medical-related information the incentives granted at the time of viewing are associated with. By clicking, touching, or tapping the end button, the user can return to the function selection screen of Figure 41.

[0175] Figure 40 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system and access authentication is performed, the individual (user) proceeds to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", the individual (user) is redirected to a screen that displays both the health and medical-related information for which consent / non-consent has not yet been given and the health and medical-related information for which consent / non-consent has already been given. Figure 44 is a diagram showing an example of a user interface in the health and medical-related information management system of the present invention. In this case, it is preferable to display the health care-related information of the target individual and the corresponding consent or dissent status in an easy-to-understand format such as a list. As a result, for health care-related information for which consent / dissent has not yet been given at the time of viewing, the individual (user) can input a check mark in the "Consent / Dissent" column in the form of a pull-down menu, click, touch, or tap the OK button, and incentives and the like will be processed. On the other hand, for health care-related information for which a check mark or a cross mark has already been input in the "Consent / Dissent" column, the individual (user) can review it and, for example, change from consent to dissent or from dissent to consent, and click, touch, or tap the OK button to enable update processing. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0176] <Embodiment 6 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in this embodiment will be described with reference to the drawings.

[0177] FIG. 22 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2201 that performs various arithmetic processes and a "main memory" 2202. It also includes a "non-volatile memory" 2203 that holds predetermined information, a "network I / F (interface)" 2204 that transmits and receives information with a plurality of third-party terminals 2206 and an administrator terminal 2207. And they are interconnected by a data communication path such as a "bus" 2205 to transmit, receive, and process information.

[0178] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that is also a working area for that program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processing by specifying and accessing those addresses. In the present embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, an incentive provision processing program, and the like. Further, personal number (My Number) information, password information, consent information, incentive information, etc. are stored in the "main memory" and the "non-volatile memory".

[0179] The "CPU" executes the access authentication processing program stored in the "main memory" and, through the "network I / F", accepts the input of personal number (My Number) information and password information sent from a third-party terminal, and authenticates whether there is matching information. Also, the My Number information and password information are stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the consent information acquisition program stored in the "main memory" and, through the "network I / F", acquires consent information indicating the intention of an individual (user) for each piece of health and medical related information sent from a third-party terminal. Also, the consent information is stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the incentive provision processing program stored in the "main memory" and performs incentive provision processing, which is processing for providing an incentive when consent has been obtained regarding health and medical related information about an individual, and stores the incentive information in the "main memory" and the "non-volatile memory".

[0180] <Embodiment 6: Health and Medical Related Information Management System - Processing Flow> FIG. 23 is a diagram showing the processing flow when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "incentive provision processing step" S2303 is a stage where, when consent information is acquired by the consent information acquisition unit, an incentive provision process, which is a process for providing an incentive, is performed.

[0182] <Summary> As described above, in the present invention, for health care-related information about an individual (user), when the individual gives consent, an incentive provision process, which is a process for providing an incentive, can be executed, and appropriate incentive provision processing can be performed on the health care-related information about the individual.

[0183] <Embodiment 7 (mainly corresponding to claims 7, 22, and 37)> <Outline of Embodiment 7> This embodiment includes a health care-related information storage unit that stores health care-related information about an individual, and an access control unit that allows a third party to access the health care-related information stored in the health care-related information storage unit via a network. The access control unit includes: IP packet analysis means for analyzing IP packets sent via the network; destination IP address determination means for extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care-related information management system; access ID / user ID acquisition means for, when the destination IP address is the IP address of its own health care-related information management system, acquiring the access ID indicating the access subject and the user ID indicating the user belonging to the access subject from the IP payload; access subject / user attribute acquisition means for acquiring access subject information, user information, and user attribute information (here, information indicating whether the user is a medical practitioner or a non-medical practitioner) corresponding to the access ID and the user ID; access control means for controlling access to the health care-related information from a third party; and a public permission / denial information storage unit for storing public permission / denial information indicating whether to permit the disclosure of the individual's health care-related information to a third party. Note that descriptions of functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 6 are omitted as appropriate.

[0184] <Embodiment 7 Functional Configuration> FIG. 24 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 7. In this embodiment, the access control unit includes IP packet analysis means, destination IP address determination means, access ID / user ID acquisition means, access subject / user attribute acquisition means, access control means, and a public permission / denial information storage unit.

[0185] <Explanation of Configuration in Embodiment 7: IP Packet Analysis Means of Access Control Unit> The "IP packet analysis means" 2401 is configured to have a function of analyzing IP packets sent via a network (especially the Internet). Generally, an IP packet is composed of an IP header part and an IP payload part, and various kinds of information and data are stored therein. The "IP packet analysis means" 2401 is responsible for analyzing and examining what kinds of information and data are contained therein.

[0186] <Embodiment 7 Explanation of Configuration: Destination IP Address Determination Means of Access Control Unit> The "destination IP address determination means" 2402 is configured to have a function of extracting the destination IP address from the header part of the sent IP packet and determining whether it is the IP address for its own health care related information management system. Generally, an IP packet contains at least a source IP address representing the sender and a destination IP address representing the recipient in the IP header part. The "destination IP address determination means" 2402 refers to the destination IP address extracted from the IP header part to determine whether the IP packet is sent to its own health care related information management system. If it is determined that the packet is sent to itself, the process proceeds to the next step. If it is determined that the packet is not sent to itself, the IP packet is ignored and no further operation is performed.

[0187] <Embodiment 7 Explanation of Configuration: Access ID / User ID Acquisition Means of Access Control Unit> When it is determined that the IP packet is sent to its own health care related information management system, the "access ID / user ID acquisition means" 2403 is configured to have a function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject.

[0188] <Embodiment 7 Explanation of Configuration: Access Subject User Attribute Acquisition Means of Access Control Unit> The "access subject user attribute acquisition means" 2404 is configured to have a function of acquiring access subject information corresponding to the access ID and the user ID, user information belonging to the access subject, and user attribute information regarding the user (here, information indicating whether the user is a medical worker or a non-medical worker). The access subject information is information that specifically represents the access subject, and is represented by, for example, names such as "Edogawa Central Hospital" or "Edogawa Pharmaceutical". The user information is information that specifically represents employees belonging to the access subject, and is represented by, for example, names such as "Ichiro Suzuki", an employee belonging to "Edogawa Central Hospital", or "Hideo Maeda", an employee belonging to "Edogawa Pharmaceutical". Furthermore, the user attribute information is associated with the user information, and is attribute information indicating whether the user is a medical worker or a non-medical worker, and is represented by, for example, "medical worker" (abbreviated form "medical"), "non-medical worker" (abbreviated form "non-medical"), etc.

[0189] Here, "medical worker" preferably includes at least physicians, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, acupuncturists, moxibustionists, chiropractors, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, medical office workers, etc. Among the "medical workers" as described above, the role of the so-called primary care medical workers (for example, primary care physicians, primary care pharmacists, primary care dentists) who usually conduct examinations and medication guidance for individuals (patients) on a daily basis is very important, and it is preferable to grant the right to access the personal health care-related information stored in the health care-related information storage unit and to edit, add, or delete the health care-related information as appropriate according to the need.

[0190] For example, a "primary care physician" refers to a physician who can be consulted about anything, is familiar with the latest medical information, can introduce specialists and specialized medical institutions when necessary, and has comprehensive capabilities to undertake local medical care, health care, and welfare that are close and reliable. A "primary care physician" should be able to: (1) In daily medical consultations, understand the patient's life background, provide appropriate medical treatment and health guidance, and when unable to provide medical treatment or guidance beyond their own expertise, cooperate with local physicians, medical institutions, etc. to provide solutions; (2) Share necessary information with local physicians, medical institutions, etc. to build a system that can respond to patients even on holidays and at night, so that the best medical care can continue for patients outside of their own medical consultation hours; (3) In addition to daily medical consultations, build a trust relationship with local residents, actively participate in social activities and administrative activities related to local medical care such as health consultations, health examinations, cancer screenings, maternal and child health care, school health care, industrial health care, and local health care, cooperate with health care, nursing, and welfare workers, and promote home medical care so that local elderly people can live in the area for as long as possible; (4) It is desirable that they be able to provide appropriate and easy-to-understand medical information to patients and their families.

[0191] Also, for example, a "primary care pharmacist" refers to a pharmacist who has rich knowledge and experience in drug treatment, health care, and nursing care, etc., and can respond to consultations in line with the needs of patients and consumers. A "designated pharmacist" is preferably a person who can perform functions such as: (1) a function where one pharmacist comprehensively manages and continuously monitors a patient's medication status at a single pharmacy (for example, to ensure the safe and secure use of medications, comprehensively grasp information on medications used by patients such as prescription medications and over-the-counter drugs at a single location, and continuously check for medication duplications, drug interactions, the effectiveness of medications, and the absence of side effects, etc.); (2) a function of providing 24-hour support or conducting home medical care by visiting the patient's home (for example, even outside the pharmacy's business hours on holidays or at night, responding to consultations regarding medications such as how to use medications and side effects over the phone. Also, if necessary, delivering medications based on prescriptions at night or on holidays. Visiting the homes of patients such as the elderly who have difficulty going out, explaining medications, and also checking the remaining medications (medications on hand)); (3) a function of collaborating with prescribing doctors and medical institutions (for example, verifying the prescription content, making inquiries and suggestions to doctors as necessary. After delivering medications to the patient, monitoring the patient's condition and providing feedback to the prescribing doctor regarding the situation, and checking the remaining medications. Responding not only to consultations regarding medications but also providing broad consultations regarding health, and in some cases, recommending medical consultations at medical institutions. Also, collaborating with local medical institutions to build a relationship where patients can be supported as a team on a daily basis).

[0192] Also, for example, a "designated dentist" refers to a dentist who not only provides safe and secure dental medical care but also has extensive knowledge and insights related to medical care and nursing care, aims to maintain and improve the oral functions of local residents throughout their lives, and can fulfill their responsibilities as a person who plays a part in local medical care. A "designated dentist" is preferably a person who can perform roles such as: (1) providing appropriate dental treatments and health guidance for continuous management and prevention of disease progression according to the life stages from infancy to old age, contributing to the maintenance and improvement of oral and overall health; (2) playing a role in improving oral health for local residents through health activities such as dental check-ups together with the government and related organizations; (3) collaborating with local related institutions and other industries to provide seamless home dental medical care and nursing services at various treatment sites for patients who have difficulty visiting the hospital, and actively participating in comprehensive local care. In addition, it may be possible to attach flag information that can identify a dedicated medical worker to the third-party identification information described later, or to be associated therewith. Regarding the information indicating the dedicated medical worker, any one of an individual (such as a patient), a company to which the individual belongs, a health insurance association to which the individual belongs, and a local government where the individual resides may, as appropriate and as necessary, use a third-party terminal to perform setting, modification, and deletion, or the above-described administrator may use an administrator terminal to perform registration, editing, and deletion.

[0193] In addition, "non-medical workers" preferably include at least employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), combined health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), technical colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies.

[0194] <Embodiment 7 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 2405 is configured to have a function of performing access control when a third party accesses the health care-related information storage unit via a network.

[0195] FIG. 25 is a diagram showing an example of the functional configuration of the health care-related information management system in the present embodiment. First, the IP packet analysis means analyzes the sent IP packet 2501 to examine what information and data are included. For example, it analyzes and examines whether the IP header part of the IP packet contains a source IP address, a destination IP address, etc.

[0196] Next, the destination IP address determination means extracts the destination IP address included in the received IP packet 2501 and determines whether it is addressed to its own health care-related information management system. At this time, the access control unit 2502 stores an IP address table 2503, and refers to this table to determine whether it is addressed to its own health care-related information management system. If the stored IP address (for example, 192.168.0.1) matches the destination IP address, it is determined that it is addressed to its own health care-related information management system, and the process proceeds to the next process. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, when the received IP packet is addressed to its own health care-related information management system by the access ID / user ID acquisition means, the access ID indicating the access subject stored in the IP payload of the IP packet and the user ID indicating the user belonging to the access subject are extracted and acquired.

[0198] Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores an access ID / user ID table 2504, and refers to this table to acquire specific access subject information, user information, and user attribute information. Here, when the access ID is "A0001", the access subject information is "Edogawa Central Hospital", when the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is "medical staff". Also, when the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", when the user ID is "D0001", the user information is "Hideo Maeda", and the user attribute information is "non-medical staff". By the operations of the means up to this point, it is possible to determine whether a third party accessing the health care-related information management system is a medical staff or a non-medical staff.

[0199] Next, the access control means varies the viewing range of the health care-related information depending on whether the third party is a medical worker or a non-medical worker. For example, if the user belonging to the third-party access subject (in this case, "Edogawa Central Hospital") is "Ichiro Suzuki" and the attribute information is "medical worker", all of the health care-related information regarding the individual can be viewed. On the other hand, for example, if the user belonging to the third-party access subject (in this case, "Edogawa Pharmaceutical") is "Hideo Maeda" and the attribute information is "non-medical worker", a part of the health care-related information regarding the individual (including all) or the health care-related information anonymized by a predetermined anonymization method described later can be viewed. In this way, it is possible to determine who the third-party user is and whether the attribute information is "medical worker" or "non-medical worker", and thereby vary the viewing range of the health care-related information regarding the individual. It should be noted that it is preferable that these tables described above enable an administrator who is responsible for managing and operating the health care-related information management system to register, edit, and delete information using an administrator terminal. Further, it is preferable that these access subject information, user information, and user attribute information ("medical worker" or "non-medical worker") are also associated with the third-party identification information described later.

[0200] <Embodiment 7 Explanation of Configuration: Public Permission Information Retention Unit of Access Control Unit> As shown in FIG. 24, the "Disclosure Permission Information Retention Unit" 2406 is configured to have a function of retaining disclosure permission information indicating whether to disclose its own health and medical related information to a third party that has accessed the health and medical related information about an individual via a network. Specifically, it is desirable to be configured such that information indicating "Disclosure Permission" or "Disclosure Denial" can be set at the discretion of the individual from the third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, the two-value information (flag information) where "Disclosure Permission" is "1" and "Disclosure Denial" is "0" may be used. Also, the disclosure permission information may be set such that it is possible to set whether to disclose in a predetermined block unit among the health and medical related information. For example, it is conceivable to set "Disclosure Permission" for the health and medical related information regarding internal medicine among the medical departments, while setting "Disclosure Denial" for the health and medical related information regarding psychiatry. Also, the disclosure permission information may be set such that, by combination with the third-party identification information described later, when the third party is a specific medical practitioner, it can be set separately for the case of "Disclosure Permission" and the case of "Disclosure Denial". For example, when the third-party identification information represents "physician", the health and medical related information of the individual is set to "Disclosure Permission", while when the third-party identification information represents a specific medical practitioner (for example, an accounting staff or an accounting officer, etc.), it is conceivable to set the health and medical related information of the individual to "Disclosure Denial".

[0201] <Embodiment 7 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0202] FIG. 26 is a diagram showing the hardware configuration of the health care related information management system according to the present embodiment. As shown in this figure, the access control unit in the present embodiment includes a "CPU (Central Processing Unit)" 2601 that performs various arithmetic processes, and a "main memory" 2602. Further, it includes a "non-volatile memory" 2603 that holds predetermined information, and a "network I / F (Interface)" 2604 that transmits and receives information with a plurality of third-party terminals 2606 and an administrator terminal 2607. And they are interconnected by a data communication path such as a "bus" 2605 to transmit, receive, and process information.

[0203] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to the "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processes. In the present embodiment, the programs stored in the "main memory" are a health care related information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a public permission / no permission information holding program, an access control program, and the like. Further, health care related information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, public permission / no permission information, etc. are stored in the "main memory" and the "non-volatile memory".

[0204] The "CPU" executes a health care - related information storage program stored in the "main memory", and through the "network I / F", stores health care - related information about an individual sent from a third - party terminal, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.) in the "main memory" and "non - volatile memory". Also, it executes an IP packet analysis program stored in the "main memory" to analyze the IP packets sent via a network (especially the Internet). Also, it executes a destination IP address determination program stored in the "main memory" to determine whether the sent destination IP address is the IP address of its own health care information sharing system. If it is determined to be addressed to itself, the IP address is stored in the "main memory" and "non - volatile memory". Also, it executes an access ID / user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the access subject stored in the IP payload of the sent IP packet and the user ID indicating the user belonging to the access subject, and stores them in the "main memory" and "non - volatile memory". Also, it executes an access subject user attribute acquisition program stored in the "main memory" to acquire the access subject information, user information, and user attribute information (here, information indicating whether the user is a medical worker or a non - medical worker. For example, "medical worker" or "non - medical worker") corresponding to the access ID and user ID, and stores them in the "main memory" or "non - volatile memory". Also, it executes a public release permission information retention program stored in the "main memory" to acquire the public release permission information indicating whether to publicly release an individual's health care - related information to a third party, and stores it in the "main memory" and "non - volatile memory". Also, it executes an access control program stored in the "main memory" to control access to health care - related information about an individual.

[0205] <Embodiment 7: Health Care - Related Information Management System: Processing Flow> Figure 27 is a diagram showing the processing flow when using the health care related information management system according to this embodiment. As shown in the figure, it is a processing method including a health care related information accumulation step S2701, an IP packet analysis step S2702, a destination IP address determination step S2703, an access ID / user ID acquisition step S2704, an access subject user attribute acquisition step S2705, a public permission / non-permission information retention step S2706, and an access control step S2707.

[0206] The "health care related information accumulation step" S2701 is a stage of accumulating health care related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0207] The "IP packet analysis step" S2702 is a stage of analyzing IP packets sent via a network (especially the Internet).

[0208] The "destination IP address determination step" S2703 is a stage of extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care related information management system.

[0209] The "access ID / user ID acquisition step" S2704 is a stage of acquiring an access ID indicating the access subject and a user ID indicating the user belonging to the access subject from the IP payload when the destination IP address is the IP address of its own health care related information management system.

[0210] The "access subject user attribute acquisition step" S2705 is a stage of acquiring access subject information, user information, and user attribute information corresponding to the access ID and user ID (here, information indicating whether the user is a medical worker or a non-medical worker. For example, "medical worker" or "non-medical worker").

[0211] The "public permission information retention step" S2706 is a step of retaining public permission information indicating whether to permit disclosure to a third party regarding personal health and medical related information.

[0212] The "access control step" S2707 is a step of controlling access to the health and medical related information management system.

[0213] <Summary> As described above, it is possible to retain public permission information indicating whether to permit disclosure to a third party regarding health and medical related information about an individual (user). That is, it is possible to select and set public permission or non - permission according to the will of the individual.

[0214] <Embodiment 8 (mainly corresponding to Claim 8, Claim 23, and Claim 38)> <Outline of Embodiment 8>

[0215] FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in Embodiment 8. As shown in this figure, this embodiment is characterized in that, in addition to Embodiments 1 to 7, a third - party identification information retention unit is provided. Hereinafter, regarding the health and medical related information management system in this embodiment, the functional configuration, the hardware configuration, and the processing flow will be described in order. Hereafter, for the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 7, the explanations will be omitted as appropriate.

[0216] <Functional Configuration of Embodiment 8> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment. In this embodiment, by providing a third - party identification information retention unit, it is possible to identify whether a third party is a medical worker or a non - medical worker.

[0217] <Health and Medical Related Information Management System in Embodiment 8: Functional Configuration> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment.

[0218] <Embodiment 8: Description of Configuration - Third - Party Identification Information Retention Unit of Access Control Unit> The "third - party identification information retention unit" 2807 is configured to have a function of retaining third - party identification information for identifying whether a third party who has accessed the health - care - related information stored in the health - care - related information storage unit via a network is a medical worker or a non - medical worker. Here, the third - party identification information is, for example, information created by combining digits, characters, symbols, etc. consisting of 12 digits, and may be information that can uniquely identify a third party. For example, specifically, My Number information or the insured person's certificate number may be used. Also, it is preferable that the third - party identification information is associated with the above - mentioned access subject information, user information, and user attribute information ("medical worker" or "non - medical worker"). Further, the administrator may be able to register, edit, and delete the third - party identification information using the administrator terminal.

[0219] Note that even when the publication approval information indicates "publication permitted" due to the combination of the above - mentioned publication approval information and third - party identification information, if the third party is a specific medical worker, it may be possible to distinguish and set whether to permit access or not. For example, when the third - party identification information represents "doctor", access to the health - care - related information is permitted. On the other hand, when the third - party identification information represents a specific medical worker (e.g., an accounting staff or an accounting officer, etc.), it may be possible to disallow access to the health - care - related information. For example, information indicating the department to which a third party belongs may be added to the third-party identification information, and based on the information indicating the department to which the third party belongs, permission or non-permission to access health care-related information may be controlled. For example, based on information regarding the expertise of the user identified by the third-party identification information (e.g., the specialty field and years of experience of a "doctor" or "nurse"), permission or non-permission to access health care-related information may be controlled. For example, depending on the combination of public disclosure permission / non-permission information, the department to which the third party belongs, and the expertise related to the third-party identification information, the method of obtaining health care-related information by a third party (e.g., only viewable, text conversion of information possible, copyable, transferable, bulk download of anonymized information possible, etc.) may be changed. When it is possible to download, it is preferable to be able to use technologies such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data falsification. For example, depending on the combination of public disclosure permission / non-permission information, the department to which the third party belongs, and the expertise related to the third-party identification information, the third party may be granted the right to access the patient himself / herself. For example, it is assumed that a PCR test staff member, who is a medical worker, transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0220] Regarding the combination of this information, it is conceivable that the above-mentioned administrator registers it in advance in a table format or the like in the above-mentioned access control unit using the administrator terminal, and it can be edited or deleted as appropriate according to the need. In addition, for example, as medical professionals, doctors, dentists, and pharmacists can be mentioned. Regarding these third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, regarding the third-party identification information, at least a part of it may include the number described in the qualification license. In addition, symbols and numbers (including branch numbers) described in the insured person's certificate of the health insurance association to which the user belongs, the number of the driver's license, and the personal number (My Number) information described in the personal number (My Number) card may be included as at least a part of the third-party identification information. Note that third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark) may be used to identify the user.

[0221] <Embodiment 8 Health and Medical Related Information Management System: Hardware Configuration> FIG. 29 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2901 that performs various arithmetic processes and a "main memory" 2902. In addition, it includes a "non-volatile memory" 2903 that holds predetermined information, and a "network I / F" 2904 that transmits and receives information with a third-party terminal 2906 and an administrator terminal 2907. And they are interconnected by a data communication path such as a "bus" 2905 to transmit, receive, and process information.

[0222] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that also serves as a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing. In this embodiment, the programs stored in the "main memory" are mainly a third-party identification information holding program and the like. Also, third-party identification information and the like are stored in the "main memory" and the "non-volatile memory".

[0223] The "CPU" executes the third-party identification information holding program stored in the "main memory" to hold third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker, and stores the third-party identification information in the "main memory" and the "non-volatile memory".

[0224] <Embodiment 8 Health Care-Related Information Management System: Process Flow> FIG. 30 is a diagram showing the process flow when the health care-related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of a third-party identification information holding step S3007.

[0225] The "third-party identification information holding step" S3007 is a stage of holding third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker.

[0226] <Summary> From the above, it is possible to identify whether a third party is a medical worker or a non-medical worker. For example, even for the same medical staff, it is possible to distinguish whether the individual is their attending physician (primary care physician), and for the same non-medical staff, it is possible to distinguish whether the individual is an employee (including researchers) belonging to a pharmaceutical company that develops and manufactures therapeutic drugs related to their illness, or an employee belonging to a government agency.

[0227] <Embodiment 9 (mainly corresponding to Claim 9, Claim 24, and Claim 39)> <Overview of Embodiment 9>

[0228] FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 9. Hereinafter, the functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 8 will be omitted from the description as appropriate.

[0229] Hereinafter, the health care-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0230] <Functional Configuration of Embodiment 9> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment. By adopting such a configuration, when the approval / non-approval information held in the approval / non-approval information holding unit indicates approval and the third-party identification information indicates that the person is a medical staff, it becomes possible to view the health care-related information accumulated in the health care-related information accumulation unit.

[0231] <Health Care-Related Information Management System in Embodiment 9: Functional Configuration> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment.

[0232] <Explanation of the Configuration in Embodiment 9: Approval / Non-Approval Information Holding Unit of the Access Control Unit> The "Disclosure Permission Information Retention Unit" 3106 is configured to have a function of retaining disclosure permission information indicating whether to disclose its own health and medical related information to a third party who has accessed the health and medical related information about an individual via a network. Specifically, it is preferably configured such that information indicating "Disclosure Permission" or "Disclosure Rejection" can be set at the individual's discretion from a third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, it may be two-value information (flag information) where "Disclosure Permission" is "1" and "Disclosure Rejection" is "0". Also, the disclosure permission information may be set so as to be able to set whether to disclose in units of a predetermined block among the health and medical related information. For example, it is conceivable to set "Disclosure Permission" for the health and medical related information regarding internal medicine among the medical departments, while setting "Disclosure Rejection" for the health and medical related information regarding psychiatry. Further, the disclosure permission information may be set so as to be distinguishable between the case of "Disclosure Permission" and the case of "Disclosure Rejection" when the third party is a specific medical worker by combination with the above-described third-party identification information. For example, when the third-party identification information represents "physician", the health and medical related information of the individual is set to "Disclosure Permission", while when the third-party identification information represents a specific medical worker (for example, an accounting staff or an accounting officer, etc.), it is conceivable to set the health and medical related information of the individual to "Disclosure Rejection".

[0233] <Embodiment 9 Explanation of Configuration: Third-Party Identification Information Retention Unit of Access Control Unit> The "Third-Party Identification Information Retention Unit" 3107 is configured to have a function of retaining third-party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage unit via a network is a medical worker or a non-medical worker. Here, the third-party identification information may be information created by combining, for example, numbers, letters, symbols, etc. consisting of 12 digits and may be information that can uniquely identify the third party. For example, specifically, My Number information, the insured person's health insurance card number, etc. may be used. In addition, the third-party identification information is preferably associated with the above-described access subject information, user information, and user attribute information ("medical professional" or "non-medical professional"). Further, the administrator may be able to register, edit, and delete the third-party identification information using the administrator terminal.

[0234] Note that even when the public disclosure permission information indicates "public disclosure permission" due to the combination of the above-described public disclosure permission information and third-party identification information, if the third party is a specific medical professional, it may be possible to set it separately depending on whether access is permitted or not. For example, when the third-party identification information represents "doctor", access to health care-related information may be permitted. On the other hand, when the third-party identification information represents a specific medical professional (e.g., an accounting staff or an accountant), access to health care-related information may be prohibited.

[0235] For example, information indicating the department to which a person belongs may be added to the third-party identification information, and based on the information indicating the department to which the person belongs, it may be possible to control the permission or non-permission of access to the health care-related information. Also, for example, based on information regarding the expertise of the user identified by the third-party identification information (e.g., the specialized field and number of years of experience of a "doctor" or "nurse"), it may be possible to control the permission or non-permission of access to the health care-related information. Further, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise, it may be possible to change the method of obtaining health care-related information by a third party (e.g., only viewable, textification of information possible, copyable, transferable, bulk download of anonymized information possible, etc.). When it is possible to download, it is preferable to be able to use techniques such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise, it may be possible to grant a third party the right of access to the patient himself / herself. For example, it is assumed that a PCR test staff member who is a medical worker transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0236] Regarding the combination of these pieces of information, it is conceivable that the above-described administrator uses the administrator terminal to register them in advance in a tabular format or the like in the above-described access control unit so that they can be edited and deleted as appropriate according to the need. In addition, for example, as medical professionals, doctors, dentists, and pharmacists can be mentioned. Regarding these third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist's list registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, at least a part of the third-party identification information may include the number described in the qualification license. Also, symbols and numbers (including branch numbers) described in the insured certificate of the health insurance association to which the user belongs, the number of the driver's license, personal number (My Number) information described in the personal number (My Number) card, etc. may be included as at least a part of the third-party identification information. In addition, it may be possible to identify the user by using third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark).

[0237] <Embodiment 9 Explanation of Configuration: Access Control Means of the Access Control Unit> The "access control means" 3105 relates to access control when a third party accesses the health and medical-related information storage unit via the network. When the public disclosure permission / non-permission information held in the public disclosure permission / non-permission information storage unit indicates public disclosure permission and the third-party identification information indicates that it is a medical professional, it is configured to have a function of making the health and medical-related information stored in the health and medical-related information storage unit viewable.

[0238] <Embodiment 9 Health and Medical-Related Information Management System: Hardware Configuration> FIG. 32 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 3201 that performs various arithmetic processes and a "main memory" 3202. Further, it includes a "non-volatile memory" 3203 that holds predetermined information, a "network I / F" 3204 that transmits and receives information with a third-party terminal 3206 and an administrator terminal 3207. And they are interconnected by a data communication path such as a "bus" 3205 to transmit, receive, and process information.

[0239] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing the addresses. In the present embodiment, the programs stored in the "main memory" are a public permission / non-permission information holding program, a third-party identification information holding program, an access control program, and the like. Further, public permission / non-permission information, third-party identification information, and the like are stored in the "main memory" and the "non-volatile memory".

[0240] The "CPU" executes the public permission information retention program stored in the "main memory" and stores the public permission information indicating whether to disclose its own health and medical related information to a third party that has accessed the health and medical related information of an individual via a network in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the third party identification information retention program stored in the "main memory" and stores the third party identification information for identifying whether a third party that has accessed the health and medical related information stored in the health and medical related information storage section via a network is a medical worker or a non-medical worker in the "main memory" and the "non-volatile memory". After that, when the "CPU" executes the access control program stored in the "main memory" and the public permission information indicates permission to disclose and the third party identification information indicates that the third party is a medical worker, the health and medical related information stored in the health and medical related information storage section is made viewable.

[0241] <Embodiment 9 Health and Medical Related Information Management System: Processing Flow> FIG. 33 is a diagram showing the processing flow when the health and medical related information management system according to the present embodiment is used. As shown in this figure, it is a processing method consisting of a public permission information retention step S3306, a third party identification information retention step S3307, and an access control step S3308.

[0242] The "public permission information retention step" S3306 is a stage of retaining the public permission information indicating whether to disclose its own health and medical related information to a third party that has accessed the health and medical related information of an individual via a network.

[0243] The "third party identification information retention step" S3307 is a stage of retaining the third party identification information for identifying whether a third party that has accessed the health and medical related information stored in the health and medical related information storage section via a network is a medical worker or a non-medical worker.

[0244] The "access control step" S3308 is a stage where, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third - party identification information indicates that it is a medical practitioner, the health - care - related information stored in the health - care - related information accumulation unit can be viewed.

[0245] <Summary> As described above, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third - party identification information indicates that it is a medical practitioner, the health - care - related information stored in the health - care - related information accumulation unit can be viewed.

[0246] <Embodiment 10 (mainly corresponding to Claim 10, Claim 25, and Claim 40)> <Outline of Embodiment 10>

[0247] In addition to Embodiments 1 to 9, this embodiment is characterized in that it holds anonymization method information. Hereinafter, descriptions of the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 9 will be omitted as appropriate.

[0248] Hereinafter, the health - care - related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0249] <Functional Configuration of Embodiment 10> FIG. 34 is a diagram showing the functional configuration of the health - care - related information management system in this embodiment. The health - care - related information management system in this embodiment includes an anonymization method information holding unit.

[0250] <Health - Care - Related Information Management System in Embodiment 10: Functional Configuration> FIG. 34 is a diagram showing the functional configuration of the health - care - related information management system in this embodiment.

[0251] <Explanation of Configuration: Anonymization Method Information Holding Unit of Access Control Unit in Embodiment 10> The "Anonymization Method Information Retention Unit" 3408 is configured to have a function of retaining information representing an anonymization method. Here, the anonymization method information may be information created by combining, for example, numbers, characters, symbols, etc. consisting of six digits, and may be information that can uniquely identify the anonymization method. Regarding the anonymization method information, the above-mentioned administrator may be able to perform registration, editing, and deletion using the administrator terminal.

[0252] There are several anonymization methods, and these are often used alone or in combination. The main anonymization methods will be briefly described below. "k-anonymization" (where k represents a natural number of 2 or more) means that for attributes (such as gender, age, place of residence, occupation, etc.) that cannot identify an individual alone but can identify an individual with a high probability by combining multiple ones, for any combination of attribute values, there must be at least k occurrences in the target data. "Pseudonymization" means replacing with other descriptions, etc. by a method that does not have a regularity that can be deleted or restored. "Generalization" means replacing the value of an attribute with a higher value or concept. For example, grouping by 10-year increments or changing cucumber to the higher concept of vegetable. "Top (bottom) coding" means grouping particularly large or small attribute values for numerical attributes. For example, people aged 100 or above are grouped as "100 years old or above". "Noise (error) addition" means adding random noise according to a certain distribution to numerical attributes. "Swapping (data exchange)" means (probabilistically) swapping attribute values between records for categorical attributes. Also called data swap. "Sampling" means randomly extracting a certain proportion or number from the entire original data. "Grouping" means replacing detailed items with a certain grouping or classification in attributes or histories.

[0253] <Embodiment 10 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 3405 relates to access control when a third party accesses the health care-related information storage unit via a network. When the access permission / denial information held in the access permission / denial information storage unit indicates public permission and the third party identification information indicates that the third party is a non-medical worker, it is configured to have a function of making part (including all) of the health care-related information stored in the health care-related information storage unit, or health care-related information anonymized by a predetermined anonymization method, viewable.

[0254] <Embodiment 10 Health Care-Related Information Management System: Hardware Configuration> FIG. 35 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 3501 that performs various arithmetic processes and a "main memory" 3502. It also includes a "non-volatile memory" 3503 that holds predetermined information, a "network I / F" 3504 that transmits and receives information with a third-party terminal 3506 and an administrator terminal 3507. And they are interconnected by a data communication path such as a "bus" 3505 to transmit, receive, and process information.

[0255] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also the working area of the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses and perform processes. In this embodiment, the program stored in the "main memory" is an anonymization method information holding program. Also, anonymization method information and the like are stored in the "main memory" and the "non-volatile memory".

[0256] The "CPU" executes an anonymization method information retention program stored in the "main memory" and stores anonymization method information representing the anonymization method in the "main memory" and the "non-volatile memory". After that, when the access control program stored in the "main memory" indicates that public release is permitted and the third-party identification information indicates that the person is not a medical professional, a part (including all) of the health care-related information stored in the health care-related information accumulation section, or health care-related information anonymized by a predetermined anonymization method can be viewed.

[0257] <Embodiment 10 Health Care-Related Information Management System: Processing Flow> FIG. 36 is a diagram showing the processing flow when the health care-related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of an anonymization method information retention step S3608 and an access control step S3609.

[0258] The "anonymization method information retention step" S3608 is a stage of retaining anonymization method information, which is information representing a method of anonymizing health care-related information.

[0259] The "access control step" S3609 is a stage where, when the public release permission information held in the public release permission information holding section indicates public release permission and the third-party identification information indicates that the person is not a medical professional, a part (including all) of the health care-related information stored in the health care-related information accumulation section, or health care-related information anonymized by a predetermined anonymization method can be viewed.

[0260] <Explanation of an Example of Anonymization Method> FIGS. 37 to 39 are diagrams showing an example of the anonymization method. Using these, an example of the anonymization method will be briefly explained. The table shown in Figure 37 is a list of patients in an overhead medical institution in Minato-ku, Tokyo, Japan, which has not yet been anonymized. Here, it contains six attributes (name, age, gender, place of residence, religion, disease name) and data for 12 people. Among these, the "name" is information that constitutes personal data and is information that can potentially identify an individual on its own. Also, "age", "gender", "place of residence", "religion", and "disease name" are information that constitutes personal data, information that will not have data accumulated over time, and although they cannot identify an individual on their own, they are information that can potentially identify an individual through combination with other attributes or collation with external information. In particular, the "disease name" is very sensitive attribute information in personal data. These information correspond to the personal health and medical related information stored in the above-mentioned health and medical related information storage section. In this case, for a certain value of k (k is a natural number of 2 or more), the following processing may be performed to achieve k-anonymity.

[0261] First, perform a process called "pseudonymization" and replace certain values of an attribute with an asterisk "*". All or some of the values in that column are replaced with "*". In the table shown in Figure 38, all values of "name" and all values of "religion" are replaced with "*". Subsequently, perform a process called "generalization" and replace individual attribute values with a broader range. For example, for "age", replace "29 years old" with "in their 20s" and "35 years old" with "in their 30s", etc., to replace with values having a range. Also, for "place of residence", although it is a value consisting of prefecture and city / town / village, delete the city / town / village and change it to only the prefecture. Figure 38 shows the anonymized table. Here, there are four equivalence classes having the same combination of the same quasi-identifiers ("age", "gender", "place of residence").

[0262] Figure 39 shows an anonymized table that is grouped in an easy-to-understand manner. As can be seen from this table, in any of the groups (Group A to Group D), 3-anonymity is achieved in terms of "age", "gender", and "residence". This is because in any combination of these attributes, there are three or more people. In this way, by anonymizing the health care-related information about individuals stored in the above-mentioned health care-related information storage unit, the risk of identifying individuals can be reduced.

[0263] <Summary> From the above, when the publication approval information held in the publication approval information holding unit indicates publication permission and the third-party identification information indicates that the person is not a medical worker, a part (including all) of the health care-related information stored in the health care-related information storage unit, or the health care-related information anonymized by a predetermined anonymization method can be made viewable.

Explanation of Signs

[0264] Health care-related information management system: 200, 300 Health care-related information storage unit: 201, 301 Access control unit: 202, 302 Incentive management unit: 203, 303 Provision history holding unit: 204, 304 Network: 205 Third-party terminal: 206 Administrator terminal: 207

Claims

1. A health care related information storage unit for storing and managing health care related information about an individual; An access control unit for controlling the disclosure of the health care related information stored in the health care related information storage unit to a third party via a network; An incentive management unit for providing an incentive to the individual to promote the disclosure of the health care related information by referring to the provision history of the provision history holding unit described later regarding the permission or non - permission of disclosure of the health care related information about the individual; A provision history holding unit for holding a provision history which is a history of providing incentives to each individual; and The incentive management unit performs regular communication with the health care related information storage unit and / or the provision history holding unit, so that information regarding incentives indicating a state of permitting disclosure to a third party or a state of not disclosing to a third party for the health care related information is always kept up - to - date. A health care related information management system.

2. Further comprising an incentive type information holding unit for holding incentive type information which is information indicating types of a plurality of incentives; The incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit. The health care related information management system according to Claim 1.

3. An end request reception unit for receiving an end request which is a request to stop or end the disclosure of already disclosed health care related information from an individual who has stored health care related information in the health care related information storage unit; An end condition holding unit for holding an end condition which is a condition for determining whether it is possible to end based on information about the individual who has made the end request when the end request is received; A judgment rule holding unit for holding a judgment rule which is a rule for determining whether to end the disclosure of health care related information based on information about the individual who has made the end request and the held end condition; An end judgment unit for judging whether to end based on the information about the individual, the held end condition, and the held judgment rule when the end request is received; An end control unit for controlling the access control unit to end the disclosure of the health care related information of the individual when the judgment result in the end judgment unit is a judgment result that it should end. The health care-related information management system according to claim 1, further comprising

4. The health care-related information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.

5. The health care-related information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating acceptance of incentives by the incentive management unit after authentication by the access authentication processing unit.

6. The health care-related information management system according to claim 5, further comprising an incentive provision processing unit that performs incentive provision processing, which is processing for providing incentives when consent information is acquired by the consent information acquisition unit.

7. The health care-related information management system according to claim 1, further comprising a public permission / denial information holding unit that holds public permission / denial information indicating whether an individual permits the disclosure of their health care-related information to a third party.

8. The health care-related information management system according to claim 7, further comprising a third party identification information holding unit that holds third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

9. The access control unit causes the medical practitioner to view the health care-related information stored in the health care-related information storage unit when the public permission / denial information held by the public permission / denial information holding unit indicates permission to disclose and the third party identification information held by the third party identification information holding unit indicates that the third party is a medical practitioner. The health care-related information management system according to claim 8.

10. The access control unit causes the non-medical practitioner to view some (including all) of the health care-related information stored in the health care-related information storage unit or health care-related information anonymized by a predetermined anonymization method when the public permission / denial information held by the public permission / denial information holding unit indicates permission to disclose and the third party identification information held by the third party identification information holding unit indicates that the third party is a non-medical practitioner. The health care-related information management system according to claim 8.

11. The anonymization method is performed by at least k (k is a natural number of 2 or more) - anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping, or a combination thereof. The health care-related information management system according to claim 10.

12. The incentive management unit provides incentives including any one or more of the following: providing minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books, DVDs, Blu-rays, health appliances, kitchen supplies, bedding, beds or pillows, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash. The health care-related information management system according to claim 1.

13. The medical staff includes at least one or more of doctors, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers. The health care-related information management system according to claim 8.

14. The non-medical staff includes at least one or more of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health appliance companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and fisheries companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies. The health care-related information management system according to claim 8.

15. A method executed by a CPU in a health care-related information management system that is a computer, comprising: a health care-related information accumulation step for accumulating and managing health care-related information about an individual; an access control step for controlling disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; an incentive management step for providing an incentive to the individual to promote disclosure of the health care-related information by referring to a provision history of a provision history retention step described later regarding whether or not to disclose health care-related information about the individual; a provision history retention step for retaining a provision history that is a history of providing an incentive to each individual; and a method for always keeping information regarding an incentive indicating a state of permitting disclosure to a third party or a state of not disclosing to a third party for the health care-related information in an up-to-date state by the incentive management step and the health care-related information accumulation step or / and the provision history retention step.

16. A method executed by a CPU in a health care-related information management system that is a computer, comprising: further comprising an incentive type information retention step for retaining incentive type information that is information indicating types of a plurality of incentives; The method according to claim 15, wherein the incentive management step selects and provides an incentive to be provided to an individual according to a provision history based on the incentive type information retained in the incentive type information retention step.

17. A method executed by a CPU in a health care-related information management system that is a computer, comprising: an end request reception step for receiving an end request that is a request to stop or end disclosure of already disclosed health care-related information from an individual who is accumulating health care-related information in the health care-related information accumulation step; an end condition retention step for retaining an end condition that is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received; a determination rule retention step for retaining a determination rule that is a rule for determining whether or not to end disclosure of health care-related information based on information about the individual who made the end request and the retained end condition; An end determination step of determining whether to end based on the information about the individual, the stored end conditions, and the stored judgment rules when an end request is received; An end control step of controlling the access control step to end the disclosure of the individual's health and medical related information when the determination result in the end determination step is that it should end; The method according to claim 15, further comprising the above.

18. A method executed by a CPU in a health and medical related information management system which is a computer, The method according to claim 15, further comprising an access authentication processing step of performing authentication for accessing the incentive management step.

19. A method executed by a CPU in a health and medical related information management system which is a computer, The method according to claim 18, further comprising a consent information acquisition step of acquiring consent information which is information indicating acceptance of receiving an incentive by the incentive management step after being authenticated in the access authentication processing step.

20. A method executed by a CPU in a health and medical related information management system which is a computer, The method according to claim 19, further comprising an incentive provision processing step of performing an incentive provision process which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

21. A method executed by a CPU in a health and medical related information management system which is a computer, The method according to claim 15, further comprising a public disclosure permission information retention step of retaining public disclosure permission information indicating whether an individual permits the disclosure of their health and medical related information to a third party.

22. A method executed by a CPU in a health and medical related information management system which is a computer, The method according to claim 21, further comprising a third party identification information retention step of retaining third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

23. A method executed by a CPU in a health and medical related information management system which is a computer, The method according to claim 22, wherein the access control step allows a medical practitioner to view the health care-related information stored in the health care-related information storage step when the publication permission / denial information stored in the publication permission / denial information storage step indicates publication permission and the third-party identification information stored in the third-party identification information storage step indicates that the third party is a medical practitioner.

24. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The method according to claim 22, wherein the access control step allows a non-medical practitioner to view part (including all) of the health care-related information stored in the health care-related information storage step, or health care-related information anonymized by a predetermined anonymization method, when the publication permission / denial information stored in the publication permission / denial information storage step indicates publication permission and the third-party identification information stored in the third-party identification information storage step indicates that the third party is a non-medical practitioner.

25. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The method according to claim 24, wherein the anonymization method is performed by at least one of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

26. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The method according to claim 15, wherein the incentive management step provides an incentive including any one or more of providing minor points, providing individual or general information services to information providers, providing individual drugs or supplements, providing books, DVDs, Blu-rays, health appliances, kitchen supplies, bedding, beds or pillows, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (e.g., health management apps or pedometer apps), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

27. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The medical workers include at least one of a doctor, dentist, pharmacist, public health nurse, midwife, nurse, practical nurse, physical therapist, occupational therapist, vision therapist, speech therapist, prosthetist, radiological technologist, diagnostic X-ray technologist, clinical laboratory technologist, sanitary inspector, clinical engineer, dental hygienist, dental technician, emergency medical technician, massage therapist, acupuncturist, moxibustion therapist, chiropractor, registered dietitian, nutritionist, psychiatric social worker, social welfare worker, care worker, certified psychologist, clinical psychologist, and medical office worker. The method according to claim 22.

28. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The non-medical workers include at least one of an employee belonging to a life insurance company, property insurance company, securities company, pharmaceutical company, drug discovery venture company, food company, health equipment company, fitness club, sports gym, bank, credit union, JA (Agricultural Cooperative), corporate health insurance, association health insurance, mutual aid association, municipal national health insurance, national health insurance association, PR company, general research institute, university and graduate school (including affiliated research institutions), junior college, agricultural and fishery-related company, fertilizer manufacturer, government agency, local government, and independent administrative agency. The method according to claim 22.

29. A health care-related information accumulation step for accumulating and managing health care-related information about an individual; An access control step for controlling disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; An incentive management step for providing an incentive to the individual to promote disclosure of the health care-related information by referring to the provision history of the provision history retention step described below regarding whether or not to disclose the health care-related information about the individual; A provision history retention step for retaining a provision history that is a history of providing incentives for each individual; Causing a health care-related information management system that is a computer to execute the steps. The operation program of the health care-related information management system described so as to be readable and executable by the health care-related information management system, which is a computer that always keeps the information regarding incentives indicating a state of permitting disclosure to a third party or a state of not disclosing to a third party for the health care-related information, based on the incentive management step and the health care-related information accumulation step and / or the provision history retention step.

30. Further having an incentive type information retention step for retaining incentive type information, which is information indicating types of a plurality of incentives, The operation program of the health care-related information management system described so as to be readable and executable by the health care-related information management system, which is a computer according to claim 29, wherein the incentive management step selects and provides an incentive to be provided to an individual according to a provision history, based on the incentive type information retained in the incentive type information retention step.

31. An end request reception step for receiving an end request, which is a request for stopping or ending the disclosure of the health care-related information that has already been disclosed, from an individual who has accumulated the health care-related information in the health care-related information accumulation step; An end condition retention step for retaining an end condition, which is a condition for determining whether it is possible to end based on the information regarding the individual who has made this end request, when the end request is received; A determination rule retention step for retaining a determination rule, which is a rule for determining whether to end the disclosure of the health care-related information based on the information regarding the individual who has made the end request and the retained end condition; An end determination step for determining whether to end based on the information regarding the individual, the retained end condition, and the retained determination rule, when the end request is received; An end control step for controlling the access control step to end the disclosure of the health care-related information of the individual, when the determination result in the end determination step is a determination result that it should be ended; The operation program of the health care-related information management system described so as to be readable and executable by the health care-related information management system, which is a computer according to claim 29, further having the above steps.

32. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 29, further having an access authentication processing step for performing authentication for accessing the incentive management step.

33. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 32, further having a consent information acquisition step for acquiring consent information which is information indicating acceptance of an incentive by the incentive management step after being authenticated in the access authentication processing step.

34. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 33, further having an incentive provision processing step for performing an incentive provision process which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

35. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 29, further having a public permission / non-permission information retention step for retaining public permission / non-permission information indicating whether an individual permits the disclosure of his / her own health care related information to a third party.

36. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 35, further having a third party identification information retention step for retaining third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

37. The access control step is such that, when the public permission / non-permission information retained in the public permission / non-permission information retention step indicates public permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner, the health care related information accumulated in the health care related information accumulation step is allowed to be viewed by the medical practitioner. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 36.

38. The access control step is to allow a non-medical worker to view part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or the health care-related information anonymized by a predetermined anonymization method, when the publication permission / denial information held in the publication permission / denial information holding step indicates publication permission and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical worker. The operation program of the health care-related information management system described in the computer-readable and executable manner in the health care-related information management system according to claim 36.

39. The anonymization method is performed by at least one of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof. The operation program of the health care-related information management system described in the computer-readable and executable manner in the health care-related information management system according to claim 38.

40. The incentive management step provides an incentive including any one or more of the following: providing negative points, providing individual or general information services to information providers, providing individual drugs or supplements, providing books, DVDs, Blu-rays, health appliances, kitchen utensils, bedding, beds or pillows, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (for example, health management apps or pedometer apps), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash. The operation program of the health care-related information management system described in the computer-readable and executable manner in the health care-related information management system according to claim 29.

41. The medical workers include at least one or more of physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, chiropractors, registered dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers. The operation program of the health and medical-related information management system described in claim 36 that is readable and executable by the computer of the health and medical-related information management system.

42. The non-medical workers include at least one or more of employees belonging to life insurance companies, casualty insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), technical colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies. The operation program of the health and medical-related information management system described in claim 36 that is readable and executable by the computer of the health and medical-related information management system.

Images