Healthcare Information Management System

Abstract

In order to promote the disclosure of health care-related information by referring to the provision history, which is a history of providing incentives for each individual regarding the permission to disclose health care-related information about the individual, it is intended to provide a health care-related information management system that provides incentives to individuals. 【Solution means】 A health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, and an incentive management unit for providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history of the provision history holding unit described later regarding the permission to disclose health care-related information about the individual, and a provision history holding unit for holding a provision history, which is a history of providing incentives for each individual, to provide a health care-related information management system having the same.

Description

Technical Field

[0001] The present invention relates to a health care related information management system for accumulating and managing health care related information, which is information related to an individual's health care.

Background Art

[0002] Recently, systems and services that enable sharing of medical information of patients, etc. among multiple medical institutions have begun to be considered.

[0003] As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problems of avoiding duplication of test items in test data in multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system to store various test results of patients. Then, the medical information sharing server displays the corresponding electronic medical record according to the instructions of medical institution terminals such as medical facility terminals of medical institutions and health examination center terminals, and when conducting a clinical examination, searches for and displays whether the results of test items identical to the test items of the clinical examination scheduled to be conducted are described in the test result DB, and an information system is disclosed. In addition, a medical information providing system is provided in the medical information sharing server, and when the medical information providing system sends information to the information recipient, it bills for the consideration of the information, and based on the received consideration, formulates the reward that the medical information providing system can provide to the user and provides the reward to the user, which has been disclosed.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the above-described invention, only the point of formulating the rewards that the medical information providing system can offer to users and providing the rewards to users is disclosed. Regarding a health and medical related information management system such as the present invention, there is a problem that it is not specified up to the point of having a function of holding a provision history which is a history of providing incentives for each individual, or / and a function of providing an incentive to an individual in order to promote the disclosure of health and medical related information by referring to the provision history regarding whether or not to disclose health and medical related information about the individual.

Means for Solving the Problem

[0006] Based on the problems as described above, the present invention aims to provide a health and medical related information management system that provides an incentive to an individual in order to promote the disclosure of health and medical related information by referring to a provision history which is a history of providing incentives for each individual regarding whether or not to disclose health and medical related information about the individual.

[0007] Specifically, the present invention provides a health and medical related information management system having a health and medical related information storage unit for storing and managing health and medical related information about an individual, an access control unit for controlling the disclosure of the health and medical related information stored in the health and medical related information storage unit to a third party via a network, an incentive management unit for providing an incentive to an individual in order to promote the disclosure of health and medical related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose health and medical related information about the individual, and a provision history holding unit for holding a provision history which is a history of providing an incentive for each individual.

[0008] In addition to the above characteristics, the present invention provides a health and medical related information management system having an incentive type information holding unit for holding incentive type information which is information indicating types of a plurality of incentives, and the incentive management unit selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding unit.

[0009] In addition to the above features, the present invention also provides an end request receiving unit that receives an end request, which is a request to stop or end the disclosure of already disclosed health and medical related information from an individual who has accumulated health and medical related information in the health and medical related information storage unit; an end condition holding unit that holds an end condition, which is a condition for determining whether to end based on information about the individual who made the end request when the end request is received; a determination rule holding unit that holds a determination rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request, the held end condition, and the held determination rule; an end determination unit that determines whether to end based on information about the individual, the held end condition, and the held determination rule when the end request is received; and an end control unit that controls the access control unit to end the disclosure of the individual's health and medical related information when the determination result in the end determination unit is that it should end, in a health and medical related information management system.

[0010] In addition to the above features, the present invention also provides a health and medical related information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] In addition to the above features, the present invention also provides a health and medical related information management system having a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

[0012] In addition to the above features, the present invention also provides a health and medical related information management system having an incentive provision processing unit that performs an incentive provision processing, which is a process for providing an incentive when consent information is acquired by the consent information acquisition unit.

[0013] In addition to the above features, the present invention provides a health care-related information management system having a disclosure permission information holding unit that holds disclosure permission information indicating whether an individual permits the disclosure of his or her own health care-related information to a third party.

[0014] In addition to the above features, the present invention provides a health care-related information management system having a third party identification information holding unit that holds third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0015] In addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission for disclosure and the third party identification information held in the third party identification information holding unit indicates that the third party is a medical practitioner, the health care-related information accumulated in the health care-related information accumulation unit is made available for viewing by the medical practitioner.

[0016] In addition to the above features, the present invention provides a health care-related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates permission for disclosure and the third party identification information held in the third party identification information holding unit indicates that the third party is a non-medical practitioner, a part (including all) of the health care-related information accumulated in the health care-related information accumulation unit or health care-related information anonymized by a predetermined anonymization method is made available for viewing by the non-medical practitioner.

[0017] In addition to the above features, the present invention provides a health care-related information management system in which the anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0018] In addition to the above features, the present invention provides a health care-related information management system in which the health care-related information storage unit stores health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical examination forms, data of health promotion apps, and conversation data of interactive health promotion SNSs related to an individual.

[0019] In addition to the above features, the present invention provides a health care-related information management system in which the incentive management unit provides an incentive including any one or more of the provision of minor points, the provision of individual information services or general information services to information providers, the provision of individual drugs or supplements, the provision of books and other products, the provision of passwords or IDs for information provision, the provision of items available on the network, the provision of the right to receive medical examinations, the provision of the right to receive diagnoses, the provision of the right to receive tests, the provision of the right to receive various services on the network, the provision of specific software (e.g., health management apps and pedometer apps), the provision of points to prepaid or postpaid electronic money, the provision of product coupons, travel coupons or cash.

[0020] In addition to the above features, the present invention provides a health care-related information management system in which medical staff includes at least one or more of physicians, dentists, pharmacists, health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0021] In addition to the above features, the present invention provides a health care-related information management system including at least one or more employees belonging to life insurance companies, casualty insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), union health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies for non-medical professionals.

[0022] Furthermore, regarding the above-mentioned health care-related information management system, in order to realize them, a method executed by the CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described in a computer-readable and executable manner for the health care-related information management system which is a computer are provided.

[0023] Specifically, the present invention provides a method executed by the CPU in the health care-related information management system which is a computer, the method including: a health care-related information accumulation step for accumulating and managing health care-related information about an individual; an access control step for controlling disclosure of the health care-related information accumulated in the health care-related information accumulation step to a third party via a network; an incentive management step for providing an incentive to an individual in order to encourage disclosure of the health care-related information by referring to the provision history of the provision history holding step described later regarding whether to disclose the health care-related information about the individual; and a provision history holding step for holding a provision history which is a history of providing an incentive for each individual.

[0024] In addition, the present invention, in addition to the above features, is a method executed by a CPU in a health care-related information management system that is a computer, and has an incentive type information holding step of holding incentive type information that is information indicating a plurality of types of incentives. The incentive management step provides a method of selecting and providing an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step.

[0025] In addition, the present invention, in addition to the above features, is a method executed by a CPU in a health care-related information management system that is a computer, and includes an end request reception step of receiving an end request that is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has accumulated health care-related information in the health care-related information accumulation step, an end condition holding step of holding an end condition that is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received, a determination rule holding step of holding a determination rule that is a rule for determining whether to end the disclosure of health care-related information based on information about the individual who made the end request, the held end condition, an end determination step of determining whether to end based on information about the individual, the held end condition, and the held determination rule when the end request is received, and an end control step in which the access control step controls to end the disclosure of the health care-related information of the individual when the determination result in the end determination step is a determination result that it should end.

[0026] In addition, the present invention, in addition to the above features, is a method executed by a CPU in a health care-related information management system that is a computer, and provides a method having an access authentication processing step of performing authentication for accessing the incentive management step.

[0027] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer, the method comprising a consent information acquisition step of acquiring consent information which is information indicating acceptance of receiving an incentive by an incentive management step after being authenticated in an access authentication processing step.

[0028] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer, the method comprising an incentive provision processing step of performing an incentive provision process which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

[0029] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer, the method comprising a public disclosure permission / non-permission information retention step of retaining public disclosure permission / non-permission information indicating whether an individual permits disclosure of his / her own health care-related information to a third party.

[0030] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer, the method comprising a third party identification information retention step of retaining third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0031] In addition to the above features, the present invention also provides a method executed by a CPU in a health care-related information management system which is a computer, wherein, in the access control step, when the public disclosure permission / non-permission information retained in the public disclosure permission / non-permission information retention step indicates public disclosure permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner, the health care-related information accumulated in the health care-related information accumulation step is allowed to be viewed by the medical practitioner.

[0032] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical-related information management system that is a computer. The access control step is such that when the publication permission / denial information held in the publication permission / denial information holding step indicates publication permission and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical professional, a part (including all) of the health and medical-related information accumulated in the health and medical-related information accumulation step, or health and medical-related information anonymized by a predetermined anonymization method is allowed to be viewed by non-medical professionals.

[0033] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical-related information management system that is a computer. The anonymization method is performed by at least one of anonymization methods such as k (where k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping, or a combination thereof.

[0034] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical-related information management system that is a computer. The health and medical-related information accumulation step is a method of accumulating health and medical-related information including any one or more of information such as electronic medical record information regarding an individual, various examination information, prescription information, medication history information, medication status information, vital information, information on a questionnaire, data of a health promotion application, and conversation data of an interactive health promotion SNS.

[0035] In addition to the above features, the present invention is a method executed by a CPU in a health care-related information management system that is a computer. The incentive management step provides an incentive including any one or more of the following: provision of minor points, provision of individual information services or general information services to information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items available on the network, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

[0036] In addition to the above features, the present invention is a method executed by a CPU in a health care-related information management system that is a computer. The medical staff includes at least one or more of the following: doctors, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, medical X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aid responders, massage therapists, acupuncturists, moxibustion therapists, chiropractors, registered dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0037] In addition to the above features, the present invention is a method executed by a CPU in a health care-related information management system that is a computer. The non-medical staff includes at least one or more of the following: employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies.

[0038] Specifically, the present invention provides an operation program of a health care related information management system, which is described in a computer-readable and executable manner, and includes a health care related information storage step for storing and managing health care related information about an individual, an access control step for controlling the disclosure of the health care related information stored in the health care related information storage step to a third party via a network, an incentive management step for providing an incentive to an individual in order to promote the disclosure of the health care related information by referring to the provision history of the provision history holding step described later regarding whether to disclose the health care related information about the individual, and a provision history holding step for holding a provision history which is a history of providing an incentive to each individual.

[0039] In addition, the present invention provides an operation program of a health care related information management system, which is described in a computer-readable and executable manner, and includes an incentive type information holding step for holding incentive type information which is information indicating types of a plurality of incentives in addition to the above features. The incentive management step selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step.

[0040] In addition to the above features, the present invention also includes an end request acceptance step of accepting an end request, which is a request to stop or end the disclosure of already disclosed health and medical related information from an individual who has accumulated health and medical related information in the health and medical related information accumulation step; an end condition holding step of holding an end condition, which is a condition for determining whether to end based on the information about the individual who made the end request when the end request is accepted; a determination rule holding step of holding a determination rule, which is a rule for determining whether to end the disclosure of health and medical related information based on the information about the individual who made the end request, the held end condition, and the held determination rule; an end determination step of determining whether to end based on the information about the individual, the held end condition, and the held determination rule when the end request is accepted; and an end control step of controlling the access control step to end the disclosure of the health and medical related information of the individual when the determination result in the end determination step is that it should end. The present invention provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having the above steps.

[0041] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having an access authentication processing step of performing authentication for accessing the incentive management step.

[0042] In addition to the above features, the present invention also provides an operation program of a health and medical related information management system described in a computer-readable and executable manner for a health and medical related information management system having a consent information acquisition step of acquiring consent information, which is information indicating acceptance of receiving an incentive by the incentive management step after being authenticated in the access authentication processing step.

[0043] In addition to the above features, the present invention provides an operation program of a health care related information management system described in a computer-readable and executable manner for a health care related information management system having an incentive provision processing step of performing incentive provision processing, which is a process for providing an incentive when consent information is obtained in the consent information acquisition step.

[0044] In addition to the above features, the present invention provides an operation program of a health care related information management system described in a computer-readable and executable manner for a health care related information management system having a public permission / non-permission information retention step of retaining public permission / non-permission information indicating whether an individual permits the disclosure of his / her own health care related information to a third party.

[0045] In addition to the above features, the present invention provides an operation program of a health care related information management system described in a computer-readable and executable manner for a health care related information management system having a third party identification information retention step of retaining third party identification information for identifying whether a third party is a medical worker or a non-medical worker.

[0046] In addition to the above features, the present invention provides an operation program of a health care related information management system described in a computer-readable and executable manner for a health care related information management system in which, when the public permission / non-permission information retained in the public permission / non-permission information retention step indicates public permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical worker, the health care related information accumulated in the health care related information accumulation step is allowed to be viewed by the medical worker.

[0047] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, where the access control step allows non-medical personnel to view part (including all) of the health care-related information accumulated in the health care-related information accumulation step or the health care-related information anonymized by a predetermined anonymization method, when the publication permission / denial information held in the publication permission / denial information holding step indicates permission to publish and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical person.

[0048] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, where the anonymization method is performed by any one of at least k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof.

[0049] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer, where the health care-related information accumulation step accumulates health care-related information including any one or more of electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information, information on medical interview forms, data of health promotion apps, and conversation data of interactive health promotion SNSs.

[0050] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer of a health care-related information management system, wherein the incentive management step includes providing at least one of the following incentives: providing minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books and other goods, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

[0051] In addition to the above features, the present invention provides an operation program of a health care-related information management system, which is readable and executable by a computer of a health care-related information management system, wherein the medical staff includes at least one of the following: doctors, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, first aiders, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers.

[0052] In addition to the above features, the present invention provides an operation program of a health care-related information management system that is readable and executable on a computer including at least one or more employees belonging to life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), technical colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies, for non-medical workers.

Advantages of the Invention

[0053] As described above, in the present invention, in order to promote the disclosure of health care-related information by referring to the provision history, which is a history of providing incentives for each individual regarding the permission or non-permission of the disclosure of health care-related information about an individual, it is possible to provide a health care-related information management system that provides incentives to individuals.

Brief Description of the Drawings

[0054]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Figure 26

Figure 27

Figure 28

Figure 29

Figure 30

Figure 31

Figure 32

Figure 33

Figure 34

Figure 35

Figure 36

Figure 37

Figure 38

Figure 39

Figure 40

Figure 41

Figure 42

Figure 43

Figure 44

[0055] FIG. 1 is a diagram showing the hardware configuration applied to the present invention. The present invention is an invention that principally uses an electronic computer, and can be realized by software, by hardware, or by the cooperation of software and hardware. The hardware that realizes all or part of each component of the present invention is composed of a CPU, memory, bus, input / output devices, various peripheral devices, a user interface, etc., which are the basic components of a computer. The various peripheral devices include storage devices, interfaces such as the Internet, Internet devices, displays, keyboards, mice, speakers, cameras, videos, TVs, various sensors for grasping the production status in a laboratory or factory (flow sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipping quantity counters, packing quantity counters, foreign object inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human sensors, operator work status grasping devices (by video, ID, PC workload, etc.)), CD devices, DVD devices, Blu-ray devices, USB memories, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, telephones, faxes, copiers, printing devices, movie editing devices, various sensor devices, etc. Also, this system does not necessarily have to be composed of a single housing, and may be composed of a plurality of housings connected by communication. Also, the communication may be LAN, WAN, Wifi, Bluetooth (registered trademark), infrared communication, ultrasonic communication, and furthermore, part of it may be installed across national borders. Furthermore, each of the plurality of housings may be operated by different entities, or may be operated by a single entity. Whether the operating entity of the system of the present invention is singular or plural does not matter. Also, in addition to this system, the invention can be constituted as a system including terminals used by third parties and further including systems including terminals used by other third parties. Also, these terminals may be installed across national borders. Furthermore, in addition to this system and the said terminals, devices used for registering related information of third parties and related persons, and devices used for databases for recording the contents of registration may be prepared. These may be provided in this system, or may be provided outside this system and configure this system so that these information can be utilized.

[0056] As shown in this figure, a computer is composed of a chipset, a CPU, non-volatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI (registered trademark), and LAN, a real-time clock, etc., which are configured on the motherboard. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), and for embedding in various devices such as cameras, microphones, speakers or headphones, and displays), and various programs. Various programs and various data constituting the present invention are configured to execute various processes by efficiently using these hardware resources. ≪Chipset≫

[0057] The "chipset" is a set of large-scale integrated circuits (LSIs) that are mounted on the motherboard of a computer and integrate the communication function, that is, the bridge function, between the external bus of the CPU and the standard bus connecting memory and peripheral devices. There are cases of adopting a two-chipset configuration and a one-chipset configuration. The north bridge is provided on the side closer to the CPU and the main memory, and the south bridge is provided on the side farther away and closer to the interface with relatively low-speed external I / O.

[0058] (North Bridge) The north bridge includes a CPU interface, a memory controller, and a graphics interface. Most of the functions of a conventional north bridge may be borne by the CPU. The north bridge is connected to the memory slot of the main memory via a memory bus, and is connected to the graphics card slot of the graphics card via a high-speed graphics bus (AGP, PCI Express).

[0059] (South Bridge) The South Bridge is connected to the PCI interface (PCI slot) via the PCI bus and is responsible for I / O functions such as the ATA (SATA) interface, USB interface, Ethernet interface, and sound functions. Incorporating circuits that support PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are incapable of high-speed operation, would act as a drag on the speed increase of the chipset itself. Therefore, it may be separated from the South Bridge chip and assigned to another LSI called a Super I / O chip. A bus is used to connect the CPU (MPU) to peripheral devices and various control units. The bus is connected by the chipset. The memory bus used for connection to the main memory may adopt a channel structure instead in order to achieve higher speed. As the bus, a serial bus or a parallel bus can be adopted. The parallel bus transfers the original data itself or a plurality of bits cut out from the original data as a single unit simultaneously over multiple communication paths, while the serial bus transfers data bit by bit. A dedicated line for the clock signal is provided in parallel with the data line to synchronize data demodulation on the receiving side. It is also used as a bus to connect the CPU (chipset) to external devices, such as GPIB, IDE / (parallel) ATA, SCSI, and PCI. Due to limitations in speed increase, in the improved version of PCI, PCI Express, and the improved version of parallel ATA, serial ATA, the data line may also be a serial bus.

[0060] ≪CPU≫

[0061] The CPU reads, interprets, and executes in sequence the instruction sequence called a program on the main memory, and outputs information consisting of signals to the main memory as well. The CPU functions as the center for performing calculations within the computer. Note that the CPU is composed of a CPU core part that is the center of the calculation and its peripheral parts, and includes registers, cache memory, an internal bus connecting the cache memory and the CPU core, a DMA controller, a timer, and an interface with a connection bus to the north bridge inside the CPU. Note that a single CPU (chip) may be equipped with multiple CPU cores. In addition to the CPU, processing may also be performed by a graphics interface (GPU) or an FPU. Note that the description in the embodiment is of a two-core type, but it is not limited to this. Also, a program can be built into the CPU.

[0062] <<Non-volatile memory>>

[0063] (HDD)

[0064] The basic structure of a hard disk drive is composed of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. The external interface can adopt SATA (ATA in the past). A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read a sector and transfer it to and write it to another hard disk drive. At this time, it does not access the memory of the host CPU. Therefore, the load on the CPU can be increased without.

[0065] <<Main memory>>

[0066] The CPU directly accesses and executes various programs on the main memory. The main memory is a volatile memory and DRAM is used. Programs on the main memory are expanded from the non-volatile memory to the main memory upon receiving the program startup instruction. Thereafter, the CPU executes the program according to various execution instructions and execution procedures within the program.

[0067] ≪Operating System (OS)≫

[0068] The operating system is used to manage the resources on the computer for applications to utilize, manage various device drivers, and manage the computer itself as hardware. In small computers, firmware may be used as the operating system.

[0069] ≪BIOS≫

[0070] BIOS causes the CPU to execute the procedures for starting up the computer's hardware and operating the operating system. Most typically, it is the hardware that the CPU first reads when receiving the computer startup instruction. The address of the operating system stored in the disk (non-volatile memory) is described here, and the operating system is sequentially expanded into the main memory by the BIOS expanded in the CPU and enters the operating state. Note that BIOS also has a check function for checking the presence or absence of various devices connected to the bus. The results of the check are stored on the main memory and are made available by the operating system as appropriate. Note that BIOS may be configured to check external devices and the like. The above is the same for all embodiments.

[0071] As shown in the figures, the present invention can basically be composed of a general-purpose computer program and various devices. The operation of the computer basically takes the form of loading a program recorded in a non-volatile memory into the main memory and executing processing with the main memory, CPU, and various devices. Communication with the devices is performed via an interface connected to a bus line. Examples of the interface include a display interface, keyboard, communication buffer, etc. Hereinafter, embodiments of the present invention will be described together with illustrated examples.

[0072] <Satisfaction of the availability of the natural law of the present invention>

[0073] The present invention functions through the cooperation of a computer, communication facilities, and software. Specifically, it relates to a health care-related information management system for accumulating and managing health care-related information, which is information related to an individual's health care. Through a network, various information and data are exchanged using hardware resources between third-party terminals and administrator terminals, etc. Therefore, from this perspective, if the present invention of the application is judged based on the matters described in the claims and the specification regarding resources such as a computer and the common technical knowledge related to those matters, the present invention of the application as a whole utilizes natural laws and also falls within the category of inventions related to computer software.

[0074] <Significance of the utilization of natural laws required by the Patent Law>

[0075] The utilization of natural laws required by the Patent Act means that, from the perspective that an invention must have industrial applicability and contribute to the development of industry based on the purpose of the law, it is required to ensure that the invention can be usefully utilized in industry. That is, it requires that the invention be useful in industry, that is, the effects of the invention declared at the time of application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the utilization of natural laws means that as long as the functions exerted by each of the invention-specific matters (invention constituent elements), which are the constitution of the invention for exerting the effects of the invention, are exerted by utilizing natural laws. Furthermore, the effects of an invention only need to have the possibility of providing a predetermined usefulness to the users who utilize the invention, and should not be viewed from the perspective of how the users feel or think about such usefulness. Therefore, even if the effects obtained by the users through this system are psychological effects, the effects themselves are events outside the scope of the required utilization of natural laws.

Embodiments for Implementing the Invention

[0076] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. The mutual relationship between the embodiments and the claims is as follows. Mainly, the description of Embodiment 1 relates to Claim 1, Claim 16, and Claim 31; the description of Embodiment 2 relates to Claim 2, Claim 17, and Claim 32; the description of Embodiment 3 relates to Claim 3, Claim 18, and Claim 33; the description of Embodiment 4 relates to Claim 4, Claim 19, and Claim 34; the description of Embodiment 5 relates to Claim 5, Claim 20, and Claim 35; the description of Embodiment 6 relates to Claim 6, Claim 21, and Claim 36; the description of Embodiment 7 relates to Claim 7, Claim 22, and Claim 37; the description of Embodiment 8 relates to Claim 8, Claim 23, and Claim 38; the description of Embodiment 9 relates to Claim 9, Claim 24, and Claim 39; the description of Embodiment 10 relates to Claim 10, Claim 25, and Claim 40. The present invention should not be limited to these embodiments, and can be implemented in various modes without departing from the gist thereof.

[0077] <Overall Configuration of the Health and Medical Related Information Management System of the Present Invention> FIG. 2 is a diagram showing an example of the overall configuration of the health and medical related information management system according to the present invention. The health and medical related information management system 200 includes a health and medical related information storage unit 201 that stores health and medical related information including any one or more of information such as electronic medical record information regarding an individual, various examination information (which may include health check-ups, medical examinations, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urinary protein, occult blood in urine, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on questionnaires, data of a health promotion app, conversation data of an interactive health promotion SNS, etc.; an access control unit 202 that controls the disclosure of the health and medical related information stored in the health and medical related information storage unit 201 to a third party via a network; an incentive management unit 203 that provides an incentive to an individual in order to promote the disclosure of the health and medical related information by referring to the provision history of the provision history holding unit 204 described later regarding whether or not to disclose the health and medical related information regarding the individual; and a provision history holding unit 204 that holds a provision history which is a history of providing an incentive to each individual.

[0078] Further, the health and medical related information management system 200 is configured to be electrically connectable to a third party terminal 206 and an administrator terminal 207 via a network 205 (for example, the Internet, WAN, LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (for example, a personal computer, a tablet terminal, a smartphone, etc.) that can be connected to the network 205 via a wired or wireless interface (for example, a communication cable, a WiFi router, etc.).

[0079] In the present invention, the term "third party" refers to an individual (including, but not limited to, the patient himself / herself, his / her family members, and / or caregivers, etc.), medical personnel and non-medical personnel described below, etc. The term "administrator" refers to a person who is responsible for managing and operating the entire health care-related information management system (for example, an individual, or an organization, group, or corporation to which the individual belongs may be included. In addition, employees of government agencies or local governments, or organizations, groups, or corporations entrusted by government agencies or local governments may be included). The administrator may have the authority to edit, add, or delete various types of information in the health care-related information management system.

[0080] For example, the "electronic medical record information" includes basic information about the patient (such as patient ID, name, date of birth, contact information, emergency contact information, family history, height / weight, allergy information, smoking and drinking status, past medical history, etc.), information related to diagnosis (such as the patient's chief complaint (reported symptoms such as subjective symptoms and physical condition), various test results, information about medications, diagnosis name, treatment plan, doctor's diagnosis record, doctor's instructions, etc.), information related to nursing and progress (such as vital signs information (including, but not limited to, at least body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (such as urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc.), observation results, records of urine and feces, records of diet content and intake amount, records of nursing care, etc.), information related to examinations (such as examination instructions, examination results, (partial) images obtained by imaging examinations, reports on those images, etc.), information related to treatments and surgeries (such as treatment and surgery instructions, progress and results of treatments and surgeries, and if a pathological diagnosis is performed, the method and diagnosis results, etc.), information related to medications (such as drug development instructions, dosing date and medications, results of dosing, etc.), and information on follow-up observations after treatment or surgery may also be included.

[0081] Also, for example, the "prescription information" may include the insurer number, name, date of birth, gender, name of the medical institution, contact information, name of the prescribing doctor, name of the medicine, form of the medicine (tablet, capsule, liquid, powder, granule, etc.), amount of the medicine (amount taken at a time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, and so on. Also, the "medical history information" may include, for example, the patient's name, date of birth, gender, My Number information or the symbol number of the insurance card, address, emergency contact information, name of the prescribed insurance medical institution and name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding the prescription details, etc., the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of the status of remaining medicine, changes in physical condition during medication, concomitant medications, information on the past medical history including complications, presence or absence of consultations with other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (interaction with drugs), patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the insurance pharmacist who provided the guidance, and so on.

[0082] Also, for example, the "medication status information" may include information regarding the remaining amount of the prescribed medicine (e.g., including the amount of medicine remaining when the patient forgets to take it by accident or when the patient intentionally does not take it), timing information regarding hospital / clinic visits (e.g., the period required from the scheduled prescription end date (scheduled medication end date) until the actual hospital / clinic visit (including cases where the patient visits the hospital / clinic earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (e.g., including subjective symptoms and physical condition complaints such as getting hives after continuing to take a certain medicine or feeling overly effective and dizzy after taking a certain medicine), and so on.

[0083] Also, for example, "healthcare-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained via an API from a PHR system or the like. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information related to an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information related to their own health, medical care, and nursing care in a chronological manner throughout their life and thereby receive excellent services tailored to their health status. For example, each individual citizen has hitherto recorded a great deal of health and medical information on paper media such as various notebooks and documents. Depending on the life stage (milestone in life) at that time, the medium and location where the records are kept differ. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", during the period of receiving school education, there is the "Results of School Health Examinations", at the time of employment, there are the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one manages one's own health using a "Disease Management Notebook" or a "Medication Notebook", etc., and in the elderly, it will be recorded in a "Nursing Prevention Notebook" or a "Family Doctor Referral Notebook". By digitizing such an existing "notebook culture" and integrating it as data, there is a concept and mechanism for self-management and utilization, and it is expected to become more widespread in the future.

[0084] In addition, in this invention, the description is based on the premise that the healthcare-related information storage unit 201 and the access control unit 202 function on the same server, but it is not limited to this, and they may be configured to perform functions and roles on separate servers. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the healthcare-related information storage unit 201 and the access control unit 202 may be configured as a cloud server.

[0085] Similarly, in the present invention, it is described on the premise that the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 function on separate servers. However, the present invention is not limited to this, and they may be configured to perform their respective functions and roles on the same server. Alternatively, a plurality of servers may be prepared, and information and data may be exchanged between these servers so that they can cooperate or collaborate to execute various functions. For example, the health care-related information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history holding unit 204 may be configured by cloud servers.

[0086] <Embodiment 1 (mainly corresponding to claims 1, 16, and 31)> <Overview of Embodiment 1> This embodiment provides a health care-related information management system including a health care-related information storage unit for storing and managing health care-related information about an individual, an access control unit for controlling disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network, an incentive management unit for providing an incentive to the individual to promote disclosure of the health care-related information by referring to the provision history of the provision history holding unit described later regarding whether to disclose the health care-related information about the individual, and a provision history holding unit for holding a provision history that is a history of providing an incentive to each individual. In addition, to realize this, a method executed by the CPU in the health care-related information management system which is a computer, and an operation program of the health care-related information management system described so as to be readable and executable by the health care-related information management system which is a computer are provided.

[0087] <Functional Configuration of Embodiment 1> FIG. 3 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 1. In this embodiment, a health care-related information storage unit, an access control unit, an incentive management unit, and a provision history holding unit are provided.

[0088] <Description of the configuration in Embodiment 1: Health and medical-related information storage unit> The "health and medical-related information storage unit" 201 is configured to have a function of storing health and medical-related information including any one or more of information such as electronic medical record information related to an individual, various examination information (which may include physical examinations, medical check-ups, etc.), prescription information, medication history information, medication status information, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), information on questionnaires, data of a health promotion app, conversation data of an interactive health promotion SNS, etc.

[0089] Here, the "electronic medical record information" includes, for example, basic information about a patient (for example, patient ID, name, date of birth, contact information, emergency contact information, family history, height / weight, allergy information, smoking and drinking status, medical history, etc.), information related to diagnosis (for example, the chief complaint of the patient (complaints such as subjective symptoms and physical condition), various examination results, information on medications, diagnosis name, treatment policy, medical records by a doctor, instructions from a doctor, etc.), information related to nursing and progress (for example, vital information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sound, urine measurement information (for example, urine sugar, urine protein, urine occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrite, etc.), sleep time, etc., and is not limited thereto), observation results, records of urine and feces, etc., records of diet content and intake amount, records of nursing care, etc.), information related to examinations (for example, examination instructions, examination results, (partial) images obtained by imaging examinations, reports on those images, etc.), information related to treatments and surgeries (for example, instructions for treatments and surgeries, progress and results of treatments and surgeries, when pathological diagnosis is performed, the method and diagnosis results, etc.), information related to medications (for example, instructions for drug development, dosing date and medications, results of dosing, etc.), follow-up observation information after treatment or surgery, etc. It is desirable that it is configured to include such information.

[0090] In addition, the "prescription information" preferably includes, for example, the insurer number, name, date of birth, gender, name of the medical institution, contact information, name of the prescribing doctor, name of the medicine, form of the medicine (tablet, capsule, liquid, powder, granule, etc.), amount of the medicine (amount taken at one time), number of times taken per day, timing of taking, information on changes to generic drugs, number of times of divided dispensing, etc.

[0091] In addition, the "medical history information" preferably includes, for example, the patient's name, date of birth, gender, My Number information or the symbol number of the insurance card, address, emergency contact information, name of the prescribing insurance medical institution and name of the insurance doctor, prescription date, prescription details, dispensing date, key points of inquiries regarding prescription details, etc., the patient's constitution, allergy history, side effect history, key points of consultations from the patient or their family, etc., medication status, confirmation of the status of remaining medicine, changes in physical condition during medication, concomitant medications, information on the past medical history including complications, presence or absence of consultations with other departments, presence or absence of symptoms suspected of being side effects, intake status of food and drink (drug interactions), patient's intention regarding the use of post-marketing drugs, status of information provision using a notebook, key points of medication guidance, name of the prescribing insurance pharmacist, etc.

[0092] In addition, the "medication status information" preferably includes information such as information on the remaining amount of the prescribed medicine (including, for example, the amount of medicine remaining when the patient forgets to take it or intentionally does not take it), timing information regarding hospital / clinic visits (including, for example, the period required from the scheduled prescription end date (scheduled medication end date) to the actual hospital / clinic visit (including cases where the visit is earlier or later than scheduled)), information regarding the patient's complaints about taking the medicine (including, for example, subjective symptoms and physical condition complaints such as hives appearing after taking a certain medicine or feeling overly effective and dizzy after taking a certain medicine). In the present invention, personal number (My Number) information or the insured person certificate number / symbol of the health insurance to which an individual (user) subscribes may be used as identification information for uniquely identifying an individual (user), and health care-related information regarding the individual may be associated therewith for storage and organization.

[0093] Also, for example, "health care-related information" may include a PHR or the like. Alternatively, it may include various types of information obtained via an API from a PHR system or the like. Here, PHR is an abbreviation formed from the initial letters of Personal Health Record and refers to information regarding an individual's health, medical care, and nursing care. The aim is to enable each individual to manage and utilize information regarding their own health, medical care, and nursing care in a chronological manner throughout their lifetime, so as to receive excellent services tailored to their health status. For example, each individual citizen has hitherto left records of a great deal of information regarding their health and medical care on various paper media such as notebooks and documents. Depending on the life stage (milestones in life) at that time, the media and locations where the records are left are different. For example, at the time of childbirth, there is the "Mother and Child Health Handbook", during the period of receiving school education, there is the "Results of School Health Examinations", at the time of employment, there are the "Results of Regular Health Examinations", etc. Also, depending on one's physical condition, one manages one's own health using a "Disease Management Handbook", "Medicine Handbook", etc., and in old age, it will be recorded in a "Care Prevention Handbook" or "Family Doctor Coordination Handbook". There is an idea and mechanism of digitizing such an original "handbook culture" and integrating it as data for personal management and utilization, and it is expected to become more widespread in the future.

[0094] <Embodiment 1 Explanation of Configuration: Access Control Unit> The "access control unit" 202 is configured to have a function for controlling the disclosure of the health care-related information stored in the health care-related information storage unit to a third party via a network. For example, as will be described later, it is desirable to be configured to have functions such as analyzing IP packets, determining the destination IP address, obtaining an access ID / user ID, obtaining the access subject / user attributes, and performing access control based on these for access from a third-party terminal.

[0095] <Embodiment 1: Description of Configuration - Incentive Management Unit> The "incentive management unit" 203 is configured to have a function of providing an incentive to an individual in order to promote the disclosure of health care-related information by referring to the provision history of the provision history holding unit described later regarding whether to disclose the individual's health care-related information. The operation of "for providing an incentive" includes operations such as actually providing an incentive using electronic data, etc., and operations for executing the necessary processing to transfer the separately performed act of actually providing the incentive to execution. FIG. 10 is a diagram showing the types of incentives. When providing points or electronic data such as information services as incentives, it is an operation for a computer to execute the necessary operations for that. When drugs / supplements, etc. are provided as incentives, for example, the processing operations for sending drugs or supplements to the disclosure person of health care-related information correspond. That is, since the "for... " operation is executed by the incentive management unit, it is not necessarily the incentive provision operation itself. FIG. 44 is a diagram showing an example of the user interface of the health care-related information management system in the present invention. In this case, information indicating whether or not the individual (user) who has accessed using a third-party terminal, that is, the individual (user) who owns the personal number (My Number) information "123456789012", consents to providing incentives for any health and medical-related information is stored and managed in a list format. If there is consent, the health and medical-related information is in a state where it is permitted to be disclosed to a third party, that is, in a state where an incentive is given. If there is no consent, the health and medical-related information is in a state where it is not disclosed to a third party, that is, in a state where an incentive is not given. It is desirable that the information regarding these incentives is regularly exchanged between the Incentive Management Department and the Health and Medical-Related Information Accumulation Department and the Provision History Retention Department described later, so as to always be kept in the latest state. For example, in the case of FIG. 44, it is stored and managed whether or not the individual has given consent for each piece of health and medical-related information. Here, the "〇" mark shown in the "Consent / Non-consent" column indicates the individual's intention to consent, and the "×" mark indicates the individual's intention not to consent. The input of the "〇" mark or "×" mark in the "Consent / Non-consent" column is preferably configured such that the individual (user) can select the "〇" mark or "×" mark according to their own intention, for example, in the form of a pull-down menu on the terminal screen. Here, when the display item (for example, "Regular Health Check Results", etc.) described in the "Health and Medical-Related Information" column is clicked, touched, or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when the "〇" mark or "×" mark in the "Consent / Non-consent" column is clicked, touched, or tapped on the terminal screen, the date and time of consent or non-consent may be displayed on a pop-up screen. In particular, for the health and medical-related information with a "〇" mark in the "Consent / Non-consent" column, it is preferably stored and managed in the Provision History Retention Department described later. Note that the health and medical-related information with no mark in the "Consent / Non-consent" column represents a state where the individual (user)'s intention of consent or non-consent has not been shown yet.

[0096] Figure 40 is a diagram showing the user interface of the health care-related information management system of the present invention. In this case, when an individual inputs personal number (My Number) information and password information in the corresponding fields and matching information exists in the system, the individual authentication is performed and access is permitted by the incentive management unit. In the case of this figure, the method of direct input of information by the user is described. However, for example, when the user uses a smartphone, the IC card reading function of the smartphone may be used to hold the My Number card in front of the smartphone to automatically read and input predetermined information such as personal number (My Number) information. In addition, for example, when the My Number information and / or password information fails to be input three times in a row, it may be locked and the user may go to the local government (such as a municipal office) to have the lock removed. Alternatively, it may be temporarily locked, and a notice such as "Please try again the next day." may be displayed on the terminal, or the user may be notified by voice or a warning sound. Also, it is desirable that it is stored and managed so that it can be easily determined whether an individual (user) has consented to which health care-related information. Furthermore, it is desirable that the incentive provision process is configured to process how much incentive is given to the health care-related information to which the user has consented.

[0097] For example, in the example of FIG. 44, when providing health and medical related information about one individual to one recipient, the minor points are calculated and given as 1000p (points) based on a predetermined calculation rule. Also, when there are two recipients for the same health and medical related information, the minor points are calculated and given as 2000p (points), which is twice the amount, based on a predetermined calculation rule. Regarding the calculation rule of incentives, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical related information, and different incentives may be calculated and given for each health and medical related information. In particular, for example, various infectious diseases defined in the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the leading cause of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye diseases with a large number of patients, and novel coronavirus infections, and specific diseases with few cases worldwide, considering that the health and medical related information can greatly contribute to the progress of medicine by being disclosed to a third party, it is conceivable to set the calculation rule so that the incentives are higher than those for other diseases.

[0098] Also, "incentive" simply means "motivation, reward", and it means intentionally stimulating something with the aim of causing a certain action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, individual information services or general information services for information providers, provision of individual drugs or supplements, provision of books and other goods, provision of passwords or IDs for information provision, provision of items available on the network, provision of rights, for example, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (such as a health management app or a pedometer app), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc. Further, the following may be included. Discounting of certain goods or services, for example, discounting or reduction of insurance premiums, and the discount rate of insurance premiums applies. Further, refund of paid fees, awarding of prizes (such as novelties), commendation or recognition, awarding of coupons, etc. may be included. Furthermore, there may be reward points, discounts, free goods, early access to new products, or limited sales. Further, the right to write reviews about brands, introduce friends, create user-generated content, etc. applies. Also, it may be an upgrade of goods or services.

[0099] In the present invention, in the case where public permission information indicating whether or not to permit disclosure to a third party has already been associated and stored and managed for health and medical related information regarding an individual, or in the case where an individual (user) newly registers health and medical related information concerning himself / herself in the health and medical related information storage section and the public permission information has not yet been associated and stored and managed, the present invention is applicable, that is, it is possible to provide an incentive. That is, although the health and medical related information management system does not hold health and medical related information regarding an individual, for example, when the health and medical related information of an individual is held in a terminal possessed by the individual and this is uploaded to the present system, if it is determined, by a formal check of the uploaded information, that the information is publicly available as health and medical related information, the incentive management section can be configured to function so as to grant an incentive according to the result. In this case, the access control section of the present system may be configured not to reject browsing access to health and medical related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualifications of the third party. Note that uploading the health and medical related information of an individual to the present system may be a transfer, and the transfer source may not be an individual's terminal but another system that stores other health and medical related information. For example, it can be configured such that health and medical related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to the present system with the consent of the individual. In this case, when the health and medical related information of an individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive management section can be configured to function.

[0100] Here, among the functions of the incentive management unit, the operations on the computer for "referring to... for providing" are, for example, processes such as executing operations for providing incentives if it is confirmed as a result of the reference that incentives have not been provided in the past, executing operations for providing incentives when it is determined that a predetermined period (time) has elapsed since the incentives were provided in the past as a result of the reference, executing operations for providing incentives when it is determined that the disclosure rate of health and medical related information has reached a certain value as a result of the reference, and executing operations for providing incentives when something that has been published but has not actually been viewed by anyone is viewed by someone (in this case, the incentive provision history and the viewing history of health and medical related information have the same meaning). Any one or more of these processes are included, but it is not limited to these.

[0101] Note that "promote disclosure" is synonymous with "promote revelation". And "disclosure" in the present invention means making all or part of health and medical related information, or processed / transformed information thereof, discloseable to others in some form (even if it is anonymous. However, in the case of a person who is managed and assisted by someone else such as a child, a person under guardianship, or a person requiring care, the person providing management and assistance is not included in others) (excluding oneself). It may be either the case where it is actually disclosed or the case where it is in a discloseable state but has not actually been disclosed. Examples of the disclosure destination include, but are not limited to, others belonging to medical institutions, medical related organizations, public institutions, pharmaceutical related companies, etc.

[0102] <Embodiment 1 Explanation of Configuration: Provision History Retention Unit> The "provision history retention unit" 204 is configured to have a function of retaining a provision history that is a history of providing incentives for each individual. The "provision history" refers to any one or more of the history of whether incentives are given, the history that specifies the content of the given incentives, the history that specifies the amount of the given incentives, etc. The time of provision may be associated, or only the fact of provision may be specified. Therefore, even a person who only has the fact of provision specified may be acceptable. In the case of a configuration where incentives are basically given for the provision of health care-related information, the incentive provision history is the same as the disclosure history of health care-related information. Therefore, the provision of incentives promotes disclosure by referring to the disclosure history of health care-related information, and the act of providing incentives is equivalent to referring to the provision history. Therefore, when the incentive management department refers to the disclosure history of health care-related information, in the present invention, it may be included in the case where the incentive management department refers to the provision history.

[0103] Regarding the method of providing incentives, various methods can be considered. For example, when an individual gives a public license for all of their personal health and medical related information, all health and medical related information associated with that individual identification information can be viewed by an institution or the like that has a predetermined source without limitation on the number of times. However, it can also be configured such that only one incentive is given once for each public license act, or a configuration can be considered where an incentive is given every time the permitted health and medical related information is viewed as a result of giving the public license. Also, since personal health and medical related information is usually divided into multiple items, a configuration can be adopted where an incentive is given according to the items viewed or used. Furthermore, a configuration can be taken where an incentive is given according to the number of times of viewing and using for each item. Incidentally, the items in the context of health and medical related information can be considered to be various itemizations such as for each disease onset, each examination, each prescription issuance, each disease type, each generation of drug history information, each acquisition of taking information, etc. Also, a configuration can be considered where an incentive is given according to the depth of disclosure of health and medical related information. The depth of disclosure referred to here means, for example, when only the disease name is disclosed, when the name, usage, and dosage of the drug prescribed for that disease are further disclosed, when the result of taking that drug (for example, improvement of symptoms or onset of side effects) is further disclosed, when what the patient felt about that drug is further disclosed, etc. As it gradually becomes deeper, it can be configured to give more or qualitatively higher incentives.

[0104] Next, the incentive granting processing flow will be described. Incentive information is electronically processed by the incentive management department or the incentive output department or the incentive processing department that cooperates with this so that some benefit occurs to the individual who is the patient. Note that this electronic processing may be the incentive granting itself or may be the pre-stage processing for incentive granting. The granting of incentives is triggered by the acceptance of information that all or part of the health care-related information, or the processed / transformed information thereof, is permitted to be disclosed by an individual such as a patient. This trigger may originate from the terminal used by the individual, for example, a smartphone, or may originate from the terminal of a medical institution or the like. For example, in the case of a smartphone, an application that can view or edit the individual's health care-related information within a certain range is installed on the smartphone. Using this application as an entry point, the present invention system is accessed, and the disclosure permission operation of the individual's health care-related information is executed by entering through the disclosure portal of the health care-related information.

[0105] In addition, instead of the application, it can also be configured such that the same operation can be performed by accessing the web. Also, this access must be strictly managed for security. For example, it is preferably configured such that public permission can be obtained using a one-time password. In this case, the health care-related information management system may be a so-called PHR, or a system that cooperates with the PHR. Also, this system may be configured to manage the disclosure of health care-related information of all citizens alone, or may be configured such that a plurality of similar systems are juxtaposed to manage the disclosure of health care-related information held in the PHR. In addition, the case where the trigger is initiated from the terminal of a medical institution refers to the case where a medical staff member or the like who is interviewing a patient as an individual obtains the patient's permission to initiate the trigger. In that case, it is preferably configured to borrow a health insurance card, a personal number (My Number) card, or a proof equivalent thereto from the patient and use the borrowed proof to initiate the trigger. The medical institutions referred to here may include nursing facilities, pharmacies (including dispensing pharmacies), and other welfare facilities. Also, this may be a medical institution accessed on the Internet. Furthermore, it can also be configured such that a terminal used by a predetermined management server of a pharmaceutical company, a public research institution, or the like can initiate the trigger. Of course, the authentication of an individual such as a patient is a prerequisite.

[0106] FIG. 6 is a diagram showing an example of the provision history holding unit of the health care-related information management system in the present embodiment. As shown in this figure, it can be seen that the provision history is held and managed separately for each individual, for Mr. X with personal number (My Number) information "123456789012" and Mr. Y with personal number (My Number) information "456789012345". For example, for Mr. X with personal number (My Number) information "123456789012", the "Regular Health Check Result (Hospital A)", which is health care-related information with ID "0001", was provided to "Dr. Suzuki (Hospital B)" as the recipient on the provision date and time "2023 / 04 / 01", and the history of providing "1000 My Points" as an incentive is held and managed. Similarly, for other health care-related information, the history of providing incentives for each individual is held and managed.

[0107] <Embodiment 1 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in the present embodiment will be described with reference to the drawings.

[0108] FIG. 4 is a diagram showing the hardware configuration of the health care-related information management system in the present embodiment. As shown in this figure, the health care-related information management system in the present embodiment includes a "CPU (Central Processing Unit)" 401 that performs various arithmetic processes, and a "main memory" 402. It also includes a "non-volatile memory" 403 that holds predetermined information, a "network I / F (Interface)" 404 that transmits and receives information with a plurality of third-party terminals 406 and an administrator terminal 407. And they are interconnected by a data communication path such as a "bus" 405 to transmit, receive, and process information.

[0109] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area which is also the working area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing. In the present embodiment, the programs stored in the "main memory" are a health care-related information accumulation program, an access control program, an incentive management program, a provision history retention program, and the like. Also, health care-related information, incentive management information, provision history information, etc. are stored in the "main memory" and "non-volatile memory".

[0110] The "CPU" executes the health care-related information accumulation program stored in the "main memory", and stores health care-related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.) in the "main memory" or "non-volatile memory" through the "network I / F". Also, it executes the access control program stored in the "main memory" to control access to health care-related information about an individual. Also, it executes the incentive management program stored in the "main memory" to provide and manage incentives to an individual in order to encourage the disclosure of health care-related information by referring to the provision history information regarding the approval or disapproval of the disclosure of health care-related information about an individual. Also, it executes the provision history retention program stored in the "main memory" to store the provision history information, which is the history of providing incentives, in the "main memory" or "non-volatile memory".

[0111] <Embodiment 1 Health Care-Related Information Management System: Flow of Processing> FIG. 5 is a diagram showing the processing flow when using the health and medical related information management system according to the present embodiment. As shown in the figure, it is a processing method including a health and medical related information accumulation step S501, an access control step S502, an incentive management step S503, and a provision history retention step S504.

[0112] The "health and medical related information accumulation step" S501 is a stage of accumulating health and medical related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0113] The "access control step" S502 is a stage of controlling access to the health and medical related information about an individual accumulated in the health and medical related information accumulation step.

[0114] The "incentive management step" S503 is a stage of providing an incentive to an individual in order to promote the disclosure of health and medical related information by referring to the provision history retained in the provision history retention step described later regarding whether to disclose the health and medical related information about the individual.

[0115] The "provision history retention step" S504 is a stage of retaining the provision history, which is the history of providing incentives for each individual.

[0116] <Summary> As described above, in the present invention, it is possible to provide a health and medical related information management system that provides an incentive to an individual in order to promote the disclosure of health and medical related information about the individual by referring to the provision history, which is the history of providing incentives for each individual, regarding whether to disclose the health and medical related information. In addition, in the present invention, by providing incentives to individuals and adopting a structure that allows the disclosure of personal health and medical-related information to third parties upon permission, it leads to an increase in the opportunities for individuals to disclose their health and medical-related information to third parties, which can contribute to reducing the overall medical expenses of the country, improving the health of the entire nation, or reducing the time and costs spent on drug discovery by research institutions, pharmaceutical companies, etc. Ultimately, it can also contribute to the progress of medicine. Here, "drug discovery" refers to the process from when the compound or chemical substance (also called a lead) that serves as the basis for a pharmaceutical product is developed until it is sold as a product. In addition, the following steps (1) to (5) are essential for a compound or chemical substance to be sold as a pharmaceutical product. (1) Select candidates for drug discovery targets (compounds or chemical substances) (2) Select candidate substances that can be the basis for pharmaceutical products by screening their effects There are various types of screening, such as high-efficiency screening that utilizes biotechnology techniques, combinatorial chemistry (a technique for creating a large number of combinations of compounds), and AI robot technology. (3) Animal experiments Use animals or cultured cells to investigate and confirm details such as safety and efficacy in detail. Drugs that have been confirmed to be safe and effective at this stage are called "investigational drugs." (4) Clinical trials Actually use the investigational drug on humans, examine its effects and safety in detail, and confirm whether it is useful for actual treatment. (5) Approval application and review Apply to the Ministry of Health, Labour and Welfare for drugs that have passed all the above inspections (1) to (4). Then, undergo a review by the Pharmaceuticals and Medical Devices Agency and wait for approval from the Minister of Health, Labour and Welfare. Only after approval can a pharmaceutical product that can be sold as a product be born. Generally, the period for drug discovery is said to be about 10 to 18 years, and the probability of a compound or chemical substance becoming a new drug is about 1 in 10,000. Also, the total cost required until drug discovery is successful is said to be nearly 20 billion yen.

[0117] <Embodiment 2 (mainly corresponding to Claim 2, Claim 17, and Claim 32)> <Overview of Embodiment 2> This embodiment has an incentive type information holding unit that holds incentive type information which is information indicating types of a plurality of incentives. The incentive management unit is characterized in that it selects and provides an incentive to be provided to an individual based on the provision history according to the incentive type information held in the incentive type information holding unit. Hereinafter, the functions, hardware configurations, and processing flows that overlap with those of Embodiment 1 will be omitted from the description as appropriate.

[0118] <Explanation of Configuration in Embodiment 2: Incentive Type Information Holding Unit> FIG. 7 is a diagram showing a functional configuration of a health care related information management system in this embodiment. The "incentive type information holding unit" 701 is configured to have a function of holding incentive type information which is information indicating types of a plurality of incentives. FIG. 10 is a diagram showing an example of an incentive type information holding unit of a health care related information management system in this embodiment. As shown in this figure, incentive type information and specific incentives related to the incentive type information are associated and held and managed. For example, when the incentive type information is "(A) Points", as specific examples of incentives, "(a) Minor points, (b) Transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) Distribution electronic money (WAON (registered trademark), nanaco (registered trademark), etc.)" etc. are held and managed. Similarly, for other incentive type information, specific examples of incentives are listed and held and managed. When an individual (user) provides his or her own health care related information to an appropriate destination, it becomes possible to select any incentive based on this incentive type information.

[0119] <Explanation of Configuration in Embodiment 2: Incentive Management Unit Features Specific to Embodiment 2> The selection made by the Incentive Management Department can be divided into two cases: one is when the computer (configured by a program) that constitutes the Incentive Management Department automatically makes the selection, and the other is when the Incentive Management Department makes the selection based on the selection actions of the provider of health care-related information (in most cases, the owner of the health care-related information, but in the case where the person is under some form of management such as a child, it may be the manager). In the latter case, the computer will accept the selection action of the person and execute the selection based on that action. As for the case where the computer automatically makes the selection, for example, when providing information on the results of drug administration owned by the owner of health care-related information to a pharmaceutical manufacturer, it can be configured such that the incentive provided by the pharmaceutical manufacturer is automatically selected by the Incentive Management Department. Also, when the provider of health care-related information resides in Aomori Prefecture, it is conceivable to automatically select incentives that are only valid in Aomori Prefecture. In this way, the automatic selection can be configured to be automatically performed based on the content of the provided health care-related information, the attribute information of the owner of the health care-related information, and so on.

[0120] Whether it is an automatic selection or a selection based on the selection made by the owner (provider) of the health care-related information, the Incentive Management Department is configured to make the selection by using the selection rule. This selection rule may be configured to be held in the selection rule holding means inside the Incentive Management Department, or it may be configured to make the selection by using the selection rule held outside the Incentive Management Department or outside this system. Also, the selection rule may be configured to be appropriately optimized (not necessarily optimally, including the simple meaning of being changed) according to the provision history of the owner (provider) of the health care-related information and the public disclosure history of the health care-related information. For example, it may be configured to be changed by an artificial intelligence for editing or the like. In addition, a selection rule editing unit may be provided so that this rule can be edited by the operation of the administrator of this system or the like. The incentive management department can select and provide incentives to an individual based on the incentive type information held in the incentive type information holding department according to the above-described provision history. That is, it is configured to select and provide incentive type information. FIG. 11 is a diagram showing an example of the incentive management department of the health care-related information management system in the present embodiment. As shown in this figure, by an individual (user) selecting incentive type information or the incentive management department automatically selecting it, it becomes possible to select and provide a specific incentive. For example, in the case of Mr. Y, in addition to "points (negative points and PASMO (registered trademark))", it can be seen that "software / app" and "cash" etc. are selected and provided.

[0121] In addition, when the incentive management department selects and provides an incentive based on the incentive type information, the following cases are assumed for the processing until the specific use of the incentive.

[0122] For example, when "points" are selected as the incentive, the following cases can be considered. First, when the incentive is "negative points", the incentive management department in this system triggers by sending information about personal identification information (such as personal numbers (My Number), etc.) and information about the points to be awarded to the management server owned by the organization that manages and operates the My Portal site. In the said server, the points associated with the personal identification information of the negative points associated with the personal identification information are incremented by the amount of the points to be awarded. That is, based on this trigger information, the management server owned by the organization that manages and operates the My Portal site awards negative points to the individual corresponding to the personal identification information, and notifies the terminal (such as a smartphone, etc.) used by the individual of the information regarding the increment of the negative points, so that the negative points including the increment can be used. Then, by exchanging these negative points for points of other transportation / distribution system electronic money, the individual can purchase the products he desires or pay as the consideration for various desired services.

[0123] Second, when the incentive is a "prepaid card", it becomes possible to purchase products on AMAZON (registered trademark), etc. using a prepaid card purchased at a convenience store, etc. (for example, an amount corresponding to the purchase price is set, and identification information for identifying this card is also given).

[0124] Also, for example, when "drug / supplement" is selected as an incentive, the incentive management unit in this system transmits information including personal identification information and its attribute information (for example, personal number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) and information for identifying the product to be purchased (for example, product name such as "Supplement ABC", manufacturer / seller information, price information, etc.) via a network to a management server managed and operated on a purchase site such as AMAZON (registered trademark), thereby triggering an event. Then, if there is stock of the designated product on the management server of AMAZON (registered trademark), the home delivery service provider will deliver the product to the home.

[0125] Also, for example, when "right provision" is selected as an incentive, the incentive management unit in this system transmits personal identification information and its attribute information (for example, personal number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) and information for identifying the desired right (for example, identification number indicating an admission ticket to DISNEYLAND (registered trademark)) via a network to a management server owned by an organization that manages and operates the right provision, thereby triggering an event. Then, in response to this trigger, the management server transmits a QR code (registered trademark) that serves as an admission ticket to DISNEYLAND (registered trademark) to the smartphone used by the individual. Then, the individual who saves the QR code (registered trademark) on the smartphone goes to DISNEYLAND (registered trademark), which is the right execution agency, and holds the QR code (registered trademark) in front of a reader at the admission counter. If there is no problem, the individual can enter DISNEYLAND (registered trademark) and enjoy various attractions and meals.

[0126] <Embodiment 2: Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0127] FIG. 8 is a diagram showing the hardware configuration of the health care related information management system according to the present embodiment. As shown in this figure, the health care related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 801 that performs various arithmetic processes, and a "main memory" 802. Further, it includes a "non-volatile memory" 803 that holds predetermined information, and a "network I / F (Interface)" 804 that transmits and receives information with a plurality of third-party terminals 806 and an administrator terminal 807. And they are mutually connected by a data communication path such as a "bus" 805 to transmit, receive, and process information.

[0128] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses and perform processes. In the present embodiment, the program stored in the "main memory" is an incentive type information holding program. Also, incentive type information, incentive management information, etc. are stored in the "main memory" and "non-volatile memory".

[0129] The "CPU" executes the incentive type information holding program stored in the "main memory" to hold incentive type information, which is information indicating types of a plurality of incentives, and stores the incentive type information and related incentive management information in the "main memory" and "non-volatile memory".

[0130] <Embodiment 2 Health Care Related Information Management System: Processing Flow> FIG. 9 is a diagram showing the processing flow when the health care related information management system according to the present embodiment is used. As shown in the figure, it is a processing method consisting of an access authentication processing step S901.

[0131] The "Incentive Type Information Retention Step" S901 is a step of retaining incentive type information which is information indicating types of a plurality of incentives.

[0132] <Summary> As described above, in the present invention, there is an incentive type information retention unit that retains incentive type information which is information indicating types of a plurality of incentives, and the incentive management unit can select and provide an incentive to be provided to an individual based on the incentive type information retained in the incentive type information retention unit according to the provision history.

[0133] <Embodiment 3 (mainly corresponding to Claim 3, Claim 18, and Claim 33)> <Outline of Embodiment 3> This embodiment includes an end request reception unit that receives an end request which is a request to stop or end the disclosure of already disclosed health care related information from an individual who has stored health care related information in the health care related information storage unit, an end condition retention unit that retains an end condition which is a condition for determining whether it may be ended based on information about the individual who made this end request when the end request is received, a determination rule retention unit that retains a determination rule which is a rule for determining whether to end the disclosure of health care related information based on information about the individual who made the end request and the retained end condition, an end determination unit that determines whether to end based on the information about the individual, the retained end condition, and the retained determination rule when the end request is received, and an end control unit that controls the access control unit to end the disclosure of the health care related information of the individual when the determination result in the end determination unit is a determination result that it should end. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiment 1 and Embodiment 2 will be omitted as appropriate.

[0134] <Explanation of the Configuration of Embodiment 3: End Request Reception Unit> FIG. 12 is a diagram showing a functional configuration of a health care related information management system in this embodiment. The "Termination Request Reception Unit" 1201 is configured to have a function of receiving a termination request which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has accumulated health care-related information in the Health Care-Related Information Accumulation Unit. For example, on the login screen of the health care-related information management system shown in FIG. 40, when an individual (user) uses a third-party terminal to input their personal number (My Number) information and password information, and if there is matching information on the system side, authentication of the individual is performed. By accessing the Incentive Management Unit and the Provision History Retention Unit, it becomes possible to view whether their own health care-related information has been disclosed, who the disclosure destination is, what type of incentive it is, and what the specific incentive is. Also, for example, on the viewing screen shown in FIG. 44, it is desirable to be configured such that, based on the intention of the individual, a termination request to request the system side to stop or end the disclosure of desired health care-related information from among the already disclosed health care-related information is transmitted from a third-party terminal, and the system side receives this termination request.

[0135] <Embodiment 3 Explanation of Configuration: Termination Condition Retention Unit> The "Termination Condition Retention Unit" 1202 is configured to have a function of retaining a termination condition which is a condition for determining whether it is possible to end based on information regarding the individual who made this termination request when the termination request is received. For example, the following cases can be considered as termination conditions. However, it is not necessarily limited to these cases. (1) When the disease has been completely cured / fully recovered / remitted · When an individual (user)'s illness or injury is "completely cured" (which means the illness or injury is completely healed. In other words, it means returning to the state before getting the illness or injury), or "fully recovered" (which means the treatment for the illness or injury is no longer necessary and the individual can lead a normal daily life without problems. However, it does not necessarily mean returning to the state before getting the illness or injury), or "in remission" (which means the illness or injury temporarily or continuously improves. This term is often used for diseases with a possibility of recurrence such as cancer and leukemia. It refers to a state where symptoms are suppressed and continued treatment or regular examinations may still be required), and is recognized as such, the individual can, at their own will, stop or end the disclosure of their personal health care-related information related to this disease. (2) When the individual (user) moves to a new residence (moves house) · When the individual (user) moves to a new residence (moves house) due to, for example, changing jobs or being transferred, and as a result, the attending physician (primary care physician) who has been treating their illness or injury changes, the individual can, at their own will, stop or end the disclosure of their personal health care-related information. (3) When the attending physician (primary care physician) changes · When the attending physician (primary care physician) who has been treating the individual's illness or injury changes due to, for example, the merger or dissolution of a medical institution such as a hospital, or the individual transfers or moves to another hospital, the individual can, at their own will, stop or end the disclosure of their personal health care-related information.

[0136] <Embodiment 3 Explanation of the Configuration: Judgment Rule Retention Unit> The "judgment rule retention unit" 1203 is configured to have a function of retaining a judgment rule, which is a rule for determining whether to end the disclosure of health care-related information based on the information about the individual who has requested termination and the retained termination conditions. For example, based on information indicating that an individual's (user's) illness has been completely cured through the treatment and medication of the attending physician, and the end conditions held in the above-described end condition holding unit, for example, the above-described condition (1), it is desirable to formulate a judgment rule for determining whether to end the disclosure of health care-related information. In this case, regarding the health care-related information about the illness, since it is determined that the illness has been completely cured, it is expected that the significance and need for disclosure to third parties will be low. Therefore, it is preferable to end the disclosure as a judgment rule. Also, when the attending physician of the medical institution (hospital, clinic, etc.) in charge of the individual (user) changes, the significance of disclosing the health care-related information to the original physician disappears. Therefore, it is still preferable to end the disclosure as a judgment rule. However, for the newly assigned attending physician, it is essential to disclose the individual's health care-related information for formulating treatment and medication policies. Therefore, it is desirable to continue the disclosure without ending it as a judgment rule.

[0137] <Embodiment 3 Explanation of Configuration: End Judgment Unit> When an end request is received, the "end judgment unit" 1203 is configured to have a function of determining whether to end based on the information about the individual, the held end conditions, and the held judgment rules. For example, based on the information in the electronic medical record indicating that an individual's illness or injury has been completely cured, the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, it can be determined that the disclosure of the individual's health care-related information should be ended. Also, for example, based on the information in the electronic medical record indicating that an individual's illness (e.g., cancer, etc.) has entered remission, the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), and the above-described judgment rule, if it is considered that the individual has a high likelihood of recurrence due to their constitution, it can be determined that the disclosure of the individual's health care-related information should not be ended. Furthermore, for example, based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances, the end conditions held in the above-described end condition holding unit (in this case, the above condition (2) or the above condition (3)), and the above-described judgment rules, it can be determined that the disclosure of the individual's health and medical-related information should be terminated.

[0138] <Embodiment 3 Explanation of Configuration: End Control Unit> The "end control unit" 1204 is configured to have a function of controlling the access control unit to terminate the disclosure of the individual's health and medical-related information when the judgment result in the end judgment unit is a judgment result that it should be terminated. For example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, when it is determined that the disclosure of the individual's health and medical-related information should be terminated based on the information in the electronic medical record indicating that the individual's illness or injury has been completely cured and the end conditions held in the above-described end condition holding unit (in this case, the above condition (1)), the end control unit can send a control signal to the access control unit to control the access control unit to terminate the disclosure of the individual's health and medical-related information. Also, for example, when the judgment result in the above-described end judgment unit is a judgment result that it should be terminated, that is, when it is determined that the disclosure of the individual's health and medical-related information should be terminated based on the information in the electronic medical record indicating that the attending physician (primary care physician) who has been treating the individual's illness or injury has changed due to various circumstances and the end conditions held in the above-described end condition holding unit (in this case, the above condition (2) or the above condition (3)), the end control unit can send a control signal indicating the judgment result to the access control unit to control the access control unit to terminate the disclosure of the individual's health and medical-related information.

[0139] In addition, in relation to the above-described "judgment rule holding unit", for example, a "judgment rule changing unit" may be further provided that appropriately changes the judgment rule based on, for example, the number or ratio of times the disclosure permission of health care-related information about an individual has been given, or the number or ratio of times an incentive has been received. In this case, the judgment rule may be automatically changed within this system, or may be manually changed from a terminal used by the individual or administrator of this system as the target.

[0140] <Embodiment 3 Health Care-Related Information Management System: Hardware Configuration> The hardware configuration of the health care-related information management system in this embodiment will be described with reference to the drawings.

[0141] FIG. 13 is a diagram showing the hardware configuration of the health care-related information management system in this embodiment. As shown in this figure, the health care-related information management system in this embodiment includes a "CPU (Central Processing Unit)" 1301 that performs various arithmetic processes, and a "main memory" 1302. In addition, it includes a "non-volatile memory" 1303 that holds predetermined information, and a "network I / F (Interface)" 1304 that transmits and receives information with a plurality of third-party terminals 1306 and an administrator terminal 1307. And they are interconnected by a data communication path such as a "bus" 1305 to transmit, receive, and process information.

[0142] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area which is also the working area of the program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, making it possible to perform processing. In the present embodiment, the programs stored in the "main memory" are an end request reception program, an end condition holding program, a judgment rule holding program, an end judgment program, an end control program, and the like. Also, end request information, end condition information, judgment rules, end judgment information, end control information, and the like are stored in the "main memory" and the "non-volatile memory".

[0143] The "CPU" executes the termination request reception program stored in the "main memory", and through the "network I / F", receives a termination request, which is a request to stop or end the disclosure of already publicly disclosed health and medical related information of an individual (user) sent from a third-party terminal, and stores the termination request information in the "main memory" or the "non-volatile memory". Also, the "CPU" executes the termination condition holding program stored in the "main memory", and when a termination request is received, holds the termination condition, which is a condition for determining whether it is possible to end based on the information about the individual who made this termination request, and stores the termination condition information in the "main memory" or the "non-volatile memory". Also, the "CPU" executes the judgment rule holding program stored in the "main memory", and holds the judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on the information about the individual who made the termination request and the held termination condition, and stores it in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the termination judgment program stored in the "main memory", and when a termination request is received, determines whether to end based on the information about that individual and the held termination condition, and stores the termination judgment information in the "main memory" or the "non-volatile memory". Also, the "CPU" executes the termination control program stored in the "main memory", and when the judgment result in the termination judgment program is a result that it should end, controls the access control unit to end the disclosure of the health and medical related information of that individual, and stores the termination control information in the "main memory" or the "non-volatile memory".

[0144] <Embodiment 3 Health and Medical Related Information Management System: Processing Flow> FIG. 14 is a diagram showing the processing flow when using the health and medical related information management system in this embodiment. As shown in the figure, it is a processing method consisting of a termination request reception step S1401, a termination condition holding step S1402, a judgment rule holding step S1403, a termination judgment step S1404, and a termination control step S1405.

[0145] The "End Request Reception Step" S1401 is a step of receiving an end request, which is a request to stop or end the disclosure of health and medical related information that has already been disclosed by an individual (user) sent from a third-party terminal.

[0146] The "End Condition Retention Step" S1402 is a step of retaining an end condition, which is a condition for determining whether it is possible to end based on information about the individual who made this end request when the end request is received.

[0147] The "Judgment Rule Retention Step" S1403 is a step of retaining a judgment rule, which is a rule for determining whether to end the disclosure of health and medical related information based on information about the individual who made the end request and the retained end condition.

[0148] The "End Judgment Step" S1404 is a step of determining whether to end based on information about the individual, the retained end condition, and the retained judgment rule when the end request is received.

[0149] The "End Control Step" S1405 is a step of controlling the access control unit to end the disclosure of the individual's health and medical related information when the judgment result in the end judgment step S1404 is a judgment result that it should end.

[0150] <Summary> As described above, in the present invention, an individual (user) can stop or end the disclosure of health and medical related information that has already been disclosed according to his or her own will.

[0151] <Embodiment 4 (mainly corresponding to Claim 4, Claim 19, and Claim 34)> <Outline of Embodiment 4> In addition to Embodiments 1 to 3, this embodiment is characterized in that it includes an access authentication processing unit that performs authentication for accessing the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 3 will be omitted as appropriate.

[0152] <Embodiment 4: Description of Configuration - Access Authentication Processing Unit> FIG. 15 is a diagram showing the functional configuration of a health - care related information management system. As shown in this figure, the "Access Authentication Processing Unit" 1501 is configured to have a function of performing authentication for an individual to access the Incentive Management Unit. For example, FIG. 40 is a diagram showing an example of a user interface in the health - care related information management system of the present invention. Here, it is assumed that a third - party terminal uses a web browser to access the health - care related information management system. On this login screen, when a user (individual) enters his / her personal number (My Number) information and password information in the corresponding fields and matching information exists in the system, authentication of the person is performed and access is permitted. In the example of the figure, the form in which the user directly enters information is described. However, for example, when the user uses a smartphone, a form may be adopted in which the IC card reading function of the smartphone is used to hold the My Number card over the smartphone to automatically read and input predetermined information such as personal number (My Number) information. In addition, for example, when the personal number (My Number) information and / or password information fails to be entered successfully three times in a row, it may be set in a locked state and the user may go to the local government (such as a municipal office) to have the lock removed. Alternatively, it may be temporarily set in a locked state, and a reminder such as "Please try again the next day." may be displayed on the terminal, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Health - Care Related Information Management System - Hardware Configuration> The hardware configuration of the health - care related information management system in this embodiment will be described with reference to the drawings.

[0154] FIG. 16 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 1601 that performs various arithmetic processes, and a "main memory" 1602. Further, it includes a "non-volatile memory" 1603 that holds predetermined information, and a "network I / F (Interface)" 1604 that transmits and receives information with a plurality of third-party terminals 1606 and an administrator terminal 1607. And they are mutually connected by a data communication path such as a "bus" 1605 to transmit, receive, and process information.

[0155] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. Also, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processes. In the present embodiment, the program stored in the "main memory" is an access authentication processing program. Also, personal number (My Number) information, password information, etc. are stored in the "main memory" and "non-volatile memory".

[0156] The "CPU" executes the access authentication processing program stored in the "main memory", accepts the input of personal number (My Number) information and password information sent from a third-party terminal through the "network I / F", authenticates whether matching information exists on the system side, and stores the input personal number (My Number) information and password information in the "main memory" and "non-volatile memory".

[0157] <Embodiment 4 Health Care-Related Information Management System: Processing Flow> FIG. 17 is a diagram showing the flow of processing when using the health care-related information management system according to the present embodiment. As shown in the figure, it is a processing method consisting of an access authentication processing step S1701.

[0158] The "access authentication processing step" S1701 is a stage in which personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal are received, and authentication for accessing the incentive management unit is performed.

[0159] <Summary> As described above, in the present invention, by performing access authentication first on the login screen of the health care-related information management system, access to information related to incentives can be restricted to the individual (user) himself / herself.

[0160] <Embodiment 5 (mainly corresponding to claims 5, 20, and 35)> <Outline of Embodiment 5> In addition to Embodiments 1 to 4, the present embodiment is characterized in that it includes a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 4 will be omitted as appropriate.

[0161] <Explanation of the Configuration of Embodiment 5: Consent Information Acquisition Unit> FIG. 18 is a diagram showing the functional configuration of the health care-related information management system of the present embodiment. As shown in this figure, the "consent information acquisition unit" 1802 is configured to have a function of acquiring consent information, which is information indicating consent to receive an incentive by the incentive management unit, after being authenticated by the access authentication processing unit 1801. FIG. 41 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields, and matching information exists in the system for access authentication, the system proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent Process", the system transitions to a screen for obtaining the consent of the individual (user). Figure 42 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to prepare a user interface such as a pull-down menu format in the "Consent / Disapproval" field, and by clicking, touching, or tapping it, for example, either a "〇" mark or a "×" mark is input to receive the consent or disapproval intention of whether to accept the incentive of the individual (user). By clicking, touching, or tapping the OK button, the input consent information is sent to the incentive management department for retention and management. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of Figure 41.

[0162] Figure 40 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, after an individual (user) enters their personal number (My Number) information and password information in the corresponding fields, and matching information exists in the system for access authentication, the system moves to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Browsing Process", the system transitions to a screen where the relationship between the health and medical related information of the individual (user) and the incentives granted can be viewed. Figure 43 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the incentives granted accordingly in an easy-to-understand list format or the like. This makes it immediately clear which health and medical related information the incentives granted at the time of viewing are associated with. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41. FIG. 40 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, after the individual (user) inputs their My Number information and password information into the corresponding fields and access authentication is performed when the matching information exists in the system, they move to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", a screen is displayed that shows the health and medical related information about the individual (user) for which consent / non-consent has not yet been given, as well as the health and medical related information for which consent / non-consent has already been given. FIG. 44 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the corresponding consent and non-consent statuses in an easy-to-understand list format or the like. As a result, for the health and medical related information for which consent / non-consent has not yet been given at the time of viewing, the individual (user) prepares a user interface in the form of a pull-down menu, enters a "〇" mark in the "Consent / Non-consent" column, and clicks, touches, or taps the OK button to process the granting of incentives and the like. On the other hand, for the health and medical related information for which a "〇" mark or "×" mark has already been entered in the "Consent / Non-consent" column, the individual (user) can review it as appropriate and, for example, change from consent to non-consent or from non-consent to consent, and click, touch, or tap the OK button to enable update processing. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0163] <Embodiment 5: Hardware Configuration of Health and Medical Information Management System> The hardware configuration of the health and medical information management system in this embodiment will be described with reference to the drawings.

[0164] FIG. 19 is a diagram showing the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 1901 that performs various arithmetic processes, and a "main memory" 1902. It also includes a "non-volatile memory" 1903 that holds predetermined information, and a "network I / F (Interface)" 1904 that transmits and receives information with a plurality of third-party terminals 1906 and an administrator terminal 1907. And they are interconnected by a data communication path such as a "bus" 1905 to transmit, receive, and process information.

[0165] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU", and at the same time provides a work area that is also the work area of the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, making it possible to perform processing. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. In addition, my number information, password information, consent information, etc. are stored in the "main memory" and "non-volatile memory".

[0166] The "CPU" executes the access authentication processing program stored in the "main memory", accepts the input of personal number (my number) information and password information sent from a third-party terminal through the "network I / F", authenticates whether there is matching information, and stores the personal number (my number) information and password information in the "main memory" and "non-volatile memory". Also, the "CPU" executes a consent information acquisition program stored in the "main memory" to acquire consent information indicating the intention of an individual (user) to disclose or not disclose, for each piece of health care-related information sent from a third-party terminal, through the "network I / F". The consent information is also stored in the "main memory" or the "non-volatile memory".

[0167] <Embodiment 5 Health Care-Related Information Management System: Processing Flow> FIG. 20 is a diagram showing the processing flow when using the health care-related information management system in this embodiment. As shown in the figure, it is a processing method consisting of an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "access authentication processing step" S2001 is a stage where input of personal number (My Number) information and password information regarding an individual (user) sent from a third-party terminal is received, and authentication for accessing the incentive management unit is performed.

[0169] The "consent information acquisition step" S2002 is a stage where, after being authenticated in the access authentication processing step, consent information, which is information indicating acceptance of incentives by the incentive management unit, is acquired.

[0170] <Summary> As described above, in the present invention, it is possible to acquire consent information, which is information indicating acceptance of incentives, for health care-related information regarding an individual (user).

[0171] <Embodiment 6 (Mainly Corresponding to Claim 6, Claim 21, and Claim 36)> <Outline of Embodiment 6> In addition to Embodiments 1 to 5, this embodiment is characterized by including an incentive provision processing unit that performs incentive provision processing, which is processing for providing an incentive when consent information is obtained by a consent information acquisition unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of Embodiments 1 to 5 will be omitted as appropriate.

[0172] <Description of the Configuration of Embodiment 6: Incentive Provision Processing Unit> FIG. 21 is a diagram showing the functional configuration of a health and medical information management system. As shown in this figure, the "incentive processing unit" 2103 is configured to have a function of performing incentive provision processing for providing an incentive when consent information is obtained by a consent information acquisition unit. FIG. 44 is a diagram showing an example of a user interface in the health and medical information management system of the present invention. In this case, regarding the public release permission of an individual (user), for health and medical information with an "〇" mark indicating consent to public release in the "Consent / Disagreement" column, an incentive to be automatically granted is calculated and granted based on a predetermined calculation rule. Here, for health and medical information related to one individual, it is calculated and granted as 1000 minor points (points) for one recipient based on a predetermined calculation rule. Also, regarding the incentive calculation rule, weighting processing may be performed in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical information, and different incentives may be calculated and granted for each piece of health and medical information. In particular, for example, various infectious diseases defined by the "Infectious Diseases Act" including malignant neoplasms (cancer), which are the leading causes of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease, or eye diseases with a large number of patients, and novel coronavirus infections, and rare diseases with few cases worldwide, considering that the disclosure of such health and medical information to a third party can greatly contribute to medical progress, it is conceivable to set the calculation rule to give more (higher) incentives than other diseases.

[0173] Also, "incentive" simply refers to "motivation, reward", meaning intentionally stimulating or the like with the aim of causing a certain action. In the present invention, "incentive" includes, in addition to the above-mentioned minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books and other goods, providing passwords or IDs for information provision, providing items that can be used on the network, providing rights, for example, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (such as a health management app or a pedometer app), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash, etc. Further, the following may be included. Discounting certain goods or services, for example, discounting or reducing insurance premiums, and the insurance premium rate discount applies. Further, refund of paid fees, awarding of prizes (such as novelties), commendations or honors, awarding of privilege coupons, etc. may be included. Furthermore, there may be reward points, discounts, free goods, early access to new products, or limited sales. Further, the right to write reviews about brands, introduce friends, create user-generated content, etc. applies. Also, it may be an upgrade of goods or services. In the present invention, it is applicable to any case where public disclosure permission information indicating whether to permit public disclosure to a third party has already been associated and stored / managed with respect to health care-related information regarding an individual, or where an individual (user) newly registers health care-related information regarding himself / herself in the health care-related information storage unit and the public disclosure permission information has not yet been associated and stored / managed. That is, although health care-related information regarding an individual is not held within the health care-related information management system, for example, if the health care-related information of that individual is held in a terminal owned by the individual and this is uploaded to the present system, when it is determined, by a formal check of the uploaded information, that the information is publicly available as health care-related information, the incentive function unit described above can be configured to function so as to grant an incentive according to the result. In this case, the access control unit of the present system may be configured so as not to reject the viewing access of health care-related information from a third party. However, it may be configured to partially reject or restrict access according to the type and qualifications of the third party. Note that uploading the health care-related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal but another system that stores other health care-related information. For example, it can be configured such that health care-related information stored in a Maternal and Child Health Handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. is transferred to the present system with the individual's consent. In this case, when the health care-related information of the individual is uploaded from the Maternal and Child Health Handbook information server, etc. and the formal check is completed, the incentive function unit described above can be configured to function.

[0174] FIG. 40 is a diagram showing an example of a user interface in the health care-related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system and access authentication is performed, the individual moves to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Browsing Process", the individual is redirected to a screen where they can view the relationship between their health and medical related information and the incentives provided. Figure 43 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the corresponding incentives in an easy-to-understand format such as a list. This allows the user to quickly see which incentives are associated with which health and medical related information at the time of viewing. By clicking, touching, or tapping the exit button, the user can return to the function selection screen shown in Figure 41.

[0175] Figure 40 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, after an individual (user) enters their My Number information and password information in the corresponding fields, and matching information exists in the system and access authentication is performed, the individual moves to the function selection screen. By clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Process", the system displays the health and medical related information for which consent / non-consent has not yet been given, as well as the health and medical related information for which consent / non-consent has already been given, regarding the individual's health and medical related information. Figure 44 is a diagram showing an example of a user interface in the health and medical related information management system of the present invention. In this case, it is preferable to display the health and medical related information of the target individual and the corresponding consent and non-consent status in an easy-to-understand list format or the like. Thereby, for health and medical related information for which consent / non-consent has not yet been given at the time of viewing, the individual (user) can input a check mark "〇" in the "Consent / Non-consent" column in the form of a pull-down menu, click, touch, or tap the OK button, and incentives and the like are processed. On the other hand, for health and medical related information for which a check mark "〇" or "×" has already been input in the "Consent / Non-consent" column, the individual (user) can review and, for example, change from consent to non-consent or from non-consent to consent, and click, touch, or tap the OK button to enable update processing. Note that by clicking, touching, or tapping the end button, it is possible to return to the function selection screen of FIG. 41.

[0176] <Embodiment 6 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0177] FIG. 22 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2201 that performs various arithmetic processes and a "main memory" 2202. It also includes a "non-volatile memory" 2203 that holds predetermined information, a "network I / F (interface)" 2204 that transmits and receives information with a plurality of third-party terminals 2206 and an administrator terminal 2207. And they are interconnected by a data communication path such as a "bus" 2205 to transmit, receive, and process information.

[0178] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that also serves as a working area for that program. Also, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In the present embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, an incentive provision processing program, and the like. Also, personal number (My Number) information, password information, consent information, incentive information, etc. are stored in the "main memory" and the "non-volatile memory".

[0179] The "CPU" executes the access authentication processing program stored in the "main memory" and, through the "network I / F", accepts the input of personal number (My Number) information and password information sent from a third-party terminal, and authenticates whether there is matching information. Also, the My Number information and password information are stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the consent information acquisition program stored in the "main memory" and, through the "network I / F", acquires consent information indicating the intention of an individual (user) for each piece of health and medical-related information sent from a third-party terminal. Also, the consent information is stored in the "main memory" and the "non-volatile memory". Also, the "CPU" executes the incentive provision processing program stored in the "main memory" and performs incentive provision processing, which is a process for providing an incentive when consent has been obtained regarding health and medical-related information about an individual, and stores the incentive information in the "main memory" and the "non-volatile memory".

[0180] <Embodiment 6: Health and Medical-Related Information Management System - Processing Flow> FIG. 23 is a diagram showing the flow of processing when the health care-related information management system according to the present embodiment is used. As shown in the figure, it is a processing method including an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "incentive provision processing step" S2303 is a stage where incentive provision processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition unit, is performed.

[0182] <Summary> As described above, in the present invention, with respect to health care-related information about an individual (user), when the individual gives consent, incentive provision processing, which is processing for providing an incentive, can be executed, and appropriate incentive provision processing can be performed on health care-related information about the individual.

[0183] <Embodiment 7 (mainly corresponding to claims 7, 22, and 37)> <Outline of Embodiment 7> This embodiment includes a health care-related information storage unit that stores health care-related information about an individual, and an access control unit that allows a third party to access the health care-related information stored in the health care-related information storage unit via a network. The access control unit includes: IP packet analysis means for analyzing IP packets sent via the network; destination IP address determination means for extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care-related information management system; access ID / user ID acquisition means for, when the destination IP address is the IP address of its own health care-related information management system, acquiring an access ID indicating the access subject and a user ID indicating the user belonging to the access subject from the IP payload; access subject / user attribute acquisition means for acquiring access subject information, user information, and user attribute information (here, information indicating whether the user is a medical practitioner or a non-medical practitioner) corresponding to the access ID and the user ID; access control means for controlling access to the health care-related information from a third party; and a public permission / denial information storage unit for storing public permission / denial information indicating whether to permit the disclosure of the individual's health care-related information to a third party. Regarding functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 6, the description will be omitted as appropriate.

[0184] <Embodiment 7 Functional Configuration> FIG. 24 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 7. In this embodiment, the access control unit includes IP packet analysis means, destination IP address determination means, access ID / user ID acquisition means, access subject / user attribute acquisition means, access control means, and a public permission / denial information storage unit.

[0185] <Embodiment 7 Explanation of Configuration: IP Packet Analysis Means of Access Control Unit> The "IP packet analysis means" 2401 is configured to have a function of analyzing IP packets sent via a network (especially the Internet). Generally, an IP packet is composed of an IP header part and an IP payload part, and various information and data are stored therein. The "IP packet analysis means" 2401 is responsible for analyzing and examining what kind of information and data are contained therein.

[0186] <Embodiment 7 Description of Configuration: Destination IP Address Determination Means of Access Control Unit> The "destination IP address determination means" 2402 is configured to have a function of extracting the destination IP address from the header part of the sent IP packet and determining whether it is the IP address of its own health care-related information management system. Generally, an IP packet contains at least a source IP address representing the source and a destination IP address representing the destination in the IP header part. The "destination IP address determination means" 2402 refers to the destination IP address extracted from the IP header part to determine whether the IP packet is sent to its own health care-related information management system. If it is determined that the packet is sent to itself, the process proceeds to the next step. If it is determined that the packet is not sent to itself, the IP packet is ignored and no further operation is performed.

[0187] <Embodiment 7 Description of Configuration: Access ID / User ID Acquisition Means of Access Control Unit> When it is determined that the IP packet is sent to its own health care-related information management system, the "access ID / user ID acquisition means" 2403 is configured to have a function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject.

[0188] <Embodiment 7 Description of Configuration: Access Subject User Attribute Acquisition Means of Access Control Unit> The "Access Subject User Attribute Acquisition Means" 2404 is configured to have a function of acquiring access subject information corresponding to the access ID and the user ID, user information belonging to the access subject, and user attribute information for the user (here, information indicating whether the user is a medical worker or a non-medical worker). The access subject information is information that specifically represents the access subject, and is represented by, for example, names such as "Edogawa Central Hospital" or "Edogawa Pharmaceutical". Also, the user information is information that specifically represents employees belonging to the access subject, and is represented by, for example, names such as "Ichiro Suzuki", an employee belonging to "Edogawa Central Hospital", or "Hideo Maeda", an employee belonging to "Edogawa Pharmaceutical". Furthermore, the user attribute information is associated with the user information, and is attribute information indicating whether the user is a medical worker or a non-medical worker, and is represented by, for example, "Medical Worker" (abbreviation "Medical") or "Non-Medical Worker" (abbreviation "Non-Medical").

[0189] Here, "Medical Worker" preferably includes at least physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiologic technologists, medical radiologic technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, acupuncturists, masseurs, moxibustion practitioners, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, medical office workers, etc. Among the "Medical Workers" as described above, the role of so-called primary care medical workers (for example, primary care physicians, primary care pharmacists, primary care dentists) who usually conduct examinations and medication guidance for individuals (patients) on a daily basis is very important, and it is preferable to grant the right to access the personal health and medical related information stored in the Health and Medical Related Information Accumulation Department and to edit, add, or delete the health and medical related information as appropriate according to the need.

[0190] For example, a "primary care physician" refers to a physician who can be consulted about anything, is well-versed in the latest medical information, can introduce specialists and specialized medical institutions when necessary, and has comprehensive capabilities to undertake local medical care, health care, and welfare that are close and reliable. A "primary care physician" should be able to: (1) In daily medical consultations, understand the patient's life background, provide appropriate medical treatment and health guidance, and when unable to provide medical treatment or guidance beyond their own expertise, cooperate with local physicians, medical institutions, etc. to provide solutions; (2) Share necessary information with local physicians, medical institutions, etc. to build a system that can respond to patients even on holidays and at night, so that the best medical care for patients can continue outside the physician's own consultation hours; (3) In addition to daily medical consultations, build a trust relationship with local residents, actively participate in social activities and administrative activities related to local medical care such as health consultations, health examinations / cancer screenings, maternal and child health, school health, industrial health, and local health, cooperate with health, nursing, and welfare workers, and promote home medical care so that local elderly people can live in the area for as long as possible; (4) It is desirable that the person be able to perform functions such as providing appropriate and easy-to-understand information about medicine to patients and their families.

[0191] Also, for example, a "primary care pharmacist" refers to a pharmacist who has rich knowledge and experience in drug treatment, health, and nursing, etc., and can respond to consultations according to the needs of patients and consumers. A "designated pharmacist" is preferably a professional who can perform the following functions: (1) A single pharmacist manages the medication status of a single patient at a single pharmacy and continues to do so (for example, to ensure the safe and secure use of medications, the pharmacist comprehensively grasps information on medications used by the patient, such as prescription medications and over-the-counter drugs, at a single location, and continuously checks for medication duplications, drug interactions, the effectiveness of the drugs, and the absence of side effects, etc.); (2) Provide 24-hour support or conduct home medical care by visiting the patient's home (for example, even outside the pharmacy's business hours on holidays or at night, respond to phone consultations regarding how to take medications, side effects, etc. Also, if necessary, deliver medications based on prescriptions at night or on holidays. Visit the homes of patients such as the elderly who have difficulty going out, explain the medications, and check the remaining medications); (3) Collaborate with prescribing doctors and medical institutions (for example, confirm the prescription content, and if necessary, make inquiries or proposals to the doctor. After delivering medications to the patient, monitor the patient's condition and feedback the situation to the prescribing doctor to check the remaining medications. Not only respond to consultations regarding medications but also provide broad consultations regarding health, and in some cases, recommend visiting a medical institution. Also, collaborate with local medical institutions to build a relationship where the patient can be supported by a team on a daily basis).

[0192] Also, for example, a "designated dentist" refers to a dentist who not only provides safe and secure dental care but also has extensive knowledge and insights related to medical care and nursing care, aims to maintain and improve the oral functions of local residents throughout their lives, and can fulfill their responsibilities as a person who plays a part in local medical care. A "designated dentist" is preferably a professional who can perform the following roles: (1) Provide appropriate dental treatment and health guidance according to the life stages from infancy to old age for continuous management and prevention of disease progression, contributing to the maintenance and improvement of oral and overall health; (2) Play a role in improving oral health for local residents through health activities such as dental check-ups together with the government and related organizations; (3) Collaborate with local related institutions and other industries to provide seamless home dental care and nursing services at various places of treatment for patients who have difficulty visiting a hospital, and actively participate in comprehensive local care. In addition, flag information that can identify that the third-party identification information described later is a dedicated medical worker may be attached or associated. Regarding the information indicating the dedicated medical worker, any one of an individual (such as a patient), a company to which the individual belongs, a health insurance association to which the individual belongs, or a local government where the individual resides may, as appropriate and as necessary, use a third-party terminal to perform setting, modification, and deletion, or the above-described administrator may use an administrator terminal to perform registration, editing, and deletion.

[0193] In addition, "non-medical workers" preferably include at least employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), combined health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies.

[0194] <Embodiment 7 Explanation of Configuration: Access Control Means of Access Control Unit> The "access control means" 2405 is configured to have a function of performing access control when a third party accesses the health and medical-related information storage unit via a network.

[0195] FIG. 25 is a diagram showing an example of the functional configuration of the health and medical-related information management system in the present embodiment. First, the IP packet analysis means analyzes the sent IP packet 2501 to examine what information and data are included. For example, it analyzes and examines whether the source IP address and destination IP address are included in the IP header part of the IP packet.

[0196] Next, the destination IP address determination means extracts the destination IP address included in the received IP packet 2501 and determines whether it is addressed to its own health care related information management system. At this time, an IP address table 2503 is stored in the access control unit 2502, and by referring to this table, it is determined whether it is addressed to its own health care related information management system. If the stored IP address (for example, 192.168.0.1) matches the destination IP address, it is determined that it is addressed to its own health care related information management system, and the process proceeds to the next process. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, when the received IP packet is addressed to its own health care related information management system by the access ID / user ID acquisition means, the access ID indicating the access subject stored in the IP payload of the IP packet and the user ID indicating the user belonging to the access subject are extracted and acquired.

[0198] Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, an access ID / user ID table 2504 is stored in the access control unit 2502, and by referring to this table, specific access subject information, user information, and user attribute information are acquired. Here, when the access ID is "A0001", the access subject information is "Edogawa Central Hospital", when the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is "medical staff". Also, when the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", when the user ID is "D0001", the user information is "Hideo Maeda", and the user attribute information is "non-medical staff". By the operations of the means up to this point, it is possible to determine whether a third party who has accessed the health care related information management system is a medical staff or a non-medical staff.

[0199] Next, the access control means varies the viewing range of the health care-related information depending on whether the third party is a medical worker or a non-medical worker. For example, if the user belonging to the third-party access entity (in this case, "Edogawa Central Hospital") is "Ichiro Suzuki" and the attribute information is "medical worker", then all of the health care-related information regarding the individual can be viewed. On the other hand, for example, if the user belonging to the third-party access entity (in this case, "Edogawa Pharmaceutical") is "Hideo Maeda" and the attribute information is "non-medical worker", then a part of the health care-related information regarding the individual (including all) or the health care-related information anonymized by a predetermined anonymization method described later can be viewed. In this way, it is possible to determine who the third-party user is and whether the attribute information is "medical worker" or "non-medical worker", and thereby vary the viewing range of the health care-related information regarding the individual. Note that it is preferable that these tables described above allow an administrator who is responsible for managing and operating the health care-related information management system to register, edit, and delete information using an administrator terminal. Further, it is preferable that these access entity information, user information, and user attribute information ("medical worker" or "non-medical worker") are also associated with the third-party identification information described later.

[0200] <Embodiment 7 Explanation of Configuration: Public Permission Information Retention Unit of Access Control Unit> As shown in FIG. 24, the "publication permission information retention unit" 2406 is configured to have a function of retaining publication permission information indicating whether to publish its own health and medical related information to a third party that has accessed health and medical related information about an individual via a network. Specifically, it is desirable to be configured such that information indicating "publication permission" or "publication rejection" can be set according to an individual's will from a third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, "publication permission" may be set as "1" and "publication rejection" may be set as "0" as binary information (flag information). Also, the publication permission information may be configured such that it is possible to set whether to publish or not publish in units of a predetermined block among the health and medical related information. For example, it is conceivable to set "publication permission" for health and medical related information regarding internal medicine among the medical departments, while setting "publication rejection" for health and medical related information regarding psychiatry. Also, the publication permission information may be configured such that, by combining with the third-party identification information described later, when the third party is a specific medical worker, it can be set separately for the case of "publication permission" and the case of "publication rejection". For example, when the third-party identification information represents "doctor", the health and medical related information of the individual is set as "publication permission", while when the third-party identification information represents a specific medical worker (for example, an accounting staff or an accounting staff, etc.), it is conceivable to set the health and medical related information of the individual as "publication rejection".

[0201] <Embodiment 7 Health and Medical Related Information Management System: Hardware Configuration> The hardware configuration of the health and medical related information management system in this embodiment will be described with reference to the drawings.

[0202] FIG. 26 is a diagram showing the hardware configuration of the health care related information management system according to the present embodiment. As shown in this figure, the access control unit in the present embodiment includes a "CPU (Central Processing Unit)" 2601 that performs various arithmetic processes, and a "main memory" 2602. Further, it includes a "non-volatile memory" 2603 that holds predetermined information, and a "network I / F (Interface)" 2604 that transmits and receives information with a plurality of third-party terminals 2606 and an administrator terminal 2607. And they are mutually connected by a data communication path such as a "bus" 2605 to transmit, receive, and process information.

[0203] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processes. In the present embodiment, the programs stored in the "main memory" are a health care related information accumulation program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a public permission / non-permission information holding program, an access control program, and the like. Further, health care related information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, public permission / non-permission information, etc. are stored in the "main memory" and "non-volatile memory".

[0204] The "CPU" executes a health care-related information storage program stored in the "main memory", and stores health care-related information about an individual sent from a third-party terminal, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.), through the "network I / F" in the "main memory" and the "non-volatile memory". Also, it executes an IP packet analysis program stored in the "main memory" to analyze the IP packets sent via a network (especially the Internet). Further, it executes a destination IP address determination program stored in the "main memory" to determine whether the sent destination IP address is the IP address of its own health care information sharing system. If it is determined to be addressed to itself, the IP address is stored in the "main memory" and the "non-volatile memory". Additionally, it executes an access ID / user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the access entity stored in the IP payload of the sent IP packet and the user ID indicating the user belonging to the access entity, and stores them in the "main memory" and the "non-volatile memory". Moreover, it executes an access entity user attribute acquisition program stored in the "main memory" to acquire the access entity information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional. For example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID, and stores them in the "main memory" and the "non-volatile memory". Also, it executes a public release permission information retention program stored in the "main memory" to acquire the public release permission information indicating whether to publicly release the individual's health care-related information to a third party, and stores it in the "main memory" and the "non-volatile memory". Furthermore, it executes an access control program stored in the "main memory" to control access to the health care-related information about an individual.

[0205] <Embodiment 7 Health Care-Related Information Management System: Processing Flow> FIG. 27 is a diagram showing the processing flow when using the health care-related information management system according to the present embodiment. As shown in the figure, it is a processing method including a health care-related information accumulation step S2701, an IP packet analysis step S2702, a destination IP address determination step S2703, an access ID / user ID acquisition step S2704, an access subject user attribute acquisition step S2705, a public release permission information holding step S2706, and an access control step S2707.

[0206] The "health care-related information accumulation step" S2701 is a stage of accumulating health care-related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.).

[0207] The "IP packet analysis step" S2702 is a stage of analyzing IP packets sent via a network (especially the Internet).

[0208] The "destination IP address determination step" S2703 is a stage of extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health care-related information management system.

[0209] The "access ID / user ID acquisition step" S2704 is a stage of acquiring an access ID indicating the access subject and a user ID indicating the user belonging to the access subject from the IP payload when the destination IP address is the IP address of its own health care-related information management system.

[0210] The "access subject user attribute acquisition step" S2705 is a stage of acquiring access subject information, user information, and user attribute information corresponding to the access ID and user ID (here, information indicating whether the user is a medical professional or a non-medical professional. For example, "medical professional" or "non-medical professional").

[0211] The "public permission information retention step" S2706 is a step of retaining public permission information indicating whether to permit public disclosure to a third party regarding an individual's health and medical related information.

[0212] The "access control step" S2707 is a step of controlling access to the health and medical related information management system.

[0213] <Summary> As described above, it is possible to retain public permission information indicating whether to permit public disclosure to a third party regarding health and medical related information about an individual (user). That is, according to the individual's will, it is possible to select and set public permission or non - permission.

[0214] <Embodiment 8 (mainly corresponding to Claim 8, Claim 23, and Claim 38)> <Outline of Embodiment 8>

[0215] Figure 28 is a diagram showing the functional configuration of the health and medical related information management system in Embodiment 8. As shown in this figure, this embodiment is characterized in that, in addition to Embodiments 1 to 7, a third - party identification information retention unit is provided. Hereinafter, regarding the health and medical related information management system in this embodiment, the functional configuration, hardware configuration, and processing flow will be described in order. Hereafter, regarding the functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 7, the descriptions will be omitted as appropriate.

[0216] <Functional Configuration of Embodiment 8> Figure 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment. In this embodiment, by providing a third - party identification information retention unit, it is possible to identify whether a third party is a medical worker or a non - medical worker.

[0217] <Health and Medical Related Information Management System in Embodiment 8: Functional Configuration> Figure 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment.

[0218] <Embodiment 8: Description of Configuration - Third Party Identification Information Retention Unit of Access Control Unit> The "third party identification information retention unit" 2807 is configured to have a function of retaining third party identification information for identifying whether a third party who has accessed the health care related information stored in the health care related information storage unit via a network is a medical worker or a non-medical worker. Here, the third party identification information is, for example, information created by combining numbers, letters, symbols, etc. consisting of 12 digits, and may be information that can uniquely identify a third party. For example, specifically, My Number information or the insured person's health insurance card number may be used. Further, it is preferable that the third party identification information is associated with the above-described access subject information, user information, and user attribute information ("medical worker" or "non-medical worker"). Also, the administrator may be able to register, edit, and delete the third party identification information using the administrator terminal.

[0219] Note that even when the public disclosure permission / non-permission information indicates "public disclosure permission" due to the combination of the above-described public disclosure permission / non-permission information and third party identification information, if the third party is a specific medical worker, it may be possible to set it separately depending on whether access is permitted or not permitted. For example, when the third party identification information represents "doctor", access to the health care related information may be permitted. On the other hand, when the third party identification information represents a specific medical worker (for example, an accounting staff or an accounting officer, etc.), access to the health care related information may be made non-permissible. For example, information indicating the department to which a third party belongs may be added to the third-party identification information, and the information indicating the department to which the third party belongs may be used to control the permission or non-permission of access to health care-related information. For example, information regarding the expertise of the user identified by the third-party identification information (for example, the specialty field and years of experience of a "doctor" or "nurse") may be used to control the permission or non-permission of access to health care-related information. For example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third party belongs, and the expertise, the method of obtaining health care-related information by a third party (for example, only viewing is possible, text conversion of information is possible, copying is possible, transferring is possible, bulk downloading of anonymized information is possible, etc.) may be changed. When it is possible to download, it is preferable to be able to use technologies such as digital watermarking technology or NFT (Non-Fungible Token) technology to prevent data tampering. For example, depending on the combination of the public disclosure permission / non-permission information, the department to which the third party belongs, and the expertise, the third party may be given the right to access the patient himself / herself. For example, it is assumed that a PCR test operator who is a medical worker transmits the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0220] Regarding the combination of these pieces of information, it is conceivable that the above-described administrator registers them in a table format or the like in advance in the above-described access control unit using the administrator terminal, and can edit or delete them as appropriate according to the need. In addition, for example, medical professionals include doctors, dentists, and pharmacists. Regarding this third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist roster registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, at least a part of the third-party identification information may include the number described in the qualification license. In addition, symbols and numbers (including branch numbers) described in the insured's certificate of the health insurance association to which the user belongs, the number of the driver's license, and the personal number (My Number) information described in the personal number (My Number) card may be included as at least a part of the third-party identification information. Note that third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark) may be used to identify the user.

[0221] <Embodiment 8 Health and Medical Related Information Management System: Hardware Configuration> FIG. 29 is a diagram showing the hardware configuration of the health and medical related information management system in this embodiment. As shown in this figure, the health and medical related information management system in this embodiment includes a "CPU (Central Processing Unit)" 2901 that performs various arithmetic processes, and a "main memory" 2902. It also includes a "non-volatile memory" 2903 that holds predetermined information, and a "network I / F" 2904 that transmits and receives information with the third-party terminal 2906 and the administrator terminal 2907. And they are interconnected by a data communication path such as a "bus" 2905 to transmit, receive, and process information.

[0222] Here, the "main memory" reads out a program for performing various processes to be executed by the "CPU" and at the same time provides a work area that also serves as a work area for the program. Also, a plurality of addresses are assigned to each of this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other by specifying and accessing those addresses, enabling processing to be performed. In the present embodiment, the program stored in the "main memory" is mainly a third-party identification information holding program or the like. Also, third-party identification information and the like are stored in the "main memory" and the "non-volatile memory".

[0223] The "CPU" executes a third-party identification information holding program stored in the "main memory" to hold third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker, and stores the third-party identification information in the "main memory" and the "non-volatile memory".

[0224] <Embodiment 8 Health Care-Related Information Management System: Processing Flow> FIG. 30 is a diagram showing the processing flow when the health care-related information management system in the present embodiment is used. As shown in this figure, it is a processing method consisting of a third-party identification information holding step S3007.

[0225] The "third-party identification information holding step" S3007 is a stage of holding third-party identification information for identifying whether a third party who has accessed the health care-related information stored in the health care-related information storage unit via the network is a medical worker or a non-medical worker.

[0226] <Summary> From the above, it is possible to identify whether a third party is a medical worker or a non-medical worker. For example, even among the same medical staff, it is possible to distinguish whether the individual is their attending physician (primary care physician), and even among the same non-medical staff, it is possible to distinguish whether the individual is an employee (including researchers) belonging to a pharmaceutical company that develops and manufactures therapeutic drugs related to their illness, or an employee belonging to a government agency.

[0227] <Embodiment 9 (mainly corresponding to Claim 9, Claim 24, and Claim 39)> <Overview of Embodiment 9>

[0228] FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 9. Hereinafter, the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 8 will be omitted from the description as appropriate.

[0229] Hereinafter, the health care-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0230] <Functional Configuration of Embodiment 9> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment. By adopting such a configuration, when the approval / non-approval information held in the approval / non-approval information holding unit indicates approval and the third-party identification information indicates that the person is a medical staff, it becomes possible to view the health care-related information accumulated in the health care-related information accumulation unit.

[0231] <Health Care-Related Information Management System in Embodiment 9: Functional Configuration> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment.

[0232] <Explanation of the Configuration in Embodiment 9: Approval / Non-Approval Information Holding Unit of the Access Control Unit> The "Disclosure Permission Information Retention Unit" 3106 is configured to have a function of retaining disclosure permission information indicating whether to disclose its own health and medical related information to a third party who has accessed the health and medical related information about an individual via a network. Specifically, it is preferably configured such that information indicating "Disclosure Permission" or "Disclosure Denial" can be set according to an individual's will from a third-party terminal 206 as shown in FIG. 2 to the access control unit 202 of the health and medical related information management system 200 via the network 205. For example, it may be binary information (flag information) where "Disclosure Permission" is set to "1" and "Disclosure Denial" is set to "0". Also, the disclosure permission information may be set so as to be able to set whether to disclose or not disclose in units of a predetermined block among the health and medical related information. For example, it is conceivable to set "Disclosure Permission" for the health and medical related information regarding internal medicine among the medical departments, while setting "Disclosure Denial" for the health and medical related information regarding psychiatry. Further, the disclosure permission information may be set so as to be distinguishable between the case of "Disclosure Permission" and the case of "Disclosure Denial" when the third party is a specific medical practitioner by combination with the above-described third-party identification information. For example, when the third-party identification information represents "physician", the health and medical related information of an individual is set to "Disclosure Permission", while when the third-party identification information represents a specific medical practitioner (for example, an accounting staff or an accounting officer, etc.), it is conceivable to set the health and medical related information of an individual to "Disclosure Denial".

[0233] <Embodiment 9 Explanation of Configuration: Third-Party Identification Information Retention Unit of Access Control Unit> The "Third-Party Identification Information Retention Unit" 3107 is configured to have a function of retaining third-party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage unit via a network is a medical practitioner or a non-medical practitioner. Here, the third-party identification information may be information created by combining, for example, numbers, characters, symbols, etc. consisting of 12 digits and may be information that can uniquely identify a third party. For example, specifically, My Number information, the insured person's certificate number, etc. may be used. In addition, the third-party identification information is preferably associated with the above-described access subject information, user information, and user attribute information ("medical professional" or "non-medical professional"). Further, the administrator may be able to register, edit, and delete the third-party identification information using the administrator terminal as described above.

[0234] Note that even when the public release permission information indicates "public release permission" due to the combination of the above-described public release permission information and third-party identification information, if the third party is a specific medical professional, it may be possible to set it separately for cases where access is permitted and cases where access is not permitted. For example, when the third-party identification information represents "doctor", access to health care-related information may be permitted. On the other hand, when the third-party identification information represents a specific medical professional (e.g., an accounting staff or an accountant), access to health care-related information may be made non-permissible.

[0235] Also, for example, information indicating the department to which a person belongs can be added to the third-party identification information, and the permission or non-permission to access health care-related information can be controlled based on the information indicating the department to which the person belongs. Also, for example, the permission or non-permission to access health care-related information can be controlled based on information regarding the expertise of the user identified by the third-party identification information (for example, the specialized fields and years of experience of a "doctor" or "nurse"). Also, for example, the method of obtaining health care-related information by a third party (for example, only viewable, text conversion of information possible, copyable, transferable, bulk download of anonymized information possible, etc.) can be changed based on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise. When making it downloadable, it is preferable to be able to use technologies such as digital watermarking technology and NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, the access right to the patient himself / herself can be granted to a third party based on the combination of the public disclosure permission / non-permission information, the department to which the third-party identification information pertains, and the expertise. For example, it is assumed that a PCR test staff member who is a medical worker sends the PCR test results to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself / herself.

[0236] Regarding the combination of these information, it is conceivable that the above-mentioned administrator registers them in a table format or the like in advance in the above-mentioned access control unit using the administrator terminal, and can edit or delete them as appropriate according to the need. Also, for example, medical professionals include doctors, dentists, and pharmacists. Regarding these third-party identification information, at least a part of it may include the medical registration number (for example, a number consisting of 6 digits) described in the doctor's license, the dental registration number (for example, a number consisting of 6 digits) described in the dentist's license, and the pharmacist roster registration number (for example, a number consisting of 6 digits) described in the pharmacist's license. Similarly, for other medical professionals, at least a part of the third-party identification information may include the number described in the qualification license. Also, symbols and numbers (including branch numbers) described in the insured certificate of the health insurance association to which the user belongs, the number of the driver's license, and the personal number (My Number) information described in the personal number (My Number) card may be included as at least a part of the third-party identification information. In addition, it may be possible to identify the user by using third-party authentication by platforms such as Google (registered trademark) and Facebook (registered trademark).

[0237] <Embodiment 9 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 3105 is related to access control when a third party accesses the health care-related information storage unit via a network. When the access permission / denial information held in the access permission / denial information storage unit indicates access permission and the third-party identification information indicates that it is a medical professional, it is configured to have a function of making the health care-related information stored in the health care-related information storage unit viewable.

[0238] <Embodiment 9 Health Care-Related Information Management System: Hardware Configuration> FIG. 32 is a diagram showing the hardware configuration of the health care-related information management system according to the present embodiment. As shown in this figure, the health care-related information management system according to the present embodiment includes a "CPU (Central Processing Unit)" 3201 that performs various arithmetic processes, and a "main memory" 3202. Further, it includes a "non-volatile memory" 3203 that holds predetermined information, a "network I / F" 3204 that transmits and receives information with a third-party terminal 3206 and an administrator terminal 3207. And they are mutually connected by a data communication path such as a "bus" 3205 to transmit, receive, and process information.

[0239] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also a work area for the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and "non-volatile memory", and programs executed by the "CPU" can exchange data with each other by specifying and accessing the addresses, and perform processes. In the present embodiment, the programs stored in the "main memory" are a public release permission information holding program, a third-party identification information holding program, an access control program, and the like. Further, public release permission information, third-party identification information, and the like are stored in the "main memory" and the "non-volatile memory".

[0240] The "CPU" executes a disclosure permission information retention program stored in the "main memory" and stores disclosure permission information indicating whether to disclose its own health and medical related information to a third party that has accessed health and medical related information about an individual via a network in the "main memory" and the "non-volatile memory". Also, the "CPU" executes a third party identification information retention program stored in the "main memory" and stores third party identification information for identifying whether a third party that has accessed health and medical related information stored in the health and medical related information storage unit via a network is a medical professional or a non-medical professional in the "main memory" and the "non-volatile memory". Thereafter, when the "CPU" executes an access control program stored in the "main memory" and the disclosure permission information indicates permission to disclose and the third party identification information indicates that the third party is a medical professional, the health and medical related information stored in the health and medical related information storage unit is made viewable.

[0241] <Embodiment 9 Health and Medical Related Information Management System: Processing Flow> FIG. 33 is a diagram showing the processing flow when the health and medical related information management system according to this embodiment is used. As shown in this figure, it is a processing method consisting of a disclosure permission information retention step S3306, a third party identification information retention step S3307, and an access control step S3308.

[0242] The "disclosure permission information retention step" S3306 is a stage of retaining disclosure permission information indicating whether to disclose its own health and medical related information to a third party that has accessed health and medical related information about an individual via a network.

[0243] The "third party identification information retention step" S3307 is a stage of retaining third party identification information for identifying whether a third party that has accessed health and medical related information stored in the health and medical related information storage unit via a network is a medical professional or a non-medical professional.

[0244] The "access control step" S3308 is a stage where, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third-party identification information indicates that the person is a medical professional, the health and medical-related information stored in the health and medical-related information accumulation unit can be viewed.

[0245] <Summary> As described above, when the publication approval information held in the publication approval information holding unit indicates publication approval and the third-party identification information indicates that the person is a medical professional, the health and medical-related information stored in the health and medical-related information accumulation unit can be viewed.

[0246] <Embodiment 10 (mainly corresponding to Claim 10, Claim 25, and Claim 40)> <Outline of Embodiment 10>

[0247] In addition to Embodiments 1 to 9, this embodiment is characterized in that it holds anonymization method information. Hereinafter, the description of the same functions, hardware configurations, and processing flows as those in Embodiments 1 to 9 will be omitted as appropriate.

[0248] Hereinafter, the health and medical-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0249] <Functional Configuration of Embodiment 10> FIG. 34 is a diagram showing the functional configuration of the health and medical-related information management system in this embodiment. The health and medical-related information management system in this embodiment includes an anonymization method information holding unit.

[0250] <Health and Medical-Related Information Management System in Embodiment 10: Functional Configuration> FIG. 34 is a diagram showing the functional configuration of the health and medical-related information management system in this embodiment.

[0251] <Explanation of Configuration: Anonymization Method Information Holding Unit of Access Control Unit in Embodiment 10> The "Anonymization Method Information Retention Unit" 3408 is configured to have a function of retaining information representing an anonymization method. Here, the anonymization method information may be information created by combining, for example, numbers, characters, symbols, etc. consisting of 6 digits, and may be information that can uniquely identify the anonymization method. Regarding the anonymization method information, the above-mentioned administrator may be able to perform registration, editing, and deletion using the administrator terminal.

[0252] There are several anonymization methods, and these are often used alone or in combination. The main anonymization methods will be briefly described below. "k-anonymization" (where k represents a natural number of 2 or more) means that for attributes (such as gender, age, place of residence, occupation, etc.) that cannot identify an individual alone but can identify an individual with a high probability by combining multiple ones, for any combination of attribute values, there must be at least k occurrences in the target data. "Pseudonymization" means replacing with other descriptions, etc. by a method that does not have a regularity that can be deleted or restored. "Generalization" means replacing the value of an attribute with a higher value or concept. For example, grouping by 10-year increments, or changing cucumber to the higher concept of vegetable. "Top (bottom) coding" means grouping particularly large or small attribute values for numerical attributes. For example, people aged 100 or above are grouped as "100 years or above". "Noise (error) addition" means adding random noise according to a certain distribution to numerical attributes. "Swapping (data exchange)" means (probabilistically) swapping attribute values between records for categorical attributes. Also called data swap. "Sampling" means randomly extracting a certain proportion or number from the entire original data. "Grouping" means replacing detailed items with a certain grouping or classification in attributes or histories.

[0253] <Embodiment 10 Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 3405 relates to access control when a third party accesses the health care-related information storage unit via a network. When the publication approval information held in the publication approval information storage unit indicates publication approval and the third party identification information indicates that the third party is a non-health care worker, it is configured to have a function of making part (including all) of the health care-related information stored in the health care-related information storage unit or health care-related information anonymized by a predetermined anonymization method viewable.

[0254] <Embodiment 10 Health Care-Related Information Management System: Hardware Configuration> FIG. 35 is a diagram showing the hardware configuration of the health care-related information management system in the present embodiment. As shown in this figure, the health care-related information management system in the present embodiment includes a "CPU (Central Processing Unit)" 3501 that performs various arithmetic processes and a "main memory" 3502. It also includes a "non-volatile memory" 3503 that holds predetermined information, a "network I / F" 3504 that transmits and receives information with a third party terminal 3506 and an administrator terminal 3507. And they are interconnected by a data communication path such as a "bus" 3505 to transmit, receive, and process information.

[0255] Here, the "main memory" reads out a program for causing the "CPU" to execute various processes, and at the same time provides a work area that is also the work area of the program. In addition, a plurality of addresses are respectively assigned to this "main memory" and the "non-volatile memory", and the programs executed by the "CPU" can exchange data with each other and perform processes by specifying and accessing those addresses. In the present embodiment, the program stored in the "main memory" is an anonymization method information holding program. Also, anonymization method information and the like are stored in the "main memory" and the "non-volatile memory".

[0256] The "CPU" executes an anonymization method information retention program stored in the "main memory" and stores anonymization method information representing the anonymization method in the "main memory" and the "non-volatile memory". After that, when the access control program stored in the "main memory" indicates that public permission is granted and the third-party identification information indicates that the person is a non-medical professional, a part (including all) of the health care-related information stored in the health care-related information storage unit, or health care-related information anonymized by a predetermined anonymization method can be viewed.

[0257] <Embodiment 10 Health Care-Related Information Management System: Processing Flow> FIG. 36 is a diagram showing the processing flow when the health care-related information management system in this embodiment is used. As shown in this figure, it is a processing method consisting of an anonymization method information retention step S3608 and an access control step S3609.

[0258] The "anonymization method information retention step" S3608 is a stage of retaining anonymization method information, which is information representing a method of anonymizing health care-related information.

[0259] The "access control step" S3609 is a stage where, when the public permission / denial information held in the public permission / denial information storage unit indicates public permission and the third-party identification information indicates that the person is a non-medical professional, a part (including all) of the health care-related information stored in the health care-related information storage unit, or health care-related information anonymized by a predetermined anonymization method can be viewed.

[0260] <Explanation of an Example of Anonymization Method> FIGS. 37 to 39 are diagrams showing an example of the anonymization method. Using these, an example of the anonymization method will be briefly explained. The table shown in Fig. 37 is a list of patients in an overground medical institution in Minato-ku, Tokyo, Japan, which has not yet been anonymized. Here, it contains six attributes (name, age, gender, place of residence, religion, disease name) and data for 12 people. Among these, the "name" is information that constitutes personal data and is information that can potentially identify an individual on its own. Also, "age", "gender", "place of residence", "religion", and "disease name" are information that constitutes personal data. They are information that does not accumulate data over time and cannot identify an individual on their own. However, they are information that can potentially identify an individual through combination with other attributes or collation with external information. In particular, the "disease name" is very sensitive attribute information in personal data. These information correspond to the personal health and medical related information stored in the above-mentioned health and medical related information storage section. In this case, for a certain value of k (k is a natural number of 2 or more), the following processing may be performed to achieve k-anonymity.

[0261] First, perform a process called "pseudonymization" and replace certain values of an attribute with an asterisk "*". All or some of the values in that column are replaced with "*". In the table shown in Fig. 38, all values of "name" and all values of "religion" are replaced with "*". Subsequently, perform a process called "generalization" and replace individual attribute values with a broader range. For example, for "age", replace "29 years old" with "in their 20s" and "35 years old" with "in their 30s", etc., to replace with values having a range. Also, for "place of residence", although it is a value consisting of prefecture and city / town / village, delete the city / town / village and change it to only the prefecture. Fig. 38 shows the anonymized table. Here, there are four equivalence classes having the same combination of the same quasi-identifiers ("age", "gender", "place of residence").

[0262] Figure 39 shows an anonymized table grouped in an easy-to-understand manner. As can be seen from this table, in any of the groups (Group A to Group D), 3-anonymity is achieved in terms of "age", "gender", and "residence". This is because in any combination of these attributes, there are more than three people. In this way, by anonymizing the health and medical-related information about individuals stored in the above-mentioned health and medical-related information storage unit, the risk of individuals being identified can be reduced.

[0263] <Summary> From the above, when the publication approval information held in the publication approval information holding unit indicates publication permission and the third-party identification information indicates that the person is not a medical worker, a part (including all) of the health and medical-related information stored in the health and medical-related information storage unit, or the health and medical-related information anonymized by a predetermined anonymization method can be made viewable.

Explanation of Signs

[0264] Health and Medical-Related Information Management System: 200, 300 Health and Medical-Related Information Storage Unit: 201, 301 Access Control Unit: 202, 302 Incentive Management Unit: 203, 303 Provision History Holding Unit: 204, 304 Network: 205 Third-Party Terminal: 206 Administrator Terminal: 207

Claims

1. A health care related information storage unit for storing and managing health care related information about an individual; An access control unit for controlling the disclosure of the health care related information stored in the health care related information storage unit to a third party via a network; An incentive management unit for providing an incentive to the individual in order to promote the disclosure of the health care related information by referring to the provision history of the provision history holding unit described later regarding whether or not to disclose the health care related information about the individual; A provision history holding unit for holding a provision history which is a history of providing incentives for each individual; and has The health care related information is managed so that various information can be traced from the information to be the target of minimum disclosure, and the incentive management unit is configured to be able to give more or qualitatively higher incentives according to the depth of disclosure of the health care related information. A health care related information management system.

2. Further having an incentive type information holding unit for holding incentive type information which is information indicating a plurality of types of incentives; The health care related information management system according to claim 1, wherein the incentive management unit selects and provides an incentive to be provided to an individual according to a provision history based on the incentive type information held in the incentive type information holding unit.

3. An end request receiving unit for receiving an end request which is a request to stop or end the disclosure of health care related information already disclosed from an individual storing health care related information in the health care related information storage unit; An end condition holding unit for holding an end condition which is a condition for determining whether or not it is possible to end based on the information about the individual who has made the end request when the end request is received; A determination rule holding unit for holding a determination rule which is a rule for determining whether or not to end the disclosure of health care related information based on the information about the individual who has made the end request and the held end condition; An end determination unit for determining whether or not to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received; An end control unit for controlling the access control unit to end the disclosure of the health care related information of the individual when the determination result in the end determination unit is a determination result that it should end; and The health care related information management system according to claim 1, further comprising.

4. The health care-related information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.

5. The health care-related information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating consent to receive an incentive by the incentive management unit after being authenticated by the access authentication processing unit.

6. The health care-related information management system according to claim 5, further comprising an incentive provision processing unit that performs incentive provision processing, which is processing for providing an incentive when consent information is acquired by the consent information acquisition unit.

7. The health care-related information management system according to claim 1, further comprising a public permission / non-permission information holding unit that holds public permission / non-permission information indicating whether an individual permits the disclosure of their own health care-related information to a third party.

8. The health care-related information management system according to claim 7, further comprising a third party identification information holding unit that holds third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

9. The access control unit causes the medical practitioner to view the health care-related information stored in the health care-related information storage unit when the public permission / non-permission information held in the public permission / non-permission information holding unit indicates permission to disclose and the third party identification information held in the third party identification information holding unit indicates that the third party is a medical practitioner. The health care-related information management system according to claim 8.

10. The access control unit causes the non-medical practitioner to view a part (including all) of the health care-related information stored in the health care-related information storage unit or the health care-related information anonymized by a predetermined anonymization method when the public permission / non-permission information held in the public permission / non-permission information holding unit indicates permission to disclose and the third party identification information held in the third party identification information holding unit indicates that the third party is a non-medical practitioner. The health care-related information management system according to claim 8.

11. The anonymization method is performed by at least k-anonymization (k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping, or a combination thereof. The health care-related information management system according to claim 10.

12. The incentive management unit provides incentives including any one or more of providing minor points, providing individual information services or general information services to information providers, providing individual drugs or supplements, providing books, DVDs, Blu-rays, health appliances, kitchen utensils, bedding, beds or pillows, providing passwords or IDs for information provision, providing items available on the network, providing the right to receive medical examinations, providing the right to receive diagnoses, providing the right to receive tests, providing the right to receive various services on the network, providing specific software (e.g., health management apps or pedometers), providing points to prepaid or postpaid electronic money, providing product coupons, travel coupons or cash. The health care-related information management system according to claim 1.

13. The medical personnel include at least one or more of physicians, dentists, pharmacists, nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, osteopaths, dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical staff. The health care-related information management system according to claim 8.

14. The non-medical personnel include at least one or more of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health appliance companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies. The health care-related information management system according to claim 8.

15. A method executed by a CPU in a health care related information management system that is a computer, comprising: a health care related information accumulation step for accumulating and managing health care related information about an individual; an access control step for controlling disclosure of the health care related information accumulated in the health care related information accumulation step to a third party via a network; an incentive management step for providing an incentive to the individual in order to encourage disclosure of the health care related information by referring to a provision history in a provision history holding step described later regarding whether or not to disclose health care related information about the individual; a provision history holding step for holding a provision history that is a history of providing incentives to each individual; and the health care related information is managed so that various information can be traced from information subject to minimal disclosure, and the incentive management step is configured to be able to provide more or qualitatively higher incentives according to the depth of disclosure of the health care related information.

16. A method executed by a CPU in a health care related information management system that is a computer, comprising: further comprising an incentive type information holding step for holding incentive type information that is information indicating types of a plurality of incentives; The method according to claim 15, wherein the incentive management step selects and provides an incentive to be provided to an individual according to a provision history based on the incentive type information held in the incentive type information holding step.

17. A method executed by a CPU in a health care related information management system that is a computer, comprising: an end request reception step for receiving an end request that is a request to stop or end disclosure of already disclosed health care related information from an individual who has accumulated health care related information in the health care related information accumulation step; an end condition holding step for holding an end condition that is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received; a determination rule holding step for holding a determination rule that is a rule for determining whether to end disclosure of health care related information based on information about the individual who made the end request and the held end condition; An end determination step of determining whether to end based on information about the individual, stored end conditions, and stored judgment rules when an end request is received; An end control step of controlling the access control step to end the disclosure of the individual's health and medical related information when the determination result in the end determination step is that it should end; The method according to claim 15, further comprising the above.

18. A method executed by a CPU in a health and medical related information management system that is a computer, comprising: The method according to claim 15, further comprising an access authentication processing step of performing authentication for accessing the incentive management step.

19. A method executed by a CPU in a health and medical related information management system that is a computer, comprising: The method according to claim 18, further comprising a consent information acquisition step of acquiring consent information, which is information indicating acceptance of an incentive by the incentive management step, after being authenticated in the access authentication processing step.

20. A method executed by a CPU in a health and medical related information management system that is a computer, comprising: The method according to claim 19, further comprising an incentive provision processing step of performing an incentive provision process, which is a process for providing an incentive, when consent information is acquired in the consent information acquisition step.

21. A method executed by a CPU in a health and medical related information management system that is a computer, comprising: The method according to claim 15, further comprising a public permission / denial information retention step of retaining public permission / denial information indicating whether an individual permits the disclosure of their health and medical related information to a third party.

22. A method executed by a CPU in a health and medical related information management system that is a computer, comprising: The method according to claim 21, further comprising a third party identification information retention step of retaining third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

23. A method executed by a CPU in a health and medical related information management system that is a computer, comprising: The access control step is the method according to claim 22, wherein when the approval / disapproval information held in the approval / disapproval information holding step indicates approval for disclosure and the third-party identification information held in the third-party identification information holding step indicates that the third party is a medical practitioner, the medical practitioner is allowed to view the health care-related information accumulated in the health care-related information accumulation step.

24. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The access control step is the method according to claim 22, wherein when the approval / disapproval information held in the approval / disapproval information holding step indicates approval for disclosure and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical practitioner, a part (including all) of the health care-related information accumulated in the health care-related information accumulation step or health care-related information anonymized by a predetermined anonymization method is allowed to be viewed by the non-medical practitioner.

25. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The anonymization method is performed by at least one of k (k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof, according to the method of claim 24.

26. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The incentive management step provides an incentive including any one or more of the provision of minor points, the provision of individual information services or general information services to information providers, the provision of individual drugs or supplements, the provision of books, DVDs, Blu-rays, health appliances, kitchen supplies, bedding, beds or pillows, the provision of passwords or IDs for information provision, the provision of items available on the network, the provision of the right to receive medical examinations, the provision of the right to receive diagnoses, the provision of the right to receive tests, the provision of the right to receive various services on the network, the provision of specific software (e.g., health management apps or pedometer apps), the provision of points to prepaid or postpaid electronic money, the provision of product coupons, travel coupons or cash, according to the method of claim 15.

27. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The medical practitioners include at least one of physicians, dentists, pharmacists, public health nurses, midwives, nurses, practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, chiropractors, registered dietitians, nutritionists, psychiatric welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers. The method according to claim 22.

28. A method executed by a CPU in a health care-related information management system that is a computer, comprising: The non-medical practitioners include at least one of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry-related companies, fertilizer manufacturers, government agencies, local governments, and employees belonging to independent administrative agencies. The method according to claim 22.

29. A health care-related information storage step for storing and managing health care-related information about an individual; An access control step for controlling the disclosure of the health care-related information stored in the health care-related information storage step to a third party via a network; An incentive management step for providing an incentive to the individual to promote the disclosure of the health care-related information by referring to the provision history of the provision history retention step described below regarding whether or not to disclose the health care-related information about the individual; A provision history retention step for retaining a provision history that is a history of providing incentives for each individual; Causing a health care-related information management system that is a computer to execute the steps. The health care-related information is managed so that various information can be traced from the information subject to minimal disclosure, and the incentive management step is a computer configured to be able to provide more or qualitatively higher incentives according to the depth of disclosure of the health care-related information. The operation program of the health care-related information management system described in a readable and executable manner in the health care-related information management system.

30. Further having an incentive type information holding step for holding incentive type information which is information indicating a plurality of types of incentives, The incentive management step is a computer according to claim 29, which selects and provides an incentive to be provided to an individual according to the provision history based on the incentive type information held in the incentive type information holding step. The operation program of the health care-related information management system described in a readable and executable manner in the health care-related information management system.

31. An end request receiving step for receiving an end request which is a request to stop or end the disclosure of already disclosed health care-related information from an individual who has accumulated health care-related information in the health care-related information accumulation step; An end condition holding step for holding an end condition which is a condition for determining whether it is possible to end based on the information about the individual who made this end request when the end request is received; A judgment rule holding step for holding a judgment rule which is a rule for determining whether to end the disclosure of health care-related information based on the information about the individual who made the end request and the held end condition; An end judgment step for judging whether to end based on the information about the individual, the held end condition, and the held judgment rule when the end request is received; An end control step for controlling the access control step to end the disclosure of the health care-related information of the individual when the judgment result in the end judgment step is a judgment result that it should be ended; The operation program of the health care-related information management system described in a readable and executable manner in the health care-related information management system which is the computer according to claim 29, further having the above.

32. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 29, further having an access authentication processing step for performing authentication for accessing the incentive management step.

33. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 32, further having a consent information acquisition step for acquiring consent information which is information indicating acceptance of the incentive by the incentive management step after being authenticated in the access authentication processing step.

34. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 33, further having an incentive provision processing step for performing an incentive provision process which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

35. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 29, further having a public permission / denial information holding step for holding public permission / denial information indicating whether an individual permits the disclosure of his / her own health care related information to a third party.

36. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 35, further having a third party identification information holding step for holding third party identification information for identifying whether the third party is a medical practitioner or a non-medical practitioner.

37. The access control step is such that, when the public permission / denial information held in the public permission / denial information holding step indicates public permission and the third party identification information held in the third party identification information holding step indicates that the third party is a medical practitioner, the health care related information accumulated in the health care related information accumulation step is allowed to be viewed by the medical practitioner. The operation program of the health care related information management system described in a computer-readable and executable manner for the health care related information management system according to claim 36.

38. The access control step allows a non-medical professional to view a part (including all) of the health care-related information accumulated in the health care-related information accumulation step, or health care-related information anonymized by a predetermined anonymization method, when the publication approval / rejection information held in the publication approval / rejection information holding step indicates approval for publication and the third-party identification information held in the third-party identification information holding step indicates that the third party is a non-medical professional. The operation program of the health care-related information management system described in claim 36 of the health care-related information management system, which is a computer-readable and executable description of the health care-related information management system.

39. The anonymization method is performed by at least one of k (where k is a natural number of 2 or more)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping anonymization methods, or a combination thereof. The operation program of the health care-related information management system described in claim 38 of the health care-related information management system, which is a computer-readable and executable description of the health care-related information management system.

40. The incentive management step provides an incentive including any one or more of the following: provision of negative points, provision of individual or general information services to information providers, provision of individual drugs or supplements, provision of books, DVDs, Blu-rays, health appliances, kitchen utensils, bedding, beds or pillows, provision of passwords or IDs for information provision, provision of items available on the network, provision of the right to receive medical examinations, provision of the right to receive diagnoses, provision of the right to receive tests, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points to prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash. The operation program of the health care-related information management system described in claim 29 of the health care-related information management system, which is a computer-readable and executable description of the health care-related information management system.

41. The medical workers include at least one or more of physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, vision therapists, speech therapists, prosthetists, diagnostic radiological technologists, diagnostic X-ray technologists, clinical laboratory technologists, sanitary inspection technologists, clinical engineering technologists, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, chiropractors, registered dietitians, nutritionists, mental welfare workers, social welfare workers, care welfare workers, certified psychologists, clinical psychologists, and medical office workers. The operation program of the health and medical related information management system described in claim 36, which is readable and executable on the computer of the health and medical related information management system.

42. The non-medical workers include at least one or more of employees belonging to life insurance companies, property insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (Agricultural Cooperatives), corporate health insurance, association health insurance, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutions), junior colleges, agricultural and forestry companies, fertilizer manufacturers, government offices, local governments, and employees belonging to independent administrative agencies. The operation program of the health and medical related information management system described in claim 36, which is readable and executable on the computer of the health and medical related information management system.

Images