Information transmission system, information output device, and information transmission method

Abstract

To provide an information transmission system capable of exchanging highly confidential information between information systems via networks separated from each other.SOLUTION: The information transmission system includes: an information output device that stores information to be shared, generates confidential data by compressing and anonymizing the information to be shared using a predetermined concealment method, and generates a 2D barcode that includes the confidential data but includes no masking information representing the masking method; and an information input system that previously stores an anonymization method, acquires the confidential data by decoding the 2D barcode and deciphers the confidential data based on the anonymization method.SELECTED DRAWING: Figure 4

Description

Technical Field

[0001] This disclosure relates to a technology for transmitting information.

Background Art

[0002] Patent Document 1 discloses a technology for importing the contents of a medical interview obtained from a doctor's interview with a patient into an electronic medical record. The data of the interview contents is recorded in an interview server. On the other hand, the electronic medical record is managed by an electronic medical record terminal device. The network to which the electronic medical record terminal device is connected is separated from the network to which the interview server is connected, that is, the Internet, and there is no terminal device that can be connected to both networks. Thereby, the high confidentiality of the electronic medical record is ensured. When importing the interview contents recorded in the interview server into the electronic medical record, the patient accesses the interview server using the patient's personal terminal or the clinic-side terminal, and displays the two-dimensional barcode of the interview contents. Then, when a barcode reader is connected to the electronic medical record terminal device and the two-dimensional barcode is read, the data of the interview contents is imported into the electronic medical record of the electronic medical record terminal device.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] If information can be shared between a service system that supports patient health management and the information system of a hospital that treats patients, it will be beneficial for both health management and treatment. For example, by using the technology disclosed in Patent Document 1, it is possible to isolate the hospital network that manages data such as electronic medical records from other networks such as the internet, while still enabling information exchange with the outside. However, security considerations are necessary in various aspects in addition to isolating the hospital network from other networks. For example, patient personal devices such as smartphones and clinic-side devices may be used at the patient's home or in public places. In that case, there is a risk that information stored in the two-dimensional barcode may be leaked due to unauthorized recording of the screen. Also, if the two-dimensional barcode is printed on a piece of paper for the patient's convenience, there is a risk that the information stored in the two-dimensional barcode may be leaked if that piece of paper is lost.

[0005] One of the purposes included in this disclosure is to provide a technology that enables the exchange of highly confidential information between information systems whose networks are separated from each other. [Means for solving the problem]

[0006] An information transmission system according to one aspect of the present disclosure includes: an information output device that stores shared information, generates confidential data by compressing and concealing the shared information using a predetermined concealment method, and generates a two-dimensional barcode that carries the confidential data but does not carry concealment information representing the concealment method; and an information input system that stores the concealment method in advance, decodes the two-dimensional barcode to obtain the confidential data, and decodes the confidential data based on the concealment method. [Effects of the Invention]

[0007] According to one aspect of this disclosure, information is exchanged using a two-dimensional barcode that does not contain confidential information, making it possible to exchange highly confidential information between devices whose networks are separated. [Brief explanation of the drawing]

[0008] [Figure 1] This is a schematic block diagram of the collaborative medical system according to Example 1. [Figure 2] This figure shows an example of a printed QR code. [Figure 3] This is a diagram showing an example of a QR code display screen. [Figure 4] This block diagram shows the configuration of the collaborative medical system and each device. [Figure 5] This figure shows an example of individual treatment information. [Figure 6] This figure shows an example of individual health-related information. [Figure 7] This figure shows an example of a table of confidential information. [Figure 8] This figure shows an example of treatment hospital information. [Figure 9] This is a flowchart for the process of sharing individual treatment information. [Figure 10] This is a flowchart for the process of outputting QR code printouts. [Figure 11] This figure shows an example of a QR code for hospital identification information and individual treatment information. [Figure 12] This is a flowchart for the hospital registration process. [Figure 13] This is a flowchart for the individual treatment information registration process. [Figure 14] This is a flowchart for the process of sharing individual health-related information. [Figure 15] This is a flowchart for the QR code display process. [Figure 16] This is a flowchart for processing individual health-related information. [Figure 17] This is a conceptual diagram illustrating the processing of individual health-related information in Example 2. [Figure 18] This is a flowchart of the QR code display process in Example 2. [Figure 19] This is a flowchart of the individual health-related information acquisition process in Example 2. [Figure 20] It is a diagram showing an example of individual treatment information in Example 3. [Figure 21] It is a flowchart of the individual treatment information registration process in Example 3.

Modes for Carrying Out the Invention

[0009] Hereinafter, embodiments of the cooperative medical system will be described.

Examples

[0010] FIG. 1 is a schematic block diagram of a cooperative medical system according to Example 1. The cooperative medical system is one in which a hospital system connected to a closed - area independent network 20 separated from the Internet 21 and a patient support service system connected to the Internet 21 share information.

[0011] The hospital information system is an information system that manages individual treatment information, which is information such as individual medical record data of each patient in the hospital and requires confidentiality. The hospital information system includes a closed - area personal computer (hereinafter also referred to as "PC") 11, a database 12, a printer 13, and a camera 14. The patient support service system is an information system for providing support related to the health management of patients. The patient support service system includes a patient support service server 17, a patient smartphone (hereinafter also referred to as "smartphone") 15, and a database 18. Further, the cooperative medical system includes a hospital - use tablet terminal 16 used by doctors, etc. inside and outside the hospital. The hospital - use tablet terminal 16 is connected to the Internet 21 instead of the closed - area independent network 20.

[0012] The closed network PC 11, patient support service server 17, patient smartphone 15, and hospital tablet terminal 16 are all composed of information processing devices having a CPU (Central Processing Unit) and memory. The CPU uses the memory to execute software programs, thereby realizing the functions described later. In this embodiment, since the patient support service server 17 is built on the cloud system 22, the CPU and memory of the patient support service server 17 are virtual.

[0013] First, I will explain how to share information from the PC 11 within the closed network to the patient support service server 17.

[0014] The PC 11 within the closed network stores shared information in DB 12. It generates confidential data by compressing and anonymizing the shared information using a predetermined anonymization method, and then generates a QR code (registered trademark), which is a two-dimensional barcode containing this confidential data but without any anonymization information indicating the anonymization method. This shared information is, for example, information related to patient treatment managed within a hospital. The QR code is printed on a QR code printout 19 by printer 13. The anonymization method is predetermined for each hospital.

[0015] Figure 2 shows an example of a printed QR code document. The printed QR code document 19 is a piece of paper provided to each individual patient. The printed QR code document 19 has the patient's name and patient identification information (patient ID) 31, the name of the hospital treating the patient and hospital identification information (hospital ID) 92, the aforementioned QR code 33, and the patient's treatment schedule 34 printed on it. The treatment schedule 34 is also included in the QR code 33 as shared information, but it is also printed for the patient's convenience.

[0016] The QR code on the printed QR code document 19 is read and decrypted by the camera function of the patient's smartphone 15. The decrypted confidential data is sent to the patient support service server 17. The patient support service server 17 has information on the above-mentioned confidentialization method stored in advance, and decrypts the confidential data based on that confidentialization method and obtains the information to be shared.

[0017] Next, we will explain how information is shared from the patient support service server 17 to the PC 11 within the closed network.

[0018] The patient support service server 17 stores shared information in the DB 18 and generates confidential data by compressing and anonymizing this shared information using an anonymization method corresponding to the hospital equipped with the closed network PC 11. This shared information is, for example, information related to the patient's health that is periodically acquired by the patient's smartphone 15. The patient support service server 17 generates a QR code that contains this confidential data but does not contain anonymization information indicating the anonymization method.

[0019] For example, the hospital tablet terminal 16 can obtain QR code data from the patient support service server 17 and display it on its screen.

[0020] Figure 3 shows an example of a QR code display screen. The QR code display screen 41 shows the hospital name and hospital ID 42, as well as the QR codes 43 of several specified patients. For example, a hospital could use this to select all patients scheduled for treatment on a particular day and obtain their QR codes.

[0021] The QR code 43 displayed on the QR code display screen 41 on the hospital tablet terminal 16 is captured by the camera 14 and taken into the closed network PC 11. The closed network PC 11 has pre-stored the confidentialization method corresponding to its own hospital, decrypts the QR code to obtain the confidential data, and decodes the confidential data based on that confidentialization method.

[0022] The configuration and operation of the system and equipment will be described in more detail below.

[0023] Figure 4 is a block diagram showing the configuration of the collaborative medical system and each device.

[0024] DB12 stores individual treatment information 58, confidential information 59, and individual health-related information 60. DB18 contains a confidential information table 70, individual treatment information 71, treatment hospital information 72, and individual health-related information 73.

[0025] Individual treatment information 58 is information related to the individual treatment of each patient, entered by a doctor or other staff member from a closed network PC 11 within the hospital. Individual treatment information 71 is the information provided to the patient support service server 17 via a QR code printout 19 from the closed network PC 11 as individual treatment information 58. Individual treatment information 58 and individual treatment information 71 are basically the same information. Figure 5 shows an example of individual treatment information. Individual treatment information 58 and 71 record the disease name 103, treatment schedule information 104, etc., associated with a patient ID 102 that identifies each patient. By sharing individual treatment information 71 with the patient support service server 17, it becomes possible to use individual treatment information in patient support services. For example, a patient can display their treatment schedule on their patient smartphone 15.

[0026] Individual health-related information 73 is information related to the individual health management of each patient, which is entered by each patient from their patient smartphone 15, collected and stored in the patient support service system 17. Individual health-related information 60 is the information that the individual health-related information 73 is provided to the closed network PC 11 via the display screen of the hospital tablet terminal 16 from the patient support service server 17. Individual health-related information 73 and individual health-related information 60 are basically the same information. Figure 6 is a diagram showing an example of individual health-related information. Individual health-related information 60 and 73 record information such as health status 123, body temperature 124, and blood pressure 125, corresponding to the patient ID 121 and the date 122 on which it was acquired. Health status 123 is information selected by the patient from options such as good, normal, and poor, which best describes their health condition. Individual health-related information 60 and 73 may also include information such as whether the patient took medication, ate meals, and slept for a period of time. By sharing individual health-related information 60 with PCs 11 within the closed network, for example, a doctor can use information related to a patient's daily health management to aid in treatment.

[0027] The anonymization information 59 is information indicating the anonymization method corresponding to the hospital. The anonymization information table 70 is information that includes the anonymization information 59 for each hospital. Figure 7 is a diagram showing an example of the anonymization information table. The anonymization information table 70 records the anonymization information 93 associated with the hospital ID 92. The anonymization information 93 indicates the anonymization method used when anonymizing the shared information, and is also necessary when decrypting the shared information from the anonymized data. The anonymization in this embodiment involves archiving the shared information with data compression using a compression method determined for each hospital to generate a zip file, and then extracting the information indicating the compression method from the zip file to make it an anonymized data that cannot be easily decrypted. That compression method is the anonymization method, and the information indicating the compression method is the anonymization information. In the example in Figure 7, a different compression method is assigned to each hospital, but this is not the only option. The types of compression methods are limited, but if there are more hospitals, for example, hospitals may be distributed across multiple compression methods.

[0028] The treatment hospital information 72 indicates which hospital each patient is receiving treatment at. Figure 8 shows an example of treatment hospital information. The treatment hospital information 72 records the hospital ID 112 of the hospital where each patient is receiving treatment, corresponding to the patient ID 111. This treatment hospital information 72 is registered from each patient's patient smartphone 15.

[0029] Returning to Figure 4, the closed network PC 11 has an information concealment unit 51, a code generation unit 52, a printing unit 53, an information decoding unit 54, a code decoding unit 55, an image acquisition unit 6, and an information input unit 57. The patient smartphone 15 has an image acquisition unit 61, a registration reception unit 62, a health condition information acquisition unit 63, and a code decoding unit 64. The patient support service server 17 has a registration processing unit 65, a health condition information storage unit 66, an information decoding unit 67, an information concealment unit 68, and a code generation unit 69. The hospital tablet terminal 16 has a display unit 32.

[0030] The following explains the overall processing flow of the integrated medical system, including the operation of each component.

[0031] Figure 9 is a flowchart of the individual treatment information sharing process. The individual treatment information sharing process is the process of sharing information from the PC 11 within the closed network to the patient support service server 17. The individual treatment information 58 is assumed to be pre-registered in DB 12 by the information input unit 57, which is operated by a physician or other person.

[0032] First, application registration is performed between the patient's smartphone 15 and the patient support service server 17 (step S101). The patient installs the patient support service application on their smartphone 15 and enters their name and attribute information on the application's registration screen, and this information is registered with the patient support service server 17. This application registration allows the patient to use the patient support services provided by the patient support service server 17.

[0033] Meanwhile, in the closed network PC11 of the hospital where the patient receives treatment, for example, when the patient receives treatment or a medical examination, a QR code printout process is performed (step S102).

[0034] Figure 10 is a flowchart of the QR code print output process.

[0035] First, the PC 11 within the closed network reads the individual treatment information 58 of the target patient from the DB 12 (step S201). Furthermore, the information concealment unit 51 on the PC 11 compresses the individual treatment information 58 using the compression method indicated by the hospital's concealment information 59 and archives it, generating a zip file (step S202). Further, the information concealment unit 51 extracts the information in the field describing the compression method from the zip file to conceal it and generate concealed data (step S203). Next, the code generation unit 52 codes the hospital ID of the hospital and the concealed data generated in step S203 to generate a hospital identification information & individual treatment information QR code.

[0036] Figure 11 shows an example of a hospital identification information & individual treatment information QR code. As shown in Figure 11, the hospital identification information & individual treatment information QR code 33 contains a hospital ID file 81 and a zip file 82 containing compressed individual treatment information 58. The zip file 82 has a compression method field in its local header 83 and central directory entry 84. Confidentiality is achieved by extracting the information from these compression method sections. In this embodiment, only the compression method section is extracted, but this is not the only example. As another example, information from other areas of the central directory entry and local header, such as the version created and the version required for extraction, may also be extracted along with the compression method. Also, although the zip file 82 in Figure 11 contains multiple files, the number of files is not particularly limited; for example, it could be just one.

[0037] Returning to Figure 10, the printing unit 53 then prints a QR code document 19 containing hospital identification information and individual treatment information QR codes 33 (step S205).

[0038] Returning to Figure 9, the QR code printout 19 printed in step S102 is given to the patient. The patient can visually confirm the treatment schedule 34 on the QR code printout 19 as exemplified in Figure 2. Based on this, if the patient registers for the patient support service provided by the patient support service server 17, they will be able to view the information contained in the individual treatment information 58 as exemplified in Figure 5 on their smartphone 15.

[0039] When a patient takes a picture of the hospital identification information & individual treatment information QR code 33 on the QR code printout 19 using the patient support service application on the patient's smartphone 15, the image acquisition unit 61 on the patient's smartphone 15 acquires an image of the hospital identification information & individual treatment information QR code 33, and the code decoding unit 64 decodes the hospital identification information & individual treatment information QR code 33 (step S103).

[0040] Next, the patient's smartphone 15 displays the application menu (step S104). The menu items include hospital registration and individual treatment information registration. Hospital registration is the procedure for registering the hospital where the patient will receive treatment, and is only required the first time. Individual treatment information registration is the process of registering the individual treatment information 58 issued by the hospital, and should be done each time the patient receives a QR code printout 19 from the hospital.

[0041] Here, we assume the patient has chosen to register with the hospital. As a result, the hospital registration process is performed by the patient's smartphone 15 and the patient support service server 17 (step S105).

[0042] Here, we show an example where the patient selects the hospital registration process and the individual treatment information registration process from a menu, but this is not the only option. As another example, the patient's smartphone 15 could automatically select the process. For example, for the first time a patient scans a QR code, the hospital registration process could be selected, and thereafter the individual treatment information registration process could be selected.

[0043] Figure 12 is a flowchart of the hospital registration process.

[0044] First, on the patient's smartphone 15, the registration reception unit 62 obtains the hospital ID from the decryption result file 81 obtained in step S103 (step S301). Furthermore, the registration reception unit 62 sends the hospital ID obtained in step S301 along with the patient ID to the patient support service server 17 (step S302). On the patient support service server 17, the registration processing unit 65 records the association between the received patient ID and hospital ID as treatment hospital information 72 in the DB 18. With this, hospital registration is completed. After that, the patient registers individual treatment information each time they receive a QR code printout 19 at the hospital.

[0045] Returning to Figure 9, when the patient takes a picture of the hospital identification information & individual treatment information QR code 33 on the QR code printout 19 using the patient support service application on the patient's smartphone 15, the image acquisition unit 61 on the patient's smartphone 15 acquires an image of the hospital identification information & individual treatment information QR code 33, and the code decoding unit 64 decodes the hospital identification information & individual treatment information QR code 33 (step S106).

[0046] Next, the patient's smartphone 15 displays the application menu (step S107). Here, we assume the patient has selected to register individual treatment information. As a result, the patient's smartphone 15 and the patient support service server 17 perform the individual treatment information registration process (step S108).

[0047] Figure 13 is a flowchart of the individual treatment information registration process.

[0048] First, on the patient's smartphone 15, the code decoding unit 64 obtains confidential data from the decryption result obtained in step S106 (step S401). Furthermore, the code decoding unit 64 transmits the confidential data obtained in step S401, along with the patient ID, to the patient support service server 17 (step S402).

[0049] In the patient support service server 17, the information decoding unit 67 identifies the hospital ID corresponding to the received patient ID based on the treatment hospital information 72 (step S403). Next, the information decoding unit 67 identifies the compression method associated with that hospital ID based on the concealed information table 70 (step S404). Furthermore, the information decoding unit 67 supplements the concealed data with information on the compression method to obtain a complete zip file (step S405), and then extracts the zip file to obtain individual treatment information 58 (step S406). The information decoding unit 67 registers the obtained individual treatment information 58 as individual treatment information 71 in DB 18 (step S407). This completes one individual treatment information registration. This individual treatment information registration is repeated.

[0050] Figure 14 is a flowchart of the individual health condition-related information sharing process. The individual health condition-related information sharing process is the process of sharing information from the patient support service server 17 to the PC 11 within the closed network.

[0051] Patients periodically input information related to their health condition from their patient smartphone 15, and the health condition information acquisition unit 63 on the patient smartphone 15 acquires the input information (step S501). The health condition information acquisition unit 63 then transmits the acquired information along with the patient ID to the patient support service server 17 (step S502). The patient support service server 17 stores the received patient ID as individual health-related information 73 for each patient (step S503). This individual health-related information 73 becomes the information to be shared.

[0052] The next step is to share the individual health-related information 73 with the PC 11 within the closed network.

[0053] First, the hospital tablet terminal 16 and the patient support service server 17 perform QR code display processing (step S504). As a result, the hospital tablet terminal 16 displays the QR code display screen 41 as exemplified in Figure 3.

[0054] Figure 15 is a flowchart of the QR code display process.

[0055] On the hospital tablet terminal 16, doctors, hospital staff, etc., specify the patient from whom they want to obtain individual health-related information (step S601). The information of the specified patient is sent to the patient support service server 17.

[0056] In the patient support service server 17, the information concealment unit 68 reads the individual health-related information 73 of the specified patient from the DB 18. Next, the information concealment unit 68 obtains the compression method corresponding to the sharing hospital for the individual health-related information 73 from the concealment information table 70, and uses the obtained compression method to compress the individual health-related information 73 of each patient and generate compressed data (step S603). Next, the information concealment unit 68 generates concealed data by extracting the compression method information from the header of the compressed data.

[0057] Next, the code generation unit 69 generates an individual health-related information QR code containing the confidential data for each patient (step S605). Furthermore, the code generation unit 69 transmits the data of the individual health-related information QR code to the hospital tablet terminal 16 (step S606).

[0058] In the hospital tablet terminal 16, the display unit 32 displays a QR code display screen 41 on which individual health-related information QR codes for each patient are placed (step S607).

[0059] Returning to Figure 14, the PC 11 within the closed network acquires individual health-related information 73 for each patient through individual health-related information acquisition processing (step S505).

[0060] Figure 16 is a flowchart of the process for importing individual health-related information.

[0061] The QR code display screen 41 shown on the hospital tablet terminal 16 is captured by the camera 14 (step S701). On the closed network PC 11, the image acquisition unit 56 captures the image of the individual health-related information QR code, and the code decoding unit 55 decodes the QR code to obtain confidential data for each patient (step S702).

[0062] Next, the information decoding unit 54 obtains information on the compression method corresponding to its own hospital from the anonymized information 59 and adds it to the anonymized data to generate a complete zip file (step S703). Furthermore, the information decoding unit 54 extracts the zip file to obtain individual health-related information 73 for each patient (step S704).

[0063] Returning to Figure 14, the PC 11 within the closed network records the individual health-related information 73 as individual health-related information 60 in CSV file format in DB 12 (step S506).

[0064] As explained above, according to this embodiment, since shared information is exchanged using a two-dimensional barcode that does not contain information indicating the anonymization method, it is possible to exchange highly confidential information between devices whose networks are separated from each other. In particular, it becomes possible to exchange information between a hospital information system separated from the internet 21 and a patient smartphone 15 and patient support service server 17 connected to the internet 21.

[0065] Furthermore, in this embodiment, since the information is concealed by extracting compression method information using the archive file format, it is possible to easily exchange highly confidential information between devices whose networks are separated from each other.

[0066] Furthermore, in this embodiment, since a compression method is associated with each hospital, it is possible to easily realize a patient support service that shares target information with PCs 11 within a closed network of multiple hospitals. [Examples]

[0067] In Example 1, an example was shown in which individual health-related information 73 for each patient is embedded in a single QR code and exchanged; however, other configurations are also possible. In Example 2, a part of the collaborative medical system of Example 1 is modified to illustrate how the data volume of individual health-related information 73 can be exchanged using multiple QR codes, for example, when the amount of data is large.

[0068] Figure 17 is a conceptual diagram illustrating the processing of individual health-related information in Example 2. Figure 18 is a flowchart of the QR code display process in Example 2. Figure 19 is a flowchart of the individual health-related information acquisition process in Example 2.

[0069] In Example 2, the patient support service server 17 and the hospital tablet terminal 16 perform the QR code display process shown in Figure 18, and the private network PC 11 performs the individual health-related information acquisition process shown in Figure 19. Other than these configurations and processes, Example 2 is basically the same as Example 1.

[0070] Referring to Figures 18 and 17, in Embodiment 2, the patient support service server 17 performs compression archiving on the individual health-related information 73 of a specified patient from the hospital tablet terminal 16 to generate a zip file, and the process of concealing the information by extracting the compression method from the zip file is the same as in Embodiment 1 (steps S601-604).

[0071] In Example 2, the code generation unit 69 in the patient support service server 17 then divides the zip file (confidential data zip') from which the compression method information has been extracted into data blocks of a predetermined size that can be embedded in a QR code (step S801), and generates an individual health-related information QR code for each data block (step S802). At this time, each QR code is given a serial number indicating the order of its data block as special header information. For example, a specific code (e.g., 0xFFEE) may be used as the signature, and the following two bytes may be the serial number information of the data block.

[0072] The code generation unit 69 then transmits these individual health-related information QR codes to the hospital tablet terminal 16 (step S803). The display unit 32 on the hospital tablet terminal 16 displays these individual health-related information QR codes on the screen (step S804).

[0073] Referring to Figures 19 and 17, on the shared private network PC 11, the QR code display screen shown on the hospital tablet terminal 16 is captured by the camera 14 (step S901). On the private network PC 11, the image acquisition unit 56 recognizes the areas of multiple individual health-related information QR codes and captures the images (step S902). Then, the code decoding unit 55 decodes the individual health-related information QR codes in each area and obtains data blocks and serial number information (step S903). Furthermore, the code decoding unit 55 restores the confidential data 'zip' by combining these data blocks in the order indicated by the serial number information (step S904).

[0074] Subsequently, similar to Example 1, the information decoding unit 54 obtains information on the compression method corresponding to its own hospital from the anonymized information 59, adds it to the anonymized data to generate a complete zip file (step S703), and then extracts the zip file to obtain individual health-related information 73 (step S704).

[0075] As explained above, this embodiment allows for the exchange of large amounts of shared information by dividing confidential data into files of a predetermined size or smaller.

[0076] Here, we have shown an example of exchanging a single piece of individual health-related information by dividing it into multiple QR codes. However, it is also possible to exchange multiple files of individual health-related information, each divided into multiple QR codes. In that case, in step S802, the code generation unit 69 should include the file number and the sequential number information of the data block in the special header information attached to each QR code. Then, in step S903, the code decoding unit 55 obtains the file numbers and sequential numbers of the multiple data blocks, and in step S904, the data blocks with the same file number are combined in the order of their sequential numbers. [Examples]

[0077] In Examples 1 and 2, the patient support service server 17 obtains individual treatment information 58 from a QR code printout 19 printed by a PC 11 within the closed network, and registers it in DB 18 as individual treatment information 71. Example 3 illustrates a modified version of the collaborative medical system in Example 1. In Example 3, the patient support service server 17 records the individual treatment information 58 obtained from the QR code printout 19 as individual treatment information 71 if it is newer than the individual treatment information 71 recorded in DB 18, and discards it if it is older. This prevents updated individual treatment information from reverting to older data in DB 18.

[0078] Figure 20 shows an example of individual treatment information in Example 3. Figure 21 is a flowchart of the individual treatment information registration process in Example 3.

[0079] Referring to Figure 20, the individual treatment information 58 and 71 in Example 3 differs from that in Examples 1 and 2 in that the issue date and time 105 is recorded in association with the patient ID 102 that identifies each patient.

[0080] Referring to Figure 21, the individual treatment information registration process in Example 3 is the same as in Example 1 from steps S401 to S406. In Example 3, after step S406, the information decoding unit 67 compares the issue date and time 105 of the individual treatment information 58 obtained in step S406 with the issue date and time 105 of the individual treatment information 71 registered in DB18 (step S1001). If the issue date and time 105 of the individual treatment information 58 is older than the issue date and time 105 of the individual treatment information 71, the information decoding unit 67 discards the individual treatment information 58 obtained in step S406 (step S1002). On the other hand, if the issue date and time 105 of the individual treatment information 58 is newer than the issue date and time 105 of the individual treatment information 71, the information decoding unit 67 stores the individual treatment information 58 as new individual treatment information 71 in DB18 (step S1003).

[0081] As explained above, in this embodiment, the issuance date and time of the individual treatment information 71 recorded in DB18 are managed, and if the individual treatment information 58 newly read from the two-dimensional barcode is older than the individual treatment information 71 recorded in DB18, it is discarded without being recorded in DB18. Therefore, even if the QR code of an old piece of paper is read, it is possible to prevent the individual treatment information 71 from being overwritten with old information.

[0082] The embodiments of the present invention described above are illustrative for the purpose of explaining the invention and are not intended to limit the scope of the invention to those embodiments only. Those skilled in the art can carry out the present invention in various other forms without departing from the scope of the invention. [Explanation of Symbols]

[0083] 11...PC within the closed network, 12...Database, 13...Printer, 14...Camera, 15...Patient smartphone, 16...Hospital tablet terminal, 17...Patient support service server, 18...Database, 19...QR code printed material, 20...Independent network within the closed network, 21...Internet, 22...Cloud system, 31...Patient ID, 32...Display unit, 33...Hospital identification information & individual treatment information QR code, 34...Treatment schedule, 41...QR code display screen, 42...Hospital ID, 43...QR code, 51...Information concealment unit, 52...Code generation unit, 53...Printing unit, 54...Information decoding unit, 55...Code decoding unit, 56...Image acquisition unit, 57...Information input unit, 58...Individual treatment information, 59...Confidential information, 60...Individual health Health-related information, 61...Image acquisition unit, 62...Registration acceptance unit, 63...Health information acquisition unit, 64...Code decoding unit, 65...Registration processing unit, 66...Health information storage unit, 67...Information decoding unit, 68...Information concealment unit, 69...Code generation unit, 70...Concealed information table, 71...Individual treatment information, 72...Treatment hospital information, 73...Individual health-related information, 81...File, 82...zip file, 83...Local header, 84...Central directory entry, 92...Hospital ID, 93...Concealed information, 102...Patient ID, 103...Disease name, 104...Treatment schedule information, 105...Issuance date and time, 111...Patient ID, 112...Hospital ID, 121...Patient ID, 122...Date, 123...Health status, 124...Body temperature, 125...Blood pressure

Claims

1. An information output device that stores shared information, generates confidential data by compressing and concealing the shared information using a predetermined concealment method, and generates a two-dimensional barcode that contains the confidential data but does not contain concealment information representing the concealment method; An information input system that stores the aforementioned concealment method in advance, decrypts the two-dimensional barcode to obtain the concealed data, and decodes the concealed data based on the aforementioned concealment method, It has, The aforementioned data concealment method involves archiving data with compression using a predetermined compression method. The information output device archives the shared information to generate an archive file, extracts the information of the compression method area included in the header of the archive file to generate the confidential data, and places it on a two-dimensional barcode. The information input system pre-stores information indicating the compression method, restores the archive file by adding the information indicating the compression method to the confidential data, and extracts the shared information from the archive file. Information transmission system.

2. The aforementioned information output device is an information processing device that is connected only to the hospital's closed network, which is isolated from the internet. A compression method is predetermined for each hospital. The information output device archives the shared information with data compression using the hospital's own compression method, generates the confidential data by extracting the information of the compression method area contained in the header of the generated archive file, and generates a two-dimensional barcode containing the hospital identification information of the hospital and the confidential data. The information input system pre-stores the association between hospital identification information and compression methods, decrypts the two-dimensional barcode to obtain the hospital identification information and the confidential data, restores the archive file by adding the compression method associated with the hospital identification information to the confidential data, and extracts the shared information from the archive file. The information transmission system according to claim 1.

3. The information output device divides the confidential data into multiple split files of a predetermined size or less, and for each of the split files, it generates a two-dimensional barcode in which the split file is loaded and the number of the split file in the confidential data is added to the header. The information input system decodes a plurality of the two-dimensional barcodes to obtain the divided files, obtains the number from the header, and combines the plurality of divided files based on the number to generate the confidential data. The information transmission system according to claim 1.

4. The aforementioned shared information includes or includes information on the date and time of issuance. The information input system records the shared information obtained from the confidential data in a database along with the issuance date and time. If the issuance date and time of the newly obtained shared information is newer than the issuance date and time of the shared information already recorded in the database, the newly obtained shared information is recorded in the database. If the issuance date and time of the newly obtained shared information is older than the issuance date and time of the shared information already recorded in the database, the newly obtained shared information is discarded without being recorded in the database. The information transmission system according to claim 1.

5. The information output device prints the two-dimensional barcode onto a piece of paper or displays it on a screen. The information input system takes a photograph of the two-dimensional barcode on the paper or the screen. The information transmission system according to claim 1.

6. The information input system includes a terminal device carried by each patient and a server device that can connect to the terminal device via the Internet. The information transmission system according to claim 2.

7. An information output device in an information transmission system having: an information output device that stores shared information, generates confidential data by compressing and concealing the shared information using a predetermined concealment method, and generates a two-dimensional barcode that carries the confidential data but does not carry concealment information representing the concealment method; and an information input system that stores the concealment method in advance, decodes the two-dimensional barcode to obtain the confidential data, and decodes the confidential data based on the concealment method, wherein the information output device stores shared information, generates confidential data by compressing and concealing the shared information using a predetermined concealment method, and generates a two-dimensional barcode that carries the confidential data but does not carry concealment information representing the concealment method; The aforementioned data concealment method involves archiving data with compression using a predetermined compression method. The information output device archives the shared information to generate an archive file, and generates the confidential data by extracting the information of the compression method area included in the header of the archive file, and then places the confidential data on a two-dimensional barcode.

8. An information output device that stores shared information, generates confidential data by compressing and concealing the shared information using a predetermined concealment method, and generates a two-dimensional barcode that carries the confidential data but does not carry concealment information representing the concealment method; and an information input system that stores the concealment method in advance, decodes the two-dimensional barcode to obtain the confidential data, and decodes the confidential data based on the concealment method, wherein the information input system is an information transmission system having The aforementioned data concealment method involves archiving data with compression using a predetermined compression method. The two-dimensional barcode contains the confidential data generated by archiving the shared information to create an archive file and extracting the information of the compression method area included in the header of the archive file. The information input system pre-stores information indicating the compression method, restores the archive file by adding the information indicating the compression method to the confidential data, and extracts the shared information from the archive file. Information input system.

9. A server device in an information transmission system comprising: an information output device that stores shared information, generates confidential data by compressing and concealing the shared information using a predetermined concealment method, and generates a two-dimensional barcode that carries the confidential data but does not carry concealment information representing the concealment method; a terminal device that each patient carries and acquires an image of the two-dimensional barcode; and a server device that can connect to the terminal device via the internet, stores the concealment method in advance, decodes the two-dimensional barcode to acquire the confidential data, and decodes the confidential data based on the concealment method, wherein The aforementioned data concealment method involves archiving data with compression using a predetermined compression method. The two-dimensional barcode contains the confidential data generated by archiving the shared information to create an archive file and extracting the information of the compression method area included in the header of the archive file. The server device pre-stores information indicating the compression method, restores the archive file by adding information indicating the compression method to the confidential data, and extracts the shared information from the archive file. Server device.

10. An information transmission method for transmitting shared information from an information output device to an information input system, The aforementioned information output device It remembers the information to be shared. The shared information is compressed and anonymized using a predetermined anonymization method to generate confidential data. A two-dimensional barcode is generated that contains the confidential data but does not contain confidential information representing the confidentialization method. The aforementioned information input system The aforementioned concealment method is stored in advance, The two-dimensional barcode is decrypted to obtain the confidential data, A method for decrypting the confidential data based on the aforementioned concealment method, The aforementioned data concealment method involves archiving data with compression using a predetermined compression method. The information output device archives the shared information to generate an archive file, extracts the information of the compression method area included in the header of the archive file to generate the confidential data, and places it on a two-dimensional barcode. The information input system pre-stores information indicating the compression method, restores the archive file by adding the information indicating the compression method to the confidential data, and extracts the shared information from the archive file. Methods of information transmission.

Images