Health and Medical Information Management System

Abstract

To provide a healthcare-related information management system for providing incentives to individuals to urge them to disclose healthcare-related information by referring to a provision history, the history of providing incentives for every individual as to whether or not to allow disclosure of the healthcare-related information of the individual.SOLUTION: A healthcare-related information management system includes a healthcare-related information storage unit for storing and managing healthcare-related information relating to individuals, an access control unit for controlling disclosure of the healthcare-related information stored in the healthcare-related information storage unit to third parties via a network, an incentive management unit for providing incentives as to whether or not to allow disclosure of the healthcare-related information of individuals, to the individuals to urge them to disclose the healthcare related information by referring to a provision history of a provision history holding unit described below, and the provision history holding unit for holding the provision history, the history of providing the incentives for every individual.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a health care related information management system for accumulating and managing health care related information which is information related to an individual's health care.

Background Art

[0002] Recently, systems and services that enable sharing of medical information of patients, etc. among multiple medical institutions have begun to be considered.

[0003] As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problems of avoiding duplication of test items in test data in multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system to store various test results of patients. Then, the medical information sharing server displays the corresponding electronic medical record according to the instructions of medical institution terminals such as medical facility terminals of medical institutions and health examination center terminals, and when conducting a clinical examination, searches and displays whether the results of test items identical to the test items of the planned clinical examination are described in the test result DB, thus disclosing an information system. Also, a medical information providing system is provided in the medical information sharing server, and when the medical information providing system sends information to the information recipient, it bills for the consideration of the information, and based on the received consideration, formulates the reward that the medical information providing system can provide to the user and provides the reward to the user, which has been disclosed.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, the aforementioned invention only discloses that the medical information provision system formulates and provides rewards to users, and does not explicitly state that a health and medical information management system like the present invention has a function to maintain a provision history, which is a record of the incentives provided to each individual, and / or a function to provide incentives to individuals in order to encourage the disclosure of health and medical information by referring to the provision history regarding whether or not to allow the disclosure of health and medical information concerning that individual. [Means for solving the problem]

[0006] Based on the above-mentioned problems, this invention aims to provide a health and medical information management system that provides incentives to individuals in order to encourage the disclosure of health and medical information by referring to the provision history, which is a record of incentives provided to each individual regarding whether or not they consent to the disclosure of their health and medical information.

[0007] Specifically, the present invention provides a health and medical information management system comprising: a health and medical information storage unit for storing and managing health and medical information relating to an individual; an access control unit for controlling the disclosure of health and medical information stored in the health and medical information storage unit to a third party via a network; an incentive management unit for providing incentives to an individual to encourage the disclosure of health and medical information by referring to the provision history of a provision history storage unit described below, regarding whether or not to permit the disclosure of the health and medical information relating to the individual; and a provision history storage unit for storing a provision history which is a history of the incentives provided to each individual.

[0008] Furthermore, in addition to the above features, the present invention provides a health and medical information management system that includes an incentive type information holding unit which holds incentive type information, which is information indicating multiple types of incentives, and an incentive management unit which selects and provides incentives to be provided to an individual based on the incentive type information held in the incentive type information holding unit according to the provision history.

[0009] Furthermore, in addition to the above features, the present invention provides a health and medical information management system comprising: a termination request receiving unit that receives termination requests from individuals who have stored health and medical information in a health and medical information storage unit, which are requests to stop or terminate the publication of already published health and medical information; a termination condition holding unit that holds termination conditions, which are conditions for determining whether to terminate the publication based on information about the individual who made the termination request when a termination request is received; a judgment rule holding unit that holds judgment rules, which are rules for determining whether or not to terminate the publication of health and medical information based on information about the individual who made the termination request and the held termination conditions; a termination judgment unit that, when a termination request is received, determines whether or not to terminate the publication based on information about that individual, the held termination conditions, and the held judgment rules; and a termination control unit that, if the judgment result from the termination judgment unit is that the publication should be terminated, causes the access control unit to control the termination of the publication of that individual's health and medical information.

[0010] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

[0011] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system having a consent information acquisition unit that acquires consent information, which is information indicating that the user has agreed to accept an incentive from the incentive management unit after being authenticated by the access authentication processing unit.

[0012] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system having an incentive provision processing unit that performs an incentive provision processing, which is a process for providing an incentive, when consent information is obtained by the consent information acquisition unit.

[0013] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system having a disclosure permission information holding unit that holds disclosure permission information indicating whether or not an individual permits the disclosure of their health and medical information to a third party.

[0014] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system having a third-party identification information holding unit that holds third-party identification information for identifying whether a third party is a medical professional or a non-medical professional.

[0015] Furthermore, in addition to the above features, the present invention provides a health and medical information management system in which the access control unit allows a medical professional to view health and medical information stored in the health and medical information storage unit when the access control unit indicates that the access permission information stored in the access permission information storage unit indicates that the access permission information is permitted, and the third-party identification information stored in the third-party identification information storage unit indicates that the third party is a medical professional.

[0016] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system in which, when the access control unit indicates that the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted, and the third-party identification information held in the third-party identification information holding unit indicates that the third party is not a medical professional, the access control unit allows a non-medical professional to view a portion (including all) of the health and medical information stored in the health and medical information storage unit, or health and medical information that has been anonymized by a predetermined anonymization method.

[0017] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system in which the anonymization method is performed by at least one of the following anonymization methods, or a combination thereof: k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping.

[0018] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system in which the health and medical information storage unit stores health and medical information including one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information, medical questionnaire information, health promotion app data, and conversation data from an interactive health promotion SNS.

[0019] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system in which the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual and general information services to information providers, provision of individual drugs and supplements, provision of books and other products, provision of passwords and IDs for information provision, provision of items usable on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps and pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

[0020] In addition to the features described above, the present invention provides a health and medical information management system that includes at least one of the following healthcare professionals: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech therapists, prosthetists and orthotists, radiological technologists, X-ray technologists, clinical laboratory technologists, public health laboratory technologists, clinical engineers, dental hygienists, dental technicians, paramedics, massage therapists, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health social workers, social workers, care workers, certified psychologists, clinical psychologists, and medical office staff.

[0021] Furthermore, in addition to the features described above, the present invention provides a health and medical information management system that includes at least one non-medical professional who is an employee of a life insurance company, a non-life insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, a JA (agricultural cooperative), a cooperative health insurance association, a national health insurance association, a mutual aid association, a municipal national health insurance association, a national health insurance association, a PR company, a research institute, a university and a graduate school (including affiliated research institutions), a technical college, an agricultural, forestry and fisheries company, a fertilizer manufacturer, a government agency, a local government, or an independent administrative agency.

[0022] Furthermore, regarding the health and medical information management system described above, in order to realize these, we provide a method executed by the CPU of the health and medical information management system, which is a computer, and an operating program for the health and medical information management system written in a readable and executable format for the health and medical information management system, which is a computer.

[0023] Specifically, the present invention provides a method executed by the CPU of a health and medical information management system, which is a computer, comprising: a health and medical information storage step for storing and managing health and medical information relating to an individual; an access control step for controlling the disclosure of the health and medical information stored in the health and medical information storage step to a third party via a network; an incentive management step for providing an incentive to an individual to encourage the disclosure of the health and medical information relating to the individual by referring to the provision history of the provision history retention step described below regarding whether or not to permit the disclosure of the health and medical information relating to the individual; and a provision history retention step for maintaining a provision history which is a history of when an incentive was provided to each individual.

[0024] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical-related information management system which is a computer, the method having an incentive type information holding step of holding incentive type information which is information indicating a plurality of types of incentives, and the incentive management step provides a method of selecting and providing an incentive to be provided to an individual according to a provision history based on the incentive type information held in the incentive type information holding step.

[0025] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical-related information management system which is a computer, the method including: an end request receiving step of receiving an end request which is a request to stop or end the disclosure of already disclosed health and medical-related information from an individual who has accumulated health and medical-related information in the health and medical-related information accumulation step; an end condition holding step of holding an end condition which is a condition for determining whether it is possible to end based on information about the individual who made the end request when the end request is received; a determination rule holding step of holding a determination rule which is a rule for determining whether to end the disclosure of health and medical-related information based on information about the individual who made the end request and the held end condition; an end determination step of determining whether to end based on the information about the individual, the held end condition, and the held determination rule when the end request is received; and an end control step in which, when the determination result in the end determination step is a determination result that it should end, the access control step controls to end the disclosure of the health and medical-related information of that individual.

[0026] In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical-related information management system which is a computer, the method having an access authentication processing step of performing authentication for accessing the incentive management step.

[0027] In addition to the above features, the present invention provides a method executed by a CPU in a health and medical related information management system which is a computer, the method comprising a consent information acquisition step of acquiring consent information which is information indicating acceptance of receiving an incentive by an incentive management step after being authenticated in an access authentication processing step.

[0028] In addition to the above features, the present invention provides a method executed by a CPU in a health and medical related information management system which is a computer, the method comprising an incentive provision processing step of performing an incentive provision process which is a process for providing an incentive when consent information is acquired in the consent information acquisition step.

[0029] In addition to the above features, the present invention provides a method executed by a CPU in a health and medical related information management system which is a computer, the method comprising a public permission / non-permission information retention step of retaining public permission / non-permission information indicating whether an individual permits disclosure of his / her health and medical related information to a third party.

[0030] In addition to the above features, the present invention provides a method executed by a CPU in a health and medical related information management system which is a computer, the method comprising a third party identification information retention step of retaining third party identification information for identifying whether a third party is a medical practitioner or a non-medical practitioner.

[0031] In addition to the above features, the present invention provides a method executed by a CPU in a health and medical related information management system which is a computer, wherein the access control step allows a medical practitioner to view the health and medical related information accumulated in the health and medical related information accumulation step when the public permission / non-permission information retained in the public permission / non-permission information retention step indicates public permission and the third party identification information retained in the third party identification information retention step indicates that the third party is a medical practitioner.

[0032] Furthermore, in addition to the features described above, the present invention provides a method executed by the CPU of a health and medical information management system, which is a computer, wherein the access control step allows a non-medical person to view a portion (including all) of the health and medical information stored in the health and medical information storage step, or health and medical information that has been anonymized by a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third-party identification information stored in the third-party identification information storage step indicates that the third party is not a medical professional.

[0033] Furthermore, in addition to the features described above, the present invention provides a method executed by the CPU of a health and medical information management system, which is a computer, wherein the anonymization method is performed by any one of the following anonymization methods, or a combination thereof: k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping.

[0034] Furthermore, in addition to the features described above, the present invention provides a method for storing health and medical information, which is a method executed by the CPU of a health and medical information management system that is a computer, wherein the health and medical information storage step includes one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information, medical questionnaire information, health promotion application data, and conversation data from an interactive health promotion SNS.

[0035] Furthermore, in addition to the features described above, the present invention provides a method for providing incentives that includes one or more of the following: providing My Number points, providing individual or general information services to information providers, providing individual drugs or supplements, providing books or other goods, providing passwords or IDs for information provision, providing items usable on a network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on a network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

[0036] Furthermore, in addition to the features described above, the present invention provides a method executed by the CPU of a health and medical information management system which is a computer, wherein the medical professionals include at least one of the following: physician, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, orthoptist, speech therapist, prosthetist / orthotist, radiological technologist, X-ray technologist, clinical laboratory technologist, public health laboratory technologist, clinical engineering technologist, dental hygienist, dental technician, paramedic, massage therapist, acupuncturist, moxibustion therapist, judo therapist, registered dietitian, nutritionist, mental health social worker, social worker, care worker, certified psychologist, clinical psychologist, and medical office staff.

[0037] Furthermore, in addition to the features described above, the present invention provides a method executed by the CPU of a health and medical information management system which is a computer, wherein the non-medical personnel include at least one employee belonging to a life insurance company, a non-life insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, a JA (agricultural cooperative), a cooperative health insurance association, a national health insurance association, a mutual aid association, a municipal national health insurance association, a national health insurance association, a PR company, a research institute, a university and a graduate school (including affiliated research institutions), a technical college, an agricultural, forestry and fisheries company, a fertilizer manufacturer, a government agency, a local government, or an independent administrative agency.

[0038] Specifically, the present invention provides an operating program for a health and medical information management system, which is a computer having: a health and medical information storage step for storing and managing health and medical information relating to an individual; an access control step for controlling the disclosure of the health and medical information stored in the health and medical information storage step to a third party via a network; an incentive management step for providing incentives to an individual to encourage the disclosure of health and medical information by referring to the provision history of the provision history retention step described later, regarding whether or not to permit the disclosure of health and medical information relating to the individual; and a provision history retention step for maintaining the provision history, which is a history of when incentives were provided to each individual.

[0039] Furthermore, in addition to the above features, the present invention includes an incentive type information holding step which holds incentive type information which is information indicating multiple types of incentives, and an incentive management step which provides an operating program for a health and medical information management system which is a computer that selects and provides incentives to be provided to an individual based on the incentive type information held in the incentive type information holding step according to the provision history, and writes the program in a readable and executable manner for the health and medical information management system.

[0040] Furthermore, in addition to the above features, the present invention provides an operating program for a health and medical information management system, which is a computer having: a termination request reception step that receives a termination request from an individual who has accumulated health and medical information in a health and medical information storage step, which is a request to stop or terminate the publication of already published health and medical information; a termination condition retention step that holds termination conditions, which are conditions for determining whether to terminate the publication based on information about the individual who made the termination request when a termination request is received; a judgment rule retention step that holds judgment rules, which are rules for determining whether to terminate the publication of health and medical information based on information about the individual who made the termination request and the retained termination conditions; a termination determination step that, when a termination request is received, determines whether to terminate the publication based on information about that individual, the retained termination conditions and the retained judgment rules; and a termination control step that, if the judgment result in the termination determination step is that the publication should be terminated, causes the access control step to control the publication of that individual's health and medical information to be terminated.

[0041] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer having an access authentication processing step for performing authentication to access an incentive management step, and is written in a readable and executable manner for the health and medical information management system.

[0042] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer having a consent information acquisition step that acquires consent information, which is information indicating that the user has agreed to accept incentives through an incentive management step after being authenticated in an access authentication processing step. The program is written in a readable and executable manner for the health and medical information management system.

[0043] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer having an incentive provision processing step that performs an incentive provision processing step for providing an incentive when consent information is obtained through a consent information acquisition step. The program is written in a readable and executable manner for the health and medical information management system.

[0044] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer having a disclosure permission information holding step that holds disclosure permission information indicating whether an individual permits the disclosure of their health and medical information to a third party, and which is written in a readable and executable manner for such a computer.

[0045] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer having a third-party identification information holding step for holding third-party identification information for identifying whether a third party is a medical professional or not, and which is written in a readable and executable manner for the health and medical information management system.

[0046] Furthermore, in addition to the above features, the present invention provides an operating program for a health and medical information management system, which is a computer that allows a healthcare professional to view the health and medical information stored in the health and medical information storage step, when the access control step indicates that the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted, and the third-party identification information stored in the third-party identification information storage step indicates that the third party is a healthcare professional.

[0047] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer that allows non-medical personnel to view a portion (including all) of the health and medical information stored in the health and medical information storage step, or health and medical information anonymized by a predetermined anonymization method, when the access control step indicates that the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted, and the third-party identification information stored in the third-party identification information storage step indicates that the third party is not a medical professional.

[0048] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer that performs anonymization processing using at least one of the following methods: k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof.

[0049] Furthermore, in addition to the above features, the present invention provides an operating program for a health and medical information management system, which is a computer that stores health and medical information including one or more of the following: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information, medical questionnaire information, health promotion app data, and conversation data from an interactive health promotion SNS.

[0050] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer that provides incentives including the provision of My Number points, the provision of individual or general information services to information providers, the provision of individual drugs or supplements, the provision of books or other products, the provision of passwords or IDs for information provision, the provision of items usable on a network, the provision of the right to receive medical treatment, the provision of the right to receive a diagnosis, the provision of the right to receive an examination, the provision of the right to receive various services on a network, the provision of specific software (e.g., a health management app or a pedometer app), the provision of points for prepaid or postpaid electronic money, and the provision of product coupons, travel coupons or cash.

[0051] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system, which is a computer containing at least one of the following medical professionals: physician, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, orthoptist, speech therapist, prosthetist / orthotist, radiological technologist, X-ray technologist, clinical laboratory technologist, public health laboratory technologist, clinical engineering technologist, dental hygienist, dental technician, paramedic, massage therapist, acupuncturist, moxibustion therapist, judo therapist, registered dietitian, nutritionist, mental health social worker, social worker, care worker, certified psychologist, clinical psychologist, and medical office staff.

[0052] Furthermore, in addition to the features described above, the present invention provides an operating program for a health and medical information management system that is written in a readable and executable format for a computer that includes at least one employee belonging to a life insurance company, a non-life insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, a JA (agricultural cooperative), a cooperative health insurance association, a national health insurance association, a mutual aid association, a municipal national health insurance association, a national health insurance association, a PR company, a research institute, a university and a graduate school (including affiliated research institutions), a technical college, an agricultural, forestry and fisheries company, a fertilizer manufacturer, a government agency, a local government, or an independent administrative agency. [Effects of the Invention]

[0053] Based on the above, the present invention provides a health and medical information management system that provides incentives to individuals in order to encourage the disclosure of health and medical information by referring to a provision history, which is a history of incentives provided to each individual regarding whether or not they consent to the disclosure of their health and medical information. [Brief explanation of the drawing]

[0054] [Figure 1] Diagram showing the hardware configuration applicable to the present invention. [Figure 2] A diagram showing the overall configuration of the health and medical information management system in this invention. [Figure 3] A diagram showing the functional configuration of the health and medical information management system in Embodiment 1. [Figure 4] A diagram showing the hardware configuration of the health and medical information management system in Embodiment 1. [Figure 5] A diagram showing the processing flow when using the health and medical information management system in Embodiment 1. [Figure 6] This figure shows an example of the provision history retention unit of the health and medical information management system in Embodiment 1. [Figure 7] A diagram showing the functional configuration of the health and medical information management system in Embodiment 2. [Figure 8]Diagram showing the hardware configuration of the health and medical information management system in Embodiment 2. [Figure 9] A diagram showing the processing flow when using the health and medical information management system in Embodiment 2. [Figure 10] A diagram showing an example of the incentive type information storage unit of the health and medical information management system in Embodiment 2. [Figure 11] A diagram showing an example of the incentive management unit of the health and medical information management system in Embodiment 2. [Figure 12] A diagram showing the functional configuration of the health and medical information management system in Embodiment 3. [Figure 13] This diagram shows the hardware configuration of the health and medical information management system in Embodiment 3. [Figure 14] A diagram showing the processing flow when using the health and medical information management system in Embodiment 3. [Figure 15] A diagram showing the functional configuration of the health and medical information management system in Embodiment 4. [Figure 16] A diagram showing the hardware configuration of the health and medical information management system in Embodiment 4. [Figure 17] A diagram showing the processing flow when using the health and medical information management system in Embodiment 4. [Figure 18] A diagram showing the functional configuration of the health and medical information management system in Embodiment 5. [Figure 19] A diagram showing the hardware calibration of the health and medical information management system in Embodiment 5. [Figure 20] A diagram showing the processing flow when using the health and medical information management system in Embodiment 5. [Figure 21] A diagram showing the functional configuration of the health and medical information management system in Embodiment 6. [Figure 22] A diagram showing the hardware configuration of the health and medical information management system in Embodiment 6. [Figure 23]A diagram showing the processing flow when using the health and medical information management system in Embodiment 6. [Figure 24] A diagram showing the functional configuration of the health and medical information management system in Embodiment 7. [Figure 25] This figure shows an example of the access control unit of the health and medical information management system in Embodiment 7. [Figure 26] This diagram shows the hardware configuration of the health and medical information management system in Embodiment 7. [Figure 27] A diagram showing the processing flow when using the health and medical information management system in Embodiment 7. [Figure 28] A diagram showing the functional configuration of the health and medical information management system in Embodiment 8. [Figure 29] This diagram shows the hardware configuration of the health and medical information management system in Embodiment 8. [Figure 30] A diagram showing the processing flow when using the health and medical information management system in Embodiment 8. [Figure 31] A diagram showing the functional configuration of the health and medical information management system in Embodiment 9. [Figure 32] This diagram shows the hardware configuration of the health and medical information management system in Embodiment 9. [Figure 33] A diagram showing the processing flow when using the health and medical information management system in Embodiment 9. [Figure 34] A diagram showing the functional configuration of the health and medical information management system in Embodiment 10. [Figure 35] A diagram showing the hardware configuration of the health and medical information management system in Embodiment 10. [Figure 36] This diagram shows the processing flow when using the health and medical information management system in Embodiment 10. [Figure 37] A diagram showing an example of anonymization method. [Figure 38] A diagram showing an example of anonymization method. [Figure 39] A diagram showing an example of anonymization method. [Figure 40] This diagram shows an example of the user interface for the health and medical information management system of the present invention. [Figure 41] This diagram shows an example of the user interface for the health and medical information management system of the present invention. [Figure 42] This diagram shows an example of the user interface for the health and medical information management system of the present invention. [Figure 43] This diagram shows an example of the user interface for the health and medical information management system of the present invention. [Figure 44] A diagram showing an example of the user interface of the health and medical information management system of the present invention <Regarding the hardware that may constitute the present invention>

[0055] Figure 1 shows the hardware configuration applied to the present invention. The present invention, in principle, is an invention that utilizes an electronic computer, but it can be realized by software, by hardware, and by the cooperation of software and hardware. The hardware that realizes all or part of the constituent elements of the present invention consists of the basic components of a computer, such as a CPU, memory, bus, input / output devices, various peripheral devices, and a user interface. Various peripheral devices include storage devices, internet interfaces, internet devices, displays, keyboards, mice, speakers, cameras, video cameras, televisions, various sensors for monitoring production status in laboratories or factories (flow sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipment counting machines, package counting machines, foreign object inspection devices, defective product counting machines, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human presence sensors, worker work status monitoring devices (video, ID, PC workload, etc.)), CD players, DVD players, Blu-ray players, USB memory sticks, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, telephones, fax machines, copiers, printers, movie editing devices, and various sensor devices. Furthermore, this system does not necessarily have to be composed of a single enclosure; it may be composed of multiple enclosures connected by communication. The communication may be LAN, WAN, Wi-Fi, Bluetooth®, infrared communication, or ultrasonic communication, and some parts may be installed across national borders. Furthermore, each of the multiple enclosures may be operated by a different entity, or they may be operated by a single entity. The operating entity of the system of the present invention may be singular or plural. The invention can also be configured as a system that includes terminals used by third parties, and even more terminals used by other third parties. These terminals may be installed across national borders. In addition to the system and the aforementioned terminals, devices used for registering related information of third parties and related individuals, and devices used as databases for recording registration details may be provided. These may be provided within the system, or they may be provided outside the system and the system may be configured to make this information available.

[0056] As shown in this diagram, the computer consists of a chipset, CPU, non-volatile memory, main memory, various buses, BIOS, various interfaces such as USB, HDMI®, and LAN, and a real-time clock, all configured on a motherboard. These work together with the operating system, device drivers (for various interfaces such as USB and HDMI®, and for embedding various devices such as cameras, microphones, speakers or headphones, and displays), and various programs. The various programs and data constituting the present invention are configured to efficiently utilize these hardware resources to perform various processes. ≪Chipset≫

[0057] A "chipset" is a set of large-scale integrated circuits (LSIs) mounted on a computer's motherboard that integrates the functionality of bridging—that is, the communication function between the CPU's external bus and the standard bus connecting memory and peripheral devices. There are two chipset configurations and one chipset configurations. The northbridge is located closer to the CPU and main memory, while the southbridge is located further away and serves as the interface for relatively slower external I / O.

[0058] (Northbridge) The northbridge includes the CPU interface, memory controller, and graphics interface. The CPU can handle most of the functions traditionally performed by the northbridge. The northbridge connects to the main memory slots via a memory bus and to the graphics card slots via a high-speed graphics bus (AGP, PCI Express).

[0059] (Southbridge) The southbridge connects to the PCI interface (PCI slot) via the PCI bus and handles I / O functions and sound functions for ATA (SATA) interface, USB interface, Ethernet interface, etc. Circuits supporting PS / 2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are impossible to operate at high speeds, can be separated from the southbridge chip and handled by a separate LSI called a super I / O chip, as this would hinder the speed of the chipset itself. Buses are used to connect the CPU (MPU) to peripherals and various control units. These buses are linked by the chipset. For the memory bus used to connect to main memory, a channel structure may be adopted instead to achieve higher speeds. Either a serial bus or a parallel bus can be used. While a serial bus transfers data one bit at a time, a parallel bus transmits the original data itself or multiple bits extracted from the original data as a single unit, simultaneously over multiple communication channels. A dedicated line for the clock signal runs parallel to the data lines to synchronize data demodulation at the receiving end. It is also used as a bus to connect the CPU (chipset) to external devices, and examples include GPIB, IDE / (parallel)ATA, SCSI, and PCI. Due to limitations in speed increases, in improved versions of PCI such as PCI Express and improved versions of parallel ATA such as Serial ATA, the data lines can be a serial bus.

[0060] ≪CPU≫

[0061] The CPU sequentially reads, interprets, and executes instruction sequences called programs located in main memory, outputting signal-based information back to the main memory. The CPU functions as the central hub for performing calculations within the computer. The CPU consists of a CPU core, which is the core of the calculations, and its peripheral parts. Inside the CPU are registers, cache memory, an internal bus connecting the cache memory and the CPU core, a DMA controller, timers, and an interface to the bus connecting to the northbridge. A single CPU (chip) may have multiple CPU cores. In addition to the CPU, processing may also be performed by a graphics interface (GPU) or FPU. The description in this embodiment is for a 2-core type, but it is not limited to this. Furthermore, the CPU can also have a program embedded within it.

[0062] Non-volatile memory

[0063] (HDD)

[0064] The basic structure of a hard disk drive consists of a magnetic disk, a magnetic head, and an arm that houses the magnetic head. The external interface can be SATA (formerly ATA). A high-performance controller, such as SCSI, supports communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read sectors, transfer them to the other hard disk drive, and write them. This process does not access the host CPU's memory, thus avoiding increased CPU load.

[0065] Main Memory

[0066] The CPU directly accesses and executes various programs in main memory. Main memory is volatile memory, and DRAM is used. Programs in main memory are loaded from non-volatile memory into main memory upon receiving a program execution command. Subsequently, the CPU executes the program according to various execution commands and procedures within the program.

[0067] Operating System (OS)

[0068] An operating system is used to manage the resources on a computer for applications to use, manage various device drivers, and manage the computer hardware itself. In small computers, firmware may be used as the operating system.

[0069] ≪BIOS≫

[0070] The BIOS is the component that instructs the CPU to start the computer hardware and run the operating system. Most typically, it is the first piece of hardware the CPU reads when it receives a computer startup command. The BIOS contains the addresses of the operating system stored on the disk (non-volatile memory), and the BIOS, deployed by the CPU, sequentially loads the operating system into main memory, bringing it into operation. The BIOS also has a check function that checks for the presence of various devices connected to the bus. The results of the check are saved in main memory and made available to the operating system as appropriate. The BIOS may also be configured to check for external devices. The above applies to all embodiments.

[0071] As shown in the figure, the present invention can basically be composed of a general-purpose computer program and various devices. The operation of the computer basically involves loading a program stored in non-volatile memory into main memory, and then executing processing between the main memory, the CPU, and various devices. Communication with devices is performed via an interface connected to a bus line. Possible interfaces include display interfaces, keyboards, and communication buffers. Embodiments of the present invention will be described below with reference to the illustrations.

[0072] <Fulfillment of the applicability of natural laws in this invention>

[0073] This invention functions through the collaboration of a computer, communication equipment, and software. Specifically, it relates to a health and medical information management system for storing and managing health and medical information, which is information related to an individual's health and medical care. Various information and data are exchanged between third-party terminals and administrator terminals via a network using hardware resources. Therefore, from this perspective, judging from the matters described in the claims and specification and the common technical knowledge related to those matters, this invention as a whole utilizes natural laws and falls under the category of a computer software-related invention.

[0074] <The significance of utilizing natural laws as required by patent law>

[0075] The use of natural laws required under patent law is based on the purpose of the law, and is required to ensure that an invention is industrially useful, from the perspective that the invention must have industrial applicability and contribute to the development of industry. In other words, it requires that the invention be industrially useful, that is, that the effects of the invention declared in the application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the applicability of natural laws is interpreted as meaning that the functions exhibited by each of the inventive features (constituent elements of the invention), which are the components of the invention that exert the effects of the invention, are exerted by utilizing natural laws. Furthermore, the effect of the invention only needs to have the potential to provide a certain level of usefulness to the user who uses the invention, and should not be viewed from the perspective of how the user feels or thinks about that usefulness. Therefore, even if the effect that the user obtains from this system is a psychological effect, the effect itself is an event outside the scope of the required applicability of natural laws. [Modes for carrying out the invention]

[0076] Embodiments of the present invention will be described below with reference to the attached drawings. The relationship between the embodiments and claims is as follows: Embodiment 1 is mainly described with respect to claims 1, 16, and 31; Embodiment 2 is described with respect to claims 2, 17, and 32; Embodiment 3 is described with respect to claims 3, 18, and 33; Embodiment 4 is described with respect to claims 4, 19, and 34; Embodiment 5 is described with respect to claims 5, 20, and 35; Embodiment 6 is described with respect to claims 6, 21, and 36; Embodiment 7 is described with respect to claims 7, 22, and 37; Embodiment 8 is described with respect to claims 8, 23, and 38; Embodiment 9 is described with respect to claims 9, 24, and 39; and Embodiment 10 is described with respect to claims 10, 25, and 40. The present invention is not limited in any way to these embodiments and can be implemented in various forms without departing from its gist.

[0077] <Overall configuration of the health and medical information management system of the present invention> Figure 2 shows an example of the overall configuration of the health and medical information management system in the present invention. The health and medical information management system 200 includes, at least, but not limited to, electronic medical record information, various test information (which may include health checkups, screenings, etc.), prescription information, medication history information, medication status information, vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds, urine measurement information (e.g., urinary glucose, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketones, nitrites, etc.), sleep duration, etc.), questionnaire information, health promotion app data, conversation data from interactive health promotion SNS, etc. The system consists of a health and medical information storage unit 201 that stores health and medical information including the above information, an access control unit 202 for controlling the disclosure of health and medical information stored in the health and medical information storage unit 201 to third parties via a network, an incentive management unit 203 for providing incentives to individuals to encourage the disclosure of health and medical information by referring to the provision history of the provision history storage unit 204 (described later) regarding permission for the disclosure of health and medical information concerning individuals, and a provision history storage unit 204 that stores the provision history, which is the history of incentives provided to each individual.

[0078] Furthermore, the health and medical information management system 200 is configured to be electrically connected to third-party terminals 206 and administrator terminals 207 via a network 205 (e.g., the Internet, WAN, LAN, etc.). Here, the third-party terminals 206 and administrator terminals 207 may be electronic devices (e.g., personal computers, tablet devices, smartphones, etc.) that can connect to the network 205 via a wired or wireless interface (e.g., a communication cable or a WiFi router, etc.).

[0079] Furthermore, in this invention, "third party" refers to an individual (including, but not limited to, the patient themselves, their family, and / or caregivers), as well as medical professionals and non-medical professionals as described later. Furthermore, "administrator" refers to a person who is responsible for managing and operating the entire health and medical information management system (for example, this may include an individual, or the institution, organization, or corporation to which that individual belongs; it may also include an employee of a government agency or local government, or an institution, organization, or corporation commissioned by a government agency or local government), and may have the authority to edit, add, and delete various types of information within the health and medical information management system.

[0080] Furthermore, for example, "electronic medical record information" includes basic patient information (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information related to examinations (e.g., patient's chief complaint (subjective symptoms and physical condition), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information related to nursing care and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds), urine measurement information (e.g., urinary glucose, urinary protein, urinary occult blood, etc.) This may include, but is not limited to, robilininogen, pH, bilirubin, ketones, nitrites, etc., sleep duration, observation results, records of urine and stool, records of diet and intake, records of nursing care, etc., information on tests (e.g., test orders, test results, images obtained from imaging tests (some), reports on those images, etc.), information on procedures and surgeries (e.g., instructions for procedures and surgeries, progress and results of procedures and surgeries, methods and results of pathological diagnoses if performed, etc.), information on medications (e.g., drug discovery instructions, date and time of administration and medication, results of administration, etc.), and information on post-treatment or post-operative follow-up.

[0081] Furthermore, for example, "prescription information" may include the insurer number, name, date of birth, gender, name of medical institution, contact information, name of prescribing physician, name of medication, form of medication (tablets, capsules, liquid, powder, granules, etc.), amount of medication (amount to take per dose), number of times to take per day, timing of administration, information about switching to generic drugs, and the number of times medication is dispensed in installments. Furthermore, "medication history information" may include, for example, the patient's name, date of birth, gender, My Number information or insured person's card symbol and number, address, emergency contact information, name of the prescribing medical institution and name of the physician, prescription date, prescription details, key points of inquiries regarding the dispensing date and prescription details, patient's constitution, allergy history, history of side effects, key points of consultations from the patient or their family, confirmation of medication adherence, status of remaining medication, changes in physical condition during medication, concomitant medications, information on past medical history including complications, whether or not the patient has consulted other departments, presence or absence of symptoms suspected to be side effects, intake of food and beverages (drug interactions), patient's intentions regarding the use of generic drugs, status of information provision via medication notebook, key points of medication guidance, and the name of the pharmacist who provided guidance.

[0082] Furthermore, "medication status information" may also include information regarding the remaining amount of prescribed medication (for example, the amount of medication remaining if the patient accidentally forgets to take it or intentionally fails to take it), information regarding the timing of visits to the clinic / pharmacy (for example, the time required from the scheduled end date of prescription (scheduled end date of medication) to the actual visit to the clinic / pharmacy (for example, if the patient visits earlier or later than scheduled)), and information regarding the patient's complaints about taking the medication (for example, complaints regarding subjective symptoms or physical condition such as developing hives after continuing to take a certain medication, or feeling dizzy or unsteady after taking a certain medication).

[0083] Furthermore, for example, "health and medical information" may include PHRs, etc. Alternatively, it may include various types of information obtained from PHR systems, etc., via APIs. Here, PHR is an abbreviation for Personal Health Record, and refers to information about an individual's health, medical care, and nursing care. The aim is for each individual to be able to manage and utilize their own health, medical care, and nursing care information chronologically throughout their life, thereby receiving high-quality services tailored to their own health condition. For example, each citizen has historically kept records of a great deal of health and medical information in various paper-based notebooks and documents. The medium and location in which these records are kept vary depending on the stage of life (a significant milestone in one's life). For instance, a "maternal and child health handbook" is used at the time of childbirth, "school health checkup results" during school education, and "regular health checkup results" when starting a job. Depending on one's physical condition, one may also use a "disease management handbook" or "medication handbook" to manage their own health, and as one gets older, records are kept in a "care prevention handbook" or "family doctor referral handbook." The idea and system of digitizing this existing "handbook culture" and centralizing it as data, allowing individuals to manage and utilize it themselves, is expected to become even more widespread in the future.

[0084] In this invention, the health and medical information storage unit 201 and the access control unit 202 are described on the premise that they function on the same server. However, the invention is not limited to this configuration, and they may be configured to function and play roles on separate servers. Alternatively, multiple servers may be provided, and information and data may be exchanged between them, allowing them to cooperate or collaborate to execute various functions. For example, the health and medical information storage unit 201 and the access control unit 202 may be configured as a cloud server.

[0085] Similarly, the present invention is described on the premise that the health and medical information storage unit 201 and the access control unit 202, and the incentive management unit 203 and the provision history retention unit 204 are configured to function on separate servers. However, the invention is not limited to this configuration, and each function and role may be performed on the same server. Alternatively, multiple servers may be provided, and information and data may be exchanged between them, allowing them to cooperate or collaborate to execute various functions. For example, the health and medical information storage unit 201, the access control unit 202, the incentive management unit 203, and the provision history retention unit 204 may be configured on a cloud server.

[0086] <Embodiment 1 (mainly corresponding to claims 1, 16, and 31)> <Overview of Embodiment 1> This embodiment provides a health and medical information management system comprising: a health and medical information storage unit for storing and managing health and medical information relating to an individual; an access control unit for controlling the disclosure of health and medical information stored in the health and medical information storage unit to a third party via a network; an incentive management unit for providing incentives to an individual to encourage the disclosure of health and medical information by referring to the provision history of the provision history storage unit described later, regarding whether or not to permit the disclosure of the health and medical information relating to the individual; and a provision history storage unit for storing the provision history, which is a history of incentives provided to each individual. Furthermore, to realize this, this embodiment provides a method executed by the CPU of a health and medical information management system which is a computer, and an operating program for the health and medical information management system which is a computer written in a readable and executable manner.

[0087] <Embodiment 1 Functional Configuration> Figure 3 shows the functional configuration of the health and medical information management system in Embodiment 1. In this embodiment, the system includes a health and medical information storage unit, an access control unit, an incentive management unit, and a provision history retention unit.

[0088] <Description of Embodiment 1: Health and Medical Information Storage Unit> The "Health and Medical Information Storage Unit" 201 is configured to have the function of storing health and medical information, which includes at least one of the following types of information: electronic medical record information about an individual, various test information (which may include health checkups, screenings, etc.), prescription information, medication history information, medication status information, vital signs information (for example, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds, urine measurement information (for example, urinary glucose, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketones, nitrites, etc.), sleep duration, etc.), questionnaire information, health promotion app data, and conversation data from interactive health promotion SNS.

[0089] Here, "electronic medical record information" includes, for example, basic patient information (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information related to examinations (e.g., patient's chief complaint (subjective symptoms and physical condition), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information related to nursing care and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, step count, respiratory rate, heart sounds), and urine measurement information (e.g., urinary glucose, urinary protein, urinary occult blood, urobilinol). It is desirable that the record be structured to include, at a minimum, but not limited to, energy levels (pH, bilirubin, ketones, nitrites, etc.), sleep duration, observation results, records of urine and stool, records of diet and intake, records of nursing care, etc.), information on tests (e.g., test orders, test results, images obtained from imaging tests (partial), reports on those images, etc.), information on procedures and surgeries (e.g., instructions for procedures and surgeries, progress and results of procedures and surgeries, methods and diagnostic results if a pathological diagnosis was made, etc.), information on medications (e.g., drug discovery instructions, date and time of administration and medication, results of administration, etc.), and information on post-treatment or post-operative follow-up.

[0090] Furthermore, it is desirable that the "prescription information" be structured to include, for example, the insurer number, name, date of birth, gender, name of the medical institution, contact information, name of the prescribing physician, name of the medication, form of the medication (tablets, capsules, liquid, powder, granules, etc.), amount of medication (amount to take per dose), number of times to take per day, timing of administration, information about switching to generic drugs, and the number of times the medication is dispensed in installments.

[0091] Furthermore, it is desirable that the "medication history information" be structured to include, for example, the patient's name, date of birth, gender, My Number information or insured person's card symbol and number, address, emergency contact information, name of the prescribing medical institution and name of the physician, prescription date, prescription details, key points of inquiries regarding the dispensing date and prescription details, the patient's constitution, allergy history, history of side effects, key points of consultations from the patient or their family, medication adherence, confirmation of remaining medication, changes in physical condition during medication, concomitant medications, information on past medical history including complications, whether or not the patient has consulted other departments, whether or not there are symptoms suspected to be side effects, intake of food and beverages (drug interactions), the patient's intentions regarding the use of generic drugs, status of information provision via medication notebook, key points of medication guidance, and the name of the pharmacist who provided guidance.

[0092] Furthermore, it is desirable that the "medication status information" be structured to include information such as: information on the remaining amount of prescribed medication (for example, the amount of medication remaining if the patient accidentally forgets to take it or intentionally fails to take it); information on the timing of visits to the clinic / pharmacy (for example, the time required from the scheduled end date of prescription (scheduled end date of medication) to the actual visit to the clinic / pharmacy (for example, if the patient visits earlier or later than scheduled)); and information on the patient's complaints about taking the medication (for example, complaints about subjective symptoms or physical condition such as developing hives after continuing to take a certain medication, or feeling dizzy after taking a certain medication because it was too effective). In addition, in this invention, personal identification number (My Number) information, or the insured person's card symbol and number of the health insurance to which the individual (user) belongs, may be used as identification information to uniquely identify an individual (user), and health and medical information related to the individual may be associated with and stored and organized.

[0093] Furthermore, for example, "health and medical information" may include PHRs, etc. Alternatively, it may include various types of information obtained from PHR systems, etc., via APIs. Here, PHR is an abbreviation for Personal Health Record, and refers to information about an individual's health, medical care, and nursing care. The aim is for each individual to be able to manage and utilize their own health, medical care, and nursing care information chronologically throughout their life, thereby receiving high-quality services tailored to their own health condition. For example, each citizen has historically kept records of a great deal of health and medical information in various paper-based notebooks and documents. The medium and location in which these records are kept vary depending on the stage of life (a significant milestone in one's life). For instance, a "maternal and child health handbook" is used at the time of childbirth, "school health checkup results" during school education, and "regular health checkup results" when starting a job. Depending on one's physical condition, one may also use a "disease management handbook" or "medication handbook" to manage their own health, and as one gets older, records are kept in a "care prevention handbook" or "family doctor referral handbook." The idea and system of digitizing this existing "handbook culture" and centralizing it as data, allowing individuals to manage and utilize it themselves, is expected to become even more widespread in the future.

[0094] <Description of the configuration in Embodiment 1: Access Control Unit> The "Access Control Unit" 202 is configured to have functions for controlling the disclosure of health and medical information stored in the health and medical information storage unit to third parties via the network. For example, as described later, it is desirable that it be configured to have functions for analyzing IP packets in response to access from third-party terminals, determining the destination IP address, obtaining the access ID / user ID, obtaining the access subject / user attributes, and performing access control based on these.

[0095] <Description of Embodiment 1: Incentive Management Department> The "Incentive Management Unit" 203 is configured to have the function of providing incentives to individuals to encourage the disclosure of their health and medical information by referring to the provision history of the Provision History Retention Unit, which will be described later, regarding whether or not to permit the disclosure of their health and medical information. Actions "to provide incentives" include actions that actually provide incentives using electronic data, etc., as well as actions that perform the necessary processing to carry out actions that are performed separately but which are actually providing incentives. Figure 10 shows the types of incentives. When the incentive is the provision of points or electronic data such as information services, the actions required are performed by a computer. When the incentive is the provision of drugs / supplements, the actions required are, for example, the processing actions to send the drugs or supplements to the publisher of health and medical information. In other words, the incentive management department performs actions "for the purpose of...", so it does not necessarily have to be the action of providing the incentive itself. Figure 44 shows an example of a user interface for the health and medical information management system in the present invention. In this case, information is stored and managed in a table format indicating whether or not the individual (user) who accessed the system using a third-party terminal, that is, the individual (user) who possesses the individual number (My Number) information "123456789012", has given consent to receive incentives for which health and medical-related information. If consent is given, permission is granted to disclose that health and medical-related information to third parties, i.e., incentives are provided. If consent is not given, that health and medical-related information is not disclosed to third parties, i.e., no incentives are provided. It is desirable that this incentive information be kept up-to-date at all times by having the Incentive Management Department regularly exchange information with the Health and Medical-Related Information Storage Department and the Provision History Storage Department described below. For example, in Figure 44, the system stores and manages whether or not an individual has given consent to each piece of health and medical information. Here, the "○" mark in the "Consent / Disagreement" column indicates the individual's consent, and the "×" mark indicates their refusal to consent. It is preferable that the input of a "○" or "×" mark in the "Agree / Disagree" field is configured so that the individual (user) can select either a "○" or "×" mark of their own free will, for example, through a pull-down menu on the terminal screen. Here, clicking, touching, or tapping an item listed in the "Health and Medical Information" section (for example, "Periodic Checkup Results") on the terminal screen may display more detailed information in a pop-up window or on another transition screen. Also, clicking, touching, or tapping the "○" or "×" mark in the "Agree / Disagree" section on the terminal screen may display the date and time of agreement or disagreement in a pop-up window. In particular, it is preferable that health and medical information marked with a "○" in the "Agree / Disagree" section be stored and managed in the provision history retention unit described later. Note that health and medical information without any mark in the "Agree / Disagree" section indicates that the individual (user) has not yet indicated their consent or disagreement.

[0096] Figure 40 shows the user interface of the health and medical information management system of the present invention. In this case, the Incentive Management Department will authenticate the individual and grant access if the individual enters their personal identification number (My Number) and password information into the relevant fields and the matching information exists within the system. In this diagram, the explanation is given using a method where the user directly inputs the information. However, for example, if the user is using a smartphone, the method could also be used in which the user holds the My Number Card over the smartphone using the smartphone's IC card reading function to automatically read and input the required information, such as the individual number (My Number) information. For example, if My Number information and / or password information is entered incorrectly three times in a row, the device may be locked, requiring the user to go to the local government (city / ward / town / village office, etc.) to have it unlocked. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again tomorrow" may be displayed on the device, or the user may be notified by voice or a warning sound. Furthermore, it is desirable that the information to which an individual (user) has consented to be stored and managed in a way that makes it easy to determine whether or not they have consented to any health-related information. Furthermore, it is desirable that the incentive provision process be configured to determine the extent to which incentives should be provided for health and medical information to which the user has consented.

[0097] For example, in the example shown in Figure 44, if health and medical information about one individual is provided to one recipient, 1000 My Number Points are calculated and awarded based on a predetermined calculation rule. If the same health and medical information is provided to two recipients, 2000 My Number Points are awarded based on a predetermined calculation rule, double the amount. Furthermore, the incentive calculation rule may be weighted based on the importance, urgency, rarity, and usefulness of the health and medical information, and different incentives may be calculated and awarded for each piece of health and medical information. In particular, for example, for malignant neoplasms (cancer), which is the leading cause of death in Japan; hypertension, diabetes, dyslipidemia, periodontal disease, or eye diseases, various infectious diseases defined in the "Infectious Diseases Control Law," including COVID-19; and rare diseases with few cases worldwide, it may be considered to set the calculation rule to give a higher incentive than other diseases, considering that disclosing such health and medical information to third parties can greatly contribute to the advancement of medicine.

[0098] Furthermore, "incentive" simply refers to "motivation and reward," meaning intentionally providing stimuli with the aim of causing a certain action. In this invention, "incentive" may include, in addition to the My Number Points mentioned above, individual or general information services to information providers, provision of individual drugs or supplements, provision of books or other goods, provision of passwords or IDs for information provision, provision of items usable on a network, provision of rights, such as the right to receive medical treatment, the right to receive a diagnosis, the right to receive an examination, the right to receive various services on a network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash. In addition, the following may be included: discounting some goods or services, such as discounts or reductions in insurance premiums, or discounts on insurance rates. Furthermore, refunds of paid fees, awarding of prizes (e.g., novelty items), awards and commendations, and provision of preferential treatment coupons may also be included. Furthermore, rewards may include points, discounts, free items, early access to new products, or exclusive sales. Additionally, rights to write brand reviews, refer friends, and create user-generated content may also apply. Product or service upgrades may also be included.

[0099] Furthermore, this invention can be applied in both cases: when information indicating whether or not permission to disclose personal health and medical information to a third party is already associated and stored and managed; or when an individual (user) newly registers health and medical information relating to themselves in the health and medical information storage unit and the information indicating whether or not permission to disclose is not yet associated and stored and managed; in other words, it is possible to provide incentives. Specifically, even if personal health and medical information is not stored within the health and medical information management system, if, for example, an individual's health and medical information is stored on a terminal owned by that individual and is uploaded to this system, the incentive management unit can be configured to function to provide incentives according to the result of a formal check of the uploaded information, if it is determined that the information can be disclosed as health and medical information. In this case, the access control unit of this system may be configured not to deny access to view health and medical information from third parties. However, it may be configured to partially deny or restrict access depending on the type or qualifications of the third party. Furthermore, uploading personal health and medical information to this system may be done by transfer, and the transfer source may not be the individual's terminal but another system that stores health and medical information. For example, health and medical information stored in servers such as maternal and child health handbook information servers, PHR (Personal Health Record) servers, nursing care information servers, dental care information servers, and rehabilitation information servers can be configured to be transferred to this system with the individual's consent. In this case, the system can be configured so that the incentive management unit functions once the individual's health and medical information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

[0100] Here, the computer operations of the Incentive Management Department that "refer to and provide" include, but are not limited to, one or more of the following: a process that, upon review, confirms that no incentive has been provided in the past and executes an action to provide an incentive; a process that, upon review, determines that a predetermined period (time) has elapsed since an incentive was previously provided and executes an action to provide an incentive; a process that, upon review, determines that the disclosure rate of health and medical information has reached a certain value and executes an action to provide an incentive; or a process that, upon review, determines that something that was publicly available but not actually viewed by anyone has been viewed by someone (in this case, the incentive provision history and the viewing history of health and medical information have equivalent meanings).

[0101] Furthermore, "encouraging disclosure" is synonymous with "encouraging disclosure." In this invention, "disclosure" means making all or part of health and medical-related information, or processed or modified information thereof, available to others in some form (which may be anonymous) (excluding oneself; however, in the case of a person who is managed or assisted by someone, such as a child, a person under legal incapacity, or a person receiving care, the person who manages or assists them is not included in "others"). This may include cases where the information is actually disclosed, or where it is not actually disclosed but is in a state where it can be disclosed. Recipients of disclosure may include, but are not limited to, others belonging to medical institutions, medical-related organizations, public institutions, pharmaceutical companies, etc.

[0102] <Embodiment 1 Configuration Description: Provision History Retention Unit> The "provision history retention unit" 204 is configured to have the function of retaining a provision history, which is a record of the incentives provided to each individual. "Provision history" refers to one or more of the following: a history of whether or not an incentive was granted, a history specifying the content of the incentive granted, or a history specifying the amount of the incentive granted. The timing of the grant may be associated with the history, or only the fact that an incentive was granted may be specified. Therefore, since only the fact that an incentive was granted may be specified, in a configuration where incentives are generally granted for the provision of health and medical information, the incentive provision history is the same as the disclosure history of health and medical information. Consequently, the provision of incentives is equivalent to encouraging disclosure by referring to the disclosure history of health and medical information, and the provision of incentives is equivalent to doing so by referring to the provision history. Therefore, in this invention, when the incentive management department refers to the disclosure history of health and medical information, this may be included in the incentive management department referring to the provision history.

[0103] Various methods can be considered for providing incentives. For example, if an individual grants permission to disclose all of their health and medical information, all health and medical information associated with that personal identification information can be viewed by designated authorized institutions without limit on the number of times. It is possible to structure the incentive so that one incentive is given only once for each act of granting permission to disclose, or to give an incentive each time the permitted health and medical information is viewed as a result of the permission. Furthermore, since an individual's health and medical information is usually divided into multiple categories, it is also possible to adopt a structure in which incentives are given according to the categories that are viewed or used. In addition, it is also possible to adopt a structure in which incentives are given according to the number of times each category is viewed or used. Incidentally, categories in health and medical information can be divided into various categories such as each onset of disease, each consultation, each prescription issuance, each type of disease, each generation of medication history information, each acquisition of medication information, etc. It is also possible to consider a structure in which incentives are given according to the depth of disclosure of health and medical information. The depth of disclosure referred to here can be structured to provide more or higher-quality incentives as the level of disclosure gradually increases. For example, disclosing only the name of the disease, then disclosing the name, usage, and dosage of the medication prescribed for that disease, then disclosing the results of taking the medication (e.g., improvement of symptoms or onset of side effects), and finally disclosing the patient's feelings about the medication.

[0104] Next, we will explain the incentive granting process flow. Incentive information is electronically processed by the incentive management unit, or an incentive output unit or incentive processing unit linked to it, so that some benefit is generated for the individual patient. This electronic processing may be the granting of the incentive itself, or it may be a preliminary process for granting the incentive. The granting of incentives is triggered by the receipt of information indicating that an individual, such as a patient, has authorized the disclosure of all or part of their health and medical information, or processed or modified versions thereof. This trigger may originate from an individual's device, such as a smartphone, or from a device used by a medical institution. For example, in the case of a smartphone, an application is installed on the smartphone that allows the user to view and edit their personal health and medical information to a certain extent. The user accesses the present invention system through this application, enters the health and medical information disclosure portal, and performs the action of granting permission to disclose their own health and medical information.

[0105] Alternatively, the system can be configured to allow similar operations via web access instead of an application. This access must be strictly managed for security; for example, it is preferable to configure the system to allow disclosure permission using a one-time password. In this case, the health and medical information management system may be a so-called PHR (Personal Health Record) or a system that works in conjunction with a PHR. Furthermore, this system may be configured to manage the disclosure of health and medical information for all citizens independently, or multiple similar systems may operate in parallel to manage the disclosure of health and medical information held in the PHR. Furthermore, when a trigger is pulled from a terminal at a medical institution, it refers to a situation where a medical professional or other person interviewing a patient pulls the trigger with the patient's permission. In such cases, it is preferable to borrow the patient's health insurance card, individual number (My Number) card, or equivalent identification document, and configure the system to use that borrowed document to pull the trigger. The medical institutions referred to here may include nursing homes, pharmacies (including dispensing pharmacies), and other welfare facilities. This may also refer to medical institutions accessed via the internet. Moreover, it is possible to configure the system so that terminals used by designated management servers of pharmaceutical companies or public research institutions can pull the trigger. Of course, authentication of the individual patient or other person is a prerequisite.

[0106] Figure 6 shows an example of the provision history retention unit of the health and medical information management system in this embodiment. As shown in this diagram, it can be seen that the provision history of individual numbers (My Number) is maintained and managed separately for each individual, for Mr. X whose My Number information is "123456789012" and for Mr. Y whose My Number information is "456789012345". For example, for Mr. X, whose personal identification number (My Number) information is "123456789012", it is shown that the health and medical information "Regular checkup results (Hospital A)" with ID "0001" was provided to "Dr. Suzuki (Hospital B)" on the date and time of provision, "2023 / 04 / 01", and that the incentive "My Number Points 1000p" was provided to him. Similarly, for other health and medical-related information, a history of incentives provided to each individual is maintained and managed.

[0107] <Embodiment 1: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to a diagram.

[0108] Figure 4 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 401 that performs various calculations and a "main memory" 402. It also includes a "non-volatile memory" 403 that holds predetermined information and a "network I / F (interface)" 404 that sends and receives information with multiple third-party terminals 406 and an administrator terminal 407. These are interconnected by data communication paths such as a "bus" 405 to send and receive information and perform processing.

[0109] In this configuration, "main memory" is read by the "CPU" to execute programs that perform various processing tasks, and at the same time, it provides a work area that serves as the working area for those programs. Furthermore, both "main memory" and "non-volatile memory" are assigned multiple addresses, and programs executed by the "CPU" can access these addresses to exchange data and perform processing. In this embodiment, programs stored in "main memory" include a health and medical information storage program, an access control program, an incentive management program, and a provision history retention program. Health and medical information, incentive management information, and provision history information are stored in both "main memory" and "non-volatile memory."

[0110] The CPU executes a health and medical information storage program stored in main memory and stores health and medical information about individuals, such as electronic medical record information, various test information, prescription information, medication history information, medication status information, and vital information (such as body temperature, blood pressure, and heart rate), in main memory and non-volatile memory via the network interface. It also executes an access control program stored in main memory to control access to health and medical information about individuals. Furthermore, it executes an incentive management program stored in main memory to provide and manage incentives to individuals to encourage the disclosure of their health and medical information, referring to the provision history information regarding permission to disclose their health and medical information. Finally, it executes a provision history retention program stored in main memory and stores provision history information, which is a history of when incentives were provided, in main memory and non-volatile memory.

[0111] <Embodiment 1: Health and Medical Information Management System: Processing Flow> Figure 5 shows the processing flow when using the health and medical information management system in this embodiment. As shown in the figure, the processing method consists of a health and medical information storage step S501, an access control step S502, an incentive management step S503, and a provision history retention step S504.

[0112] The "Health and Medical Information Accumulation Step" S501 is the stage in which health and medical information about an individual is accumulated, such as electronic medical record information, various test information, prescription information, medication history information, medication status information, and vital information (such as body temperature, blood pressure, heart rate, etc.).

[0113] The "access control step" S502 is the stage in which access to health and medical information about an individual that has been stored in the health and medical information storage step is controlled.

[0114] The "Incentive Management Step" S503 is the stage in which incentives are provided to individuals to encourage the disclosure of their health and medical information, by referring to the provision history maintained in the provision history retention step described below, regarding whether or not to allow the disclosure of their health and medical information.

[0115] The "Provision History Retention Step" S504 is the stage in which the provision history, which is the history of incentives provided to each individual, is retained.

[0116] <Summary> Based on the above, the present invention provides a health and medical information management system that provides incentives to individuals in order to encourage the disclosure of health and medical information by referring to a provision history, which is a history of incentives provided to each individual regarding whether or not they consent to the disclosure of their health and medical information. Furthermore, this invention, by providing incentives to individuals to grant permission for the disclosure of their health and medical information to third parties, increases opportunities for individuals to disclose their health and medical information to third parties. This can lead to a reduction in national medical expenses, improved health for the entire population, and reduced time and costs spent by research institutions and pharmaceutical companies on drug discovery, ultimately contributing to the advancement of medicine. Here, "drug discovery" refers to the process from the initial compounds and chemical substances (also called "seeds") that become pharmaceuticals to the final product that is sold. Furthermore, the following steps (1) to (5) are essential for a compound or chemical substance to become a pharmaceutical product that can be sold. (1) Select candidate drug targets (compounds / chemical substances) (2) Select candidate substances that can be used as the basis for pharmaceuticals by screening their effects. Screening methods include biotechnology, combinatorial chemistry (techniques for creating compounds by combining multiple compounds), and highly efficient screening using AI robotics technology. (3) Animal experiments The safety and efficacy of a drug are investigated and confirmed in detail using animals or cultured cells. A drug whose safety and efficacy are confirmed at this stage is called an "investigational drug." (4) Clinical trials The investigational drug is actually used on humans to thoroughly examine its effects and safety, and to determine whether it can be useful in actual treatment. (5) Application for approval and review Drugs that pass all of the above tests (1) to (4) are submitted to the Ministry of Health, Labour and Welfare. They then undergo review by the Pharmaceuticals and Medical Devices Agency (PMDA) and await approval from the Minister of Health, Labour and Welfare. Only after approval can a drug be marketed as a product. Generally speaking, the drug discovery process takes about 10 to 18 years, and the probability of a compound or chemical substance becoming a new drug is about 1 in 10,000. Furthermore, the total cost of successful drug discovery is said to be close to 20 billion yen.

[0117] <Embodiment 2 (mainly corresponding to claims 2, 17, and 32)> <Overview of Embodiment 2> This embodiment is characterized by having an incentive type information holding unit that holds incentive type information, which is information indicating multiple types of incentives, and an incentive management unit that selects and provides incentives to individuals based on the incentive type information held in the incentive type information holding unit according to the provision history. From here on, functions, hardware configurations, and processing flows that overlap with Embodiment 1 will be omitted from explanation as appropriate.

[0118] <Description of the configuration in Embodiment 2: Incentive type information holding unit> Figure 7 shows the functional configuration of the health and medical information management system in this embodiment. The "incentive type information holding unit" 701 is configured to have the function of holding incentive type information, which is information indicating the types of multiple incentives. Figure 10 shows an example of the incentive type information storage unit of the health and medical information management system in this embodiment. As shown in this diagram, incentive type information and the specific incentives related to that incentive type information are linked, maintained, and managed in an associated manner. For example, if the incentive type information is "(A) Points," it can be seen that specific examples of incentives such as "(a) My Number Points, (b) Transportation-related electronic money (Suica®, PASMO®, etc.), (c) Retail-related electronic money (WAON®, nanaco®, etc.)" are stored and managed. Similarly, for other incentive type information, specific examples of incentives are listed and stored and managed. Individuals (users) can choose one of the incentives based on this incentive type information when providing their own health and medical information to the appropriate recipients.

[0119] <Description of Embodiment 2 Configuration: Incentive Management Unit - Features Characteristic of Embodiment 2> The incentive management department makes two types of selections: one made automatically by the computer (composed of programs) that constitutes the incentive management department, and another made by the incentive management department based on the selection actions of the provider of health and medical information (usually the owner of the health and medical information, but in cases where the person is under some form of control, such as being a child, the manager). In the latter case, the computer receives the person's selection action and makes a selection based on that action. As an example of automatic selection by the computer, if information on the results of drug use owned by the owner of health and medical information is provided to a pharmaceutical company, the incentive management department could be configured to automatically select the incentive offered by that pharmaceutical company. Also, if the provider of health and medical information resides in Aomori Prefecture, the system could be configured to automatically select an incentive that is only valid in Aomori Prefecture. In this way, automatic selection can be configured to be made automatically based on the content of the health and medical information provided, the attribute information of the owner of that health and medical information, etc.

[0120] Whether the selection is automatic or based on a selection made by the owner (provider) of the health and medical information, the system is configured to use selection rules to enable the incentive management unit to make a selection. These selection rules may be stored within the incentive management unit using a selection rule storage mechanism, or they may be configured to be stored outside the incentive management unit or outside this system. Furthermore, the selection rules may be configured to be appropriately optimized (not necessarily optimal, and this simply means that they will be changed) according to the provision history of the owner (provider) of the health and medical information and the publication history of the health and medical information. For example, they may be configured to be changed by an editing artificial intelligence. In addition, a selection rule editing unit may be provided so that these rules can be edited by the system administrator or other operators. The incentive management unit will be able to select and provide incentives to individuals based on the incentive type information stored in the incentive type information storage unit, according to the aforementioned provision history. In other words, it will be configured to select and provide incentives based on the incentive type information. Figure 11 shows an example of the incentive management unit of the health and medical information management system in this embodiment. As shown in this diagram, it is possible to select and provide specific incentives by having individuals (users) choose incentive type information, or by having the incentive management department automatically select it. For example, in Mr. Y's case, it can be seen that in addition to "points (My Number Points and PASMO®)", he has also been offered "software / apps" and "cash".

[0121] Furthermore, when the Incentive Management Department selects and provides incentives based on incentive type information, the following scenarios are anticipated regarding the process leading up to the actual use of the incentives.

[0122] For example, if "points" are chosen as an incentive, the following cases are possible. Firstly, if the incentive is "My Number Points," the system's incentive management unit triggers the system by sending personal identification information (e.g., My Number) and information regarding the points to be awarded to a management server owned by the organization that manages and operates the My Number Portal Site. Within that server, the My Number Points associated with the personal identification information are increased by the amount of the points to be awarded. In other words, based on this trigger information, the management server owned by the organization that manages and operates the My Number Portal Site awards My Number Points to the individual corresponding to the personal identification information, and notifies the individual's device (e.g., smartphone) that the My Number Points have been increased, allowing the individual to use the My Number Points, including the increase. These My Number Points can then be exchanged for points from other transportation / retail electronic money systems, which can then be used to purchase desired goods or as payment for various services of the individual's choice.

[0123] Secondly, if the incentive is a "prepaid card," it will be possible to purchase goods from Amazon® or other sites using a prepaid card purchased at a convenience store or similar location (for example, a card with a set amount corresponding to the purchase price and identification information to identify the card).

[0124] Furthermore, if, for example, "medicine / supplements" is selected as an incentive, the incentive management unit in this system will trigger the process by sending information including personal identification information and its attribute information (e.g., personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information to identify the product the user wishes to purchase (e.g., product name such as "Supplement ABC", manufacturer / distributor information, price information, etc.) to a management server managed and operated by a purchase site such as Amazon® via the network. Then, if the specified product is in stock at the Amazon® management server, a delivery company will deliver the product to the user's home.

[0125] Furthermore, if, for example, "provision of rights" is selected as an incentive, the incentive management unit in this system will trigger the process by sending personal identification information and its attribute information (for example, personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information to identify the desired rights (for example, an identification number indicating an admission ticket to Disneyland®) via the network to a management server owned by the organization that manages and operates the provision of rights. In response to this trigger, the management server will send a QR code (registered trademark) that serves as an admission ticket to Disneyland® to the individual's smartphone. The individual who has saved the QR code (registered trademark) on their smartphone will then go to Disneyland®, which is the rights enforcement agency, and hold the QR code (registered trademark) up to the reader at the entrance. If there are no problems, the individual will be able to enter Disneyland® and enjoy various attractions, meals, etc.

[0126] <Embodiment 2: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to a diagram.

[0127] Figure 8 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 801 that performs various calculations and a "main memory" 802. It also includes a "non-volatile memory" 803 that holds predetermined information and a "network I / F (interface)" 804 that sends and receives information with multiple third-party terminals 806 and an administrator terminal 807. These are interconnected by data communication paths such as a "bus" 805 to send and receive information and perform processing.

[0128] In this embodiment, "main memory" is read by the "CPU" to execute programs that perform various processes, and at the same time, it provides a work area that serves as the working area for those programs. In addition, multiple addresses are assigned to both "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing these addresses. In this embodiment, the program stored in "main memory" is an incentive type information holding program. In addition, incentive type information and incentive management information are stored in both "main memory" and "non-volatile memory."

[0129] The CPU executes an incentive type information retention program stored in main memory to retain incentive type information, which is information indicating multiple types of incentives, and stores the incentive type information and related incentive management information in main memory and non-volatile memory.

[0130] <Embodiment 2: Health and Medical Information Management System: Processing Flow> Figure 9 is a diagram showing the processing flow when using the health and medical information management system in this embodiment. As shown in the figure, the processing method consists of an access authentication processing step S901.

[0131] The "Incentive Type Information Retention Step" S901 is the step of retaining incentive type information, which is information indicating the types of multiple incentives.

[0132] <Summary> Based on the above, the present invention has an incentive type information holding unit that holds incentive type information, which is information indicating multiple types of incentives, and the incentive management unit can select and provide incentives to an individual based on the incentive type information held in the incentive type information holding unit, according to the provision history.

[0133] <Embodiment 3 (mainly corresponding to claims 3, 18, and 33)> <Overview of Embodiment 3> This embodiment is characterized by having: a termination request receiving unit that receives termination requests from individuals who have stored health and medical information in the health and medical information storage unit, which are requests to stop or terminate the publication of already published health and medical information; a termination condition holding unit that holds termination conditions, which are conditions for determining whether to terminate the publication based on information about the individual who made the termination request when a termination request is received; a judgment rule holding unit that holds judgment rules, which are rules for determining whether to terminate the publication of health and medical information based on information about the individual who made the termination request and the held termination conditions; a termination determination unit that, when a termination request is received, determines whether to terminate the publication based on information about that individual, the held termination conditions, and the held judgment rules; and a termination control unit that, if the judgment result of the termination determination unit is that the publication should be terminated, causes the access control unit to control the publication of that individual's health and medical information to terminate. From here on, functions, hardware configurations, and processing flows that overlap with Embodiments 1 and 2 will be omitted from the explanation as appropriate.

[0134] <Embodiment 3: Configuration Description: Termination Request Reception Unit> Figure 12 shows the functional configuration of the health and medical information management system in this embodiment. The "termination request receiving unit" 1201 is configured to have the function of receiving termination requests from individuals who have stored health and medical information in the health and medical information storage unit, which are requests to stop or terminate the publication of health and medical information that has already been made public. For example, on the login screen of the health and medical information management system shown in Figure 40, an individual (user) can use a third-party terminal to enter their personal identification number (My Number) information and password information. If the system finds matching information, authentication is performed, and the user can access the incentive management unit and the provision history retention unit to view whether their own health and medical information is publicly available, who the recipients are, what the type of incentive is, and what the specific incentive is. Furthermore, it is desirable that, for example, in the browsing screen shown in Figure 44, a third-party terminal can send a termination request to the system to stop or terminate the publication of desired health and medical-related information from among the already published health and medical-related information, based on the individual's will, and that the system be configured to accept such termination request.

[0135] <Embodiment 3: Description of Configuration: Termination Condition Holding Unit> The "termination condition holding unit" 1202 is configured to have the function of holding termination conditions, which are the conditions for determining whether it is permissible to terminate the service based on information about the individual who made the termination request, when a termination request is received. For example, the following are possible termination conditions. However, the program is not necessarily limited to these cases. (1) When the disease is completely cured / recovered / in remission If an individual (user) is deemed to have achieved "complete recovery" (meaning the illness or injury is completely healed; in other words, returning to the state before the illness or injury occurred), "full recovery" (meaning treatment for the illness or injury is no longer necessary and daily life can be carried out without problems; however, this does not necessarily mean returning to the state before the illness or injury occurred), or "remission" (meaning the illness or injury is temporarily or continuously recovering; often used for diseases that have a possibility of recurrence, such as cancer or leukemia; this means a state where symptoms are suppressed, and continued treatment or regular examinations may still be required) through treatment or medication by their primary physician (family doctor), the individual may, at their own discretion, suspend or terminate the disclosure of their health and medical information related to this illness. (2) When an individual (user) moves to a new address If an individual (user) moves (relocates) due to reasons such as changing jobs or being transferred, and their primary care physician (family doctor) who has treated their illness or injury changes, the individual may, at their own discretion, stop or terminate the disclosure of their personal health and medical information. (3) If your primary care physician changes If a patient's primary care physician (family doctor) changes due to the consolidation or closure of hospitals or other medical institutions, such as by transferring to another hospital, the patient may, at their own discretion, stop or terminate the disclosure of their personal health and medical information.

[0136] <Description of the configuration in Embodiment 3: Decision rule holding unit> The "decision rule holding unit" 1203 is configured to have the function of holding decision rules, which are rules for determining whether or not to terminate the disclosure of health and medical information based on information about the individual who requested termination and the termination conditions that are held. For example, it is desirable to formulate a decision rule for determining whether or not to terminate the publication of health and medical information based on information obtained from the electronic medical record of this system indicating that an individual's (user's) illness has been cured by the treatment and medication of their primary physician, and the termination conditions stored in the termination condition storage unit mentioned above, for example, condition (1) mentioned above. In this case, since the health and medical information concerning that illness is judged to be cured, it is expected that the significance and need to disclose it to third parties will decrease, so it is preferable to terminate the publication as a decision rule. Furthermore, if an individual (user) changes their primary physician (family doctor) at a medical institution (hospital, clinic, etc.), there is no longer any point in disclosing health and medical information to the original physician, so it is preferable to terminate disclosure as a rule of judgment. However, disclosing the individual's health and medical information to the new primary physician (family doctor) is essential for formulating treatment and medication policies, so it is preferable to continue disclosing the information as a rule of judgment.

[0137] <Description of Embodiment 3: Termination Determination Unit> The "termination determination unit" 1203 is configured to have the function of determining whether to terminate the service when a termination request is received, based on information about the individual, the termination conditions held, and the determination rules held. For example, based on the electronic medical record information indicating that an individual's illness or injury has been completely cured, the termination condition held in the termination condition holding unit mentioned above (in this case, condition (1) above), and the judgment rule mentioned above, it can be determined that the disclosure of this individual's health and medical information should be terminated. Furthermore, for example, if, based on electronic medical record information indicating that an individual's illness (e.g., cancer) has gone into remission, the termination conditions held in the termination condition retention unit mentioned above (in this case, condition (1) above), and the judgment rules mentioned above, it is determined that the individual's constitution makes it highly likely that recurrence will occur, then it can be determined that the disclosure of this individual's health and medical information should not be terminated. Furthermore, for example, based on electronic medical record information indicating that the primary physician (family doctor) who has been treating the individual's illness or injury has changed due to various circumstances, the termination conditions held in the termination condition retention unit mentioned above (in this case, condition (2) or condition (3) above), and the judgment rules mentioned above, it may be determined that the disclosure of this individual's health and medical information should be terminated.

[0138] <Embodiment 3: Configuration Description: Termination Control Unit> The "termination control unit" 1204 is configured to have a function that causes the access control unit to terminate the publication of the individual's health and medical information when the termination determination unit determines that the information should be terminated. For example, if the termination determination unit determines that the process should be terminated, that is, if the termination determination unit determines that the disclosure of the individual's health and medical information should be terminated based on the electronic medical record information indicating that the individual's illness or injury has been completely cured and the termination condition held by the termination condition holding unit (in this case, condition (1) above), the termination control unit can send a control signal to the access control unit, causing the access control unit to terminate the disclosure of the individual's health and medical information. Furthermore, for example, if the termination determination unit determines that the process should be terminated, that is, if the termination condition held by the termination condition holding unit determines that the disclosure of the individual's health and medical information should be terminated based on the electronic medical record information indicating that the primary physician (family doctor) who has been treating the individual's illness or injury has changed due to various circumstances, the termination control unit can transmit a control signal indicating the determination result to the access control unit, causing the access control unit to control the process to terminate the disclosure of the individual's health and medical information.

[0139] Furthermore, in relation to the "judgment rule retention unit" mentioned above, a "judgment rule modification unit" may be added to appropriately change the judgment rules based on, for example, the number and percentage of times permission has been granted to disclose health and medical information concerning an individual, or the number and percentage of times incentives have been provided. In this case, the judgment rules may be changed automatically within the system, or they may be changed manually from a terminal used by the individual concerned or the administrator of the system.

[0140] <Embodiment 3: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to a diagram.

[0141] Figure 13 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 1301 that performs various calculations and a "main memory" 1302. It also includes a "non-volatile memory" 1303 that holds predetermined information and a "network I / F (interface)" 1304 that sends and receives information with multiple third-party terminals 1306 and an administrator terminal 1307. These are interconnected by data communication paths such as a "bus" 1305 to send and receive information and perform processing.

[0142] In this embodiment, "main memory" is read by the "CPU" to execute programs that perform various processes, and at the same time, it provides a work area that serves as the working area for those programs. In addition, multiple addresses are assigned to both "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in "main memory" include a termination request reception program, a termination condition holding program, a judgment rule holding program, a termination judgment program, and a termination control program. Furthermore, "main memory" and "non-volatile memory" store termination request information, termination condition information, judgment rules, termination judgment information, and termination control information, among others.

[0143] The "CPU" executes a termination request receiving program stored in "main memory" to receive termination requests, which are requests to stop or terminate the publication of already published health and medical-related information of an individual (user) sent from a third-party terminal via the "network interface," and stores the termination request information in "main memory" and "non-volatile memory." The "CPU" also executes a termination condition retention program stored in "main memory" to retain termination conditions, which are the conditions for determining whether to terminate the publication based on information about the individual who made the termination request when a termination request is received, and stores the termination condition information in "main memory" and "non-volatile memory." The "CPU" also executes a decision rule retention program stored in "main memory" to retain decision rules, which are the rules for determining whether or not to terminate the publication of health and medical-related information based on information about the individual who made the termination request and the retained termination conditions, and stores these rules in "main memory" and "non-volatile memory." Furthermore, the CPU executes a termination decision program stored in main memory to determine whether to terminate the system based on the information about the individual and the termination conditions held, when a termination request is received, and stores the termination decision information in main memory or non-volatile memory. The CPU also executes a termination control program stored in main memory, and if the termination decision program determines that the system should terminate, it instructs the access control unit to terminate the public access to the individual's health and medical information, and stores the termination control information in main memory or non-volatile memory.

[0144] <Embodiment 3: Health and Medical Information Management System: Processing Flow> Figure 14 shows the processing flow when using the health and medical information management system in this embodiment. As shown in the figure, the processing method consists of a termination request reception step S1401, a termination condition holding step S1402, a judgment rule holding step S1403, a termination judgment step S1404, and a termination control step S1405.

[0145] The "Termination Request Reception Step" S1401 is the stage where termination requests are received from individuals (users) sent from third-party terminals, requesting the suspension or termination of the publication of already published health and medical-related information.

[0146] The "termination condition retention step" S1402 is the stage in which, when a termination request is received, the termination conditions are retained, which are the conditions used to determine whether or not to terminate the service based on information about the individual who made the termination request.

[0147] The "decision rule retention step" S1403 is the stage in which decision rules are maintained, which are rules for determining whether or not to terminate the disclosure of health and medical information based on information about the individual who made the termination request and the termination conditions that are maintained.

[0148] The "termination decision step" S1404 is the stage in which, upon receiving a termination request, a decision is made on whether to terminate the service based on the information about the individual, the termination conditions held, and the decision rules held.

[0149] The "termination control step" S1405 is the step in which, if the determination result in the termination determination step S1404 is that the process should be terminated, the access control unit is instructed to terminate the publication of the individual's health and medical information.

[0150] <Summary> Based on the above, the present invention enables individuals (users) to stop or terminate the publication of already published health and medical-related information at their own discretion.

[0151] <Embodiment 4 (mainly corresponding to claims 4, 19, and 34)> <Embodiment 4 Overview> This embodiment is characterized by the addition of an access authentication processing unit for performing authentication to access the incentive management unit, in addition to the features of Embodiments 1 to 3. From here on, functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 3 will be omitted from explanation as appropriate.

[0152] <Embodiment 4: Configuration Description: Access Authentication Processing Unit> Figure 15 shows the functional configuration of the health and medical information management system. As shown in this figure, the "access authentication processing unit" 1501 is configured to have the function of authenticating an individual's access to the incentive management unit. For example, Figure 40 shows an example of a user interface in the health and medical information management system of the present invention. Here, it is assumed that a third-party terminal accesses the health and medical information management system using a web browser. On this login screen, the user (individual) enters their personal identification number (My Number) information and password information in the corresponding fields. If matching information exists within the system, identity verification is performed and access is granted. In the example shown in the diagram, the process is explained in a format where the user directly inputs the information. However, for example, if the user is using a smartphone, the system could be adapted so that the user can use the smartphone's IC card reading function to hold the My Number Card over the smartphone, and the system automatically reads and inputs the required information, such as the individual number (My Number) information. For example, if the user fails to enter their personal identification number (My Number) information and / or password information three times in a row, the device may be locked, requiring the user to go to a local government office (city, town, or village office, etc.) to have it unlocked. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again tomorrow" may be displayed on the device, or the user may be notified by voice or a warning sound.

[0153] <Embodiment 4: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to a diagram.

[0154] Figure 16 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 1601 that performs various calculations and a "main memory" 1602. It also includes a "non-volatile memory" 1603 that holds predetermined information and a "network I / F (interface)" 1604 that sends and receives information with multiple third-party terminals 1606 and an administrator terminal 1607. These are interconnected by data communication paths such as a "bus" 1605 to send and receive information and perform processing.

[0155] In this configuration, "main memory" is read by the "CPU" to execute programs that perform various processing tasks, and at the same time, it provides a work area that serves as the working area for those programs. Furthermore, both "main memory" and "non-volatile memory" are assigned multiple addresses, and programs executed by the "CPU" can access these addresses to exchange data and perform processing. In this embodiment, the program stored in "main memory" is an access authentication processing program. Additionally, "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, and other similar data.

[0156] The CPU executes an access authentication processing program stored in main memory, receives input of personal identification number (My Number) information and password information sent from a third-party terminal via the network interface, authenticates whether matching information exists on the system side, and stores the entered personal identification number (My Number) information and password information in main memory or non-volatile memory.

[0157] <Embodiment 4: Health and Medical Information Management System: Processing Flow> Figure 17 shows the processing flow when using the health and medical information management system in this embodiment. As shown in the figure, the processing method consists of an access authentication processing step S1701.

[0158] The "Access Authentication Processing Step" S1701 is the stage in which the input of personal number (My Number) information and password information concerning an individual (user) sent from a third-party terminal is received, and authentication is performed to allow access to the Incentive Management Department.

[0159] <Summary> Based on the above, the present invention makes it possible to restrict access to incentive-related information to the individual (user) by performing access authentication at the login screen of the health and medical information management system.

[0160] <Embodiment 5 (mainly corresponding to claims 5, 20, and 35)> <Embodiment 5 Overview> This embodiment is characterized by the addition of a consent information acquisition unit, in addition to the features of Embodiments 1 to 4, which acquires consent information indicating that the user has agreed to accept the incentives provided by the incentive management unit. From this point forward, functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 4 will be omitted from explanation as appropriate.

[0161] <Embodiment 5: Description of Configuration: Consent Information Acquisition Unit> Figure 18 shows the functional configuration of the health and medical information management system of this embodiment. As shown in this figure, the "consent information acquisition unit" 1802 is configured to have the function of acquiring consent information, which is information indicating that the user has agreed to accept incentives from the incentive management unit, after being authenticated by the access authentication processing unit 1801. Figure 41 shows an example of a user interface in the health and medical information management system of the present invention. In this case, the individual (user) enters their personal number (My Number) information and password information in the corresponding fields. After matching information is found in the system and access authentication is performed, the user proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(A) Consent Processing," the user is taken to a screen where their consent is obtained. Figure 42 shows an example of a user interface in the health and medical information management system of the present invention. In this case, it is preferable to provide a user interface such as a pull-down menu in the "Agree / Disagree" field, where clicking, touching, or tapping will input either a "○" or an "×" mark, allowing the individual (user) to indicate whether or not they agree to accept the incentive. Clicking, touching, or tapping the OK button will send the entered agreement information to the incentive management unit for retention and management. Clicking, touching, or tapping the Exit button will return the user to the function selection screen shown in Figure 41.

[0162] Figure 40 shows an example of a user interface in the health and medical information management system of the present invention. In this case, the individual (user) enters their personal number (My Number) information and password information in the corresponding fields. After matching information is found in the system and access authentication is performed, the user is taken to a function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Viewing Process," the user is taken to a screen where they can view the relationship between their health and medical information and the incentives they have been given. Figure 43 shows an example of a user interface in the health and medical information management system of the present invention. In this case, it is preferable to display the health and medical information of the individual in question and the corresponding incentives in an easy-to-understand format, such as a table. This allows users to see at a glance which health and medical information is associated with the incentives granted at the time of viewing. Furthermore, clicking, touching, or tapping the "Exit" button will return you to the function selection screen shown in Figure 41. Figure 40 shows an example of a user interface in the health and medical information management system of the present invention. In this case, the individual (user) enters their My Number information and password information in the corresponding fields. After matching information is found in the system and access authentication is performed, the user proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Processing," the user is taken to a screen that displays health and medical information for which consent / rejection has not yet been given, as well as health and medical information for which consent / rejection has already been given. Figure 44 shows an example of a user interface in the health and medical information management system of the present invention. In this case, it is preferable to clearly display the health and medical information of the target individual and the corresponding consent / non-consent status in a table format or similar. This allows the individual (user) to access health and medical information for which consent / non-consent has not yet been given at the time of viewing by entering a "○" in the "Consent / Non-Consent" field and clicking, touching, or tapping the OK button to process the granting of incentives, etc. On the other hand, for health and medical information for which a "○" or "×" has already been entered in the "Consent / Non-Consent" field, the individual (user) can review it as needed, for example, changing from consent to non-consent, or from non-consent to consent, and then clicking, touching, or tapping the OK button to update the status. Clicking, touching, or tapping the Exit button will return the user to the function selection screen shown in Figure 41.

[0163] <Embodiment 5: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to a diagram.

[0164] Figure 19 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 1901 that performs various calculations and a "main memory" 1902. It also includes a "non-volatile memory" 1903 that holds predetermined information and a "network I / F (interface)" 1904 that sends and receives information with multiple third-party terminals 1906 and an administrator terminal 1907. These are interconnected by data communication paths such as a "bus" 1905 to send and receive information and perform processing.

[0165] In this configuration, "main memory" is read by the "CPU" to execute programs that perform various processing tasks, and at the same time, it provides a work area that serves as the working area for those programs. Furthermore, both "main memory" and "non-volatile memory" are assigned multiple addresses, and programs executed by the "CPU" can access these addresses to exchange data and perform processing. In this embodiment, the programs stored in "main memory" are an access authentication processing program and a consent information acquisition program. Additionally, "main memory" and "non-volatile memory" store My Number information, password information, consent information, and the like.

[0166] The CPU executes an access authentication processing program stored in main memory, receives input of personal identification number (My Number) information and password information sent from a third-party terminal via the network interface, authenticates whether matching information exists, and stores the personal identification number (My Number) information and password information in main memory or non-volatile memory. Furthermore, the CPU executes a consent information acquisition program stored in main memory, and via the network interface, it acquires consent information indicating whether or not an individual (user) wishes to disclose health and medical-related information sent from a third-party terminal. The consent information is then stored in main memory or non-volatile memory.

[0167] <Embodiment 5: Health and Medical Information Management System: Processing Flow> Figure 20 shows the processing flow when using the health and medical information management system in this embodiment. As shown in the figure, the processing method consists of an access authentication processing step S2001 and a consent information acquisition step S2002.

[0168] The "Access Authentication Processing Step" S2001 is the stage in which the input of personal number (My Number) information and password information concerning an individual (user) sent from a third-party terminal is received, and authentication is performed to allow access to the Incentive Management Department.

[0169] The "Consent Information Acquisition Step" S2002 is the stage after authentication in the Access Authentication Processing Step where consent information is acquired, which is information indicating that the user agrees to accept incentives from the Incentive Management Department.

[0170] <Summary> Based on the above, the present invention makes it possible to obtain consent information, which is information indicating that an individual (user) agrees to accept incentives for health and medical-related information.

[0171] <Embodiment 6 (mainly corresponding to claims 6, 21, and 36)> <Embodiment 6 Overview> This embodiment is characterized in that, in addition to Embodiments 1 to 5, it includes an incentive provision processing unit that performs an incentive provision processing, which is a process for providing an incentive when consent information is obtained by the consent information acquisition unit. From here on, functions, hardware configurations, and processing flows that overlap with Embodiments 1 to 5 will be omitted from explanation as appropriate.

[0172] <Embodiment 6: Description of Configuration: Incentive Provisioning Processing Unit> Figure 21 shows the functional configuration of a health and medical information management system. As shown in this figure, the "incentive processing unit" 2103 is configured to have the function of performing incentive provision processing to provide incentives when consent information is obtained by the consent information acquisition unit. Figure 44 shows an example of a user interface in the health and medical information management system of the present invention. In this case, it indicates that, regarding the individual's (user's) consent to disclosure, an incentive is automatically calculated and awarded based on a predetermined calculation rule for health and medical information for which a "○" mark indicating consent to disclosure is placed in the "Consent / Disagreement" column. Here, for health and medical information per individual, 1000 My Number Points (points) are calculated and awarded to one recipient based on the predetermined calculation rule. Furthermore, the incentive calculation rule may be processed to calculate and award different incentives for each piece of health and medical information by applying weighting that takes into account the importance, urgency, rarity, and usefulness of the information. In particular, for example, for malignant neoplasms (cancer), which is the leading cause of death in Japan; hypertension, diabetes, dyslipidemia, periodontal disease, or eye diseases, various infectious diseases defined in the "Infectious Diseases Control Law," including COVID-19; and rare diseases with few cases worldwide, it may be conceivable to set the calculation rule to give a higher incentive than for other diseases, considering that the disclosure of such health and medical information to third parties can greatly contribute to the advancement of medicine.

[0173] Furthermore, "incentive" simply refers to "motivation and reward," and means intentionally providing stimulation or stimuli with the aim of getting someone to take a certain action. In this invention, "incentives" may include, in addition to the My Number Points mentioned above, individual or general information services to information providers, provision of individual medicines or supplements, provision of books or other goods, provision of passwords or IDs for information provision, provision of items usable on a network, provision of rights, such as the right to receive medical treatment, the right to receive a diagnosis, the right to receive tests, the right to receive various services on a network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc. Furthermore, the following may be included: discounts on some goods or services, such as discounts or reductions on insurance premiums or discounts on insurance rates. Furthermore, refunds of paid fees, awarding of prizes (e.g., novelty items), awards and commendations, and provision of preferential treatment coupons. Furthermore, there may be reward points, discounts, free goods, early access to new products, or limited sales. Furthermore, there may be rights to write brand reviews, refer friends, or create user-generated content. It could also be an upgrade of a product or service. Furthermore, this invention can be applied in both cases: when information indicating whether or not permission to disclose personal health and medical information to a third party is already associated with and stored and managed; and when an individual (user) newly registers health and medical information relating to themselves in the health and medical information storage unit, and the information indicating whether or not permission to disclose is not yet associated with and stored and managed. That is, even if the health and medical information management system does not hold personal health and medical information, if, for example, the personal health and medical information is held on a terminal owned by the individual and uploaded to this system, the incentive function unit described above can be configured to provide an incentive based on the result of a formal check of the uploaded information, if it is determined that the information can be disclosed as health and medical information. In this case, the access control unit of this system may be configured not to deny access to view health and medical information from third parties. However, it may be configured to partially deny or restrict access depending on the type or qualifications of the third party. Furthermore, uploading personal health and medical information to this system may be done by transfer, and the transfer source may not be the individual's terminal but another system that stores health and medical information. For example, health and medical information stored in servers such as maternal and child health handbook information servers, PHR (Personal Health Record) servers, nursing care information servers, dental care information servers, and rehabilitation information servers can be configured to be transferred to this system with the individual's consent. In this case, the system can be configured so that the aforementioned incentive function unit functions once the individual's health and medical information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

[0174] Figure 40 shows an example of a user interface in the health and medical information management system of the present invention. In this case, the individual (user) enters their My Number information and password information in the corresponding fields. After matching information is found in the system and access authentication is performed, they are taken to a function selection screen. By clicking, touching, or tapping the OK button corresponding to "(B) Viewing Process," they are taken to a screen where they can view the relationship between their health and medical information and the incentives they have been given. Figure 43 shows an example of a user interface in the health and medical information management system of the present invention. In this case, it is preferable to display the health and medical information of the individual in question and the corresponding incentives in an easy-to-understand format, such as a table. This allows users to see at a glance which health and medical information is associated with the incentives granted at the time of viewing. Furthermore, clicking, touching, or tapping the "Exit" button will return you to the function selection screen shown in Figure 41.

[0175] Figure 40 shows an example of a user interface in the health and medical information management system of the present invention. In this case, the individual (user) enters their My Number information and password information in the corresponding fields. After matching information is found in the system and access authentication is performed, the user proceeds to the function selection screen. Then, by clicking, touching, or tapping the OK button corresponding to "(C) Maintenance Processing," the user is taken to a screen that displays health and medical information for which consent / rejection has not yet been given, as well as health and medical information for which consent / rejection has already been given. Figure 44 shows an example of a user interface in the health and medical information management system of the present invention. In this case, it is preferable to clearly display the health and medical information of the target individual and the corresponding consent / non-consent status in a table format or similar. This allows the individual (user) to enter a "○" in the "Consent / Non-Consent" column in a pull-down menu format and click, touch, or tap the OK button to process the granting of incentives, etc. On the other hand, for health and medical information in which a "○" or "×" has already been entered in the "Consent / Non-Consent" column, the individual (user) can review it and update it, for example, by changing from consent to non-consent, or from non-consent to consent, and clicking, touching, or tapping the OK button. Clicking, touching, or tapping the Exit button will return you to the function selection screen shown in Figure 41.

[0176] <Embodiment 6: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to a diagram.

[0177] Figure 22 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 2201 that performs various calculations and a "main memory" 2202. It also includes a "non-volatile memory" 2203 that holds predetermined information and a "network I / F (interface)" 2204 that sends and receives information with multiple third-party terminals 2206 and an administrator terminal 2207. These are interconnected by data communication paths such as a "bus" 2205 to send and receive information and perform processing.

[0178] In this configuration, "main memory" is read by the "CPU" to execute programs that perform various processing tasks, and at the same time, it provides a work area that serves as the working area for those programs. Furthermore, both "main memory" and "non-volatile memory" are assigned multiple addresses, and programs executed by the "CPU" can access these addresses to exchange data and perform processing. In this embodiment, programs stored in "main memory" include access authentication processing programs, consent information acquisition programs, and incentive provision processing programs. Additionally, "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, consent information, incentive information, and other similar information.

[0179] The CPU executes an access authentication processing program stored in main memory, receives input of personal identification number (My Number) information and password information sent from a third-party terminal via the network interface, and authenticates whether matching information exists. It also stores the My Number information and password information in main memory or non-volatile memory. Furthermore, the CPU executes a consent information acquisition program stored in main memory, and via the network interface, it acquires consent information indicating the individual's (user's) will for each piece of health and medical-related information sent from a third-party terminal. The consent information is then stored in main memory or non-volatile memory. Furthermore, the CPU executes the incentive provision processing program stored in main memory to provide incentives when consent has been obtained for health and medical information concerning an individual, and also stores the incentive information in main memory or non-volatile memory.

[0180] <Embodiment 6: Health and Medical Information Management System: Processing Flow> Figure 23 is a diagram showing the processing flow when using the health and medical information management system in this embodiment. As shown in the figure, the processing method consists of an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

[0181] The "Incentive Provision Processing Step" S2303 is the stage in which the incentive provision processing is performed to provide an incentive when consent information is obtained by the consent information acquisition unit.

[0182] <Summary> Based on the above, the present invention makes it possible to perform an incentive provision process, which is a process for providing incentives to an individual (user) with their consent, regarding their health and medical information, and to apply appropriate incentive provision processing to an individual's health and medical information.

[0183] <Embodiment 7 (mainly corresponding to claims 7, 22, and 37)> <Embodiment 7 Overview> This embodiment provides a health and medical information management system comprising: a health and medical information storage unit that stores health and medical information relating to an individual; an access control unit that allows third parties to access the health and medical information stored in the health and medical information storage unit via a network; the access control unit comprising: an IP packet analysis means that analyzes IP packets sent via the network; a destination IP address determination means that extracts the destination IP address from the IP header portion of the IP packet and determines whether or not it is an IP address destined for its own health and medical information management system; an access ID / user ID acquisition means that, if the destination IP address is an IP address destined for its own health and medical information management system, acquires an access ID indicating the access subject and a user ID indicating a user belonging to that access subject from the IP payload; an access subject user attribute acquisition means that acquires access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or not) corresponding to the access ID and user ID; an access control means that controls access to health and medical information from third parties; and a disclosure permission / denial information storage unit that holds disclosure permission / denial information indicating whether or not permission is granted to disclose an individual's health and medical information to a third party. Note that explanations of functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 6 will be omitted as appropriate.

[0184] <Embodiment 7 Functional Configuration> Figure 24 shows the functional configuration of the health and medical information management system in Embodiment 7. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID / user ID acquisition means, an access subject user attribute acquisition means, an access control means, and a public access permission / denial information holding unit.

[0185] <Embodiment 7: Description of Configuration: IP Packet Analysis Means of Access Control Unit> The "IP packet analysis means" 2401 is configured to have the function of analyzing IP packets sent via a network (particularly the Internet). Generally, an IP packet consists of an IP header and an IP payload, and various information and data are stored within them. The "IP packet analysis means" 2401 is responsible for analyzing and examining what kind of information and data is contained within them.

[0186] <Embodiment 7: Configuration Description: Destination IP Address Determination Means of the Access Control Unit> The "destination IP address determination means" 2402 is configured to have the function of extracting the destination IP address from the header portion of the incoming IP packet and determining whether or not it is an IP address addressed to its own health and medical information management system. Generally, an IP packet contains at least a source IP address representing the source and a destination IP address representing the destination in the IP header portion. The "destination IP address determination means" 2402 refers to the destination IP address extracted from the IP header portion and determines whether or not it is an IP packet sent to its own health and medical information management system. If it determines that it was sent to itself, it proceeds to the next process. If it determines that it was not sent to itself, it ignores the IP packet and does not perform any further operations.

[0187] <Embodiment 7: Configuration Description: Access ID / User ID Acquisition Means of the Access Control Unit> The "Access ID / User ID Acquisition Means" 2403 is configured to have the function of extracting and acquiring the Access ID, which indicates the access subject, and the User ID, which indicates the user belonging to that access subject, stored in the IP payload, when it is determined that the IP packet was sent to its own health and medical information management system.

[0188] <Embodiment 7: Description of Configuration: Access Control Unit's Means for Obtaining Access Subject User Attributes> The "Access Subject User Attribute Acquisition Means" 2404 is configured to have the function of acquiring access subject information corresponding to the access ID and user ID, user information belonging to that access subject, and user attribute information for that user (in this case, information indicating whether the user is a medical professional or a non-medical professional). Access subject information is information that specifically represents the access subject, and is represented by a name such as "Edogawa Central Hospital" or "Edogawa Pharmaceutical." User information is information that specifically represents an employee, etc., belonging to that access subject, and is represented by a name such as "Ichiro Suzuki," an employee belonging to "Edogawa Central Hospital," or "Hideo Maeda," an employee belonging to "Edogawa Pharmaceutical." Furthermore, user attribute information is attribute information associated with user information that indicates whether the user is a medical professional or a non-medical professional, and is represented by a name such as "medical professional" (abbreviated as "medical") or "non-medical professional" (abbreviated as "non-medical").

[0189] Here, "healthcare professionals" preferably includes at least physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language pathologists, prosthetists and orthotists, radiological technologists, X-ray technologists, clinical laboratory technologists, public health laboratory technologists, clinical engineers, dental hygienists, dental technicians, paramedics, massage therapists, acupuncturists, moxibustionists, judo therapists, registered dietitians, dietitians, mental health social workers, social workers, certified care workers, certified psychologists, clinical psychologists, medical office staff, etc. Among the "healthcare professionals" mentioned above, the role of so-called primary care healthcare professionals (e.g., primary care physicians, primary care pharmacists, primary care dentists) who regularly provide medical examinations and medication guidance to individuals (patients) is extremely important. It is preferable to grant them the authority to access individual health and medical information stored in the health and medical information storage unit and to edit, add, and delete health and medical information as needed.

[0190] For example, a "family doctor" refers to a physician who can be consulted about anything, is well-versed in the latest medical information, can refer patients to specialists and specialized medical institutions when necessary, and possesses comprehensive abilities to provide reliable, accessible community healthcare, public health, and welfare services. A "family doctor" should ideally be a person who can fulfill the following functions: (1) In routine medical care, understand the patient's background, provide appropriate medical care and health guidance, and, when unable to provide medical care or guidance beyond their own expertise, cooperate with local doctors and medical institutions to provide solutions; (2) Share necessary information with local doctors and medical institutions to ensure that the best possible medical care continues for the patient even outside of their own consultation hours, and build a system where they can cooperate to respond to patients on holidays and at night; (3) In addition to routine medical care, build trusting relationships with local residents, actively participate in social and administrative activities surrounding medical care in the community, such as health consultations, health checkups and cancer screenings, maternal and child health, school health, occupational health, and community health, and collaborate with health, nursing, and welfare professionals, and promote home medical care so that elderly people in the community can live in the community for as long as possible; and (4) provide patients and their families with appropriate and easy-to-understand information about medical care.

[0191] Furthermore, for example, a "primary care pharmacist" refers to a pharmacist who possesses extensive knowledge and experience in areas such as drug treatment, health, and nursing care, and who can provide consultations tailored to the needs of patients and individuals. A "primary care pharmacist" has the following functions: (1) One pharmacist manages and continuously maintains the medication status of one patient at one pharmacy (for example, to ensure safe and secure use of medication, they keep track of information on the medications the patient is using, such as prescription drugs and over-the-counter drugs, in one place, and continuously check for drug duplication, drug interactions, effectiveness, and side effects); (2) They provide 24-hour support and home medical care by visiting the patient's home (for example, they answer phone calls for advice on how to use medications, side effects, etc., even outside of pharmacy hours such as on holidays and at night. They also provide consultations at night and on holidays as needed). It is desirable that the person be able to fulfill the following roles: (1) Dispensing medication according to prescriptions; (2) Visiting the homes of elderly patients and others who have difficulty going out to explain the medication and check for any remaining medication; (3) Collaborating with prescribing physicians and medical institutions (for example, checking prescriptions and making inquiries or suggestions to doctors as needed; monitoring the patient's condition after dispensing the medication, providing feedback to the prescribing physician, and checking for any remaining medication; providing advice on health in general, not just medication, and recommending visits to medical institutions when necessary; and building relationships with local medical institutions on a daily basis so that a team can support patients).

[0192] Furthermore, for example, a "family dentist" refers to a dentist who not only provides safe and reliable dental care but also possesses broad knowledge and insights related to medical care and nursing, and who can fulfill their responsibility as a part of community healthcare, aiming to maintain and improve the oral function of local residents throughout their lives. A "family dentist" should ideally be a person who can fulfill the following roles: (1) provide appropriate dental treatment and health guidance to maintain and improve oral and overall health, according to the life stage from infancy to old age, and to prevent the worsening of conditions; (2) play a role in improving oral health for local residents through health activities such as dental checkups in cooperation with the government and related organizations; and (3) actively participate in community-based integrated care by collaborating with local related organizations and other industries to provide seamless home dental care and nursing care services in various treatment settings for patients who have difficulty visiting the clinic. Furthermore, the third-party identification information described later may be accompanied by or associated with a flag that identifies the person as their primary healthcare provider. Regarding the information indicating the primary healthcare provider, it may be possible, as appropriate and necessary, for the individual (patient, etc.), the company to which the individual belongs, the health insurance association to which the individual belongs, or the municipality where the individual resides to set, change, or delete this information using a third-party terminal, or for the administrator mentioned above to register, edit, or delete it using an administrator terminal.

[0193] Furthermore, it is preferable that "non-medical professionals" include at least employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), health insurance associations, health insurance associations, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, research institutes, universities and graduate schools (including affiliated research institutions), technical colleges, agricultural, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

[0194] <Embodiment 7: Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 2405 is configured to have the function of controlling access when a third party attempts to access the health and medical information storage unit via the network.

[0195] Figure 25 shows an example of the functional configuration of the health and medical information management system in this embodiment. First, the incoming IP packet 2501 is analyzed using an IP packet analysis tool to determine what information and data it contains. For example, the IP header of the IP packet is analyzed to determine if the source IP address and destination IP address are included.

[0196] Next, the destination IP address determination means extracts the destination IP address contained in the incoming IP packet 2501 and determines whether or not it is addressed to its own health and medical information management system. At this time, the access control unit 2502 has an IP address table 2503 stored in it, and it refers to this table to determine whether or not it is addressed to its own health and medical information management system. If the stored IP address (for example, 192.168.0.1) matches the destination IP address, it is determined that it is addressed to its own health and medical information management system and proceeds to the next step. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

[0197] Next, using the access ID / user ID acquisition method, if the incoming IP packet is addressed to the health and medical information management system, the access ID indicating the accessing entity and the user ID indicating the user belonging to that accessing entity are extracted and obtained from the IP payload of that IP packet.

[0198] Next, the access subject user attribute acquisition means obtains access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores the access ID / user ID table 2504 and obtains specific access subject information, user information, and user attribute information by referring to this table. For example, if the access ID is "A0001", the access subject information is "Edogawa Central Hospital", if the user ID is "C0001", the user information is "Ichiro Suzuki", and the user attribute information is "Medical professional". Also, if the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", and if the user ID is "D0001", the user information is "Hideo Maeda", and the user attribute information is "Non-medical professional". Through the operations performed by the means described above, it is possible to determine whether a third party who has accessed the health and medical information management system is a medical professional or a non-medical professional.

[0199] Next, access control measures are used to differentiate the scope of access to health and medical information depending on whether the third party is a healthcare professional or not. For example, if the user belonging to the third-party access entity (in this case, "Edogawa Central Hospital") is "Ichiro Suzuki" and his attribute information is "healthcare professional," then all of the health and medical information concerning the individual will be accessible. On the other hand, if, for example, the user belonging to the third-party access entity (in this case, "Edogawa Pharmaceutical") is "Hideo Maeda" and his attribute information is "non-healthcare professional," then only some (including all) of the health and medical information concerning the individual, or health and medical information anonymized using a predetermined anonymization method described later, will be accessible. In this way, it is possible to determine who the third-party user is and whether their attribute information is "healthcare professional" or "non-healthcare professional," thereby differentiating the scope of access to health and medical information concerning the individual. Furthermore, it is preferable that the administrator responsible for managing and operating the health and medical information management system be able to register, edit, and delete information from these tables using an administrator terminal. It is also preferable that this access subject information, user information, and user attribute information ("healthcare professional" or "non-healthcare professional") are associated with third-party identification information, as described later.

[0200] <Embodiment 7: Description of Configuration: Access Control Unit's Disclosure Permission Information Holding Unit> As shown in Figure 24, the "Disclosure Permission / Rejection Information Holding Unit" 2406 is configured to have the function of holding disclosure permission / rejection information indicating whether or not to disclose one's health and medical-related information to a third party who accesses that information via the network. Specifically, it is desirable that a third-party terminal 206, as shown in Figure 2, be configured to allow an individual to set information indicating "disclosure permission" or "disclosure rejection" to the access control unit 202 of the health and medical-related information management system 200 via the network 205. For example, "disclosure permission" may be set to "1" and "disclosure rejection" to "0," which are binary information (flag information). Furthermore, the disclosure permission / rejection information may be configured to allow disclosure or rejection of health and medical-related information in predetermined units. For example, health and medical-related information related to internal medicine may be set to "disclosure permission," while health and medical-related information related to psychiatry may be set to "disclosure rejection." In addition, the disclosure permission / rejection information may be configured to distinguish between "disclosure permission" and "disclosure rejection" when the third party is a specific medical professional, by combining it with third-party identification information, which will be described later. For example, if the third-party identification information represents a "doctor," then "permission to disclose" the individual's health and medical information may be granted. On the other hand, if the third-party identification information represents a specific medical professional (e.g., an accountant or finance officer), then "rejection of disclosure" of the individual's health and medical information may be granted.

[0201] <Embodiment 7: Health and Medical Information Management System: Hardware Configuration> The hardware configuration of the health and medical information management system in this embodiment will be explained with reference to the diagram.

[0202] Figure 26 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the access control unit in this embodiment includes a "CPU (Central Processing Unit)" 2601 that performs various calculations and a "main memory" 2602. It also includes a "non-volatile memory" 2603 that holds predetermined information and a "network I / F (interface)" 2604 that sends and receives information with multiple third-party terminals 2606 and an administrator terminal 2607. These are interconnected by data communication paths such as a "bus" 2605 to send and receive information and perform processing.

[0203] In this embodiment, "main memory" is read by the "CPU" to execute programs that perform various processes, and at the same time, it provides a work area that serves as the working area for those programs. In addition, multiple addresses are assigned to both "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in "main memory" include a health and medical information storage program, an IP packet analysis program, a destination IP address determination program, an access ID / user ID acquisition program, an access subject user attribute acquisition program, a public disclosure permission / denial information holding program, and an access control program. In addition, "main memory" and "non-volatile memory" store health and medical information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, and public disclosure permission / denial information.

[0204] The "CPU" executes a health and medical information storage program stored in "main memory" and stores health and medical information about individuals, such as electronic medical record information, various test information, prescription information, medication history information, and vital information (such as body temperature, blood pressure, and heart rate), sent from third-party terminals via the "network interface," into "main memory" and "non-volatile memory." It also executes an IP packet analysis program stored in "main memory" to analyze IP packets sent via the network (especially the internet). Furthermore, it executes a destination IP address determination program stored in "main memory" to determine whether the sent destination IP address is addressed to its own health and medical information sharing system. If it determines that it is addressed to itself, it stores that IP address in "main memory" and "non-volatile memory." Finally, it executes an access ID / user ID acquisition program stored in "main memory" to extract and acquire the access ID indicating the accessing entity and the user ID indicating the user belonging to that accessing entity, which are stored in the IP payload of the sent IP packet, and stores them in "main memory" and "non-volatile memory." Furthermore, the Access Subject User Attribute Acquisition Program stored in "Main Memory" is executed to acquire Access Subject Information, User Information, and User Attribute Information (in this case, information indicating whether the user is a medical professional or not; for example, "Medical Professional" or "Non-Medical Professional") corresponding to the Access ID and User ID, and store them in "Main Memory" and "Non-Volatile Memory". In addition, the Disclosure Permission Information Holding Program stored in "Main Memory" is executed to acquire Disclosure Permission Information indicating whether or not to disclose an individual's health and medical-related information to a third party, and store it in "Main Memory" and "Non-Volatile Memory". Finally, the Access Control Program stored in "Main Memory" is executed to control access to an individual's health and medical-related information.

[0205] <Embodiment 7: Health and Medical Information Management System: Processing Flow> FIG. 27 is a diagram showing the processing flow when using the health and medical related information management system according to the present embodiment. As shown in the figure, it is a processing method including a health and medical related information accumulation step S2701, an IP packet analysis step S2702, a destination IP address determination step S2703, an access ID / user ID acquisition step S2704, an access subject user attribute acquisition step S2705, a public permission / non-permission information retention step S2706, and an access control step S2707.

[0206] The "health and medical related information accumulation step" S2701 is a stage of accumulating health and medical related information about an individual, such as electronic medical record information, various examination information, prescription information, medication history information, vital information (e.g., body temperature, blood pressure, heart rate, etc.), sent from a third-party terminal via a network.

[0207] The "IP packet analysis step" S2702 is a stage of analyzing the IP packets sent via a network (especially the Internet).

[0208] The "destination IP address determination step" S2703 is a stage of extracting the destination IP address from the IP header part of the IP packet and determining whether it is the IP address of its own health and medical related information management system.

[0209] The "access ID / user ID acquisition step" S2704 is a stage of acquiring the access ID indicating the access subject and the user ID indicating the user belonging to the access subject from the IP payload when the destination IP address is the IP address of its own health and medical related information management system.

[0210] The "access subject user attribute acquisition step" S2705 is a stage of acquiring the access subject information, user information, and user attribute information corresponding to the access ID and user ID (here, information indicating whether the user is a medical professional or a non-medical professional. For example, "medical professional" or "non-medical professional").

[0211] The "public permission information retention step" S2706 is a step of retaining public permission information indicating whether to permit disclosure to a third party regarding personal health and medical related information.

[0212] The "access control step" S2707 is a step of controlling access to the health and medical related information management system.

[0213] <Summary> As described above, it is possible to retain public permission information indicating whether to permit disclosure to a third party regarding health and medical related information about an individual (user). That is, depending on the intention of the individual, it is possible to select and set public permission or non - permission for disclosure.

[0214] <Embodiment 8 (mainly corresponding to Claim 8, Claim 23, and Claim 38)> <Outline of Embodiment 8>

[0215] FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in Embodiment 8. As shown in this figure, this embodiment is characterized in that, in addition to Embodiments 1 to 7, a third - party identification information retention unit is provided. Hereinafter, regarding the health and medical related information management system in this embodiment, the functional configuration, hardware configuration, and processing flow will be described in order. Hereafter, regarding the functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 7, the explanations will be omitted as appropriate.

[0216] <Functional Configuration of Embodiment 8> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment. In this embodiment, by providing a third - party identification information retention unit, it is possible to identify whether a third party is a medical worker or a non - medical worker.

[0217] <Health and Medical Related Information Management System in Embodiment 8: Functional Configuration> FIG. 28 is a diagram showing the functional configuration of the health and medical related information management system in this embodiment.

[0218] <Embodiment 8: Description of Configuration: Third-Party Identification Information Holding Unit of Access Control Unit> The "Third-Party Identification Information Storage Unit" 2807 is configured to have the function of storing third-party identification information for identifying whether a third party who accesses health and medical-related information stored in the health and medical-related information storage unit via the network is a medical professional or a non-medical professional. Here, the third-party identification information may be information created by combining, for example, 12-digit numbers, letters, symbols, etc., that can uniquely identify a third party. Specifically, My Number information or health insurance card number may be used. Furthermore, it is preferable that the third-party identification information is associated with the access subject information, user information, and user attribute information ("medical professional" or "non-medical professional") mentioned above. In addition, the third-party identification information may be registered, edited, and deleted by the administrator using the administrator terminal mentioned above.

[0219] Furthermore, by combining the aforementioned disclosure permission / denial information and third-party identification information, even if the disclosure permission / denial information indicates "disclosure permission," it may be possible to set different settings for when access is permitted and when it is not permitted if the third party is a specific medical professional. For example, if the third-party identification information represents a "physician," access to health and medical information may be permitted, but if the third-party identification information represents a specific healthcare professional (e.g., an accountant or finance officer), access to health and medical information may be denied. Furthermore, for example, information indicating the department to which a user belongs may be added to the third-party identification information, and access to health and medical information may be controlled based on this departmental information. Also, for example, access to health and medical information may be controlled based on information regarding the user's expertise identified in the third-party identification information (e.g., the field of expertise and years of experience of a "doctor" or "nurse"). Furthermore, for example, the method by which a third party can obtain health and medical information (e.g., viewing only, text conversion of the information is possible, copying is possible, forwarding is possible, bulk download of anonymized information is possible, etc.) may be changed depending on the combination of the disclosure permission information and the department and expertise related to the third-party identification information. When downloading is permitted, it is preferable to use technologies such as digital watermarking or NFT (Non-Fungible Token) to prevent data tampering. Also, for example, access rights to the patient's information may be granted to a third party depending on the combination of the disclosure permission information and the department and expertise related to the third-party identification information. For example, it is envisioned that a healthcare worker responsible for PCR testing would transmit the PCR test results to a third-party terminal used by a doctor, as well as to a third-party terminal used by the patient themselves.

[0220] Regarding these combinations of information, it is conceivable that the administrator, as mentioned above, could pre-register them in a tabular format or similar using the administrator terminal in the access control unit mentioned above, and then edit or delete them as needed. Furthermore, for example, medical professionals such as physicians, dentists, and pharmacists may have their third-party identification information include, at least as part of it, the medical registration number (e.g., a 6-digit number) listed on their medical license, the dental registration number (e.g., a 6-digit number) listed on their dental license, and the pharmacist registration number (e.g., a 6-digit number) listed on their pharmacist license. Similarly, for other medical professionals, their third-party identification information may include, at least as part of it, the number listed on their professional license. Furthermore, the symbols and numbers (including sub-numbers) listed on the health insurance card of the health insurance association to which the user belongs, the driver's license number, and the individual number (My Number) information listed on the individual number (My Number) card may be included as part of the third-party identification information. In addition, it may be possible to identify the user using third-party authentication provided by platform providers such as Google® and Facebook®.

[0221] <Embodiment 8: Health and Medical Information Management System: Hardware Configuration> Figure 29 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 2901 that performs various calculations and a "main memory" 2902. It also includes a "non-volatile memory" 2903 that holds predetermined information and a "network interface" 2904 that sends and receives information with a third-party terminal 2906 and an administrator terminal 2907. These are interconnected by data communication paths such as a "bus" 2905 to send and receive information and perform processing.

[0222] In this embodiment, "main memory" is read by the "CPU" to execute programs that perform various processes, and at the same time, it provides a work area that serves as the working area for those programs. In addition, multiple addresses are assigned to both "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in "main memory" are mainly programs that hold third-party identification information. In addition, third-party identification information and the like are stored in both "main memory" and "non-volatile memory."

[0223] The CPU executes a third-party identification information retention program stored in the main memory to retain third-party identification information for identifying whether a third party who has accessed the health and medical information stored in the health and medical information storage unit via the network is a medical professional or a non-medical professional, and stores the third-party identification information in the main memory and non-volatile memory.

[0224] <Embodiment 8: Health and Medical Information Management System: Processing Flow> Figure 30 shows the processing flow when using the health and medical information management system in this embodiment. As shown in this figure, the processing method consists of a third-party identification information retention step S3007.

[0225] The "Third-Party Identification Information Retention Step" S3007 is the step in which third parties who access health and medical information stored in the health and medical information storage unit via the network retain third-party identification information to identify whether they are healthcare professionals or non-healthcare professionals.

[0226] <Summary> Based on the above, it is possible to identify whether a third party is a medical professional or a non-medical professional. For example, even among the same medical staff, it is possible to distinguish whether the individual is their personal attending physician, and even among the same non-medical staff, it is possible to distinguish whether the individual is an employee (including researchers) belonging to a pharmaceutical company that develops and manufactures therapeutic drugs related to the individual's illness, or an employee belonging to a public office.

[0227] <Embodiment 9 (mainly corresponding to Claim 9, Claim 24, and Claim 39)> <Outline of Embodiment 9>

[0228] FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in Embodiment 9. Hereinafter, the functions, hardware configurations, and processing flows similar to those in Embodiments 1 to 8 will be omitted from the description as appropriate.

[0229] Hereinafter, the health care-related information management system in this embodiment will be described in order with respect to its functional configuration, hardware configuration, and processing flow.

[0230] <Functional Configuration of Embodiment 9> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment. By adopting such a configuration, when the approval / disapproval information held in the approval / disapproval information holding unit indicates approval and the third-party identification information indicates that the person is a medical staff, the health care-related information accumulated in the health care-related information accumulation unit can be made viewable.

[0231] <Health Care-Related Information Management System in Embodiment 9: Functional Configuration> FIG. 31 is a diagram showing the functional configuration of the health care-related information management system in this embodiment.

[0232] <Explanation of Configuration in Embodiment 9: Approval / Disapproval Information Holding Unit of Access Control Unit> The "Disclosure Permission / Rejection Information Holding Unit" 3106 is configured to have the function of holding disclosure permission / rejection information indicating whether or not to disclose one's health and medical-related information to a third party who accesses that information via the network. Specifically, it is desirable that the system be configured so that a third-party terminal 206, as shown in Figure 2, can set information indicating "disclosure permission" or "disclosure rejection" to the access control unit 202 of the health and medical-related information management system 200 via the network 205, according to the individual's will. For example, "disclosure permission" may be set to "1" and "disclosure rejection" to "0," which are binary information (flag information). Furthermore, the disclosure permission / rejection information may be configured to allow disclosure or rejection of health and medical-related information in predetermined units. For example, it is conceivable to set health and medical-related information related to internal medicine to "disclosure permission" while health and medical-related information related to psychiatry to "disclosure rejection." In addition, the disclosure permission / rejection information may be configured to distinguish between "disclosure permission" and "disclosure rejection" depending on whether the third party is a specific medical professional, by combining it with the third-party identification information described above. For example, if the third-party identification information represents a "doctor," then "permission to disclose" the individual's health and medical information may be granted. On the other hand, if the third-party identification information represents a specific medical professional (e.g., an accountant or finance officer), then "rejection of disclosure" of the individual's health and medical information may be granted.

[0233] <Embodiment 9: Description of Configuration: Third-Party Identification Information Holding Unit of Access Control Unit> The "Third-Party Identification Information Storage Unit" 3107 is configured to have the function of storing third-party identification information for identifying whether a third party who accesses the health and medical information stored in the health and medical information storage unit via the network is a medical professional or a non-medical professional. Here, the third-party identification information may be information created by combining, for example, 12 digits of numbers, letters, symbols, etc., that can uniquely identify a third party. For example, My Number information or health insurance card number may be used. Furthermore, it is preferable that the third-party identification information is associated with the access subject information, user information, and user attribute information ("healthcare professional" or "non-healthcare professional") mentioned above. In addition, the third-party identification information may be registered, edited, and deleted by the administrator using the administrator terminal as described above.

[0234] Furthermore, by combining the aforementioned disclosure permission / denial information and third-party identification information, even if the disclosure permission / denial information indicates "disclosure permission," it may be possible to set different settings for when access is permitted and when it is not permitted if the third party is a specific medical professional. For example, if the third-party identification information represents a "physician," access to health and medical information may be permitted, but if the third-party identification information represents a specific healthcare professional (e.g., an accountant or finance officer), access to health and medical information may be denied.

[0235] Furthermore, for example, information indicating the department to which a user belongs may be added to the third-party identification information, and access to health and medical information may be controlled based on this departmental information. Also, for example, access to health and medical information may be controlled based on information regarding the user's expertise identified in the third-party identification information (e.g., the field of expertise and years of experience of a "doctor" or "nurse"). Furthermore, for example, the method by which a third party can obtain health and medical information (e.g., viewing only, text conversion of the information is possible, copying is possible, forwarding is possible, bulk download of anonymized information is possible, etc.) may be changed depending on the combination of the disclosure permission information and the department and expertise related to the third-party identification information. When downloading is permitted, it is preferable to use technologies such as digital watermarking or NFT (Non-Fungible Token) to prevent data tampering. Also, for example, access rights to the patient's information may be granted to a third party depending on the combination of the disclosure permission information and the department and expertise related to the third-party identification information. For example, it is envisioned that a healthcare worker responsible for PCR testing would transmit the PCR test results to a third-party terminal used by a doctor, as well as to a third-party terminal used by the patient themselves.

[0236] Regarding these combinations of information, it is conceivable that the administrator, as mentioned above, could pre-register them in a tabular format or similar using the administrator terminal in the access control unit mentioned above, and then edit or delete them as needed. Furthermore, for example, medical professionals such as physicians, dentists, and pharmacists may have their third-party identification information include, at least as part of it, the medical registration number (e.g., a 6-digit number) listed on their medical license, the dental registration number (e.g., a 6-digit number) listed on their dental license, and the pharmacist registration number (e.g., a 6-digit number) listed on their pharmacist license. Similarly, for other medical professionals, their third-party identification information may include, at least as part of it, the number listed on their professional license. Furthermore, the symbols and numbers (including sub-numbers) listed on the health insurance card of the health insurance association to which the user belongs, the driver's license number, and the individual number (My Number) information listed on the individual number (My Number) card may be included as part of the third-party identification information. In addition, it may be possible to identify the user using third-party authentication provided by platform providers such as Google® and Facebook®.

[0237] <Embodiment 9: Description of Configuration: Access Control Means of Access Control Unit> The "access control means" 3105 is configured to have a function that allows access to the health and medical information storage unit when a third party accesses the health and medical information storage unit via the network, and when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a medical professional.

[0238] <Embodiment 9: Health and Medical Information Management System: Hardware Configuration> Figure 32 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 3201 that performs various calculations and a "main memory" 3202. It also includes a "non-volatile memory" 3203 that holds predetermined information and a "network interface" 3204 that sends and receives information with a third-party terminal 3206 and an administrator terminal 3207. These are interconnected by data communication paths such as a "bus" 3205 to send and receive information and perform processing.

[0239] In this configuration, "main memory" is read by the "CPU" to execute programs that perform various processing tasks, and at the same time, it provides a work area that serves as the working area for those programs. Furthermore, both "main memory" and "non-volatile memory" are assigned multiple addresses, and programs executed by the "CPU" can access these addresses to exchange data and perform processing. In this embodiment, programs stored in "main memory" include a program for holding disclosure permission information, a program for holding third-party identification information, and an access control program. Additionally, "main memory" and "non-volatile memory" store disclosure permission information, third-party identification information, and other similar information.

[0240] The CPU executes a program stored in main memory to store disclosure permission information indicating whether or not to disclose an individual's health and medical information to a third party who accesses that information via the network. This information is stored in both main memory and non-volatile memory. The CPU also executes a third-party identification information program stored in main memory to store third-party identification information in both main memory and non-volatile memory to identify whether a third party who accesses the health and medical information stored in the health and medical information storage unit via the network is a medical professional or not. After this, the CPU executes an access control program stored in main memory. If the disclosure permission information indicates that disclosure is permitted and the third-party identification information indicates that the third party is a medical professional, the CPU makes the health and medical information stored in the health and medical information storage unit viewable.

[0241] <Embodiment 9: Health and Medical Information Management System: Processing Flow> Figure 33 is a diagram showing the processing flow when using the health and medical information management system in this embodiment. As shown in this figure, the processing method consists of a disclosure permission / denial information retention step S3306, a third-party identification information retention step S3307, and an access control step S3308.

[0242] The "Disclosure Permission Information Retention Step" S3306 is the stage in which information indicating whether or not to disclose a person's health and medical information to a third party who has accessed that information via the network is retained.

[0243] The "Third-Party Identification Information Retention Step" S3307 is the step in which third parties who access health and medical information stored in the health and medical information storage unit via the network retain third-party identification information to identify whether they are healthcare professionals or non-healthcare professionals.

[0244] The "access control step" S3308 is the stage in which, if the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted, and the third-party identification information indicates that the person is a medical professional, the health and medical information stored in the health and medical information storage unit is made accessible.

[0245] <Summary> Based on the above, if the disclosure permission information held in the disclosure permission information storage unit indicates that disclosure is permitted, and the third-party identification information indicates that the person is a medical professional, then the health and medical information stored in the health and medical information storage unit can be made accessible.

[0246] <Embodiment 10 (mainly corresponding to claims 10, 25, and 40)> <Overview of Embodiment 10>

[0247] This embodiment is characterized by the addition of anonymization method information to the features of Embodiments 1 to 9. Hereafter, descriptions of functions, hardware configurations, and processing flows similar to those of Embodiments 1 to 9 will be omitted as appropriate.

[0248] The functional configuration, hardware configuration, and processing flow of the health and medical information management system in this embodiment will be described in order below.

[0249] <Embodiment 10 Functional Configuration> Figure 34 shows the functional configuration of the health and medical information management system in this embodiment. The health and medical information management system in this embodiment includes an anonymization method information holding unit.

[0250] <Embodiment 10: Health and Medical Information Management System: Functional Configuration> Figure 34 shows the functional configuration of the health and medical information management system in this embodiment.

[0251] <Description of the configuration of Embodiment 10: Anonymization method information holding unit of the access control unit> The "anonymization method information holding unit" 3408 is configured to have the function of holding information representing an anonymization method. Here, the anonymization method information may be, for example, information created by combining a 6-digit number, letters, symbols, etc., and may be information that uniquely identifies the anonymization method. The administrator mentioned above may register, edit, and delete the anonymization method information using the administrator terminal.

[0252] Several methods exist for anonymization, and these are often used individually or in combination. The main anonymization methods are briefly described below. "k-anonymization" (where k is a natural number greater than or equal to 2) is a process that ensures that for any combination of attribute values ​​(e.g., gender, age, place of residence, occupation, etc.) that cannot identify an individual on its own but can identify an individual with a high probability when combined, there are always at least k occurrences in the target data. "Pseudonymization" refers to replacing existing text with other descriptions or text in a manner that does not have a consistent pattern that allows for deletion or restoration. "Generalization" is the process of replacing attribute values ​​with higher-level values ​​or concepts. Examples include using 10-year age increments or making cucumbers a higher-level vegetable. "Top (or bottom) coding" is the practice of grouping numerical attributes together by particularly large or small attribute values. For example, people aged 100 or older might be grouped as "100 years or older." "Noise (error) addition" refers to adding random noise according to a certain distribution to a numerical attribute. "Swapping (data exchange)" refers to the (probabilistic) exchange of attribute values ​​between records for category attributes. It is also called data swapping. "Sampling" refers to randomly selecting a certain percentage or number of items from the entire original data set. "Grouping" refers to replacing detailed items in attributes or history with certain groups or categories.

[0253] <Description of the configuration in Embodiment 10: Access control means of the access control unit> The "access control means" 3405 is configured to have a function to control access when a third party accesses the health and medical information storage unit via the network, such that if the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the third party is not a medical professional, then a portion (including all) of the health and medical information stored in the health and medical information storage unit, or health and medical information that has been anonymized by a predetermined anonymization method, can be viewed.

[0254] <Embodiment 10: Health and Medical Information Management System: Hardware Configuration> Figure 35 shows the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 3501 that performs various calculations and a "main memory" 3502. It also includes a "non-volatile memory" 3503 that holds predetermined information and a "network interface" 3504 that sends and receives information with a third-party terminal 3506 and an administrator terminal 3507. These are interconnected by data communication paths such as a "bus" 3505 to send and receive information and perform processing.

[0255] In this embodiment, "main memory" is read by the "CPU" to execute programs that perform various processing tasks, and at the same time, it provides a work area that serves as the working area for those programs. In addition, multiple addresses are assigned to both "main memory" and "non-volatile memory," and programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing these addresses. In this embodiment, the program stored in "main memory" is a program that holds anonymization method information. In addition, anonymization method information and the like are stored in both "main memory" and "non-volatile memory."

[0256] The CPU executes an anonymization method information retention program stored in main memory to store anonymization method information representing the anonymization method in main memory and non-volatile memory. Subsequently, the CPU executes an access control program stored in main memory, and if the disclosure permission information indicates disclosure permission and the third-party identification information indicates that the person is not a medical professional, it makes it possible to view a portion (including all) of the health and medical information stored in the health and medical information storage unit, or health and medical information that has been anonymized by a predetermined anonymization method.

[0257] <Embodiment 10: Health and Medical Information Management System: Processing Flow> Figure 36 is a diagram showing the processing flow when using the health and medical information management system in this embodiment. As shown in this figure, the processing method consists of an anonymization method information retention step S3608 and an access control step S3609.

[0258] The "Anonymization Method Information Retention Step" S3608 is the step of retaining anonymization method information, which is information representing a method for anonymizing health and medical information.

[0259] The "access control step" S3609 is the step in which, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted, and the third-party identification information indicates that the person is not a medical professional, a portion (including all) of the health and medical-related information stored in the health and medical-related information storage unit, or health and medical-related information that has been anonymized by a predetermined anonymization method, is made viewable.

[0260] <Explanation of an example of anonymization method> Figures 37 to 39 illustrate an example of anonymization methods. Using these figures, an example of anonymization methods will be briefly explained. The table shown in Figure 37 is a list of patients at a fictitious medical institution in Minato Ward, Tokyo, Japan, which has not yet been anonymized. It contains data for 12 individuals and six attributes (name, age, gender, place of residence, religion, and disease name). Of these, "name" is information that constitutes personal data and can potentially identify an individual on its own. "Age," "gender," "place of residence," "religion," and "disease name" are also information that constitutes personal data, but the data does not accumulate over time and cannot identify an individual on its own. However, when combined with other attributes or cross-referenced with external information, it can potentially identify an individual. In particular, "disease name" is a very sensitive attribute in personal data. This information corresponds to the individual's health and medical information stored in the health and medical information storage unit mentioned above. In this case, to achieve k-anonymity for a given value of k (where k is a natural number greater than or equal to 2), the following processing can be applied.

[0261] First, a process called "anonymization" is performed, where certain values ​​of an attribute are replaced with an asterisk "*". All or some of the values ​​in that column are replaced with "*". In the table shown in Figure 38, all values ​​in "Name" and all values ​​in "Religion" are replaced with "*". Next, a process called "generalization" is performed, where individual attribute values ​​are replaced with a wider range. For example, for "Age", "29 years old" is replaced with "20s", and "35 years old" with "30s", and so on, with values ​​that have a range. Also, for "Place of Residence", the value consists of prefecture and city / ward / town / village, but the city / ward / town / village is removed, leaving only the prefecture. Figure 38 shows the anonymized table. Here, there are four equivalence classes that have the same combination of quasi-identifiers ("Age", "Gender", "Place of Residence").

[0262] Figure 39 shows an anonymized table grouped for easier understanding. As can be seen from this table, all groups (Group A to Group D) achieve 3-anonymity in terms of "age," "gender," and "place of residence." This is because any combination of these attributes results in three or more individuals. In this way, by anonymizing the health and medical information about individuals stored in the aforementioned health and medical information storage unit, the risk of individual identification can be reduced.

[0263] <Summary> Based on the above, if the disclosure permission information held in the disclosure permission information storage unit indicates that disclosure is permitted, and the third-party identification information indicates that the person is not a medical professional, then a portion (including all) of the health and medical information stored in the health and medical information storage unit, or health and medical information that has been anonymized using a predetermined anonymization method, can be made available for viewing. [Explanation of Symbols]

[0264] Health and medical information management systems: 200, 300 Health and Medical Information Storage Department: Rooms 201, 301 Access Control Unit: 202, 302 Incentive Management Department: Rooms 203 and 303 Provision history retention section: 204, 304 Network: 205 Third-party terminal: 206 Administrator terminal: 207

Claims

1. The Health and Medical Information Storage Department stores and manages health and medical information about individuals, An access control unit controls the disclosure of health and medical information stored in the aforementioned health and medical information storage unit to a third party via a network. Regarding permission to disclose health and medical information concerning individuals, the provision history of the provision history retention unit is described below. Were incentives provided based on the items of health and medical information viewed or used? Was an incentive provided based on the number of times each item of health and medical information was viewed? A first calculation rule that provides incentives to encourage the disclosure of health and medical information by referring to one or more of the following: that incentives are provided according to the depth of disclosure of health and medical information, If an individual grants permission for the disclosure of their entire personal health and medical information, all health and medical information associated with that personal identification information becomes accessible to authorized institutions and other entities without restriction on the number of times it can be viewed. However, a second calculation rule is used to determine whether a single incentive is granted only once in response to that single act of granting permission for disclosure, thereby providing incentives to encourage the disclosure of health and medical information. A third calculation rule for providing incentives to encourage the disclosure of health and medical information, based on whether an incentive was given each time the permitted health and medical information was viewed after permission for disclosure was granted. An incentive management department calculates and provides incentives to encourage the disclosure of the aforementioned health and medical information based on one or more of the calculation rules, A health and medical information management system having a provision history retention unit that retains a provision history, which is a record of the incentives provided to each individual.

2. It further has an incentive type information holding unit that holds incentive type information, which is information indicating multiple types of incentives. The health and medical information management system according to claim 1, wherein the incentive management unit selects and provides incentives to an individual based on the incentive type information held in the incentive type information holding unit, according to the provision history.

3. A termination request receiving unit receives termination requests from individuals who have stored health and medical information in the aforementioned health and medical information storage unit, which are requests to stop or terminate the publication of health and medical information that has already been made public. When the aforementioned termination request is received, the termination condition holding unit holds termination conditions, which are conditions for determining whether termination is permissible based on information about the individual who made the termination request. A decision rule holding unit holds a decision rule which is a rule for determining whether or not to terminate the publication of health and medical information based on information about the individual who made the termination request and the termination conditions that are held, When the termination request is received, a termination determination unit determines whether to terminate based on the information relating to the individual, the termination conditions held, and the determination rules held. If the termination determination unit determines that the process should be terminated, the termination control unit causes the access control unit to terminate the publication of the individual's health and medical information. A health and medical information management system according to claim 1, further comprising:

4. The health and medical information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit.

5. The health and medical information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating that the user has agreed to accept an incentive from the incentive management unit, after being authenticated by the access authentication processing unit.

6. The health and medical information management system according to claim 5, further comprising an incentive provision processing unit that performs an incentive provision processing, which is a process for providing an incentive, when consent information is obtained by the consent information acquisition unit.

7. The health and medical information management system according to claim 1, further comprising a disclosure permission information holding unit that holds disclosure permission information indicating whether an individual permits or denies the disclosure of their health and medical information to a third party.

8. The health and medical information management system according to claim 7, further comprising a third-party identification information holding unit that holds third-party identification information for identifying whether the third party is a medical professional or a non-medical professional.

9. The health and medical information management system according to claim 8, wherein the access control unit allows the healthcare professional to view the health and medical information stored in the health and medical information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information stored in the third-party identification information storage unit indicates that the third party is a healthcare professional.

10. The health and medical information management system according to claim 8, wherein the access control unit allows the non-medical person to view a portion (including all) of the health and medical information stored in the health and medical information storage unit, or health and medical information that has been anonymized by a predetermined anonymization method, when the access control unit indicates that the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted, and the third-party identification information stored in the third-party identification information storage unit indicates that the person is not a medical professional.

11. The health and medical information management system according to claim 10, wherein the anonymization method is performed by any one of the following anonymization methods: k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof.

12. The health and medical information management system according to claim 1, wherein the health and medical information storage unit stores health and medical information including one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information, medical questionnaire information, health promotion app data, and conversation data from an interactive health promotion SNS.

13. The health and medical information management system according to claim 1, wherein the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchenware, bedding, beds or pillows, provision of passwords or IDs for information provision, provision of items usable on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

14. The health and medical information management system according to claim 8, wherein the aforementioned medical professionals include at least one of the following: physician, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, orthoptist, speech-language pathologist, prosthetist / orthotist, radiological technologist, X-ray technologist, clinical laboratory technologist, public health laboratory technologist, clinical engineering technologist, dental hygienist, dental technician, paramedic, massage therapist, acupuncturist, moxibustion therapist, judo therapist, registered dietitian, nutritionist, mental health social worker, social worker, care worker, certified psychologist, clinical psychologist, and medical office staff.

15. The health and medical information management system according to claim 8, wherein the aforementioned non-medical personnel include at least one employee of a life insurance company, non-life insurance company, securities company, pharmaceutical company, drug discovery venture company, food company, health equipment company, fitness club, sports gym, bank, credit union, JA (agricultural cooperative), cooperative health insurance, association health insurance, mutual aid association, municipal national health insurance, national health insurance association, PR company, research institute, university and graduate school (including affiliated research institutions), technical college, agricultural, forestry and fisheries company, fertilizer manufacturer, government office, local government, and independent administrative agency.

16. A method to be performed by a health and medical information management system which is a computer, A health and medical information storage step involves accumulating and managing health and medical information about an individual, An access control step controls the disclosure of the health and medical information accumulated in the aforementioned health and medical information storage step to a third party via a network. Regarding permission to disclose health and medical information concerning individuals, the provision history is as described in the provision history retention step below. Were incentives provided based on the items of health and medical information viewed or used? Was an incentive provided based on the number of times each item of health and medical information was viewed? A first calculation rule that provides incentives to encourage the disclosure of health and medical information by referring to one or more of the following: that incentives are provided according to the depth of disclosure of health and medical information, If an individual grants permission for the disclosure of their entire personal health and medical information, all health and medical information associated with that personal identification information becomes accessible to authorized institutions and other entities without restriction on the number of times it can be viewed. However, a second calculation rule is used to determine whether a single incentive is granted only once in response to that single act of granting permission for disclosure, thereby providing incentives to encourage the disclosure of health and medical information. A third calculation rule for providing incentives to encourage the disclosure of health and medical information, based on whether an incentive was given each time the permitted health and medical information was viewed after permission for disclosure was granted. An incentive management step that calculates and provides incentives to encourage the disclosure of the aforementioned health and medical information based on one or more calculation rules, A method comprising: a provision history retention step, which retains a provision history, which is a record of the incentives provided to each individual.

17. A method to be performed by a health and medical information management system which is a computer, The system further includes an incentive type information holding step, which holds incentive type information, which is information indicating multiple types of incentives. The method according to claim 16, wherein the incentive management step selects and provides an incentive to an individual based on the incentive type information held in the incentive type information holding step, according to the provision history.

18. A method to be performed by a health and medical information management system which is a computer, The aforementioned health and medical information storage step includes a termination request receiving step which receives a termination request from an individual who has stored health and medical information, which is a request to stop or terminate the publication of health and medical information that has already been made public, When the termination request is received, the termination condition retention step retains termination conditions, which are the conditions for determining whether termination is permissible based on information about the individual who made the termination request. A decision rule holding step, which holds a decision rule that is a rule for determining whether or not to terminate the disclosure of health and medical information based on information about the individual who made the termination request and the termination conditions that are held, When the termination request is received, a termination determination step is made to determine whether to terminate the service based on the information relating to the individual, the termination conditions held, and the determination rules held. If the result of the termination determination step is that the process should be terminated, the termination control step causes the access control step to control the process to terminate the disclosure of the individual's health and medical information. The method according to claim 16, further comprising:

19. A method to be performed by a health and medical information management system which is a computer, The method according to claim 16, further comprising an access authentication processing step for performing authentication to access the incentive management step.

20. A method to be performed by a health and medical information management system which is a computer, The method according to claim 19, further comprising a consent information acquisition step, which is a step of acquiring consent information that indicates the user has agreed to accept the incentives provided by the incentive management step after being authenticated in the access authentication processing step.

21. A method to be performed by a health and medical information management system which is a computer, The method according to claim 20, further comprising an incentive provision processing step, which is a process for providing an incentive, when consent information is obtained through the consent information acquisition step.

22. A method to be performed by a health and medical information management system which is a computer, The method according to claim 16, further comprising the step of maintaining disclosure permission information, which maintains disclosure permission information indicating whether an individual permits the disclosure of their health and medical information to a third party.

23. A method to be performed by a health and medical information management system which is a computer, The method according to claim 22, further comprising the step of holding third-party identification information for identifying whether the third party is a medical professional or a non-medical professional.

24. A method to be performed by a health and medical information management system which is a computer, The method according to claim 23, wherein the access control step allows the healthcare professional to view the health and medical information stored in the health and medical information storage step if the access control step indicates that the access permission information stored in the access permission information storage

25. A method to be performed by a health and medical information management system which is a computer, The method according to claim 23, wherein the access control step allows the non-medical person to view a portion (including all) of the health and medical-related information stored in the health and medical-related information storage step, or health and medical-related information anonymized by a predetermined anonymization method, if the access control step indicates that the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted, and the third-party identification information stored in the third-party identification information storage step indicates that the person is not a medical professional.

26. A method to be performed by a health and medical information management system which is a computer, The method according to claim 25, wherein the anonymization method is performed by any one of the following anonymization methods: k-anonymization (where k is a natural number of 2 or more), pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, grouping, or a combination thereof.

27. ​​A method to be performed by a health and medical information management system which is a computer, The method according to claim 16, wherein the health and medical information storage step includes storing health and medical information that includes one or more of the following information pertaining to an individual: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information, questionnaire information, health promotion app data, and conversation data from an interactive health promotion SNS.

28. A method to be performed by a health and medical information management system which is a computer, The method according to claim 16, wherein the incentive management step provides an incentive that includes one or more of the following: providing My Number points, providing individual or general information services to information providers, providing individual medicines or supplements, providing books, DVDs, Blu-rays, health equipment, kitchenware, bedding, beds or pillows, providing passwords or IDs for providing information, providing items usable on a network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive tests, providing the right to receive various services on a network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, providing product coupons, travel coupons or cash.

29. A method to be performed by a health and medical information management system which is a computer, The method according to claim 23, wherein the medical professionals include at least one of the following: physician, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, orthoptist, speech-language pathologist, prosthetist / orthotist, radiological technologist, X-ray technologist, clinical laboratory technologist, public health laboratory technologist, clinical engineering technologist, dental hygienist, dental technician, paramedic, massage therapist, acupuncturist, moxibustion therapist, judo therapist, registered dietitian, nutritionist, mental health social worker, social worker, care worker, certified psychologist, clinical psychologist, and medical office staff.

30. A method to be performed by a health and medical information management system which is a computer, The method according to claim 23, wherein the aforementioned non-medical personnel include at least one employee belonging to a life insurance company, non-life insurance company, securities company, pharmaceutical company, drug discovery venture company, food company, health equipment company, fitness club, sports gym, bank, credit union, JA (agricultural cooperative), cooperative health insurance, association health insurance, mutual aid association, municipal national health insurance, national health insurance association, PR company, research institute, university and graduate school (including affiliated research institutions), technical college, agricultural, forestry and fisheries company, fertilizer manufacturer, government office, local government, or independent administrative agency.

31. A health and medical information storage step involves accumulating and managing health and medical information about an individual, An access control step controls the disclosure of the health and medical information accumulated in the aforementioned health and medical information storage step to a third party via a network. Regarding permission to disclose health and medical information concerning individuals, the provision history is as described in the provision history retention step below. Were incentives provided based on the items of health and medical information viewed or used? Was an incentive provided based on the number of times each item of health and medical information was viewed? A first calculation rule that provides incentives to encourage the disclosure of health and medical information by referring to one or more of the following: that incentives are provided according to the depth of disclosure of health and medical information, If an individual grants permission for the disclosure of their entire personal health and medical information, all health and medical information associated with that personal identification information becomes accessible to authorized institutions and other entities without restriction on the number of times it can be viewed. However, a second calculation rule is used to determine whether a single incentive is granted only once in response to that single act of granting permission for disclosure, thereby providing incentives to encourage the disclosure of health and medical information. A third calculation rule for providing incentives to encourage the disclosure of health and medical information, based on whether an incentive was given each time the permitted health and medical information was viewed after permission for disclosure was granted. An incentive management step that calculates and provides incentives to encourage the disclosure of the aforementioned health and medical information based on one or more calculation rules, An operating program for a health and medical information management system, which is a computer having a provision history retention step that retains a provision history, which is a history of incentives provided to each individual, and written in a readable and executable manner for the health and medical information management system.

32. The system further includes an incentive type information holding step, which holds incentive type information, which is information indicating multiple types of incentives. The aforementioned incentive management step selects and provides incentives to an individual based on the incentive type information held in the incentive type information holding step, and is a health and medical information management system operation program written in a readable and executable manner to the health and medical information management system, which is a computer according to claim 31.

33. The aforementioned health and medical information storage step includes a termination request receiving step which receives a termination request from an individual who has stored health and medical information, which is a request to stop or terminate the publication of health and medical information that has already been made public, When the termination request is received, the termination condition retention step retains termination conditions, which are the conditions for determining whether termination is permissible based on information about the individual who made the termination request. A decision rule holding step, which holds a decision rule that is a rule for determining whether or not to terminate the disclosure of health and medical information based on information about the individual who made the termination request and the termination conditions that are held, When the termination request is received, a termination determination step is made to determine whether to terminate the service based on the information relating to the individual, the termination conditions held, and the determination rules held. If the result of the termination determination step is that the process should be terminated, the termination control step causes the access control step to control the process to terminate the disclosure of the individual's health and medical information. An operating program for a health and medical information management system, which is a computer according to claim 31, further comprising the above, described in a readable and executable manner for the health and medical information management system.

34. An operating program for a health and medical information management system, which is a computer according to claim 31, further comprising an access authentication processing step for performing authentication to access the incentive management step, described in a readable and executable manner for the health and medical information management system.

35. An operating program for a health and medical information management system described in claim 34, which is a computer, further comprising a consent information acquisition step, which acquires consent information indicating that the user agrees to accept the incentives provided by the incentive management step after being authenticated in the access authentication processing step.

36. An operation program for a health and medical information management system described in claim 35, which is a computer that performs an incentive provision processing step, which is a process for providing an incentive, when consent information is obtained in the consent information acquisition step.

37. An operating program for a health and medical information management system described in claim 31, which is a computer, further having a step of holding disclosure permission information that indicates whether an individual permits disclosure of their health and medical information to a third party.

38. An operating program for a health and medical information management system described in a readable and executable manner for a computer, which is a health and medical information management system, according to claim 37, further comprising a third-party identification information holding step of holding third-party identification information for identifying whether the third party is a medical professional or a non-medical professional.

39. The access control step, when the access control step indicates that

40. The access control step, if the access control step indicates that

41. The anonymization method is performed by any of the following anonymization methods, or a combination thereof, as described in claim 40, an operating program for a health and medical information management system which is a computer for a health and medical information management system described in claim 40, which is readable and executable by the computer.

42. The health and medical information storage step is an operation program for a health and medical information management system described in a readable and executable manner for a health and medical information management system, which is a computer according to claim 31, that stores health and medical information including one or more of the following information: electronic medical record information, various test information, prescription information, medication history information, medication status information, vital information, medical questionnaire information, health promotion app data, and conversation data from an interactive health promotion SNS.

43. The aforementioned incentive management step is an operating program for a health and medical information management system, which is a computer according to claim 31, which provides incentives including one or more of the following: provision of My Number points, provision of individual or general information services to information providers, provision of individual medicines or supplements, provision of books, DVDs, Blu-rays, health equipment, kitchenware, bedding, beds or pillows, provision of passwords or IDs for providing information, provision of items usable on a network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive tests, provision of the right to receive various services on a network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash.

44. The aforementioned medical professionals include at least one of the following: physician, dentist, pharmacist, public health nurse, midwife, nurse, licensed practical nurse, physical therapist, occupational therapist, orthoptist, speech therapist, prosthetist / orthotist, radiologic technologist, X-ray technologist, clinical laboratory technologist, public health laboratory technologist, clinical engineering technologist, dental hygienist, dental technician, paramedic, massage therapist, acupuncturist, moxibustion therapist, judo therapist, registered dietitian, nutritionist, mental health social worker, social worker, care worker, certified psychologist, clinical psychologist, and medical office staff. The operation program for a health and medical information management system is written in a readable and executable manner for the computer described in claim 38.

45. The aforementioned non-medical personnel include at least one employee of a life insurance company, non-life insurance company, securities company, pharmaceutical company, drug discovery venture company, food company, health equipment company, fitness club, sports gym, bank, credit union, JA (agricultural cooperative), cooperative health insurance, association health insurance, mutual aid association, municipal national health insurance, national health insurance association, PR company, research institute, university and graduate school (including affiliated research institutions), technical college, agricultural, forestry and fisheries company, fertilizer manufacturer, government office, local government, and independent administrative agency, and the operating program for a health and medical information management system is written in a readable and executable manner for the computer described in claim 38.

Images