Information processing system, information processing method, and information processing device

Abstract

Provided are an information processing system, an information processing method, and an information processing device that make it possible to provide appropriate incentives for actions taken by qualification holders. An information processing system according to the present invention includes a plurality of devices that each acquire qualified person identification data that has been assigned to a qualification holder. Upon acquisition of the qualified person identification data, each of the plurality of devices: creates a record that includes the acquired qualified person identification data, data that makes it possible to identify a space in which the device is located, and data that indicates an action by the qualification holder within the space; records the created record at distributed storage that can be accessed by others; and issues a non-fungible token (NFT) that corresponds to the record to a blockchain account of the qualification holder.

Description

Information processing system, information processing method, and information processing device

[0001] The present invention relates to an information processing system, an information processing method, and an information processing device for processing information about qualification holders.

[0002] For example, in the field of health care and welfare, actions performed by licensed personnel are recorded in electronic data format by each health care and welfare provider and cannot be accessed from outside the provider. For example, it is difficult for the details of a patient's medical treatment at multiple medical institutions to be shared among those multiple medical institutions. Even if it is personal information, research using data on actual medical treatment details, such as test results and medication information, and patient attributes can contribute to improving technology in the field of health care and welfare. It is preferable to use vast amounts of medical treatment data rather than conducting research by recruiting willing patients and receiving data on their medical treatment details.

[0003] A system has been proposed in which image data related to medical records and the results of medical interviews conducted by doctors are stored in a blockchain system as PHR (Personal Health Record) data, associated with a patient ID assigned by each medical institution or system and the doctor ID of the doctor who performed the treatment, and the data can be provided by searching (Patent Document 1, etc.).

[0004] International Publication No. WO 2018 / 225428 International Publication No. WO 2022 / 145312

[0005] Activities in the health, medical, and welfare fields are not limited to medical examinations by doctors, but also include nursing, caregiving, examinations, and prescriptions by various licensed personnel. A variety of licensed personnel in the health, medical, and welfare fields are involved in providing care to a single patient, care recipient, or treatment recipient in a variety of locations and at a variety of times. Appropriate incentives must be provided for these activities and for the sense of security that comes from the mere presence of licensed personnel.

[0006] Outside of the health and medical field, in areas such as national public safety, legal services, electricity, and energy, there could also be an ecosystem in which the actions and presence of qualified individuals are rewarded not only through volunteering but also through incentives, in a system separate from compensation.

[0007] The present disclosure aims to provide an information processing system, an information processing method, and an information processing device that provide appropriate incentives in response to the trust and sense of security that arises from the actions and presence of qualified individuals.

[0008] An information processing system according to one embodiment of the present disclosure includes a plurality of devices that each acquire qualified person identification data assigned to a qualification holder, and when each of the plurality of devices acquires the qualified person identification data, it creates a record including the acquired qualified person identification data, data that can identify the space in which the device is located, and data that indicates the activities of the qualification holder in the space, and records the created record in distributed storage that is accessible to others. A non-fungible token (NFT) corresponding to the record is issued to the blockchain account of the qualification holder.

[0009] In the information processing system disclosed herein, records are recorded that include the qualification holder's qualification identification data, data indicating the qualification holder's actions, and data that can identify the space (location) where the actions were performed. For each record corresponding to the qualification holder's actions or presence, an NFT belonging to the qualification holder is issued, enabling evaluation of the actions or presence performed using the NFT and redemption based on that evaluation. The NFT may be issued before or after the action is performed.

[0010] According to the present disclosure, it is possible to provide appropriate incentives for the actions performed by qualified personnel or for their mere presence at the location.

[0011] FIG. 1 is a schematic diagram of a healthcare information system of this embodiment. FIG. 2 is a block diagram showing the configuration of a first device. FIG. 3 is a block diagram showing the configuration of a second device. FIG. 4 is a block diagram showing the configuration of a node in a blockchain system. FIG. 5 is a flowchart showing an example of a procedure for recording a worker record executed in the healthcare information system. FIG. 6 is a flowchart showing an example of a procedure for evaluation processing executed in the healthcare information system. FIG. 7 is a diagram showing example contents of a worker record. FIG. 8 is a flowchart showing an example of a procedure for recording a worker record executed in a healthcare information system in a modified example. FIG. 9 is a flowchart showing an example of processing based on an issued NFT in a modified example.

[0012] The present disclosure will be specifically described with reference to drawings showing embodiments thereof. In this disclosure, the term "blockchain system" refers to a system that includes multiple computers that can communicate with each other and a network that connects the multiple computers, and creates a blockchain through distributed processing of the multiple computers. The content of requested transactions is captured in the blockchain.

[0013] Below, we will explain an example in which the information processing system is applied to a healthcare information system that realizes incentive rewards for the actions or mere presence of nationally qualified personnel in the fields of health, medical care, and welfare. The information processing system is not limited to the field of health, medical care, and welfare, and may be applied to other fields as long as it is possible to electronically certify the qualifications of nationally qualified personnel.

[0014] 1 is a schematic diagram of a healthcare information system 100 according to this embodiment. The healthcare information system 100 includes a first device 1, a second device 2, a blockchain system 3, and a distributed storage 4. The healthcare information system 100 also includes a network N that serves as a medium for transmitting and receiving data between the first device 1, the second device 2, the blockchain system 3, and the distributed storage 4. The healthcare information system 100 is capable of transmitting and receiving data via communication with the blockchain system 3, and may also include an off-chain communication device capable of processing data for the blockchain system 3.

[0015] The first device 1 is a device used by users, including patients at medical institutions, users at nursing facilities, and their families or supporters. As shown in FIG. 1 , the first device 1 is a digital device equipped with a display unit, an operation unit, and a communication unit, capable of displaying a screen in response to a user's operation and transmitting data to the blockchain system 3 based on the operation. The first device 1 is, for example, a device that is easy for patients or users to wear, such as a smartphone or a smartwatch. The first device 1 is capable of executing a process to approve the storage of records of medical treatments and examinations received by a user at a medical institution, nursing facility, etc. as PHR data in the distributed storage 4. Specifically, when the first device 1 receives approval to provide medical records and test results at a medical institution or nursing facility to other researchers, etc., the PHR data is recorded in the distributed storage 4. The PHR data can be associated with a worker record, which identifies the actions of the worker, as described below.

[0016] The second device 2 is a device used by workers who hold national qualifications in the health, medical, and welfare fields, such as doctors, nurses, and laboratory technicians at medical institutions, care workers, public health nurses, and physical therapists at nursing facilities, and pharmacists at dispensing pharmacies. The second device 2 is either equipped with a device capable of authenticating national qualifications or is connected to such a device. For example, the second device 2 is equipped with a card reader for a Healthcare Public Key Infrastructure (HPKI) card or is connected to a card reader. The second device 2 may be installed in a fixed location in each space in the worker's work environment, such as a building, a room within a building, a site, a street, or mobility, in a medical institution, nursing facility, or other such facility, or may be a communication device that the worker can carry. The second device 2 can transmit data including the card ID (the worker's individual identification data) and qualification type read from the HPKI card to the blockchain system 3. Note that the second device 2 is not limited to an HPKI card, and may also be capable of securely acquiring identification data that identifies the individual worker.

[0017] For example, the second device 2 may be a terminal device for electronic medical records, or may be an entry / exit management server device connected to a reader that reads an HPKI card when entering or exiting a room. The second device 2 may be a smartphone, tablet terminal, wearable device, etc. The second device 2 may be, for example, a smartphone, tablet terminal, or wearable device that has a built-in authentication app that authenticates workers and executes processing, and that can be used in place of an HPKI card.

[0018] The blockchain system 3 uses, for example, a blockchain based on a protocol called Secret Network. The blockchain system 3 may be an Ethereum (registered trademark)-based blockchain system. The blockchain system 3 is preferably a public chain and a blockchain with a protocol that allows the use of smart contracts that execute the processes described below.

[0019] The first device 1 and the second device 2 can send requests to a smart contract on a blockchain system 3, which is a public chain. A smart contract 300 that issues a non-fungible token (NFT) based on a worker record that identifies the existence or actions of a worker related to the health, medical care, and welfare of a patient is deployed on the blockchain system 3. The blockchain system 3 is not limited to being Secret Network-based or Ethereum-based, and may be based on other blockchain standards that allow the issuance of NFTs.

[0020] The distributed storage 4 uses, for example, a blockchain suitable for recording data. When recording the above-mentioned PHR data, the distributed storage 4 is preferably one suitable for recording relatively large data sizes such as image data and video data. The blockchain applied to the distributed storage 4 is a public chain and is accessible from both the first device 1 and the second device 2. Specifically, the distributed storage 4 is configured to include multiple distributed storage media.

[0021] When PHR data or worker records are written to the distributed storage, an address (e.g., a URI or identification data) for accessing the PHR data or worker record is obtained, and the stored PHR data and worker record can be accessed from that address. The distributed storage 4 may be, for example, storage based on the Inter Planetary File System (IPFS). Even when IPFS is used, when a process for adding PHR data or worker records to the distributed storage is executed, an address (identification data) for accessing the PHR data or worker record is obtained, and the PHR data or worker record can be accessed from that address.

[0022] The distributed storage 4 may be in the form of a distribution server that is not a blockchain. In this case, it is preferable to incorporate at least the hash value of the data and the URI of the data into a block in the blockchain system 3 so that it can be confirmed whether or not they have been tampered with. It is preferable that the distributed storage 4 is configured as a system that is difficult to tamper with while ensuring attack resistance as a decentralized system. The distributed storage 4 may be the same as the blockchain system 3.

[0023] The network N is a communication network including a carrier network and a public communication network (Internet). The network N may include a dedicated line. The carrier network includes a base station. The public communication network includes an access point.

[0024] In the healthcare information system 100 configured in this manner, the first device 1 and the second device 2 store wallet data (wallet app, hardware wallet, etc.) required to access the blockchain system 3 and the distributed storage 4. A blockchain account is issued to the first device 1 in association with individual identification data of the user (patient, care recipient, family member). The user's individual identification data is, for example, a combination of the user's facial photograph stored in the first device 1 and their My Number (registered trademark). A blockchain account is issued to the second device 2 in association with individual identification data of a worker who is a nationally qualified worker. The worker's individual identification data is, for example, a card ID associated with an HPKI card.

[0025] In the healthcare information system 100, a worker operates the second device 2 when entering an examination room, when entering information into an electronic medical record, or before or after an actual medical treatment, surgery, or assistance for a patient or care recipient. The room the worker enters may be a training room or conference room in a virtual space, and the worker operates the second device 2 when logging into the virtual space. The second device 2 may have a function for recognizing the worker's actions and automatically identify the worker's actions. In response to the operation, the second device 2 records a worker record in the distributed storage 4 indicating the worker's actions or the fact that the worker is present, was present, or has an appointment to be present at that location. Once the worker record is recorded in the distributed storage 4, an NFT is issued in the blockchain system 3 for the recorded qualified person data. The NFT is originally attributed to the worker, who is the entity that exists or performed the action. Furthermore, the healthcare information system 100 uses the worker data stored in the distributed storage 4 and the NFTs issued therefor to evaluate value and assign value to the NFTs.

[0026] As a result, the healthcare information system 100 can not only provide incentives to patients based on the provision of their PHR data, but also help objectively quantify the incentives of numerous workers for patients and care recipients. Evaluations from users, including doctors, of numerous workers who actually work with a single patient, care recipient, or treatment recipient can be reflected in their individual actions or presence. In addition to facility-level compensation for each medical institution, nursing home, etc. based on medical and health systems established by local governments or the nation (such as traditional medical fee systems), it is possible to realize individual evaluations of each worker's actions and rewards commensurate with the worker's reliability. This creates an ecosystem that stimulates opportunities for qualified professionals to offer their skills in the health, medical, and welfare fields. The healthcare information system 100 may also use the NFTs granted to each worker to calculate an evaluation value for private medical insurance.

[0027] The realization of such an ecosystem is expected to increase opportunities for collaboration among those involved in the health, medical, and welfare fields, and to increase motivation for collaboration, which will also contribute to motivating each worker to improve their skills. This will also lead to a reduction in the burden on social medical care by reducing readmissions and hospital stays under the conventional medical fee system.

[0028] The configuration of each device for realizing the above-described healthcare information system 100 and the processing executed by each device will be described below.

[0029] 2 is a block diagram showing the configuration of the first device 1. The first device 1 is, for example, a smartphone or tablet terminal used by a user such as a patient. The first device 1 is not limited to a smartphone or tablet terminal, and may be a personal computer capable of communication. The first device 1 includes a processing unit 10, a storage unit 11, a communication unit 12, a display unit 13, and an operation unit 14.

[0030] The processing unit 10 includes one or more processors such as a central processing unit (CPU), a micro-processing unit (MPU), a graphics processing unit (GPU), a neural processing unit (NPU), etc. The processing unit 10 also includes memories such as a read-only memory (ROM), a random access memory (RAM), etc. The processing unit 10 may be configured as a single piece of hardware (SoC: System On a Chip) that integrates the processor, the memory, and further the storage unit 11 and the communication unit 12.

[0031] The storage unit 11 uses a flash memory or an SSD (Solid State Drive) and stores programs and data referenced by the processing unit 10, including the first program P1. The first program P1 is a program for causing a computer to function as the first device 1 of the healthcare information system 100 of the present disclosure. As shown in FIG. 2 , the storage unit 11 stores a private key of a user in the blockchain system 3. In this case, it is preferable that the private key be stored in a non-rewritable manner in the ROM of the processing unit 10 or in the storage unit 11.

[0032] The first program P1 stored in the memory unit 11 may be a first program 81P stored in a computer-readable storage medium 8 that is read by the processing unit 10 and stored in the memory unit 11.

[0033] The communication unit 12 is a communication module that realizes a communication connection with a communication device such as the second device 2, the blockchain system 3, or the distributed storage 4. The communication unit 12 uses a network card, a wireless communication device, or a carrier communication module.

[0034] The display unit 13 uses a display device such as a liquid crystal panel or an organic EL display. The operation unit 14 is an interface that accepts user operations and uses physical buttons, a touch panel device built into the display, a speaker, a microphone, etc. The operation unit 14 may accept operations on a screen displayed on the display unit 13 using physical buttons or a touch panel, or may recognize the operation content from input voice using a microphone and accept the operation in an interactive format using the voice output from a speaker.

[0035] The first device 1 accepts input of the user's behavior, vital data measurement results, etc. through operation by a user (patient, care recipient, their family, supporter, etc.), and records PHR data indicating the behavior and measurement results in the distributed storage 4 in association with the time at which the behavior and measurement were performed. At this time, the first device 1 performs identity authentication of the user and records the PHR data in the distributed storage 4 in association with the individual identification data of the authenticated patient or care recipient. The first device 1 may be equipped with a camera and record data of an affected area or face as PHR data as measurement data indicating the user's condition. The first device 1 may also use the camera to perform identity verification by facial authentication.

[0036] 3 is a block diagram showing the configuration of the second device 2. The second device 2 is a device used by a worker. It may be connected to a server that manages the worker's work. If the second device 2 is used by a doctor, it may be connected to an electronic medical record system. If the second device 2 is used by a pharmacist, it may be connected to an electronic prescription management system. The second device 2 includes a processing unit 20, a memory unit 21, a communication unit 22, a display unit 23, an operation unit 24, and an authentication unit 25.

[0037] The processing unit 20 uses a processor such as a CPU, an MPU, a GPU, an NPU, etc., and a memory such as a ROM, a RAM, etc. The processing unit 20 may be configured as a single SoC that integrates the processor, the memory, and further the storage unit 21 and the communication unit 22.

[0038] The storage unit 21 uses a flash memory or an SSD and stores the second program P2 and other programs and data referenced by the processing unit 20. The second program P2 may be a second program 82P stored in a computer-readable storage medium 8 that is read by the processing unit 20 and stored in the storage unit 21. The second program P2 may also be a second program P2 downloaded from an external distribution server and stored in the storage unit 21.

[0039] 3, the memory unit 21 stores a private key corresponding to the worker's blockchain account in the blockchain system 3. In this case, the private key may be stored in the ROM of the processing unit 20 or the memory unit 21 in a non-rewritable manner.

[0040] The communication unit 22 is a communication module that realizes a communication connection with a communication device such as the blockchain system 3 or the distributed storage 4. The communication unit 22 uses a network card, a wireless communication device, or a carrier communication module.

[0041] The display unit 23 uses a display device such as a liquid crystal panel or an organic EL display. The operation unit 24 is an interface that accepts operations from the worker, and uses physical buttons, a touch panel device with a built-in display, a speaker, a microphone, etc. The operation unit 24 may accept operations on a screen displayed on the display unit 23 using physical buttons or a touch panel, or may recognize the operation content from input voice using a microphone and accept the worker's operation in an interactive format using the voice output from a speaker.

[0042] The authentication unit 25 is an authentication device that performs authentication using data obtained from an HPKI card read by a card reader. The authentication unit 25 may be executed as software as part of the second program P2. The authentication unit 25 may include a camera and perform authentication by facial recognition.

[0043] The second device 2, upon receiving an operation from the worker, authenticates the HPKI card to confirm that the operation is the worker's own, and if the authentication is successful, creates a worker record indicating the worker's actions and their presence at the location, associating the time of the action and the time of the presence, and records this in the distributed storage 4. The second device 2 is equipped with a camera, and may be used to record explanatory videos about the results of treatment, the state of treatment, diagnosis and drug prescription, rehabilitation details, patient condition records, and drug audits as records of actions.

[0044] 4 is a block diagram showing the configuration of a node 30 in the blockchain system 3. The node 30 may be a server computer, a desktop or laptop personal computer, or a communication terminal device such as a smartphone. The node 30 includes a processing unit 31, a storage unit 32, and a communication unit 33. Furthermore, as long as the node 30 is a device that includes at least the processing unit 31 and the communication unit 33, part or all of the node 30 can be configured by a part of the processing unit 31.

[0045] The processing unit 31 uses a processor such as a CPU, MPU, GPU, or NPU, and a memory, etc. The processing unit 31 may be configured as a single piece of hardware that integrates a processor, a memory, a storage unit 32, and a communication unit 33. The memory of the processing unit 31 may store a private key that is uniquely owned by each node 30. The processing unit 31 then executes each process based on the node program stored in the storage unit 32, causing the general-purpose computer to function as a node 30 in the blockchain system 3.

[0046] The storage unit 32 uses a hard disk or flash memory and stores programs and data referenced by the processing unit 31, including a node program. The storage unit 32 stores a blockchain. The node program includes, for example, a program for functioning as a smart contract that issues NFTs. The private key described above may be stored in the storage unit 32. The storage unit 32 may also store a public key and an address based on the private key.

[0047] The communication unit 33 is a communication module that realizes intercommunication between the nodes 30. The communication unit 33 uses a network card, an optical communication device, a wireless communication device, or the like.

[0048] Based on the calculations in each node 30, various smart contracts 300 (described later) are invoked and the specified processing is executed. Note that some or all of the various smart contracts 300 may be implemented on a server device outside the chain, which may receive data from the first device 1 and the second device 2, execute processing such as linking, and then broadcast the data, such as recording it in the distributed storage 4.

[0049] 5 is a flowchart showing an example of the procedure for recording a worker record executed in the healthcare information system 100. When a worker performs an operation to have the authentication unit 25 of the second device 2 process the HPKI card, the following process is started.

[0050] The processing unit 20 of the second device 2 acquires data indicating the worker's individual identification data (step S201). In step S201, the processing unit 20 acquires data by performing authentication using an HPKI card, which is more secure. The processing unit 20 may acquire individual identification data that has been input (selected) in advance via the operation unit 24. The processing unit 20 may acquire the worker's individual identification data at the time of login. If the processing unit 20 can acquire data on the worker's job type, it will also acquire this. Note that in step S201, if the processing unit 20 fails to authenticate the HPKI card, it will abort the subsequent processing.

[0051] The processing unit 20 receives the unique identification data of the user who is the target of the action corresponding to the worker's qualifications through the operation unit 24 (step S202). If the target user of the action has not been determined, the processing unit 20 omits the processing of step S202. In this case, the unique identification data of the target user is linked later.

[0052] The processing unit 20 associates the data acquired in step S201 with time data indicating the time of acquisition and device identification data of the second device 2, and creates a worker record (step S203). In step S203, if data specifying the location where the second device 2 is permanently installed is stored in the storage unit 21, the processing unit 20 may read this data and include it in the worker record. If the second device 2 has a function for detecting its own location, location information such as longitude and latitude information indicating the location may be included in the worker record. If the name of the second device 2 is stored in the storage unit 21, the processing unit 20 may include it in the worker record together with the device identification data.

[0053] The processing unit 20 broadcasts the transaction recorded in the distributed storage 4 to the blockchain system (step S204).

[0054] The node 30 of the blockchain system 3 accepts the transaction broadcast from the second device 2 (step S301).

[0055] Based on the transaction accepted in step S301, the smart contract 300 of the blockchain system 3 executes a process of acquiring location-specifying data corresponding to the device identification data of the second device 2 from the worker record included in the transaction (step S302). In step S302, the smart contract 300 refers to a separate table that associates device identification data with location-specifying data, and reads the location-specifying data. "Location-specifying data" refers to data that can identify a medical institution, a nursing facility, a public facility, an address, or a patient's home. "Location-specifying data" may also be data that identifies the area in the virtual space where the worker avatar is located.

[0056] The smart contract 300 of the blockchain system 3 executes a process of storing the worker record included in the transaction and the data identifying the location obtained in step S302 as a worker record in the distributed storage 4 (step S303).

[0057] Based on the transaction accepted in step S301, the smart contract 300 of the blockchain system 3 issues an NFT for the worker record included in the transaction to a wallet corresponding to the individual identification data of the worker (step S304). The issued NFT includes a token ID that identifies the NFT, individual identification data of the worker who is the original NFT owner, a summary of the worker's action (location, action type), and the address of the corresponding worker record in the distributed storage 4, and is imported into the blockchain system 3.

[0058] The processes of steps S301 to S304 may be executed by different smart contracts 300, 300, ..., and some of them may be executed by a server device outside the chain.

[0059] The smart contract 300 of the blockchain system 3 notifies the second device 2 of the ID of the NFT issued in step S304 (step S305) and terminates the processing.

[0060] As a result, the actions of the worker using the second device 2 toward the user, or the worker's presence at a specific location, are recorded in the distributed storage 4.

[0061] Linking of the unique identification data of the user who is the target of the worker's action to the worker record may be performed after the fact. For example, the processing unit 20 of the second device 2 may display on the display unit 23 a list of NFT IDs notified from the blockchain system 3, and if the unique identification data of the user who is the target of the action is not associated in the worker record, may prompt input via the operation unit 24 after the fact and accept the input after the fact. When the first device 1 performs an approval procedure to provide PHR data (images, numerical values, etc. of test results) based on the service provided by the qualified person to researchers, affiliated medical businesses, etc., the worker record of the worker involved in the medical treatment or test may be linked.

[0062] Once each worker's actions and their presence at each location are stored in a manner that is difficult to tamper with in the distributed storage 4, the blockchain system 3 then calculates an evaluation for each NFT issued for the worker record.

[0063] 6 is a flowchart showing an example of an evaluation process procedure executed in the healthcare information system 100. The smart contract 300 deployed in the blockchain system 3 executes the following process for a set period based on a schedule such as once a day, once a week, or once a month. The process may also be executed whenever a worker record corresponding to an action by a license holder is stored in the distributed storage 4.

[0064] The smart contract 300 selects individual identification data of the worker (step S311), and searches the distributed storage 4 for a worker record including the individual identification data of the selected worker (step S312). In step S312, the smart contract searches for worker records recorded during the target period.

[0065] Based on the search results of step S312, the smart contract 300 calculates the evaluation value of the NFT issued for the individual identification data of the selected worker using an algorithm configured in the smart contract 300 itself (step S313). In step S313, the smart contract 300 calculates the evaluation value of each NFT based on the number (number of) worker records extracted as a result of the search, the occupation, the content (type) of the activity in the worker record, the time of the activity, the specificity of the location of the activity (ICU, examination room, street, meeting room, etc.), and the distribution of the data identifying the location of the activity (whether it is performed over a wide area). If the PHR data (medical treatment details and image data determined to be provided by the first device 1) linked to the worker's individual identification data is accessed (used by another party), the evaluation value may be increased. Various algorithms can be used to calculate the evaluation value. Various methods are conceivable, such as calculating a higher NFT evaluation value for a specific combination based on the compatibility between the activity location and the worker.

[0066] The evaluation value calculated by the smart contract 300 is associated with the worker's individual identification data and output to the second device 2 (step S314). The output destination may be a communication device outside the system (such as a system management company, a management device of a medical institution or facility, etc.).

[0067] When the processing unit 20 of the second device 2 receives the output (step S211), it outputs a request to write the sum of the output evaluation values ​​(the total value of the NFT) to the NFT (step S212). If a communication device outside the system receives the output, the communication device stores the evaluation value of the individual identification data of the target worker for the target period.

[0068] The smart contract 300 writes the evaluation value into the NFT data based on a request from the second device 2 of the worker who owns the NFT (step S315), and the process ends.

[0069] The smart contract 300 executes the processing procedure shown in Figure 6 for all or specified individual identification data. The processing shown in Figure 6 may be executed by different smart contracts 300, 300, ..., or some of the processing may be executed by a server device outside the chain. Multiple smart contracts 300 may be deployed, and the processing procedure shown in Figure 6 may be executed and output using different criteria (e.g., different evaluation calculation methods depending on the perspective of the patient, medical institution, insurance company, etc.).

[0070] The above-described processing procedure will be described using specific examples, Cases 1 to 3. Case 1 is a case in which a patient receives medical treatment and examination at a medical institution and receives medicine prescribed based on the medical treatment.

[0071] In the first case, the second device 2 is, for example, a terminal for an electronic medical record system operated by a doctor in charge of the patient. The second device 2 is a wearable device of a nurse in charge of the patient or a reader installed in an examination room (including a special treatment room or a conference room). In the first case, the second device 2 is a terminal device for prescription records operated by a pharmacist who prescribes medicines.

[0072] In the first case, when a patient visits a medical institution, the patient's individual identification data for that date and time is stored in the electronic medical record system operated by that medical institution. The doctor in charge of the patient provides medical care and uses the second device 2, which also serves as a terminal for the electronic medical record system, to select the patient's medical record (medical record history at the medical institution) and enter the details of the medical treatment (S201, S202). At this time, the doctor associates the individual identification data of his or her worker with the medical record. The medical record record for that medical treatment includes the patient's individual identification data, the doctor's individual identification data, the medical treatment details, and the prescription details. The medical treatment record may also be associated with the individual identification data of the nurse and laboratory technician in charge. After entering the details of the medical treatment into the electronic medical record, the second device 2, which is also a terminal for the electronic medical record system, sends the electronic medical record data to the server device of the electronic medical record system. The processing unit 20 of the second device 2 then associates the patient's individual identification data, the doctor's individual identification data, the type of medical treatment, the prescription ID, time data indicating the date and time of the treatment, and the device identification data of the second device 2 to create a worker record (S203). The device identification data is associated with data identifying the medical institution and the examination room where the medical institution is located. The second device 2 broadcasts the transaction of recording the created worker record in the distributed storage 4 to the blockchain system 3 (S204).

[0073] If the medical record includes the individual identification data of the nurse in charge, the second device 2 associates the individual identification data of the patient, the individual identification data of the nurse, the type of medical treatment (the treatment performed by the nurse), time data indicating the date and time of the treatment, and the device identification data of the second device 2 to create a separate worker record (S203). If the blood sampling performed by the nurse can be extracted from the medical record as part of the medical treatment, it is recommended that this be included in the worker record. The second device 2 broadcasts the transaction of recording the created worker record in the distributed storage 4 to the blockchain system 3 (S204).

[0074] If the nurse's second device 2 is a wearable device or a reader for entering and exiting the examination room, the second device 2 associates the nurse's individual identification data, time data indicating the date and time of the examination (entry and exit), and the device identification data of the second device 2 with each completed medical treatment, and creates a separate worker record (S203). The transaction of recording the created worker record in the distributed storage is broadcast, similar to the doctor's data. The worker record may be subsequently linked to the medical treatment performed in the examination room. Based on the blockchain account corresponding to the nurse's individual identification data, it is possible to request additions to the worker record or to add a summary of the worker's actions to an issued NFT.

[0075] If the operation of the second device 2 by a worker who assists in medical treatment, such as a nurse, is complicated, the second device 2, which is a terminal of the electronic medical record system, can create and output qualification data for each qualified person who is presumed to be in charge from the electronic medical record records. For example, the second device 2 creates a worker record for each individual identification data of the nurses who worked in that department in the morning from the medical records of patients who visited that department in the morning. The worker records are linked to the electronic medical record records and created for the actions of the nurses presumed to be in charge.

[0076] In the first case, when a laboratory technician performs an examination based on instructions from a doctor and uses the second device 2 to record the examination results, the second device 2 associates the individual identification data of the laboratory technician, the individual identification data of the patient, the examination content, time data indicating the examination date and time, and the device identification data of the second device 2, and creates a separate worker record (S203). The second device 2 broadcasts a transaction of recording the created worker record in the distributed storage 4 to the blockchain system 3 (S204).

[0077] The pharmacist who receives the prescription operates the second device, which also serves as a terminal device for prescription recording, to input the prescription ID, prescription details, drug audit results, and a completion record of drug delivery. The second device 2 receives the individual identification data of the patient for whom the prescription is being prescribed, the individual identification data of the pharmacist, and the action details, including delivery and explanation of the drug, corresponding to the prescription ID (S201, S202). The pharmacist's second device 2 associates the individual identification data of the patient, the individual identification data of the pharmacist, the action type indicating the audit, the prescription ID, time data indicating the prescription date and time, and the device identification data of the second device 2, and creates a worker record (S203). The second device 2 broadcasts the transaction of recording the created worker record in the distributed storage 4 to the blockchain system 3 (S204).

[0078] As a result, a worker record corresponding to which doctor at which medical institution provided medical care to the patient is stored in the distributed storage 4. In addition, which nurse assisted in the medical care for the patient, as well as records of blood sampling, measurements, tests, etc., are stored as worker records in the distributed storage 4. Data that can identify the location (space) where the medical care, test, or prescription was performed, corresponding to the device identification data of the second device 2, is added to the worker record broadcast from the second device 2.

[0079] FIG. 7 is a diagram showing an example of the contents of a worker record. As shown in FIG. 7, a worker record is stored for each action taken by each license holder for medical treatment, medical assistance, testing, and prescription of medicine for a single patient. Then, as shown in FIG. 7, an NFT is issued individually for each worker record recorded in the distributed storage 4, and is attributed to each doctor, nurse, laboratory technician, and pharmacist. After the fact, an evaluation value for the NFT can be calculated based on the number, frequency, distribution, processing difficulty, and evaluation of the medical treatment by the patient and their family.

[0080] When a patient is admitted to a medical institution, each time care, examinations and treatments are provided by paramedics, nurses, laboratory technicians, physical therapists and occupational therapists, and dietary management is recorded by a registered dietitian, a worker record is stored in distributed storage 4, an NFT is issued for it, and an evaluation value for the NFT is calculated.

[0081] In the second case, a doctor and a nurse make a home visit to the patient. In the second case, the second device 2 is an information terminal device carried by the doctor or nurse who visits the patient. The information terminal device is equipped with applications for home visits and healthcare information systems (such as activity records and electronic medical records).

[0082] In the second case, when a doctor and a nurse visit a patient's residence, the patient's individual identification data is registered in advance in the second device 2. The doctor and nurse perform medical examinations and treatments, and write the contents of the medical record by operating the second device 2. Writing to the medical record may also be performed after the fact. The medical record is associated with the patient's individual identification data, the doctor's individual identification data, the medical treatment details, and the prescription details, just like a medical examination at a medical institution. Data indicating the patient's location (which may be the type or the address) is associated with the location where the medical treatment was performed.

[0083] In the second case, the second device 2 transmits the contents of the medical record to the server device of the electronic medical record system. The transmission can be done after returning to the medical institution. The processing unit 20 of the second device 2 associates the patient's individual identification data, the doctor's individual identification data, data indicating the patient's location, the type of medical treatment, the prescription ID, time data indicating the date and time of the treatment, and the device identification data of the second device 2 to create a worker record (S203). The device identification data is associated with data identifying the device as a home visit terminal used at the medical institution. The second device 2 broadcasts the transaction of recording the created worker record in the distributed storage 4 to the blockchain system 3 (S204).

[0084] In the second case, the second device 2 also creates a worker record for the nurse based on the contents of the medical record by associating the patient's individual identification data, the nurse's individual identification data, data indicating the patient's location who provided medical care, data indicating the details of the medical examination assistance, the prescription ID, time data indicating the date and time of the medical treatment, and the device identification data of the second device 2 (S203). The second device 2 broadcasts the transaction of recording the created worker record for the nurse in the distributed storage 4 to the blockchain system 3 (S204).

[0085] As a result, which doctor at which medical institution treated which patient is stored as a worker record in the distributed storage 4, even if the treatment is performed at the patient's location. Also, when a nurse assists in a medical treatment during a home visit and performs specific tasks such as drawing blood or measuring, records of each of these actions are stored as a worker record in the distributed storage 4. NFTs are issued individually for these distributed storages 4 and belong to the doctors and nurses. After the fact, an evaluation value for the NFTs is calculated based on the number, frequency, degree of distribution, difficulty of processing, type of location where the treatment was performed, and evaluation of the treatment by the patient and their family.

[0086] The third case is when a user (person receiving care) receives rehabilitation, meals, and bathing services at a care facility.

[0087] In the third case, the second device 2 is also used as a terminal for a support system at a nursing facility operated by facility staff (care workers, physical therapists, occupational therapists, and nurses). The second device 2 is a wearable device of the nurse in charge of the user or a reader installed in an examination room. In the third case, the second device 2 is a terminal device used by a registered dietitian who manages the user's diet to keep records.

[0088] In the third case, when providing meal assistance, rehabilitation, or the like to a user at the facility, the facility staff inputs the individual identification data of the user to be assisted into the second device 2 using the operation unit 24. This may be achieved by selecting from pre-registered individual identification data of the user, or by reading an identification card carried by the user. The worker may subsequently record the individual identification data of the user to whom the meal assistance or rehabilitation was provided as a work record in the second device 2, and the second device 2 accepts this record. In the third case, the facility nutritionist records the individual identification data of the user to whom the meal was provided, as well as the menu and provision time, in the second device 2 as a record of the meal management work.

[0089] Based on the input operations by the facility staff, the second device 2 associates the individual identification data of the facility user, the individual identification data of the staff member, the type of service, the content of the service, time data indicating the date and time of the service, and the device identification data of the second device 2 with each service provided by the staff member to the user, and creates a worker record (S203). The device identification data is associated with data identifying the nursing care facility. The second device 2 broadcasts the transaction of recording the created worker record in the distributed storage 4 to the blockchain system 3 (S204).

[0090] As a result, worker records corresponding to which staff member at which nursing facility provided which meal assistance, bathing assistance, rehabilitation assistance, rehabilitation instruction, etc. to which user are stored in the distributed storage 4. NFTs are issued individually for the worker records recorded in the distributed storage 4 and belong to the nursing staff. Afterwards, an evaluation value for the NFT is calculated based on the number, frequency, distribution, difficulty of processing, and evaluation of the medical treatment by the user and family.

[0091] In this way, worker records are stored in the distributed storage 4, corresponding NFTs are issued to workers who hold national certifications, and the evaluation value of the NFTs is calculated according to a predetermined schedule. In the healthcare information system 100, an in-chain smart contract 300 or a server device outside the chain can provide incentives to workers based on the NFTs owned by the workers, using the calculated evaluation value of the NFTs. The attribution (allocation) of NFTs to workers may serve as an incentive to the workers, or NFTs may be purchased with fiat currency from outside the system, and the profits from the sale may be returned to the workers. Since all NFTs are mutually identifiable, incentives may be returned in the form of specific benefits only to workers who own specific NFTs. When worker records corresponding to the actions or existence of specific workers are used as big data for research and development, etc., access to a collection of worker records may be granted by purchasing NFTs.

[0092] (Variant) In a variant, the healthcare information system 100 may quantify the value of a space (place) where a worker in the healthcare and welfare field is present and convert it into an NFT. For example, the space may be public transportation or a public facility. The space may also be a medical institution or welfare facility to which a license holder belongs. In a variant, the value of the place (space) where the worker is present is increased while the action related to the healthcare and welfare field is not yet performed, and the sense of expectation, security, etc. that the worker's presence gives to others, even if the action has not yet been performed, is converted into an NFT, which is then returned to the worker.

[0093] 8 is a flowchart showing an example of the procedure for recording a worker record executed in the healthcare information system 100 in a modified example. In the flowchart shown in FIG. 8, the processing procedures common to the flowchart shown in FIG. 5 are assigned the same step numbers and detailed descriptions are omitted. As shown in FIG. 8, compared to FIG. 5, the processing of step S202 is omitted.

[0094] A specific example of application of the modified example of Fig. 8 will be described below. In public transportation facilities with a high degree of closure, such as airplanes and express trains, the presentation of an HPKI card may be required in advance when making a reservation or checking in. This allows crew members and staff to easily identify licensed persons and request assistance.

[0095] In this case, the second device 2 is a check-in machine for boarding procedures (a server device that accepts reservations). When the check-in machine successfully authenticates the HPKI card using the authentication unit 25, it executes the boarding procedure process for the license holder with the operation management system and also performs the following operations of the healthcare information system 100. The second device 2 acquires the individual identification data of the license holder (S201). The second device 2 associates the individual identification data with identification data (data that specifies the location) of the public transportation vehicle (aircraft, vehicle) that the license holder will board and time data indicating the flight schedule of the vehicle, thereby creating a worker record (S203). The second device 2 broadcasts the transaction recorded in the worker record (S204).

[0096] As a result, a worker record indicating which public transportation aircraft the license holder is on is stored in the distributed storage 4. An NFT is issued individually for each worker record recorded in the distributed storage 4. Other passengers also feel more secure when a doctor is on board an aircraft.

[0097] 9 is a flowchart showing an example of processing based on an issued NFT in a modified example. The following processing is executed by a smart contract 300 for outputting the value of the NFT deployed in the blockchain system 3 and a device capable of verifying the contents of the NFT outside the blockchain system 3. Each of the following processing may be executed by either the smart contract 300 or a device outside the chain.

[0098] For example, a server device of a reservation system selects data identifying the target location (step S401) and requests the blockchain system 3 to search for worker records and NFTs that include the data identifying the selected location along with a future time (step S402).

[0099] The smart contract 300 searches for worker records based on the search request (step S321), and extracts the NFTs issued to the searched worker records (step S322). The smart contract 300 transmits (outputs) the extracted NFT data to the server device (step S323).

[0100] The server device receives the extracted NFT data (step S403) and calculates an evaluation value for the target location based on the extracted NFT (step S404). In step S404, the server device may use an evaluation value that has already been calculated for each NFT based on the performance of the NFT owner, such as the amount of other NFTs held by the license holder. The server device may also calculate an evaluation value based on the number and type of NFTs. The server device outputs the calculated evaluation value (step S405) and terminates the process. In step S405, the server device may calculate a usage fee for other general users using the location and output it to the client device, or may calculate points as an incentive for using the location and output them to a point system.

[0101] In this way, smart contract 300 may calculate an evaluation value for the NFT before the action is performed, and calculate the compensation for the provision of a service in a space where the license holder is present based on the evaluation value. In this case, if other passengers can view the location linked to the issued NFT, in this case, the public transportation vehicle used, they may be able to understand the price difference. NFTs are anonymized, and added value may be calculated for routes and facilities frequently used by the license holder based on a collection of NFTs using information such as the occupation of the license holder to whom the NFT is issued.

[0102] When a medical procedure is actually performed, a worker record corresponding to the medical procedure is stored in the distributed storage 4, using an information terminal device carried by the doctor as the second device 2.

[0103] In this way, by applying the healthcare information system 100 of the present disclosure, it is possible to pass on to the license holder the benefit of presenting this HPKI card and disclosing in advance that a license holder is on board.

[0104] In the above embodiment, a healthcare information system 100 has been described in which an information processing system is applied to the health, medical, and welfare fields. The application fields are not limited to this, and the system may be applied to the issuance and granting of NFTs for actions performed by licensed electrical workers, firefighters, or hunting license holders. The system may also be applied to the realization of an ecosystem that circulates value created depending on whether or not there are qualified engineers or weather forecasters.

[0105] The embodiments disclosed above are illustrative in all respects and are not restrictive. The scope of the present invention is defined by the claims, and includes all modifications within the meaning and scope of the claims.

[0106] 1 First device 10 Processing unit 2 Second device 20 Processing unit 21 Storage unit P2 Second program

Claims

1. An information processing system including a plurality of devices that each acquire qualification identification data assigned to a qualification holder, wherein each of the plurality of devices, when acquiring the qualification identification data, creates a record including the acquired qualification identification data, data capable of specifying the space where the device is located, and data indicating the behavior of the qualification holder in the space, records the created record in a distributed storage accessible to others, and an NFT (Non-Fungible Token) corresponding to the record is issued to the blockchain account of the qualification holder.

2. The information processing system according to claim 1, wherein an evaluation value of the NFT issued to the qualification holder is calculated based on the record including the qualification identification data.

3. The information processing system according to claim 1 or 2, wherein the recording process to the distributed storage and the issuance process of the NFT are executed by a smart contract on a blockchain.

4. The information processing system according to claim 1, wherein the plurality of devices create the record when they can authenticate the qualification holder in the healthcare and welfare fields based on a healthcare public key infrastructure (HPKI).

5. The information processing system according to claim 1, wherein the qualification holder is a doctor and the behavior is a medical act, and the space is a consultation room, an operating room, a specific treatment room, a nursing facility, a patient's residence, a public facility, a road, or a public transportation facility of a medical institution.

6. The information processing system according to claim 1, wherein data specifying the locations of the plurality of devices is stored in association with identification data for identifying each of the plurality of devices, and data of the location corresponding to the identification data of the device that is the source of the record is included in the record.

7. The information processing system according to claim 1, wherein each of the plurality of devices creates a record including the qualification identification data and data capable of specifying the space where the device is located in the state before the qualification holder performs the behavior, and causes an NFT corresponding to the record to be issued to the blockchain account of the qualification holder.

8. An information processing system including a plurality of devices each acquiring qualification holder identification data assigned to a qualification holder, each of the plurality of devices creating, when acquiring the qualification holder identification data, a record including the acquired qualification holder identification data and data capable of specifying a space where the qualification holder currently or will exist in the future, recording the created record in a distributed storage accessible by others, issuing, by a blockchain system, an NFT corresponding to the record to the blockchain account of the qualification holder, calculating, by a device within the blockchain system or an external device, the value of the space based on the NFT, and outputting the calculated value.

9. An information processing method in which a computer receives a record including qualification holder identification data assigned to a qualification holder, data capable of specifying a space where the qualification holder performs an action, and data indicating the action of the qualification holder, records the received record in a distributed storage accessible by others, and issues an NFT corresponding to the record to the blockchain account of the qualification holder.

10. An information processing apparatus including a processing unit that executes a process of acquiring qualification holder identification data assigned to a qualification holder, creating, when acquiring the qualification holder identification data, a record including the acquired qualification holder identification data, data capable of specifying a space where the own device is located, and data indicating the action of the qualification holder in the space of the qualification holder, and recording the created record in a distributed storage accessible by others.

Images