Medical Information Management Apparatus Anonymization Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing medical information management systems face challenges in preventing personal information from being inadvertently included when medical data is shared outside medical institutions, leading to potential data breaches and compliance issues.
Innovation Solution
A medical information management apparatus that generates and stores two types of medical information separately: one without subject identification information for external sharing and another with identification information for internal use, using a hardware processor to manage and control the storage of these data types.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If medical information is output without anonymization processing, then the user can easily output medical information, but personal information may be inadvertently included and shared outside
Solution Approach 1:
The patent divides medical information into two distinct types: first medical information (anonymized, without personal identifiers) and second medical information (contains personal identification information). This segmentation allows the system to maintain both ease of outputting and data security by storing different versions of medical information in separate storage parts, eliminating the need for manual anonymization operations while preventing accidental sharing of identifiable data.
Solution Approach 2:
The patent introduces an intermediary mechanism where the hardware processor automatically generates and manages both anonymized and non-anonymized versions of medical information. The system acts as a mediator between the user's output operations and the actual data sharing, ensuring that only appropriately processed information is output while maintaining security without requiring additional user actions.
2Reliability
If anonymization processing is performed manually by the user, then personal information can be removed, but the user may mistakenly operate and output medical information without proper anonymization
Solution Approach 1:
The system performs self-service by automatically generating both anonymized and non-anonymized versions of medical information through the hardware processor. The anonymization process is built into the system's operational framework, eliminating the need for manual user intervention while ensuring consistent and accurate data processing. The system serves itself by maintaining proper anonymization without requiring user expertise or additional operations.
3Adaptability or versatility
If medical information is stored with personal identification information, then complete patient data is available for internal use, but the data cannot be securely shared outside without additional processing
Solution Approach 1:
The patent implements segmentation by creating separate storage parts: first medical information storage part for anonymized data and second medical information storage part for complete data with identifiers. This allows the system to maintain adaptability by providing both internally usable complete data and externally shareable anonymized data, while managing complexity through automated processing that handles the differentiation between data types without requiring manual intervention.
Data Source
AI summary
A medical information management apparatus includes a hardware processor that: generates first medical information that does not include subject identification information that uniquely identifies a subject on a basis of medical image information regarding the subject; generates second medical information that includes the subject identification information on a basis of the medical image information; and causes the first medical information that has been generated to be stored in a first medical information storage part.