JP2025109394A - Healthcare Information Management System - Google Patents

Abstract

To provide a healthcare-related information management system for providing incentives to individuals to urge them to disclose healthcare-related information by referring to a provision history, the history of providing incentives for every individual as to whether or not to allow disclosure of the healthcare-related information of the individual.SOLUTION: A healthcare-related information management system includes a healthcare-related information storage unit for storing and managing healthcare-related information relating to individuals, an access control unit for controlling disclosure of the healthcare-related information stored in the healthcare-related information storage unit to third parties via a network, an incentive management unit for providing incentives as to whether or not to allow disclosure of the healthcare-related information of individuals, to the individuals to urge them to disclose the healthcare related information by referring to a provision history of a provision history holding unit described below, and the provision history holding unit for holding the provision history, the history of providing the incentives for every individual.SELECTED DRAWING: Figure 3

Description

The present invention relates to a health and medical care-related information management system for storing and managing health and medical care-related information, which is information related to an individual's health and medical care.

Recently, systems and services that allow multiple medical institutions to share patient medical information have begun to be considered.

As an example of such a system, the invention described in Patent Document 1 has been proposed. In this invention, in order to solve the problem of avoiding duplication of test items in test data at multiple medical institutions, reducing waste, and reducing medical costs, a medical information sharing server is provided in a regional medical cooperation system and various test results of patients are stored. The medical information sharing server displays the corresponding electronic medical records according to instructions from the medical institution's medical facility terminal or the medical examination center terminal, and when a clinical test is performed, searches and displays whether the results of the same test items as the test items of the clinical test to be performed are recorded in the test result DB. It has also been disclosed that a medical information providing system is provided in the medical information sharing server, and when sending information to the medical information provider, the medical information providing system requests a fee for the information, and based on the fee received, the medical information providing system determines a remuneration that can be provided to the user and provides the remuneration to the user.

Patent Publication 2022-25166

However, the above-mentioned invention only discloses that the medical information provision system determines rewards that can be offered to users and provides the rewards to the users, and does not clearly state that a health and medical related information management system such as the present invention has a function to maintain a provision history that is a record of incentives provided to each individual, and/or a function to provide incentives to individuals in order to encourage the disclosure of health and medical related information by referring to the provision history regarding whether or not to allow the disclosure of health and medical related information about an individual.

In light of the above-mentioned problems, the present invention aims to provide a health and medical information management system that provides incentives to individuals to encourage the disclosure of health and medical information by referring to a provision history, which is a record of incentives provided to each individual, when deciding whether or not to disclose health and medical information about the individual.

Specifically, the present invention provides a health care related information management system having a health care related information storage unit for storing and managing health care related information relating to individuals, an access control unit for controlling the disclosure of the health care related information stored in the health care related information storage unit to a third party via a network, an incentive management unit for providing incentives to individuals to encourage the disclosure of the health care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the health care related information relating to the individual, and a provision history storage unit for storing the provision history, which is a history of incentives provided to each individual.

In addition to the above features, the present invention provides a health and medical information management system having an incentive type information storage unit that stores incentive type information that is information indicating multiple incentive types, and an incentive management unit that selects and provides incentives to individuals based on the incentive type information stored in the incentive type information storage unit in accordance with the incentive provision history.

In addition to the above features, the present invention provides a health care related information management system having a termination request receiving unit that receives a termination request, which is a request to suspend or terminate the disclosure of health care related information that has already been made public, from an individual who stores health care related information in the health care related information storage unit; a termination condition storage unit that stores termination conditions, which are conditions for determining whether or not to terminate the disclosure based on information about the individual who made the termination request when a termination request is received; a judgment rule storage unit that stores judgment rules, which are rules for determining whether or not to terminate the disclosure of the health care related information based on information about the individual who made the termination request and the stored termination conditions; a termination judgment unit that determines whether to terminate the disclosure based on information about the individual, the stored termination conditions, and the stored judgment rules when a termination request is received; and a termination control unit that controls the access control unit to terminate the disclosure of the health care related information of the individual when the judgment result of the termination judgment unit is that the disclosure should be terminated.

In addition to the above features, the present invention also provides a health and medical information management system having an access authentication processing unit that performs authentication for accessing the incentive management unit.

In addition to the above features, the present invention also provides a health and medical information management system having a consent information acquisition unit that acquires consent information, which is information indicating consent to accepting an incentive from the incentive management unit, after authentication by the access authentication processing unit.

In addition to the above features, the present invention also provides a health and medical information management system having an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition unit.

In addition to the above features, the present invention also provides a health and medical care related information management system having a disclosure permission information storage unit that stores disclosure permission information indicating whether an individual permits disclosure of his or her own health and medical care related information to a third party.

In addition to the above features, the present invention also provides a health and medical information management system having a third-party identification information storage unit that stores third-party identification information for identifying whether a third party is a medical professional or a non-medical professional.

In addition to the above features, the present invention also provides a health care related information management system in which the access control unit allows a medical professional to view the health care related information stored in the health care related information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the third party is a medical professional.

In addition to the above features, the present invention provides a health and medical care related information management system in which, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information held in the third party identification information holding unit indicates that the person is a non-medical professional, the access control unit allows a non-medical professional to view a part (including all) of the health and medical care related information stored in the health and medical care related information storage unit, or health and medical care related information that has been anonymized using a predetermined anonymization method.

In addition to the above features, the present invention also provides a health and medical information management system in which the anonymization method is at least one of the following anonymization methods, where k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

In addition to the above features, the present invention also provides a health and medical information management system in which the health and medical information storage unit stores health and medical information including one or more of the following information: electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS.

In addition to the above features, the present invention provides a health and medical related information management system in which the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services and general information services to information providers, provision of individual medicines and supplements, provision of books and other products, provision of passwords and IDs for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps and pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash.

In addition to the above features, the present invention provides a health and medical related information management system in which the medical professionals include at least one of the following: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, X-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

In addition to the above features, the present invention provides a health and medical related information management system in which the non-medical personnel include at least one of employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), cooperative health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

Furthermore, to realize the above-mentioned health and medical related information management system, a method executed by a CPU in the health and medical related information management system, which is a computer, is provided, as well as an operating program for the health and medical related information management system that is written in a readable and executable manner in the health and medical related information management system, which is a computer.

Specifically, the present invention provides a method executed by a CPU in a health and medical care related information management system, which is a computer, comprising: a health and medical care related information accumulation step for accumulating and managing health and medical care related information relating to individuals; an access control step for controlling the disclosure of the health and medical care related information accumulated in the health and medical care related information accumulation step to a third party via a network; an incentive management step for providing incentives to individuals to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history retention step described below regarding whether or not to allow the disclosure of the health and medical care related information relating to the individuals; and a provision history retention step for retaining the provision history, which is a history of incentives provided to each individual.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and includes an incentive type information storage step for storing incentive type information that is information indicating multiple types of incentives, and an incentive management step for selecting and providing an incentive to an individual based on the incentive type information stored in the incentive type information storage step in accordance with the incentive provision history.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, comprising: a termination request receiving step for receiving a termination request, which is a request to stop or terminate the disclosure of health and medical care related information that has already been made public, from an individual who has accumulated health and medical care related information in the health and medical care related information accumulation step; a termination condition holding step for holding a termination condition, which is a condition for determining whether or not to terminate based on information about the individual who made the termination request when the termination request is received; a judgment rule holding step for holding a judgment rule, which is a rule for determining whether or not to terminate the disclosure of the health and medical care related information based on information about the individual who made the termination request and the held termination condition; a termination judgment step for determining whether or not to terminate based on information about the individual, the held termination condition, and the held judgment rule when the termination request is received; and a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the judgment result in the termination judgment step is that the disclosure should be terminated.

In addition to the above features, the present invention also provides a method executed by a CPU in a health care related information management system, which is a computer, and which includes an access authentication processing step for performing authentication for accessing the incentive management step.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and includes a consent information acquisition step of acquiring consent information, which is information indicating consent to accepting an incentive through an incentive management step, after authentication in the access authentication processing step.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and which has an incentive provision processing step that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical information management system, which is a computer, and which includes a disclosure permission information storage step for storing disclosure permission information indicating whether an individual permits disclosure of his or her health and medical information to a third party.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, and which includes a third party identification information retention step for retaining third party identification information for identifying whether a third party is a medical professional or a non-medical professional.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical care related information management system, which is a computer, in which the access control step allows a medical professional to view the health and medical care related information stored in the health and medical care related information storage step when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a medical professional.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical related information management system, which is a computer, in which the access control step allows a non-medical professional to view part (including all) of the health and medical related information stored in the health and medical related information storage step, or the health and medical related information anonymized by a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the non-medical professional is a non-medical professional.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical information management system, which is a computer, in which the anonymization method is at least one of the following anonymization methods: k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical information management system, which is a computer, in which the health and medical information accumulation step accumulates health and medical information including one or more of the following information: electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS, relating to an individual.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical related information management system, which is a computer, in which the incentive management step provides incentives including one or more of the following: providing My Number points, providing individualized information services or general information services to information providers, providing individualized medicines or supplements, providing books or other products, providing passwords or IDs for providing information, providing items that can be used on the network, providing the right to receive medical treatment, providing the right to receive a diagnosis, providing the right to receive an examination, providing the right to receive various services on the network, providing specific software (e.g., a health management app or a pedometer app), providing points for prepaid or postpaid electronic money, product coupons, travel coupons, or cash.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical information management system, which is a computer, in which the medical professionals include at least one of the following: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, X-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, judo therapists, dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

In addition to the above features, the present invention also provides a method executed by a CPU in a health and medical information management system, which is a computer, in which the non-medical personnel include at least one of the following employees: life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, fitness equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), cooperative health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

Specifically, the present invention provides an operating program for a health care related information management system that is written in a readable and executable manner in a computer that has a health care related information storage step for storing and managing health care related information about individuals, an access control step for controlling the disclosure of the health care related information stored in the health care related information storage step to a third party via a network, an incentive management step for providing incentives to individuals to encourage the disclosure of health care related information by referring to the provision history in the provision history storage step described below regarding whether or not to allow the disclosure of the health care related information about the individuals, and a provision history storage step for storing the provision history, which is a history of incentives provided to each individual.

In addition to the above features, the present invention also provides an operating program for a health and medical care related information management system, which includes an incentive type information storage step for storing incentive type information that is information indicating multiple incentive types, and an incentive management step for selecting and providing incentives to be provided to individuals based on the incentive type information stored in the incentive type information storage step, and which is written in a manner that can be read and executed by the health and medical care related information management system, which is a computer that provides incentives selected based on the incentive type information stored in the incentive type information storage step according to the incentive provision history.

In addition to the above features, the present invention provides an operating program for a health and medical care related information management system that is written in a readable and executable manner in a computer that includes a termination request receiving step for receiving a termination request, which is a request to stop or terminate the disclosure of health and medical care related information that has already been made public, from an individual who has accumulated health and medical care related information in the health and medical care related information accumulation step; a termination condition holding step for holding a termination condition, which is a condition for determining whether or not to terminate the disclosure based on information about the individual who made the termination request when the termination request is received; a judgment rule holding step for holding a judgment rule, which is a rule for determining whether or not to terminate the disclosure of the health and medical care related information based on information about the individual who made the termination request and the held termination condition; a termination judgment step for determining whether or not to terminate the disclosure of the health and medical care related information when the termination request is received based on information about the individual, the held termination condition, and the held judgment rule; and a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the judgment result in the termination judgment step is that the disclosure should be terminated.

In addition to the above features, the present invention also provides an operating program for a health and medical information management system that is written in a readable and executable manner on a computer that has an access authentication processing step for performing authentication for accessing the incentive management step.

In addition to the above features, the present invention also provides an operating program for a health and medical information management system that is written in a readable and executable manner in a computer that is a health and medical information management system and that has a consent information acquisition step for acquiring consent information, which is information indicating consent to accepting an incentive through an incentive management step, after being authenticated in an access authentication processing step.

In addition to the above features, the present invention also provides an operating program for a health and medical information management system that is written in a readable and executable manner in a computer that includes an incentive provision processing step that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition step.

In addition to the above features, the present invention also provides an operating program for a health and medical information management system that is written in a readable and executable manner on a computer that includes a disclosure permission information storage step for storing disclosure permission information indicating whether or not an individual permits disclosure of his or her own health and medical information to a third party.

In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a manner that can be read and executed by a computer that has a third-party identification information storage step for storing third-party identification information for identifying whether a third party is a medical professional or a non-medical professional.

In addition to the above features, the present invention also provides an operating program for a health care related information management system, the operating program being written in a readable and executable manner in a health care related information management system, which is a computer that allows a medical professional to view the health care related information stored in the health care related information storage step, when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a medical professional.

In addition to the above features, the present invention also provides an operating program for a health care related information management system, the operating program being written in a readable and executable manner in a health care related information management system that is a computer that allows non-medical personnel to view part (including all) of the health care related information stored in the health care related information storage step, or the health care related information that has been anonymized by a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the person is a non-medical personnel.

In addition to the above features, the present invention also provides an operating program for a health and medical information management system that is written in a readable and executable manner on a computer that performs anonymization using at least one of the following anonymization methods: k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these methods.

In addition to the above-mentioned features, the present invention also provides an operating program for a health and medical information management system, the operating program being written in a readable and executable manner in a health and medical information management system, which is a computer that accumulates health and medical information including one or more of the following information: electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, health promotion app data, and conversation data for an interactive health promotion SNS, regarding an individual:

In addition to the above features, the present invention provides an operating program for a health and medical information management system that is written in a readable and executable manner in a computer that provides incentives including any one or more of the following: provision of My Number points, provision of individual information services and general information services to information providers, provision of individual medicines and supplements, provision of books and other products, provision of passwords and IDs for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash.

In addition to the above features, the present invention also provides an operating program for a health and medical related information management system that is written in a readable and executable manner on a computer that includes at least one of the following medical professionals: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, clinical radiologists, clinical X-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators.

In addition to the above features, the present invention also provides an operating program for a health and medical information management system that is written in a readable and executable manner on a computer that includes at least one of the following non-medical personnel: employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), cooperative health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

As described above, the present invention provides a health and medical care-related information management system that provides incentives to individuals to encourage the disclosure of health and medical care-related information by referring to the provision history, which is a history of incentives provided to each individual, regarding whether or not to allow the disclosure of health and medical care-related information about the individual.

FIG. 1 is a diagram showing a hardware configuration applied to the present invention. A diagram showing the overall configuration of the health and medical information management system of the present invention. FIG. 1 is a diagram showing the functional configuration of a health and medical information management system according to a first embodiment. FIG. 1 is a diagram showing the hardware configuration of a health and medical information management system according to a first embodiment. FIG. 1 is a diagram showing a process flow when the health and medical care related information management system in the first embodiment is used. FIG. 2 is a diagram showing an example of a provision history storage unit of the health and medical care related information management system in the first embodiment. FIG. 1 shows a functional configuration of a health and medical information management system according to a second embodiment. FIG. 1 shows a hardware configuration of a health and medical information management system according to a second embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the second embodiment. FIG. 13 is a diagram showing an example of an incentive type information storage unit of the health and medical care related information management system in the second embodiment. FIG. 13 is a diagram showing an example of an incentive management unit of the health and medical care related information management system according to the second embodiment. FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a third embodiment. FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a third embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the third embodiment. FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a fourth embodiment. FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a fourth embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the fourth embodiment. FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a fifth embodiment. FIG. 13 is a diagram showing hardware calibration of the health and medical information management system according to the fifth embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the fifth embodiment. FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to a sixth embodiment. FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a sixth embodiment. FIG. 13 is a diagram showing a process flow when using a health and medical care related information management system in embodiment 6. FIG. 13 is a diagram showing the functional configuration of a health and medical care related information management system according to a seventh embodiment. FIG. 23 is a diagram showing an example of an access control unit of the health and medical care related information management system according to the seventh embodiment. FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a seventh embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the seventh embodiment. FIG. 13 is a diagram showing the functional configuration of a health and medical information management system according to an eighth embodiment. FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to an eighth embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the eighth embodiment. FIG. 13 is a diagram showing the functional configuration of a health and medical care related information management system according to a ninth embodiment. FIG. 13 is a diagram showing the hardware configuration of a health and medical information management system according to a ninth embodiment. FIG. 13 is a diagram showing a process flow when using the health and medical care related information management system in the ninth embodiment. FIG. 2 shows the functional configuration of a health and medical care related information management system according to a tenth embodiment. FIG. 23 is a diagram showing the hardware configuration of a health and medical information management system according to a tenth embodiment. FIG. 23 is a diagram showing a process flow when using the health and medical care related information management system according to the tenth embodiment. A diagram showing an example of anonymization method A diagram showing an example of anonymization method A diagram showing an example of anonymization method A diagram showing an example of the user interface of the health and medical information management system of the present invention. A diagram showing an example of the user interface of the health and medical information management system of the present invention. A diagram showing an example of the user interface of the health and medical information management system of the present invention. A diagram showing an example of the user interface of the health and medical information management system of the present invention. A diagram showing an example of the user interface of the health and medical information management system of the present invention. <Hardware that can constitute the present invention>

FIG. 1 is a diagram showing a hardware configuration applied to the present invention.
The present invention is in principle an invention that utilizes a computer, but it can also be realized by software, hardware, or a combination of software and hardware. The hardware that realizes all or part of each of the constituent elements of the present invention is composed of the basic components of a computer, such as a CPU, memory, bus, input/output devices, various peripheral devices, and a user interface. The various peripheral devices include storage devices, internet interfaces, internet devices, displays, keyboards, mice, speakers, cameras, videos, televisions, various sensors for grasping the production status in laboratories or factories (flow rate sensors, temperature sensors, weight sensors, liquid volume sensors, infrared sensors, shipment counters, package counters, foreign body inspection devices, defective product counters, radiation inspection devices, surface condition inspection devices, circuit inspection devices, human presence sensors, worker work status grasping devices (video, ID, PC work volume, etc.)), CD devices, DVD devices, Blu-ray devices, USB memories, USB memory interfaces, removable hard disks, general hard disks, projector devices, SSDs, telephones, fax machines, copy machines, printers, movie editing devices, various sensor devices, etc. In addition, the present system does not necessarily have to be configured by one housing, and may be configured by connecting multiple housings via communication. In addition, the communication may be LAN, WAN, Wi-Fi, Bluetooth (registered trademark), infrared communication, or ultrasonic communication, and some of them may be installed across borders. Furthermore, each of the multiple housings may be operated by a different entity, or may be operated by a single entity. The operating entity of the system of the present invention may be single or multiple. The invention can also be configured as a system including a terminal used by a third party in addition to the present system, and a terminal used by another third party. These terminals may be installed across borders. Furthermore, in addition to the present system and the terminals, a device used to register related information of a third party, a device used for a database to record the contents of the registration, etc. may be prepared. These may be provided in the present system, or may be provided outside the present system to configure the present system so that such information can be used.

As shown in this diagram, the computer is composed of a chipset, a CPU, a non-volatile memory, a main memory, various buses, a BIOS, various interfaces such as USB, HDMI (registered trademark) and LAN, a real-time clock, etc., which are configured on a motherboard. These operate in cooperation with an operating system, device drivers (for various interfaces such as USB and HDMI (registered trademark), cameras, microphones, speakers or headphones, displays, and other built-in devices), various programs, etc. The various programs and data constituting the present invention are configured to efficiently utilize these hardware resources to execute various processes.
Chipset

A "chipset" is a set of large-scale integrated circuits (LSIs) that are mounted on a computer's motherboard and integrate a communication function between the CPU's external bus and a standard bus that connects memory and peripheral devices, in other words a bridge function. There are cases where a two-chipset configuration is used, and cases where a single chipset configuration is used. The north bridge is located on the side closest to the CPU and main memory, and the south bridge is located on the side furthest away and interfaces with the relatively slow external I/O.

(North Bridge)
The north bridge includes a CPU interface, a memory controller, and a graphics interface. Most of the functions of a conventional north bridge may be performed by the CPU. The north bridge is connected to the memory slot of the main memory via a memory bus, and is connected to the graphics card slot of the graphics card via a high-speed graphics bus (AGP, PCI Express).

(South Bridge)
The south bridge is connected to the PCI interface (PCI slot) via a PCI bus, and is responsible for I/O functions and sound functions with the ATA (SATA) interface, USB interface, Ethernet interface, etc. Incorporating circuits that support PS/2 ports, floppy disk drives, serial ports, parallel ports, and ISA buses, which do not require or are impossible to operate at high speed, will hinder the speed of the chipset itself, so they may be separated from the south bridge chip and placed in another LSI called a super I/O chip. A bus is used to connect the CPU (MPU) to peripheral devices and various control units. The bus is connected by the chipset. The memory bus used to connect to the main memory may instead adopt a channel structure to increase speed. A serial bus or a parallel bus can be used as the bus. While a serial bus transfers data one bit at a time, a parallel bus transfers the original data itself or multiple bits extracted from the original data as a single block and transmits it simultaneously over multiple communication paths. A dedicated line for the clock signal is set up in parallel with the data line to synchronize the data demodulation on the receiving side. It is also used as a bus to connect the CPU (chipset) to external devices, and includes GPIB, IDE/(Parallel) ATA, SCSI, PCI, etc. Since there is a limit to how fast it can be made, in PCI Express, an improved version of PCI, and Serial ATA, an improved version of Parallel ATA, the data line can be a serial bus.

≪CPU≫

The CPU sequentially reads, interprets, and executes a sequence of instructions called a program stored in the main memory, outputting information consisting of signals to the main memory. The CPU functions as the center of calculations within the computer. The CPU is composed of a CPU core, which is the center of calculations, and its peripheral parts, and includes registers, cache memory, an internal bus connecting the cache memory and the CPU core, a DMA controller, a timer, and an interface with a connection bus to the north bridge. A single CPU (chip) may have multiple CPU cores. In addition to the CPU, processing may also be performed by a graphic interface (GPU) or FPU. Although the embodiment is described as a two-core type, this is not limiting. Programs can also be built into the CPU.

≪Non-volatile memory≫

(HDD)

The basic structure of a hard disk drive consists of a magnetic disk, a magnetic head, and an arm on which the magnetic head is mounted. SATA (previously ATA) can be used as the external interface. A high-performance controller, such as SCSI, is used to support communication between hard disk drives. For example, when copying a file to another hard disk drive, the controller can read the sectors and transfer them to the other hard disk drive for writing. At this time, the host CPU's memory is not accessed. Therefore, there is no increase in the load on the CPU.

≪Main memory≫

The CPU directly accesses and executes various programs in the main memory. The main memory is a volatile memory and uses DRAM. Programs in the main memory are expanded from the non-volatile memory to the main memory upon receiving a program start command. The CPU then executes the program according to various execution commands and execution procedures within the program.

≪Operating System (OS)≫

The operating system is used to manage the computer's resources so that applications can use them, to manage various device drivers, and to manage the computer itself (the hardware). Small computers sometimes use firmware as the operating system.

≪BIOS≫

The BIOS causes the CPU to execute procedures for starting up the computer hardware and running the operating system, and is most typically the hardware that the CPU reads first when it receives a computer startup command. The BIOS records the address of the operating system stored on the disk (non-volatile memory), and the operating system is sequentially loaded into main memory by the BIOS loaded into the CPU and becomes operational. The BIOS also has a check function that checks the presence or absence of various devices connected to the bus. The results of the check are stored in main memory and are made available to the operating system as appropriate. The BIOS may also be configured to check external devices, etc. The above is the same for all embodiments.

As shown in the figure, the present invention can basically be configured with a general-purpose computer program and various devices. The computer basically operates in a form in which a program recorded in non-volatile memory is loaded into main memory, and processing is executed by the main memory, CPU, and various devices. Communication with devices is performed via an interface connected to a bus line. Possible interfaces include a display interface, a keyboard, and a communication buffer. Below, an embodiment of the present invention will be described with reference to the illustrated example.

<Fulfilling the utility of the laws of nature in this invention>

The present invention functions through the cooperation of a computer, communications equipment, and software. Specifically, it relates to a health and medical information management system for accumulating and managing health and medical information, which is information related to an individual's health and medical care, and various information and data are exchanged between third-party terminals and administrator terminals via a network using hardware resources. Therefore, from this perspective, if the present invention is judged based on the resources of computers and the like described in the claims and specification, and the common general technical knowledge related to those matters, the present invention as a whole utilizes the laws of nature and falls under the category of a computer software-related invention.

<The significance of using the laws of nature as required by patent law>

The use of the laws of nature required by the Patent Act is required to ensure that an invention can be used industrially and usefully, based on the purpose of the law, from the viewpoint that an invention must have industrial applicability and contribute to the development of industry. In other words, it is required that the invention be industrially useful, that is, that the effect of the invention declared at the time of application can be reproduced with a certain degree of certainty by implementing the invention. From this perspective, the use of the laws of nature is interpreted as the function of each of the invention-specific matters (invention constituent elements), which are the components of the invention to achieve the effect of the invention, being achieved by utilizing the laws of nature. Furthermore, the effect of an invention is sufficient if it has the potential to provide a certain usefulness to the user who uses the invention, and should not be viewed from the perspective of how the user feels or thinks about that usefulness. Therefore, even if the effect that the user obtains from this system is a psychological effect, the effect itself is not subject to the required use of the laws of nature.

The following describes the embodiments of the present invention with reference to the attached drawings. The relationships between the embodiments and the claims are as follows. The explanation of the first embodiment relates to claims 1, 16, and 31, the explanation of the second embodiment relates to claims 2, 17, and 32, the explanation of the third embodiment relates to claims 3, 18, and 33, the explanation of the fourth embodiment relates to claims 4, 19, and 34, the explanation of the fifth embodiment relates to claims 5, 20, and 35, the explanation of the sixth embodiment relates to claims 6, 21, and 36, the explanation of the seventh embodiment relates to claims 7, 22, and 37, the explanation of the eighth embodiment relates to claims 8, 23, and 38, the explanation of the ninth embodiment relates to claims 9, 24, and 39, and the explanation of the tenth embodiment relates to claims 10, 25, and 40. The present invention should not be limited to these embodiments, and may be implemented in various forms without departing from the spirit of the invention.

<Overall configuration of the health and medical information management system of the present invention>
FIG. 2 is a diagram showing an example of the overall configuration of a health and medical care related information management system according to the present invention.
The health and medical related information management system 200 stores any one of electronic medical record information, various test information (which may include medical checkups, medical examinations, etc.) related to an individual, prescription information, medication history information, medication status information, vital information (including at least, but not limited to, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, brain waves, electrocardiograms, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), information on a medical questionnaire, data on a health promotion app, conversation data on an interactive health promotion SNS, etc. The system is made up of: health care related information storage unit 201 which stores health care related information including the above information; access control unit 202 which controls the disclosure of the health care related information stored in health care related information storage unit 201 to third parties via the network; incentive management unit 203 which provides incentives to individuals to encourage the disclosure of health care related information by referring to the provision history in provision history holding unit 204 described below regarding whether or not to allow the disclosure of the health care related information about an individual; and provision history holding unit 204 which holds the provision history, which is a history of incentives provided to each individual.

The health and medical information management system 200 is also configured to be electrically connected to a third party terminal 206 and an administrator terminal 207 via a network 205 (e.g., the Internet, a WAN, a LAN, etc.). Here, the third party terminal 206 and the administrator terminal 207 may be electronic devices (e.g., a personal computer, a tablet terminal, a smartphone, etc.) that can be connected to the network 205 via a wired or wireless interface (e.g., a communication cable, a WiFi router, etc.).

In addition, in the present invention, a "third party" refers to an individual (including, but not limited to, the patient himself/herself, his/her family and/or caregivers), as well as medical professionals and non-medical professionals, as described below.
In addition, an “administrator” is a person who is responsible for managing and operating the entire health and medical related information management system (which may include, for example, an individual, or an institution, group, or corporation to which the individual belongs. It may also include an employee of a government agency or local government, or an institution, group, or corporation commissioned by a government agency or local government), and may have the authority to edit, add, and delete various information in the health and medical related information management system.

In addition, for example, "electronic medical record information" may include basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information about the examination (e.g., the patient's main complaint (subjective symptoms and complaints about physical condition, etc.), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information about nursing and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds), urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, lobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc., but are not limited to these), observation results, records of urine and stool, etc., records of dietary content and intake, records of nursing care, etc.), information regarding examinations (e.g., examination instructions, examination results, images (partially) obtained by imaging tests, reports on those images, etc.), information regarding treatments and surgeries (e.g., instructions for treatments and surgeries, progress and results of treatments and surgeries, and if a pathological diagnosis was performed, the method and diagnosis results, etc.), information regarding medications (e.g., drug development instructions, date and time of medication and medication, results of medication, etc.), and follow-up information after treatment or surgery may also be included.

Additionally, for example, "prescription information" may include the insurer number, name, date of birth, gender, name of the medical institution, contact information, name of the prescribing doctor, name of the medication, form of the medication (tablet, capsule, liquid, powder, granules, etc.), amount of medication (amount to take per dose), number of times per day, timing of taking the medication, information about changing to a generic drug, number of times the medication is dispensed in installments, etc.
In addition, "medical history information" may include, for example, the patient's name, date of birth, sex, My Number information or insured card number, address, emergency contact information, name of the insurance medical institution and name of the insured physician that prescribed the prescription, prescription date, prescription contents, key points of inquiries regarding the dispensing date and prescription contents, the patient's constitution, allergy history, side effect history, key points of inquiries from the patient or their family, medication status, confirmation of remaining medication status, changes in physical condition while taking the medication, concomitant medications, medical history information including complications, whether the patient has visited another department, whether or not there are symptoms that are suspected to be side effects, food and drink intake (drug interactions), the patient's wishes regarding the use of generic drugs, the status of information provided in the notebook, key points of medication instructions, and the name of the insurance pharmacist who provided the instructions.

For example, the "medication status information" may also include information regarding the remaining amount of prescribed medication (e.g., the amount of medication remaining when the patient accidentally forgets to take the medication or when the patient intentionally does not take the medication), timing information regarding visits to the hospital/clinic (e.g., the period from the scheduled end date of the prescription (scheduled end date of medication) to the actual visit to the hospital/clinic (e.g., when the patient visits the hospital/clinic earlier than scheduled or later than scheduled)), and patient complaints about medication (e.g., subjective symptoms and complaints about physical condition, such as developing hives after continuing to take a certain medication, or feeling dizzy after taking a certain medication because the medication was too effective).

Furthermore, for example, "health and medical related information" may include PHR, etc. Alternatively, it may include various information acquired from a PHR system, etc., via an API. Here, PHR is an abbreviation of Personal Health Record, and refers to information related to an individual's health, medical care, and nursing care. The aim is for each individual to be able to receive excellent services suited to their own health condition by managing and utilizing their own information related to health, medical care, and nursing care chronologically throughout their lifetime.
For example, up until now, each citizen has kept a lot of health and medical information in various notebooks and paper documents. The media and places where these records are kept vary depending on the life stage at the time. For example, at the time of childbirth, it is the "maternal and child health notebook," at the time of schooling, it is the "results of school health checkups," and at the time of employment, it is the "results of regular health checkups." In addition, depending on physical condition, one may manage one's own health using a "disease management notebook" or a "medicine notebook," and as one becomes elderly, one's health information is recorded in a "nursing care prevention notebook" or a "family doctor cooperation notebook." There is a concept and mechanism for digitizing this existing "notebook culture" and centralizing it as data so that one can manage and utilize it oneself, and it is expected to become even more widespread in the future.

In the present invention, the health and medical care related information storage unit 201 and the access control unit 202 are described on the assumption that they are configured to function on the same server, but this is not limiting, and each may be configured to perform its function or role on a separate server. Alternatively, multiple servers may be provided, and information and data may be exchanged between these servers, allowing them to work together or cooperate to execute various functions. For example, the health and medical care related information storage unit 201 and the access control unit 202 may be configured as a cloud server.

Similarly, the present invention will be described on the assumption that the health and medical information storage unit 201 and the access control unit 202, the incentive management unit 203 and the provision history holding unit 204 are configured to function on separate servers, but this is not limiting and each may be configured to perform its respective functions and roles on the same server. Alternatively, multiple servers may be provided, and information and data may be exchanged between these servers to enable them to cooperate or work together to execute various functions. For example, the health and medical information storage unit 201, the access control unit 202, the incentive management unit 203 and the provision history holding unit 204 may be configured on a cloud server.

<Embodiment 1 (corresponding mainly to claims 1, 16, and 31)>
<Overview of First Embodiment>
This embodiment provides a health and medical care related information management system having a health and medical care related information storage unit for storing and managing health and medical care related information about individuals, an access control unit for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network, an incentive management unit for providing incentives to individuals to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to permit disclosure of the health and medical care related information about an individual, and a provision history storage unit for storing the provision history which is a history of incentives provided to each individual.In order to achieve this, a method executed by a CPU in the health and medical care related information management system which is a computer, and an operating program for the health and medical care related information management system which is written in a manner readable and executable by the health and medical care related information management system which is a computer are also provided.

<Functional Configuration of First Embodiment>
3 is a diagram showing the functional configuration of the health and medical care related information management system in embodiment 1. In this embodiment, the system includes a health and medical care related information storage unit, an access control unit, an incentive management unit, and a provision history storage unit.

<Embodiment 1: Configuration of Healthcare-Related Information Storage Unit>
The "healthcare related information storage unit" 201 is configured to have a function of storing healthcare related information including one or more of the following information: electronic medical record information on an individual, various test information (which may include health checkups, medical examinations, etc.), prescription information, medication history information, medication status information, vital signs information (including at least, but not limited to, body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, brain waves, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinogen, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc.), medical questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS.

Here, "electronic medical record information" refers to, for example, basic information about the patient (e.g., patient ID, name, date of birth, contact information, emergency contact information, family history, height and weight, allergy information, smoking and drinking status, medical history, etc.), information about the examination (e.g., the patient's main complaint (subjective symptoms and complaints about physical condition, etc.), various test results, medication information, diagnosis, treatment plan, doctor's examination record, doctor's instructions, etc.), information about nursing and progress (e.g., vital signs information (e.g., body temperature, blood pressure, pulse, heart rate, height, weight, blood glucose level, body fat percentage, arterial blood oxygen saturation, electroencephalogram, electrocardiogram, number of steps, respiratory rate, heart sounds, urine measurement information (e.g., urinary sugar, urinary protein, urinary occult blood, urobilinol, etc.) It is desirable to have a configuration that includes at least the following: (i) blood glucose level, pH, bilirubin, ketone bodies, nitrites, etc.), sleep time, etc., but is not limited to these), observation results, records of urine and stool, etc., records of dietary content and intake, records of nursing care, etc.), information regarding tests (e.g., test instructions, test results, images (partially) obtained by imaging tests, reports on those images, etc.), information regarding treatments and surgeries (e.g., instructions for treatments and surgeries, progress and results of treatments and surgeries, and if a pathological diagnosis was performed, the method and diagnosis results, etc.), information regarding medications (e.g., instructions for drug development, date and time of medication and medication, results of medication, etc.), and follow-up information after treatment or surgery.

In addition, it is desirable for the "prescription information" to be configured to include, for example, the insurer number, name, date of birth, sex, name of medical institution, contact information, name of the prescribing doctor, name of the medicine, form of the medicine (tablet, capsule, liquid, powder, granule, etc.), amount of medicine (amount to take per dose), number of times to take per day, timing, information about changing to generic medicines, number of times dispensed in installments, etc.

In addition, it is desirable for the "medication history information" to be configured to include, for example, the patient's name, date of birth, sex, My Number information or the insured person's card number, address, emergency contact information, name of the insured medical institution and name of the insured physician that prescribed the prescription, prescription date, prescription content, dispensing date, key points of inquiries regarding the prescription content, the patient's constitution, allergy history, side effect history, key points of inquiries from the patient or their family, medication status, confirmation of remaining medication status, changes in physical condition while taking the medication, concomitant medications, information on medical history including complications, whether the patient has visited another department, whether there are symptoms that are suspected to be side effects, food and drink intake (drug interactions), the patient's wishes regarding the use of generic drugs, the status of information provided in the notebook, key points of medication instructions, and the name of the insured pharmacist who provided the instructions.

In addition, it is desirable that the "medication status information" is configured to include, for example, information regarding the remaining amount of prescribed medication (including, for example, the amount of medication remaining if the patient accidentally forgets to take the medication or if the patient intentionally does not take the medication), timing information regarding visits to the hospital/clinic (for example, the period from the scheduled end date of the prescription (scheduled end date of medication) to the actual visit to the hospital/clinic (including, for example, a visit to the hospital/clinic earlier than scheduled or later than scheduled)), and patient complaints about medication (including subjective symptoms and complaints about physical condition, such as developing hives after taking a certain medication continuously, or feeling dizzy after taking a certain medication because it was too effective).
In the present invention, personal identification number (My Number) information or the insured card symbol and number of the health insurance to which the individual (user) is subscribed may be used as identification information for uniquely identifying an individual (user), and health and medical related information regarding the individual may be associated with this and stored and organized.

Furthermore, for example, "health and medical related information" may include PHR, etc. Alternatively, it may include various information acquired from a PHR system, etc., via an API. Here, PHR is an abbreviation of Personal Health Record, and refers to information related to an individual's health, medical care, and nursing care. The aim is for each individual to be able to receive excellent services suited to their own health condition by managing and utilizing their own information related to health, medical care, and nursing care chronologically throughout their lifetime.
For example, up until now, each citizen has kept a lot of health and medical information in various notebooks and paper documents. The media and places where these records are kept vary depending on the life stage at the time. For example, at the time of childbirth, it is the "maternal and child health notebook," at the time of schooling, it is the "results of school health checkups," and at the time of employment, it is the "results of regular health checkups." In addition, depending on physical condition, one may manage one's own health using a "disease management notebook" or a "medicine notebook," and as one becomes elderly, one's health information is recorded in a "nursing care prevention notebook" or a "family doctor cooperation notebook." There is a concept and mechanism for digitizing this existing "notebook culture" and centralizing it as data so that one can manage and utilize it oneself, and it is expected to become even more widespread in the future.

<Embodiment 1: Description of Configuration: Access Control Unit>
The "access control unit" 202 is configured to have a function for controlling the disclosure of the health care related information stored in the health care related information storage unit to a third party via a network. For example, as described below, it is desirable to configure it to have a function for analyzing IP packets in response to access from a third party terminal, a function for determining a destination IP address, a function for acquiring an access ID/user ID, a function for acquiring access subject/user attributes, and a function for performing access control based on these.

<Embodiment 1: Configuration Description: Incentive Management Unit>
The “incentive management unit” 203 is configured to have a function of providing incentives to individuals to encourage the disclosure of their health and medical care related information by referring to the provision history in the provision history storage unit described below regarding whether or not to allow the disclosure of the individual's health and medical care related information.
Actions "to provide an incentive" include actions such as actions to actually provide an incentive using electronic data, etc., and actions in which the actual act of providing an incentive is carried out separately, but which involve the execution of processing necessary to put into action the separate action.
10 is a diagram showing types of incentives, which are operations that a computer executes in order to provide points or electronic data such as information services as an incentive, and operations that a computer executes in order to provide points or electronic data such as information services as an incentive, and operations that a computer executes in order to provide medicines or supplements to publishers of health and medical information in the case of medicines/supplements being provided as incentives, for example. In other words, since the incentive management unit executes the operations "for...", it does not necessarily have to be the operation of providing the incentive itself.
FIG. 44 is a diagram showing an example of a user interface of the health and medical care related information management system according to the present invention.
In this case, the information is associated with the individual (user) who has accessed using the third-party terminal, i.e., the individual (user) who possesses the personal identification number (My Number) information "123456789012", and information indicating whether or not the individual has consented to providing an incentive for which health and medical care related information is stored and managed in a list format. If consent is given, the health and medical care related information is permitted to be disclosed to third parties, i.e., an incentive is granted. If consent is not given, the health and medical care related information is not disclosed to third parties, i.e., an incentive is not granted. It is desirable that the incentive information is always kept up to date by the incentive management unit periodically exchanging information with the health and medical care related information storage unit and the provision history storage unit described below.
For example, in the case of Fig. 44, whether or not an individual has given consent is stored and managed for each piece of health and medical care related information. Here, a "circle" in the "Agree/No Consent" column indicates the individual's intention to consent, and a "X" indicates the individual's intention not to consent.
It is preferable that the input of a "O" or "X" mark in the "Agree/Disagree" column be configured, for example, in a pull-down menu format on the terminal screen so that an individual (user) can select the "O" or "X" mark of their own volition.
Here, when a display item (e.g., "Regular medical checkup results") listed in the "Healthcare related information" column is clicked, touched, or tapped on the terminal screen, more detailed information may be displayed on a pop-up screen or another transition screen. Also, when a "o" or "x" mark in the "Agree/Disagree" column is clicked, touched, or tapped on the terminal screen, the date and time of consent or disagreement may be displayed on a pop-up screen. In particular, it is preferable that healthcare related information marked with a "o" mark in the "Agree/Disagree" column is stored and managed in the provision history storage unit described below. Note that healthcare related information with no mark in the "Agree/Disagree" column indicates that the individual (user) has not yet indicated his/her intention to consent or disagree.

FIG. 40 is a diagram showing the user interface of the health and medical care related information management system of the present invention.
In this case, when an individual enters their personal identification number (My Number) and password information into the appropriate fields, if matching information exists within the system, the incentive management department authenticates the individual and grants access.
In the case of this diagram, a method is described in which the user directly inputs the information, however, for example, if the user uses a smartphone, the smartphone's IC card reading function may be used to hold the My Number card over the smartphone to automatically read and input specific information such as personal identification number (My Number) information.
For example, if the user fails to enter the My Number information and/or password information three times in a row, the device may be locked and the user may go to a local government (such as a city, ward, town, or village office) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or a warning sound.
It is also desirable to store and manage in a manner that allows easy determination as to which health and medical care-related information an individual (user) has given consent or not.
Furthermore, the incentive provision process is preferably configured to determine the degree of incentive to be given for the health and medical care related information to which the user has given consent.

For example, in the example of FIG. 44, when the health and medical related information of one individual is provided to one destination, the My Number points are calculated and awarded based on a predetermined calculation rule to be 1000p (points). In addition, when the same health and medical related information is provided to two destinations, the My Number points are calculated and awarded based on a predetermined calculation rule so that they are doubled to 2000p (points). In addition, the calculation rule for the incentive may be weighted in consideration of the importance, urgency, rarity, usefulness, etc. of the health and medical related information, and a different incentive may be calculated and awarded for each health and medical related information. In particular, for example, malignant neoplasms (cancer), which are the leading cause of death among Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, which has a large number of patients, various infectious diseases defined in the Infectious Diseases Act, including COVID-19, and unique diseases with few cases worldwide, it is possible to set the calculation rule so that the incentive is more (higher) than for other diseases, considering that the disclosure of the health and medical related information to a third party can greatly contribute to the advancement of medicine.

In addition, "incentive" simply means "motivation, reward" and refers to intentionally giving a stimulus with the aim of causing some action. In the present invention, "incentive" may include, in addition to the above-mentioned My Number points, individual information services or general information services for information providers, provision of individual medicines or supplements, provision of books and other products, provision of passwords or IDs for providing information, provision of items that can be used on a network, provision of rights, such as provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on a network, provision of specific software (for example, a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash, etc.

The present invention can be applied to both cases, that is, incentives can be provided, in cases where the health and medical care-related information of an individual is already associated with and stored and managed with disclosure permission information indicating whether or not to permit disclosure to a third party, or where an individual (user) newly registers health and medical care-related information related to himself/herself in the health and medical care-related information storage unit and the disclosure permission information has not yet been associated and stored and managed. That is, in the health and medical care-related information management system, health and medical care-related information of an individual is not stored, but for example, when the health and medical care-related information of the individual is stored in a terminal owned by the individual and is uploaded to the present system, the incentive management unit can be configured to function so that if it is determined that the uploaded information can be disclosed as health and medical care-related information by a formal check, the incentive management unit will provide an incentive according to the result. In this case, the access control unit of the present system may be configured not to deny access to view the health and medical care-related information from a third party. However, it may be configured to partially deny or restrict access depending on the type or qualification of the third party. Uploading the health and medical care-related information of an individual to the present system may be a transfer, and the source of the transfer may not be the individual's terminal but a system that stores other health and medical care-related information. For example, health and medical information stored in a maternal and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical information server, a rehabilitation information server, etc. can be configured to be transferred to this system with the individual's consent. In this case, the incentive management unit can be configured to function when the individual's health and medical information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

Here, among the functions of the incentive management unit, the computer operation "to refer to and provide..." may include, but is not limited to, one or more of the following: a process of executing an operation to provide an incentive if it is confirmed that an incentive has not been provided in the past as a result of the reference; a process of executing an operation to provide an incentive if it is determined that a predetermined period (time) has passed since an incentive was provided in the past as a result of the reference; a process of executing an operation to provide an incentive if it is determined that a certain value has been reached in the disclosure rate of health and medical-related information; and a process of executing an operation to provide an incentive if something that was made public but not actually viewed by anyone is viewed by someone as a result of the reference (in this case, the incentive provision history and the health and medical-related information viewing history have the same meaning).

Note that "encouraging disclosure" is synonymous with "encouraging disclosure." In the present invention, "disclosure" refers to making all or part of health and medical related information, or processed or altered information thereof, available in some form (which may be anonymous) to others (not including oneself. However, in the case of a person who is assisted in the management of information by others, such as a child, an incompetent person, or a person receiving care, the person assisting in the management of information is not included in others), and may refer to either actual disclosure or a state in which information is not actually disclosed but is available for disclosure. Disclosure recipients may include, but are not limited to, others belonging to medical institutions, medical-related organizations, public institutions, pharmaceutical-related companies, etc.

<Embodiment 1: Description of Configuration: Provision History Storage Unit>
The 'provision history storage unit' 204 is configured to have a function of storing a provision history, which is a history of incentives provided to each individual.
The "provision history" refers to one or more of a history of whether an incentive was granted, a history clearly indicating the content of the incentive granted, a history clearly indicating the amount of the incentive granted, etc., and may be related to the time of grant, or may only clearly indicate that the incentive was granted. Therefore, since it may be a person who only clearly indicates that an incentive was granted, in a configuration in which an incentive is essentially granted for the provision of health and medical care-related information, the incentive provision history is the same as the history of disclosure of health and medical care-related information. Therefore, the provision of an incentive is equivalent to encouraging disclosure by referring to the disclosure history of health and medical care-related information, and the provision of an incentive is equivalent to referring to the provision history. Therefore, in the present invention, even when the incentive management unit refers to the disclosure history of health and medical care-related information, this may be included in the incentive management unit's reference to the provision history.

Various methods of providing incentives are possible. For example, when an individual gives permission to disclose all of his/her health and medical related information, all the health and medical related information associated with the individual identification information can be viewed by institutions with a certain authority without any limit on the number of times. It is possible to configure the system so that one incentive is provided only once in response to one act of permission to disclose, or to provide an incentive each time the permitted health and medical related information is viewed as a result of permission to disclose. In addition, since an individual's health and medical related information is usually divided into multiple items, it is also possible to adopt a configuration in which incentives are provided according to the items viewed or used. Furthermore, it is also possible to provide incentives for each item according to the number of times the information is viewed and used. Incidentally, the items in the health and medical related information can be divided into various categories, such as by onset of disease, by medical examination, by issuance of prescription, by type of disease, by generation of medical history information, and by acquisition of medication information. It is also possible to provide incentives according to the depth of disclosure of health and medical related information. The depth of disclosure here can be, for example, when only the name of the disease is disclosed, when the name, usage, and dosage of the medicine prescribed for that disease are also disclosed, when the results of taking the medicine (e.g., improvement of symptoms, onset of side effects, etc.) are also disclosed, and when the patient's feelings about the medicine are also disclosed. The deeper the disclosure, the more incentives or higher quality incentives can be provided.

Next, the incentive awarding process flow will be described.
The incentive information is electronically processed by the incentive management unit or an incentive output unit or an incentive processing unit linked thereto so that some kind of benefit is generated for the individual patient. Note that this electronic processing may be the granting of the incentive itself, or may be a preliminary process for granting the incentive.
The incentive is provided when an individual, such as a patient, gives permission to make public all or part of his/her health and medical information, or information that has been processed or altered. This trigger may be initiated by a device used by the individual, such as a smartphone, or may be initiated by a device of a medical institution, etc.
For example, in the case of a smartphone, an application is installed on the smartphone that allows the individual to view and, to a certain extent, edit their health and medical related information. The individual uses the application as an entry point to access the system of the present invention, enters the health and medical related information disclosure portal, and performs the operation of granting permission for the disclosure of their own health and medical related information.

Instead of an application, the system may be configured so that the same operation can be performed by accessing the web. This access must be strictly managed in terms of security, and it is preferable to configure the system so that permission to disclose can be granted using a one-time password, for example. In this case, the health and medical information management system may be a so-called PHR, or a system linked to the PHR. This system may be configured to independently manage the disclosure of health and medical information for all citizens, or multiple similar systems may be configured in parallel to manage the disclosure of health and medical information stored in the PHR.
In addition, when the trigger is pulled from a terminal of a medical institution, it is the case that a medical professional who is interviewing an individual who is a patient pulls the trigger with the patient's permission. In that case, it is preferable to borrow a health insurance card, a personal identification number (My Number) card, or an equivalent proof from the patient and configure it so that the trigger is pulled using the borrowed proof. The medical institution referred to here may include a nursing home, a pharmacy (including a dispensing pharmacy), and other welfare facilities. It may also be a medical institution accessed over the Internet. Furthermore, it may be configured so that a designated management server of a pharmaceutical company or a terminal used by a public research institution can pull the trigger. Of course, authentication of the individual who is the patient is a prerequisite.

FIG. 6 is a diagram showing an example of the provision history storage unit of the health and medical care related information management system in this embodiment.
As shown in this figure, it can be seen that the provision history of Mr. X, whose personal identification number (My Number) information is "123456789012", and Mr. Y, whose personal identification number (My Number) information is "456789012345", is stored and managed separately for each individual.
For example, for Mr. X, whose personal identification number (My Number) information is "123456789012", it is shown that the history of providing the incentive "1000 My Number Points" to the recipient "Dr. Suzuki (Hospital B)" on the date and time of provision "2023/04/01" for the health and medical related information "Regular Health Check Results (Hospital A)" with ID "0001" is retained and managed.
Similarly, for other health and medical care related information, the history of incentives provided to each individual is maintained and managed.

<Embodiment 1: Healthcare-related information management system: hardware configuration>
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 4 is a diagram showing the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment is equipped with a "CPU (Central Processing Unit)" 401 that performs various calculation processes, and a "main memory" 402. It also has a "non-volatile memory" 403 that holds predetermined information, and a "network I/F (interface)" 404 that transmits and receives information to and from multiple third-party terminals 406 and an administrator terminal 407. These are then interconnected by a data communication path such as a "bus" 405, and transmit and receive information and perform processing.

The "main memory" reads out programs that perform various processes so that the "CPU" can execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can identify and access these addresses to exchange data and perform processing. In this embodiment, the programs stored in the "main memory" include a health and medical care related information accumulation program, an access control program, an incentive management program, and a provision history retention program. In addition, the "main memory" and "non-volatile memory" store health and medical care related information, incentive management information, provision history information, and the like.

The "CPU" executes a health and medical information accumulation program stored in the "main memory" to store health and medical information about an individual, such as electronic medical record information, various test information, prescription information, medical history information, medication status information, and vital information (e.g., body temperature, blood pressure, heart rate, etc.), in the "main memory" or "non-volatile memory" via the "network I/F". It also executes an access control program stored in the "main memory" to control access to the health and medical information about the individual. It also executes an incentive management program stored in the "main memory" to provide and manage incentives to individuals to encourage the disclosure of health and medical information by referring to provision history information regarding whether or not to allow the disclosure of the health and medical information about the individual. It also executes a provision history retention program stored in the "main memory" to store provision history information, which is a history of incentive provision, in the "main memory" or "non-volatile memory".

<Embodiment 1: Healthcare-related information management system: processing flow>
5 is a diagram showing a process flow when the health and medical care related information management system of this embodiment is used. As shown in the diagram, the processing method comprises a health and medical care related information accumulation step S501, an access control step S502, an incentive management step S503, and a provision history storage step S504.

The "healthcare-related information accumulation step" S501 is a stage in which healthcare-related information relating to an individual, such as electronic medical record information, various examination information, prescription information, medication history information, medication status information, and vital information (e.g., body temperature, blood pressure, heart rate, etc.), is accumulated.

The "access control step" S502 is a step for controlling access to the health and medical care related information about individuals stored in the health and medical care related information storage step.

The "incentive management step" S503 is a step in which incentives are provided to individuals to encourage the disclosure of health and medical care-related information by referring to the provision history stored in the provision history storage step described below regarding whether or not to allow the disclosure of health and medical care-related information about the individual.

The "provision history storage step" S504 is a step in which a provision history, which is a history of incentives provided to each individual, is stored.

<Summary>
As described above, the present invention can provide a health and medical care related information management system that provides incentives to individuals to encourage the disclosure of health and medical care related information by referring to a provision history, which is a history of incentives provided to each individual, when deciding whether or not to disclose health and medical care related information about an individual.
Furthermore, the present invention provides incentives to individuals, which allows them to give permission for the disclosure of their health and medical information to third parties, thereby increasing the opportunities for individuals to disclose their health and medical information to third parties, thereby reducing medical expenses across the country and improving the health of the entire population, as well as reducing the time and money spent by research institutions, pharmaceutical companies, and others on drug discovery, and ultimately contributing to the advancement of medicine.
Here, "drug discovery" refers to the process from compounds and chemical substances (also called seeds) that are the basis of pharmaceuticals to products that are sold. In addition, the following steps (1) to (5) are essential for compounds and chemical substances to become pharmaceuticals and be sold.
(1) Select candidate drug discovery targets (compounds and chemical substances). (2) Screen their effects to select candidate substances that will serve as the basis for pharmaceuticals. There are various types of screening, including biotechnology techniques, combinatorial chemistry (techniques for creating compounds by combining a large number of compounds), and highly efficient screening that utilizes AI robot technology.
(3) Animal testing: Animals or cultured cells are used to thoroughly investigate and confirm safety and efficacy. Drugs whose safety and efficacy have been confirmed at this stage are called "investigational drugs."
(4) Clinical Trials: The investigational drug is actually administered to humans to thoroughly examine its effectiveness and safety and to determine whether it is useful for actual treatment.
(5) Application for Approval and Review Once a drug has passed all of the above tests (1) to (4), it is submitted to the Ministry of Health, Labor and Welfare. It is then examined by the Pharmaceuticals and Medical Devices Agency, and approval by the Minister of Health, Labor and Welfare is awaited. Only after approval is a drug available for sale as a product.
Generally, it is said that drug discovery takes about 10 to 18 years, and the probability that a compound or chemical substance will become a new drug is about 1 in 10,000. It is also said that the total cost of successful drug discovery is close to 20 billion yen.

<Embodiment 2 (corresponding mainly to claims 2, 17, and 32)>
<Overview of Second Embodiment>
This embodiment is characterized in that it has an incentive type information storage unit that stores incentive type information, which is information indicating the types of multiple incentives, and the incentive management unit selects and provides an incentive to an individual according to the incentive provision history based on the incentive type information stored in the incentive type information storage unit. Hereinafter, explanations of functions, hardware configurations, and process flows that overlap with those of the first embodiment will be omitted as appropriate.

<Configuration of the Second Embodiment: Incentive Type Information Storage Unit>
FIG. 7 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.
The 'incentive type information storage unit' 701 is configured to have a function of storing incentive type information, which is information indicating the types of a plurality of incentives.
FIG. 10 is a diagram showing an example of the incentive type information storage unit of the health and medical care related information management system in this embodiment.
As shown in this figure, incentive type information and specific incentives related to the incentive type information are stored and managed in association with each other.
For example, when the incentive type information is "(A) points", it can be seen that specific examples of incentives that are stored and managed include "(a) My Number points, (b) transportation electronic money (Suica (registered trademark), PASMO (registered trademark), etc.), (c) distribution electronic money (WAON (registered trademark), nanaco (registered trademark), etc.)" For other incentive type information, specific examples of incentives are similarly listed and stored and managed.
When an individual (user) provides his/her own health and medical care related information to an appropriate recipient, the individual can select one of the incentives based on this incentive type information.

<Description of the configuration of the second embodiment: Incentive management unit - Characteristic functions of the second embodiment>
The selection made by the incentive management unit can be of two types: the selection is made automatically by a computer (configured by a program) constituting the incentive management unit, and the selection is made by the incentive management unit based on the selection action of the provider of the health and medical care-related information (usually the owner of the health and medical care-related information, but in cases where the person is under some kind of management, such as a child, it may be the administrator). In the latter case, the computer accepts a person's selection action and executes a selection based on the selection action. In the case where the computer automatically makes a selection, for example, when providing information on the results of taking medicine owned by the owner of the health and medical care-related information to a pharmaceutical manufacturer, it is possible to configure the incentive management unit to automatically select an incentive provided by the pharmaceutical manufacturer. Also, if the provider of the health and medical care-related information lives in Aomori Prefecture, it is possible to automatically select an incentive that is valid only in Aomori Prefecture. In this way, the automatic selection can be configured to be made automatically based on the content of the provided health and medical care-related information and attribute information of the owner of the health and medical care-related information.

In both the case of automatic selection and the case of selection based on the selection made by the owner (provider) of the health and medical care related information, the selection rule is utilized so that the incentive management unit makes the selection. The selection rule may be configured to be stored in a selection rule storage means provided in the incentive management unit, or may be configured to be selected using a selection rule stored outside the incentive management unit or outside the present system. The selection rule may be configured to be appropriately optimized (not necessarily optimized, and the simple meaning of being changed is also included) according to the provision history of the owner (provider) of the health and medical care related information and the disclosure history of the health and medical care related information. For example, the selection rule may be configured to be changed by an editing artificial intelligence or the like. A selection rule editing unit may be provided so that the rule can be edited by the operation of an administrator of the present system or the like.
The incentive management unit is capable of selecting and providing an incentive to an individual based on the incentive type information stored in the incentive type information storage unit in accordance with the provision history described above. In other words, the incentive management unit is configured to select and provide incentive type information.
FIG. 11 is a diagram showing an example of the incentive management unit of the health and medical care related information management system according to this embodiment.
As shown in this figure, a specific incentive can be selected and provided by an individual (user) selecting the incentive type information or by the incentive management unit automatically selecting it. For example, in the case of Mr. Y, in addition to "points (My Number points and PASMO (registered trademark)"), it can be seen that "software/apps" and "cash" were selected and provided.

In addition, when the incentive management unit selects and provides an incentive based on the incentive type information, the process leading up to the specific use of the incentive is expected to be as follows:

For example, if "points" are selected as the incentive, the following cases may occur:
First, when the incentive is "My Number Points", the incentive management unit in this system sends information on personal identification information (e.g., personal number (My Number)) and points granted to the management server owned by the organization that manages and operates the My Number Portal Site to the trigger. In the server, the points associated with the personal identification information of the My Number Points associated with the personal identification information are incremented by the amount of points granted. In other words, the management server owned by the organization that manages and operates the My Number Portal Site grants My Number Points to an individual corresponding to the personal identification information based on this trigger information, and notifies the terminal (e.g., smartphone) used by the individual of information that the My Number Points have been incremented, thereby enabling the individual to use the My Number Points including the increment. Then, by exchanging these My Number Points for points of other transportation/distribution electronic money, the individual can purchase products he or she desires or pay for various services he or she desires.

Secondly, if the incentive is a "prepaid card," a prepaid card (for example, a card with an amount set according to the purchase price and identification information for identifying the card) purchased at a convenience store or the like can be used to purchase products on AMAZON (registered trademark) or the like.

For example, when "Medicine/Supplements" is selected as an incentive, the incentive management unit in the system sends information including personal identification information and its attribute information (e.g., personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information for identifying the product desired to be purchased (e.g., product name such as "Supplement ABC", manufacturer/seller information, price information, etc.) via the network to a management server managed and operated by a purchasing site such as Amazon (registered trademark), which triggers the process. Then, if the specified product is in stock on the Amazon (registered trademark) management server, a delivery company will deliver the product to the customer's home.

For example, when "provision of rights" is selected as an incentive, the incentive management unit in this system sends personal identification information and its attribute information (e.g., personal identification number (My Number) information, name, postal code, address, telephone number, credit card number, etc.) as well as information for identifying the desired rights (e.g., an identification number indicating an admission ticket to Disneyland (registered trademark)) via a network to a management server owned by an organization that manages and operates the provision of rights, which triggers the trigger. In response to this trigger, the management server sends a QR code (registered trademark) that serves as an admission ticket to Disneyland (registered trademark) to the smartphone used by the individual. The individual who has saved the QR code (registered trademark) on their smartphone then goes to Disneyland (registered trademark), which is the rights execution organization, and holds the QR code (registered trademark) over a reader at the entrance reception desk. If there are no problems, the individual can enter Disneyland (registered trademark) and enjoy various attractions and meals.

<Embodiment 2: Healthcare-related information management system: hardware configuration>
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 8 is a diagram showing the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment is equipped with a "CPU (Central Processing Unit)" 801 that performs various calculation processes, and a "main memory" 802. It also has a "non-volatile memory" 803 that holds predetermined information, and a "network I/F (interface)" 804 that transmits and receives information to and from multiple third-party terminals 806 and an administrator terminal 807. These are then interconnected by a data communication path such as a "bus" 805, and transmit and receive information and perform processing.

The "main memory" reads out programs that perform various processes so that the "CPU" can execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is an incentive type information retention program. In addition, incentive type information, incentive management information, etc. are stored in the "main memory" and "non-volatile memory."

The "CPU" executes the incentive type information retention program stored in the "main memory" to retain incentive type information, which is information indicating the types of multiple incentives, and stores the incentive type information and related incentive management information in the "main memory" and/or the "non-volatile memory."

<Embodiment 2: Healthcare-related information management system: processing flow>
9 is a diagram showing a process flow when the health care related information management system according to this embodiment is used. As shown in the diagram, this is a processing method including an access authentication process step S901.

The "incentive type information storage step" S901 is a step in which incentive type information, which is information indicating the types of multiple incentives, is stored.

<Summary>
As described above, the present invention has an incentive type information holding unit that holds incentive type information, which is information indicating multiple types of incentives, and the incentive management unit can select and provide an incentive to an individual based on the incentive type information held in the incentive type information holding unit, depending on the provision history.

<Embodiment 3 (corresponding mainly to claims 3, 18, and 33)>
<Overview of Third Embodiment>
This embodiment is characterized in that it has a termination request receiving unit that receives a termination request, which is a request to stop or terminate the disclosure of already disclosed health care related information from an individual who stores health care related information in the health care related information storage unit, a termination condition holding unit that holds a termination condition that is a condition for determining whether or not to terminate the disclosure based on information about the individual who made the termination request when the termination request is received, a judgment rule holding unit that holds a judgment rule that is a rule for determining whether or not to terminate the disclosure of the health care related information based on information about the individual who made the termination request and the held termination condition, a termination judgment unit that determines whether or not to terminate the disclosure based on information about the individual, the held termination condition, and the held judgment rule when the termination request is received, and a termination control unit that controls the access control unit to terminate the disclosure of the health care related information of the individual when the judgment result of the termination judgment unit is that the disclosure should be terminated. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of the first and second embodiments will be omitted as appropriate.

<Embodiment 3: Configuration Description: Termination Request Reception Unit>
FIG. 12 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.
The 'termination request receiving unit' 1201 is configured to have a function of receiving a termination request, which is a request to stop or terminate the publication of health and medical care related information that has already been made public, from an individual who has stored health and medical care related information in the health and medical care related information storage unit.
For example, on the login screen of the health and medical related information management system shown in Figure 40, an individual (user) uses a third-party terminal to input their own personal identification number (My Number) information and password information, and if there is matching information on the system side, identity authentication is performed, and by accessing the incentive management section and provision history storage section, the individual can view whether their own health and medical related information has been made public, to whom it has been provided, the type of incentive, the specific incentive, etc.
Furthermore, for example, in the viewing screen shown in Figure 44, it is desirable to configure the system so that a termination request can be sent from a third-party terminal, requesting the system to suspend or terminate the publication of desired health and medical care related information from among already published health and medical care related information, based on an individual's wishes, and the system can accept the termination request.

<Embodiment 3: Configuration Description: Termination Condition Storage Unit>
The “termination condition storage unit” 1202 is configured to have the function of storing the termination conditions, which are conditions for determining whether or not termination is appropriate based on information about the individual who made the termination request when the termination request is accepted.
For example, the termination conditions may be as follows: However, the termination conditions are not necessarily limited to these.
(1) When an illness is cured/fully cured/in remission: If an individual (user) is deemed to have been “cured” (when the illness or injury is completely cured. In other words, when the individual has returned to the state before the illness or injury), or “recovered” (when treatment for the illness or injury is no longer necessary and the individual is able to live their daily life without problems. However, this does not necessarily mean that the individual will return to the state before the illness or injury), or “in remission” (when the individual has temporarily and continuously recovered from the illness or injury. This term is often used for illnesses that may recur, such as cancer and leukemia. This term refers to a state in which symptoms are suppressed, but in which continued treatment and regular examinations are required), the disclosure of the individual’s health and medical information related to this illness may be suspended or terminated, at the individual’s will.
(2) If an individual (user) moves (relocates) – If an individual (user) moves (relocates) due to, for example, a change of job or transfer, and their primary doctor (family doctor) who has been treating their illness or injury changes, they may, at their own will, suspend or terminate the disclosure of their health and medical information.
(3) If your primary care physician (family doctor) changes. If your primary care physician (family doctor) who has been treating you for your illness or injury changes due to a transfer or reassignment of hospitals or other medical institutions, for example because you are transferred to another hospital, the disclosure of your personal health and medical information may be suspended or terminated at your own will.

<Embodiment 3: Description of Configuration: Judgment Rule Storage Unit>
The “judgment rule storage unit” 1203 is configured to have the function of storing judgment rules, which are rules for determining whether or not to terminate the disclosure of health and medical care related information based on information about the individual who requested termination and the stored termination conditions.
For example, it is desirable to formulate a judgment rule for judging whether or not to terminate the disclosure of health and medical care-related information based on information obtained from the electronic medical record of this system that indicates that an individual's (user's) illness has been cured by the treatment and medication of the attending physician (family doctor) and the termination condition stored in the termination condition storage unit described above, for example, the above-mentioned condition (1). In this case, since it is determined that the illness has been cured, it is expected that there will be little significance or need for disclosing the health and medical care-related information to third parties, and therefore it is preferable to terminate the disclosure as a judgment rule.
Furthermore, when the attending physician (family doctor) at the medical institution (hospital, clinic, etc.) that treated an individual (user) changes, there is no longer any point in disclosing health and medical information to the original doctor, so it is preferable to terminate disclosure as a judgment rule. However, since disclosing the individual's health and medical information to the new attending physician (family doctor) is essential for formulating treatment and medication policies, it is preferable to continue disclosing the information rather than terminating it as a judgment rule.

<Embodiment 3: Configuration of End Determination Unit>
The “termination judgment unit” 1203 is configured to have the function of judging whether or not to terminate when a termination request is accepted, based on information about the individual, the retained termination conditions, and the retained judgment rules.
For example, based on electronic medical record information indicating that an individual's illness or injury has been cured, the termination condition stored in the termination condition storage unit described above (in this case, condition (1) above), and the judgment rule described above, it can be determined that the disclosure of this individual's health and medical related information should be terminated.
Furthermore, for example, if it is considered that the individual is highly likely to relapse due to their constitution based on electronic medical record information indicating that an individual's illness (e.g., cancer, etc.) has gone into remission, the termination condition stored in the termination condition storage unit described above (in this case, condition (1) above), and the judgment rule described above, it can be determined that the disclosure of this individual's health and medical information should not be terminated.
Furthermore, for example, it can be determined that the disclosure of this individual's health and medical related information should be terminated based on information in the electronic medical record indicating that the individual's primary physician (family doctor) who has been treating his or her illness or injury has been changed for various reasons, the termination conditions stored in the termination condition storage unit described above (in this case, condition (2) or condition (3) above), and the judgment rules described above.

<Embodiment 3: Configuration of Termination Control Unit>
The “termination control unit” 1204 is configured to have the function of controlling the access control unit to terminate the disclosure of the individual's health and medical care related information when the termination judgment unit judges that the disclosure should be terminated.
For example, if the judgment result of the above-mentioned termination judgment unit is that the disclosure should be terminated, that is, if the judgment result is that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's illness or injury has been cured and the termination condition stored in the above-mentioned termination condition storage unit (in this case, the above condition (1)), the termination control unit can send a control signal to the access control unit, causing the access control unit to control the disclosure of the individual's health and medical related information to be terminated.
Also, for example, if the judgment result of the above-mentioned termination judgment unit is that the disclosure should be terminated, that is, if the judgment result is that the disclosure of the individual's health and medical related information should be terminated based on the information in the electronic medical record indicating that the individual's primary physician (family doctor) who has been treating the individual's illness or injury has been changed for various reasons and the termination condition stored in the above-mentioned termination condition storage unit (in this case, condition (2) or condition (3) above), the termination control unit can send a control signal indicating the judgment result to the access control unit, and control the access control unit to terminate the disclosure of the individual's health and medical related information.

In addition, in relation to the above-mentioned "judgment rule storage unit," a "judgment rule change unit" may be further provided that changes the judgment rule as appropriate, for example, based on the number or percentage of times that an individual's health and medical information has been permitted to be made public, or the number or percentage of times that an incentive has been provided. In this case, the judgment rule may be changed automatically within the system, or may be changed manually from a terminal used by the individual or the administrator of the system.

Third embodiment: Healthcare-related information management system: hardware configuration
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 13 is a diagram showing the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment is equipped with a "CPU (Central Processing Unit)" 1301 that performs various calculation processes, and a "main memory" 1302. It also has a "non-volatile memory" 1303 that holds predetermined information, and a "network I/F (interface)" 1304 that transmits and receives information to and from multiple third-party terminals 1306 and an administrator terminal 1307. These are then interconnected by a data communication path such as a "bus" 1305, and transmit and receive information and perform processing.

The "main memory" reads out programs that perform various processes to be executed by the "CPU", and also provides a work area for these programs. In addition, multiple addresses are assigned to each of the "main memory" and "non-volatile memory", and the programs executed by the "CPU" can exchange data and perform processing by identifying and accessing these addresses. In this embodiment, the programs stored in the "main memory" include a termination request reception program, a termination condition storage program, a judgment rule storage program, a termination judgment program, and a termination control program. In addition, the "main memory" and "non-volatile memory" store termination request information, termination condition information, judgment rules, termination judgment information, termination control information, and the like.

The "CPU" executes a termination request receiving program stored in the "main memory" to receive a termination request, which is a request to suspend or terminate the disclosure of an individual's (user's) already disclosed health and medical-related information, sent from a third-party terminal via the "network I/F", and stores the termination request information in the "main memory" and/or "non-volatile memory". The "CPU" also executes a termination condition holding program stored in the "main memory" to hold a termination condition, which is a condition for determining whether or not to terminate based on information about the individual who made the termination request, when a termination request is accepted, and stores the termination condition information in the "main memory" and/or "non-volatile memory". The "CPU" also executes a judgment rule holding program stored in the "main memory" to hold judgment rules, which are rules for determining whether or not to terminate the disclosure of health and medical-related information based on information about the individual who made the termination request and the held termination condition, and stores these in the "main memory" and "non-volatile memory". The "CPU" also executes a termination judgment program stored in the "main memory", and when a termination request is received, it judges whether to terminate based on information about the individual and the stored termination conditions, and stores the termination judgment information in the "main memory" or "non-volatile memory". The "CPU" also executes a termination control program stored in the "main memory", and when the termination judgment program judges that termination should be performed, it controls the access control unit to terminate the disclosure of the individual's health and medical care related information, and stores the termination control information in the "main memory" or "non-volatile memory".

<Embodiment 3: Healthcare-related information management system: processing flow>
14 is a diagram showing a process flow when the health care related information management system of this embodiment is used. As shown in the figure, the processing method comprises a termination request receiving step S1401, a termination condition storing step S1402, a judgment rule storing step S1403, a termination judgment step S1404, and a termination control step S1405.

The "termination request reception step" S1401 is a stage in which a termination request is received from a third-party terminal, which is a request to stop or terminate the publication of health and medical care-related information that has already been made public from an individual (user).

The "termination condition retention step" S1402 is a step in which, when a termination request is accepted, the termination conditions are retained to determine whether or not termination is permitted based on information about the individual who made the termination request.

The "judgment rule storage step" S1403 is a step in which judgment rules are stored, which are rules for determining whether or not to terminate the disclosure of health and medical care-related information based on information about the individual who made the termination request and the stored termination conditions.

The "termination decision step" S1404 is a step in which, when a termination request is accepted, a decision is made as to whether to terminate based on information about the individual, the stored termination conditions, and the stored decision rules.

The "termination control step" S1405 is a step in which, if the determination result in the termination determination step S1404 is that the process should be terminated, the access control unit controls the process to terminate the disclosure of the individual's health and medical care-related information.

<Summary>
As described above, in the present invention, an individual (user) can voluntarily suspend or terminate the publication of health and medical care-related information that has already been made public.

<Fourth embodiment (corresponding mainly to claims 4, 19, and 34)>
<Outline of Fourth Embodiment>
This embodiment is characterized in that it includes an access authentication processing unit that performs authentication for accessing the incentive management unit in addition to the components of embodiments 1 to 3. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with those of embodiments 1 to 3 will be omitted as appropriate.

<Fourth embodiment: Description of configuration: access authentication processing unit>
15 is a diagram showing the functional configuration of the health and medical care related information management system. As shown in this figure, an "access authentication processing unit" 1501 is configured to have a function of authenticating individuals for accessing the incentive management unit.
For example, Fig. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention. Here, it is assumed that a third party terminal uses a web browser to access the health and medical care related information management system.
On this login screen, a user (individual) enters their personal identification number (My Number) and password information into the appropriate fields, and if matching information exists within the system, the user is authenticated and access is granted.
The example in the figure explains a format in which the user directly inputs information, but for example, if the user uses a smartphone, the smartphone's IC card reading function can be used to hold the My Number card over the smartphone to automatically read and input specified information such as personal identification number (My Number) information.
For example, if the user fails to enter personal number (My Number) information and/or password information three times in a row, the device may be locked and the user may go to a local government (such as a city, ward, town, or village office) to have the lock removed. Alternatively, the device may be temporarily locked, and a warning message such as "Please try again the next day" may be displayed on the terminal, or the user may be notified by voice or a warning sound.

<Fourth embodiment: Healthcare-related information management system: hardware configuration>
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 16 is a diagram showing the hardware configuration of the health and medical information management system in this embodiment. As shown in this figure, the health and medical information management system in this embodiment includes a "CPU (Central Processing Unit)" 1601 that performs various calculation processes, and a "main memory" 1602. It also includes a "non-volatile memory" 1603 that holds predetermined information, and a "network I/F (interface)" 1604 that transmits and receives information to and from multiple third-party terminals 1606 and an administrator terminal 1607. These are then interconnected by data communication paths such as a "bus" 1605, and transmit and receive information and perform processing.

The "main memory" reads out programs that perform various processes so that the "CPU" can execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is an access authentication processing program. In addition, the "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, etc.

The "CPU" executes the access authentication processing program stored in the "main memory", accepts input of personal number (My Number) information and password information sent from a third-party terminal via the "network I/F", and performs authentication to determine whether matching information exists on the system side, while storing the input personal number (My Number) information and password information in the "main memory" and/or "non-volatile memory".

<Fourth embodiment: Healthcare-related information management system: processing flow>
17 is a diagram showing a process flow when using the health care related information management system in this embodiment. As shown in the diagram, this is a processing method including an access authentication process step S1701.

The "access authentication processing step" S1701 is the stage where the input of personal identification number (My Number) information and password information about an individual (user) sent from a third-party terminal is accepted, and authentication is performed to allow access to the incentive management unit.

<Summary>
As described above, in the present invention, by first performing access authentication on the login screen of the health and medical care related information management system, access to incentive related information can be restricted to the individual (user) himself/herself.

<Fifth embodiment (corresponding mainly to claims 5, 20, and 35)>
<Outline of Fifth Embodiment>
The present embodiment is characterized in that, in addition to the first to fourth embodiments, a consent information acquisition unit is provided that acquires consent information, which is information indicating consent to receiving an incentive from the incentive management unit. Hereinafter, descriptions of functions, hardware configurations, and processing flows that overlap with the first to fourth embodiments will be omitted as appropriate.

<Description of configuration of embodiment 5: consent information acquisition unit>
18 is a diagram showing the functional configuration of the health care related information management system of this embodiment. As shown in this figure, an "agreement information acquisition unit" 1802 is configured to have a function of acquiring consent information, which is information indicating consent to accepting an incentive from the incentive management unit, after authentication by the access authentication processing unit 1801.
FIG. 41 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, the individual (user) enters his/her personal number (My Number) information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, the screen moves to the function selection screen. Then, by clicking, touching or tapping the OK button corresponding to "(A) Consent Processing", the screen transitions to a screen for obtaining the individual's (user's) consent.
FIG. 42 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, it is preferable to prepare a user interface such as a pull-down menu in the "Agree/Disagree" field, and by clicking, touching or tapping there, for example, either a "O" mark or an "X" mark is entered to accept the individual's (user's) intention to agree or disagree with the incentive. By clicking, touching or tapping the OK button, the entered consent information is sent to the incentive management section and stored and managed. It should be noted that by clicking, touching or tapping the Exit button, the user can return to the function selection screen of FIG. 41.

FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, an individual (user) enters their own personal identification number (My Number) information and password information into the appropriate fields, and after matching information is found in the system and access authentication is performed, they are taken to a function selection screen where they can click, touch or tap the OK button corresponding to "(B) Viewing process" to transition to a screen where they can view the relationship between the health and medical related information about the individual (user) and the incentives granted.
FIG. 43 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding incentives provided in an easy-to-understand format such as a list. This allows the user to see at a glance which health and medical care-related information the incentive provided at the time of viewing is associated with. By clicking, touching, or tapping the Exit button, the user can return to the function selection screen of FIG. 41.
FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, the individual (user) enters their own My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, the screen transitions to a function selection screen. Then, by clicking, touching or tapping the OK button corresponding to "(C) Maintenance Processing", the screen transitions to a screen that displays health and medical related information concerning the individual (user) that has not yet been consented to/not consented to, as well as health and medical related information for which consent/not consent has already been given.
FIG. 44 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding consent or disagreement state in an easy-to-understand format such as a list. As a result, for health and medical care-related information that has not yet been consented/disagreement at the time of viewing, an individual (user) can prepare a user interface in the form of a pull-down menu, enter a "o" mark in the "agree/disagree" column, and click, touch, or tap the OK button to grant an incentive. On the other hand, for health and medical care-related information for which a "o" mark or an "x" mark has already been entered in the "agree/disagree" column, the individual (user) can review the information as appropriate and necessary, for example, by changing consent to disagree, or disagree to consent, and clicking, touching, or tapping the OK button to perform update processing. It is to be noted that the function selection screen of FIG. 41 can be returned to by clicking, touching, or tapping the end button.

Fifth embodiment: Healthcare-related information management system: hardware configuration
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 19 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 1901 that performs various calculation processes, and a "main memory" 1902. It also comprises a "non-volatile memory" 1903 that holds predetermined information, and a "network I/F (interface)" 1904 that transmits and receives information to and from multiple third party terminals 1906 and an administrator terminal 1907. These are then interconnected by a data communication path such as a "bus" 1905, and transmit and receive information and perform processing.

The "main memory" reads out programs that perform various processes so that the "CPU" can execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" are an access authentication processing program and a consent information acquisition program. In addition, the "main memory" and "non-volatile memory" store My Number information, password information, consent information, etc.

The "CPU" executes the access authentication processing program stored in the "main memory", accepts input of personal identification number (My Number) information and password information sent from a third-party terminal via the "network I/F", authenticates whether matching information exists, and stores the personal identification number (My Number) information and password information in the "main memory" or "non-volatile memory".
The "CPU" also executes the consent information acquisition program stored in the "main memory" to acquire consent information indicating the individual's (user's) intention as to whether or not to disclose each piece of health and medical related information sent from the third-party terminal via the "network I/F." The consent information is also stored in the "main memory" and/or the "non-volatile memory."

<Fifth embodiment: Healthcare-related information management system: processing flow>
20 is a diagram showing a process flow when using the health care related information management system in this embodiment. As shown in the diagram, the processing method includes an access authentication processing step S2001 and a consent information acquisition step S2002.

The "access authentication processing step" S2001 is the stage where the input of personal identification number (My Number) information and password information about an individual (user) sent from a third-party terminal is accepted, and authentication is performed to allow access to the incentive management unit.

The "consent information acquisition step" S2002 is a stage in which, after authentication in the access authentication processing step, consent information is acquired, which is information indicating consent to accepting the incentive provided by the incentive management unit.

<Summary>
As described above, in the present invention, consent information can be obtained which is information indicating consent to receiving an incentive for health and medical care related information relating to an individual (user).

<Sixth embodiment (corresponding mainly to claims 6, 21, and 36)>
<Overview of Sixth Embodiment>
This embodiment is characterized in that, in addition to the components of embodiments 1 to 5, an incentive provision processing unit is provided that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition unit. Hereinafter, descriptions of functions, hardware configurations, and process flows that overlap with those of embodiments 1 to 5 will be omitted as appropriate.

<Configuration of the Sixth Embodiment: Incentive Providing Processing Unit>
21 is a diagram showing the functional configuration of the health and medical care related information management system. As shown in this figure, an "incentive processing unit" 2103 is configured to have a function of performing incentive provision processing for providing an incentive when consent information is acquired by the consent information acquisition unit.
FIG. 44 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, for the health and medical related information for which a "◯" mark indicating consent to disclosure is attached in the "Agree/Disagree" column for the individual (user)'s permission to disclose, an incentive to be automatically granted is calculated and granted based on a predetermined calculation rule. Here, for the health and medical related information of one individual, 1000 My Number points (points) are calculated and granted to one recipient based on a predetermined calculation rule. In addition, the calculation rule for the incentive may be processed so that a weighting process is performed taking into consideration the importance, urgency, rarity, usefulness, etc. of the health and medical related information, and a different incentive is calculated and granted for each health and medical related information. In particular, for malignant neoplasms (cancer), which are the leading cause of death in Japanese people, hypertension, diabetes, dyslipidemia, periodontal disease or eye disease, which have a large number of patients, various infectious diseases defined in the "Infectious Diseases Act" including COVID-19, and unique diseases with few cases worldwide, it is possible to set the calculation rule so that the incentive is more (higher) than for other diseases, considering that the disclosure of the health and medical related information to a third party can greatly contribute to medical progress.

In addition, "incentive" simply means "motivation, reward," and refers to intentionally providing stimulation with the aim of causing some kind of action.
In the present invention, "incentives" may include, in addition to the above-mentioned My Number points, individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books and other products, provision of passwords or IDs for providing information, provision of items that can be used on a network, provision of rights, for example, provision of the right to receive a medical examination, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on a network, provision of specific software (for example, a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons or cash, etc.
The present invention can be applied to both cases where the health and medical care-related information of an individual is already associated with and stored/managed with disclosure permission/denial information indicating whether or not disclosure to a third party is permitted, and where an individual (user) newly registers health and medical care-related information related to himself/herself in the health and medical care-related information storage unit, but the disclosure permission/denial information has not yet been associated and stored/managed. That is, the health and medical care-related information of an individual is not stored in the health and medical care-related information management system, but, for example, when the health and medical care-related information of the individual is stored in a terminal owned by the individual and is uploaded to the present system, the above-mentioned incentive function unit can be configured to function so that, if it is determined that the uploaded information is publicly available as health and medical care-related information by a formal check, an incentive is given according to the result. In this case, the access control unit of the present system may be configured not to deny access to view the health and medical care-related information from a third party. However, it may be configured to partially deny or restrict access according to the type or qualification of the third party. Uploading the health and medical care-related information of an individual to the present system may be a transfer, and the transfer source may not be the individual's terminal, but may be a system that stores other health and medical care-related information. For example, the system can be configured so that health and medical care-related information stored in a maternal and child health handbook information server, a PHR (Personal Health Record), a nursing care information server, a dental medical care information server, a rehabilitation information server, etc., is transferred to this system with the individual's consent. In this case, the system can be configured so that the incentive function unit described above starts functioning when the individual's health and medical care-related information is uploaded from the maternal and child health handbook information server, etc., and a formal check is completed.

FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, the individual (user) enters their own My Number information and password information into the appropriate fields, and after matching information is found in the system and access authentication is performed, they will be redirected to a function selection screen and will be able to click, touch or tap the OK button corresponding to "(B) Viewing process" to transition to a screen where they can view the relationship between the individual's (user's) health and medical related information and the incentives granted.
FIG. 43 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding incentives provided in an easy-to-understand format such as a list. This allows the user to see at a glance which health and medical care-related information the incentive provided at the time of viewing is associated with. By clicking, touching, or tapping the Exit button, the user can return to the function selection screen of FIG. 41.

FIG. 40 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, the individual (user) enters their own My Number information and password information in the appropriate fields, and after matching information is found in the system and access authentication is performed, the screen transitions to a function selection screen. Then, by clicking, touching or tapping the OK button corresponding to "(C) Maintenance Processing", the screen transitions to a screen that displays health and medical related information concerning the individual (user) that has not yet been consented to/not consented to, as well as health and medical related information for which consent/not consent has already been given.
FIG. 44 is a diagram showing an example of a user interface in the health and medical care related information management system of the present invention.
In this case, it is preferable to display the health and medical care-related information of the target individual and the corresponding consent or disagreement state in an easy-to-understand format such as a list. As a result, for health and medical care-related information that has not yet been consented/disagreement at the time of viewing, the individual (user) inputs a "o" mark in the "agree/disagree" column in a pull-down menu format and clicks, touches, or taps the OK button, and incentives are given. On the other hand, for health and medical care-related information for which a "o" mark or an "x" mark has already been input in the "agree/disagree" column, the individual (user) reviews the information, for example, by changing consent to disagree, or disagree to consent, and clicking, touching, or tapping the OK button, and updating the information. It is to be noted that the function selection screen of FIG. 41 can be returned to by clicking, touching, or tapping the end button.

Sixth embodiment: Healthcare-related information management system: hardware configuration
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 22 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 2201 that performs various calculation processes, and a "main memory" 2202. It also comprises a "non-volatile memory" 2203 that holds predetermined information, and a "network I/F (interface)" 2204 that transmits and receives information to and from multiple third party terminals 2206 and an administrator terminal 2207. These are then interconnected by a data communication path such as a "bus" 2205, and transmit and receive information and perform processing.

The "main memory" here reads out programs that perform various processes so that the "CPU" can execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can identify and access those addresses to exchange data with each other and perform processing. In this embodiment, the programs stored in the "main memory" include an access authentication processing program, a consent information acquisition program, and an incentive provision processing program. In addition, the "main memory" and "non-volatile memory" store personal identification number (My Number) information, password information, consent information, incentive information, and the like.

The "CPU" executes the access authentication processing program stored in the "main memory", accepts input of personal number (My Number) information and password information sent from a third-party terminal via the "network I/F", and performs authentication to determine whether matching information exists. It also stores the My Number information and password information in the "main memory" and "non-volatile memory".
The "CPU" also executes the consent information acquisition program stored in the "main memory" to acquire consent information indicating the intention of the individual (user) for each piece of health and medical related information sent from the third-party terminal via the "network I/F." The consent information is also stored in the "main memory" and/or the "non-volatile memory."
In addition, the "CPU" executes an incentive provision processing program stored in the "main memory" to perform incentive provision processing, which is processing for providing incentives when consent is obtained for health and medical care-related information relating to an individual, and stores the incentive information in the "main memory" and/or the "non-volatile memory."

<Sixth embodiment: Healthcare-related information management system: processing flow>
23 is a diagram showing a process flow when the health care related information management system of this embodiment is used. As shown in the diagram, the processing method includes an access authentication processing step S2301, a consent information acquisition step S2302, and an incentive provision processing step S2303.

The "incentive provision processing step" S2303 is a step in which incentive provision processing is performed when consent information is acquired by the consent information acquisition unit, which is a process for providing an incentive.

<Summary>
As described above, in the present invention, incentive provision processing, which is processing for providing incentives, can be executed for health and medical care related information related to an individual (user) when the individual gives consent, and appropriate incentive provision processing can be applied to the health and medical care related information related to the individual.

<Embodiment 7 (corresponding mainly to claims 7, 22, and 37)>
<Overview of Seventh Embodiment>
This embodiment provides a health care related information management system which has a health care related information storage unit which stores health care related information on individuals, and an access control unit which allows a third party to access the health care related information stored in the health care related information storage unit via a network, wherein the access control unit has IP packet analysis means which analyzes IP packets sent via the network, destination IP address determination means which extracts a destination IP address from the IP header part of the IP packet and determines whether the IP address is addressed to the health care related information management system of the user, access ID/user ID acquisition means which, if the destination IP address is an IP address addressed to the user's health care related information management system, acquires from the IP payload an access ID indicating the access subject and a user ID indicating a user belonging to the access subject, access subject user attribute acquisition means which acquires access subject information, user information and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional) corresponding to the access ID and user ID, access control means which controls access to the health care related information from third parties, and a disclosure permission information holding unit which holds disclosure permission information indicating whether the individual's health care related information is permitted to be disclosed to third parties. Note that descriptions of functions, hardware configurations, and processing flows similar to those of the first to sixth embodiments will be omitted as appropriate.

<Seventh embodiment: Functional configuration>
Fig. 24 is a diagram showing the functional configuration of the health care related information management system in embodiment 7. In this embodiment, the access control unit includes an IP packet analysis means, a destination IP address determination means, an access ID/user ID acquisition means, an access subject user attribute acquisition means, an access control means, and a disclosure permission information storage unit.

Seventh embodiment: Description of configuration: IP packet analysis means of access control unit
The "IP packet analysis means" 2401 is configured to have a function of analyzing IP packets sent via a network (particularly the Internet). Generally, an IP packet is composed of an IP header section and an IP payload section, in which various information and data are stored. The "IP packet analysis means" 2401 is responsible for analyzing and examining what information and data are contained therein.

Seventh embodiment: Description of configuration: destination IP address determination means of access control unit
The "destination IP address determination means" 2402 is configured to have the function of extracting the destination IP address from the header of the sent IP packet and determining whether or not the IP address is addressed to its own health and medical information management system. Generally, an IP packet contains at least a source IP address indicating the sender and a destination IP address indicating the destination in the IP header. The "destination IP address determination means" 2402 refers to the destination IP address extracted from the IP header and determines whether or not the IP packet was sent to its own health and medical information management system, and if it determines that the packet was addressed to itself, it proceeds to the next process. However, if it determines that the packet was not addressed to itself, it ignores the IP packet and does not perform any further operations.

Seventh embodiment: Description of configuration: Access ID/user ID acquisition means of access control unit
The "access ID/user ID acquisition means" 2403 is configured to have the function of extracting and acquiring the access ID indicating the access subject stored in the IP payload and the user ID indicating the user belonging to the access subject when it is determined that the IP packet was sent to the health and medical care related information management system itself.

Seventh embodiment: Description of configuration: access subject user attribute acquisition means of access control unit
The "access subject user attribute acquisition means" 2404 is configured to have a function of acquiring access subject information corresponding to an access ID and a user ID, user information belonging to the access subject, and user attribute information for the user (here, information indicating whether the user is a medical worker or a non-medical worker). The access subject information is information that specifically indicates the access subject, and is expressed by a name such as "Edogawa Central Hospital" or "Edogawa Pharmaceuticals". Furthermore, the user information is information that specifically indicates an employee or the like that belongs to the access subject, and is expressed by a name such as "Ichiro Suzuki" who is an employee of "Edogawa Central Hospital" or "Hideo Maeda" who is an employee of "Edogawa Pharmaceuticals". Furthermore, the user attribute information is attribute information associated with the user information and indicates whether the user is a medical worker or a non-medical worker, and is expressed by, for example, "medical worker" (abbreviated as "medical") or "non-medical worker" (abbreviated as "non-medical"), etc.

Here, "healthcare professionals" preferably includes at least doctors, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical x-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, medical administrators, etc.
Among the "healthcare professionals" mentioned above, the role of so-called family medical professionals (e.g., family doctor, family pharmacist, family dentist) who regularly provide medical examinations and medication instructions to individuals (patients) is extremely important, and it is preferable to grant them the authority to access the personal health and medical related information stored in the health and medical related information storage unit and to edit, add, and delete the health and medical related information as appropriate and necessary.

For example, a "family doctor" is a doctor with whom you can consult about anything, who is well-versed in the latest medical information, can refer you to specialists or specialized medical institutions when necessary, and has the comprehensive capabilities to be responsible for local medical care, health, and welfare, and is a reliable, close-by person.
It is desirable for a "family doctor" to be a person who can perform the following functions: (1) In daily medical practice, understands the patient's living background, provides appropriate medical treatment and health guidance, and, when he or she is unable to provide medical treatment or guidance beyond his or her own area of expertise, can cooperate with local doctors, medical institutions, etc. to provide a solution; (2) is able to share necessary information with local doctors, medical institutions, etc., so that the patient can continue to receive the best medical care even outside of his or her own medical hours, and can cooperate with each other to establish a system in which patients can be treated on holidays and at night; (3) In addition to daily medical practice, is able to build relationships of trust with local residents and actively participate in social and administrative activities surrounding medical care in the community, such as health consultations, health checkups/cancer screenings, maternal and child health, school health, industrial health, and community health, as well as cooperate with health, nursing, and welfare professionals, and promote home medical care so that local elderly people can live in the community for as long as possible; and (4) is able to provide patients and their families with appropriate and easy-to-understand information about medical care.

For example, a "family pharmacist" is a pharmacist who has extensive knowledge and experience in pharmaceutical treatment, health and nursing care, and is able to provide consultation based on the needs of patients and consumers.
The functions of a "family pharmacist" are: (1) a function in which one pharmacist manages the medication status of one patient at one pharmacy and continues to do so (for example, to ensure that medications are used safely and with peace of mind, the pharmacist keeps track of all the medications the patient is taking, including prescription and over-the-counter medications, in one place, and continually checks for overlaps and drug interactions, as well as whether the medications are working and whether there are any side effects), and (2) a function to provide 24-hour service and visit the patient's home to provide in-home medical care (for example, to answer questions over the phone about how to use medications, side effects, etc., even outside the pharmacy's opening hours, such as on holidays and at night. In addition, the pharmacist can provide prescriptions at night and on holidays as necessary). It is desirable for the pharmacy professional to be able to take on such roles as (1) providing medication based on the prescription; (2) visiting the homes of elderly and other patients who have difficulty going out, explaining the medication, and checking for remaining medication (medicine remaining on hand); (3) coordinating with prescribing physicians and medical institutions (for example, checking prescription details and making inquiries and suggestions to the doctor as necessary; monitoring the patient's condition even after dispensing the medication, providing feedback on the situation to the prescribing physician, and checking for remaining medication; answering questions about health in general, in addition to medication, and recommending a visit to a medical institution if necessary; and (4) coordinating with local medical institutions to build relationships that allow them to work as a team to support patients on an everyday basis).

For example, a "family dentist" refers to a dentist who not only provides safe and secure dental care, but also has a wide range of knowledge and insight related to medical care and nursing, and is able to fulfill his or her responsibilities as a member of local medical care, aiming to maintain and improve the oral function of local residents throughout their lives.
It is desirable for a "family dentist" to be a person who can (1) contribute to the maintenance and promotion of oral and overall health by providing appropriate dental treatment and health guidance for continued management and prevention of severe symptoms according to the life stage from infancy to old age, (2) play a role in improving oral health through health activities such as dental checkups in cooperation with the government and related organizations for the benefit of local residents, and (3) cooperate with related local organizations and other industries to provide seamless home dental medical care and nursing care services in various treatment facilities for patients who have difficulty visiting hospitals, and actively participate in community-based comprehensive care.
In addition, flag information that can identify a personal medical professional may be added to or associated with the third-party identification information described below. Note that the information indicating a personal medical professional may be set, changed, or deleted using a third-party terminal by an individual (e.g., a patient), a company to which the individual belongs, a health insurance association to which the individual belongs, or a local government in which the individual resides, as appropriate and necessary, or the administrator described above may be able to register, edit, or delete the information using an administrator terminal.

In addition, it is preferable that "non-medical personnel" include at least employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), cooperative health insurance, Japan Health Insurance Association, mutual aid societies, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies.

Seventh embodiment: Description of configuration: Access control means of access control unit
The 'access control means' 2405 is configured to have a function of controlling access when a third party accesses the health and medical care related information storage unit via a network.

FIG. 25 is a diagram showing an example of the functional configuration of the health and medical care related information management system according to this embodiment.
First, the IP packet analysis means analyzes the received IP packet 2501 to check what information and data it contains. For example, it analyzes and checks whether the source IP address and destination IP address are included in the IP header of the IP packet.

Next, the destination IP address determination means extracts the destination IP address contained in the sent IP packet 2501 and determines whether it is addressed to its own healthcare related information management system. At this time, the access control unit 2502 stores an IP address table 2503, and refers to this table to determine whether it is addressed to its own healthcare related information management system. If the stored IP address (e.g., 192.168.0.1) matches the destination IP address, it is determined that it is addressed to its own healthcare related information management system, and the process proceeds to the next step. If there is no match in the IP address table, the IP packet is ignored and no further processing is performed.

Next, if the IP packet sent is addressed to the healthcare-related information management system, the access ID/user ID acquisition means extracts and acquires the access ID stored in the IP payload of the IP packet, which indicates the access subject, and the user ID, which indicates the user belonging to the access subject.

Next, the access subject user attribute acquisition means acquires access subject information, user information, and user attribute information from the extracted access ID and user ID. At this time, the access control unit 2502 stores an access ID/user ID table 2504, and references this table to acquire specific access subject information, user information, and user attribute information. Here, when the access ID is "A0001", the access subject information is "Edogawa Central Hospital", and when the user ID is "C0001", the user information is "Suzuki Ichiro", and the user attribute information is "medical worker". Also, when the access ID is "B0001", the access subject information is "Edogawa Pharmaceutical", and when the user ID is "D0001", the user information is "Maeda Hideo", and the user attribute information is "non-medical worker". Through the operations of the means described above, it is possible to determine whether a third party who has accessed the health and medical information management system is a medical worker or a non-medical worker.

Next, the access control means changes the viewing range of the health and medical related information depending on whether the third party is a medical professional or a non-medical professional. For example, if a user belonging to a third party accessing entity (in this case, "Edogawa Central Hospital") is "Suzuki Ichiro" and his attribute information is "medical professional", all of the health and medical related information of the individual can be viewed. On the other hand, for example, if a user belonging to a third party accessing entity (in this case, "Edogawa Pharmaceutical") is "Maeda Hideo" and his attribute information is "non-medical professional", a part (including all) of the health and medical related information of the individual, or health and medical related information anonymized by a predetermined anonymization method described later, can be viewed. In this way, it is possible to determine who the third party user is and whether his attribute information is "medical professional" or "non-medical professional", and thereby it is possible to change the viewing range of the health and medical related information of the individual.
It is preferable that the administrator who manages and operates the health and medical information management system can register, edit, and delete information in these tables using an administrator terminal. It is also preferable that the access subject information, user information, and user attribute information ("medical worker" or "non-medical worker") are associated with third-party identification information, which will be described later.

<Seventh embodiment: Description of configuration: Disclosure permission information storage unit of access control unit>
As shown in FIG. 24, the "disclosure permission information storage unit" 2406 is configured to have a function of storing disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who has accessed the health and medical related information of an individual via a network. Specifically, it is preferable that information indicating "disclosure permission" or "disclosure refusal" can be set at the individual's will to the access control unit 202 of the health and medical related information management system 200 from the third party terminal 206 as shown in FIG. 2 via the network 205. For example, it may be binary information (flag information) in which "disclosure permission" is "1" and "disclosure refusal" is "0". Furthermore, the disclosure permission information may be set so that whether or not to disclose a predetermined block of health and medical related information. For example, it is considered that the health and medical related information related to internal medicine among medical departments is set to "disclosure permission", while the health and medical related information related to psychiatry is set to "disclosure refusal". Furthermore, the disclosure permission information may be set so that when the third party is a specific medical professional, the disclosure permission information can be distinguished between "disclosure permission" and "disclosure refusal" in combination with third party identification information described later. For example, if the third-party identification information represents a "doctor," the individual's health and medical related information may be "permitted to be disclosed," whereas if the third-party identification information represents a specific medical professional (e.g., an accountant or financial clerk), the individual's health and medical related information may be "denied from disclosure."

Seventh embodiment: Healthcare-related information management system: hardware configuration
The hardware configuration of the health and medical care related information management system in this embodiment will be described with reference to the drawings.

Figure 26 is a diagram showing the hardware configuration of a health and medical care related information management system in this embodiment. As shown in this figure, the access control unit in this embodiment is equipped with a "CPU (Central Processing Unit)" 2601 that performs various calculation processes, and a "main memory" 2602. It also has a "non-volatile memory" 2603 that holds predetermined information, and a "network I/F (interface)" 2604 that transmits and receives information to and from multiple third party terminals 2606 and an administrator terminal 2607. These are then interconnected by data communication paths such as a "bus" 2605, and transmit and receive information and perform processing.

The "main memory" reads out programs that perform various processes to be executed by the "CPU", and also provides a work area for the programs. In addition, multiple addresses are assigned to each of the "main memory" and "non-volatile memory", and the programs executed by the "CPU" can identify and access these addresses to exchange data and perform processing. In this embodiment, the programs stored in the "main memory" include a health and medical information storage program, an IP packet analysis program, a destination IP address determination program, an access ID/user ID acquisition program, an access subject user attribute acquisition program, a disclosure permission information retention program, and an access control program. In addition, the "main memory" and "non-volatile memory" store health and medical information, IP address information, access ID information, user ID information, access subject information, user information, user attribute information, disclosure permission information, and the like.

The "CPU" executes a health and medical information accumulation program stored in the "main memory" to store health and medical information about an individual sent from a third-party terminal through the "network I/F" in the "main memory" and "non-volatile memory", such as electronic medical record information, various examination information, prescription information, medical history information, and vital information (e.g., body temperature, blood pressure, heart rate, etc.). It also executes an IP packet analysis program stored in the "main memory" to analyze IP packets sent via a network (particularly the Internet). It also executes a destination IP address determination program stored in the "main memory" to determine whether the destination IP address sent is an IP address addressed to its own health and medical information sharing system, and if it determines that it is addressed to itself, it stores the IP address in the "main memory" and "non-volatile memory". It also executes an access ID/user ID acquisition program stored in the "main memory" to extract and acquire the access ID indicating the access subject stored in the IP payload of the sent IP packet and the user ID indicating the user belonging to the access subject, and store them in the "main memory" and "non-volatile memory". In addition, an access subject user attribute acquisition program stored in the "main memory" is executed to acquire access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional; for example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID, and store them in the "main memory" and "non-volatile memory." In addition, a disclosure permission information retention program stored in the "main memory" is executed to acquire disclosure permission information indicating whether or not an individual's health and medical related information will be disclosed to a third party, and store this in the "main memory" and "non-volatile memory." In addition, an access control program stored in the "main memory" is executed to control access to the health and medical related information of an individual.

<Seventh embodiment: Healthcare-related information management system: processing flow>
27 is a diagram showing a process flow when the health and medical care related information management system of this embodiment is used. As shown in the figure, the processing method comprises a health and medical care related information accumulation step S2701, an IP packet analysis step S2702, a destination IP address determination step S2703, an access ID/user ID acquisition step S2704, an access subject user attribute acquisition step S2705, a disclosure permission information storage step S2706, and an access control step S2707.

The "healthcare related information accumulation step" S2701 is a step in which healthcare related information about an individual sent from a third-party terminal via a network, such as electronic medical record information, various examination information, prescription information, medical history information, and vital sign information (e.g., body temperature, blood pressure, heart rate, etc.), is accumulated.

The "IP packet analysis step" S2702 is the stage where IP packets sent via a network (particularly the Internet) are analyzed.

The "destination IP address determination step" S2703 is a step in which the destination IP address is extracted from the IP header of the IP packet and it is determined whether or not the IP address is addressed to the healthcare-related information management system.

The "access ID/user ID acquisition step" S2704 is a step in which, if the destination IP address is an IP address addressed to the healthcare-related information management system itself, an access ID indicating the access subject and a user ID indicating the user belonging to the access subject are acquired from the IP payload.

The "access subject user attribute acquisition step" S2705 is a step in which access subject information, user information, and user attribute information (here, information indicating whether the user is a medical professional or a non-medical professional, for example, "medical professional" or "non-medical professional") corresponding to the access ID and user ID are acquired.

The "disclosure permission information retention step" S2706 is a stage in which disclosure permission information indicating whether or not an individual's health and medical related information is permitted to be disclosed to a third party is retained.

The "access control step" S2707 is the stage where access to the health and medical information management system is controlled.

<Summary>
In this way, disclosure permission information indicating whether or not disclosure of health and medical information about an individual (user) to a third party is permitted can be stored. In other words, an individual can select and set whether or not disclosure is permitted based on their own will.

<Embodiment 8 (corresponding mainly to claims 8, 23, and 38)>
<Overview of embodiment 8>

Figure 28 is a diagram showing the functional configuration of a health and medical care related information management system in embodiment 8. As shown in this figure, this embodiment is characterized in that, in addition to embodiments 1 to 7, a third-party identification information storage unit is provided. Below, the functional configuration, hardware configuration, and processing flow of the health and medical care related information management system in this embodiment will be described in order. From this point on, descriptions of functions, hardware configuration, and processing flows similar to those of embodiments 1 to 7 will be omitted as appropriate.

<Functional Configuration of Eighth Embodiment>
28 is a diagram showing the functional configuration of the health care related information management system in this embodiment. In this embodiment, by providing a third party identification information storage unit, it is possible to identify whether a third party is a medical professional or a non-medical professional.

<Embodiment 8: Healthcare-related information management system: Functional configuration>
FIG. 28 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.

<Embodiment 8: Configuration of Third Party Identification Information Storage Unit of Access Control Unit>
The "third party identification information storage unit" 2807 is configured to have a function of storing third party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via a network is a medical professional or a non-medical professional. Here, the third party identification information may be information created by combining, for example, 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information or health insurance certificate number may be used. In addition, it is preferable that the third party identification information is associated with the above-mentioned access subject information, user information, and user attribute information ("medical professional" or "non-medical professional"). In addition, the above-mentioned administrator may be able to register, edit, and delete the third party identification information using the administrator terminal.

In addition, by combining the above-mentioned disclosure permission information and third-party identification information, even if the disclosure permission information indicates “disclosure permitted,” if the third party is a specific medical professional, it may be possible to set a distinction between allowing access and not allowing it.
For example, if the third-party identification information represents a "doctor," access to the health and medical related information may be permitted, but on the other hand, if the third-party identification information represents a particular medical professional (e.g., an accountant or bookkeeper), access to the health and medical related information may be denied.
Also, for example, information indicating the department to which the user belongs may be added to the third-party identification information, and the permission or denial of access to the health and medical care-related information may be controlled by the information indicating the department to which the user belongs. Also, for example, the permission or denial of access to the health and medical care-related information may be controlled by information on the expertise of the user specified by the third-party identification information (for example, the specialty field and years of experience of "doctor" or "nurse"). Also, for example, the method of acquiring the health and medical care-related information by a third party (for example, only viewable, textualization of information, copyable, transferable, bulk download of anonymously processed information, etc.) may be changed by a combination of the disclosure permission information and the department and expertise related to the third-party identification information. In addition, when downloading is allowed, it is preferable to use electronic watermark technology or NFT (Non-Fungible Token) technology to prevent data tampering. Also, for example, the access right to the patient may be granted to a third party by a combination of the disclosure permission information and the department and expertise related to the third-party identification information. For example, it is expected that a medical professional who performs PCR testing will transmit the results of a PCR test to a third-party terminal used by a doctor, as well as to a third-party terminal used by the patient himself/herself.

It is conceivable that the administrator mentioned above could use the administrator terminal to register combinations of this information in advance in the access control unit mentioned above in table format or the like, and allow editing or deletion as appropriate and necessary.
For example, medical professionals include doctors, dentists, and pharmacists, and the third-party identification information for these may include, at least as a part, the medical registration number (e.g., a six-digit number) listed on the medical license, the dentist registration number (e.g., a six-digit number) listed on the dentist license, and the pharmacist registration number (e.g., a six-digit number) listed on the pharmacist license. Similarly, the third-party identification information for other medical professionals may include, at least as a part, the number listed on the license.
In addition, the third-party identification information may include at least a symbol or number (including a branch number) printed on the insured person's certificate of the health insurance association to which the user belongs, a driver's license number, a personal number (My Number) printed on a personal number (My Number) card, etc. In addition, the user may be identified by using third-party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).

<Embodiment 8: Healthcare-related information management system: hardware configuration>
Fig. 29 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 2901 that performs various calculation processes, and a "main memory" 2902. It also comprises a "non-volatile memory" 2903 that holds predetermined information, and a "network I/F" 2904 that transmits and receives information to and from a third party terminal 2906 and an administrator terminal 2907. These are then interconnected by a data communication path such as a "bus" 2905, and perform the transmission and reception of information and processing.

The "main memory" here reads out programs that perform various processes in order to have the "CPU" execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" are mainly third-party identification information holding programs, etc. Furthermore, third-party identification information, etc. is stored in the "main memory" and "non-volatile memory."

The "CPU" executes a third-party identification information retention program stored in the "main memory" to retain third-party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via the network is a medical professional or a non-medical professional, and stores the third-party identification information in the "main memory" and the "non-volatile memory."

<Embodiment 8: Healthcare-related information management system: processing flow>
30 is a diagram showing a process flow when the health care related information management system in this embodiment is used. As shown in this diagram, the processing method includes a third party identification information holding step S3007.

The "third party identification information storage step" S3007 is a step in which third party identification information is stored to identify whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via the network is a medical professional or a non-medical professional.

<Summary>
From the above, it is possible to identify whether a third party is a medical professional or a non-medical professional.
For example, it will be possible to distinguish between the same medical professional as whether he or she is the individual's primary physician (family doctor), and between the same non-medical professional as whether he or she is an employee (including a researcher) of a pharmaceutical company that develops and manufactures a treatment for the individual's illness, or an employee of a government agency.

<Embodiment 9 (corresponding mainly to claims 9, 24, and 39)>
<Overview of 9th embodiment>

Figure 31 is a diagram showing the functional configuration of a health and medical care related information management system in embodiment 9. Hereafter, explanations of functions, hardware configurations, and processing flows similar to those in embodiments 1 to 8 will be omitted as appropriate.

The following describes the functional configuration, hardware configuration, and processing flow of the health and medical information management system in this embodiment.

<Ninth embodiment: Functional configuration>
31 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment. With this configuration, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the person is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit can be viewed.

<Embodiment 9: Functional configuration of health and medical information management system>
FIG. 31 is a diagram showing the functional configuration of a health and medical care related information management system in this embodiment.

<Ninth embodiment: Description of configuration: Disclosure permission information storage unit of access control unit>
The "disclosure permission information storage unit" 3106 is configured to have a function of storing disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who has accessed the health and medical related information of an individual via a network. Specifically, it is preferable that information indicating "disclosure permission" or "disclosure refusal" can be set at the individual's will to the access control unit 202 of the health and medical related information management system 200 from the third party terminal 206 as shown in FIG. 2 via the network 205. For example, it may be binary information (flag information) in which "disclosure permission" is "1" and "disclosure refusal" is "0". Furthermore, the disclosure permission information may be set so that whether or not to disclose a predetermined block of health and medical related information. For example, it is considered that "disclosure permission" is set for health and medical related information related to internal medicine among medical departments, while "disclosure refusal" is set for health and medical related information related to psychiatry among medical departments. Furthermore, the disclosure permission information may be set so that when the third party is a specific medical professional, the disclosure permission information can be distinguished between "disclosure permission" and "disclosure refusal" in combination with the above-mentioned third party identification information. For example, if the third-party identification information represents a "doctor," the individual's health and medical related information may be "permitted to be disclosed," whereas if the third-party identification information represents a specific medical professional (e.g., an accountant or financial clerk), the individual's health and medical related information may be "denied from disclosure."

<Ninth embodiment: Description of configuration: Third-party identification information storage unit of access control unit>
The "third party identification information storage unit" 3107 is configured to have a function of storing third party identification information for identifying whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via a network is a medical professional or a non-medical professional. Here, the third party identification information may be, for example, information made up of a combination of 12-digit numbers, letters, symbols, etc., and may be information that can uniquely identify a third party. For example, specifically, My Number information or health insurance card number, etc. may be used.
In addition, it is preferable that the third-party identification information is associated with the above-mentioned access subject information, user information, and user attribute information ("medical worker" or "non-medical worker"). In addition, the above-mentioned administrator may be able to register, edit, and delete the third-party identification information using an administrator terminal.

In addition, by combining the above-mentioned disclosure permission information and third-party identification information, even if the disclosure permission information indicates “disclosure permitted,” if the third party is a specific medical professional, it may be possible to set a distinction between allowing access and not allowing it.
For example, if the third-party identification information represents a "doctor," access to the health and medical related information may be permitted, but on the other hand, if the third-party identification information represents a particular medical professional (e.g., an accountant or bookkeeper), access to the health and medical related information may be denied.

For example, information indicating the department to which the user belongs may be added to the third-party identification information, and the permission or denial of access to the health and medical care-related information may be controlled by the information indicating the department to which the user belongs. For example, the permission or denial of access to the health and medical care-related information may be controlled by information on the expertise of the user specified by the third-party identification information (for example, the specialty field and years of experience of "doctor" or "nurse"). For example, the method of obtaining the health and medical care-related information by a third party (for example, only viewable, textualization of information, copyable, transferable, bulk download of anonymously processed information, etc.) may be changed by a combination of the disclosure permission information and the department and expertise related to the third-party identification information. In addition, if the information is made downloadable, it is preferable to use electronic watermarking technology or NFT (Non-Fungible Token) technology to prevent data tampering. For example, the permission or denial of access to the patient may be granted to a third party by a combination of the disclosure permission information and the department and expertise related to the third-party identification information. For example, it is expected that a medical professional who performs PCR testing will transmit the results of a PCR test to a third-party terminal used by a doctor and also to a third-party terminal used by the patient himself/herself.

It is conceivable that the administrator mentioned above could use the administrator terminal to register combinations of this information in advance in table format or the like in the access control unit mentioned above, and allow editing or deletion as appropriate and necessary.
For example, medical professionals include doctors, dentists, and pharmacists, and the third-party identification information for these may include, at least as a part, the medical registration number (e.g., a six-digit number) listed on the medical license, the dentist registration number (e.g., a six-digit number) listed on the dentist license, and the pharmacist registration number (e.g., a six-digit number) listed on the pharmacist license. Similarly, the third-party identification information for other medical professionals may include, at least as a part, the number listed on the license.
In addition, the third-party identification information may include at least a symbol or number (including a branch number) printed on the insured person's certificate of the health insurance association to which the user belongs, a driver's license number, a personal number (My Number) printed on a personal number (My Number) card, etc. In addition, the user may be identified by using third-party authentication by a platform such as Google (registered trademark) or Facebook (registered trademark).

<Embodiment 9: Description of Configuration: Access Control Means of Access Control Unit>
The “access control means” 3105 is configured to have a function regarding access control when a third party accesses the health and medical care related information storage unit via a network, and to enable viewing of the health and medical care related information stored in the health and medical care related information storage unit when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a medical professional.

Ninth embodiment: Healthcare-related information management system: hardware configuration
Fig. 32 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 3201 that performs various calculation processes, and a "main memory" 3202. It also comprises a "non-volatile memory" 3203 that holds predetermined information, and a "network I/F" 3204 that transmits and receives information to and from a third party terminal 3206 and an administrator terminal 3207. These are then connected to each other by a data communication path such as a "bus" 3205, and perform the transmission and reception of information and processing.

The "main memory" here reads out programs that perform various processes in order to have the "CPU" execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the programs stored in the "main memory" include a program for holding disclosure permission information, a program for holding third-party identification information, and an access control program. In addition, the "main memory" and "non-volatile memory" store disclosure permission information, third-party identification information, etc.

The "CPU" executes a disclosure permission information holding program stored in the "main memory" to store in the "main memory" and "non-volatile memory" disclosure permission information indicating whether or not to disclose one's own health and medical related information to a third party who has accessed the health and medical related information of an individual via the network. It also executes a third party identification information holding program stored in the "main memory" to store in the "main memory" and "non-volatile memory" third party identification information for identifying whether a third party who has accessed the health and medical related information stored in the health and medical related information storage unit via the network is a medical professional or a non-medical professional. It then executes an access control program stored in the "main memory" to make the health and medical related information stored in the health and medical related information storage unit viewable if the disclosure permission information indicates disclosure permission and the third party identification information indicates a medical professional.

<Embodiment 9: Healthcare-related information management system: processing flow>
33 is a diagram showing the flow of processing when the health care related information management system of this embodiment is used. As shown in this diagram, the processing method comprises a disclosure permission information holding step S3306, a third party identification information holding step S3307, and an access control step S3308.

The "disclosure permission information retention step" S3306 is a step in which disclosure permission information indicating whether or not to disclose one's own health and medical care related information to a third party who has accessed the health and medical care related information about an individual via the network is retained.

The "third party identification information storage step" S3307 is a step in which third party identification information is stored to identify whether a third party who has accessed the health and medical care related information stored in the health and medical care related information storage unit via the network is a medical professional or a non-medical professional.

The "access control step" S3308 is a step in which, if the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit is made viewable.

<Summary>
From the above, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the third party is a medical professional, the health and medical care related information stored in the health and medical care related information storage unit can be made viewable.

<Tenth embodiment (corresponding mainly to claims 10, 25, and 40)>
<Outline of embodiment 10>

This embodiment is characterized in that, in addition to the features of the first to ninth embodiments, anonymization method information is stored. Hereafter, the same functions, hardware configurations, and processing flows as those of the first to ninth embodiments will not be described as appropriate.

The following describes the functional configuration, hardware configuration, and processing flow of the health and medical information management system in this embodiment.

<Embodiment 10: Functional Configuration>
34 is a diagram showing the functional configuration of the health care related information management system in this embodiment. The health care related information management system in this embodiment includes an anonymization method information storage unit.

<Embodiment 10: Healthcare-related information management system: functional configuration>
FIG. 34 is a diagram showing the functional configuration of the health and medical care related information management system in this embodiment.

<Embodiment 10: Description of Configuration: Anonymization Method Information Storage Unit of Access Control Unit>
The "anonymization method information storage unit" 3408 is configured to have a function of storing information indicating the anonymization method. Here, the anonymization method information may be information created by combining, for example, six-digit numbers, letters, symbols, etc., and may be information that can uniquely identify the anonymization method. Note that the above-mentioned administrator may be able to register, edit, and delete the anonymization method information using the administrator terminal.

There are several methods for anonymization, and these are often used alone or in combination. The main anonymization methods are briefly explained below.
"k-anonymization" (where k is a natural number greater than or equal to 2) refers to creating a state in which, for attributes that cannot identify an individual by themselves but can identify an individual with a high degree of probability when combined (e.g., gender, age, place of residence, occupation, etc.), there are always k or more combinations of attribute values in the target data.
"Pseudonymization" refers to replacing information with other descriptions, etc., using a method that has no regularity that allows deletion or restoration.
"Generalization" means replacing the value of an attribute with a higher-level value or concept. For example, age is divided into 10-year increments, or cucumber is made into a higher-level vegetable.
"Top (bottom) coding" refers to grouping numerical attributes into particularly large or small attribute values. For example, people who are over 100 years old can be labeled as "over 100 years old."
"Noise (error) addition" refers to adding random noise that follows a certain distribution to a numerical attribute.
"Swapping (data exchange)" refers to (probabilistically) exchanging attribute values between records for categorical attributes. It is also called data swap.
"Sampling" means randomly extracting a certain percentage or number of items from the entire original data.
"Grouping" refers to replacing detailed items in attributes or history with certain groups or divisions.

<Embodiment 10: Description of Configuration: Access Control Means of Access Control Unit>
“Access control means” 3405 is configured to have a function regarding access control when a third party accesses the health and medical care related information storage unit via a network, such that when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third party identification information indicates that the third party is a non-medical professional, part (including all) of the health and medical care related information stored in the health and medical care related information storage unit, or the health and medical care related information that has been anonymized using a predetermined anonymization method, can be viewed.

<Embodiment 10: Healthcare-related information management system: hardware configuration>
Fig. 35 is a diagram showing the hardware configuration of the health care related information management system in this embodiment. As shown in this figure, the health care related information management system in this embodiment comprises a "CPU (Central Processing Unit)" 3501 that performs various calculation processes, and a "main memory" 3502. It also comprises a "non-volatile memory" 3503 that holds predetermined information, and a "network I/F" 3504 that transmits and receives information to and from a third party terminal 3506 and an administrator terminal 3507. These are then interconnected by a data communication path such as a "bus" 3505, and perform the transmission and reception of information and processing.

The "main memory" reads out programs that perform various processes so that the "CPU" can execute them, and also provides a work area that is a working area for those programs. In addition, multiple addresses are assigned to this "main memory" and "non-volatile memory," and the programs executed by the "CPU" can exchange data with each other and perform processing by identifying and accessing those addresses. In this embodiment, the program stored in the "main memory" is a program that holds information about the anonymization method. In addition, the "main memory" and "non-volatile memory" store information about the anonymization method, etc.

The "CPU" executes the anonymization method information retention program stored in the "main memory" and stores anonymization method information indicating the anonymization method in the "main memory" and the "non-volatile memory". Thereafter, the "CPU" executes the access control program stored in the "main memory" and, if the disclosure permission information indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical worker, makes it possible to view a part (including all) of the health and medical related information stored in the health and medical related information storage unit, or health and medical related information that has been anonymized using a predetermined anonymization method.

<Embodiment 10: Healthcare-related information management system: processing flow>
36 is a diagram showing the flow of processing when the health care related information management system in this embodiment is used. As shown in this diagram, the processing method is composed of anonymization method information holding step S3608 and access control step S3609.

The "anonymization method information storage step" S3608 is a stage in which anonymization method information, which is information indicating a method for anonymizing health and medical care related information, is stored.

The "access control step" S3609 is a step in which, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional, part (including all) of the health and medical care related information stored in the health and medical care related information storage unit, or the health and medical care related information that has been anonymized using a predetermined anonymization method, is made viewable.

<Description of an example of anonymization method>
37 to 39 are diagrams showing an example of an anonymization method. Using these figures, an example of an anonymization method will be briefly described.
The table shown in FIG. 37 is a list of patients at a fictitious medical institution in Minato-ku, Tokyo, Japan, who have not yet been anonymized. Here, six attributes (name, age, sex, place of residence, religion, and disease name) and data for 12 people are included. Among these, "name" is information constituting personal data, and is information that may identify an individual by itself. Also, "age", "sex", "place of residence", "religion", and "disease name" are information constituting personal data, and are information that is not accumulated over time, and are information that cannot identify an individual by itself, but may identify an individual by combining with other attributes or by matching with external information. In particular, "disease name" is very sensitive attribute information in personal data. These pieces of information correspond to the health and medical care related information of an individual stored in the above-mentioned health and medical care related information storage unit. In this case, the following processing may be performed to achieve k-anonymity for a certain value of k (k is a natural number equal to or greater than 2).

First, a process called "pseudonymization" is performed to replace certain values of a certain attribute with an asterisk "*". All or some of the values in that column are replaced with "*". In the table shown in Figure 38, all values of "name" and all values of "religion" are replaced with "*". Next, a process called "generalization" is performed to replace individual attribute values with a wider range. For example, for "age", "29 years old" is replaced with "20s" and "35 years old" is replaced with a value with a wider range, such as "30s". Furthermore, for "place of residence", the value consists of prefecture and city/ward/town/village, but the city/ward/town/village is deleted and changed to only prefecture. Figure 38 shows an anonymized table. Here, there are four equivalence classes with the same combination of quasi-identifiers ("age", "gender", and "place of residence").

Figure 39 shows an anonymized table grouped for easy understanding. As can be seen from this table, all groups (Group A to Group D) achieve 3-way anonymity for "age," "gender," and "place of residence." This is because every combination of these attributes results in three or more people. In this way, the risk of individuals being identified can be reduced by anonymizing the health and medical care-related information about individuals stored in the health and medical care-related information storage unit described above.

<Summary>
From the above, when the disclosure permission information held in the disclosure permission information holding unit indicates that disclosure is permitted and the third-party identification information indicates that the person is a non-medical professional, it is possible to make viewable some (including all) of the health and medical related information stored in the health and medical related information storage unit, or the health and medical related information that has been anonymized using a predetermined anonymization method.

Healthcare related information management system: 200, 300
Health and medical related information storage unit: 201, 301
Access control unit: 202, 302
Incentive Management Department: 203, 303
Provision history storage unit: 204, 304
Network: 205
Third party terminal: 206
Administrator terminal: 207

Claims (45)

a health and medical care related information storage unit for storing and managing health and medical care related information on an individual;
an access control unit for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage unit to a third party via a network;
an incentive management unit for providing incentives to individuals to encourage them to disclose their health and medical care related information by referring to a disclosure history in a disclosure history storage unit described below with respect to whether or not to permit disclosure of the health and medical care related information of the individuals;
A health and medical care related information management system comprising: a provision history storage unit that stores a provision history that is a history of incentives provided to each individual. The system further includes an incentive type information storage unit that stores incentive type information that is information indicating the types of multiple incentives,
2. The health care related information management system according to claim 1, wherein the incentive management unit selects and provides incentives to individuals according to incentive provision history, based on incentive type information stored in an incentive type information storage unit. a termination request receiving unit that receives a termination request, which is a request to stop or terminate the disclosure of already disclosed health and medical care related information, from an individual who has stored health and medical care related information in the health and medical care related information storage unit;
a termination condition storage unit that stores a termination condition, which is a condition for determining whether or not termination is permitted based on information about an individual who has made a termination request when the termination request is accepted;
a decision rule storage unit that stores decision rules for determining whether or not to end the disclosure of health and medical care related information based on information about the individual who has made the end request and the stored end conditions;
a termination decision unit which, when a termination request is received, decides whether to terminate the process based on information about the individual, the stored termination conditions, and the stored decision rules;
a termination control unit that controls the access control unit to terminate the disclosure of the individual's health and medical care related information when the termination determination unit determines that the disclosure should be terminated;
The health care related information management system according to claim 1 , further comprising: The health and medical information management system according to claim 1, further comprising an access authentication processing unit that performs authentication for accessing the incentive management unit. The health and medical care related information management system according to claim 4, further comprising a consent information acquisition unit that acquires consent information, which is information indicating consent to accepting an incentive by the incentive management unit, after authentication by the access authentication processing unit. The health and medical information management system according to claim 5, further comprising an incentive provision processing unit that performs an incentive provision process, which is a process for providing an incentive, when consent information is acquired by the consent information acquisition unit. The health and medical related information management system according to claim 1, further comprising a disclosure permission information storage unit that stores disclosure permission information indicating whether an individual permits disclosure of his or her health and medical related information to a third party. The health and medical care related information management system according to claim 7, further comprising a third party identification information storage unit that stores third party identification information for identifying whether the third party is a medical professional or a non-medical professional. The health care related information management system according to claim 8, wherein the access control unit allows the medical staff to view the health care related information stored in the health care related information storage unit when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the third party is a medical staff member. The health care related information management system according to claim 8, wherein the access control unit allows the non-medical worker to view a part (including all) of the health care related information stored in the health care related information storage unit, or the health care related information that has been anonymized by a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage unit indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage unit indicates that the non-medical worker is a non-medical worker. The health and medical information management system according to claim 10, wherein the anonymization method is at least one of the following anonymization methods, where k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these. The health and medical care related information management system according to claim 1, wherein the health and medical care related information storage unit stores health and medical care related information including one or more of the following information: electronic medical record information, various test information, prescription information, medical history information, medication status information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS, regarding an individual. The health and medical related information management system of claim 1, wherein the incentive management unit provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books or other products, provision of passwords or IDs for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., health management apps or pedometer apps), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash. The health and medical related information management system according to claim 8, wherein the medical professionals include at least one of the following: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, X-ray technicians, clinical laboratory technicians, sanitary technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, massage therapists, acupuncturists, moxibustion therapists, judo therapists, dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators. The health and medical related information management system of claim 8, wherein the non-medical personnel include at least one of employees belonging to a life insurance company, a non-life insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, JA (agricultural cooperative), a cooperative health insurance, an association health insurance, a mutual aid association, a municipal national health insurance, a national health insurance association, a PR company, a general research institute, a university and a graduate school (including an affiliated research institute), a technical college, an agriculture, forestry and fisheries company, a fertilizer manufacturer, a government agency, a local government, and an independent administrative agency. A method executed by a CPU in a health care related information management system that is a computer, comprising:
a health and medical related information accumulation step for accumulating and managing health and medical related information relating to an individual;
an access control step for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage step to a third party via a network;
an incentive management step of providing an incentive to the individual to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history storage step described below regarding whether or not to permit the disclosure of the health and medical care related information of the individual;
and a provision history maintaining step of maintaining a provision history that is a history of providing incentives to each individual. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method further includes an incentive type information holding step for holding incentive type information which is information indicating the types of a plurality of incentives;
17. The method according to claim 16, wherein said incentive management step selects and provides an incentive to an individual in accordance with the incentive provision history based on the incentive type information stored in said incentive type information storage step. A method executed by a CPU in a health care related information management system that is a computer, comprising:
a termination request receiving step of receiving a termination request, which is a request to stop or terminate the disclosure of the already disclosed health and medical care related information, from an individual who has accumulated the health and medical care related information in the health and medical care related information accumulation step;
a termination condition holding step for holding a termination condition, which is a condition for determining whether or not termination is permitted based on information about the individual who has made the termination request, when the termination request is accepted;
a decision rule storage step for storing decision rules for determining whether or not to terminate the disclosure of health and medical care-related information based on information about the individual who has made the termination request and the stored termination conditions;
a termination decision step for deciding whether to terminate the service based on information about the individual, the stored termination conditions, and the stored decision rules when the termination request is accepted;
a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the determination result in the termination determination step is that the disclosure should be terminated;
20. The method of claim 16 further comprising: A method executed by a CPU in a health care related information management system that is a computer, comprising:
17. The method according to claim 16, further comprising an access authentication processing step for performing authentication for accessing said incentive management step. A method executed by a CPU in a health care related information management system that is a computer, comprising:
20. The method according to claim 19, further comprising a consent information acquisition step of acquiring consent information, which is information indicating consent to accepting the incentive by the incentive management step, after authentication is performed in the access authentication processing step. A method executed by a CPU in a health care related information management system that is a computer, comprising:
21. The method according to claim 20, further comprising an incentive providing process step of performing an incentive providing process which is a process for providing an incentive when the consent information is acquired in the consent information acquiring step. A method executed by a CPU in a health care related information management system that is a computer, comprising:
17. The method according to claim 16, further comprising a disclosure permission information holding step of holding disclosure permission information indicating whether an individual permits disclosure of his/her health care related information to a third party. A method executed by a CPU in a health care related information management system that is a computer, comprising:
23. The method of claim 22, further comprising a third party identification information retaining step of retaining third party identification information for identifying whether the third party is a medical professional or a non-medical professional. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method according to claim 23, wherein the access control step allows a medical professional to view the health and medical related information stored in the health and medical related information storage step if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the third party is a medical professional. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method according to claim 23, wherein the access control step allows the non-medical professional to view a part (including all) of the health and medical related information accumulated in the health and medical related information accumulation step, or the health and medical related information that has been anonymized by a predetermined anonymization method, if the disclosure permission information retained in the disclosure permission information retaining step indicates that disclosure is permitted and the third party identification information retained in the third party identification information retaining step indicates that the person is a non-medical professional. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method according to claim 25, wherein the anonymization method is performed by at least any one of the following anonymization methods: k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination thereof. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method according to claim 16, wherein the health and medical related information accumulation step accumulates health and medical related information including one or more of electronic medical record information, various test information, prescription information, medical history information, medication information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS regarding an individual. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method of claim 16, wherein the incentive management step provides incentives including one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books or other products, provision of a password or ID for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management app or a pedometer app), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method of claim 23, wherein the medical professionals include at least one of the following: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, radiologists, clinical x-ray technicians, clinical laboratory technicians, sanitary technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupuncturists, moxibustion therapists, judo therapists, registered dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators. A method executed by a CPU in a health care related information management system that is a computer, comprising:
The method of claim 23, wherein the non-medical personnel include at least one of employees of life insurance companies, non-life insurance companies, securities companies, pharmaceutical companies, drug discovery venture companies, food companies, health equipment companies, fitness clubs, sports gyms, banks, credit unions, JA (agricultural cooperatives), cooperative health insurance, Japan Health Insurance Association, mutual aid associations, municipal national health insurance, national health insurance associations, PR companies, general research institutes, universities and graduate schools (including affiliated research institutes), technical colleges, agriculture, forestry and fisheries companies, fertilizer manufacturers, government agencies, local governments, and independent administrative agencies. a health and medical related information accumulation step for accumulating and managing health and medical related information relating to an individual;
an access control step for controlling disclosure of the health and medical care related information stored in the health and medical care related information storage step to a third party via a network;
an incentive management step of providing an incentive to the individual to encourage the disclosure of the health and medical care related information by referring to the provision history in the provision history storage step described below regarding whether or not to permit the disclosure of the health and medical care related information of the individual;
An operating program for a health and medical related information management system written in a manner readable and executable by a computer that has a provision history storage step for storing a provision history that is a history of incentives provided to each individual. The method further includes an incentive type information holding step for holding incentive type information which is information indicating the types of a plurality of incentives;
The incentive management step selects and provides incentives to be provided to individuals in accordance with the incentive provision history based on the incentive type information stored in the incentive type information storage step. a termination request receiving step of receiving a termination request, which is a request to stop or terminate the disclosure of the already disclosed health and medical care related information, from an individual who has accumulated the health and medical care related information in the health and medical care related information accumulation step;
a termination condition holding step for holding a termination condition, which is a condition for determining whether or not termination is permitted based on information about the individual who has made the termination request, when the termination request is accepted;
a decision rule storage step for storing decision rules for determining whether or not to terminate the disclosure of health and medical care-related information based on information about the individual who has made the termination request and the stored termination conditions;
a termination decision step for deciding whether to terminate the service based on information about the individual, the stored termination conditions, and the stored decision rules when the termination request is accepted;
a termination control step for controlling the access control step to terminate the disclosure of the health and medical care related information of the individual when the determination result in the termination determination step is that the disclosure should be terminated;
32. An operating program for a health and medical care related information management system, the operating program being written in a readable and executable manner in the health and medical care related information management system which is a computer according to claim 31. An operating program for a health and medical information management system written in a readable and executable manner in a health and medical information management system that is a computer according to claim 31, further comprising an access authentication processing step for performing authentication for accessing the incentive management step. An operating program for a health and medical related information management system written in a readable and executable manner in a health and medical related information management system that is a computer according to claim 34, further comprising a consent information acquisition step for acquiring consent information that is information indicating consent to accepting the incentive by the incentive management step after authentication by the access authentication processing step. An operating program for a health and medical related information management system written in a readable and executable manner in a health and medical related information management system that is a computer according to claim 35, further comprising an incentive provision processing step for performing an incentive provision process that is a process for providing an incentive when consent information is acquired by the consent information acquisition step. An operating program for a health and medical related information management system written in a readable and executable manner on the health and medical related information management system, which is a computer according to claim 31, further comprising a disclosure permission information storage step for storing disclosure permission information indicating whether an individual permits disclosure of his or her own health and medical related information to a third party. An operating program for a health and medical related information management system written in a readable and executable manner on a health and medical related information management system that is a computer according to claim 37, further comprising a third party identification information storage step for storing third party identification information for identifying whether the third party is a medical professional or a non-medical professional. The access control step allows the medical staff to view the health care related information stored in the health care related information storage step if the disclosure permission information stored in the disclosure permission information storage step indicates that disclosure is permitted and the third party identification information stored in the third party identification information storage step indicates that the medical staff is a medical staff member. An operating program for a health care related information management system that is a computer according to claim 37, the operating program being written in a readable and executable manner in the health care related information management system that is a computer according to claim 37. The access control step allows the non-medical worker to view a part (including all) of the health and medical related information stored in the health and medical related information storage step, or the health and medical related information anonymized by a predetermined anonymization method, when the disclosure permission information stored in the disclosure permission information storage step indicates disclosure permission and the third party identification information stored in the third party identification information storage step indicates a non-medical worker. The operating program of the health and medical related information management system described in claim 37, which is a computer, is readable and executable by the health and medical related information management system. The anonymization method is at least one of the following anonymization methods: k (k is a natural number equal to or greater than 2)-anonymization, pseudonymization, generalization, top (bottom) coding, noise (error) addition, swapping (data exchange), sampling, and grouping, or a combination of these. The operating program for a health and medical information management system is written in a readable and executable manner on a computer that is a health and medical information management system according to claim 40. The health and medical related information storage step stores health and medical related information including one or more of the following information: electronic medical record information, various test information, prescription information, medical history information, medication information, vital sign information, questionnaire information, data from a health promotion app, and conversation data from an interactive health promotion SNS. The operating program of the health and medical related information management system is written in a readable and executable manner in the health and medical related information management system, which is a computer according to claim 31. The incentive management step provides incentives including any one or more of the following: provision of My Number points, provision of individual information services or general information services to information providers, provision of individual medicines or supplements, provision of books or other products, provision of a password or ID for providing information, provision of items that can be used on the network, provision of the right to receive medical treatment, provision of the right to receive a diagnosis, provision of the right to receive an examination, provision of the right to receive various services on the network, provision of specific software (e.g., a health management application or a pedometer application), provision of points for prepaid or postpaid electronic money, provision of product coupons, travel coupons, or cash. The operating program of the health and medical information management system is written in a readable and executable manner in the computer of claim 31 that is the health and medical information management system. The operating program for a health and medical related information management system written in a readable and executable manner in a computer that is a health and medical related information management system according to claim 38, wherein the medical professionals include at least one of the following: physicians, dentists, pharmacists, public health nurses, midwives, nurses, licensed practical nurses, physical therapists, occupational therapists, orthoptists, speech-language-hearing therapists, prosthetists, clinical radiologists, clinical x-ray technicians, clinical laboratory technicians, medical laboratory technicians, clinical engineers, dental hygienists, dental technicians, emergency medical technicians, masseurs, acupressure therapists, acupuncturists, moxibustion therapists, judo therapists, dietitians, nutritionists, mental health workers, social workers, care workers, certified psychologists, clinical psychologists, and medical administrators. The operating program for a health and medical related information management system written in a readable and executable manner in a computer that is a health and medical related information management system according to claim 38, wherein the non-medical personnel include at least one of employees belonging to a life insurance company, a non-life insurance company, a securities company, a pharmaceutical company, a drug discovery venture company, a food company, a health equipment company, a fitness club, a sports gym, a bank, a credit union, JA (agricultural cooperative), a cooperative health insurance, an association health insurance, a mutual aid association, a municipal national health insurance, a national health insurance association, a PR company, a general research institute, a university and a graduate school (including an affiliated research institute), a technical college, an agriculture, forestry and fisheries company, a fertilizer manufacturer, a government agency, a local government, and an independent administrative agency.