JP2014106783A - Medical information processor - Google Patents

Abstract

To provide a medical information processing apparatus capable of responding to a request for appropriately deleting patient information of a patient from a patient or a patient's family.
An erasure certificate issuing apparatus according to the present embodiment includes an erasure request accepting unit that accepts a request for erasing patient information related to a patient, and an external in which patient information corresponding to the accepted erasure request is stored. Based on the patient information search unit 120 that searches the storage unit of the device and the search result of the patient information, the patient information registered in the storage unit is deleted, and the patient information is temporarily deleted from the storage unit. A temporary erasure registration unit 130 for registering temporary erasure information to be shown, an erasure approval reception unit 140 for accepting an approval indicating that the patient information has been erased from the storage unit for the registered temporary erasure information, An erasure information generation unit 150 that generates erasure information indicating that the patient information has been formally erased from the storage unit with respect to the provisional erasure information that has been accepted.
[Selection] Figure 3

Description

  Embodiments described herein relate generally to a medical information processing apparatus.

  In recent years, with the progress of computerization of personal information and the development of information communication, there has been a problem that personal information stored in a personal computer (information processing apparatus) leaks outside via an Internet network or the like. .

  In particular, leakage of personal information related to personal confidentiality may prevent personal privacy from being protected, and may be at risk from a third party.

  On the other hand, hospital information systems (HIS: Hospital Information System), which form the basis of hospitals, have been constructed in hospitals and inspection institutions, and electronic medical records and receipt computers are configured around the ordering system. Further, in some hospitals, a hospital information system is constructed so as to cooperate with a medical image management system (PACS: Picture Archiving Communication System) and a radiology information system (RIS: Radiology Information System).

  Here, for example, based on the identification information of the patient, the medical record information including information on the patient's primary doctor and the department in charge of the patient is recorded, and the schedules of a plurality of doctors are stored to give priority to the doctors. A medical information management apparatus for notifying a medical examination request with a certain degree of time has been disclosed (see Patent Document 1).

JP 2010-117969 A

  By the way, image data indicating patient chart information and examination results are managed by a medical information management apparatus and a medical image management system (PACS), and personal information is recorded by a doctor, a laboratory technician, or a medical worker. It has become.

  Here, personal information such as patient medical record information and image data indicating examination results is used in the medical information management apparatus and medical image management system (PACS) for reasons such as patient death and patient moving, for example. There may be a desire to appropriately delete the lost patient information.

  However, at present, there has been no means for appropriately deleting (erasing) patient information as personal information from a hospital information system (HIS) including a medical information management apparatus and a medical image management system (PACS). That is, a method of individually deleting patient information from a medical information management apparatus, a medical image management system (PACS), or a hospital information system (HIS) can be considered, but patient information to be deleted (erased) is surely deleted collectively ( There was no means to erase.

  Therefore, there is no means to prove that patient information has been properly deleted (erased) from the medical information management device, medical image management system (PACS), or hospital information system (HIS). , The patient's request to delete (erase) the patient information appropriately could not be met.

  The medical information processing apparatus according to the present embodiment searches for a deletion request reception unit that receives a request for deletion of patient information related to a patient, and a storage unit of an external device that stores patient information corresponding to the received deletion request. When the received patient information is registered in the storage unit based on the patient information search unit and the patient information search result, the patient information registered in the storage unit is deleted and the patient information is stored in the storage unit. Temporary erasure registration unit for registering temporary erasure information indicating temporary erasure from the unit, and erasure for accepting approval indicating that the patient information has been erased from the storage unit for the registered temporary erasure information And an erasure information generation unit that generates erasure information indicating that the patient information has been formally erased from the storage unit for the temporary erasure information for which the approval has been accepted.

1 is a schematic configuration diagram showing an example of a schematic configuration of an erase certificate issuing apparatus according to the present embodiment and an erase certificate issuing system using the erase certificate issuing apparatus. The sequence diagram which showed the general | schematic operation | movement of the whole erasure certificate issuing system. The functional block diagram which shows the function of the erasure certificate issuing apparatus which concerns on this embodiment. The hardware block diagram which shows the structure of the erasure certificate issuing apparatus which concerns on this embodiment. 6 is a flowchart showing an erase certificate issuing process in which an erase certificate issuing device issues an erase certificate in the erase certificate issuing system according to the present embodiment. Explanatory drawing explaining an example when the deletion information output part which concerns on this embodiment outputs the deletion certificate which proves that the patient information about a patient was deleted.

  Hereinafter, an erasure certificate issuing apparatus (medical information processing apparatus) 100 according to the present embodiment will be described with reference to the accompanying drawings.

  FIG. 1 is a schematic configuration diagram illustrating an example of a schematic configuration of an erasure certificate issuing system 800 using the erasure certificate issuing apparatus 100 according to the present embodiment.

  As shown in FIG. 1, an erase certificate issuing system 800 includes an erase certificate issuing device (medical information processing device) 100, a modality 200, an image server 300, a workstation 400, an image interpretation device 500, a reservation device 600, a network 700, and the like. It is configured with.

  The erasure certificate issuing device 100 receives a request for erasing patient information from a patient or a patient's family, and the patient information of the patient, for example, imaging data of the modality 200 connected via the network 700 or the image server 300. The image data stored in is deleted.

  Here, devices other than the erase certificate issuing device 100 connected to the erase certificate issuing system 800 via the network 700, specifically, the modality 200, the image server 300, the workstation 400, the image interpretation device 500, and the reservation device. 600 is referred to as an external connection device.

  In other words, in this embodiment, the erasure certificate issuing device 100 is stored in the storage unit of the external connection device via the network 700 by the operation of a doctor, laboratory technician, or medical staff in charge of the patient. Is supposed to be erased. When the deletion certificate issuing device 100 deletes the patient information, it first treats the deletion of the patient information as a temporary deletion. After that, for example, if the deletion is approved by a different doctor or a different laboratory technician, It is determined that the patient information has been deleted.

  Note that the erasure certificate issuing device 100 according to the present embodiment performs proof of erasure by erasing the patient information stored in the storage unit of the external connection device connected to the erasure certificate issuing system 800, In principle, it is assumed that the erasure certificate issuing device 100 has no patient information other than information related to erasure. Here, for example, when the function of the reservation device 600 is added to the erasure certificate issuance device 100, the erasure certificate issuance device 100 has a storage unit of the reservation device 600 that is an external connection device. In this case, it is assumed that patient information corresponding to patient information stored in the storage unit of the reservation apparatus 600 can be deleted. Details of the erasure certificate issuing device 100 will be described later.

  Patient information is information including the patient's name, gender, and age (date of birth), and further information such as information and images related to patient examinations such as examination date, examination site or examination location. Including data.

  The modality 200 is a medical system name used when classifying an apparatus (imaging apparatus) for imaging a subject. For example, the modality 200 includes an X-ray CT (Computed Tomography) apparatus, an MRI (Magnetic Resonance Imaging) apparatus (magnetic resonance diagnostic apparatus), an ultrasonic diagnostic apparatus, a nuclear medicine diagnostic apparatus, and the like. An X-ray CT apparatus is an imaging apparatus that scans an object using radiation or the like and processes it using a computer. An MRI apparatus is an apparatus that captures an image of the inside of a subject using a magnetic field and radio waves. The ultrasonic diagnostic apparatus is an image diagnostic apparatus that applies ultrasonic waves to a subject and visualizes the echoes. A nuclear medicine diagnostic device labels a reagent that accumulates in a specific lesion injected into a subject with a radioisotope, and γ-rays emitted from the reagent are detected by a detector such as a scintillation camera. An image diagnostic apparatus that detects and extracts a tomographic image of a human body including a lesion. In this embodiment, any device can be applied as the modality 200.

  The image server 300 is an image management server constituting a medical image management system (PACS: Picture Archiving and Communication System), and stores image data obtained by photographing a subject (patient) by the modality 200. It is a server that browses and manages.

  The workstation 400 converts the image data obtained by imaging the subject with the modality 200 and the image data stored in the image server 300 to perform a three-dimensional display by performing computer processing. It is a device that performs quantitative analysis.

  Interpretation apparatus 500 interprets the image data obtained by imaging the subject with modality 200 or the image data stored in image server 300 to create an opinion by interpreting the image. It is a device that creates reports based on findings.

  The reservation apparatus 600 is an apparatus for inputting an examination reservation for imaging a subject (patient) using the modality 200, and inputting changes in the schedule and contents of the examination reservation.

  The network 700 is a network for connecting terminals and devices connected to the erasure certificate issuing system 800 to each other.

(Overall outline operation)
FIG. 2 is a sequence diagram illustrating an overall schematic operation of the erasure certificate issuing system 800. In FIG. 2, reference numerals with numbers added to S indicate steps in the sequence diagram.

  Upon receiving a request for deleting patient information from a patient or a patient's family, the deletion certificate issuing device 100 searches for patient information stored in the deletion certificate issuing system 800 via the network 700. For example, when a doctor inputs an erasure request for patient information to the erasure certificate issuing device 100, the erasure certificate issuance device 100 searches whether the imaging data of the patient is stored in the storage unit of the modality 200 (patient Information search) is performed (step S001).

  In addition, when a deletion request for patient information is input from a doctor, the deletion certificate issuing device 100 searches whether the image data of the patient is stored in the storage unit of the image server 300 via the network 700 ( Patient information search) is performed (step S003).

  In addition, when a deletion request for patient information is input from a doctor, the deletion certificate issuing device 100 stores the image data of the patient that has been subjected to computer processing in the storage unit of the workstation 400 via the network 700. A search (patient information search) is performed (step S005).

  Further, when a deletion request for patient information is input from a doctor, the deletion certificate issuing device 100 searches whether the patient's findings and reports are stored in the storage unit of the image interpretation device 500 via the network 700. (Patient information search) is performed (step S007).

  In addition, when a deletion request for patient information is input from a doctor, the deletion certificate issuing apparatus 100 stores the examination reservation and examination contents of the patient in the storage unit of the reservation apparatus 600 via the network 700. A search (patient information search) is performed (step S009).

  When the imaging data of the patient is stored in the storage unit of the modality 200, the modality 200 deletes the imaging data and transmits a temporary deletion notification indicating the deletion to the deletion certificate issuing device 100. (Step S011).

  Similarly, when the image data of the patient is stored in the storage unit of the image server 300, the image server 300 deletes the image data and issues a temporary deletion notification indicating that the image has been deleted. It transmits to the apparatus 100 (step S013).

  Similarly, when the image data of the patient is stored in the storage unit of the workstation 400, the workstation 400 deletes the image data and issues a temporary deletion notification indicating the deletion. It transmits to the apparatus 100 (step S015).

  Similarly, when the image interpretation device 500 stores the patient's findings and reports in the storage unit of the image interpretation device 500, the image interpretation device 500 erases the image data and findings, and erases the temporary erase notification indicating that the image has been erased. The certificate is transmitted to the certificate issuing device 100 (step S017).

  Similarly, when the reservation apparatus 600 stores the examination reservation and examination contents of the patient in the storage unit of the appointment apparatus 600, the appointment apparatus 600 erases the examination reservation and examination contents and temporarily erases the data. The notification is transmitted to the erasure certificate issuing device 100 (step S019).

  The erasure certificate issuing device 100 performs a patient information erasure registration process based on each received temporary erasure notification (step S021). Specifically, the erasure certificate issuing device 100 receives each temporary erasure notification from the modality 200, the image server 300, the workstation 400, the image interpretation device 500, and the reservation device 600, and stores each temporary erasure notification for each temporary erasure notification. Approval indicating that it has been deleted from the department is received from a doctor or laboratory technician different from the doctor who requested the deletion. Then, the erasure certificate issuing apparatus 100 generates erasure information indicating that the erasure certificate issuance apparatus 100 has been formally erased from each storage unit.

  Next, the configuration of the erasure certificate issuing apparatus 100 according to the present embodiment will be described in detail.

  FIG. 3 is a functional block diagram showing functions of the erasure certificate issuing apparatus 100 according to the present embodiment.

  As shown in FIG. 3, the erasure certificate issuing device 100 includes an erasure request accepting unit 110, a patient information searching unit 120, a temporary erasure registration unit 130, an erasure approval accepting unit 140, an erasure information generating unit 150, and an erasure information output unit 160. A history information database 170, a temporary erasure certificate database 171, an erasure certificate database 172, and the like.

  The erasure request accepting unit 110 accepts a request for erasing patient information related to a patient. Specifically, a request for deleting patient information is received by a doctor in charge or a medical worker in charge of the patient.

  The patient information retrieval unit 120 retrieves (patient information retrieval) a storage unit of an externally connected device in which patient information corresponding to the received request for erasure is stored. Specifically, the patient information search unit 120 sends patient information corresponding to the erasure request to each storage unit such as the modality 200, the image server 300, the workstation 400, the image interpretation device 500, and the reservation device 600 via the network 700. Is searched to see if it is stored.

  Further, the erasure certificate issuing apparatus 100 includes a history information database 170. The history information database 170 stores history information indicating that patient information is output to the external device when the patient information is output to the external device. Here, the external device is a storage medium such as a DVD (Digital Versatile Disc) or a USB (Universal Serial Bus). For example, when image data stored in the workstation 400 is stored in a DVD or findings and reports stored in the image interpretation device 500 are stored in a USB, those histories are acquired at a predetermined timing, It is stored in the history information database 170 as history information.

  The patient information search unit 120 searches the history information database 170 for patient information corresponding to the received request for erasure, and when the history corresponding to the patient information is searched, for example, the workstation 400 History information in which image data stored in the DVD is stored in a DVD is displayed on the display unit, or history information in which findings and reports stored in the image interpretation device 500 are stored in USB is displayed on the display unit. it can. Note that the history information database 170 only needs to constitute a storage memory, and it is only necessary to acquire history information for each device via the network 700 and store the history information for each device. The history information database 170 is not an essential component, and can be provided in the erasure certificate issuing apparatus 100 as desired.

  The temporary deletion registration unit 130 deletes the patient information stored in the storage unit when the received patient information is stored in the storage unit of any of the external connection devices based on the search result of the patient information. Thus, a temporary erasure certificate (temporary erasure information) indicating that the patient information has been temporarily erased from the storage unit is registered.

  Specifically, the temporary erasure registration unit 130 acquires the patient information search result from the external connection device via the network 700, and the patient information is stored in the storage unit of any of the external connection devices Then, an erasing program for erasing the patient information stored in the storage unit is transmitted to the apparatus. When the patient information is deleted in the storage unit of the external connection device, a temporary deletion notification is transmitted from the external connection device to the temporary deletion registration unit 130. Thereby, the temporary erasure registration unit 130 registers the temporary erasure certificate (temporary erasure information) in the temporary erasure certificate database 171.

  Further, the present embodiment is not limited to this. For example, the patient information search unit 120 deletes personal information (for example, imaging data, image data, or a report) corresponding to the received patient information. May be transmitted simultaneously. In this case, when the deletion program deletes the personal information corresponding to the patient information, a response indicating a temporary deletion notification is returned to the deletion certificate issuing device 100. Thereby, the temporary erasure registration unit 130 can register the temporary erasure certificate in the temporary erasure certificate database 171.

  The temporary deletion certificate database 171 stores a temporary deletion certificate corresponding to the temporary deletion notification.

  The erasure approval accepting unit 140 accepts an approval indicating that the patient information has been erased from the storage unit for the registered temporary erasure certificate. Specifically, the erasure approval acceptance unit 140 has confirmed that the patient information has been erased from the storage unit from a doctor different from the doctor who requested the erasure of patient information or a plurality of different medical workers. Approval is meant to mean. This approval should be approved by at least one doctor who is different from the doctor who requested the deletion of patient information or a medical worker who is different from the medical worker who requested the deletion of patient information. The number required for approval is not limited. Therefore, the erasure approval acceptance unit 140 can be set to accept a plurality of different approvals.

  The erasure information generation unit 150 receives an erasure certificate (erase information) indicating that the patient information has been formally erased from the storage unit for the temporary erasure certificate (temporary erasure information) that has been accepted. It is designed to generate. Specifically, when the erasure information generation unit 150 receives a predetermined approval for the temporary erasure certificate stored in the temporary erasure certificate database 171 in the erasure approval reception unit 140, the erasure information generation unit 150 officially displays the patient information. An erasure certificate is generated indicating that is erased. Then, the erasure information generation unit 150 stores the generated erasure certificate in the erasure certificate database 172.

  The erasure information output unit 160 outputs the generated erasure certificate (erase information) in a displayable manner. Specifically, when the deletion request receiving unit 110 receives a request for deleting patient information and a deletion certificate associated with the patient information is generated, the deletion information output unit 160 displays the generated deletion certificate. Is output.

  The erasure information output unit 160 may be configured to display the erasure certificate on the display unit of the erasure certificate issuing device 100, or may be printed (issued) as a certificate on a paper medium. Further, it may be in the form of being transmitted to the patient's family by electronic data as PDF (Portable Document Format). Further, the erasure information output unit 160 may be configured to output the contents of the erasure certificate as voice information.

  The erasure certificate database 172 stores the erasure certificate (erase information) generated by the erasure information generation unit 150.

  Next, the hardware configuration of the erasure certificate issuing apparatus 100 according to the present embodiment will be described.

  FIG. 4 is a hardware block diagram showing the configuration of the erasure certificate issuing apparatus 100 according to the present embodiment.

  As shown in FIG. 4, the erasure certificate issuing device 100 includes a CPU (Central Processing Unit) 181, a ROM (Read Only Memory) 182, a RAM (Random Access Memory) 183, a network interface unit 184, an operation unit 185, a display unit. 186, a storage unit 187, an internal bus 188, and the like.

  The CPU 181 can implement the functions of various programs by loading various programs stored in the ROM 182 into the RAM 183 and expanding the programs. The RAM 183 is used as a work area (working memory). The ROM 182 stores various programs. The various programs stored in the ROM 182 include programs for realizing the functions of the erasure certificate issuing apparatus 100 shown in FIG.

  The network interface unit 184 searches the storage unit of the external connection device such as the modality 200, the image server 300, or the workstation 400 from the erasure certificate issuing device 100 via the network 700 (FIG. 1). Or an interface unit for receiving a provisional deletion notification from an external connection device such as the modality 200, the image server 300, or the workstation 400.

  The operation unit 185 is configured by a temporary erasure prover stored in each database of the erasure certificate issuing device 100, an input device that performs display operation of the erasure certificate, and inputs, edits, and registers a program. ing. Specifically, the operation unit 185 is configured by a keyboard, a mouse, and the like.

  The display unit 186 is configured as a display unit that displays patient information for which an erasure request has been received, or displays patient information for which approval has been accepted, an erasure certificate, or the like. The display unit 186 includes a liquid crystal display, a monitor, and the like.

  The storage unit 187 is a storage unit that configures a storage memory, and includes a RAM, a hard disk, and the like. In the present embodiment, the storage unit 187 is, for example, a history information database 170 that stores history information that outputs patient information to the outside, a temporary deletion certificate database 171 that stores patient information of temporary deletion notification, or an deletion certificate. The erasure certificate database 172 is stored.

  Thus, in the present embodiment, the storage unit 187 constitutes the history information database 170, the temporary erasure certificate database 171, and the erasure certificate database 172, and also by executing the program stored in the ROM 182. Each function of the erasure certificate issuing device 100 shown in FIG. 3 can be realized.

(Erase certificate issuance process)
Next, the operation of the erase certificate issuing process of the erase certificate issuing apparatus 100 according to the present embodiment will be described.

  FIG. 5 is a flowchart showing an erase certificate issuing process in which the erase certificate issuing apparatus 100 issues an erase certificate in the erase certificate issuing system 800 according to the present embodiment. In FIG. 5, reference numerals with numerals added to S indicate steps of the flowchart. This erase certificate issuing process includes an erase registration process performed by the erase certificate issuing apparatus 100 shown in step S021 of FIG.

  First, in step S101, when a doctor or medical worker requests deletion of patient information via the operation unit 185 such as a keyboard or a mouse, the deletion request receiving unit 110 requests deletion of patient information related to the patient. Accept.

  In step S103, the patient information search unit 120 searches the storage unit of the externally connected device in which the patient information corresponding to the deletion request received by the deletion request reception unit 110 is stored (patient information search). Specifically, the patient information search unit 120 responds to an erasure request to the storage unit of an external connection device such as the modality 200, the image server 300, the workstation 400, the image interpretation device 500, or the reservation device 600 via the network 700. Search for patient information to be stored.

  Further, the erasure certificate issuing device 100 according to the present embodiment includes a history information database 170. The history information database 170 stores history information indicating that the patient information is output to the external device when the patient information is output to the external device. Specifically, when image data stored in the workstation 400 is stored in a DVD or findings stored in the image interpretation device 500 are stored in a USB, history information indicating the history is stored in a predetermined format. It is acquired at the timing and stored in the history information database 170.

  As a result, the patient information search unit 120 searches the history information database 170 for patient information corresponding to the received deletion request, and when the history corresponding to the patient information is searched, deletes the corresponding history information. It can be displayed by the information output unit 160.

  In step S105, when the temporary deletion registration unit 130 stores the received patient information in the storage unit of any of the external connection devices based on the search result of the patient information, the patient stored in the storage unit. The information is deleted, and a temporary deletion certificate indicating that the patient information has been temporarily deleted from the storage unit is registered.

  For example, the temporary erasure registration unit 130 acquires a search result of patient information from the external connection device via the network 700, and stores the patient information when the patient information is stored in the storage unit of any of the external connection devices. An erasure program for erasing patient information stored in the unit is transmitted to the apparatus. When the patient information is deleted in the storage unit of the external connection device, a temporary deletion notification is transmitted from the external connection device to the temporary deletion registration unit 130, and the temporary deletion registration unit 130 receives the temporary deletion from the external connection device. Receive notifications. As a result, the temporary erasure registration unit 130 registers the temporary erasure certificate (temporary erasure information) in the temporary erasure certificate database 171.

  In addition, as described above, when the patient information search unit 120 simultaneously transmits an erasure program for erasing personal information corresponding to patient information, and the erasure program erases personal information corresponding to patient information, a temporary erasure notification is issued. May be sent back to the erasure certificate issuing apparatus 100. Accordingly, the temporary erasure registration unit 130 can register the temporary erasure certificate (temporary erasure information).

  In step S107, the erasure approval acceptance unit 140 accepts an approval indicating that the patient information has been erased from the storage unit for the registered temporary erasure certificate. Specifically, the erasure approval reception unit 140 receives patient information from a doctor different from the doctor who requested the deletion of patient information or a medical worker different from the medical worker who requested the deletion of patient information. Accepts an approval meaning that it has been confirmed that it has been deleted from the storage unit of the external connection device.

  For example, the erasure approval acceptance unit 140 displays the temporary erasure certificate stored in the temporary erasure certificate database 171 on the display unit 186, and stores patient information (imaging image) stored in the storage unit of the modality 200 or the image server 300. Data, image data, and the like) can be confirmed via the network 700. The erasure approval acceptance unit 140 according to the present embodiment can accept the approval for the temporary erasure certificate, but is limited to a form in which the temporary erasure certificate is displayed on the display unit 186. It is not a thing. Specifically, the erasure approval acceptance unit 140 has already erased patient information (imaging data, image data, etc.) from the storage unit of the external connection device via the network 700 to the approver who performs the approval. The state may be directly confirmed.

  This approval should be approved by at least one doctor who is different from the doctor who requested the deletion of patient information or a medical worker who is different from the medical worker who requested the deletion of patient information. The number required for approval is not limited. Therefore, the erasure approval acceptance unit 140 can be set separately so as to accept a plurality of different approvals for one temporary erasure certificate.

  In step S109, the erasure information generation unit 150 deletes an erasure certificate (erase) indicating that the patient information has been formally erased from the storage unit for the temporary erasure certificate (temporary erasure information) that has been accepted. Information). Specifically, the erasure information generation unit 150, when the erasure approval acceptance unit 140 accepts a predetermined approval for the temporary erasure certificate, the erasure certificate indicating that the patient information has been officially erased. Is generated. The erasure information generation unit 150 stores the generated erasure certificate in the erasure certificate database 172.

  In step S111, the erasure information output unit 160 outputs the generated erasure certificate so that it can be displayed. Specifically, the erasure information generation unit 150 receives a request for erasing patient information in the erasure request reception unit 110, and when an erasure certificate associated with the patient information is generated, the erasure information generation unit 150 deletes the erasure certificate as erasure information. Output to the output unit 160.

  For example, the erasure certificate issuing device 100 displays the erasure certificate on the erasure information output unit 160 and prints (issues) the erasure certificate, or transmits the erasure certificate to the patient's family as a document file. Then, an erasure certificate indicating that patient information has been erased in the erasure certificate issuing system 800 can be sent to the patient's family or the like.

  FIG. 6 is an explanatory diagram illustrating an example when the deletion information output unit 160 according to the present embodiment outputs an deletion certificate proving that the patient information about the patient A has been deleted.

  As shown in FIG. 6, the erasure information output unit 160 can display the erasure certificate on the display unit 186 of the erasure certificate issuing device 100. In this case, A is described as the patient name in this erasure certificate, and October 10, 2012 is described as the erasure date. In addition, as a doctor in charge of the patient A, the name of the doctor B is described in the item of the person in charge.

  Further, the name of laboratory technician C is described as an approver who has approved that patient information of patient A has been deleted. In addition, as the approval status, the fact that the erasure is completed is described.

  Here, a remarks column is provided in the bottom column of the erasure certificate. In the remarks column, information on erasure can be described as additional items (reference information). For example, the patient information search unit 120 searches the history information stored in the history information database 170, and the image data stored in the workstation 400 or the image interpretation device 500 is stored (output) on a DVD or USB. If is recorded, the contents are described. The history described in the remarks column is not an essential element for the description of the erasure certificate. The patient information search unit 120 outputs (displays) the history information independently via the erasure information output unit 160 (display). ).

  Further, the erasure information output unit 160 is not limited to the form in which the erasure certificate is displayed on the display unit 186 of the erasure certificate issuing apparatus 100. For example, the erasure information output unit 160 is configured to output the contents of the erasure certificate as audio information. There may be.

  In this case, for example, the erasure information generation unit 150 generates erasure information indicating that the erasure information has been officially erased, using the voice information, so that the erasure information output unit 160 “forms the patient information of patient A is officially erased. It can be output by voice.

  Thereby, the doctor and medical staff who performed approval can confirm the fact erased formally auditorily. In addition, when a patient's family witnesses an erase request for patient information, the erasure information is generated as voice information, so that the patient's family and the approver can be simultaneously proved.

  As described above, in the erasure certificate issuing system 800 according to the present embodiment, the erasure certificate issuing device 100 searches for patient information stored in a storage unit of an external connection device such as the modality 200 or the image server 300. And when patient information is memorize | stored in the memory | storage part of those external connection apparatuses, the patient information is deleted. Upon receipt of the provisional erasure notification indicating that the patient information has been erased, the erasure certificate issuing apparatus 100 performs provisional erasure registration, and is different from a doctor (doctor or medical worker) who is different from the doctor who requested the patient information erasure Accept approval. Upon receiving a predetermined approval, the erasure certificate issuing device 100 generates erasure information indicating that the patient information has been officially erased, and outputs an erasure certificate or the like.

  Thereby, the erase certificate issuing device 100 according to the present embodiment can erase the patient information stored in the storage unit of the external connection device connected to the erase certificate issuing system 800 via the network 700. Therefore, an erasure certificate indicating that the patient information of the patient has been appropriately erased can be output to the patient, the patient's family, and the like.

  As described above, according to the erasure certificate issuing device 100, an erasure certificate or the like indicating that the patient information has been properly erased is met in response to a request for appropriately erasing patient information that has been expected in the past. Can be output.

  Although the deletion certificate issuing device 100 according to the present embodiment is configured to delete the patient information when the deletion request receiving unit 110 receives the deletion request of the patient information, it is not limited to this. Specifically, when a second erasure request for a patient information erasure request for the same patient is received and the patient information is registered in the erasure certificate database 172, the patient information is An erasure certificate relating to the patient information may be output as it has already been formally erased.

  In addition, even when a second deletion request for patient information deletion requests regarding the same patient is received, the processing shown in steps S101 to S111 may be executed again. In this case, for example, in a certain image server 300, it is assumed that unexpected patient information may be restored due to image data being restored. The certificate issuing device 100 may execute the deletion certificate issuing process from step S101 each time.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and gist of the invention, and are also included in the invention described in the claims and the equivalents thereof.

  Further, in the embodiment of the present invention, each step of the flowchart shows an example of processing that is performed in time series in the order described. The process to be executed is also included.

100 Erase Certificate Issuing Device 110 Erase Request Accepting Unit 120 Patient Information Searching Unit 130 Temporary Erase Registration Unit 140 Erase Approval Accepting Unit 150 Erase Information Generating Unit 160 Erase Information Output Unit 170 History Information Database 171 Temporary Erase Certificate Database 172 Erase Certificate Database 181 CPU
182 ROM
183 RAM
184 Network interface unit 185 Operation unit 186 Display unit 187 Storage unit 188 Internal bus 200 Modality 300 Image server 400 Workstation 500 Interpretation device 600 Reservation device 700 Network 800 Erase certificate issuance system

Claims (5)

An erasure request accepting unit that accepts a request for erasure of patient information related to a patient;
A patient information search unit for searching a storage unit of an external device in which patient information corresponding to the received request for erasure is stored;
When the received patient information is registered in the storage unit based on the search result of the patient information, the patient information registered in the storage unit is deleted, and the patient information is temporarily deleted from the storage unit. A temporary erasure registration unit for registering temporary erasure information indicating that,
For the registered temporary erasure information, an erasure approval acceptance unit that accepts approval indicating that the patient information has been erased from the storage unit;
An erasure information generating unit that generates erasure information indicating that the patient information has been formally erased from the storage unit, with respect to the provisional erasure information that has received the approval;
A medical information processing apparatus comprising: An erasure information output unit for outputting the generated erasure information in a displayable manner;
The erasure information generation unit
The erasure request reception unit receives a request for erasure of patient information, and when the erasure information associated with the patient information is generated, the erasure information output unit outputs the generated erasure information. The medical information processing apparatus according to 1. When the patient information is output to an external device, further comprising a history information storage unit that stores history information indicating that the patient information is output to the external device,
The patient information search unit
The patient information corresponding to the accepted erasure request is searched from the history information storage unit, and when the history information corresponding to the patient information is searched, the history information is output to the erasure information output unit. Item 3. The medical information processing apparatus according to Item 2. The erasure approval acceptance unit
The medical information processing apparatus according to any one of claims 1 to 3, wherein a plurality of different approvals are received. The patient information is
The medical information processing apparatus according to any one of claims 1 to 4, wherein the information includes at least a name, sex, and age of the patient.

Images