JP2002279062A - System and method for managing personal information - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal information management system and a personal information managing method which enable commonage of personal information while ensuring high security on a network. SOLUTION: When a hospital terminal 11 requests medical sheet information from a server 14, an individual data confirmer corresponding to the medical sheet information is read from the server 14, and the medical sheet information can be displayed on the hospital terminal 11 on the basis of results obtained by collating the individual data confirmer with an individual data confirmer of a patient IC(integrated circuit) card 15 inserted into the hospital terminal 11. The server 14 is made to generate an individual data confirmer by arithmetic processing using personal information outputted from the hospital terminal 11 and the inherent information of the patient IC card 15, to store the individual data confirmer while associated with the personal information outputted from the hospital terminal 11, and also to transmit the individual data confirmer to the patient IC card 15 to store.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an improvement of a personal information management system and a personal information management method for sharing personal information such as chart information.

[0002]

2. Description of the Related Art As is well known, for example, in a general hospital or the like, there are many cases where one patient receives medical treatment across a plurality of medical departments. In this case, the patient's medical record information
It needs to be shared by doctors in each department.

For this reason, conventionally, for example, Japanese Patent Laid-Open No. 6-2
As described in Japanese Patent No. 74472, patient information is stored in an IC (Integrated Circuit) card, and terminal devices for writing and reading data to and from the IC card are installed in each department. A system has been developed that allows patient information to be shared between departments via an IC card.

However, the current storage capacity of IC cards is still inadequate. For example, a large amount of medical record information of long-term hospitalized patients, image data obtained by radiography or ultrasonic imaging, and the like are stored in high quality. However, there is a problem that it is not suitable for practical use.

On the other hand, in recent years, a client / server system has been put into practical use as a means for managing personal information, and it has been considered to use the client / server system for managing medical record information.

In this client / server system, data is protected by setting an access right to the data. However, there are many points that are still unsuitable for practical use in terms of security. In order to disclose and share medical record information on a network, there is much room for improvement so that falsification and leakage cannot be performed.

[0007]

SUMMARY OF THE INVENTION Accordingly, the present invention has been made in view of the above circumstances, and has an extremely good personal information management which can share personal information with high security on a network. It aims to provide a system and a personal information management method.

[0008]

A personal information management system according to the present invention is connected to an information management apparatus main body in which personal information of a plurality of persons is stored, and is communicably connected to the information management apparatus main body via a network. A plurality of terminal devices, and a portable storage medium attached to the terminal device so as to enable data communication, and read personal information from the information management device main body via the terminal device equipped with the portable storage medium. It is intended for things.

[0009] Then, a storage means for storing the personal data identifier generated based on each personal information so as to correspond to each of the personal information of a plurality of persons, and the personal information is transmitted from the terminal device to the information management device main body. When requested, means for reading the personal data confirmer stored in association with the requested personal information from the storage means, and the read personal data confirmer and the portable storage medium attached to the terminal device. Collating means for collating the stored personal data verifier;
Based on the result of the collation, there is provided management means for enabling the requested personal information to be displayed on the terminal device.

[0010] Also, the personal information management system according to the present invention comprises an information management device main body in which personal information of a plurality of persons is stored, and a plurality of data management devices connected to the information management device main body via a network. A terminal device, and a portable storage medium attached to the terminal device so as to be able to perform data communication, via the terminal device equipped with the portable storage medium,
It is intended to write personal information in the information management device body.

[0011] Then, when writing personal information into the information management device main body, a generating means for generating a personal data confirmer using at least the personal information to be written, and associating the generated personal data confirmer with the personal information. A storage means for storing and a means for writing the generated personal data identifier to a portable storage medium are provided.

Further, the personal information management method according to the present invention is characterized in that a plurality of personal information management apparatuses each storing personal information of a plurality of persons and a plurality of personal information management apparatuses connected to the information management apparatus main bodies via a network so as to be capable of data communication. A method for reading personal information from an information management device main body via a terminal device having a terminal device and a portable storage medium attached to the terminal device so as to enable data communication, and having the portable storage medium attached. I have.

When personal information is requested from the terminal device to the information management device main body, the personal information is stored in association with the personal information requested from the information management device main body, and the personal data confirmation generated based on the personal information is performed. The terminal reads out the child and checks it against the personal data checker stored in the portable storage medium mounted on the terminal device, and based on the result of the check, enables the terminal device to display the requested personal information. Things.

Further, the personal information management method according to the present invention provides an information management apparatus main body in which personal information for a plurality of persons is stored, and a plurality of data management apparatuses connected to the information management apparatus main body via a network so as to be able to perform data communication. A method for writing personal information to an information management device main body via a terminal device having a terminal device and a portable storage medium mounted on the terminal device so as to enable data communication, and having the portable storage medium mounted thereon. I have.

When writing personal information to the information management device main body, a personal data identifier is generated using at least the personal information to be written output from the terminal device, and is associated with the personal information output from the terminal device. In addition to the storage, the generated personal data identifier is written in a portable storage medium.

According to the above-described configuration and method, it is possible to share personal information with high security on a network.

[0017]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 schematically shows a chart information management system described in this embodiment.

In this chart information management system, a plurality of hospital terminals 11 and a plurality of pharmacy terminals 12 each constituted by a terminal device such as a personal computer are connected to a network 13, respectively. The configuration is such that the server 14 as the main body is connected.

Among them, the hospital terminal 11 is installed for each of a plurality of hospitals or for each of a plurality of medical departments in the same hospital. The pharmacy terminal 12 is installed for each of a plurality of pharmacies.

Further, the server 14 stores all the medical record information for each of a large number of patients. The medical record information includes, for example, information on individual patients, information on medical treatment history, information on medical treatment contents, information on medication, information on medical examination results, information on medical doctors treated, and the like.

The hospital terminal 11 and the pharmacy terminal 1
2 is a patient IC card 15 as a portable information storage medium owned by each patient and a doctor I owned by each doctor.
The C card 16 is selectively mounted. And the hospital terminal 11, the pharmacy terminal 12, the server 1
4, between each other patients IC card 15 and the physician IC card 16, which enables data communication arbitrarily.

Here, FIGS. 2A and 2B show a detailed configuration of the patient IC card 15. Since the doctor IC card 16 has the same configuration as the patient IC card 15, its description is omitted.

That is, as shown in FIG. 2 (a), the patient IC card 15 is obtained by attaching a signal processing IC 18 to a card body 17 formed in a size of approximately a business card. It can be easily carried.

The signal processing IC 18 has the structure shown in FIG.
As shown in (b), C for controlling the entire system
A ROM (Rea) is stored in a PU (Central Processing Unit) 19.
d Only Memory) 20, RAM (Random Access Memor)
y) 21, EEP (Electrically Erasable Programmabl)
e) The configuration is such that a ROM 22 and an I / O (Input / Output) controller 23 are connected.

The ROM 20 stores a control program executed by the CPU 19. Also, RA
M21 functions as a work memory of the CPU 19, and stores primary data. Further, the I / O controller 2
Reference numeral 3 functions as a control interface for the CPU 19 to communicate with the hospital terminal 11 or the pharmacy terminal 12 on which the patient IC card 15 is mounted.

The EEPROM 22 contains a patient IC.
In the case of the card 15, in addition to personal information such as the patient's name, date of birth, address, and telephone number, a password, a patient identifier, a secret key, a personal data identifier, and unique information are stored, as will be described in detail later. ing. Further, the EEPROM 22 can also store information on medical care storage, examination results, and the like.

In the case of the doctor IC card 16, the EEP
The ROM 22 stores a password, a doctor identifier, a secret key, and the like, in addition to personal information such as a doctor's name, a hospital name, a department, and the like.

Next, FIG. 3 shows a detailed configuration of the hospital terminal 11. Note that the pharmacy terminal 12 has the same configuration as the hospital terminal 11, and a description thereof will be omitted.

That is, the hospital terminal 11 is provided with an MPU (Micro Processing Uniform) for controlling the entire system.
t) 24, ROM 25, RAM 26, display device 27,
Keyboard 28, IC card I / F (Inter / Face) 2
9, the communication device 30 is connected.

The ROM 25 stores a control program to be executed by the MPU 24. Also, RA
M26 functions as a work memory of the CPU 24, and stores primary data.

Further, the display device 27 employs, for example, a liquid crystal display screen or the like, and displays an operating state of the hospital terminal 11 and a screen for prompting a predetermined input operation. Also, the keyboard 28
It functions to allow the patient or doctor to perform a predetermined input operation.

The IC card I / F 29 is
The PU 24 functions as a control interface for communicating with the patient or doctor IC cards 15 and 16 mounted on the hospital terminal 11. In addition, the communication device 3
0 functions as a control device for the MPU 24 to communicate with the server 14 via the network 13.

The schematic operation of the chart information management system configured as described above will be described with reference to the flowchart shown in FIG. First, when started (step S11), in step S12, the doctor causes the hospital terminal 11 that he / she wants to use to perform a doctor's confirmation process.

By this confirmation processing, the hospital terminal 11
When it is confirmed that the user is a legitimate physician who is permitted to use, the hospital terminal 11 permits the access of the physician and accepts the input operation of the physician.

Next, in step S13, the patient causes the hospital terminal 11 that he / she wants to use to perform a patient confirmation process. When the confirmation processing confirms that the patient is a legitimate patient who is permitted to use the hospital terminal 11, the hospital terminal 11 permits the access of the patient and accepts the input operation of the patient. become.

Thereafter, the doctor operates the hospital terminal 11 in step S14 to request the server 14 for the patient's medical record information. In this case, the server 14 performs a predetermined authentication process on the hospital terminal 11 that has requested the medical record information and the patient IC card 15 attached to the hospital terminal 11, and is a legitimate hospital terminal 11 and legitimate. When it is recognized that the patient IC card 15 is used, the requested chart information is sent to the hospital terminal 11.

Next, in step S15, the doctor examines the patient while looking at the medical record information displayed on the display device 27 of the hospital terminal 11. In this case, it is also possible to print the chart information.

When the medical examination is completed, the doctor operates the hospital terminal 11 in step S16 to request the server 14 to add the chart information. In this case, although the details will be described later, when the server 14 receives the record information for the additional record, the server 14 generates a personal data confirmer based on the medical record information, and generates the personal data confirmer based on all the medical record information including the additional record. And the generated personal data identifier is transmitted to the patient IC card 15 via the hospital terminal 11.
To be stored in the EEPROM 22 and the process is terminated (step S17).

Here, FIG. 5 shows the processing operation of step S12 of the flowchart shown in FIG. 4 in detail.
First, the doctor attaches his / her doctor IC card 16 to the hospital terminal 11 that he / she wants to use. Then, the hospital terminal 11 requests the doctor to input a password on the screen of the display device 27.

When the doctor inputs a password via the keyboard 28, the password is input to the doctor IC card 16 by the verify command from the hospital terminal 11.
And collated in the doctor IC card 16. The doctor IC card 16 outputs a status indicating the collation result, and the hospital terminal 11 displays access permission to the doctor on the screen of the display device 27 when the status is normal.

Thereafter, the hospital terminal 11 issues a read command to the doctor IC card 16 requesting a doctor identifier. Then, the doctor IC card 16 outputs the doctor identifier to the hospital terminal 11 based on the read command, and the hospital terminal 11 stores the inputted doctor identifier, where
The doctor's confirmation processing by the hospital terminal 11 is completed.

Next, FIG. 6 shows the processing operation of step S13 of the flowchart shown in FIG. 4 in detail. First, the patient attaches his / her patient IC card 15 to the hospital terminal 11 that he / she wants to use. Then, the hospital terminal 11 requests the patient to input a password on the screen of the display device 27.

When the patient inputs a password via the keyboard 28, the password is entered into the patient IC card 15 by the verify command from the hospital terminal 11.
And is collated in the patient IC card 15. The patient IC card 15 outputs a status indicating the collation result, and the hospital terminal 11 displays access permission to the patient on the screen of the display device 27 when the status is normal.

Thereafter, the hospital terminal 11 generates a read command requesting the patient IC card 15 for a patient identifier. Then, the patient IC card 15 outputs the patient identifier to the hospital terminal 11 based on the read command, and the hospital terminal 11 stores the inputted patient identifier, where
The patient confirmation processing by the hospital terminal 11 is completed.

In this patient confirmation process, the hospital terminal 11 requests the patient to input a password, and permits access when the password verification result is normal, that is, the portion surrounded by a dotted line in FIG. Is not always necessary, and may be deleted in some cases for the convenience of the patient.

Next, FIG. 7 shows the processing operation of step S14 of the flowchart shown in FIG. 4 in detail. First, the hospital terminal 11 requests the server 14 for medical record information of a predetermined patient.

When requesting this chart information, the hospital terminal 1
1 sends to the server 14 the patient identifier, the doctor identifier, and the terminal identifier of the hospital terminal 11 itself. This allows
The server 14 can determine from which hospital terminal 11 the request is made and which doctor is operating.

At this time, the server 14 stores, as logs, the date of access, the terminal identifier of the hospital terminal 11 that has accessed, the doctor identifier of the accessing doctor, the patient identifier of the patient who has requested the medical record information, and the like. Remember.

After that, the server 14 searches for the terminal key K from the terminal identifier, and uses the terminal key K to encrypt the challenge data X of the random number generated by itself as g ′ = f (X, K). An operation is performed, and the operation result g 'is stored.

The server 14 sends the generated challenge data X to the hospital terminal 11. The hospital terminal 11 performs an encryption operation of g = f (X, K) on the challenge data X supplied from the server 14 using the terminal key K of the hospital terminal 11 and returns the operation result g to the server 14. I do.

Then, the server 14 collates its own operation result g 'with the operation result g at the hospital terminal 11, and if they match, judges that the access is from a valid hospital terminal 11, The access from the hospital terminal 11 is permitted, and the authentication processing of the hospital terminal 11 by the server 14 is completed.

Thereafter, the server 14 sends the personal data confirmer stored together with the requested chart information to the patient IC card 1 attached thereto via the hospital terminal 11.
5

Then, in the patient IC card 15, the C
The PU 19 collates the personal data verifier supplied from the server 14 with the personal data verifier stored in its own EEPROM 22 and returns the verification result to the server 14 via the hospital terminal 11. Then, the authentication processing of the patient IC card 15 by the server 14 is completed.

Then, the server 14 stores the patient IC card 1
If the collation result returned from 5 indicates that both personal data identifiers match, the requested chart information is sent to the hospital terminal 11. This allows the doctor to view the requested medical record information on the display device 27 of the hospital terminal 11.

In this case, upon authentication processing of the patient IC card 15 by the server 14, the personal data confirmer sent by the server 14 is compared inside the patient IC card 15, that is, the EEPR of the patient IC card 15 is used.
Since the personal data identifier stored in the OM 22 is not output to the outside of the patient IC card 15, security can be enhanced.

In this way, the patient is examined while looking at the medical record information requested by the doctor, and when the examination is completed,
As shown in step S16 in FIG. 4, the doctor newly creates additional medical record information on the hospital terminal 11, and requests the server 14 to add additional medical record information. As a result, the additional medical record information is sent to the server 14 and accumulated.

In this case, the doctor stores his / her own electronic signature in the server 14 together with the chart information to be added. This makes it possible to clarify which doctor has performed the consultation.

At this time, a doctor-specific secret key is stored in the doctor IC card 16, and a signature that can be created only with this secret key is attached to the additional medical record information. As a method for creating this digital signature, a public key cryptosystem is used.

The doctor sends the prescription information to the hospital terminal 1.
Enter 1 Then, the hospital terminal 11 operates to write the prescription information in the server 14 and the patient IC card 15.

Here, when the server 14 receives the added medical record information, it based on the medical record information, the prescription information, the electronic signature of the doctor, etc., and the unique information stored in the patient IC card 15, the new information is obtained. Generate a unique personal data identifier.

The newly generated personal data identifier is stored in the server 14 in association with all the chart information including the additionally recorded data, and is transmitted to the patient IC card 15 via the hospital terminal 11. And the EEPROM2
2 is rewritten with the personal data confirmer stored in step 2.

FIG. 8 shows in detail the operation of creating such a personal data confirmer. First, the server 14
Based on the patient identifier supplied from the patient IC card 15, the public key L of the patient is retrieved from the database.

The server 14 uses the public key L to generate a session key Y to be used only in this session.
Then, an encryption operation of h = f (Y, L) is performed to perform encryption processing, and the encrypted session key h is transmitted to the patient IC card 15 via the hospital terminal 11.

Then, the patient IC card 15 is stored in the server 1
4 by using the secret key to decrypt the encrypted session key h supplied from 4 to extract the session key Y, encrypt the unique information stored in the EEPROM 22 with the extracted session key Y, and It is sent to the server 14 via the server.

The server 14 extracts the patient's unique information by decrypting the encrypted unique information supplied from the patient IC card 15 using the session key Y, and extracts this unique information and the above-mentioned additional medical record information. , A new personal data identifier is generated based on the prescription information and the electronic signature of the doctor.

As shown in FIG. 9, the generation of the personal data identifier is performed by a hash function operation unit 31 provided in the server 14 as a one-way function. This is performed by inputting a signature or the like and patient-specific information, and executing a hash function operation.

The personal data verifier created in this way is stored in the server 14 and encrypted by using the session key Y.
Is sent to the patient IC card 15 via the.

Then, the patient IC card 15 decrypts the received personal data verifier using the session key Y and writes it in the EEPROM 22, where the new personal data verifier is generated, the server 14 and the patient IC
The storage in the card 15 is performed.

Then, the fact that a new personal data identifier has been sent from the server 14 to the patient IC card 15,
This signals the end of access to the server 14 for one piece of chart information.

Here, if the chart information stored in the server 14 has been tampered with, the personal data identifier stored in the patient IC card 15 and the server 14
The personal data verifier added to the medical record information stored in the database makes it possible to discover that the medical record information has been falsified. In addition, since the unique information (secret key) existing only in the patient IC card 15 is used to generate the personal data confirmer, it cannot be created by a third party.

The patient who has completed the examination in this way goes to the pharmacy with his own patient IC card 15 and attaches the patient IC card 15 to the pharmacy terminal 12. Then, the pharmacy terminal 12 reads the patient identifier from the patient IC card 15, adds its own terminal identifier, and
4 requests medical record information.

In this case, the server 14 performs the authentication process described above with reference to FIG. 7 on the pharmacy terminal 12 and the patient IC card 15 and then, based on the supplied terminal identifier, Since it is possible to recognize that the access is from the pharmacy 12, only the prescription information required at the pharmacy, for example, is transmitted to the pharmacy terminal 12. This makes it possible to prevent unnecessary leakage of personal information.

In a pharmacy that does not have a terminal that can access the server 14, it is possible to read out prescription information stored in the patient IC card 15 with a card reader and prepare a medicine.

Next, FIG. 10 shows a modification of the above embodiment. In the description, the same parts as those in FIG. 1 are denoted by the same reference numerals, and the telephone 32 at the patient's home is connected to the network 13 so that the patient can make a hospital reservation using the telephone 32. is there.

First, the patient accesses the server 14 via the telephone 32 at home, and inputs his / her patient identifier by key operation of the telephone 32 in accordance with voice guidance from the server 14. Then, the server 14 searches the medical record information of the patient based on the input patient identifier.

Next, the patient inputs the reservation information including the hospital he / she wants to visit and the date / time he / she wants to make a reservation by key operation of the telephone 32 in accordance with the voice guidance from the server 14. Then, the server 14 notifies the reservation information to the hospital terminal 11 of the designated hospital, and when the reservation is permitted, stores the chart information of the reserved patient in a primary buffer that can be transmitted to the reserved hospital. . This makes it possible to quickly respond to a request for chart information from a reserved hospital.

As described above, by sharing the chart information among a plurality of hospitals and a plurality of pharmacies, for example, even when a patient is transferred from a hospital to another hospital, the chart information is quickly transmitted to the transfer destination hospital. Will be able to

The present invention is not limited to the above-described embodiment, but can be variously modified and implemented without departing from the scope of the invention.

[0079]

As described in detail above, according to the present invention,
It is possible to provide a very good personal information management system and a personal information management method that can share personal information with high security on a network.

[Brief description of the drawings]

FIG. 1 is a view for explaining an embodiment of the present invention;

FIG. 2 is a view for explaining details of a patient IC card according to the embodiment;

FIG. 3 is a view for explaining details of the hospital terminal according to the embodiment;

FIG. 4 is a flowchart illustrating a schematic operation according to the embodiment;

FIG. 5 is a view for explaining details of a doctor confirmation processing operation of the hospital terminal in the embodiment.

FIG. 6 is a view for explaining details of a patient confirmation processing operation of the hospital terminal in the embodiment.

FIG. 7 is a view for explaining details of a processing operation at the time of a request for medical record information according to the embodiment;

FIG. 8 is an exemplary view for explaining details of an operation of creating a personal data confirmer in the embodiment;

FIG. 9 is a view for explaining a specific example of an arithmetic process for creating a personal data confirmer according to the embodiment;

FIG. 10 is a view shown for explaining a modification of the embodiment.

[Explanation of symbols]

 11: Hospital terminal, 12: Pharmacy terminal, 13: Network, 14: Server, 15: Patient IC card, 16: Doctor IC card, 17: Card body, 18: Signal processing IC, 19: CPU, 20: ROM, 21 RAM, 22 EEPROM, 23 I / O controller, 24 MPU, 25 ROM, 26 RAM, 27 display device, 28 keyboard, 29 IC card I / F, 30 communication device, 31 ... Hash function operation unit 32 Telephone.

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 12/14 320 G06F 12/14 320C 17/30 110 17/30 110G 120 120B 170 170Z

Claims (22)

[Claims] 1. An information management device main body in which personal information of a plurality of persons is stored, a plurality of terminal devices connected to the information management device main body via a network so as to be able to perform data communication,
A portable storage medium attached to the terminal device so as to enable data communication, and a personal information management system for reading personal information from the information management device main body via the terminal device equipped with the portable storage medium. Storage means for storing a personal data identifier generated based on each of the personal information so as to correspond to each of the personal information of the plurality of persons; and the personal information from the terminal device to the information management device body. Means for reading, when requested, the personal data identifier stored in association with the requested personal information from the storage means; and the read personal data identifier and the mobile phone attached to the terminal device. Matching means for matching personal data verifiers stored in the storage medium for storage; and displaying the requested personal information on the terminal device based on the matching result. A personal information management system, comprising: management means capable of indicating information. Wherein said collating means inputs personal data Kakuninko read from said storage means to said portable storage medium, according to claim 1, characterized in that matched inside the portable storage medium Personal information management system. 3. The management means, when the personal data verifier read from the storage means is compared with the personal data verifier stored in the portable storage medium,
3. The personal information management system according to claim 1, further comprising means for reading personal information requested from the information management device main body and transmitting the read personal information to the terminal device. 4. An information management device main body in which personal information of a plurality of persons is stored, a plurality of terminal devices connected to the information management device main body via a network so as to be able to perform data communication,
A portable storage medium attached to the terminal device so as to enable data communication, and a personal information management system for writing personal information to the information management device body via the terminal device attached with the portable storage medium. Generating means for generating a personal data identifier using at least the personal information to be written when writing personal information to the information management device main body; and storing the generated personal data identifier in association with the personal information. A personal information management system comprising: a storage unit; and a unit that writes the generated personal data identifier to the portable storage medium. 5. The personal computer according to claim 1, wherein the generation unit writes the personal information to the main body of the information management device by performing an arithmetic process using the personal information output from the terminal device and the unique information stored in the portable storage medium. 5. The personal information management system according to claim 4, wherein a data identifier is generated. 6. A means for generating a session key in the main body of the information management device, encrypting the session key using a public key of the portable storage medium, and transmitting the encrypted session key to the portable storage medium; 5. The personal information management system according to claim 4, further comprising: means for encrypting the unique information using the session key and transmitting the encrypted information to the information management apparatus main body. 7. The generated personal data verifier,
7. The personal information management system according to claim 6, further comprising means for encrypting with a session key generated by the information management apparatus main body and transmitting the encrypted data to the portable storage medium. 8. An information management device main body in which personal information of a plurality of persons is stored, a plurality of terminal devices connected to the information management device main body via a network so as to be able to perform data communication,
A portable storage medium attached to the terminal device so as to enable data communication, and reading and writing of personal information to and from the information management device main body via the terminal device equipped with the portable storage medium. In the personal information management system to be performed, a storage means for storing a personal data identifier generated based on the personal information so as to correspond to each of the personal information of the plurality of persons; Means for reading the personal data confirmer stored in association with the requested personal information from the storage means when the personal information is requested from the storage means; and the read personal data confirmer and the terminal device Collating means for collating the personal data verifier stored in the portable storage medium attached to the portable storage medium; and Management means for displaying personal information on the terminal device; generating means for generating a personal data confirmer using at least the personal information to be written when writing personal information to the information management apparatus main body; A personal information management system comprising: a confirmer storage unit that stores a personal data confirmer in association with the personal information; and a unit that writes the generated personal data confirmer to the portable storage medium. . 9. An information management apparatus main body in which personal information of a plurality of persons is stored, a plurality of terminal devices connected to the information management apparatus main body via a network so as to be able to perform data communication,
A portable storage medium mounted on the terminal device so as to enable data communication, and a personal information management method for reading personal information from the information management device main body via the terminal device mounted with the portable storage medium. When the personal information is requested from the terminal device to the information management device main body, the personal information is stored in association with the personal information requested from the information management device main body, and the personal data generated based on the personal information is confirmed. Read the child, collated with the personal data verifier stored in the portable storage medium attached to the terminal device, based on the collation result,
A personal information management method, wherein the requested personal information can be displayed on the terminal device. 10. The personal information management according to claim 9, wherein the personal data identifier read from the information management device main body is input to the portable storage medium, and collation is performed inside the portable storage medium. Method. 11. A request from the information management device main body in a state where the personal data verifier read out from the information management device main body and the personal data verifier stored in the portable storage medium are collated. 11. The personal information management method according to claim 9, wherein the read personal information is transferred to the terminal device. 12. An information management apparatus main body in which personal information of a plurality of persons is stored, a plurality of terminal apparatuses connected to the information management apparatus main body via data communication, and a data communication with the terminal apparatus. A personal storage medium that is mounted so as to be able to be mounted, and a personal information management method for writing personal information into the information management apparatus main body via the terminal device with the portable storage medium mounted therein; When writing personal information to the personal information, at least using the personal information to be written output from the terminal device to generate a personal data identifier, and stored in association with the personal information output from the terminal device, the generated A personal information management method, comprising writing a personal data identifier in the portable storage medium. 13. The personal computer according to claim 1, wherein the personal data identifier is generated in the main body of the information management device by arithmetic processing using personal information output from the terminal device and unique information stored in the portable storage medium. 13. The personal information management method according to claim 12, wherein: 14. A session key generated by the information management device main body using a public key obtained from the portable storage medium, and transmitted to the portable storage medium, and the session key decrypted by the portable storage medium is transmitted. 13. The personal information management method according to claim 12, wherein the unique information is encrypted with a session key and transmitted to the information management apparatus main body. 15. The personal data verifier generated by the information management apparatus main body is encrypted with a session key generated by the information management apparatus main body and transmitted to the portable storage medium. The described personal information management method. 16. An information management device main body in which personal information of a plurality of persons is stored, a plurality of terminal devices connected to the information management device main body via a network so as to be able to perform data communication, and data communication with the terminal device A portable storage medium that is mounted so as to be able to be mounted, and a personal information management method for reading and writing personal information to and from the information management device main body via the terminal device with the portable storage medium mounted. When the personal information is requested from the terminal device to the information management device main body, the personal information is stored in association with the personal information requested from the information management device main body, and the personal data generated based on the personal information is confirmed. Read the child, collated with the personal data verifier stored in the portable storage medium attached to the terminal device, based on the collation result,
The requested personal information can be displayed on the terminal device, and when writing the personal information in the information management device main body, a personal data confirmer is generated using at least the personal information to be written output from the terminal device, A personal information management method, wherein the personal information is stored in association with personal information output from the terminal device, and the generated personal data identifier is written in the portable storage medium. 17. An information management apparatus main body in which medical record information for a plurality of persons is stored, a plurality of terminal apparatuses connected to the information management apparatus main body via a network so as to be able to perform data communication, and data communication with the terminal apparatus A portable storage medium that is mounted so as to be capable of being installed, and through the terminal device equipped with the portable storage medium, in a chart information management system that reads out chart information from the information management apparatus main body; Storage means for storing personal data confirmers generated based on each of the plurality of medical record information for the plurality of persons; and when the terminal apparatus requests medical information to the information management apparatus main body, Means for reading the personal data verifier stored in association with the requested medical record information from the storage means, and the read personal data verifier Collating means for collating the personal data verifier stored in the portable storage medium mounted on the terminal device, and the requested medical record information can be displayed on the terminal device based on the collation result. A medical chart information management system comprising: 18. An information management apparatus main body in which medical record information for a plurality of persons is stored, a plurality of terminal apparatuses connected to the information management apparatus main body via a network so as to be able to perform data communication, and data communication with the terminal apparatus A portable storage medium that is mounted so as to be able to be mounted, and a medical record information management system that writes medical record information to the information management apparatus main body via the terminal device on which the portable storage medium is mounted; A generating unit that generates a personal data identifier using at least the medical record information to be written when writing the medical record information into the medical record information; a storage unit that stores the generated personal data identifier in association with the medical record information; Means for writing the obtained personal data identifier to the portable storage medium. 19. An information management apparatus main body in which medical record information of a plurality of persons is stored, a plurality of terminal devices connected to the information management apparatus main body via a network so as to be able to perform data communication, and data communication with the terminal device And a portable storage medium that is mounted so as to be capable of being mounted, and through a terminal device mounted with the portable storage medium, a medical record information management system that reads and writes medical record information with respect to the information management apparatus main body. Storage means for storing a personal data identifier generated based on each of the medical record information so as to correspond to each of the medical record information of the plurality of persons; and the medical record information is transmitted from the terminal device to the information management device main body. Means for reading the personal data verifier stored in association with the requested medical record information from the storage means when requested; Collating means for collating the issued personal data verifier with the personal data verifier stored in the portable storage medium mounted on the terminal device; and based on the collation result, the requested medical record information Means for displaying on the terminal device, and when writing medical record information in the information management apparatus main body, generating means for generating a personal data confirmer using at least the medical record information to be written, and the generated personal data A chart information management system, comprising: a checker storage unit that stores a checker in association with the chart information; and a unit that writes the generated personal data checker in the portable storage medium. 20. An information management device main body in which medical record information for a plurality of persons is stored, a plurality of terminal devices connected to the information management device main body via a network so as to be able to perform data communication, and data communication with the terminal device A portable storage medium that is mounted so as to be able to be mounted, and a medical record information management method for reading medical record information from the information management device main body via the terminal device mounted with the portable storage medium, wherein: When the medical record information is requested for the information management device main body, the personal data checker is stored in association with the medical record information requested from the information management device main body and is generated based on the medical record information, and
The personal data confirmer stored in the portable storage medium mounted on the terminal device is collated with the personal data confirmer, and the requested medical record information can be displayed on the terminal device based on the collation result. Medical record information management method. 21. An information management device main body in which medical record information for a plurality of persons is stored, a plurality of terminal devices connected to the information management device main body via data communication, and data communication with the terminal device. A portable storage medium that is mounted so as to be able to be mounted, and a medical record information management method for writing medical record information in the information management apparatus main body via the terminal device on which the portable storage medium is mounted; At the time of writing the medical record information, a personal data confirmer is generated using at least the medical record information to be written output from the terminal device, and stored in association with the medical record information output from the terminal device. A chart information management method, wherein a personal data identifier is written in the portable storage medium. 22. An information management apparatus main body in which medical record information of a plurality of persons is stored, a plurality of terminal devices connected to the information management apparatus main body via data communication, and data communication with the terminal device. And a portable storage medium that is mounted so as to be able to be mounted, and wherein the medical record information is read and written to and from the information management apparatus main body via the terminal device on which the portable storage medium is mounted. When the terminal device requests medical record information from the information management device main body, the personal data is stored in association with the medical record information requested from the information management device main body and generated based on the medical record information. Read the confirmer,
The personal data confirmer stored in the portable storage medium mounted on the terminal device is compared with the personal data confirmer, and the requested medical record information can be displayed on the terminal device based on the comparison result, and the information management is performed. When writing the chart information in the apparatus body, at least using the chart information to be written output from the terminal device, generating a personal data confirmer, storing the data in association with the chart information output from the terminal device, and generating And writing the personal data confirmer to the portable storage medium.