Patent Application
20060009692
This application is based upon and claims the benefit of priority from prior Japanese Patent Application No. P2004-162806, filed on Jun. 1, 2004, the entire contents of which are incorporated herein by reference.
1. Field of the Invention
The present invention relates to a medical image storage apparatus for storing medical image information including personal information of a patient. The present invention also relates to a medical imaging apparatus for generating and storing the medical image information. The present invention still relates to a medical image system including a medical image storage apparatus and a medical imaging apparatus. The present invention further relates to a method of storing the medical image information.
Medical image information is generated from medical imaging apparatuses such as an X-ray diagnosis apparatus, an X-ray computed tomography apparatus, a magnetic resonance imaging apparatus, an ultrasound diagnosis apparatus, a positron emission tomography apparatus, and the like. The medical image information usually includes image data and accompanying information and is stored in a medical image storage apparatus. The accompanying information usually includes examination information and patient information. Therefore, the medical image information includes personal information such as a patient name, patient identification information, and the like, which can identify a patient of the image data. This means that the medical image information is included in a category of individual privacy information and should be protected according to several acts including the Health Insurance Portability and Accountability Act (HIPPA).
Although the medical image information should be administered strictly and protected from the information leakage, it is not possible to deny that there is a possibility that personal information included in the medical image information would be leaked when the medical image information is used for the purpose other than a medical practice. For example, it may occur when the medical image information is used to research images based on the medical image information or when the medical image information is used during a maintenance service of the medical image storage apparatus.
In order to solve this type of problem, for example, Japanese Patent Application Publication No. 2002-197186 describes a technique of storing information disclosure procedures set by a patient or his/her doctor in a medical information management system in advance and allowing to refer to medical image information only in accordance with the procedures so that the medical image information could not be unintentionally disclosed.
This technique, however, still allows the doctor to edit or process the medical image information irrespective of the purpose of use as long as the doctor is allowed to access the medical image information. Therefore, when the medical image information is used for the purpose of researching images based on the medical image information or for other non-medical purpose, it may still occur that part of personal information included in the medical image information is leaked by careless operations since it is cumbersome to remove the personal information from the medical image information.
Also when a maintenance service staff maintains the medical image storage apparatus, the staff may happen to leak part of the personal information by mistake if the staff is not so familiar with treating the personal information.
Meanwhile, there is no way for the patient to see if the medical image information is strictly archived in security and used in an appropriate manner.
As a technique of securing personal information, Japanese Patent Application Publication Nos. 2000-13614 and 2002-247026 describe a technique of dividing the medical image information into image data and accompanying information and encrypting the accompanying information when the medical image information is transmitted through a network so as to avoid personal information included in the accompanying information from being unintentionally taken by the third person during the transmission. This is, however, only for the security during the transmission and the encrypted accompanying information is decrypted after the reception of the medical image information. These documents neither describe nor suggest any good idea for securing the personal information and solving the above-mentioned problems once after the medical image information has been stored in the medical image storage apparatus or the like.
According to the first aspect of the present invention, there is provided a medical image storage apparatus. The apparatus includes a receiving unit, a table preparation unit, the first storage unit, the second storage unit, the first unit, the second unit, and an output unit. The receiving unit is configured to receive medical image information resulting from a medical imaging apparatus. The table preparation unit is configured to prepare a table of a relationship between predetermined personal information concerning the medical image information and image information prepared by removing the predetermined personal information from the medical image information. The first storage unit is configured to store the predetermined personal information. The second storage unit is configured to store the image information. The first unit is configured to make the table unavailable. The second unit is configured to recapture the table. The output unit is configured to read the predetermined personal information from the first storage unit and the image information from the second storage unit based on the recaptured table and to prepare and output the medical image information.
According to the second aspect of the present invention, there is provided a medical imaging apparatus. The apparatus includes an imaging unit, a table preparation unit, the first storage unit, the second storage unit, the first unit, the second unit, and an output unit. The imaging unit is configured to generate medical image information. The table preparation unit is configured to prepare a table of a relationship between predetermined personal information concerning the medical image information and image information based on the medical image information. The first storage unit is configured to store the predetermined personal information. The second storage unit is configured to store the image information. The first unit is configured to make the table unavailable. The second unit is configured to recapture the table. The output unit is configured to read the predetermined personal information from the first storage unit and the image information from the second storage unit based on the recaptured table and to prepare and output the medical image information.
According to the third aspect of the present invention, there is provided a medical image system including a medical imaging apparatus and a medical image storage apparatus. The system includes an imaging unit, a table preparation unit, the first storage unit, the second storage unit, the first unit, the second unit, and an output unit. The imaging unit is configured to generate medical image information. The table preparation unit is configured to prepare a table of a relationship between predetermined personal information concerning the medical image information and image information based on the medical image information. The first storage unit is configured to store the predetermined personal information. The second storage unit is configured to store the image information. The first unit is configured to make the table unavailable. The second unit is configured to recapture the table. The output unit is configured to read the predetermined personal information from the first storage unit and the image information from the second storage unit based on the recaptured table and to prepare and output the medical image information.
According to the fourth aspect of the present invention, there is provided a method of storing medical image information. The method begins by receiving medical image information resulting from a medical imaging apparatus. The method continues by preparing a table of a relationship between predetermined personal information concerning the medical image information and image information prepared by removing the predetermined personal information from the medical image information. The method still continues by storing the predetermined personal information, storing the image information, and making the table unavailable.
According to the fifth aspect of the present invention, there is provided a method of storing medical image information. The method begins by generating medical image information. The method continues by preparing a table of a relationship between predetermined personal information concerning the medical image information and image information based on the medical image information. The method still continues by storing the predetermined personal information, storing the image information, and making the table unavailable.
A more complete appreciation of embodiments of the present invention and many of its attendant advantages will be readily obtained by reference to the following detailed description considered in connection with the accompanying drawings, in which:
Embodiments of the present invention will be described with reference to the accompanying drawings.
The receiving unit 1 is connected to a medical imaging apparatus such as, for example, an X-ray diagnosis apparatus, an X-ray computed tomography apparatus (hereinafter referred to as an X-ray CT apparatus), a magnetic resonance imaging apparatus, a nuclear medicine diagnosis apparatus, an ultrasound diagnosis apparatus, an endoscope apparatus, and/or the like. In
The image processing unit 2 may include a medical image information storage unit 21 and a medical image information dividing unit 22. The image processing unit 2 may correspond to ‘a table preparation unit’.
The medical image information storage unit 21 temporarily stores the medical image information received by the receiving unit 1. The stored medical image information, which is original medical image information, may be deleted from the medical image information storage unit 21 in accordance with a predetermined condition so that a doctor, a radiological technologist, or the like (hereinafter referred to as a user) cannot obtain the original medical image information unless permitted or without the patient's help.
As shown in
The medical image information dividing unit 22 also issues identification information of the predetermined personal information (hereinafter referred to as personal information ID) and identification information of the image information (hereinafter referred to as image information ID). The personal information ID is given to the predetermined personal information and the predetermined personal information given the personal information ID is transferred to the storage unit 3 as ID-given predetermined personal information. Similarly, the image information ID is given to the image information and the image information given the image information ID is transferred to the storage unit 3 as ID-given image information. The personal information ID is uniquely issued to each medical image information so that the predetermined personal information can be distinguished among the examinations. Similarly, the image information ID is uniquely issued to each medical image information so that the image information can be distinguished among the examinations. Each of the personal information ID and the image information ID does not relate to an issue system in a table storage unit 52 and comprises arbitrary numeral and/or character information which is not displayed in a display unit 43.
The medical image information dividing unit 22 further prepares a table of a relationship between the predetermined personal information and the image information. For example, the medical image information dividing unit 22 prepares a preliminary table including the personal information ID, the image information ID, and the examination date. The examination date may be obtained from the examination information included in the medical image information. As shown in
The storage unit 3 may be configured by a non-volatile memory device such as, for example, a magnetic disk and include an image information storage unit 31 and a personal information storage unit 32. The image information storage unit 31 stores the ID-given image information. The personal information storage unit 32 stores the ID-given predetermined personal information. The image information storage unit 31 may correspond to ‘a second storage unit’. The personal information storage unit 32 may correspond to ‘a first storage unit’.
The output unit 4 may include a medical image information preparation unit 41, an image information retrieval unit 42, and the display unit 43. The medical image information preparation unit 41 receives the table (decrypted table) from a table decryption unit 53 and retrieves from the image information storage unit 31 the ID-given image information whose ID corresponds to the image information ID obtained from the table. The medical image information preparation unit 41 also retrieves from the personal information storage unit 32 the ID-given predetermined personal information whose ID corresponds to the personal information ID obtained from the table. The medical image information preparation unit 41 also prepares medical image information by combining the retrieved image information and the predetermined personal information and transfers the medical image information to the display unit 43. The image information retrieval unit 42 retrieves the (ID-given) image information from the image information storage unit 31 in accordance with a request from the operation unit 6 and transfers the image information to the display unit 43. The display unit 43 displays the medical image information when the medical image information is transferred from the medical image information preparation unit 41. In this case, the display unit 43 displays the image information and the personal information included in the medical image information. The display unit 43 displays the image information when the image information is transferred from the image information retrieval unit 42. In this case, the display unit 43 does not display the personal information.
The table processing unit 5 may include a table encryption unit 51, the table storage unit 52, and a table decryption unit 53. The table encryption unit 51 receives the table transferred from the medical image information dividing unit 22 and encrypts the table. The encrypted table is transferred to and stored in the table storage unit 52. The table encryption unit 51 may store an encryption key, particularly when the encryption key is a public key of the patient. The encryption key may alternatively be stored in an IC (Integrated Circuit) card 81, which may be kept and administered by the patient. In this case, the encryption key is read from the IC card 81 through the operation unit 6 and provided to the table encryption unit 51 through the control unit 7. When the table is encrypted, only the personal information ID and the image information ID may be encrypted so that the examination date and the unique information can be used in the retrieval of the encrypted table, as shown in
The table decryption unit 53 retrieves the encrypted table in accordance with the unique information (and the examination date) and decrypts the encrypted table. The decrypted table is transferred to the medical image information preparation unit 41 as the table. In the decryption, the table decryption unit 53 uses a decryption key. When the table encryption unit 51 uses the public key, the table decryption unit 53 uses a private key corresponding to the public key as the decryption key. The decryption key including the private key may be stored in the IC card 81. Therefore, in this case, the decryption key including the private key is read from the IC card 81 through the operation unit 6 and provided to the table decryption unit 53 through the control unit 7. The table decryption unit 53 may correspond to ‘a second unit configured to recapture the table’.
The operation unit 6 may include an IC card reader 61, various switches, and an input device such as, for example, a keyboard, a trackball, a mouse, a magnetic card reader, a bar code reader, and/or the like. When an external memory medium 8 is the IC card 81, the IC card reader 61 is used. When the external memory medium 8 is a magnetic card 82 or a bar code medium 83, the magnetic card reader or the bar code reader may be used. In the following description, embodiments will be explained taking an example of the time when the IC card 81 is used as an example of the external memory medium 8. The external medium 8 may be portable and usually kept and administered by the patient. The operation unit 6 may be operative as an interactive interface. The operation unit 6 may be used to input the unique information, various types of information and instructions, the encryption key, the decryption key, and the like. The unique information, the encryption key, and the decryption key may be input through the IC card reader 61.
The control unit 7 may include a CPU (Central Processing Unit) and memory circuitry. The memory circuitry may temporarily store the information, the instructions, the unique information, the encryption key, and the decryption key when these are input from the operation unit 6. These information may be transferred to one or more appropriate units provided in the medical image storage apparatus 10 or used to control one or more appropriate units or over the medical image storage apparatus 10.
Storing operations of the medical image information will be described with reference to a flowchart shown in
When the X-ray CT apparatus 80 has generated CT image data and its accompanying information as the medical image information, the medical image information is transmitted to the medical image storage apparatus 10 through the hospital LAN. The transmitted medical image information is received by the receiving unit 1. Although the storing operation can be started in response to a user's instruction from the operation unit 6, the storing operation is typically started in accordance with the reception of the medical image information as long as the medical image storage apparatus 10 is ready for receiving and storing the medical image information (step S1).
The received medical image information is temporarily stored in the medical image information storage unit 21 (step S2). The medical image information is then transferred to the medical image information divining unit 22 (step S3) and divided into predetermined personal information and image information. That is, the predetermined personal information is prepared by extracting the predetermined personal information from the medical image information. Also using dummy information, the image information is prepared (step S4).
The transfer of the medical image information from the medical image information storage unit 21 to the medical image information dividing unit 22 means proceeding to the encryption operation. Once the encryption has been conducted, the user cannot obtain the medical image information unless the decryption key which may be administered by the patient is obtained. Since the user usually needs to interpret or diagnose images resulting from the medical image information, identifying the images concerning a specific patient, the transfer may not be conducted so soon. Or even if transferred, the dividing operation may not be conducted immediately.
Time measurement to proceed to the transfer or the dividing operation may alternatively be made as shown in
A further alternative way of the measurement is shown in
According to these examples, the user could have enough time to interpret images based on the medical image information.
Returning to
For the user's image interpretation work, the time measurement examples have been described with reference to FIGS. 5 to 7. Instead of applying the time measurement examples to the determination of whether to proceed to the dividing operation, similar examples may be applicable to the above delete operation instep S9. For example, step S105 in
The medical image information dividing unit 22 also prepares a table of a relationship between the predetermined personal information and the image information. First, a preliminary table is prepared, which includes the personal information ID, the image information ID, and an examination date (step S10). Next, the medical image information dividing unit 22 prepares the table by combining the unique information to the preliminary table as shown in
The table is transferred to and encrypted by the table encryption unit 51 (step S12). As described before, the table encryption unit 51 may use the decryption key received from the IC card 81 through the IC card reader 61 or the public key stored in the table encryption unit 51 or other unit in the medical image storage unit 10. When the encryption key is not stored as the public key, an input of the encryption key may be required through a requirement display in the display unit 43. In response to the requirement display, the user may insert the IC card 81 into the IC card reader 61. To be precise, the user may ask the patient to insert the IC card 81 into the IC card reader 61. Even if the public key is not used as the encryption key, the table maybe encrypted, by reading the encryption key from the IC card 81 in advance. As shown in
Outputting operations of the medical image information will be described with reference to a flowchart shown in
The user may input an instruction to start obtaining the medical image information through the operation unit 6. In order to obtain and output the medical image information except for the time of the image interpretation which may have been completed before the encryption, the user then needs to ask the patient to insert the IC card 81 into the IC card reader 61. The user may first input unique information of the patient from the operation unit 6. Or when the unique information is stored in the IC card 61, the user may ask the patient to insert the IC card 81 into the IC card reader 61 so that the unique information is read from the IC card 81 (step S21). The unique information through the operation unit 6 is transferred to the table decryption unit 53. The table decryption unit 53 then compares the transferred unique information to unique information included in the encrypted table stored in the table storage unit 52 since the unique information included in the table is not encrypted as shown in
In response to the insertion of the IC card 81 into the IC card reader 61, the IC card reader 61 reads the decryption key from the IC card 81 and the table decryption unit 53 receives the decryption key (step S24). As described before, the decryption key may be the private key of the patient. The table decryption unit 53 then decrypts the one or more encrypted tables with the decryption key and obtains one or more tables (step S25). When there is only one table obtained in step S25 (step S26), the table is transferred to the medical image information preparation unit 41 (step S27). When there are two or more tables obtained in step S25, the examination dates included in the respective tables are displayed as a list of examination dates in the display unit 43 (step S28). When the user designates one of the listed examination dates, using the operation unit 6 (step S29), the table corresponding to the designated examination date is transferred to the medical image information preparation unit 41 (step S30).
The medical image information preparation unit 41 retrieves the ID-given predetermined personal information stored in the personal information storage unit 32 in accordance with the personal information ID included in the transferred table and the ID-given image information stored in the image information storage unit 32 in accordance with the image information ID included in the transferred table (step S31). The medical image information preparation unit 41 obtains the predetermined personal information given the ID identical to or corresponding to the personal information ID included in the transferred table. Similarly, the medical image information preparation unit 41 obtains the image information given the ID identical to or corresponding to the image information ID included in the transferred table. By combining the personal information and the image information, the medical image information preparation unit 41 prepares to reproduce the medical image information (step S32). The medical image information is transferred to the display unit 43 (step S33) and displayed in the display unit 43 (step S34).
If the user needs to use the image data for the purpose of researching images resulting from the image data, the image information including the image data can be utilized. Also, when a maintenance service staff needs to use the image data to refer to images based on the image data during the maintenance service, the image information can be utilized. For any other purpose, which does not directly relate to medical practices for the patient associated with the image data, the image information stored in the image information storage unit 31 can be utilized.
In response to the input or selection, the image information retrieval unit 42 retrieves the image information stored in the image information storage unit 31 based on the retrieval conditions (step S42). The retrieved image information is transferred to the display unit 43 (step S43). The image information is displayed as images, a type of a medical imaging apparatus, an imaging condition, imaged part information, and the like while no personal information is displayed in the display unit 43 (step S44).
The personal information is stored separately from the image information and cannot be matched with the image information without decrypting the encrypted table. The encrypted table can be decrypted only with the decryption key. The decryption key is administered by the patient. Therefore, the personal information is secured from the operator when the images are required for the purpose which does not directly relate to medical practices for the patient associated with the images. On the other hand, when the user needs to display the medical image information including the personal information, the user can display the medical image information, using the decryption key administered by the patient. In other words, for the patient, the personal information included in the medical image information cannot be referred to even by the user without the patient's administering decryption key. This may mean that the personal information is referred to only in front of the patient.
In
Another practical way of receiving information stored, for example, in the IC card 81 is shown in
Also in
The rest of the configuration of the medical image storage apparatus 10 may be similar to the corresponding units shown in
In the second embodiment, the table is not encrypted but still made unavailable to the user and the operator.
The IC card reader/writer 63 may read the unique information from the IC card 81. Further, the IC card reader/writer 63 writes the table to the IC card 81 and reads the table from the IC card 81. The IC card reader/writer 63 may correspond to the ‘first unit configured to make the table unavailable’ and also to the ‘second unit configured to recapture the table’.
As a modification to the operation unit 6, the operation unit 6 may include a disk drive unit 64 as shown in
As shown in
Also in
The unique information has been described for distinguishing the patient in the first embodiment. The unique information may alternatively be used to distinguish the user.
The key generation unit 66 generates an encryption key and a decryption key for each user. The encryption key and the decryption key may be the same one key. The authentication unit 67 authenticates the user who is allowed to login the medical image storage apparatus 30 by authentication information such as, for example, a user ID and a password input from the operation unit 6. In response to the authentication, the user logins the medical image storage apparatus 30. The user ID storage unit 68 stores the user ID authenticated by the authentication unit 67. That is, the user ID stored in the user ID storage unit 68 pertains to the user currently logging in the medical image storage apparatus 30. The key storage unit 69 stores the encryption key and the decryption key in relationship to the user ID with respect to one or more users. The key input/output unit 70 obtains the user ID stored in the user ID storage unit 68 and retrieves from the key storage unit 69 the encryption key or the decryption key which corresponds to the user ID. The key input/output unit 70 then outputs the encryption key or the decryption key to the control unit 7 so that the encryption key is transferred to the table encryption unit 51 when the encryption is required and the decryption key is transferred to the table decryption unit 53 when the decryption is required. The rest of the configuration of the medical image storage apparatus 30 may be similar to the corresponding units shown in
In this embodiment, the unique information included in the table is the user ID as shown in
Outputting operations of the medical image information will be described with reference to a flowchart shown in
The user who needs to obtain the medical image information with respect to his/her patient inputs the authentication information from the operation unit 6 (step S71). The authentication information is transferred to the authentication unit 67 and authenticated by the authentication unit 67 (step S72). If the authentication succeeds (step S73), the user ID of the user corresponding to or included in the authentication information is stored as the user ID of the current user in the user ID storage unit 68 (step S74). The user is allowed to login the medical image storage apparatus 30 and may start to use the medical image storage apparatus 30.
The user may make a request of obtaining the medical image information through the operation unit 6 (step S75). In response to the request, the control unit 7 obtains the user ID from the user ID storage unit 68 (step S76) and transfers the user ID to the table decryption unit 53. The table decryption unit 53 retrieves one or more encrypted tables including user ID identical to the transferred user ID (step S77). The control unit 7 also controls the key input/output unit 70 so as to retrieve from the key storage unit 69 the decryption key corresponding to the user ID stored in the user ID storage unit 68 (step S78). After the retrieval, the decryption key is transferred to the table decryption unit 53, and the medical image information is displayed in the display unit 43 in accordance with steps S25 to S34 shown in
According to the third embodiment, the user can obtain the medical image information with respect to only the user's patient. Therefore, although the patient's personal information included in the medical image information is not always referred in front of the patient, the patient may be secured that his/her medical image information is referred to only by the user or cannot be referred to at least without through the user's operation.
The input of the authentication information and the request may be made from an external input unit as shown in
Also in
The rest of the configuration of the medical image storage apparatus 30 may be similar to the corresponding units shown in
In the third embodiment, the user ID has been used as the unique information. Information distinguishing a consultation department provided in the hospital such as, for example, internal medicine or surgery may be used as an alternative example of the unique information.
In the first to third embodiments, the medical image information has been received from the X-ray CT apparatus and divided into the personal information and the image information in the medical image information dividing unit. According to the fourth embodiment, the personal information may be obtained separately from the medical image information so that it is not necessary to divide the medical image information.
The receiving unit 1 receives the medical image information from the X-ray CT apparatus 80 as described in the first embodiment. The received medical image information is transferred to the medical image information storage unit 21. The medical image information storage unit 21 removes predetermined personal information included in the medical image information in accordance with a predetermined rule. Accordingly, the image information is prepared. Dummy information may be incorporated into the image information instead of the removed predetermined personal information.
The receiving unit 1 also receives examination reservation information from the HIS/RIS 15. The examination reservation information concerning a forthcoming imaging examination of the patient is typically input to the HIS/RIS 15 so as to reserve the imaging examination for the patient. The examination reservation information usually includes various types of information of a forthcoming examination and a patient, so may include personal information of the patient. The reservation information storage unit 23 stores the examination reservation information received by the receiving unit 1. The personal information preparation and storage unit 24 extracts and prepares predetermined personal information from the examination reservation information stored in the reservation information storage unit 23 in accordance with the predetermined rule. The prepared predetermined personal information is stored in the personal information preparation and storage unit 24.
The receiving unit 1 may also receive examination selection information from the examination selection unit 16. The examination selection information may be transferred to the reservation information storage unit 23 so that the personal information preparation and storage unit 24 conducts the above operation with respect to the examination reservation information selected based on the examination selection information. The receiving unit 1 may further receive the examination reservation information from the reservation information input unit 17. The examination reservation information received from the reservation information input unit 17 may also be stored in the reservation information storage unit 23 and treated in a similar manner to those received from the HIS/RIS 15. Examination information received from the examination information input unit 18 may be transferred to the personal information preparation and storage unit 24. The personal information preparation and storage unit 24 may also or alternatively extract the predetermined personal information from the examination information received from the examination information input unit 18 if necessary although the personal information preparation and storage unit 24 extracts the predetermined personal information from the examination reservation information as described above. One or more of the examination reservation information, the examination selection information, and the examination information may correspond to ‘examination-relating information’.
The table preparation unit 25 issues the personal information ID and the image information ID. The personal information ID is given to the predetermined personal information stored in the personal information preparation and storage unit 24. The image information ID is given to the image information stored in the medical image information storage unit 21. The table preparation unit 25 also prepares a table of a relationship between the predetermined personal information and the image information in a manner similar to that described in the first embodiment. The table is transferred to the table encryption unit 51.
The rest of the configuration of the medical image storage apparatus 40 may be similar to the corresponding units shown in
Storing operations of the predetermined personal information and the image information will be described with reference to a flowchart shown in
The storing operation may start similarly to step S1 in
The examination reservation information is transferred to the personal information preparation and storage unit 24, for example, in response that the medical image information has been received by the receiving unit 1. When the receiving unit 1 has received the examination information from the examination information input unit 18, the examination information is also stored in the personal information preparation and storage unit 24. The personal information preparation and storage unit 24 extracts predetermined personal information, which is included in the examination reservation information and the examination information and is appropriate to be combined with the image information. The predetermined personal information may be prepared as a result of the extraction (step S83) and stored in the personal information preparation and storage unit 24 (step S84).
In the medical image information storage unit 21, the predetermined personal information is removed from the medical image information so that the image information is prepared (step S85). The prepared image information is stored in the medical image information storage unit 21 (step S86).
Although the table is prepared by the table preparation unit 25 and also the personal information ID and the image information ID are issued by the table preparation unit 25 as described above, the table is encrypted and the medical image information is made unavailable in a manner similar to those in steps S5 to S13 shown in
Outputting operations of the medical image information may be accomplished in a manner shown in
The patient's personal information may be secured that his/her medical image information is obtained only by limited one or more users or cannot be obtained at least without through these users' operation according to the fifth embodiment.
The authentication unit 67 and the user ID storage unit 68 are operative in a manner as described in the third embodiment. The table storage unit 71 stores the table prepared in the medical image information dividing unit 22. The table output unit 72 outputs the table stored in the table storage unit 71 to the medical image information preparation unit 41 in accordance with an instruction from the table use permission determining unit 74. The user's authority storage unit 73 stores the second table showing if the user is permitted to use the table. For example, the second table may show that users A and C (or user IDs A and C) are permitted to use the table but the user B (or user ID B) cannot with respect to a specific patient (or specific unique information). The second table may include such information with respect to one or more patients. The user's authority storage unit 73 may alternatively store the second table showing with respect to which unique information the user is permitted to use the table. For example, the second table may show that a user A (or user ID A) is permitted to use the table concerning patients A, B, and C (or unique information A, B, and C) while a user B (or user ID B) is permitted to use the table concerning the patients A and B (or the unique information A and B). And the second table may also show that a user C (or user ID C) is not permitted to use any table or may not include information of the user C (or the user ID C), which means the user C is not a permitted user of any table. The table use permission determining unit 74 determines whether or not the user who logged in the medical image storage unit 50 is permitted to use one or more tables based on the second table stored in the user's authority storage unit 73.
The rest of the configuration of the medical image storage apparatus 50 may be similar to the corresponding units shown in
Outputting operations of the medical image information will be described with reference to a flowchart shown in
The user who needs to obtain the medical image information with respect to a specific patient inputs the authentication information from the operation unit 6 (step S91). The authentication information is transferred to and authenticated by the authentication unit 67 (step S92). If the authentication succeeds (step S93), the user ID of the user corresponding to or included in the authentication information is stored as the user ID of the current user in the user ID storage unit 68 (step S94). The user is allowed to login the medical image storage apparatus 50 and may start to use the medical image storage apparatus 50.
The user may input unique information concerning the specific patient from the operation unit 6 (step S95). The unique information may be transferred to the table use permission determining unit 74. The table use permission determining unit 74 obtains the current user ID from the user ID storage unit 68 and, for example, retrieves information of the second table concerning the obtained user ID from the user's authority storage unit 73 (step S96). The table use permission determining unit 74 then determines whether the current user ID is permitted to use table(s) of the transferred unique information or not (step S97). When the table use permission determining unit 74 determines that the current user ID is permitted to use the table(s) of the transferred unique information, the table output unit 72 outputs one or more tables of the unique information to the medical image information preparation unit 41 (step S98). The medical image information may be displayed in accordance with steps S26 to S34 shown in
The feature of the medical image storage apparatus described in the first to fifth embodiments may also be implemented in a medical imaging apparatus such as one mentioned in the first embodiment. Two examples will be described below although any other one or more embodiments described above or their combination may also be applied to the medical imaging apparatus.
The imaging unit 75 generates medical image information and may include, for example, an X-ray tube, an X-ray detector, a data acquisition system, a reconstruction section, an information preparation section, and the like when the medical imaging apparatus 60 is an X-ray CT apparatus. The X-ray tube generates X-ray towards a patient and the X-ray detector detects X-ray information resulting from the generated X-ray. The detected X-ray information is acquired by the data acquisition system and is reconstructed to produce image data by the reconstruction section. The information preparation section prepares medical image information by combining the image data and its accompanying information. The accompanying information may be obtained from the operation unit 6 or from an external apparatus (not shown in
The image processing unit 2, the storage unit 3, the output unit 4, the table processing unit 5, the operation unit 6, and the control unit 7 may be operative in a manner similar to the corresponding units in
A modification of the medical imaging unit 60 will be described with reference to
The receiving unit 1 receives examination reservation information from the HIS/RIS 15 and the received examination reservation information is stored in the reservation information storage unit 23 as described in the fourth embodiment. Also as described in the fourth embodiment, the personal information preparation and storage unit 24 extracts, prepares, and stores predetermined personal information from the examination reservation information stored in the reservation information storage unit 23. The table preparation unit 25 is operative in a manner similar to that described in the fourth embodiment.
The operation unit 6 includes an examination selection unit 76, a reservation information input unit 77, and an examination information input unit 78 as well as the IC card reader 61. The examination selection unit 76 maybe used to select an examination from a listed plurality of reserved examinations so that the medical imaging apparatus 60 conducts imaging with respect to the selected examination. The personal information preparation and storage unit 24 may conduct the described operation with respect to the examination reservation information concerning the selected examination. The reservation information input unit 77 is provided to input the examination reservation information to be stored in the reservation information storage unit 23, but may not be used so often. The examination information input unit 78 may be used to input the examination information. The examination information input from the examination information input unit 78 is transferred to the personal information preparation and storage unit 24. The personal information preparation and storage unit 24 may also or alternatively extract the predetermined personal information from the transferred examination information if necessary although the personal information preparation and storage unit 24 extracts the predetermined personal information from the examination reservation information as described above.
The imaging unit 75 is operative as described with reference to
The rest of the configuration of the medical imaging apparatus 60 may be similar to the corresponding units shown in
The medical imaging apparatus 310 may be any type of medical imaging apparatus mentioned in the first embodiment. The medical imaging apparatus 310 may have features of, but which are not limited to, imaging 311, table preparation 312, table encryption 313, and transmission of encrypted table, ID-given image information, and ID-given predetermined personal information 314. The imaging feature 311 may be implemented in a unit such as, for example, the imaging unit 75. The table preparation feature 312 may be implemented in a unit such as, for example, the medical image information dividing unit 22. The table encryption feature 313 may be implemented in a unit such as, for example, the table encryption unit 51. The transmission feature 314 may be implemented in a unit such as, for example, a unit like the transmitting unit 44 if the transmitting unit 44 is provided in the medical imaging apparatus 60 in the sixth embodiment.
The medical image storage apparatus 320 may be a filing server and have features of, but which are not limited to, encryption key storage 321, storage of the encrypted table, the ID-given image information, and the ID-given personal information 322, table decryption 323, medical image information preparation 324, image information retrieval 325, and transmission of the medical image information or the image information 326. The encryption key storage feature 321 may be implemented in a unit such as, for example, the control unit 7. The storage feature 322 may be implemented in units such as, for example, the storage unit 3 and the table storage unit 52. The table decryption feature 323 may be implemented in a unit such as, for example, the table decryption unit 53. The medical image information preparation feature 324 may be implemented in a unit such as, for example, the medical image information preparation unit 41. The image information retrieval feature 325 may be implemented in a unit such as, for example, the image information retrieval unit 42. The transmission feature 326 may be implemented in a unit such as, for example, the transmitting unit 44.
The medical image display apparatus 330 may be a workstation and used, for example, to interpret images in an image interpretation room, to observe images in a consultation room, or to research images in a conference room. The medical image display unit 330 may have features of, which are not limited to, decryption key transmission 331, medical image information request 332, image information request 333, and display of the medical image information or the image information 334. The decryption key transmission feature 331 may be implemented, for example, in a transceiver unit. The medical image information request feature 332 and the image information request feature 333 maybe implemented, for example, in an input unit and the transceiver unit. The display feature 334 may be implemented, for example, in a display unit.
The IC card 350 may include a decryption key 351 corresponding to the encryption key. When the encryption key stored in the medical image storage apparatus 320 is a public key of a patient, the decryption key 351 is a private key corresponding to the public key. The IC card 350 may be kept and administered by the patient.
A communication flow among the medical imaging apparatus 310, the medical image storage apparatus 320, the medical image display apparatus 330, the IC card reader 340, and the IC card 350 will be described briefly below. When the medical image information is generated by the imaging feature 311, predetermined personal information and image information are prepared based on the medical image information, and also a table of a relationship between the predetermined personal information and the image information is prepared by the table preparation feature 312. The predetermined personal information and the image information are given IDs, respectively. The given IDs are included in the table. The table is encrypted with the encryption key by the table encryption feature 313. The encryption key may be obtained from the medical image storage apparatus 320. The encrypted table is transmitted to the medical image storage apparatus 320 by the transmission feature 314. Also, the ID-given personal information and the ID-given image information are transmitted to the medical image storage apparatus 320 by the transmission feature 314.
The transmitted encrypted table, the ID-given personal information, and the ID-given image information are received and stored in the medical image storage apparatus 320 by the storage feature 322.
When a user desires to obtain the medical image information of the patient, the user requests the medical image information and the request is transmitted from the medical image display apparatus 330 to the medical image storage apparatus 320 by the medical image information request feature 332. The user also asks the patient to insert his/her IC card 350 into the IC card reader 340. In response to the insertion, the IC card reader 340 reads the decryption key 351 from the IC card 350. The decryption key 350 is provided to the medical image display apparatus 330 and transmitted to the medical image storage apparatus 320 by the decryption key transmission feature 331. The medical image storage apparatus 320 decrypts the encrypted table with the decryption key 351 by the table decryption feature 323. Based on the decrypted table, the medical image information is prepared and reproduced by the medical image information preparation feature 324. The medical image information is transmitted to the medical image display apparatus 330 by the transmission feature 326. In the medical image display apparatus 330, the medical image information is displayed by the display feature 334.
When the operator requests the image information by the image information request feature 333, the request is transmitted from the medical image display apparatus 330 to the medical image storage apparatus 320 by the image information request feature 333. In the medical image storage apparatus 320, the image information is retrieved by the image information retrieval feature 325. The image information is transmitted to the medical image display apparatus 330 by the transmission feature 326. In the medical image display apparatus 330, the image information is displayed by the display feature 334.
As described above, the encryption and the decryption may not always be implemented in the same apparatus. Also the image request and display may not be implemented in the apparatus which encrypts and/or decrypts the table. The features described in one or more of the embodiments described above may be implemented in different apparatuses and accomplished in totality within a predetermined medical image system. The seventh embodiment described with reference to
Further, the medical image system may a system as shown in
In response to the request of the medical image information by the medical image information request feature 332 in the medical image display apparatus 330, the encrypted table is transmitted from the medical image storage apparatus 320 by the encrypted table transmission feature 327. The decryption key 350 read by the IC card reader 340 is provided to the medical image display apparatus 330 and the encrypted table is decrypted with the decryption key by the table decryption feature 335. The decrypted table is transmitted to the medical image storage apparatus 330 by the decrypted table transmission feature 336. The decrypted table is received by the decrypted table reception feature 328. Based on the decrypted table, the medical image information is prepared and reproduced by the medical image information preparation feature 324. The medical image information is transmitted to the medical image display apparatus 330 by the transmission feature 326. In the medical image display apparatus 330, the medical image information is displayed by the display feature 334.
When the decrypted table is transmitted from the medical image display apparatus 330 to the medical image storage apparatus 320, the decrypted table may be transmitted through a network secured by, for example, SSL (Secure Socket Layer) or IP Sec.
In the above embodiments in which the IC card 81 is used, the IC card 81 may be operative as part of one of the apparatuses 10 to 60, and 330 and include a memory 810 and a decryption unit (or feature) 820, as shown in
Also one or more of the first to seventh embodiments may be combined as another embodiment.
The embodiments of the present invention described above are examples described only for making it easier to understand the present invention, and are not described for the limitation of the present invention. Consequently, each component and element disclosed in the embodiments of the present invention may be redesigned or modified to its equivalent within a scope of the present invention. Furthermore, any possible combination of such components and elements may be included in a scope of the present invention as long as an advantage similar to those obtained according to the above disclosure in the embodiments of the present invention is obtained.
Numerous modifications and variations of the present invention are possible in light of the above teachings. It is therefore to be understood that within the scope of the appended claims, the invention may be practiced otherwise than as specifically described herein.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2004-162806 | Jun 2004 | JP | national |
