JP5328078B2 - Medical image information processing device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable the reproduction of medical image information split with an ordinary device for medical image information requiring no special device when the medical image information is split into personal information or the like and the medical image information without the personal information or the like by deletion. <P>SOLUTION: A hidden information extraction part of the medical image information processor 100 extracts the personal information or the like determined by an extraction information decision part as hidden information from the medical image information of a type such as a DICOM scale containing hidden information. A hidden information deletion part cuts off the hidden information extracted by the hidden information extraction part or replaces it with alternative information to delete it while holding the type such as the DICOM scale of the medical image information. <P>COPYRIGHT: (C)2008,JPO&amp;INPIT

Description

  The present invention relates to medical image information processing that separates confidential information such as patient personal information from medical image information and securely stores and transmits the medical image information.

The medical image information (DICOM (Digital Imaging and Communication in Medicine) image) includes additional information such as personal information in the image information. Although it is necessary to prevent leakage of personal information and the like, medical image information has a large data size, and if all of it is encrypted, processing time is required. Here, there is a technique in which incidental information such as personal information included in medical image information and the remaining medical image information are divided and only the incidental information is encrypted.
Japanese Patent Publication No. 2006-18817 Japanese Patent Publication No. 2002-247026 Japanese Patent Publication No. 2004-297504

When the division processing divides the incidental information into the remaining medical image information, there is a problem that a special apparatus having a restoration process corresponding to the division processing is required for reproducing the medical image information.
The present invention can reproduce the divided medical image information by a normal medical image information device without requiring a special device, for example, even when the auxiliary information and the remaining medical image information are divided. It aims to be.

The medical image information processing apparatus according to the present invention includes, for example, a confidential information extraction unit that extracts confidential information from medical image information in a predetermined format including confidential information and stores the confidential information in a storage device,
While maintaining the predetermined format of the medical image information, the confidential information extracted by the confidential information extraction unit is deleted from the medical image information or deleted by replacing the confidential information, and stored in the storage device. And a section.

The medical image information processing apparatus further includes:
An extraction information determination unit that determines predetermined information included in medical image information based on a predetermined rule as confidential information by a processing device,
The secret information extraction unit extracts the secret information determined by the extraction information determination unit.

  The extracted information determining unit determines information of a predetermined language as confidential information.

  Further, the extracted information determination unit determines information that matches information stored in a predetermined storage device as confidential information.

The medical image information processing apparatus further includes:
A secret information designating unit for designating identification information indicating a predetermined storage area by an input device,
The secret information extraction unit extracts information stored in a storage area indicated by the identification information designated by the secret information designation unit as secret information.

The medical image information processing apparatus further includes:
An extraction information determination unit that determines the same information as the information stored in the storage area indicated by the identification information specified by the confidential information specifying unit by the processing device as the confidential information extracted by the confidential information extraction unit;
The secret information extraction unit extracts the secret information determined by the extraction information determination unit.

The medical image information processing apparatus further includes:
By restoring the confidential information extracted by the confidential information extracting unit to the medical image information from which the confidential information erasing unit has erased the confidential information, the medical image information in a predetermined format including the confidential information is restored and stored in the storage device. An image restoration unit for storing is provided.

The medical image information processing apparatus further includes:
A secret information encryption unit that encrypts the secret information extracted by the secret information extraction unit to generate encrypted secret information and stores the encrypted secret information in a storage device;
And a secret information decryption unit that decrypts the encrypted secret information encrypted by the secret information encryption unit, generates decryption secret information, and stores the decrypted secret information in a storage device.

The medical image information processing apparatus further includes:
An encryption confirmation unit is provided for confirming that the decrypted secret information decoded by the secret information decryption unit matches the secret information extracted by the secret information extraction unit.

The medical image information processing apparatus further includes:
Medium storage for storing medical image information in which the confidential information erasing unit erases confidential information and the confidential information extracted by the confidential information extracting unit in a storage medium while maintaining a predetermined format for storing medical image information It comprises a part.

The medical image information processing apparatus further includes:
A reading unit that reads medical image information and confidential information obtained by erasing the confidential information stored in the storage medium by the medium storage unit;
Confirm that the medical image information and the confidential information read by the reading unit match the medical image information from which the confidential information erasing unit erases the confidential information and the confidential information extracted by the confidential information extracting unit, respectively. And a medium storage confirmation unit.

The medical image information processing apparatus further includes:
A digital signature is added to the medical image information stored in the storage medium by the medium storage unit while holding the predetermined format for storing the medical image information and the predetermined format of the medical image information. It comprises a part.

The medical image information processing apparatus further includes:
A hash value that holds a predetermined format for storing medical image information and also adds a hash value to the medical image information stored in the storage medium by the medium storage unit while holding the predetermined format of the medical image information It is characterized by providing a provision part.

  In addition, the medium storage unit does not write information related to the confidential information in recognition information that causes a predetermined medical image information apparatus to recognize information existing in the storage medium.

  The medical image information processing apparatus further transmits the medical image information from which the confidential information erasing unit erases the confidential information and the confidential information extracted by the confidential information extracting unit to a predetermined medical image information device via a communication device. An information transmission unit for transmission is provided.

The medical image information processing apparatus further includes:
An information receiving unit that receives medical image information transmitted from a predetermined medical image information device and stores the medical image information in a storage device is provided.

  Further, the information receiving unit receives medical image information and confidential information from which confidential information transmitted by another medical image information processing apparatus is deleted.

The medical image information processing system according to the present invention is, for example, a medical image information processing system including a medical image information transmission device and a medical image information reception device.
The medical image information transmitting device extracts confidential information from medical image information in a predetermined format including confidential information and stores the confidential information in a storage device;
While maintaining the predetermined format of the medical image information, the confidential information extracted by the confidential information extraction unit is deleted from the medical image information or deleted by replacing the confidential information, and stored in the storage device. And
An information transmitting unit that transmits the medical image information from which the confidential information erasing unit has deleted the confidential information and the confidential information extracted by the confidential information extracting unit to the medical image information receiving device via a communication device;
The medical image information receiving device receives the medical image information and the confidential information from which the confidential information transmitted by the information transmitting unit is erased, and stores the medical image information in the storage device;
An image restoration unit for restoring medical image information of a predetermined format including the confidential information and storing it in a storage device by restoring the confidential information to the medical image information from which the confidential information received by the information receiving unit is deleted; It is characterized by providing.

The data structure according to the present invention includes, for example, a file configuration designation file area for storing a file configuration designation file for designating a data file and a file configuration stored in a storage medium,
A designated data file area for storing a designated data file in accordance with a file structure designated by the file structure designation file stored in the file structure designation file area;
And a hidden data file area for storing a data file not specified by the file configuration specification file so that the data file cannot be recognized from the file configuration specified by the file configuration specification file.

The file configuration designation file designates a data file stored in each of the hierarchized directories,
The data file stored in the hidden data file area includes authentication data that proves the authenticity of all data files stored in the designated data file area in the directory in which the data file is stored.

The data file stored in the designated data file area includes information that does not encrypt medical image information from which confidential information is removed,
The data file stored in the hidden data file area includes information obtained by encrypting confidential information associated with medical image information.

The medical image information processing program according to the present invention includes, for example, confidential information extraction processing for extracting confidential information from medical image information in a predetermined format including confidential information and storing the confidential information in a storage device.
The confidential information erasure is performed by deleting the confidential information extracted in the confidential information extraction process from the medical image information or by replacing it with the replacement information while storing the predetermined format of the medical image information and storing the confidential information in the storage device. The processing is executed by a computer.

The medical image information processing program further includes:
Causing the computer to execute extraction information determination processing in which the processing device determines predetermined information included in the medical image information as confidential information based on a predetermined rule;
In the secret information extraction process, the secret information determined in the extraction information determination process is extracted.

  The extraction information determination process is characterized in that information in a predetermined language is determined as confidential information.

  Further, the extraction information determination process is characterized in that information that matches information stored in a predetermined storage device is determined as confidential information.

The medical image information processing program further includes:
Causing the computer to execute confidential information designation processing for designating identification information indicating a predetermined storage area by input from the input device;
In the secret information extraction process, information stored in a storage area indicated by the identification information designated in the secret information designation process is extracted as secret information.

The medical image information processing program further includes:
Causing the computer to execute extraction information determination processing in which the processing device determines the same information as the information stored in the storage area indicated by the identification information specified in the confidential information specification processing as confidential information extracted in the confidential information extraction processing,
In the secret information extraction process, the secret information determined in the extraction information determination process is extracted.

The medical image information processing program further includes:
By restoring the confidential information extracted by the confidential information extraction process to the medical image information from which the confidential information has been erased by the confidential information erasing process, the medical image information in a predetermined format including the confidential information is restored and stored in the storage device. The image restoration process to be stored is executed by a computer.

The medical image information processing program further includes:
A secret information encryption process for encrypting the secret information extracted in the secret information extraction process to generate encrypted secret information and storing the encrypted secret information in a storage device;
It is characterized in that the computer executes a secret information decryption process in which the encrypted secret information encrypted by the secret information encryption process is decrypted to generate decryption secret information and store it in a storage device.

The medical image information processing program further includes:
It is characterized by causing the computer to execute an encryption confirmation process for confirming that the decrypted secret information decrypted by the secret information decryption process matches the secret information extracted by the secret information extraction process.

The medical image information processing program further includes:
Medium storage for storing medical image information in which confidential information is erased in the confidential information erasing process and confidential information extracted in the confidential information extracting process in a storage medium while retaining a predetermined format for storing medical image information The processing is executed by a computer.

The medical image information processing program further includes:
A reading process for reading medical image information and confidential information obtained by erasing the confidential information stored in the storage medium in the medium storage process;
Confirm that the medical image information and the confidential information read by the reading process match the medical image information from which the confidential information has been deleted by the confidential information deletion process and the confidential information extracted by the confidential information extraction process, respectively. A medium storage confirmation process is executed by a computer.

The medical image information processing program further includes:
A signature is added to hold a predetermined format for storing medical image information, and to add an electronic signature to the medical image information stored in the storage medium by the medium storage process while holding the predetermined format of the medical image information The processing is executed by a computer.

The medical image information processing program further includes:
A hash value that holds a predetermined format for storing medical image information and adds a hash value to the medical image information stored in the storage medium by the medium storage processing while holding the predetermined format of the medical image information The granting process is executed by a computer.

  The medium storage process is characterized in that the information related to the confidential information is not written in the recognition information that causes a predetermined medical image information apparatus to recognize information existing in the storage medium.

The medical image information processing program further includes:
Causes a computer to execute information transmission processing for transmitting medical image information in which confidential information has been deleted in the confidential information deletion processing and confidential information extracted in the confidential information extraction processing to a predetermined medical image information device via a communication device. It is characterized by that.

The medical image information processing program further includes:
It is characterized by causing a computer to execute information reception processing for receiving medical image information transmitted by a predetermined medical image information device and storing it in a storage device.

  The information receiving process is characterized by receiving medical image information and confidential information obtained by deleting confidential information transmitted by another medical image information processing program.

A data storage program according to the present invention includes, for example, a file configuration designation file storage process for storing a file configuration designation file for designating a data file and a file configuration stored in a storage medium in a file configuration designation file area,
A designated data file storage process for storing a designated data file in a designated data file area of a storage medium in accordance with the file structure designated by the file structure designation file stored in the file structure designation file storage process;
Causing the computer to execute a hidden data file storage process for storing a data file not specified by the file configuration specification file in a hidden data file area of the storage medium so that the data file specified by the file configuration specification file cannot be recognized. It is characterized by that.

The file configuration designation file storage process creates a file configuration designation file for designating a data file stored in each of the hierarchized directories, stores the file configuration designation file in a storage medium,
The hidden data file storage process creates authentication data that proves the authenticity of all data files stored in a designated data file area in a predetermined directory and stores the authentication data in the hidden data file area in the directory of the storage medium. It is characterized by that.

Further, the specified data file storage process stores the medical image information from which the confidential information is removed in a storage medium without encryption,
The hidden data file storage process is characterized in that secret information associated with medical image information is encrypted and stored in a storage medium.

The medical image information processing method according to the present invention is, for example, in the medical image information processing method of the medical image information processing apparatus,
A confidential information extraction step in which the processing device extracts the confidential information from the medical image information in a predetermined format including the confidential information and stores the confidential information in the storage device;
The processing device deletes the confidential information extracted in the confidential information extraction step from the medical image information or replaces it with alternative information while storing the predetermined format of the medical image information, and stores it in the storage device And a secret information erasing step.

  According to the medical image information processing apparatus of the present invention, for example, confidential information can be erased from medical image information while maintaining a predetermined format of medical image information. Therefore, medical image information from which confidential information has been deleted can be reproduced by a normal medical image information apparatus.

  Hereinafter, embodiments will be described with reference to the drawings.

  First, the hardware configuration of the medical image information processing system 1000 according to the embodiment will be described.

FIG. 1 is a diagram illustrating an example of an appearance of a medical image information processing system 1000 according to an embodiment.
In FIG. 1, a medical image information processing system 1000 includes a system unit 909, a display device 901 having a CRT (Cathode / Ray / Tube) or LCD (liquid crystal) display screen, a keyboard 902 (Key / Board: K / B), The computer includes hardware resources such as a mouse 903, an FDD 904 (Flexible / Disc / Drive), a compact disk device 905 (CDD), a database 908, a server 910, and the like, which are connected by cables and signal lines.
The system unit 909 and the server 910 are computers, and are connected to the Internet 940 via a local area network 942 (LAN) and a gateway 941. The server 910 is an example of the medical image information processing apparatus 100.

FIG. 2 is a diagram illustrating an example of hardware resources of the medical image information processing apparatus 100 according to the embodiment.
In FIG. 2, the medical image information processing apparatus 100 includes a CPU 911 (also referred to as a central processing unit, a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, and a processor) that executes a program. The CPU 911 is connected to the ROM 913, the RAM 914, the communication board 915, the display device 901, the keyboard 902, the mouse 903, the FDD 904, the CDD 905, and the magnetic disk device 920 via the bus 912, and controls these hardware devices. Instead of the magnetic disk device 920, a storage device such as an optical disk device or a memory card read / write device may be used.
The RAM 914 is an example of a volatile memory. The storage media of the ROM 913, the FDD 904, the CDD 905, and the magnetic disk device 920 are an example of a nonvolatile memory. These are examples of the storage device 984.
The communication board 915, the keyboard 902, the scanner device 907, the FDD 904, and the like are examples of the input device 982.
Further, the communication board 915, the display device 901, the printer device 906, and the like are examples of output devices.

The communication board 915 is connected to the LAN 942 or the like. The communication board 915 is not limited to the LAN 942 and may be connected to the Internet 940, a WAN (wide area network) such as ISDN, or the like. The gateway 941 is unnecessary when directly connected to the WAN such as the Internet 940 or ISDN.
The magnetic disk device 920 stores an operating system 921 (OS), a window system 922, a program group 923, and a file group 924. The programs in the program group 923 are executed by the CPU 911, the operating system 921, and the window system 922.

The program group 923 stores programs for executing functions described as “˜unit” and “˜means” in the description of the embodiments described below. The program is read and executed by the CPU 911.
The file group 924 includes information, data, and signal values that are explained as a result of “determination of”, “calculation of”, “processing of”, and “confirmation of” in the description of the embodiment described below. And variable values and parameters are stored as items of “˜file”. The “˜file” is stored in a storage medium such as a disk or a memory. Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit, and extracted, searched, referenced, compared, and calculated. Used for CPU operations such as calculation / processing / output / printing / display. Information, data, signal values, variable values, and parameters are temporarily stored in the main memory, cache memory, and buffer memory during the CPU operations of extraction, search, reference, comparison, operation, calculation, processing, output, printing, and display. Is remembered.
In addition, the arrows in the flowcharts described in the following description of the embodiments mainly indicate input / output of data and signals. The data and signal values are the RAM 914 memory, the FDD 904 flexible disk, the CDD 905 compact disk, and the magnetic field. It is recorded on a storage medium such as a magnetic disk of the disk device 920, other optical disk, mini disk, DVD (Digital Versatile Disk) or the like. Data and signals are transmitted online via a bus 912, signal lines, cables, or other transmission media.

  In addition, what is described as “to part” and “to means” in the description of embodiments described below may be “to circuit”, “to apparatus”, “to apparatus”, and “means”. Also, “˜step”, “˜procedure”, and “˜processing” may be used. That is, what is described as “˜unit” and “˜means” may be realized by firmware stored in the ROM 913. Alternatively, only software, hardware such as elements, devices, substrates, and wiring, a combination of software and hardware, or a combination of firmware may be used. Firmware and software are stored as programs in a storage medium such as a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, and a DVD. The program is read by the CPU 911 and executed by the CPU 911. That is, the program causes the computer to function as “to part” and “to means” described below. Alternatively, the procedure or method of “˜unit” and “˜means” described below is executed by a computer.

Embodiment 1 FIG.
Next, the first embodiment will be described.
First, an outline of the medical image information processing system 1000 according to the first embodiment will be described. In the medical image information processing system 1000, a DICOM image is transmitted from a transmitting computer or the like to a receiving computer or the like.

An outline of functions of the medical image information processing system 1000 will be described with reference to FIG.
On the transmission side, the medical image information processing apparatus 100 (medical image information transmission apparatus) searches / collects DICOM images that exist in the DICOM network in the facility and DICOM images that exist in the media stored in the facility. Further, the medical image information processing apparatus 100 sets a condition for determining information to be kept secret from incidental information included in the collected DICOM image. Then, the medical image information processing apparatus 100 extracts the incidental information as confidential information based on the set conditions, creates a separate file, and deletes the confidential information from the DICOM image. The medical image information processing apparatus 100 attaches authentication information such as a digital signature and a hash value to the extracted confidential information and DICOM image, encrypts them, and transmits them to the receiving side. At this time, it can be transmitted via a network or stored in a medium for transmission.
Here, when transmitting via a network, the DICOM image which erase | eliminated confidential information is transmitted by DICOM communication, and the encrypted confidential information and authentication information are separately transmitted by e-mail etc. Further, all of the DICOM image from which the confidential information is deleted, the confidential information, and the authentication information may be transmitted by e-mail or the like.
On the other hand, on the receiving side, the medical image information processing apparatus 100 (medical image information receiving apparatus) acquires the DICOM image from which the confidential information transmitted by the transmitting medical image information processing apparatus 100 is deleted, the confidential information, and the authentication information. . Then, the user uses a normal medical image information apparatus such as a 3D image processing terminal or an image interpretation terminal, or a DICOM image acquired by the medical image information processing apparatus 100. A normal medical image information apparatus can analyze a DICOM image in a state where confidential information is erased. Further, the medical image information processing apparatus 100 can authenticate a hash value, an electronic signature, and the like, restore the erased confidential information to the medical image information, and use the medical image information in which the confidential information is restored. It is also possible to transfer to another device on the receiving side or a new storage medium.

Next, an outline of the operation of the medical image information processing system 1000 will be described with reference to FIG. Here, on the receiving side, the medical image information processing apparatus 100 performs processing.
First, a DICOM image is acquired on the transmission side (1). Next, confidential information (case information) is extracted from the DICOM image and stored in the case file. On the other hand, the secret information extracted from the DICOM image is erased to generate a masked DICOM image (2). Next, a MAC value (message authentication code) such as a hash value is generated based on either the DICOM image or the masked DICOM image (3). Next, the encrypted case file is generated by encrypting the case file (4). Then, the masked DICOM image, the encrypted case file, and the MAC value are transmitted. Here, since the confidential information is not included in the masked DICOM image, personal information or the like that is the confidential information does not leak. The encrypted case file includes confidential information but is encrypted, and personal information that is confidential information does not leak.
Next, on the receiving side, the encrypted case file is decrypted (5). Here, it is verified whether or not the case file has been falsified by an electronic signature or the like. Next, the DICOM image is restored from the masked DICOM image using the confidential information stored in the case file (6). Next, as in (3), a MAC value such as a hash value is generated based on either the DICOM image or the masked DICOM image (7). Then, the authenticity of the DICOM image is verified based on the generated MAC value and the received MAC value (8). When the verification is obtained, the DICOM image is reproduced.

  Next, detailed functions and operations of the medical image information processing system 1000 will be described with reference to FIGS. 5, 6, and 7.

FIG. 5 is a functional block diagram showing functions of the medical image information processing system 1000 according to the first embodiment. As illustrated in FIG. 5, the medical image information processing apparatus 100 includes a confidential processing unit 110, an image display processing unit 150, a display device 901, a processing device 980, an input device 982, a storage device 984, and a communication device 988. The concealment processing unit 110 and the image display processing unit 150 may be, for example, devices that are software, programs, and the like and operate with firmware or the like. In this case, the confidential processing unit 110 and the image display processing unit 150 are stored in the storage device 984 and processed by the processing device 980.
The confidential processing unit 110 extracts confidential information from the DICOM image, deletes the confidential information included in the DICOM image, and transmits the confidential information to a receiving computer or the like. The confidential processing unit 110 includes a confidential information specifying unit 112, an extracted information determining unit 114, a confidential information extracting unit 116, a confidential information erasing unit 118, a confidential information encryption unit 120, an encryption confirmation unit 122, a hash value assigning unit 124, a signature. An assigning unit 126, a medium storage unit 128, a medium storage confirmation unit 130, and an information transmission unit 132 are provided.
The image display processing unit 150 reproduces the DICOM image acquired from the medical image information processing apparatus 100 on the transmission side. The image display processing unit 150 includes a reading unit 152, a secret information decoding unit 154, an image restoration unit 156, a signature confirmation unit 158, a hash value confirmation unit 160, an image display unit 162, and an information reception unit 164.

  FIG. 6 is a flowchart showing a concealment process that is an operation of the concealment processing unit 110. The function and operation of the concealment processing unit 110 will be described with reference to FIGS. The medical image information transmitting apparatus executes the concealment process. Here, a process of transmitting a DICOM image from a transmitting computer or the like to a receiving computer or the like using a storage medium such as a CD (compact disk) will be described.

  First, in the image acquisition process (S11), the concealment processing unit 110 acquires a DICOM image existing in the DICOM network and a DICOM image existing in a medium stored in the facility.

  Next, in the condition setting process (confidential information specifying process, extracted information determining process) (S12), the confidential information specifying part 112 and the extracted information determining part 114 are information that is concealed from the incidental information included in the collected DICOM image. Is set, and information to be kept secret is determined based on the set condition. Details of processing performed by the confidential information specifying unit 112 and the extracted information determining unit 114 will be described later.

  Next, in the confidential information extraction process (S13), the confidential information extraction unit 116 extracts and stores the confidential information determined by the extraction information determination unit 114 in (S12) from the DICOM image in a predetermined format including the confidential information. Store in device 984.

  Next, in the confidential information erasure process (S14), the confidential information erasure unit 118 deletes the confidential information extracted by the confidential information extraction unit 116 from the DICOM image or replaces it with alternative information while maintaining a predetermined format of the DICOM image. As a result, the data is erased and stored in the storage device 984. The predetermined format of the DICOM image is, for example, a format conforming to the DICOM standard. Details of the process of erasing the confidential information while the confidential information erasing unit 118 retains the predetermined format of the DICOM image will be described later.

  Next, in the confidential information encryption process (S15), the confidential information encryption unit 120 encrypts the confidential information extracted by the confidential information extraction unit 116, generates encrypted confidential information, and stores the encrypted confidential information in the storage device 984. The encryption process of the secret information encryption unit 120 will be described later.

  Next, in the encryption confirmation process (S16), the confidential information decryption unit 154 included in the image display processing unit 150 decrypts the encrypted confidential information generated by the confidential information encryption unit 120 to generate decrypted confidential information. Then, the encryption confirmation unit 122 confirms that the decrypted confidential information matches the confidential information extracted by the confidential information extraction unit 116. That is, the encryption confirmation unit 122 confirms that the encryption process of the secret information encryption unit 120 has been performed normally.

  Next, in the hash value assigning process (S17), the hash value assigning unit 124 holds a predetermined format for storing the DICOM image, and also holds a predetermined format of the DICOM image while holding the hash value in the DICOM image. Is attached. For example, the hash value assigning unit 124 obtains a hash value based on either the DICOM image or the masked DICOM image, and stores the hash value in the storage device 984. Moreover, you may obtain | require a hash value separately also about confidential information. Here, the predetermined format for storing the DICOM image is, for example, a format conforming to the DICOM media storage standard. Processing for storing the hash value in the storage medium while the hash value giving unit 124 stores a predetermined format for storing the DICOM image will be described later.

  Next, in the signature adding process (S18), the signature adding unit 126 holds a predetermined format for storing the DICOM image and attaches an electronic signature to the DICOM image while holding the predetermined format of the DICOM image. . The predetermined format for storing the DICOM image is the same as described above. The electronic signature may be assigned to each of the DICOM image and the confidential information. Processing for storing the electronic signature in the storage medium while the signature giving unit 126 holds a predetermined format for storing the DICOM image will be described later.

  Next, in the medium storage process (S19), the medium storage unit 128 retains a predetermined format for storing the DICOM image, and the secret information extraction unit 118 deletes the secret information and the secret information extraction. The secret information extracted by the unit 116, the hash value provided by the hash value assigning unit 124, and the authentication information of the electronic signature provided by the signature attaching unit 126 are stored in a storage medium. Here, the encrypted confidential information generated by the confidential information encryption unit 120 is stored as the confidential information.

  In the medium storage confirmation process (S20), the reading unit 152 included in the image display processing unit 150 reads the DICOM image and the confidential information from the storage medium. Then, the medium storage confirmation unit 130 confirms that the read DICOM image and the confidential information match the DICOM image from which the confidential information erasing unit 118 has deleted the confidential information and the confidential information extracted by the confidential information extraction unit 116, respectively. Confirm. Here, since the confidential information is the encrypted confidential information generated by the confidential information encryption unit 120, the medium storage confirmation unit 130 determines that the encrypted confidential information generated by the confidential information encryption unit 120 and the reading unit 152 Confirm that the encrypted confidential information read matches. That is, the medium storage confirmation unit 130 confirms that the storage to the storage medium has been normally performed.

  By performing the processing as described above, the storage medium stores the DICOM image from which the confidential information such as personal information is deleted, the confidential information deleted from the DICOM image, and the authentication information of the electronic signature and the hash value. Is done. Since the DICOM image does not include confidential information and the confidential information extracted from the DICOM image is encrypted, leakage of the confidential information can be prevented. Further, the authenticity of information stored in the storage medium can be confirmed from the electronic signature and the hash value.

  FIG. 7 is a flowchart showing an image display process that is an operation of the image display processing unit 150. The function and operation of the image display processing unit 150 will be described with reference to FIGS. The medical image information receiving apparatus executes image display processing. Here, processing for acquiring and playing back a DICOM image transmitted from a storage medium by a computer on the transmission side will be described.

  First, in the reading process (S21), the reading unit 152 reads the DICOM image in which the secret information stored in the storage medium by the medium storage unit 128 of the secret processing unit 110 is erased and the encrypted encrypted secret information.

  Next, in the confidential information decoding process (S22), the confidential information decrypting unit 154 generates the decrypted confidential information by decrypting the encrypted encrypted confidential information, and stores the decrypted confidential information in the storage device 984. The decryption process of the confidential information decryption unit 154 will be described later.

  Next, in the image restoration process (S23), the image restoration unit 156 restores the confidential information by restoring the confidential information extracted by the confidential information extracting unit 116 to the DICOM image from which the confidential information erasing unit 118 has deleted the confidential information. The DICOM image of a predetermined format including the data is restored and stored in the storage device 984. That is, the image restoration unit 156 restores the secret information decoded by the secret information decoding unit 154 to the DICOM image from which the secret information deletion unit 118 has deleted the secret information.

  Next, in the signature confirmation process (S24), the signature confirmation unit 158 confirms the signature provided by the signature assignment unit 126. Thereby, it can confirm that it was what was transmitted from the legitimate transmission source. If the signature confirmation unit 158 cannot confirm the signature, the process ends.

  Next, in the hash value confirmation process (S25), the hash value confirmation unit 160 obtains a hash value based on either the received DICOM image or the restored DICOM image, and matches the hash value provided by the hash value assignment unit 124. Make sure you do. Similarly, a hash value is obtained for the confidential information, and it is confirmed that it matches the hash value assigned to the received confidential information. If the hash value confirmation unit 160 cannot confirm the hash value, the process ends.

  Next, in the display process (S26), the image display unit 162 displays a DICOM image on the display device 901 when the signature and the hash value can be confirmed.

Here, the receiving side medical image information processing apparatus 100 reproduces the information such as the DICOM image transmitted by the transmitting side medical image information processing apparatus 100. Since the medical image information processing apparatus 100 includes the image restoration unit 156, it can restore the confidential information deleted from the DICOM image and obtain a DICOM image including the confidential information. Further, since the signature confirmation unit 158 and the hash value confirmation unit 160 are provided, it is possible to confirm the electronic signature and the hash value.
However, there may be a case where the receiving side does not include the medical image information processing apparatus 100. Even in this case, when the transmission side stores a DICOM image or the like on the storage medium by the medical image information processing apparatus 100, the confidential information is included by a normal medical image information apparatus that is not the medical image information processing apparatus 100. No DICOM images can be played back. This is due to the following reason.
(1) During the confidential processing, the confidential information deleting unit 118 deletes the confidential information from the DICOM image while maintaining a predetermined format of the DICOM image.
(2) The medium storage unit 128 stores the DICOM image from which the confidential information is deleted and the confidential information in the storage medium while maintaining a predetermined format for storing the DICOM image.
(3) The hash value assigning unit 124 holds a predetermined format for storing the DICOM image, and adds a hash value to the DICOM image while holding the predetermined format of the DICOM image.
(4) The signature adding unit 126 holds a predetermined format for storing the DICOM image, and attaches an electronic signature to the DICOM image while holding the predetermined format of the DICOM image.
That is, the DICOM image from which the confidential information stored in the storage medium has been deleted retains a predetermined format such as the DICOM standard. In addition, the DICOM image from which the confidential information has been deleted is stored in a predetermined format for storing the DICOM image such as the DICOM media storage standard in the storage medium. Therefore, even a normal medical image information apparatus can reproduce a DICOM image from which confidential information has been deleted.

In the above description, a DICOM image or the like is transmitted via a storage medium. However, a DICOM image or the like can also be transmitted via a network. FIG. 8 and FIG. 9 are flowcharts respectively showing a concealment process and an image display process when a DICOM image is transmitted from a transmitting computer or the like to a receiving computer or the like via a network. Only the differences between the concealment process shown in FIG. 6 and the image display process shown in FIG. 7 will be described.
In FIG. 8, information transmission processing (S31) is performed in place of (S19) and (S20) shown in FIG. In (S31), the information transmission unit 132 sends the DICOM image from which the confidential information erasing unit 118 has erased the confidential information and the confidential information extracted by the confidential information extracting unit 116 to a predetermined medical image information device via the communication device 988. To send. The predetermined medical image information apparatus may be the medical image information processing apparatus 100 or a normal medical image information apparatus.
Further, in FIG. 9, the information reception process (S32) is performed instead of (S21) shown in FIG. In (S32), the information receiving unit 164 receives the DICOM image transmitted from the predetermined medical image information device and stores it in the storage device 984. Here, the DICOM image from which the confidential information transmitted by the information transmitting unit 132 is deleted and the confidential information are received.

  The concealment process and the image display process are an example of a medical image information processing program and a medical image information processing method. Further, the “˜processing” may be “˜process”.

Next, details of the processing performed by the confidential information specifying unit 112 and the extracted information determining unit 114 will be described with reference to FIG. FIG. 10 is an example of a screen for setting conditions for determining information to be kept secret by the secret information specifying unit 112.
The screen shown in FIG. 10 includes masking target DICOM tag information at the top of the screen and masking conditions at the bottom of the screen. On the screen of the DICOM tag information to be masked, incidental information to be kept secret for each patient can be set. On the masking condition screen, settings for extracting other confidential information and erasing the confidential information from the DICOM image can be performed.

A screen for DICOM tag information to be masked will be described. The setting of the DICOM tag to be masked here is an example of the operation of the confidential information specifying unit 112. In the DICOM tag information screen to be masked, incidental information to be concealed is set for each patient, but here, information that may be concealed is displayed as a list. Therefore, if there is other information that may be kept secret, it can be added. By checking the check box attached to each DICOM tag information and pressing the enter button in the bottom column of the screen, the information stored in the checked DICOM tag information is extracted as confidential information. Deleted from the DICOM image. That is, the confidential information specifying unit 112 specifies a DICOM tag that is identification information indicating a predetermined storage area by using the input device 982. Further, the extracted information determination unit 114 determines information to be concealed based on the information specified by the confidential information specifying unit 112. Here, in the process of deleting the confidential information from the DICOM image, the information including the DICOM tag is deleted, or the information in the DICOM tag is replaced with an empty character string or an arbitrary character string. There are things.
FIG. 11 shows an example of confidential information erasure processing for each DICOM tag. The items shown in FIG. 11 will be described. First, there is an item of information type indicating a large classification of DICOM tags. The information type includes a DICOM tag No. and its attributes as a small classification. Next, there are DICOM tag deletion / change conditions and default settings for each small classification. The DICOM tag erasure / change condition indicates the content of the confidential information erasure process. For example, if a dummy name or ID is entered in the name designation or ID designation column on the screen shown in FIG. 10, the patient name and patient ID are replaced with the name or ID, and if not entered Replace with an empty string. The patient name (alias), patient comments, etc. are deleted including the DICOM tag. In this way, by changing the erasing method for each DICOM tag, even a DICOM image after erasing confidential information can be in a format conforming to the DICOM standard. That is, if the DICOM tags such as the patient name and the patient ID are deleted, the format of the DICOM standard is destroyed, and there is a possibility that the normal medical image information terminal cannot reproduce the DICOM tag. Therefore, the DICOM tag is left for the patient name and patient ID, and the information stored therein is replaced with dummy information or an empty character string.
When the DICOM tag information display button is pressed, the screen shifts to the DICOM tag information screen shown in FIG. Since the DICOM tag information is displayed on the DICOM tag information screen, the contents of the information stored in each DICOM tag can be confirmed.

The masking condition screen will be described. On the masking condition screen, radio buttons are used to select whether to perform masking or not. When masking is performed, the masking is performed under the conditions set on the DICOM tag information screen to be masked. Also, in the DICOM tag information screen to be masked, conditions are set only for the default DICOM tag, but the DICOM tag includes an arbitrarily set DICOM tag called a DICOM private tag. That is, there is a possibility that the DICOM tag is arbitrarily set by the device or the like that has generated the DICOM image. It is unclear what information is set in the DICOM private tag. Therefore, as shown in the description of deleting all DICOM private tags in FIG. 10, the extraction information determination unit 114 can also determine confidential information to be deleted from all DICOM private tags. On the masking condition screen, in addition, whether or not the confidential information is to be exported, and when the confidential information is to be exported, a public key to be used for encryption is selected.
In addition to deleting all DICOM private tags, the extraction information determination unit 114 may determine predetermined information in a facility such as a patient database or a medical facility database even if information in a predetermined language such as Japanese is determined as confidential information. Even if information that matches the information stored in the storage device is determined as confidential information, information that matches the information stored in the storage area indicated by the DICOM tag specified by the confidential information specifying unit 112 is determined as confidential information. It doesn't matter. That is, the extraction information determination unit 114 determines predetermined information included in the DICOM image as confidential information based on a predetermined rule. The same information as the information stored in the storage area indicated by the DICOM tag specified by the confidential information specifying unit 112 is used as the confidential information. For example, the patient name tag is deleted on the screen of the DICOM tag information to be masked. When the information is selected, the same information as the information stored in the patient name tag included in the DICOM image including the DICOM private tag is handled as confidential information.

Next, the data structure of data stored in the storage medium by the medium storage unit 128 will be described with reference to FIG. FIG. 13 is a diagram illustrating an example of a data structure of data stored in the storage medium by the medium storage unit 128.
The storage medium has a hierarchical directory structure. Here, in the directory immediately below the storage medium, DICOMDIR (file configuration specification file, an example of recognition information) for specifying the data file and file structure stored in the storage medium, and the Patient directory (Patient1 to Patient1) provided for each patient. Patient N (N is a natural number)) and encrypted confidential information are stored. In addition, a Study directory (Study 1 to Study M (M is a natural number)) is stored in the Patient directory, and a Series directory (Series 1 to Series L (L is a natural number)) is stored in the Study directory. The Series directory stores DICOM images that are medical image information, and authentication information such as MAC values that are hash values and electronic signatures. Here, the authentication information indicates the authenticity and generation source of all DICOM images stored in the Series directory in which the authentication information is stored.
Here, the area for storing DICOMDIR is a file configuration designation file area. Here, DICOMDIR designates a data file and a file structure according to the DICOM media storage standard, and designates a data file stored in each directory of the hierarchized directory. That is, DICOMDIR specifies the file structure of the Patient directory, the Study directory, and the Series directory, and the data file of the DICOM image stored in the Series directory. That is, the area for storing the DICOM image is a designated data file storage area for storing a data file designated by DICOMDIR, which is a file configuration designation file. An area for storing authentication information, which is a data file not specified by DICOMDIR, and encrypted confidential information is a hidden data file area. The presence of the authentication information and the encrypted confidential information is not stored in DICOMDIR, and therefore is not recognized by a normal medical image information apparatus. Therefore, a normal medical image information apparatus recognizes only DICOM images stored in accordance with the DICOM media storage standard. Therefore, the DICOM image stored in the storage medium after the confidential information is erased by the medical image information processing apparatus 100 can be reproduced even by a normal medical image information apparatus.
In other words, in the medium storage process (S19), the medium storage unit 128 stores the file configuration designation file area DICOMDIR, which is a file configuration designation file for designating the data file and file configuration stored in the storage medium, in the file configuration designation file area. Execute file storage processing. Further, the medium storage unit 128 stores a DICOM image, which is a specified data file, in a specified data file area of the storage medium in accordance with the file configuration specified by the file configuration specifying file stored in the file configuration specifying file storage process. Executes specified data file storage processing. Further, the medium storage unit 128 stores the authentication information, which is a data file not specified by the file configuration specification file, and the encrypted confidential information from the file configuration specified by the file configuration specification file. The hidden data file storage process stored in the hidden data file area is executed.
The medium storage process is an example of a data storage program.

Next, the confidential information stored in the storage medium will be described based on FIG. FIG. 14 is a diagram illustrating the structure of confidential information stored in a storage medium.
The confidential information stored in the storage medium includes a confidential information portion and an electronic signature attached to the confidential information. Further, a MAC value may be provided. Here, the secret information portion has the same structure as the hierarchical structure of the directory shown in FIG. That is, each patient has a patient area, a patient area has a study area, and a study area has a series area. Each series area has an image area corresponding to each DICOM image. Information on DICOM tags extracted from the corresponding DICOM images is stored in the image area.
That is, the image restoration unit 156 retrieves information on the image area corresponding to each DICOM image, and restores each DICOM tag.

Next, the exchange of public keys for the encryption process of the secret information encryption unit 120 will be described based on FIGS. 15 and 16. FIG. 15 is a diagram showing an overview of public key exchange and encryption processing, and FIG. 16 is a diagram showing management of key rings used for encryption processing, decryption processing, and the like.
As shown in FIG. 15, the facility A on the sending side and the facilities B and C on the receiving side exchange public keys. Then, the DICOM image is transmitted from the facility A to the facility C. When the DICOM image is transmitted, the confidential information is erased from the DICOM image to be a separate file. The confidential information file is encrypted with the public key of the facility C. Therefore, even if the DICOM image is accidentally transmitted to the facility B or the transmitted DICOM image is intercepted, the confidential information cannot be decrypted without the facility C's private key. Therefore, the secret information cannot be opened except for the facility C.
Also, as shown in FIG. 16, the key ring is managed. First, a key pair of a public key and a private key is generated from a designated pass phrase, and is stored in the key ring as a key pair of the public key of the own system and the secret key of the own system. And a public key is acquired from another system (for example, system A). When the public key is acquired, if it is confirmed that the acquired public key is surely transmitted from the system A, the public key is registered in the key ring. In addition, the electronic signature is registered with the public key obtained by creating an electronic signature with the private key of the own system. When an encrypted file is transmitted from another system (for example, system A), it is decrypted with the public key of system A registered in the key ring. During the decryption process, the electronic signature stored together with the public key is verified. When the electronic signature is confirmed, it can be confirmed that the registered public key of the system A is the public key received from the system A.

Next, an example of the flow of encryption / decryption will be described. FIG. 17 is a diagram illustrating an example of the flow of encryption / decryption.
In the sending system, the plain text file is encrypted. In the transmission side system, an electronic signature is made with the private key of the transmission side system and encrypted with the public key of the reception side system. In addition, the use of the private key of the transmission side system is limited by a predetermined passphrase of the transmission side system. Then, an encrypted file is generated and transmitted to the receiving system. In the receiving system, the encrypted file is decrypted with the private key of the receiving system, and the electronic signature is confirmed with the public key of the transmitting system. Here, the use of the private key of the receiving system is limited by a predetermined passphrase of the receiving system.
In other words, in addition to encryption using a public key cryptosystem and an electronic signature, confidentiality is enhanced by requiring a passphrase when using a private key in each system.

Next, confirmation of data authenticity will be described. FIG. 18 is a diagram showing a flow of data authenticity confirmation processing. FIG. 19 is a diagram showing an example of a screen for confirming the authenticity of data. Here, a method using a shared key will be described as an example of authenticity confirmation processing.
As shown in FIG. 18, in the transmission side system, a message authentication code (MAC value) is generated based on a transmission target file or message and a shared key. Then, the file or message to be transmitted and the MAC value are transmitted to the receiving system. Here, the MAC value may be encrypted. In the receiving system, a MAC value is generated from the received file or message with the same shared key as that of the transmitting system. And authenticity is confirmed by confirming whether the produced | generated MAC value and received MAC value correspond.
As shown in FIG. 19, the medical image information processing apparatus 100 displays the authenticity confirmation result on the display device 901. Here, the confirmation result of authenticity is displayed for each series of DICOM images. If the item of the authenticity confirmation result is OK, it indicates that the authenticity has been confirmed, and if it is NG, it indicates that the authenticity cannot be confirmed. That is, if there is at least one series of NG DICOM images, it indicates that there is a possibility of falsification. In addition, here, when generating the MAC value, an identifier that uniquely indicates the MAC (Media Access Control) address of the medical image information processing apparatus 100 is included. Therefore, the creation source medical image information processing apparatus 100 can be specified. That is, even if the key for generating the MAC value (shared key in FIG. 18) is acquired by another person, it is determined whether or not the medical image information processing apparatus 100 created by the creation source item is correct. it can.

  Therefore, according to the medical image information processing apparatus 100 according to the first embodiment, it is possible to avoid the risk of a third party viewing or falsifying a medical image group distributed on a medium or the like. In addition, a medical image that does not include confidential information can be reproduced by a normal medical image information apparatus that is not the medical image information processing apparatus 100.

The medical image information processing apparatus 100 according to the first embodiment is summarized as follows.
The medical image information processing apparatus 100 includes means for separating confidential information, storing alternative information, and specifying setting conditions. That is, the medical image information processing apparatus 100 stores the confidential information in the medical image after separating the confidential information and the means for separately storing the confidential information such as the personal information of the patient in the storage and transmission of the medical image. Means for storing alternative information and means for specifying the setting conditions in detail.
In addition, the medical image information processing apparatus 100 includes means for automatically extracting confidential information. In other words, the medical image information processing apparatus 100 includes means for checking the entire contents of the medical image and automatically separating and storing the confidential information regardless of the setting conditions of the confidential information.
Furthermore, the medical image information processing apparatus 100 has a function of restoring confidential information. That is, the medical image information processing apparatus 100 includes a unit that restores the separated confidential information in the medical image.
Furthermore, the medical image information processing apparatus 100 has means for encrypting confidential information. That is, the medical image information processing apparatus 100 includes an encryption unit that encrypts confidential information and a decryption unit that decrypts the encrypted confidential information.
In addition, the medical image information processing apparatus 100 includes means for verifying the encrypted confidential information. In other words, the medical image information processing apparatus 100 has means for temporarily decrypting the encrypted confidential information and confirming that it matches the original confidential information.
Furthermore, the medical image information processing apparatus 100 includes a storage unit in the first medium. That is, the medical image information processing apparatus 100 includes a unit that stores and saves the medical image group after separation of the confidential information in a single medium.
Furthermore, the medical image information processing apparatus 100 includes a storage unit for storing the second medium. In other words, the medical image information processing apparatus 100 has means for storing and storing together with the encrypted confidential information in storing and storing in the medium.
In addition, the medical image information processing apparatus 100 includes means for performing verification before and after storage on a medium. In other words, the medical image information processing apparatus 100 includes means for confirming that the medical images before and after storage coincide with each other when the medical image group after separation of the confidential information is stored in the medium.
Further, the medical image information processing apparatus 100 has authenticity confirmation means. That is, the medical image information processing apparatus 100 adds authenticity by adding an electronic signature to the encrypted confidential information and the medical image group after separating the confidential information stored and stored in the medium. It has a means to confirm.
Further, the medical image information processing apparatus 100 has authenticity confirmation means for each series. That is, the medical image information processing apparatus 100 includes a unit that can check the authenticity for each image series.
Further, a medical image storage method including a step of executing the process of the above means, a medical image storage program for causing the computer to execute the process of the above means, and a medical image storage for causing the computer to execute the process of the above means A computer-readable recording medium on which a program is recorded.

The figure which shows an example of the external appearance of the medical image information processing system 1000 in embodiment. The figure which shows an example of the hardware resource of the medical image information processing system 1000 in embodiment. The figure which shows the outline | summary of the function of the medical image information processing system 1000. FIG. The figure which shows the outline | summary of a process of the medical image information processing system 1000. FIG. 2 is a functional block diagram showing functions of a medical image information processing system 1000 according to Embodiment 1. FIG. The flowchart which shows the confidential process which is operation | movement of the confidential process part 110 at the time of passing through a storage medium. The flowchart which shows the image display process which is operation | movement of the image display process part 150 at the time of passing through a storage medium. The flowchart which shows the confidential process which is operation | movement of the confidential process part 110 at the time of via a network. The flowchart which shows the image display process which is operation | movement of the image display process part 150 at the time of via a network. The figure which shows an example of the screen for setting the conditions which determine the information made confidential by the confidential information designation | designated part 112. FIG. The figure which shows an example of the erasure | elimination process of the confidential information for every DICOM tag. An example of the screen which displays DICOM tag information. The figure which shows an example of the data structure of the data which the medium memory | storage part 128 memorize | stores in a storage medium. The figure which shows the structure of the confidential information memorize | stored in the storage medium. The figure which shows the outline | summary of exchange of a public key, and encryption processing. The figure shown about management of the key ring used for an encryption process, a decoding process, etc. The figure which shows an example of the flow of encryption / decryption. The figure which shows the flow of a confirmation process of the authenticity of data. The figure which shows an example of the screen which confirms the authenticity of data.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 100 Medical image information processing apparatus, 1000 Medical image information processing system, 110 Confidential processing part, 150 Image display processing part, 112 Confidential information designation | designated part, 114 Extraction information determination part, 116 Confidential information extraction part, 118 Confidential information deletion part, 120 Secret information encryption unit, 122 Encryption confirmation unit, 124 Hash value assignment unit, 126 Signature assignment unit, 128 Medium storage unit, 130 Medium storage confirmation unit, 132 Information transmission unit, 152 Reading unit, 154 Secret information decryption unit, 156 Image restoration unit, 158 Signature confirmation unit, 160 Hash value confirmation unit, 162 Image display unit, 164 Information reception unit, 901 Display device, 902 Keyboard, 903 Mouse, 904 FDD, 905 CDD, 906 Printer device, 907 Scanner device, 909 System unit, 910 server, 91 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device, 921 OS, 922 window system, 923 program group, 924 file group, 931 telephone, 932 facsimile machine, 940 Internet, 941 gateway, 942 LAN.

Claims (12)

Medical image information that is medical image information in a predetermined format and handles medical image information in which attribute information indicated by the assigned identification information is stored for each storage area to which identification information indicating the attribute of the information to be stored is assigned An information processing device,
A secret information designation unit for designating identification information assigned to a storage area in which information of an attribute to be extracted is stored by an input device;
The same information as the information stored in the storage area to which the identification information designated by the confidential information designation unit is assigned, and processed as information for extracting the information stored in the storage area to which the other identification information is assigned An extraction information determination unit determined by the device;
From the medical image information , the information stored in the storage area to which the identification information specified by the confidential information specifying unit is assigned and the information determined by the extracted information determining unit are extracted as confidential information and stored in the storage device. A secret information extraction unit,
By deleting the secret information extracted by the secret information extraction unit from the medical image information or replacing the secret information with the identification information assigned to the storage area in which the secret information is stored. A medical image information processing apparatus comprising: a confidential information erasure unit that stores medical image information in which the confidential information is erased in a storage device while maintaining the predetermined format of the medical image information. The medical image information processing apparatus further includes:
By restoring the confidential information extracted by the confidential information extracting unit to the medical image information from which the confidential information erasing unit has erased the confidential information, the medical image information in a predetermined format including the confidential information is restored and stored in the storage device. The medical image information processing apparatus according to claim 1, further comprising an image restoration unit that stores the image. The medical image information processing apparatus further includes:
A secret information encryption unit that encrypts the secret information extracted by the secret information extraction unit to generate encrypted secret information and stores the encrypted secret information in a storage device;
The medical image information according to claim 1, further comprising: a secret information decryption unit that decrypts the encrypted secret information encrypted by the secret information encryption unit, generates decryption secret information, and stores the decrypted secret information in a storage device. Processing equipment. The medical image information processing apparatus further includes:
4. The medical image information processing according to claim 3, further comprising: an encryption confirmation unit that confirms that the decrypted secret information decoded by the secret information decryption unit matches the secret information extracted by the secret information extraction unit. apparatus. The medical image information processing apparatus further includes:
Medium storage for storing medical image information in which the confidential information erasing unit erases confidential information and the confidential information extracted by the confidential information extracting unit in a storage medium while maintaining a predetermined format for storing medical image information The medical image information processing apparatus according to claim 1, further comprising a unit. The medical image information processing apparatus further includes:
A reading unit that reads medical image information and confidential information obtained by erasing the confidential information stored in the storage medium by the medium storage unit;
Confirm that the medical image information and the confidential information read by the reading unit match the medical image information from which the confidential information erasing unit erases the confidential information and the confidential information extracted by the confidential information extracting unit, respectively. The medical image information processing apparatus according to claim 5, further comprising a medium storage confirmation unit. The medical image information processing apparatus further includes:
A digital signature is added to the medical image information stored in the storage medium by the medium storage unit while holding the predetermined format for storing the medical image information and the predetermined format of the medical image information. The medical image information processing apparatus according to claim 5, further comprising a unit. The medical image information processing apparatus further includes:
A hash value that holds a predetermined format for storing medical image information and also adds a hash value to the medical image information stored in the storage medium by the medium storage unit while holding the predetermined format of the medical image information The medical image information processing apparatus according to claim 5, further comprising an adding unit. 6. The medical image information processing apparatus according to claim 5 , wherein the medium storage unit does not write information related to the confidential information in recognition information that causes a predetermined medical image information apparatus to recognize information existing in the storage medium. . The medical image information processing apparatus further includes:
An information transmission unit that transmits the medical image information from which the confidential information erasing unit has deleted the confidential information and the confidential information extracted by the confidential information extraction unit to a predetermined medical image information device via a communication device. The medical image information processing apparatus according to claim 1. The medical image information processing apparatus further includes:
The medical image information processing apparatus according to claim 1, further comprising: an information receiving unit that receives medical image information transmitted by a predetermined medical image information apparatus and stores the medical image information in a storage device. 12. The medical image information processing apparatus according to claim 11 , wherein the information receiving unit receives medical image information and confidential information from which confidential information transmitted by another medical image information processing apparatus is deleted.

Images