Information management terminal device
An information management terminal device includes a health information acquisition means, a health information storage means that stores health information and a health information passbook, and a storage medium, in which the storage medium includes a concealed region accessible only by a specific program and a normal region accessible also by programs other than the specific program, the health information acquisition means adds a date/time record as the health information passbook, the health information storage means sequentially stores the health information and the health information passbook in the normal region, and that the concealed region holds a data alteration detection parameter for detecting alteration of the health information and/or the health information passbook.
1. A system using an information management terminal device comprising:
a health information distribution side device implemented by using a distribution side medium implemented as a storage medium, and the health information distribution side device is the information management terminal device;
a health information reception/analysis side device; and
a sensor configured to acquire first information, the first information being health information of a person which is an information owner, wherein
the health information distribution side device comprising the distribution side medium, an encoder, and a distribution unit, wherein
the distribution side medium includes:
a concealed region accessible by a specific program including a program causing the health information distribution side device to operate as the encoder and the distribution unit, the concealed region holds an alteration detection parameter for detecting alteration of the first information and/or second information and a data encryption key, and
a normal region accessible also by programs other than the specific program, the normal region holds an electronic signature based on a hash value of the first information and the second information,
the encoder:
acquires the first information from the sensor,
sequentially stores, in the normal region, the first information and the second information without overwriting, the second information being additional information of the first information,
adds a date/time record as the second information, and
sequentially stores, in the normal region, the first information or a link capable of referring to the first information, and the second information or a link capable of referring to the second information, and
the distribution unit:
generates a health information container to be distributed by selecting information to be distributed from the first information and the second information in the normal region and containerizing the first information and the second information,
sets a concealment level which is designated by the information owner of the selected information to be distributed, wherein the concealment level is selected from one of the following:
class 0 in which the information to be distributed is transmitted to the health information reception/analysis side device without being encrypted,
class 1 in which the information to be distributed is encrypted and transmitted to the health information reception/analysis side device, and
class 2 in which the information to be distributed is encrypted, prohibited from being copied at an output destination including the health information reception/analysis side device, set to have a validity period, and transmitted to the health information reception/analysis side device,
adds the concealment level to the information to be distributed as additional information, and
distributes the health information container and the electronic signature to the health information reception/analysis side device,
the health information reception/analysis side device comprising a reception/analysis side medium as a storage medium, a decoder, and a transmission/reception unit, wherein
the reception/analysis side medium includes:
a concealed region accessible by a specific program including a program causing the health information reception/analysis side device to operate as the decoder and the transmission/reception unit, the concealed region holds a signature key and the data encryption key, and
a normal region accessible also by programs other than the specific program,
the decoder analyzes or displays the first information and the second information according to the concealment level, and
the transmission/reception unit:
receives the health information container and the electronic signature from the health information distribution side device through one-to-one communication by peer to peer (P2P) between the health-information distribution side device and the health-information reception/analysis side device,
determines the concealment level added to the first information and the second information,
detects whether the first information and/or the second information has been altered by verifying the electronic signature using the signature key, and
handles the first information, the second information, and an analysis result according to the concealment level, in which
for the class 0, the first information and the second information are handled without being encrypted,
for the class 1, the first information and the second information are encrypted and handled, and
for the class 2, the first information and the second information are encrypted, prohibited from being copied at the output destination, set to have a validity period, and handled.
2. The system using the information management terminal device according to claim 1 , wherein the encoder performs an alteration detection process of the specific program using a program alteration detection parameter for detecting alteration of the specific program, the program alteration detection parameter being included in the concealed region.
3. The system using the information management terminal device according to claim 2 , wherein
the encoder periodically performs the alteration detection process of the specific program, and
the health information distribution side device deletes or recovers, when the encoder detects alteration of the specific program, the first information and the second information stored from a point of time when the alteration detection process of the specific program is previously performed until a point of time when the alteration of the specific program is detected.
4. The system using the information management terminal device according to claim 1 , wherein
the encoder performs an alteration detection process of the first information and/or the second information using the alteration detection parameter, wherein
the health information distribution side device deletes or recovers, when the encoder detects alteration of the first information and/or the second information, the first information and the second information stored from a point of time when the alteration detection process of the first information and/or the second information is previously performed until a point of time when the alteration of the first information and/or the second information is detected.
5. The system for using the information management terminal device according to claim 1 , wherein
the second information includes at least one of an output history of the distribution unit, information specifying an output destination of the distribution unit, the concealment level, and a process result at the output destination of the distribution unit.
6. The system using the information management terminal device according to claim 1 , wherein
the health information distribution side device performs a biometric authentication of the information owner,
the encoder:
acquires identifiers unique to the sensors to be targeted by the information owner when the sensor is installed, initially registered, or changed in the registration;
stores the identifiers in the normal region;
performs an authentication process of the sensor using the identifiers in the normal region;
acquires the first information from the sensor when it is determined that the authentication process of the sensor succeeded.
7. The system using the information management terminal device according to claim 1 , wherein
the first information includes biological information and behavior information,
the decoder performs analysis by visualizing mutual relations of the biological information, the behavior information, and environmental information.
8. The system using the information management terminal device according to claim 1 , wherein
the decoder:
reanalyzes the analysis result,
transmits a second analysis result to the output destination,
the transmission/reception unit receives the analysis result from the output destination.
9. The system using the information management terminal device according to claim 1 , wherein the health information reception/analysis side device is a second information management terminal device.