Medical apparatus and method for controlling access to medical data

A medical apparatus comprising:

• an operator attribute information storing unit that stores attribute information of an operator as operator attribute information;
• a medical data storing unit that stores medical data;
• a data authorship information storing unit that stores authorship information of medical data as data authorship information;
• an access control information creating unit that creates access control information so as to control an access of the operator to medical data by using at least one of the operator attribute information and the data authorship information;
• an access control information storing unit that stores the access control information;
• an access control information acquiring unit that acquires the access control information from the access control information storing unit;
• an operator attribute information acquiring unit that acquires the operator attribute information required for judging accessibility according to the access control information acquired by the access control information acquiring unit from the operator attribute information storing unit;
• a data authorship information acquiring unit that acquires the data authorship information required for judging accessibility according to the access control information acquired by the access control information acquiring unit from the data authorship information storing unit;
• and
• an accessibility judging unit that judges accessibility of the operator to medical data on the basis of at least one of the operator attribute information received from the operator attribute information acquiring unit and the data authorship information received from the data authorship information acquiring unit according to the access control information received from the access control information acquiring unit, and performs access limitation to unpermitted medical data.

A method of controlling an access to medical data comprising:

• storing attribute information of an operator as operator attribute information;
• storing medical data;
• storing authorship information of medical data as data authorship information;
• and
• performing access control so as to control an access of the operator to medical data by using the operator attribute information and the data authorship information.

A method of controlling an access to medical data comprising:

• creating access control information so as to control an access of an operator to medical data stored in a medical apparatus by using at least one of attribute information of the operator stored as operator attribute information and authorship information of medical data stored as data authorship information in the medical apparatus;
• storing the access control information;
• acquiring the access control information from the stored access control information;
• acquiring the operator attribute information required for judging accessibility according to the acquired access control information;
• acquiring the data authorship information required for judging accessibility according to the acquired access control information;
• and
• judging accessibility of the operator to medical data on the basis of at least one of the acquired operator attribute information and data authorship information according to the acquired access control information, and performing access limitation to unpermitted medical data.