Medical data communication apparatus, server, medical data communication method and medical data communication program

A medical data communication apparatus includes a data acquisition unit configured to acquire medical data of a subject output from a medical device from the medical device, the medical device being connected for communication with the medical data communication apparatus without an external network intervening therebetween; a modification unit configured to modify the medical data based on a modification instruction received from a server, the server being connected for communication with the medical data communication apparatus through an external network, the modification instruction being for modifying specific information in the medical data; and an output unit configured to output the medical data modified by the modification unit to the external network based on a request from the server.

CROSS REFERENCE TO RELATED APPLICATIONS

This application is based upon and claims the benefit of priority from Japanese patent application No. 2017-226003, filed on Nov. 24, 2017, the disclosure of which is incorporated herein in its entirety by reference.

BACKGROUND

The present disclosure relates to a medical data communication apparatus, a server, a medical data communication method and a medical data communication program.

Medical data of subjects output from medical devices includes a lot of personal information. Therefore, for distributing medical data to an external network such as the Internet, some measures need to be taken so that personal information is not spread even if it is stolen during the distribution. As an example of such measures, a technique for encrypting an entire file including medical data is known. Further, a technique for protecting personal information by replacing specific information with anonymous information is also known. (see Japanese Unexamined Patent Application Publication No. 2015-7885 as an example)

SUMMARY

In the case of using the technique for encrypting data, there is a possibility that personal information may be decrypted and spread. Some predefined information can be replaced with anonymous data as described above. However, the range of personal information that needs to be protected changes according to laws and guidelines regarding medical devices, the needs of the time etc. Especially, since medical devices are often used after they are properly authenticated together with software to be performed, it is practically difficult to frequently update such medical devices as to what kind of information is output to an external network.

In the present disclosure, a technique capable of flexibly changing a range of protection of personal information included in medical data and safely distributing the medical data to an external network will be described.

A first exemplary aspect is a medical data communication apparatus, including: a data acquisition unit configured to acquire medical data of a subject output from a medical device from the medical device, the medical device being connected for communication with the medical data communication apparatus without an external network intervening therebetween; a modification unit configured to modify the medical data based on a modification instruction received from a server, the server being connected for communication with the medical data communication apparatus through the external network, the modification instruction being for modifying specific information in the medical data; and an output unit configured to output the medical data modified by the modification unit to the external network based on a request from the server.

By interposing the medical data communication apparatus between the external network and the medical device as described above, specific information in the medical data can be flexibly modified according to a use environment without changing the medical device, which is needed to be authenticated for a change in its specifications etc. Further, the specific information is modified before being output to the external network. Therefore, there is no possibility that the specific information may be spread before it is modified even when the medical data is stolen in a distribution process on the external network.

In the medical data communication apparatus described above, when the medical data includes image information of the subject, the modification unit may perform a mask processing on at least a part of an image of the image information based on the modification instruction. Further, the image information may be replaced with a CG based on the modification instruction. By performing such image processing, personal information in the image (e.g., an image of text indicating personal information) can also be protected.

Further, in the above-described medical data communication apparatus, when the medical data includes a description section in which information attributed to the subject is described and the attributed information described in the description section is modified based on the modification instruction, the modification unit may make a search as to whether the described attributed information is included in a section other than the description section, and also modify the attributed information found in the search. By performing such additional processing, for example, even when a name of the subject is included in a comment described in a comment section, the name is properly modified so that the attributed information can be thoroughly protected.

A second exemplary aspect is a server connected for communication with a medical data communication apparatus through an external network, the medical data communication apparatus being connected for communication with a medical device without the external network intervening therebetween, the server includes: a transmission unit configured to transmit a modification instruction for modifying specific information in medical data of a subject output from the medical device to the medical data communication apparatus through the external network before the server receives the medical data, and a reception unit configured to receive the medical data modified based on the modification instruction through the external network.

By having the server provide the modification instruction to the medical data communication apparatus interposed between the server and the medical device, instead of providing the modification instruction to the medical device, specific information of medical data can be flexibly modified according to a use environment without changing a medical device needed to be authenticated for a change of a specification, etc. Further, since the server receives the modified medical data, there is no possibility that the specific information may be spread before it is modified even when the medical data is stolen in a distribution process on the external network.

A third exemplary aspect is a medical data communication method including: a data acquisition step of acquiring medical data of a subject output from a medical device from the medical device, the medical device being connected for communication without an intervening external network; a reception step of receiving a modification instruction for modifying specific information in the medical data from a server connected for communication through the external network; a modification step of modifying the medical data based on the specific information; and an output step of outputting the medical data modified by the modification step to the external network based on a request from the server.

Further, a fourth exemplary aspect is a method for medical data communication between a medical data communication device and a server, the medical data communication device being connected for communication with a medical device without an external network intervening therebetween, the server being connected for communication with the medical data communication apparatus through the external network, the method including: a transmission step of transmitting a modification instruction for modifying specific information in medical data of a subject output from the medical device to the medical data communication apparatus through the external network before receiving the medical data, and a reception step of receiving the medical data modified based on the modification instruction through the external network.

According to the medical data communication methods in accordance with the third and fourth exemplary aspects described above, specific information of medical data can be flexibly modified according to a use environment without changing the medical device, which is needed to be authenticated for a change in its specifications etc. Further, the specific information is modified before being output to the external network. Therefore, there is no possibility that the specific information may be spread before it is modified even when the medical data is stolen in a distribution process on the external network.

A fifth exemplary aspect is a medical data communication program for causing a computer in a medical data communication device to perform: a data acquisition step of acquiring medical data of a subject output from a medical device from the medical device, the medical device being connected for communication without an intervening external network; a reception step of receiving a modification instruction for modifying specific information in the medical data from a server connected for communication through the external network; a modification step of modifying the medical data based on the specific information; and an output step of outputting the medical data modified by the modification stop to the external network based on a request from the server.

Further, a sixth exemplary aspect is a program for medical data communication between a medical data communication device and a server, the medical data communication device being connected for communication with a medical device without an external network intervening therebetween, the server being connected for communication with the medical data communication apparatus through the external network, the program being adapted for causing a computer in a server to perform: a transmission step of transmitting a modification instruction for modifying specific information in medical data of a subject output from the medical device to the medical data communication apparatus through the external network before receiving the medical data, and a reception step of receiving the medical data modified based on the modification instruction through the external network.

According to the medical data communication methods in accordance with the fifth and sixth exemplary aspects described above, specific information of medical data can be flexibly modified according to a use environment without changing the medical device, which is needed to be authenticated for a change in its specifications etc. Further, the specific information is modified before being output to the external network. Therefore, there is no possibility that the specific information may be spread before it is modified even when the medical data is stolen in a distribution process on the external network.

DESCRIPTION OF EMBODIMENTS

Hereinafter, although the present disclosure will be described with reference to embodiments of the invention, the present disclosure according to claims is not limited to the following embodiments. Further, all the components described in the following embodiments are not necessarily indispensable for means to solve problems.

FIG. 1is an overall conceptual diagram showing a walking training system according to this embodiment. The walking training system mainly includes a walking training apparatus100, an external communication apparatus300and a server500. The walking training apparatus100is an apparatus by which a trainee900, who is, for example, a hemiplegia patient suffering from paralysis in one of his/her legs, does walking training. The walking training apparatus100is an example of medical devices and outputs training data generated by associating a training result of the trainee900with information attributed to the trainee900, such as the name of the trainee900. The trainee900is a subject and the training data of the trainee900is handled as medical data showing a status of rehabilitation of the subject.

The walking training apparatus100mainly includes a control panel133attached to a frame130forming an overall framework, a treadmill131on which the trainee900walks, and a walking assistance apparatus120attached to the diseased leg, i.e., the leg on the paralyzed side of the trainee900. The frame130is disposed on the treadmill131mounted on a floor surface in a standing state. The treadmill131rotates a ring-shaped belt132by using a motor (not shown). The treadmill131is an apparatus which urges the trainee900to walk. The trainee900, who is performing walking training, gets on the belt132and tries to walk according to the movement of the belt132.

The frame130supports the control panel133that houses an overall control unit210that controls motors or sensors, a training monitor138that is formed by, for example, a liquid-crystal panel and shows progress of the training etc. to the trainee900, and so on. Further, the frame130supports a front pulling unit135in a position located above and in front of the head of the trainee900and a rear pulling unit137in a position located above and behind the head of the trainee900.

A camera140functions as an image pickup unit for observing the whole body of the trainee900. The camera140is disposed in the vicinity of the training monitor138so that it faces the trainee. The camera140includes a set of a lens and an image pickup device having such an angle of view that the whole body of the trainee900can be captured. The image pickup device is, for example, a CMOS image sensor, and it converts an optical image formed on an image forming surface into an image signal.

One end of a front wire134is connected to a winding mechanism of the front pulling unit135and the other end of the front wire134is connected to the walking assistance apparatus120. The winding mechanism of the front pulling unit135winds up and pays out the front wire134according to the movement of the diseased leg by turning on or off the motor (not shown). Similarly, one end of a rear wire136is connected to a winding mechanism of the rear pulling unit137and the other end of the rear wire136is connected to the walking assistance apparatus120. The winding mechanism of the rear pulling unit137winds up and pays out the rear wire136according to the movement of the diseased leg by turning on or off the motor (not shown). By such cooperative operations performed by the front and the rear pulling units135and137, the load (e.g., the weight) of the walking assistance apparatus120is cancelled out and hence does not act as a burden on the diseased leg, and a swinging motion of the diseased leg is assisted according to a set level.

For example, an operator who is a training assistant sets an assisting level to a high value for a trainee having severe paralysis. When the assisting level is set high, the front pulling unit135winds up the front wire134with a relatively strong force in synchronization with the swinging motion of the diseased leg. When the assistance becomes unnecessary as the training proceeds, the operator sets the assisting level to a minimum value. When the assisting level is set to the minimum value, the front pulling unit135winds up the front wire134with a force by which the weight of the walking assistance apparatus120is just cancelled in synchronization with the swinging motion of the diseased leg.

The walking assistance apparatus120is attached to the diseased leg of the trainee900to assist the trainee900in his/her walking. by reducing the burden of extending and bending motions in the knee joint of the diseased leg. Specifically, the burden in the knee joint of the diseased leg is reduced by using the motor (not shown) which generates a driving force to assist the extending and bending motions of the knee joint. Further, the walking assistance apparatus120includes a sensor and the like for measuring a load (e.g., a pressure) on the sole, and outputs their outputs as data on the moving leg to the overall control unit210.

The external communication apparatus300is an example of the medical data communication apparatuses. The external communication apparatus300has a function of receiving and storing training data output from the walking training apparatus100. Further, the external communication apparatus300has functions of receiving a modification instruction of training data from the server500and modifying the training data according to that modification instruction, and a function of transmitting the training data to the server500. The external communication apparatus300is connected to the control panel133of the walking training apparatus100by, for example, a USB cable, and is also connected for communication to an Internet network400as an example of external networks through a wireless communication device410which is, for example, a wireless LAN unit.

The server500is connected to the Internet network400and has a function of accumulating training data received from the external communication apparatus300. Further, the server500has a function of providing accumulated training data according to a request of a terminal600connected to the internet network400. Thus, a data viewer (e.g., a user) can read and view training data accumulated in the server500by operating the terminal600.

Further, the server500has functions of generating a modification instruction to modify the specified information of the training data in order to define a data format of the training data distributed through the Internet network400, and transmitting the modification instruction to the external communication apparatus300. The details will be described later. Note that training data accumulated by the server500is not limited to training data output from one walking training apparatus100. Further, training data output from a plurality of walking training apparatuses may be comprehensively managed. Further, in this embodiment, the walking training apparatus100is given as an example of medical devices. However, the medical data is not limited to training data output from the walking training apparatus100and may be data output from various other medical devices or rehabilitation apparatuses. Thus, the server500may be an apparatus to comprehensively manage medical data output from each of a plurality of medical devices.

In the above-described walking training system, the walking training apparatus100is connected to the Internet network400through the external communication apparatus300as described above and does not have a communication function of directly connecting to the Internet network400. That is, the walking training apparatus100does not directly output training data to the external network. By interposing the external communication apparatus300between the Internet network400and the walking training apparatus100as described above, it is possible to prevent training data from being leaked from the walking training apparatus100. The connection between the walking training apparatus100and the external communication apparatus300is not limited to connection using a USB cable. That is, various communication standards can be adopted as long as they use communication paths that do not go through any external network.

FIG. 2is a block diagram showing a configuration of the walking training apparatus100. The overall control unit210is, for example, an MPU, and controls the overall operation of the apparatus by executing a control program loaded from the system memory. A drive unit211includes a motor and its drive circuit for each of the belt132, the front pulling unit135, the rear pulling unit137, and the walking assistance apparatus120, which are disposed in a distributed manner. The overall control unit210performs drive control by transmitting drive signals to the respective drive units211. For example, the overall control unit210adjusts the rotation speed of the belt132according to the set walking speed and turns the motors of the front and rear pulling units135and137on/off in synchronization with the timing at which the diseased leg is changed from a leg-standing state to a leg-idling state.

An operation receiving unit212receives an input operation performed by the trainee900or an operator and transmits an operation signal to the overall control unit210. The trainee900or the operator operates operation buttons provided in the apparatus, a remote controller belonging to the apparatus, or the like, which constitutes the operation receiving unit212, and thereby provides an instruction to turn on/off a power supply, to start a training, enters numerical values for the setting, or selects a menu item.

An input/output unit213includes, for example, a USB interface, and is a communication interface to connect the external communication apparatus300or other external apparatuses. The overall control unit210communicates with the external apparatus through the input/output unit213. By doing so, the overall control unit210rewrites a training program, receives commands, and outputs generated training data.

An image processing unit214generates image data by image-processing an image signal received from the camera140according to an instruction received from the overall control unit210. Further, the image processing unit214can perform a specific image analysis by image-processing an image signal received from the camera140according to an instruction received from the overall control unit210. For example, the image processing unit214detects a position of the diseased leg (leg-standing position) in contact with the treadmill131by performing an image analysis. Further, the image processing unit214can generate image data by performing a trimming or the like in order to adapt image data to the data format of training data. For example, the image processing unit214cuts out an area near the foot (hereinafter referred to as a foot area) from the image data when generating moving image data of the moving leg.

A display control unit215receives a display signal from the overall control unit210, generates a display image, and displays the generated image on the training monitor138. The display control unit215generates images showing the progress of the training and real-time video images taken by the camera140according to the display signal.

A sensor unit216includes various sensors disposed in a distributed manner and their drive circuits. The overall control unit210performs sensing control by transmitting a sensing starting signal or an output request signal for each of the sensors to the sensor unit216. The overall control unit210processes received sensor outputs, records the processed data on the training data, performs feedback for the subsequent control, and so on.

The overall control unit210also functions as a function performing unit which performs various calculations and controls related to the control. A training management unit210acontrols the walking training apparatus100according to a training program and successively collects information on the walking training of the trainee900. A data generating unit210bgenerates training data in a predetermined format from the information on the walking training collected by the training management unit210a, the state of the apparatus, information attributed to the trainee900himself/herself, and so on.

FIG. 3is a block diagram shows a configuration of the external communication system300. A processing unit310is, for example, an MPU, and performs processes which the external communication apparatus300is in charge of by executing a control program loaded from the system memory.

The input/output unit313includes, for example, a USB interface, and is a communication interface for connecting for communication with the walking training apparatus100. The processing unit310communicates with the walking training apparatus100through the input/output unit313. Further, the processing unit310receives training data output from the walking training apparatus100and transmits various request signals to the walking training apparatus100.

A communication IF314includes, for example, a wireless LAN interface, and is a communication interface for connecting the Internet network400. In the example shown inFIG. 1, the communication IF314connects the Internet network400by using a wireless communication device410as an access point. The processing unit310communicates with the server500through the communication IF314. Further, the processing unit310receives a modification instruction of training data from the server500, modifies designated training data according to the modification instruction, and transmits modified data to the server500.

A storage unit320is, for example, a HDD, and stores training data. The processing unit310writes training data (hereinafter, in particular, may be referred to as “raw training data”) received from the walking training apparatus100through the input/output unit213into the storage unit320. Further, the processing unit310writes training data (hereinafter, in particular, may be referred to as “modified training data”) modified according to a modification instruction into the storage unit320. When training data requested from the server500through the communication IF314has already been stored as modified training data in the storage unit320, the processing unit310reads the modified training data from the storage unit320and transmits the read modified training data to the server500.

The processing unit310functions as a function performing unit which performs various calculations and controls related to the control. A modification unit310a, as one of its functions, modifies raw training data into modified training data according to a modification instruction received from the server500. Note that in this embodiment, raw training data is kept in the storage unit320when the modification unit310agenerates modified training data. The processing unit310permits an external terminal to view raw training data only when the external terminal is connected through the input/output unit313. That is, the processing unit310permits the external output of raw training data only when the external output is performed through the input/output unit313, and prohibits the external output of raw training data when the external output is performed through the communication IF314. With such structures, it is possible to prevent personal information of the trainee900from being leaked from an external network and ensure opportunities for specific viewers such as a doctor to examine training data before it is modified.

FIG. 4is a block diagram showing a configuration of the server500. A processing unit510is, for example, an MPU, and controls the server500by executing a control program loaded from a system memory.

A communication IF514includes, for example, a wired LAN interface, and is a communication interface for connecting for communication with the Internet network400. The processing unit510transmits a modification instruction of training data to the communication apparatus300and receives modified training data from the external communication apparatus300through the communication IF514. Further, the processing unit510transmits modified training data to the terminal600according to a request from the terminal600. Further, the processing unit510may receive an instruction for specifying an operation performed by the server500from the terminal600.

An operation unit515is an input device such as a keyboard or a mouse connected to the main server unit, and is operated by a system administrator when he/she creates a modification instruction, etc. The operation unit510receives an operation processing of the operation unit515. Further, the operation unit510generates a modification instruction in conformity with a predetermined command format and requests the external communication apparatus300to perform a specific processing.

A data accumulation unit520is, for example, an HDD, and stores modified training data. The processing unit510writes modified training data received from the external communication apparatus300through the communication IF514into the data accumulation unit520. Further, the processing unit510reads modified training data requested from the terminal600through the communication IF514from the data accumulation unit520and transmits the read data to the terminal600.

A walking training apparatus authenticated as a medical device is used according to laws or guidelines regarding medical devices. Thus, in general, once a walking training apparatus is used, its structure and control program are prohibited from being altered. Meanwhile, since such laws or guidelines may be revised and there is an influence of public opinion that changes with time, the range of personal information that needs to be protected changes. In the past, when the protection range of personal information on training data to be output has been changed, it has been necessary for the walking training apparatus to be authenticated again as a medical device after the software is updated.

Contrary to the above, the walking training apparatus100according to this embodiment adopts specifications according to which training data are output as it is (i.e., raw training data is output) from the input/output unit213without performing a mask process or encryption for protecting personal information. However, since the walking training apparatus100does not have a function of directly connecting to an external network as described above, it eliminates the possibility that raw training data in which personal information is not protected may be stolen by a malicious outsider.

Next, raw training data will be described.FIG. 5shows a state in which an example of raw training data which is training data before it is modified is visibly displayed. The raw training data is formed by associating a main file, where information attributed to the trainee900such as a name and the training result of the trainee900are compiled, with a related image file.

As shown inFIG. 5, by displaying the raw training data on a viewing monitor, a viewer such as a doctor can visually recognize the attributed information, the training result, the image data and the like of the trainee900. Examples of attributed information include a trainee ID, a name, a sex, a date of birth, an age, and a face photograph (identification image). These information items identify the trainee900. An identification image itself may be in a format in which an image data is embedded in the main file or a format in which link information for an image file is written in the main file.

Examples of training results include an average evaluation value of training, vital information such as a pulse change, a comment from a physical therapist who has accompanied the trainee in the training, a moving image of a moving leg, and detailed data of each trial. Regarding the moving image, in the example shown inFIG. 5, a moving image of a foot area obtained by trimming an image taken by the camera140and a side moving image taken by a side camera (not shown inFIG. 1) are captured as link information. For the moving image of the foot area, for example, a moving image file named “A000325.mp4” is linked. When images are taken in each of a plurality of trials, a plurality of moving image files are linked. In addition, names of a physical therapist who has accompanied a trainee, an administrator who creates training data or the like are recorded as a part of training data.

In the raw training data described above, for example, a name of the trainee900or a face of the trainee900in the side moving image may be personal information. It is undesirable that such personal information is stolen by a malicious third party in the distribution process on the Internet network400. However, which items should be protected as personal information changes according to the influence of public opinions changing with the time or the like as described above. Thus, in the walking training system according to this embodiment, a system administrator determines which items should be protected as personal information. The system administrator inputs the determined item by operating the operation unit515of the server500and the processing unit510generates, for example, an instruction for modifying a file format in response to the administrator's operation.

FIG. 6shows contents of a modification instruction file. According to the modification instructions shown inFIG. 6, “unmodifiable” is entered in each of a name, a date of birth, and an identification image. That is, it is indicated that they should be deleted from the training data. Further, “classification (according to generation)” is entered for ages. That is, it is indicated that specific ages should be expressed in generations such as 10s or 20s. Further, “face mosaic (or pixelization) processing” is entered for a moving-leg video image. That is, it is indicated that mosaic processing should be performed on a face area included in the image. The processing unit510of the server500generates such modification instruction and transmits the generated instruction to the external communication apparatus300before receiving a request for transmitting training data. The modification unit310aof the external communication apparatus300modifies raw training data stored in the storage unit320according to the modification instruction received through the communication IF314.

Next, modified training data will be described.FIG. 7shows a state in which an example of modified training data which is training data after it is modified is visibly displayed. The example shown inFIG. 7is obtained by modifying the example shown inFIG. 5according to the modification instruction shown inFIG. 6.

When the modified training data is displayed on the viewing monitor as shown inFIG. 7, (NA) (i.e., no viewing description) is displayed in each of the sections for the name, the date of birth, and the face photograph. Further, although the name of the trainee900has been mentioned in the physical therapist comment section in the raw training data, the name is also replaced with (NA). That is, when the modification unit310amodifies a name according to a modification instruction, the modification unit310amakes a search as to whether a name is described in other description sections, and thereby modifies the name if it is found. The above-described search is not limited to the name. That is, when other attributed information similar to the name is in other description sections in addition to in the description section for describing the attributed information, the modification unit310aalso modifies the description in the other description sections.

Further, it is shown that the age, which was indicated as “32 years old” in the raw training data, is modified to “30s”. Further, it is shown that in the side moving image, which is one of the moving-leg video images and in which the face of the trainee900appears, mosaic processing is performed on the face area. Note that the processing performed for images is not limited to mosaic processing and other mask processing such as blurring may be used. As a purpose of concealing personal information for images, more sophisticated processing can be used.

FIG. 8shows other examples of modifying images. For example, when it is indicated that a “body shape” should be modified in a modification instruction, the body shape of the trainee900is modified so as not to be revealed. Regarding the moving-leg video image, since only a gait of a diseased leg needs to be determined, image processing which replaces a side image with a CG (Computer Graphics) can be adopted as a method for concealing a body shape.

Specifically, as shown inFIG. 8, the modification unit310agenerates a CG moving image of a so-called stick person model, in which a body trunk (TL), a thigh (HL), a lower leg (CL), and a leg (FL) relating to a gait of a diseased leg are represented by sticks, and a hip joint (HJ), a knee joint (NJ), and an ankle joint (FJ) are represented by circles. A viewer can confirm the gait of the diseased leg of the trainee900even by such the CG moving image.

As described above, raw training data is modified into modified training data according to contents specified by a modification instruction. Therefore, even when modified training data distributed on the Internet network400is stolen, personal information of the trainee900is not spread. Further, a system administrator can appropriately modify personal information to be protected by regenerating a modification instruction according to the needs of the times etc. For example, when it is desired to newly protect vital information as a subject of personal information, “unmodifiable” may be entered in items (i.e., sections) such as a “body temperature change” section or a “pulse change” section in a modification instruction.

The entity that modifies raw training data according to a modification instruction is the external training apparatus300. That is, the walking training apparatus100only outputs raw training data regardless of regeneration of a modification instruction. Thus, since there is no need to alter the structure or the software of the walking training apparatus100, the walking training apparatus100can be continuously used without being authenticated again as a medical device.

Next, processing flows of data communication programs for controlling each of the walking training apparatus100, the external communication apparatus300, and the server500will be described.FIG. 9is a processing flowchart of the walking training apparatus, the external communication apparatus, and the server. The processing flow starts at the point when the trainee900has finished the training by using the walking training apparatus100. Note that the downward arrow on the left indicates a progress of the process performed by the walking training apparatus100; the downward arrow in the middle indicates a progress of the process performed by the external communication apparatus300; and the downward arrow on the right indicates a progress of the process performed by the server500. Further,FIG. 9shows that processes horizontally connected by an arrow indicated by dotted line are performed roughly at the same time as each other.

In the walking training apparatus100, when the training management unit210afinishes a series of training trials, the data generating unit210badjusts collected training data, information attributed to the trainee900and the like according to a predetermined format and generates raw training data in a step S101. Then, the generated raw training data is output to the external communication apparatus300through the input/output unit213. In a step S301, the processing unit310of the external communication apparatus300acquires the raw training data output from the walking training apparatus100through the input/output unit313, and stores the acquired data in the storage unit320.

In a step S501, the processing unit510of the server500receives an input operation from a system administrator through the operation unit515and generates a modification instruction. Then, in a step S502, the generated modification instruction is transmitted to the external communication apparatus300through the communication IF514. The processing unit310of the external communication apparatus300receives the modification instructions in a step S302. Note that the timing at which the modification instruction is received may be before the raw training data is acquired (step S301).

The modification unit310aof the external communication apparatus300reads the raw training data stored in the step S301. Further, the modification unit310amodifies the raw training data according to the modification instruction received in the step S302and generates modified training data (step S303). Then, the external communication apparatus300stores the generated modified training data to the storage unit320.

In a step S503, the processing unit510of the server500transmits a request for the modified training data to the external communication apparatus300. The request for the modified training data is generated, for example, at a predetermined time or according to a request from the terminal600. Upon receiving the request for the modified training data from the server500(step S304), the processing unit310of the external communication apparatus300reads the requested modified training data from the storage unit320and transmits the read data to the server500through the communication IF314in a step S305.

In a step S504, when receiving the requested modified training data, the processing unit510of the server500stores the modified training data in the data accumulation unit520. Further, the modified training data received according to the request from the terminal600is transmitted to the terminal600. The above-described processing is performed each time when the walking training apparatus100outputs raw training data.

Further, in the flow described above, the transmission of the modification instruction (step S502) and the request for the modified training data (step S503) are shown as separate processes. However, upon receiving the modification instruction (step S302), the external communication apparatus300may successively transmit training data starting from the one in which the modification has just been completed (modified training data) to the server without receiving the request for the modified training data. In this case, the modified training data may not be stored in the storage unit320.

Further, in the case the external communication apparatus300receives the modification instruction (step S302) before acquiring the raw training data (step S301), the modification unit310amay successively modify the acquired raw training data and transmit the modified data to the server500. Also in this case, the modified training data may not be stored in the storage unit320.

In this embodiment as described above, the walking training apparatus100does not include a function of connecting for communication with an external network, and the external communication apparatus300prohibits raw training data stored in the storage unit320from being output to an external network. In this case, when an authorized doctor or the like views the raw training data, he/she detaches the external communication apparatus300from the walking training apparatus100and carries it with him/her. Then, the doctor connects it to his/her own terminal through the input/output unit213. By physically carrying the external communication apparatus300as described above, the doctor or the like can view the raw training data in his/her own terminal. Note that if a dedicated network is constructed, raw training data may be distributed only when it is distributed within the dedicated network. In this case, the dedicated network is different from an external network where a third party may intervene.

In this embodiment as described above, the walking training apparatus100as an example of medical devices has been described. The medical device is not limited to those for rehabilitation such as the walking training apparatus100. That is, in other medical devices which output various medical data, a range of protection of personal information included in medical data can be flexibly changed by interposing a medical data communication apparatus such as the external communication apparatus300as a peripheral device. Further, the medical data can be safely distributed to an external network.