
サイバー攻撃対策に優れたシステムを認証、2027年度にも医療機関への補助実施へ
厚生労働省は、インターネット上で診療情報を管理する「クラウド型」電子カルテの普及に向け、今年度中に優れたサイバー攻撃対策システムを認証する制度を創設し、2027年度にも医療機関への導入補助を行う方針を固めた。
AI-generated summary
電子カルテは診療内容や検査結果を電子データで管理するシステムで、政府は30年までにほぼすべての医療機関での導入目標を掲げている。
厚生労働省は、診療内容などを外部のサーバーを用いてインターネット上で管理する「クラウド型」の電子カルテシステムを導入する医療機関を支援する方針だ。今年度中にサイバー攻撃対策に優れたシステムを同省が認証する制度をつくるほか、導入する医療機関への補助を2027年度にも行う。
医療DX司令塔組織が発足 電子カルテ普及を促進
電子カルテは、診療内容や検査結果などを電子データとして管理し、医療機関内で共有できるシステム。今年6月時点の導入率は、診療所が72.6%、199床以下の病院は73.5%。政府は、30年までにほぼすべての医療機関で導入する目標を掲げている。
現在、導入率8割以上の200床以上の大病院では、院内に設置したサーバーで情報を管理する「オンプレミス型」が主流。業務形態に応じてデータ入力方法などを柔軟に設定できるという利点がある一方で、保守運用に複数の外部事業者が関わるため、サイバー攻撃を受けるリスクが高まるなどのデメリットも指摘されている。
一方、クラウド型はサービス提供事業者が一元的に保守運用を行うため、セキュリティー対策を講じやすく、運用コストも抑えやすい。
そこで、セキュリティー対策などに関する基準を満たしたクラウド型を厚労省が認証する。認証されたシステムは同省ホームページに掲載して診療所などに導入を呼び掛けるほか、大病院などにはオンプレミス型からの移行を促す。導入経費の一部補助も行う方針だ。
AI outlook — possibilities, not facts
今年度中に厚労省がクラウド型電子カルテのセキュリティ認証制度を創設する
Very likely · Within months
2027年度に導入医療機関への補助が実施される
Likely · Within months

In FY2027, the government will strengthen the creation of detection methods and information sharing for ``threat hunting,'' which investigates intrusions and hiding situations between the public and private sectors, in order to protect critical infrastructure such as electricity and communications from cyberattacks. The aim is to prevent infrastructure outages in emergencies.
Shoe manufacturer Moonstar announced on October 2 that the names, addresses, phone numbers, email addresses, and past order information of online store users may have been leaked due to unauthorized external access to its system server. This is a follow-up to the suspected unauthorized access announced on March 26th, and an internal investigation revealed the possibility of unauthorized login and information acquisition. Phishing emails were also confirmed to be sent, and countermeasures were taken, including blocking external connections to the server and forcing password changes. Credit card numbers and passwords are not stored on the relevant server.
On October 2, Abba House International announced that customers' personal information may have been leaked due to unauthorized access to its internal systems by a third party. On September 28th, multiple customers contacted us about a suspicious refund notification email that matched their order information, and this was discovered as a result of an investigation. Information that may be leaked includes member IDs, names, addresses, phone numbers, email addresses, dates of birth, gender, and order information, and may even affect customers who have withdrawn from membership. Credit card information is managed by the payment processing company's system, and no leaks have been confirmed.

SoftBank has successfully conducted a demonstration experiment in which a large unmanned aircraft is equipped with a communications pod for disaster response, and it sends out radio waves from 3,000 meters above the ground to create a communications area over 5 kilometers in diameter. This was the first attempt in Japan to use GA-ASI's MQ-9B, and confirmed communication quality of up to 20 Mbps downlink, marking a step toward social implementation as emergency communication infrastructure during disasters.

With the enforcement of the Act on Strengthening Cyber Response Capabilities, the government has begun operating active cyber defense. When the police or Self-Defense Forces detect signs of an attack, they infiltrate the other party's server and render it harmless by erasing the malicious program. Public-private collaboration will also be strengthened, and the use of communications information will come into effect from fall 2027.

This year's recipient of the Right Livelihood Award, known as "another Nobel Prize," has been announced, with Timnit Gebr, a leading expert on AI ethics, selected. He was praised for criticizing bias in development by large tech companies and promoting inclusive AI research.