Mask information for instructing the prohibition of information which cannot be serviced to the outside, is set and inputted by a manager so that the information, the permission of service of which is indicated by the mask information is exclusively sucked up from an in-hospital server by an external server outside the hospital. A service application created for each service reads out and exploits the information needed by itself, from the in-hospital information sucked up by the external server.