JP2006163483A - Agency server, control method of agency server and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an agency server which never causes leakage of secret information, and a control method of the agency server. <P>SOLUTION: The agency server owned by a procedure agency which takes care of the procedure to a service provider displays screen data for inputting information necessary for the procedure to the service provider on a user interface, reads secret information of a customer who requested to take the procedure to the service provider on behalf of himself/herself from a secret information database storing secret information of customers, displays, with respect to the secret information of the customer of the information necessary for the procedure to the service provider, a predetermined character string generated by converting the secret information of the customer read from the secret information database based on a predetermined algorithm on the user interface, accepts input from the user interface with respect for information other than the secret information of the customer of the information necessary for the procedure to the service provider, and transmits the information necessary for the procedure to a provider server owned by the service provider. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an agent server, an agent server control method, and a program.

Along with changes in the economic environment in recent years, so-called outsourcing, in which a part of the business in a company is outsourced to an external agent, has come to be carried out. In addition, with changes in the working environment, so-called employment forms that allow dispatched workers to perform their duties have become common.
In such a case, the agency agent or the dispatched worker knows various information regarding the business consignment source company and its employees in carrying out the business.
In some cases, such information includes confidential information of companies that are generally not desired to be disclosed or should not be disclosed, and personal information related to employee privacy. For this reason, companies that outsource business usually attempt to prevent leakage of confidential information by imposing confidentiality on information obtained through business operations to agents and temporary workers.

Furthermore, various techniques for supporting the leakage prevention of secret information have been developed (see, for example, Patent Document 1).
JP 2003-122640 A

However, when outsourcing work to agents or temporary workers, for example, it is necessary to disclose personal information such as the personality and preferences of the consignor, and sales information such as information on the organization to which the consignor belongs. There was a lack of responsiveness in handling the agency.
When a secretary is hired, there is no one other than the secretary who knows the personal information and secret information necessary for carrying out the business, and it becomes difficult to perform the business when the secretary is absent.

  The present invention has been made in view of the above problems, and provides an agent service server, an agent service server control method, and a program capable of operating an agent service on behalf of an agent agent without leaking confidential information. Is the main purpose.

  In order to solve the above-described problems, the present invention provides an agent server provided by a procedure agent acting on behalf of a procedure to a service provider that provides an information processing service, and information necessary for the procedure to the service provider An information input promotion unit that displays screen data for inputting the information on the user interface, and the secret information database in which the secret information of the customer who has requested the service provider to perform the procedure substitution is stored. Among the information necessary for the procedure to the service provider and the secret information reading unit read from the customer information, the customer secret information is converted based on a predetermined algorithm for the customer secret information read from the secret information database. A secret information concealment display unit for displaying a predetermined character string generated by the Of the information necessary for the procedure to the service provider, information other than the confidential information of the customer is input to the procedure information input unit that receives input from the user interface and the provider server possessed by the service provider. The present invention relates to an agent server that includes a procedure information transmission unit that transmits necessary information.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the column of the best mode for carrying out the invention and the drawings.

  It is possible to provide an agent service server, an agent service server control method, and a program that allow an agent agent to perform operations without leaking confidential information.

=== Example of Overall Configuration ===
FIG. 1 shows an overall configuration of a computer system according to the present embodiment. The computer system according to the present embodiment includes a customer terminal 100, an agent server 200, and a provider server 300 that are communicably connected via a network 400.

  The customer terminal 100 is a computer held by a customer who receives information processing service from a service provider that provides information processing service. The customer can be, for example, a company or a local government, and can also be a general individual.

  The provider server 300 is a computer that the service provider has. The information processing service provided by the service provider can be, for example, an aircraft or train seat reservation service, a theater watching ticket reservation service, an accommodation facility reservation service, or the like.

  The agency server 200 is a computer owned by a procedure agency that acts as a proxy when a customer receives provision of an information processing service from a service provider. The procedural agent can be a company that performs a part of the customer's business in response to a request from the customer, and can also be a dispatched worker that performs a part of the customer's business. FIG. 12 shows an example of a business that a customer entrusts to a procedure agency. As shown in FIG. 12, for example, a procedural agent receives a request from a customer and performs personal information management, schedule management, various reservation work, document preparation work, information collection work, office supplies and equipment replenishment work, telephone service, etc. Conduct agency work.

  FIG. 13 shows a form in which the customer entrusts the business to the procedure agent. As shown in FIG. 13, in the form of business consignment, a procedural agent can be stationed at the customer's office and the operation can be outsourced, or the procedural agent is located in a geographically distant place. Can be entrusted. The customer terminal 100 possessed by the customer and the agency server possessed by the agency are communicatively connected via the network 400, and operations are performed while appropriately exchanging information between the customer terminal 100 and the agency server 200. I will go. This is shown in FIG. In other words, the agency server 200 receives the business consignment from the customer terminal 100 that is communicably connected via the network 400, and performs an information processing service with the provider server 300 that is communicably connected via the network 400. Various procedures to receive the provision of

  As will be described in detail later, the personal information and business attribute information described in FIG. 19 are the personal information of the customer that is necessary when the procedure agent performs the procedure for providing the information processing service to the service provider. And a database (secret information database) for storing secret information such as company information. The agency server 200 according to the present embodiment reads out such secret information from the secret information database when the procedure agency performs the above procedure. Accordingly, it is possible to eliminate the need for the procedure agent to input the customer's confidential information, and it is also possible to prevent the customer's secret information from being seen by the procedure agent.

=== Device configuration ===
Next, each structure of the customer terminal 100, the agency server 200, and the provider server 300 is demonstrated.

  The customer terminal 100, the agency server 200, and the provider server 300 are all computers, and the hardware configuration is basically the same. Therefore, these hardware configurations are summarized in one block diagram and shown in FIG. Further, a control program and a table for realizing each of these functions are shown in FIGS.

<Configuration of agent server>
The agency server 200 includes a CPU 210, a memory 220, a port 230, a recording medium reading device 240, an input device 250, an output device 260, and a storage device 280.

  The CPU 210 is responsible for overall control of the agent server 200, and is an agent server control program comprising codes for performing various operations according to the present embodiment stored in the storage device 280 (claims) 810) (corresponding to the program described in the above) is read into the memory 220 and executed, thereby realizing various functions as the agency server 200. For example, the agent 210 control program 810 is executed by the CPU 210 and cooperates with hardware devices such as the memory 220, the port 230, the input device 250, the output device 260, and the storage device 280, thereby reading out the information input promotion unit and secret information. A secret information concealment display unit, a procedure information input unit, a procedure information transmission unit, a response reception unit, a response transmission unit, and a procedure information transfer transmission unit. The memory 220 can be constituted by a semiconductor memory device, for example.

  The recording medium reading device 240 is a device for reading a program and data recorded on the recording medium 500. The read program and data are stored in the memory 220 and the storage device 280. Therefore, for example, the agent server control program 810 recorded in the recording medium 500 can be read from the recording medium 500 using the recording medium reader 240 and stored in the memory 220 or the storage device 280.

  As the recording medium 500, a flexible disk, a magnetic tape, a compact disk, or the like can be used. The recording medium reading device 240 can be built in the agency server 200 or can be externally attached.

  The storage device 280 can be, for example, a hard disk device or a semiconductor storage device. The storage device 280 stores an agent service server control program 810 and a priority management table 700.

  The priority order management table 700 is a table that records customer intentions when performing business. A priority management table 700 is shown in FIG. Each data described in the priority order management table 700 can be displayed by the customer when the procedural agent is commissioned by the customer. Customers want to prioritize transactions with their favorite business partners over other business partners, or prioritize business partners with strong economic ties over other business partners In many cases, there are various circumstances. By storing such customer intentions in the priority order management table 700, the procedure agent can perform operations in accordance with the customer intentions. In the priority management table 700, for example, a URL (Uniform Resource Locator) of a website operated by the service provider can be described according to the priority order desired by the customer.

  The input device 250 is a device used for data input to the agency server 200 and functions as a user interface. For example, a keyboard or a mouse can be used as the input device 250.

  The output device 260 is a device for outputting information to the outside and functions as a user interface. For example, a display or a printer can be used as the output device 260.

  The port 230 is a device for performing communication. For example, communication with the customer terminal 100 or another computer of the provider server 300 performed via the network 400 can be performed via the port 230. Further, for example, the agent server control program 810 can be received from another computer via the port 230 via the network 400 and stored in the memory 220 or the storage device 280.

<Customer terminal>
Next, the configuration of the customer terminal 100 will be described. The customer terminal 100 includes a CPU 110, a memory 120, a port 130, a recording medium reading device 140, an input device 150, an output device 160, and a storage device 180. The functions of these devices are the same as those of the devices included in the agency server 200 described above.

  As shown in FIG. 3, a customer terminal control program 800 and a secret information database 600 are stored in the storage device 180 included in the customer terminal 100. When the CPU 110 executes the customer terminal control program 800, various functions as the customer terminal 100 are realized.

  The secret information database 600 stores customer secret information. An example of the secret information database 600 is shown in FIG. When a customer entrusts a business to a procedure agent, for example, the customer's confidential information necessary for the procedure agent to perform the task is recorded in the secret information database 600 in advance. By doing in this way, the procedure agent does not need to inquire of the customer for confidential information every time when performing the business entrusted by the customer. Further, since the customer's secret information is stored in advance in the secret information database 600, it is possible to prevent mistakes such as inputting the customer's incorrect secret information when performing the procedure.

  In the present embodiment, the secret information database 600 is constructed in the storage device 180 of the customer terminal 100, but may be constructed in a third party computer connected to the network 400, for example. Is possible. In this case, the third party organization may be an organization that has gained the trust of the customer. For example, it can be a certificate authority or a public institution. By doing so, it becomes possible to prevent leakage of the customer's confidential information more reliably. Alternatively, when the customer trusts the procedure agent, it is possible to construct the storage device 280 of the agent server 200. By doing so, the procedural agent can once perform the business without receiving complicated information with the customer after the business is entrusted by the customer. .

  Also, the secret information database 600 may be stored with the secret information after being encrypted by a predetermined algorithm, for example. In this way, it is possible to prevent customer information from leaking more reliably.

<Provider server>
Next, the configuration of the provider server 300 will be described. The provider server 300 includes a CPU 310, a memory 320, a port 330, a recording medium reading device 340, an input device 350, an output device 360, and a storage device 380. The functions of these devices are the same as those of the devices included in the agency server 200 described above.

  As shown in FIG. 5, the provider server control program 820 is stored in the storage device 380 included in the provider server 300. When the CPU 310 executes the provider server control program 820, various functions as the provider server 300 are realized. For example, various information processing services as described above are provided in response to requests from other computers that are communicably connected.

<Network>
The network 400 is a communication network that connects the customer terminal 100, the agent server 200, and the provider server 300 so that they can communicate with each other. The network 400 can be, for example, a LAN (Local Area Network) in a company. For example, a WAN (Wide Area Network) such as the Internet may be used.

=== Flow of processing ===
Next, referring to FIG. 11 and FIGS. 14 to 18, the flow of processing when the procedure agent performs on behalf of the business requested by the customer using the agent server 200 according to the present embodiment. explain. Here, a case where an aircraft seat reservation service is performed on behalf of the aircraft will be described as an example.

  First, the customer terminal 100 receives an input indicating that an aircraft seat reservation is to be delegated to a procedure agent (S1000). At that time, for example, information necessary for the procedure such as the boarding date of the aircraft, the departure place, and the arrival place is also inputted. Then, the customer terminal 100 transmits an aircraft seat reservation procedure proxy request to the proxy server 200 together with the information (S1010). Then, the agency server 200 transmits a request for receiving the seat reservation service for the aircraft to the provider server 300 operated by the airline (S1020). Which airline's seat reservation service is to be received can be determined based on the data described in the priority management table 700 described above. If the example shown in FIG. 6 is followed, provision of the seat reservation service of A Air will be received first.

  Note that the processing of S1000 and S1010 described above is performed by the customer terminal 100 executing the customer terminal control program 800 in the customer terminal 100, so that the customer terminal 100 accepts the business proxy request from the customer, and the business to the agent server 200. It can also be realized by providing a proxy request transmission function. For example, a business proxy request document created by a customer using the customer terminal 100 can be obtained by using an e-mail. It is also possible to realize this by transmitting to. Further, it can be realized by a customer informing a procedure agency of a business agency request by telephone or mail.

  When the screen data for inputting information necessary for the procedure for receiving provision of the information processing service is sent from the provider server 300 to the agent server 200 (S1030), the agent server 200 The screen data is displayed on the display (S1040). FIG. 8 shows how the procedure screen data is displayed on the display.

  When the procedure agent enters each item of the screen data shown in FIG. 8 and clicks the mouse cursor on the “OK” field, the data of each item entered is transmitted to the provider server 300. In this way, a procedure for receiving provision of the information processing service by the provider server 300 is performed.

  Here, the data that must be transmitted to the provider server 300 includes confidential information related to privacy such as name, gender, and credit card number. The agency server 200 according to the present embodiment transmits a request for reading the secret information of the customer to the customer terminal 100 (S1050). Then, when the customer confidential information is received from the customer terminal 100 (S1060), the agent server 200 converts the secret information into a predetermined character string based on a predetermined algorithm (S1070). The converted character string is displayed on the display (S1080). In the example shown in FIG. 8, the customer's confidential information converted to “*” is displayed on the display according to the algorithm for converting all character strings to “*”. By doing so, it is possible to prevent the confidential information of the customer from being known to the procedure agent that operates the agent server 200. In addition, the procedure agent can save the input of secret information and can prevent an input error.

  For example, “address” and “age” included in the screen data transmitted from the provider server 300 indicate which of the information necessary for the procedure for receiving the provision of the information processing service corresponds to the confidential information of the customer. Can be determined by comparing a keyword such as “address” or “name” indicating the type of data stored in the secret information database 600. FIG. 16 shows an example in which, among personal information, information such as “ID” and “search for other services” is determined to be the customer's confidential information and is masked. That is, these pieces of information are displayed in place of “*” on the screen of the agency server 200, for example.

  The procedural agent inputs information other than the customer's confidential information in accordance with the contents instructed in the procedural proxy request transmitted from the customer in S1010 (S1090). When the mouse cursor is overlaid on the “OK” field and clicked, the input data is transmitted from the agency server 200 to the provider server 300 (S1100). Then, the provider server 300 executes processing for providing the information processing service (S1110), and the result (response) is transmitted to the agency server 200 (S1120). Here, the acquisition result of the seat reservation of the aircraft is transmitted. FIG. 9 shows a state where the acquisition result of the aircraft seat reservation is displayed on the display of the agency server 200 (S1130). Then, when the procedure agent superimposes and clicks the mouse cursor on the “send result to customer” field, the acquisition result (response) of the aircraft seat reservation is sent to the customer terminal 100 (S1140). Then, the customer terminal 100 displays the aircraft seat reservation acquisition result on the display (S1150). This is shown in FIG.

  The agent agent server 200 uses the acquisition result of the aircraft seat reservation transmitted from the provider server 300 as the customer even if the procedure agent agent does not click the mouse cursor on the “Send result to customer” column. It can also be transmitted to the terminal 100.

  In the above description, an example in the case where the seat reservation of the airplane of A Air, which is the first desired airline of the customer, has been successful has been shown. However, the response transmitted from the provider server 300 of A Air In some cases, the reservation of seats for Airline A flights may fail. In this case, the agent server 200 is operated by the provider server (other provider server) operated by the airline B which is the second desired airline company (other service provider) in accordance with the description in the priority management table 700. ) Processing after S1020 can be performed on 300, and a seat reservation procedure can be performed. The processing flow in that case is shown in FIG. By doing in this way, while being able to perform the operation | work requested | required from the customer according to a customer's intention, it becomes possible to improve the achievement rate of the operation | work requested from the customer.

  In the above, an example in the case of making a seat reservation for an aircraft on behalf of a procedure agent has been described. However, in the above-described series of processing, confidential customer information is not known to the procedure agent.

  In the present embodiment, periodic processing including processing that is activated when external information is acquired, such as e-mail reply, congratulations, and gift management, processing specified in business information, and processing that is activated by a user schedule The present invention can also be applied to the case where the processing method is entrusted by the customer. Further, the present invention can be applied to a closed service for group subscribers in which a user is registered in a designated group and a common business process as a group is performed based on usage group attribute information or group business attribute information. Examples of closed services for group subscribers include scheduling and holding regular regular meetings, attendance confirmation, distribution and approval of minutes, other schedules for group subscribers, meeting schedule adjustment, candidate date selection, and more Examples include automatic mailing list generation and mail proxy processing.

  In addition, a community group is set up according to business and personal preferences, and subscription conditions are set there. Screening and registration is done by application from the user, and the community open service is shared with the community function. It can also be applied.

  Also, the registration process for the business ID can be executed in advance on the proxy function, and the business process can be added with the ID by the proxy function and registered in the database. In this case, the processing flow is managed by the proxy function, and the processing other than the designated processing can be prevented from being executed on the proxy function.

  As described above, in the present embodiment, it is possible to delegate the business to an agent or the like without leaking the customer's confidential information. Each invention described in detail above is extremely important in situations where outsourcing of business and hiring of temporary workers are active as confidential information leakage becomes a major social issue and the importance of managing confidential information increases. Technology.

  Although the best mode for carrying out the invention has been described above, the above embodiment is intended to facilitate understanding of the present invention and is not intended to limit the present invention. The present invention can be changed and improved without departing from the gist thereof, and the present invention includes equivalents thereof.

It is a figure which shows the whole structure of the computer system concerning this Embodiment. It is a figure which shows the customer terminal, agency server, and provider server structure concerning this Embodiment. It is a figure which shows the memory | storage device of the customer terminal which concerns on this Embodiment. It is a figure which shows the memory | storage device of the agency which concerns on this Embodiment. It is a figure which shows the memory | storage device of the provider which concerns on this Embodiment. It is a figure which shows the priority management table which concerns on this Embodiment. It is a figure which shows the secret information database which concerns on this Embodiment. It is a figure which shows the screen displayed on the agency server which concerns on this Embodiment. It is a figure which shows the screen displayed on the agency server which concerns on this Embodiment. It is a figure which shows the screen displayed on the customer terminal which concerns on this Embodiment. It is a flowchart which shows the flow of the process which concerns on this Embodiment. It is a figure which shows the business substituted for in this Embodiment. It is a figure which shows the consignment form of the work which concerns on this Embodiment. It is a figure for demonstrating the agency of the work which concerns on this Embodiment. It is a figure for demonstrating the agency of the work which concerns on this Embodiment. It is a figure which shows a mode that the secret information which concerns on this Embodiment is masked. It is a flowchart which shows the flow of the process which concerns on this Embodiment. It is a flowchart which shows the flow of the process which concerns on this Embodiment. It is a figure which shows the whole structure of the computer system concerning this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Customer terminal 200 Agent company server 300 Provider server 400 Network 500 Recording medium 600 Personal information database 700 Priority table 800 Customer terminal control program 810 Agent company server control program 820 Provider server control program

Claims (5)

An agent service server possessed by a procedure agent acting on behalf of a service provider providing an information processing service,
An information input promotion unit for displaying screen data for inputting information necessary for the procedure to the service provider on a user interface;
A secret information reading unit that reads out the secret information of the customer who has requested the service provider for the procedure from the secret information database in which the secret information of the customer is stored;
Among the information necessary for the procedure to the service provider, for the customer secret information, a predetermined character generated by converting the customer secret information read from the secret information database based on a predetermined algorithm. A secret information concealment display unit for displaying columns on the user interface;
Among the information necessary for the procedure to the service provider, information other than the confidential information of the customer, a procedure information input unit that receives input from a user interface,
A procedure information transmitting unit that transmits information necessary for the procedure to a provider server of the service provider;
The agency server characterized by comprising. A response receiver for receiving a response to the procedure from the provider server;
A response transmitter for transmitting the response to a customer terminal of the customer;
The agent server according to claim 1, further comprising: A response receiver for receiving a response to the procedure from the provider server;
When the response indicates that the information processing service cannot be provided by the service provider having the provider server, the procedure is required for the other provider server of another service provider. A procedure information transfer transmission unit for transmitting various information,
The agent server according to claim 1, further comprising: In the agency server that the procedure agency that carries out the procedure to the service provider that provides the information processing service has,
Displaying screen data for inputting information necessary for the procedure to the service provider on the user interface;
A procedure for reading out the confidential information of the customer who has requested the service provider for the procedure from the secret information database in which the confidential information of the customer is stored;
Among the information necessary for the procedure to the service provider, for the customer secret information, a predetermined character generated by converting the customer secret information read from the secret information database based on a predetermined algorithm. Steps to display columns in the user interface;
Among the information necessary for the procedure to the service provider, for information other than the confidential information of the customer, a procedure for receiving input from a user interface;
A procedure for transmitting information necessary for the procedure to a provider server of the service provider;
A program for running A method for controlling an agent server that a procedure agent that performs a procedure for a service provider that provides an information processing service has,
Screen data for inputting information necessary for the procedure to the service provider is displayed on the user interface,
Read the confidential information of the customer who has requested the service provider to perform the procedure from the confidential information database in which the confidential information of the customer is stored,
Among the information necessary for the procedure to the service provider, for the customer secret information, a predetermined character generated by converting the customer secret information read from the secret information database based on a predetermined algorithm. Display columns in the user interface,
Among the information necessary for the procedure to the service provider, information other than the customer's confidential information receives input from the user interface,
Transmitting information necessary for the procedure to a provider server of the service provider;
A control method for an agent server characterized by the above.

Images