JP5390227B2 - Information analysis apparatus and method, information analysis system, program, and storage medium - Google Patents

Description

  The present invention relates to an information analysis apparatus and method, an information analysis system, a program, and a storage medium, and more particularly to an operation and operation technique of an information processing apparatus.

  In recent years, personal computers (PCs) have become widespread, and it has become commonplace for individuals to have one personal computer. In particular, an information infrastructure using a personal computer has become an indispensable management resource for companies to improve business processes or share information.

  However, as one personal computer is assigned to an individual, work can be carried out smoothly, but private use is also increasing. Therefore, it is desired to monitor the presence or absence of private use of the information processing device used by the user.

  A terminal such as a personal computer (PC) has a monitoring function for monitoring the usage status of the Internet, for example, as a function for monitoring the usage status. This monitoring function can monitor access to a server on the Internet or access to a home page by a user's personal computer in a category such as a provider unit or a home page unit.

  Further, Patent Document 1 discloses a system that can monitor the usage status of an application that runs on a personal computer.

  On the other hand, when an operation using a personal computer is advanced, productivity of the operation using the personal computer may be delayed while the operation of the application is complicated. From the viewpoint of application operation skills, the operation skills vary from user to user, and users with high productivity and users with low productivity are always mixed.

  Therefore, as a function for evaluating such operation skills, it is possible to perform, for example, evaluation using determination software, various certification tests, and reporting from personal work experience. For example, it can be said that a user who has a good result in the word processor test has a high operation skill for operations related to word processing software, Japanese input, document processing ability, and the like.

JP2003-330760

  However, in Patent Document 1, although it is possible to grasp the use / non-work use of an application, it is impossible to grasp the operation status of the application.

  Moreover, it is difficult to say that evaluation by evaluation software or the like is effective at any time. This is because determination criteria need to be defined for each application, and such determination criteria are generally limited to some applications such as office software such as word processing software and spreadsheet software, and CAD software. Therefore, it cannot be determined for other applications that do not have evaluation criteria.

  Even if there is an evaluation standard for such an application, the purpose and use of the application actually varies depending on the public organization such as a government office or an organization such as a corporation such as each company. However, the evaluation criteria are not always applicable.

  In addition, even if the evaluation criteria are prepared individually according to the situation, there is no function to evaluate how often the use according to these judgment criteria is performed during actual application use. It was.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a technique for grasping and analyzing the use mode of an application in more detail.

In order to achieve the above object, an information analysis apparatus according to the present invention comprises the following arrangement. That is,
An information analysis device that determines a rank for an application operation based on terminal operation history information,
Input means for inputting the operation history information including application information related to an application operable on the terminal and usage information of the input device of the terminal ;
Management means for managing a table in which the application information, the usage information of the input device of the terminal, and the rank for the operation of the application are associated with each other on a storage device;
Referring to the table, from the operation history information input by the input means, analysis means for determining a rank for the operation input indicated by the usage information of the application indicated by the application information included in the operation history information;
Analysis result output means for outputting an analysis result by the analysis means.

  ADVANTAGE OF THE INVENTION According to this invention, the technique which grasps | ascertains and analyzes the utilization aspect of an application in detail can be provided.

It is a figure which shows the structure of the information analysis system of embodiment. It is a figure which shows the hardware constitutions of the various terminals which comprise the information analysis system of embodiment. It is a flowchart which shows the process which the log analysis server of embodiment performs. It is a figure which shows an example of the file for evaluation rank check of embodiment. It is a figure which shows an example of the log management database of embodiment. It is a figure which shows an example of the log management database of embodiment. It is a flowchart which shows the rank list creation process which the log analysis server of embodiment performs. It is a figure which shows an example of the input pattern table of embodiment.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

(System configuration)
FIG. 1 is a diagram illustrating a configuration of an information analysis system according to an embodiment.

  Reference numeral 11 denotes a client group (clients 1 to n), which is a computer connected to a log management server (management apparatus) 12 via a network 15 and using functions and data provided by the log management server 12. In particular, the client 11 includes an application monitoring unit 11a that monitors the usage status of the application group 11c installed in the client 11 and an input device monitoring unit 11b that monitors the input status of its own input device. In this embodiment, the application monitoring unit 11a and the input device monitoring unit 11b are configured separately, but they may be configured as a single monitoring unit.

  The application described in the present invention means software that operates on basic software such as an OS installed in a client, and is used for a specific purpose or application. An example of an application is a file with an extension “exe” used in Microsoft MS-DOS or Windows (registered trademark) environment.

  In the client 11, the application monitoring unit 11a monitors the usage status (start / end, etc.) of the application group 11c used by the client 11, and accumulates it as application log data (application information). The application log data includes, for example, the following.

-User name-Machine name-Application name-File name-Operation date and time (start / end time, etc.)
・ Business use (analysis, office work, general, etc.)
Note that the business use varies depending on the business even in the same application. Therefore, various settings such as a business application corresponding to a preset user name or a business application corresponding to a file name are possible.

  Further, the input device monitoring unit 11b monitors the input status (mouse operation, keyboard operation, etc.) of the input device used by the client 11, and accumulates it as input device log data (input device usage information). The input device log data includes, for example, the following.

-Number of keyboard types-Input character code-Input confirmation character-Mouse movement distance-Mouse left single-click count-Mouse left double-click count-Mouse right single-click count-Mouse right double-click count-Mouse center Number of single clicks • Number of mouse center double clicks • Number of mouse vertical scroll operations • Number of mouse horizontal scroll operations In this way, input device log data is information that includes either keyboard operations, mouse operations, or a combination thereof. Consists of.

  Then, the client 11 transmits the application log data and the input device log data to the log management server 12 as operation history information. The timing of transmitting the operation history information (application log data and input device log data) to the log management server 12 is performed in a predetermined time unit (for example, every two hours: set on the log management server 12 side). In addition, various conditions can be set, for example, when log data of a predetermined amount or more is accumulated, when the client 11 is restarted, or when a request from the log management server 12 is received.

  A log management server 12 receives operation history information (application log data and input device log data) from each client 11 connected via the network 15, and registers it in the log management database 12a.

  A log analysis server (information analysis apparatus) 13 is connected to the evaluation terminal group 14 via the network 15. The log analysis server 13 is also connected to the log management server 12 via the network 15. The log analysis server 13 receives the operation history information (application log data and input device log data) of each client 11 managed by the log management database 12a of the log management server 12 (input unit), and uses the application. Analyze.

  The operation history information collected by the log management server 12 can be transferred to the log analysis server 13 in addition to using the network 15, as well as external storage media (FD, MO, USB, CD-R, DVD-RAM, etc. It is also possible to use a medium that can exchange (acquire) log data.

  Specifically, the analysis by the log analysis server 13 determines the rank in the operation of the processing target application by the evaluation rank determination unit 13a. This determination is made with reference to an evaluation rank check file 13b (table) that manages application information, an operation input pattern for operating the application, and its rank (evaluation value) in association with each other. Here, the application information includes an application name, a business use in which the application operates, and the like. The operation input pattern is an operation content including a key operation input using a keyboard, a mouse operation input using a mouse, or any combination thereof.

  Then, based on the determination result of the evaluation rank determination unit 13a, a rank (evaluation value) indicating how much operation of which application has been used by the client is determined and added to the evaluation rank result file 13d.

  However, the application information to be determined or the operation input pattern for operating the application may not be registered in the evaluation rank check file 13b. In this case, the rank in the application information or the operation of the application is determined by the evaluation rank determination unit 13c that manages the rank for each application information or each application operation. Then, the determined rank is associated with the application information or the operation input pattern for operating the application, and newly registered in the evaluation rank check file 13b.

  The evaluation rank check file 13b manages application information that operates on the client 11 that may be used in a company or organization, an operation input pattern for operating the application, and its rank. This rank is determined according to the importance in the company or organization. For this reason, application information used and necessary application information do not necessarily match depending on the type of business and occupation, and the same application information and the same operation input pattern may have different ranks. Further, the evaluation rank check file 13b may be managed by further associating a weighting coefficient or the like for adjustment when the number of appearances of the operation input is large in order to perform further detailed analysis.

  Reference numeral 14 denotes an evaluation terminal group (evaluation terminals 1 to n), which is a computer connected to the log analysis server 13 via the network 15 and supporting the analysis executed by the log analysis server 13. This support includes, for example, substitution processing of the evaluation rank determination unit 13c, information collection for determining the rank of unknown applications and operation input patterns, and the like. The processing related to this support may be realized by dedicated software or may be realized by an operator.

  Further, the log management server 12 and the log analysis server 13 are configured separately, but a part / all of them may be configured by one server.

  Further, various functions realized by the client 11, the log management server 12, the log analysis server 13, and the evaluation terminal 14 are such that programs stored in each terminal, a ROM inside the server, or an external storage device are executed by the CPU. It may be realized by. Alternatively, it may be realized by dedicated hardware.

(Hardware configuration)
FIG. 2 is a diagram illustrating a hardware configuration of various terminals constituting the information analysis system of the embodiment.

  The CPU 21 is a central processing unit that controls the entire computer using computer programs and data stored in the ROM 22 and RAM 23. When this computer is applied to the log management server 12 and the log analysis server 13, the CPU 21 executes each process described later executed by the log management server 12 and the log analysis server 13. When this computer is applied to the client 11, the CPU 21 executes each process described later that is executed by the client 11.

  The ROM 22 is a read only memory. The ROM 22 stores setting data and a boot program for the computer. The RAM 23 is a writable memory. The RAM 23 has an area for temporarily storing computer programs and data loaded from an HDD (hard disk drive) 24, data received from the outside via the interface 27, and the like. Further, the RAM 23 has a work area used when the CPU 21 executes various processes. Thus, the RAM 23 can provide various areas as appropriate. The HDD 24 is a mass storage device. The HDD 24 stores computer programs and data for causing the CPU 21 to execute various processes performed by an OS (operating system) and a device to which the computer is applied. The HDD 24 is an example of a mass storage device, and can be an SDD (flash memory drive).

  When this computer is applied to the log management server 12 and the log analysis server 13, the computer program includes a computer program for causing the CPU 21 to execute each process described later executed by the log management server 12 and the log analysis server 13. It is. The log management database 12a can also be provided in the HDD 24.

  When this computer is applied to the client 11, the computer program includes a computer program for causing the CPU 21 to execute each process described later performed by the client 11. Computer programs and data stored in the HDD 24 are appropriately loaded onto a storage medium such as the RAM 23 under the control of the CPU 21 and are processed by the CPU 21.

  The input device 25 is a device for inputting an instruction from a computer operator. The input device 25 is configured by a keyboard, a mouse, and the like. An operator of the computer can input various instructions to the CPU 21 by operating the input device 25. The display device 26 is a display device that displays various screens. The display device 26 is configured by a CRT, a liquid crystal screen, or the like, and can display a processing result by the CPU 21 with an image, characters, or the like.

  The interface 27 is composed of various interfaces. For example, when this computer is applied to the client 11, the interface 27 may include a network interface for connecting the computer to the network 15.

  Further, when the computer is applied to the log management server 12 and the log analysis server 13, the interface 27 may include a network interface for connecting the computer to the network 15. The bus 28 connects the above-described components to each other. Each component of the computer can exchange information with each other via the bus 28.

(Log analysis server processing)
FIG. 3 is a flowchart illustrating processing executed by the log analysis server according to the embodiment.

  The flowchart shown in FIG. 3 will be described by taking as an example a case where the log management server 12 and the log analysis server 13 are configured by the same server. In addition, this process is executed periodically (for example, once a day).

  Step S31: First, before this processing is executed, the log management server 12 receives operation history information (application log data and input device log data) from each connected client 11, and stores it in the log management database. 12a is registered. Then, from the log management database 12a, the log analysis server 13 performs reading of log data obtained by combining application log data and input device log data in association with each other. Specifically, the log analysis server 13 reads one log data of each client 11 from the log management database 12a.

  The reading unit can be freely set such as an application information unit, a user unit, a group unit, and a predetermined time.

  Step S32: The evaluation rank determination unit 13a determines the rank of the input device log data (operation input) corresponding to the read log data. This determination is performed by determining whether or not the log data to be determined exists in the evaluation rank check file 13b. Here, when the log data to be determined is ranked (evaluation value), the evaluation rank determination unit 13a determines the rank (evaluation value) and adds it to the evaluation rank result file 13d. That is, in this determination, when the input pattern of the input device included in the log data to be determined exists in the evaluation rank check file 13b (YES in step S32), the input pattern of the input device has already been ranked (evaluation value). ) Is attached. Therefore, in this case, the evaluation rank determination unit 13a stores the rank in the evaluation rank result file 13d.

  On the other hand, when the input pattern of the input device included in the log data to be determined does not exist in the evaluation rank check file 13b (NO in step S32), the operation input pattern corresponding to the application information is still ranked. There is nothing. In that case, in the subsequent processing, the evaluation rank determination unit 13c determines the rank (evaluation value) of the input status of the input device of the application information.

  Step S33: When the input pattern of the determination target log data does not exist in the evaluation rank result file 13d, the evaluation rank determination unit 13a additionally registers the determination target application information and the input pattern in the evaluation rank check file 13b.

  Step 34: The evaluation rank determination unit 13c determines a rank (evaluation value) corresponding to the input pattern additionally registered in Step 33, and writes it in the evaluation rank result file 13d.

  Note that the rank corresponding to the input pattern related to the application can be determined by assigning the input pattern of the application information to be determined to the evaluation terminal 14 and determining the rank by the evaluation terminal 14. In this case, the log analysis server 13 receives the rank determined as the evaluation result from the evaluation terminal.

  The evaluation rank determination unit 13c also associates application information related to applications operable on the client 11, input information (input pattern) of an input device for performing the operation, and rank (evaluation value). Is created in advance. Then, the evaluation rank determination unit 13c refers to the rank list and determines a rank corresponding to the operation of the determination target application. Here, the rank list created in advance may be created by an administrator, or may be created by a process described later.

  Step S35: The evaluation rank determination unit 13a determines whether the determination of the rank of all log data has been completed. If not completed (NO in step S35), the process returns to step S31, and the evaluation rank determination unit 13a reads the undetermined log data from the log management database 12a.

  Step S36: When rank determination of all log data is completed, the evaluation rank determination unit 13a calculates an evaluation rank determination result for each user from the evaluation rank result file 13d. Details of this calculation method will be described later.

  Step S37: The evaluation rank determination unit 13a writes the calculated evaluation rank determination result for each user in the evaluation rank result file 13d. Then, the log analysis server 13 can also convert the determination result (analysis result) obtained from the evaluation rank result file 13d (analysis result output unit) into an image such as a graph or a table and output it on the display device. is there.

  FIG. 4 is a diagram illustrating an example of an evaluation rank check file according to the embodiment.

  In FIG. 4, reference numeral 41 denotes an application name of an application that has been evaluated in the past, 42 denotes a business use of the application, and 43 denotes an operation input for operating the application. Further, 44 is a weighting factor, and 45 is an evaluation value (point) corresponding to the application. The weight coefficient 44 is used for adjustment when the number of appearances of the operation input is large.

  FIG. 5 is a diagram illustrating an example of a log management database according to the embodiment.

  In particular, FIG. 5 shows an example of a skilled person (user who has high application operation skills and always high business productivity) logs in which input device log data is associated with application log data stored in the log management database 12a. Is shown.

  In FIG. 5, 51 is an operation time of an application, 52 is a user name of the application, 53 is an application name of the application, 54 is a business use of the application, and 55 is an operation input for operating the application.

  FIG. 6 is a diagram illustrating an example of a log management database according to the embodiment.

  In particular, FIG. 6 illustrates an example of an ordinary person (user to be analyzed (general user)) log in which input device log data is associated with application log data stored in the log management database 12a.

  In FIG. 6, 61 is an operation time of an application, 62 is a user name of the application, 63 is an application name of the application, 64 is a business use of the application, and 65 is an operation input for operating the application.

(Calculation method)
Next, an example of the evaluation rank check result calculation method (ranking) based on the evaluation rank check file of FIG. 4 and the log data of each user will be described.

Total score = (evaluation value for operation input) x (number of appearances) x (weighting factor)
Calculate as

For example, in the case of the expert log (FIG. 5),
= (Vlookup) evaluation value 80 points x number of appearances x 2 weighting factor 1 +
Evaluation value of (ctrv + c) 60 points × 10 occurrences × weighting factor 0.5 +
(Left click) evaluation value 40 points x number of appearances 5 times weighting factor 0.5 + ...
= 560 points = A rank In the case of the ordinary person log (Fig. 6),
= (Right click) evaluation value 20 points × Number of appearances 10 times × Weight coefficient 0.1 +
(Left click) evaluation value 40 points x number of appearances 30 times x weighting factor 0.1 + ...
= 140 points = C rank.

  When the expert log (560 points) is used as the A rank, for example, 400 points or more can be A rank, 200 to 399 points can be B rank, and 199 points or less can be C rank. In this case, the ordinary person log (140 points) can be determined as C rank. Here, the evaluation rank is determined based on the expert log, but is not limited thereto, and may be determined based on the overall standard deviation or the like.

(Create a rank list)
A user (skilled person) who has high application operation skills and is always highly productive in work can expect a certain operation input pattern to appear. Therefore, it is possible to set the reference value for the operation of each application by analyzing the log of the expert.

  Therefore, a process of analyzing the log of the expert in the log analysis server 13 and creating a rank list serving as a reference value for the operation of each application will be described with reference to FIG.

  FIG. 7 is a flowchart showing rank list creation processing executed by the log analysis server of the embodiment.

  The log management server 12 receives application log data and input device log data from the expert log, and registers them in the log management database 12a.

  Then, the log analysis server 13 reads log data obtained by combining application log data and input device log data in association with each other. The reading unit can be freely set such as an application unit, a business use unit, a predetermined time, and the like.

  Step S71: The log analysis server 13 reads one log data of the expert from the log management database 12a.

  Step S72: The evaluation rank determination unit 13a determines whether or not there is an operation input pattern corresponding to the log data in the input pattern table (FIG. 8) stored in the HDD 24.

  Step S73: When the operation input pattern corresponding to the log data is in the input pattern table (YES in step S72), the evaluation rank determination unit 13a increments the number of occurrences (number of appearances) for the operation input pattern by one.

  Step S74: When the operation input pattern corresponding to the log data is not in the input pattern table (NO in step S72), the evaluation rank determination unit 13a additionally registers the input pattern in the input pattern table, and then increments by 1 Do.

  In this way, the number of appearances for each operation input pattern is determined.

  FIG. 8 is a diagram illustrating an example of an input pattern table according to the embodiment.

  81 is an operation input for operating the application, 82 is the number of input operations, 83 is the application name of the application, and 84 is a business use. Here, a case will be described where log data is read with the application name “Excel” in step S71 of FIG.

  From this input pattern table, the operation input pattern of the expert can be known. It can be determined that a large number of cases have a high evaluation value for the application information (application name, business use).

  An evaluation value corresponding to the operation input pattern corresponding to the application information can be calculated from the input pattern table, and a rank list can be created.

  As described above, according to the present embodiment, each client 11 is equipped with the application monitoring unit 11a and the input device monitoring unit 11b, and the application usage status of each client 11 is defined as application log data and input device log data. Record.

  The log management server 12 collects the recorded application log data and input device log data. Next, with respect to the collected application log data and input device log data, the rank of the operation of the application used by each client 11 by the log analysis server 13 can be determined. Further, based on this rank, it is possible to grasp whether or not each client user is using the application efficiently.

  For example, it is determined that a user of a client who uses a large number (more than a predetermined number) of operations of an application having a low input rank (below a predetermined rank) of the input device is highly likely not to know the operation of the application. be able to. In such a case, the log analysis server 13 can also be configured to send a message warning that there is a high possibility that the user is not familiar with the operation to the user, the user's boss, an administrator, or the like. is there.

  Further, it is possible to adopt a configuration in which a message indicating how much the number of appearances of the operation input differs from that of the expert is transmitted to the user. For example, by sending a message in real time, the user can modify the operation input, which is a factor that decreases the productivity of the business, and can advance the operation input to improve the productivity, thereby improving the business efficiency. It becomes possible.

  As described above, in the present embodiment, it is possible to grasp and analyze the usage mode of the application in more detail. In addition, it is possible to specify a factor that reduces the productivity of business in an office or the like, and it is possible to improve business efficiency.

Claims (11)

An information analysis device that determines a rank for an application operation based on terminal operation history information,
Input means for inputting the operation history information including application information related to an application operable on the terminal and usage information of the input device of the terminal ;
Management means for managing a table in which the application information, the usage information of the input device of the terminal, and the rank for the operation of the application are associated with each other on a storage device;
Referring to the table, from the operation history information input by the input means, analysis means for determining a rank for the operation input indicated by the usage information of the application indicated by the application information included in the operation history information;
An information analysis apparatus comprising: analysis result output means for outputting an analysis result by the analysis means. Usage information of the input device, viewed contains any or a combination thereof, the keyboard operation, mouse operation,
The information analysis apparatus according to claim 1, wherein the application information includes a business use . The said analysis means analyzes the operation input pattern for operating the application which can be operate | moved by the said terminal based on the said usage information contained in the said operation history information. The Claim 1 or 2 characterized by the above-mentioned. Information analysis device. The terminal is connected via a network,
The information analysis apparatus according to claim 1, wherein the input unit receives the operation history information via the network. 5. The apparatus according to claim 1 , further comprising a determining unit that determines a rank for the operation of the application when it is determined that the rank for the operation of the application to be determined by the analyzing unit does not exist in the table. The information analysis apparatus according to claim 1. The analysis means includes
From the operation history information, creating means for determining the number of appearances for each operation input pattern for operating the application, and creating an input pattern table for each operation input pattern;
The information analysis apparatus according to claim 5, further comprising: a determining unit that determines the rank for each operation input pattern for operating an application from the input pattern table. A control method for an information analysis device that determines a rank for an operation of an application based on operation history information of a terminal,
An input step for inputting the operation history information including application information related to an application operable on the terminal and usage information of the input device of the terminal ;
The management unit, and the application information, and usage information of the input device of the terminal, a management step of managing on a storage device a table associating the rank with respect to the operation of the application,
An analysis means for referring to the table and determining a rank for the operation input indicated by the usage information of the application indicated by the application information included in the operation history information from the operation history information input by the input step Process,
An analysis result output means comprising: an analysis result output step of outputting an analysis result of the analysis step. An information analysis system having a terminal and an information analysis device that determines a rank for an operation of an application based on operation history information of the terminal,
The terminal
Application monitoring means for monitoring the usage status of applications running on the terminal;
Input device monitoring means for monitoring the input status of the input device of the terminal;
Application information obtained by monitoring by the application monitoring means, and output means for outputting operation history information including usage information of the input device obtained by monitoring of the input device monitoring means,
The information analyzer is
Input means for inputting the operation history information;
And said application information, and the usage information, and management means for managing on a storage device table associating the rank with respect to the operation of the application,
Referring to the table, from the operation history information input by the input means, analysis means for determining a rank for the operation input indicated by the usage information of the application indicated by the application information included in the operation history information;
An information analysis system comprising: analysis result output means for outputting an analysis result by the analysis means. A management device for managing the operation history information of the terminal;
The information analysis system according to claim 8, wherein the input unit of the information analysis apparatus inputs the operation history information acquired from the management apparatus. A program for causing a computer to function as an information analysis device that determines a rank for an operation of an application based on terminal operation history information,
The computer,
Input means for inputting the operation history information including application information related to an application operable on the terminal and usage information of the input device of the terminal ;
Management means for managing a table in which the application information, the usage information of the input device of the terminal, and the rank for the operation of the application are associated with each other on a storage device;
Referring to the table, from the operation history information input by the input means, analysis means for determining a rank for the operation input indicated by the usage information of the application indicated by the application information included in the operation history information;
A program which functions as an analysis result output means for outputting an analysis result by the analysis means. A computer-readable storage medium storing the program according to claim 10.

Images