JPH09305504A - Electronic attendance system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent the illegal action of a user by enabling the monitor of work contents of a user at another computer from a distant place for a user at a specified computer in a computer system for which two computers are connected through a network at least. SOLUTION: A monitor side computer 100-C requests the transmission of display contents (window images) of windows 112-A and 114-B displayed on displays 102-A and 102-B to computers 100-A and 100-B on the side to be monitored, and the window images transmitted from the computers 100-A and 100-B on the side to be monitored through a communication network 110 are displayed in windows 112-C and 114-C displayed on a display 102-C.

Description

Detailed Description of the Invention

[0001]

The present invention relates to a computer system in which at least two computers are connected by a communication network, in which a user of a specific computer remotely monitors the work content of a user of another computer. The present invention relates to a technology capable of preventing a user's cheating and approving a user's work content.

[0002]

2. Description of the Related Art In recent years, an organization using a computer system in which a plurality of computers are connected by a communication network is increasing, and members of the organization use the computers to perform individual work or to configure the organization. It is becoming possible to realize the work of the entire organization by the members working together using computers.

Conventionally, there is a technique called groupware as a technique for efficiently using a computer system. This technology makes use of the immediate connectivity / information storage function of the computer system, and makes it possible to remove restrictions on space / time in the information exchange between users who use each computer.

Specifically, US5280583 "System and Meth
od for Performing Interlocutionat a Plurality of T
erminals Connected to Communication Network ", which provides an environment in which users of each computer share an application program (AP) and each computer user accesses one AP. Intel Corp. "ProShare Personal Conference System" and PictureTel Inc. "Picture Tel
By providing a video conferencing environment that is integrated with a video phone and adding the environment for video conferencing to the AP sharing environment, such as a "video conferencing system", it is possible to provide an environment in which multiple physically separated users can meet at one place. To do.

In addition, by utilizing only the information storage function of the computer system, it is possible to store information between users of each computer without being required to have simultaneity such as telephone calls and without being restricted by physical access positions. An e-mail function that enables exchanges has been put into practical use. Furthermore, an electronic bulletin board function, a schedule management function, a routing function and the like, which are extensions of the electronic mail function, have been put into practical use.

[0006]

By the way, in an organization, when carrying out the work of the entire organization, it is customary to prevent misconduct during work by having the supervisor supervise the work of his subordinates. Has become. It is also customary for the superior to approve the work contents of his subordinates to complete the work.

However, the above-mentioned conventional technique is playing an effective role in that the organization members cooperate with each other to perform the work of the entire organization, but the misconduct of the organization members and the work contents of the organization members are performed. Is not a technology that takes into account the act of approval.

That is, basically, each work performed by an organization member using a computer is performed on an individual basis, so that the visibility of the work content of each organization member is lacking, and the inside of the organization is lacking. Has become a factor that causes cheating.

The lack of visibility of the work contents of the organization members means, specifically, that it is not known who the organization members who are working using the computer are, and The macro only knows what program the organization member is executing and what file is being accessed.

In order to prevent cheating outside the organization,
Information exchange between organization members can be encrypted, but in order to prevent fraud inside the organization, the work contents of each organization member are visualized and the organization administrator It is essential to be able to monitor the work content.

If the manager of the organization can monitor the work content of each organization member, the subordinates will carry out the work without knowing when and when the work content will be monitored by the superior. So it will not be possible to cheat.

By the way, in the computer system, there is generally an administrator who manages the operation of the computer system, and the administrator of the computer system can grasp a part of the information regarding the utilization status of the computer system. .
However, the administrator of the computer system does not know who the organizational members who are using the computer are, and the administrator of the computer system and the administrator of the organization may be different. Since there are many, the administrator of the computer system
It is not possible to make a judgment on the work being performed by the organization member, and the manager of the organization cannot directly know the work being performed by the organization member who is a subordinate through the computer system.

Therefore, an object of the present invention is to allow a user of a specific computer to remotely monitor the work content of a user of another computer in a computer system in which at least two computers are connected by a communication network. By providing such a technology, it is possible to prevent a user's cheating and to approve the work content of the user.

[0014]

In order to achieve the above object, the first aspect of the present invention is to provide at least two computers including an input device, a display device, a storage device, and a processing device. In a computer system connected by a communication network, a specific computer (hereinafter,
This is called the monitor-side computer. ) Processing device transmits all or part of the image information displayed on the display device of the monitored computer to a computer other than the monitoring computer (hereinafter referred to as the monitored computer). And the image display means for displaying the image information transmitted from the monitored computer in response to the request of the image requesting means on its own display device. The processing device of (1) has an image transmitting means for transmitting the image information requested by the monitor-side computer to the monitor-side computer when the monitor-side computer requests transmission of the image information. Thus, an electronic witness system is provided that enables the user of the monitor-side computer to remotely monitor the work content of the monitored computer user.

According to the first aspect, the manager of the organization uses his / her own computer (monitor-side computer) and the subordinate organization members use the computer (monitored-side computer). Since it is possible to supervise the work contents that are present without being at the work place, it is possible to prevent illegal acts during the work.

The present invention also provides, as a second aspect, a first aspect.
In the above aspect, the input device of the monitor-side computer receives the designation that the image display means approves the image information displayed on its own display device, and the processing device of the monitor-side computer receives its own input. When the device accepts the designation to approve, the monitor-side computer, which has transmitted the image information approved by the designation, has an approval notifying means for notifying the fact, and the monitor-side computer When the processing device is notified by the monitor-side computer that it has been approved, the processing device may have approval display means for displaying that fact on its own display device.

According to the second aspect, the manager of the organization uses his / her own computer (monitor side computer) and the subordinate organization members use the computer (monitor side computer). Since the contents of the existing work can be approved without being at the work place, the organization member can finish the work after receiving the approval from the manager of the superior organization.

The present invention also provides a first aspect as a third aspect.
In any one of the second aspect and the second aspect, the input device of the monitor-side computer accepts designation of an arbitrary monitor-side computer, and the image requesting unit receives the monitor-side computer received by the own input device. Can be requested to transmit image information.

According to the third aspect, the manager of the organization uses his or her own computer (monitor-side computer) so that the desired organizational member among the plurality of subordinate organizational members can use the computer (target computer). It is possible to supervise (or approve) the work performed using the monitor-side computer even without being at the work place.

The present invention also provides, as a fourth aspect, the first aspect.
In any one of the third aspect to the third aspect, the input device of the monitor-side computer receives the designation of the work of the arbitrary monitor-side computer, and the image requesting unit receives the monitor-received by its own input device. It is possible to request that the image information displayed on the display device of the monitored computer along with the execution of the work of the monitored computer be transmitted to the monitored computer.

According to the fourth aspect, the manager of the organization uses his or her own computer (monitor-side computer), and a plurality of subordinate organizational members use the computer (monitor-side computer). Of the work you are doing, the work content of the desired work,
It is possible to supervise (or approve) even if you are not in the work area.

The present invention also provides, as a fifth aspect, a first aspect
In any one of the fourth to fourth aspects, when the monitored computer tries to access a specific program or file stored in its own storage device by the image requesting means, the monitored computer Can be requested to transmit image information.

According to the fifth aspect, the manager of the organization is triggered by the fact that the organization member who is a subordinate tries to access a specific program or file by using the computer (monitored computer). Using his / her own computer (monitor-side computer), it becomes possible to supervise (or approve) the work contents of the organization members without being at the work place.

The present invention also provides, as a sixth aspect, a first aspect.
In any one of the fifth to fifth aspects, when the processing device of the monitored computer accesses a specific program or file stored in its own storage device,
The monitor side computer is provided with an access notifying means for notifying that, and when the image requesting means is notified from the monitored side computer, the monitored side computer is accessed. Can be requested to transmit image information.

According to the sixth aspect, the manager of the organization is triggered by the fact that the organization member who is a subordinate tries to access a specific program or file by using the computer (monitored computer). Using his / her own computer (monitor-side computer), it becomes possible to supervise (or approve) the work contents of the organization members without being at the work place.

The present invention also provides, as a seventh aspect, a sixth aspect.
In the above aspect, the input device of the monitored computer receives the input of the user identifier for identifying the user, and the processing device of the monitored computer causes the processing device of the monitored computer to store a specific program or a specific program stored in its own storage device. When accessing the file, the monitor-side computer is provided with an identifier transmitting means for transmitting the user identifier received by the input device of itself, and the processor of the monitor-side computer is transmitted from the monitored-side computer. It may have an identifier display means for displaying the incoming user identifier on its own display device.

According to the seventh aspect, the manager of the organization is triggered by the fact that the subordinate organization member tries to access a specific program or file using the computer (monitored computer). When supervising (or approving) the work content of an organization member using his or her own computer (monitor-side computer), it is possible to know who is the organization member performing the work. Become.

The present invention also provides, as an eighth aspect, a first aspect
In any one of the aspects to the sixth aspect, the processing device of the monitor side computer has an image storage means for storing the image information displayed by the image display means on its own display device as a file in its own storage device. Can be

According to the eighth aspect, the manager of the organization uses his / her own computer (monitor-side computer) and the subordinate organization members use the computer (monitored-side computer). If you supervise (or approve) the contents of the work,
Since the work content can be stored and held, it becomes possible to use it as evidence material when a problem occurs later.

The present invention also provides, as a ninth aspect, an eighth aspect.
In the above aspect, when the processing device of the monitor side computer stores the image information as a file by the image storage means,
Identifier requesting means for requesting the monitored computer that has transmitted the image information to send a user identifier for identifying the user, and the monitored computer in response to the request from the identifier requesting means. A display unit for displaying the incoming user identifier on its own display device, the input device of the monitored computer receives the input of the user identifier, and the processing device of the monitored computer displays a monitor. When the side computer requests the transmission of the user identifier, the monitor side computer may be provided with an identifier transmitting means for transmitting the user identifier accepted by the own input device.

According to the ninth aspect, the manager of the organization manages (or approves) his / her own computer (monitor-side computer) by the subordinate organization member who is the computer (monitor-side computer). It is possible to know who is the organization member who is performing the work when the contents of the work being performed are stored and retained.

As a tenth aspect of the present invention, in any one of the first to sixth aspects and the eighth aspect, as the tenth aspect, the processing device of the monitor-side computer causes the image requesting means to transmit the image information. When requesting transmission, identifier requesting means for requesting the monitored computer of the requesting party to transmit a user identifier for identifying the user, and the monitored computer in response to the request from the identifier requesting means. A user identifier transmitted from the computer, and an identifier display means for displaying the user identifier on its own display device, and the input device of the monitored computer receives the input of the user identifier. Identification for transmitting the user identifier received by its own input device to the monitor side computer when the monitor side computer requests transmission of the user identifier It can be made to have a transmission means.

According to the tenth aspect, the manager of the organization is
When using his / her own computer (monitor-side computer) to supervise (or approve) the work performed by the subordinate organization members using the computer (monitor-side computer),
It becomes possible to know who is the organization member who is performing the work.

[0034]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is an overall configuration diagram of an electronic witness system according to an embodiment of the present invention.

The electronic witness system according to the embodiment of the present invention enables a specific user to remotely monitor the work content of another user, so that the computer used by the monitoring user (hereinafter referred to as "computer"). A computer used by a user to be monitored (hereinafter, referred to as a "monitored computer") is connected via a communication network.

In FIG. 1, it is assumed that the computers 100-A and 100-B used by the users A and B are monitored computers, and the computer 100-C used by the user C is a monitored computer. Note that the user C is generally a user in a position of supervising the users A and B.

As shown in FIG. 1, computers 100-A-1.
00-C is the display 102-A to 102-C, respectively.
And a mouse 104-A to 104-C and a keyboard 106.
-A to 106-C are provided, and a window system which is a general user interface is executed.

As shown in FIG. 1, the computer 100-
A to 100-C are connected by a communication network 110, which allows a specific user to physically monitor the work contents of other users from a remote location.

For example, the communication network 110 may be a LAN (Local Area Network) when the computers 100-A to 100-C are installed over a narrow range. If A to 100-C are installed over a wide area, ISDN (In
integrated services digital network). In particular, in a company, a plurality of LANs to which a plurality of computers are connected are further connected to a WAN (Wide A).
A wide area connection with a rea Network) is also possible.

In any case, the electronic witness system of the embodiment of the present invention is not limited to the type of the communication network 110.

Next, an operation example of the electronic witness system according to the embodiment of the present invention will be described.

In FIG. 1, a user A uses the monitored computer 100-A to perform budget management work, and a user B uses the monitored computer 100-B to study a system configuration plan. An example of working is shown.

That is, in the monitored computer 100-A, the AP for performing the budget management work is executed on the window 112-A displayed on the display 102-A, and the work content of the user A is displayed in the window. 112-A
It is displayed inside. Also, the monitored computer 100-
In B, the AP for studying the system configuration proposal is executed on the window 114-B displayed on the display 102-B, and the work content of the user B is displayed on the window 114-B. There is.

According to the electronic witness system of the embodiment of the present invention, as shown in FIG. 1, in the monitor side computer 100-C used by the user C, the monitored side computer 100-A is used. The work contents of user A,
Further, the work contents of the user B who is using the monitored computer 100-B are displayed in real time on the windows 112-C, 11 displayed on the display 102-C, respectively.
It is supposed to be displayed in 4-C.

As a concrete implementation method, the window 1
The display contents of 12-A and 114-B can be directly copied to the windows 112-C and 114-C.

As a result, the user C uses the window 1 on the monitor-side computer 100-C used by the user C.
Just by looking at the display contents of 12-C and 114-C, the work contents of the user A using the monitored computer 100-A and the user B using the monitored computer 100-B It is possible to monitor the work content from a remote place.

Since the user C is generally a user who is in the position of supervising the users A and B, the telephone 108 can be used as needed when monitoring the work contents of the users A and B. -A to 108-C, user A,
You can have a conversation with B.

Further, in FIG. 1, the monitored computer 1
Window 116-A displayed on display 102-A of 00-A and window 116-B displayed on display 102-B of monitored computer 100-B.
Respectively, users A and B not monitored by user C.
The contents of the work are displayed, and the users A and B can perform another work in parallel with the work monitored by the user C. Further, in FIG. 1, the monitor-side computer 1
The work content of the user C is displayed in the window 116-C displayed on the display 102-C of 00-C. The user C monitors the work content of the users A and B while performing another work. It can be carried out.

In FIG. 1, the number of computers to be monitored is two, that is, the computers 100-A and 100-B. However, the number of computers to be monitored may be one or three or more.

Now, a method of copying the display contents of the window (hereinafter referred to as "window image") will be described with reference to FIG.

In FIG. 2, for simplicity of explanation, it is assumed that the monitored computer is only the computer 100-A used by the user A.

In the monitored computer 100-A, two windows 2 are displayed on the display 102-A.
Although 00-A and 210-A are displayed, the window for copying the window image to the monitor-side computer 100-C, that is, the window displaying the work content monitored by the user C is the window 200-A. I am trying.

The copying of the window image is actually performed by the monitored computer 100-A and the monitored computer 100-.
It is realized by the control programs 220 and 230 executed respectively in C.

In the monitored computer 100-A, the monitored control program 220 is the monitored computer 1
The image data 250-A in the window 200-A is extracted from the image memory 240-A included in 00-A, and the extracted image data 250-A is transmitted to the monitor-side control program 230 via the communication network 110. To do so. On the other hand, in the monitor-side computer 100-C, the monitor-side control program 230 stores the image data 250-A transmitted from the monitored-side control program 220 in the image memory 240-C included in the monitor-side computer 100-C.
Write in an area corresponding to a certain window 200-C.

As a result, the display content of the window 200-C of the monitor side computer 100-C becomes the same as the display content of the window 200-A of the monitored computer 100-A.

In the copying method described above, the monitored-side control program 220 can be activated from the monitor-side control program 230 via the communication network 110.

That is, for example, the monitor-side computer 100
-C, the user C sets the address of the monitored computer 100-A used by the user A to the mouse 104-C.
Alternatively, when input from the keyboard 106-C is transmitted to the monitored computer 100-A, and then an instruction to monitor is input from the mouse 104-C or the keyboard 106-C, the monitor side control program 230 is activated. Is
The monitor side control program 230 is the communication network 1
It is possible to activate the monitored-side control program 220 via 10.

Further, for example, the monitor side control program 2
When activating the monitored-side control program 220, the requesting unit 30 requests transmission of a user identifier for identifying the user A who is using the monitored-side computer 100-A. The user identifier transmitted from the computer may be displayed on the display 102-C of the monitor-side computer 100-C.

It should be noted that the user identifier indicates the monitored computer 100 when the monitored control program 220 is activated.
-Prompts user A who is using A,
For example, the password or user name input by the user A from the keyboard 106-A can be used. In particular, regarding the user name, when the user A starts the work such as when the user A logs in to the monitored computer 100-A, the user A
If is already input from the keyboard 106-A, the user name can be used.

In the above-mentioned copying method, the image data 250-A transmitted from the monitored control program 220 to the monitor control program 230 is specified by the monitor control program 230 via the communication network 110. Can be.

That is, for example, the monitor-side computer 100
-C, the user C uses the mouse 104-C or the keyboard 1 as the AP for performing the work to be monitored.
When designated from 06-C, the designated AP is notified from the monitor side control program 230 to the monitored side control program 220 via the communication network 110, and the monitored side control program 220 is notified from the monitor side control program 230. The image data 250-A in the window (here, the window 200-A) in which the executed AP is executed can be extracted.

In the copying method described above, the image data transmitted from the monitored control program 220 to the monitored control program 230 is not the image data 250-A corresponding to the window image, but the monitored computer 100-. The display data of the entire display 102-A of A may be image data.

Here, a method of copying the display contents of the entire display 102-A (hereinafter referred to as "display image") of the monitored computer 100-A will be described with reference to FIGS.

The copy of the display image is also realized by the control programs 220 and 230 executed by the monitored computer 100-A and the monitor computer 100-C, like the window image copy.

As shown in FIG. 3, the monitored computer 10
In 0-A, the monitored side control program 220
Image memory 240 included in the monitored computer 100-A
All the image data 260-A in A is extracted, and the extracted image data 260-A is transmitted to the monitor side control program 230 via the communication network 110. On the other hand, in the monitor-side computer 100-C, the monitor-side control program 230 writes the image data 260-A transmitted from the monitored-side control program 220 into the image memory 240-C included in the monitor-side computer 100-C. To

As a result, the display content of the entire display 102-C of the monitor side computer 100-C becomes the same as the display content of the display 102-A of the monitored computer 100-A.

Further, as shown in FIG. 4, in the monitored computer 100-A, the monitored control program 22 is monitored.
0 extracts all the image data 260-A in the image memory 240-A included in the monitored computer 100-A, and extracts the extracted image data 260-A from the communication network 11
It is transmitted to the monitor side control program 230 via 0. On the other hand, in the monitor-side computer 100-C,
The monitor-side control program 230 converts the image data 260-A transmitted from the monitored-side control program 220 into
Image memory 240-C included in the monitor-side computer 100-C
Write in an area corresponding to a certain window 200-C inside.

As a result, the display content of the window 200-C of the monitor-side computer 100-C becomes the same as the display content of the display 102-A of the monitored computer 102-A.

In the copying method described above, the image data transmitted from the monitored-side control program 220 to the monitor-side control program 230 is not limited to the image data 250-A corresponding to the window image, but the window 2
00-A data including all the execution results of the AP executed on the window 200-A including the part not displayed, that is, the print result when the execution result of the AP is printed. The data can be

Here, a method for copying data indicating the execution result of the AP executed on the window 200-A of the monitored computer 100-A (hereinafter referred to as "print result data") will be described with reference to FIG. Will be explained.

As shown in FIG. 5, the monitored computer 10
In 0-A, the monitored side control program 220
AP270 running on window 200-A
Then, the print result output command is issued. However, at this time, the monitored-side control program 220 specifies the memory 280-A included in the monitored-side computer 100-A as the output destination of the print result. AP2
When an output command is issued from the monitored-side control program 220, the print 70 stores the print result data 290 in the memory 280.
-Since it is written in A, the monitored side control program 220
Extracts the print result data 290 from the memory 280-A and transmits the extracted print result data 290 to the monitor side control program 230 via the communication network 110. On the other hand, in the monitor-side computer 100-C, the monitor-side control program 230 sends the print result data 29 sent from the monitored-side control program 220.
0 is the image memory 2 provided in the monitor-side computer 100-C
The data is written in an area corresponding to a certain window 200-C in 40-C.

As a result, the display contents of the window 200-C of the monitor side computer 100-C include the display contents of the window 200-A of the monitored side computer 100-A.
It may be data indicating all execution results of the AP 270 executed on the window 200-A.

Next, the operating procedure of the user C using the monitor-side computer 100-C and the monitor-side computer 1
About the display contents of the display 102-C of 00-C,
This will be described with reference to FIGS.

Here, the user C inputs / specifies the address of the monitored computer 100-A used by the user A and the AP for performing the work to be monitored from the keyboard 106-C. An example of doing so is shown. Further, here, the monitor side control program 23
0 requests transmission of a user identifier for identifying the user A who is using the monitored computer 100-A when activating the monitored control program 220. An example is shown in which the user identifier transmitted from the computer is displayed on the display 102-C of the monitor-side computer 100-C.

In the computer 100-C on the monitor side, when the user C inputs an instruction to perform the monitor from the mouse 104-C or the keyboard 106-C, the display 102-C of the computer 100-C on the monitor side is displayed. As shown in FIG. 6, a dialog window 600 for designating a monitor target is displayed.

As a result, the user C in the dialog window 600 shown in FIG. 6 monitors the monitored computer (here, the monitored computer 100).
-The address 610 of A) and the AP name 620 of the AP for performing the work to be monitored are set to the keyboard 10
You can enter from 6-C.

Instead of the address 610, the terminal name given in advance to the monitored computer 100-A is input so that the monitored computer 100-C can change the input terminal name to the monitored computer. The address of 100-A may be obtained.

Further, it is not always necessary to input the AP 620. If not input, the display contents of the entire display 102-A of the monitor-side computer 100-A can be monitored. it can.

Needless to say, the address 610 can be entered graphically in view of the current technology. That is, for example, on the display 102-C of the monitor-side computer 100-C, a layout drawing of a plurality of monitored-side computers is graphically drawn according to the actual layout, or completely virtual graphically, and arranged. If the address is obtained from the monitored computer selected by clicking with the mouse 104-C from the figure, the user C does not have to bear the burden of inputting the address 610 from the keyboard 106-C.

It is assumed that the user A is currently performing budget management work using the monitored computer 100-A as shown in FIG. That is, the monitored computer 10
In 0-A, the AP for budget management work
Window 112 displayed on display 102-A-
A is executed on A, and the work content of user A is displayed in window 1
It is displayed in 12-A.

The dialog window 600 shown in FIG.
At the user A, an address 610 of the monitored computer 100-A and an A for performing budget management work are displayed.
Enter the AP name 620 of P from the keyboard 106-C and click the instruction button 630 to start monitoring
When clicked on 04-C, the same display 112-A as the window 112-A displayed on the display 102-A of the monitored computer 100-A is displayed on the display 102-C of the monitored computer 100-C as shown in FIG. A display content window 112-C is displayed.

Further, the display content of the dialog window 600 is also changed to the display content showing the information regarding the monitor target, as shown in FIG. That is, in the dialog window 600 shown in FIG. 8, the user identifier (here, operator name) 640 of the user A acquired from the monitored computer 100-A and the monitored computer 100.
The address 650 of -A and the AP name 660 for performing the work to be monitored are displayed.

The dialog window 600 shown in FIG.
At this time, when the user C clicks the instruction button 670 for terminating the monitor with the mouse 104-C, the content displayed on the display 102-C of the monitor-side computer 100-C closes the dialog window 600 and is monitored. Returns to the previous display.

As described above, according to the electronic witness system of the embodiment of the present invention, the monitor-side computer 100
User C using -C is the monitored computer 10
Since the work content of the user A who is using 0-A can be monitored from a remote location, the manager of the organization who is the superior is a subordinate when the organization-wide business is performed. By monitoring the work contents of organizational members from a remote location, it is possible to prevent fraudulent activities during work.

In the above operation example, the monitored-side control program 220 detects that the display content of the window to be monitored has been changed in order to allow continuous monitoring. Each time, the window image or the changed portion is transmitted to the monitor side control program 230. Further, the monitored-side control program 220 periodically sends the window image to the monitor-side control program 230 regardless of whether the display content of the window to be monitored has been changed. Good.

Further, in the above-described operation example, the user C using the monitor-side computer 100-C monitors the work content itself of the user A using the monitored computer 100-A. However, for example, the work content after some processing such as translating English into Japanese may be monitored.

In the above-described operation example, the image data of the monitored computer 100-A is transferred to the monitor computer 1.
I am trying to use the method of copying to 00-C,
A method of sharing the same image data by sharing the AP may be used.

That is, for example, US5280583 "System an
d Method for Performing Interlocution at a Plurali
ty of Terminals Connected to Communication Networ
"k" discloses a technique of providing the same display content to a plurality of users by executing a specific AP in cooperation with each other. Therefore, this technique can be used.

By the way, the electronic witness system according to the embodiment of the present invention does not mean that a specific user inputs an instruction to monitor the work content of another user from a remote place, but the specific user does not. When it is necessary to approve the work content of the above from a remote place, the work content may be monitored from the remote place.

Then, by allowing a specific user to remotely monitor the work contents of other users and approve the monitored work contents, if a problem occurs later,
It is possible to prove that the monitored user's work content at the time of approval was correct.

It is conceivable that the user may end the work as an opportunity for approving the work content. An operation example in such a case will be described with reference to FIGS. 9 to 12.

In this operation example, user A (hereinafter,
It is called a "worker". ) Is the monitored computer 100-A
If you try to end the work you were doing using, that is, if you input an instruction from the mouse 104-A or keyboard 106-A to end the execution of the AP to perform the work, or When the instruction to store as a file is input from the mouse 104-A or the keyboard 106-A, the monitored-side control program 220 is activated.

In this operation example, the monitored-side control program 220 is the monitored-side computer 100-A.
As shown in FIG. 9, a dialog window 900 indicating that approval is required before the work is finished is displayed on the display 102-A of FIG.

The dialog window 900 shown in FIG.
At the worker, an instruction button 91 for approval is received.
When 0 is clicked with the mouse 104-A, the monitored-side control program 220 changes the display content of the dialog window 900 to the display content prompting the input of the approval number as shown in FIG.

The approval number is used to guarantee the identity of the worker requesting approval of the work content. For example, the password input by the worker from the keyboard 106-A is used. You can

The dialog window 90 shown in FIG.
0, the operator inputs the approval number 920 to the keyboard 1
06-A input button 93 for approval
When 0 is clicked with the mouse 104-A, the monitored-side control program 220 activates the monitor-side control program 230 via the communication network 110, and at the same time, the monitor-side control program 230 receives the approval number and the work entered. The user's user name is sent.

The monitored side control program 220
Is the keyboard 106 when the worker starts the work such as when the worker logs in to the monitored computer 100-A.
-The user name input from A can be transmitted to the monitor-side control program 230. However, if such a work procedure does not exist, the dialog window 1000 prompts the user to input the user name. do it. In addition, the user name is input by the keyboard 106-
Even if the user name is directly input from A, the user name of the operator is displayed by the mouse 104 from the menu displaying the list of user names.
-You may make it select by clicking with A.

As a result, the monitored side control program 2
20 and the monitor-side control program 230, as described above, the user C (hereinafter referred to as “authorizer”).
Indicates the work content of the worker (the window 112-displayed on the display 102-A of the monitored computer 100-A).
It is possible to monitor (display contents of A) from a remote place.

Further, in this operation example, the monitor side control program 230 is for the approval procedure for the approver to perform the approval action on the display 102-C of the monitor side computer 100-C as shown in FIG. Window 110
Display 0.

As a result, the approver confirms that the window 102
-If there is no problem in the work content of the worker and the user name 1110 and the approval number 1120 displayed in the approval procedure window 1100 are correct, looking at the display content of -C, the instruction button 1130 for approval is displayed. Mouse 104-
By clicking with C, the work content of the worker can be approved.

In this operation example, the monitor side control program 230 closes the approval procedure window 1100 when the approval instruction button 1130 is clicked with the mouse 104-C, and the work content is approved. Is notified to the monitored-side control program 220 via the communication network 110.

Then, the monitored side control program 220
When the monitor side control program 220 notifies that the work content is approved, the dialog window 900
As shown in FIG. 12, the display content of is changed to the display content indicating that it has been approved.

The dialog window 90 shown in FIG.
At 0, the operator gives an instruction button 940 to end.
When the mouse 104-A is clicked on, the monitored-side control program 220 closes the dialog window 900.

In the present operation example, after the above-mentioned approval action is completed, the execution of the AP for performing the work is completed for the first time, the work result is stored as a file,
The work done by the worker will be officially finished.

The authorization number used in this operation example may be a fingerprint or a voiceprint in addition to the password, and the authorization number can be entered by using a special card. The approval number recorded in the above may be read by the monitored computer 100-A.

In this operation example, the approval number 1110 is displayed in the approval procedure window 1100. However, there is a case where the approval number may not be disclosed to anyone other than the worker himself. In such a case, the approval number 11 is displayed in the approval procedure window 1100.
Instead of displaying 10 in a readable format, the monitor computer 100-C may internally judge the validity of the approval number and display the judgment result in the approval procedure window 1100.

In this operation example, the approver requests approval, that is, the monitor-side computer 100-
When the approval procedure window 1100 is displayed on the display 102-C of C, the approver and the worker use the telephones 108-A and 108-C to have a conversation (for example, a question-and-answer session and advice regarding work content). ) Is possible. Such an advanced dialogue system is described in the above-mentioned US5280.
583 "System and Method for Performing Interlocutio
n at a Plurality of Terminals Connected to Communi
cation network ”.

Further, in the approval act described in this operation example, the approver inputs the instruction to monitor the work content of the worker from a remote location, so that the approver has already performed the work content of the worker at the remote location. It can also be applied when monitoring from.

Now, as an opportunity to approve the work contents, in addition to the worker trying to finish the work, the worker trying to access a specific file or AP, Events that occur in various situations are possible.

Conventionally, a process of limiting a user who is permitted to access a specific file or AP is performed by a method of inputting a password when accessing the specific file or AP. However, if a password is stolen or decrypted, an unauthorized user can access a specific file or AP, and there is no way to prevent this.

In the embodiment of the present invention, when the worker tries to access a specific file or AP, the approver starts monitoring the work content of the worker and the work is performed in the same manner as described above. If the contents are approved, humans will intervene in the process of limiting the users who are allowed to access a specific file or AP, so that it becomes possible to secure safety at a higher level.

As described above, in order to use the events that occur in various scenes during work as an opportunity (hereinafter, referred to as “trigger”) for approving the work content, as shown in FIG. The trigger table 1300 may be used.

As shown in FIG. 13, the trigger table 13
00 is a trigger type 1310 and a trigger source 1320
And a trigger target 1330.

The trigger type 1310 indicates a user operation adopted as a trigger, and is, for example, "AP start operation" or "file access operation".

Further, the trigger source 1320 indicates a target on which the user operation indicated by the trigger type 1310 is performed, and is, for example, an AP name or a file name.

The trigger target 1320 indicates an object to be monitored, and is, for example, "AP that triggered the trigger", "AP of the trigger source", "entire screen" or the like.

When the trigger table 1300 is used, when the user operation indicated by the trigger type 1310 is about to be performed on the target indicated by the trigger source 1320,
The target indicated by the trigger target 1330 is displayed on the monitor side computer 100-C, and the monitor side computer 100-C is displayed.
An approver using C can monitor and approve.

That is, for example, the trigger type 1310 is "AP start operation" and the trigger source 1320 is "A.
P2 ”and the trigger target 1330 is the“ AP that triggered the trigger ”, the monitored computer 10
At 0-A, when AP1 starts AP2, AP1
The display contents of the window in which is executed are displayed on the monitor-side computer 100-C. In addition, for example, when the trigger type 1310 is “AP start operation”, the trigger source 1320 is “AP2”, and the trigger target 1330 is “trigger source AP”, in the monitored computer 100-A, AP1 When AP2 starts AP2, the display contents of the window in which AP2 is executed are displayed on the monitor-side computer 100-C.

The trigger table 1300 is preferably prepared for both the monitored computer 100-A and the monitored computer 100-C. this is,
This is because it is conceivable that a resource (for example, important data) that does not exist in the monitored computer 100-A exists in the monitored computer 100-C, and a worker may access such a resource via the communication network 110. is there.

The trigger table 1300 can be prepared in another computer (not shown) other than the monitored computer 100-A and the monitored computer 100-C. For example, a trigger table 1300 is prepared in a database, a specific file or AP stored in the database is used as a trigger source 1320, and a file access operation to the file or an AP start operation to the AP is set as a trigger type 1310. The AP that tried to access the file or the AP that tried to activate the AP can be the trigger target 1330. In addition, the monitored side control program 2
20 and the monitor side control program 230 may be stored.

Needless to say, the trigger table 1300 can also be used in the case where only the work content is monitored without approving the work content.

As described above, the electronic witness system according to the embodiment of the present invention is used in the distributed computers 100.
-As can be seen from the system built on A to 100-C, the monitored computers 100-A, 100-
The monitored-side control program 220 executed in B and the monitor-side control program 230 executed in the monitor-side computer 100-C cooperate to realize the operation of the electronic witness system of the embodiment of the present invention. ing.

The detailed processing flow of the monitored-side control program 230 and the monitored-side control program 220 will be described below with reference to FIGS. 14 to 18.

FIG. 14 is a processing flowchart of the monitor side control program 230.

As shown in FIG. 14, the monitor-side control program 230 first determines whether or not a monitor start request has been issued (step 1400).

The monitor start request is sent to the monitor side computer 100.
There are two types of cases: a monitor start request input by the user C of -C and a monitor start request transmitted from the monitored-side control program 220. In the latter case, the monitored-side control program 220
As will be described later, after the monitor start request is transmitted to the monitor side control program 230, the monitor side control program 23
It waits for a monitor start instruction to be sent from 0.

The monitor side control program 230, when a monitor start request is made (step 140)
0), a monitor start instruction is transmitted to the monitored-side control program 220 (step 1430), and monitor-side screen monitor processing described later is executed (step 1600).

Further, the monitor side control program 230 is
If the monitor start request is not issued (step 1
400), and checks the trigger table 1300 prepared in the monitor-side computer 100-C (step 141
0), if the user operation indicated by the trigger type 1310 is about to be performed on the target indicated by the trigger source 1320 in the trigger table 1300 (step 142).
0), a monitor start instruction is transmitted to the monitored-side control program 220 (step 1430), and monitor-side screen monitor processing described later is executed (step 1600).

FIG. 15 shows the monitored-side control program 220.
It is a processing flowchart of.

As shown in FIG. 15, the monitored-side control program 220 first sets the monitor-side control program 230.
It is determined whether or not the monitor start instruction is transmitted from (step 1500).

When the monitor start instruction is transmitted from the monitor side control program 230 (step 1500), the monitored side control program 220 executes the monitored side screen monitor process (step 170).
0).

Further, the monitored side control program 220
If the monitor start instruction is not transmitted from the monitor side control program 230 (step 1500), the check table 1300 prepared in the monitored computer 100-A, 100-B is checked (step 151).
0), if the user operation indicated by the trigger type 1310 is about to be performed on the target indicated by the trigger source 1320 in the trigger table 1300 (step 152).
0), a monitor start request is transmitted to the monitor side control program 230 (step 1530).

Thereafter, in response to the monitor start request transmitted in step 1530, the monitor side control program 230
Since a monitor start instruction will be sent from
In step 1500, it is determined that the monitor start instruction has been transmitted.

FIG. 16 shows the monitor screen monitor process (see FIG.
2 is a processing flowchart of step 1600).

As shown in FIG. 16, in the monitor-side screen monitor process, the monitor-side control program 230 first performs an initial process such as creating a window for displaying a monitor target (step 1610), The following processing is performed.

That is, the monitor side control program 230
When the window image is transmitted from the monitored-side control program 220 (step 1620), performs screen display processing for displaying the transmitted window image in the window created in the initial processing (step 163).
0). However, if only the changed portion of the window image is transmitted from the monitored-side control program 220, in step 1630, the display content of the window created in the initial process is changed based on the transmitted changed portion. Perform screen update processing.

Further, the monitor side control program 230 is
When an approval request is transmitted from the monitored-side control program 220 (step 1640), an approval process that cooperates with the monitored-side control program 220 to realize the approval action described with reference to FIGS. 9 to 12. Is performed (step 1650).

Further, the monitor side control program 230 is
When the user of the monitor-side computer 100-C inputs an instruction to save the work content being monitored from the mouse 104-C or the keyboard 106-C (step 166).
0), save processing to save the work content (step 1
670).

The work content can be stored in a data format 1800 as shown in FIG. 18, for example. In FIG. 18, reference numeral 1810 denotes the monitored computer 100-
Reference numeral 1820 is a work name indicating the name of work being performed using A and 100-B, and 1820 is the monitored computer 100-.
A, 100-B is a worker name indicating a user who is working, 1830 is a date / time indicating the date / time at which the work content is saved, and 1840 is the monitor-side computer 100-C. Then, 1850 is an approver name indicating a user who is monitoring the work content, and 1850 is an approval screen including a window image that was a monitoring target at the time of approval.

Further, the monitor side control program 230 is
The user of the monitor-side computer 100-C issues an instruction to terminate the monitor to the mouse 104-C or the keyboard 106-C.
If the input is from (step 1680), a monitor end instruction is transmitted to the monitored-side control program 220 (step 1690), and then FIG. 17 is a processing flowchart of monitored-side screen monitor processing (step 1700 in FIG. 15). Is.

As shown in FIG. 17, in the monitored screen monitoring process, the monitored control program 220
First, after performing an initial process such as specifying a window to be monitored (step 1710), the following process is performed.

That is, the monitored side control program 22
When detecting that the display content of the window specified in the initial processing has changed (step 1720), 0 transmits the window image (or the changed portion of the window image) to the monitor side control program 230 (step 1730). ).

Further, the monitored side control program 220
When the user of the monitored computer 100-A inputs an instruction to request approval of the work content from the mouse 104-A or the keyboard 106-A (step 17)
40) Lock the execution of the AP displaying the window image of the monitor target in order to prevent the work content to be approved from being changed before the authentication (step 175).
0), and sends an approval request to the monitor-side control program 230 (step 1760).

Thereafter, the monitored-side control program 220
9 cooperates with the monitor-side control program 230, and FIG.
An approval process for realizing the approval action described with reference to FIG. 12 is performed (step 1770), and when the approval process is completed, the execution of the AP displaying the window image to be monitored is unlocked (step 1780).

Further, the monitored side control program 220
When the monitor end instruction is transmitted from the monitor side control program 230 (step 1790), the end process for ending the monitor side screen monitor process is performed (step 1795).

The monitor start request, the monitor start instruction, and the window image transmitted / received between the monitored-side control program 220 and the monitor-side control program 230 can be in the message format shown in FIG. 19, for example.

FIG. 19A is a diagram showing a monitor start request message format 1900. In FIG. 19A, 1901 is a message identifier indicating a monitor start request, and 1902 is a work to be monitored. An operator name indicating the user who is performing the operation, 1903 is a terminal name indicating the monitored computer on which the work to be monitored is being performed, 1
904 is a trigger type, 1905 is a trigger source, 190
6 is a trigger target.

FIG. 19B is a diagram showing a message format 1910 of the monitor start instruction. In FIG. 19B, 1911 is a message identifier indicating that the monitor start instruction is given, and 1912 is a monitoring target. A worker name indicating the user who is performing the work, 1913 a terminal name indicating the monitored computer on which the work to be monitored is being performed, 1914 a trigger type, 1915 a trigger source,
Reference numeral 1916 is a trigger target.

Further, FIG. 19C is a diagram showing a message format 1920 of the window image. In FIG. 19C, 1921 is a message identifier indicating that it is a window image, and 1922 is a work to be monitored. An operator name indicating the user who is performing the operation, 1923 is a terminal name indicating the monitored computer on which the work to be monitored is being performed, 1924 is a trigger type, 1925 is a trigger source,
1926 is a trigger target, 1927 is an image identifier,
Reference numeral 1928 is image data.

Here, the image identifier 1927 is the trigger target 1926 in the monitor side computer 100-C.
This is used to identify a plurality of windows in which the monitor target indicated by is displayed. That is, in the monitor-side computer 100-C, the image data 1928 will be displayed in the window corresponding to the image identifier 1927.

As described above, according to the electronic witness system of the embodiment of the present invention, the monitored computer 10
The users A and B who are working using 0-A and 100-B will work while paying attention to the possibility that they are being monitored by the user C. And a great deterrent will come into play.

The monitored computer 100-A, 10
The users A and B who are working using 0-B must obtain the approval of the user C when they try to access a specific AP or file or when they finish the work. , A great deterrent against committing fraudulent acts.

Furthermore, the monitored computer 100-A, 1
Users A and B who are working using 00-B
With the approval of the user C, the fact that the work content of the user is correct and the fact that the user is not committing an illegal act can be used as evidence when a problem occurs later.

[0155]

As described above, according to the present invention,
In a computer system in which at least two computers are connected by a communication network, by providing a technology that allows a user of a specific computer to remotely monitor the work content of a user of another computer, It is possible to prevent fraud and approve the work content of the user.

[Brief description of drawings]

FIG. 1 is an overall configuration diagram of an electronic witness system according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram showing a method of copying a window image.

FIG. 3 is an explanatory diagram showing a method of copying a display image.

FIG. 4 is an explanatory diagram showing a method of copying a display image.

FIG. 5 is an explanatory diagram showing a method of copying print result data.

FIG. 6 is an explanatory diagram showing an operation procedure of a user of the monitor-side computer and display contents of a display of the monitor-side computer.

FIG. 7 is an explanatory diagram showing an operation procedure of a user of the monitor-side computer and display contents of a display of the monitor-side computer.

FIG. 8 is an explanatory diagram showing an operation procedure of a user of the monitor-side computer and display contents of a display of the monitor-side computer.

FIG. 9 is an explanatory diagram showing an operation example when approving the work content of the user of the monitored computer.

FIG. 10 is an explanatory diagram showing an operation example when approving the work content of the user of the monitored computer.

FIG. 11 is an explanatory diagram showing an operation example when approving the work content of the user of the monitored computer.

FIG. 12 is an explanatory diagram showing an operation example when approving the work content of the user of the monitored computer.

FIG. 13 is an explanatory diagram showing a configuration example of a trigger table.

FIG. 14 is a processing flowchart of a monitor-side control program.

FIG. 15 is a processing flowchart of a monitored-side control program.

FIG. 16 is a processing flowchart of monitor-side screen monitor processing.

FIG. 17 is a processing flowchart of monitored screen monitoring processing.

FIG. 18 is an explanatory diagram showing an example of a data format when saving work content.

FIG. 19 is an explanatory diagram showing an example of a message format of a monitor start request, a monitor start instruction, and a window image transmitted / received between the monitored-side control program and the monitor-side control program.

[Explanation of Codes] 100-A to 100-C ... Computer, 102-A to 102-C
Display, 104-A to 104-C ... Mouse, 10
6-A to 106-C ... keyboard, 108-A to 108-C
... telephone, 110 ... communication network, 220 ... monitored side control program, 230 ... monitor side control program.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Seiji Funabashi 1099, Ozenji, Aso-ku, Kawasaki-shi, Kanagawa, Ltd. System Development Laboratory, Hitachi, Ltd. (72) Sadao Oki, 5030, Totsuka-cho, Totsuka-ku, Yokohama, Kanagawa Ceremony Company Hitachi Software Development Division

Claims (10)

[Claims] 1. A computer system in which at least two computers each including an input device, a display device, a storage device, and a processing device are connected by a communication network. The processing device of the monitor-side computer) sends the image information displayed on the display device of the monitored-side computer to a computer other than the monitor-side computer (hereinafter referred to as the monitored-side computer). Image requesting means for requesting transmission of all or a part, and image display means for displaying image information transmitted from the monitored computer in response to the request of the image requesting means on its own display device. The processing device of the monitored computer has a request from the monitoring computer to the monitoring computer when transmission of image information is requested from the monitoring computer. An electronic witness system capable of having an image transmission means for transmitting stored image information. 2. The electronic witness system according to claim 1, wherein the input device of the monitor-side computer specifies that the image display means approves the image information displayed on its own display device. Receiving, when the processing device of the monitor-side computer accepts the designation that its input device approves,
The monitor-side computer, which has transmitted the image information approved by the designation, has an approval notifying unit for notifying the fact, and the processor of the monitored-side computer indicates that the monitor-side computer has approved the processing. The electronic witness system having an approval display means for displaying the fact on its own display device when the notification is given. 3. The electronic witness system according to claim 1, wherein the input device of the monitor side computer accepts designation of an arbitrary monitored computer, and the image requesting means is its own input device. An electronic witness system that requests the computer to be monitored that the computer has received to transmit image information. 4. The electronic witness system according to claim 1, 2, or 3, wherein the input device of the monitor-side computer accepts designation of an operation of the monitored-side computer, and the image requesting means. , Requesting that the image information displayed on the display device of the monitored computer with the execution of the work of the monitored computer received by its own input device be transmitted to the monitored computer. An electronic witness system that 5. The electronic witness system according to claim 1, 2, 3 or 4, wherein the image requesting means stores the specific program or file stored in its own storage device in the monitored computer. An electronic witness system, which requests transmission of image information to the monitored computer when a user tries to access. 6. The electronic witness system according to claim 1, 2, 3, 4 or 5, wherein the processing device of the monitored computer is a specific program or file stored in its own storage device. In the case of accessing to, the monitor side computer has access notifying means for notifying that, and the image requesting means, when the monitor side computer notifies that the access is attempted, An electronic witness system characterized by requesting transmission of image information to the monitored computer. 7. The electronic witness system according to claim 6, wherein the input device of the monitored computer receives an input of a user identifier for identifying a user, and the processing device of the monitored computer is , Has an identifier transmitting means for transmitting the user identifier accepted by the input device of itself to the monitor side computer when accessing a specific program or file stored in its own storage device, An electronic witness system, wherein the processing device of the side computer has an identifier display means for displaying the user identifier transmitted from the monitored computer on its own display device. 8. The electronic witness system according to claim 1, 2, 3, 4, 5 or 6, wherein the processing unit of the monitor side computer displays the image display means on its own display unit. An electronic witness system comprising image storage means for storing image information stored in the storage device as a file. 9. The electronic witness system according to claim 8, wherein the processing unit of the monitor-side computer transmits the image information when the image storage unit stores the image information as a file. The identifier requesting means for requesting the side computer to transmit the user identifier for identifying the user, and the user identifier transmitted from the monitored computer in response to the request of the identifier requesting means, Identifier input means for displaying on a display device, the input device of the monitored computer receives an input of the user identifier, and the processing device of the monitored computer transmits the user identifier from the monitored computer. When a request is made, an identifier transmitting means for transmitting the user identifier accepted by the input device of the computer to the monitor side computer is provided. Electronic attendance system. 10. Claims 1, 2, 3, 4, 5, 6 or 8
The electronic witness system described above, wherein the processing unit of the monitor-side computer identifies the user to the monitored computer as the requesting party when the image requesting unit requests transmission of image information. Identifier requesting means for requesting transmission of the user identifier, and identifier displaying means for displaying the user identifier transmitted from the monitored computer in response to the request of the identifier requesting means on its own display device. Then, the input device of the monitored computer receives the input of the user identifier, and the processing device of the monitored computer, when the transmission of the user identifier is requested from the monitored computer, An electronic witness system characterized in that it has an identifier transmitting means for transmitting the user identifier received by its own input device.