JP2000222059A - Information processor and pos terminal device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processor and a POS terminal device capable of preventing an illegal operation and surely protecting data by performing continuous authentication of a user. SOLUTION: When the distance between a user and a main body is equal to or less than prescribed threshold, a reading part 17 detects a radio tag 21 by such a manner that the normal user carries the tag 21, and when the distance between the user and the main body is larger than the threshold, the tag 21 is not detected. A controlling part 16 performs control to allow or prohibit an input from an inputting part 12 on the basis of detection results of the tag 21. Thus, it is possible to perform continuous user authentication, to surely protect data and to simplify an operation.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an information processing apparatus and a POS terminal capable of inputting data or a processing command by a user.

[0002]

2. Description of the Related Art An information processing apparatus such as a personal computer includes a user ID (identifi) comprising a plurality of character strings.
cation) and password can be registered in advance. When the user ID and the password are registered, the operation of the personal computer is permitted only when the user ID and the password are correctly input. In particular, when using a personal computer connected to a communication network, the user ID and password must be registered in the host computer or the like.

As described above, the user of the personal computer is restricted by the user ID and the password.
Prevent unauthorized operations. Particularly, in a communication network in which a plurality of computers are connected and used by a plurality of users, it is important to prevent unauthorized operations. Similarly, a POS (poin) that manages product sales data
t of sale), it is equally important to prevent unauthorized operations.

In a POS terminal device used in a POS system, an ID card is created by writing complicated data on a magnetic card or an IC (integrated circuit) card, and the data is read by a dedicated reading device. There is a model that performs a check. In addition, a model has appeared in which such an ID card is combined with a password input from a keyboard or the like to perform a more strict user check.

[0005] In addition, in the security management mechanism of the medical image database system disclosed in Japanese Patent Application Laid-Open No. 5-197688, the use of the workstation is suspended or resumed by a button operation by the user.
Alternatively, the use of the workstation is suspended or resumed by detecting the user with an infrared sensor. In this way, the user of the workstation is restricted and the medical image data is protected.

[0006]

However, in the above-described information processing apparatus and POS terminal apparatus, once the authorized user is authenticated, it is recognized as being operated by the same user thereafter, and the power is turned off. As long as the connection with the communication network is not interrupted, the operation can be continued and the communication network can be accessed. Therefore, if the authorized user leaves the information processing device or the POS terminal without performing the operation end process or the interruption process, a third party can relatively easily perform unauthorized operation of the device. Will be.

[0007] In particular, in a POS system, the user of the POS terminal usually asks the user of the POS terminal that "when the user leaves the POS terminal after the authentication processing, the operation end processing or the interruption processing must be performed. To protect the sales data by enforcing the system operation rules of `` Leave the customer away from the side '', but it is difficult to completely eliminate operation errors or forgotten operations by users unfamiliar with system operation However, there is a problem that data protection is insufficient.

In Japanese Patent Laid-Open No. 5-197688, the use of the workstation is interrupted or resumed by the user's operation of the button. Therefore, in the event of an emergency, the authorized user leaves the workstation without operating the button. In addition, a third party who is not registered as an authorized user can operate the workstation.

When a user is detected by the infrared sensor, the difference between the users cannot be determined. Therefore, when the authorized user leaves the workstation, a third person who is not registered as the authorized user approaches the workstation. Only that, it becomes possible to use the workstation.

An object of the present invention is to provide an information processing device and a POS terminal device that can prevent unauthorized operation and protect data reliably by performing continuous authentication of a user.

[0011]

SUMMARY OF THE INVENTION The present invention relates to an information processing apparatus comprising a portable wireless tag and a main body, wherein the main body includes input means for allowing a user to input data or a processing command. Detecting means for detecting the wireless tag when the distance to the wireless tag is equal to or less than a predetermined threshold, and control means for performing control to permit or prohibit input by the input means based on the detection result, Information processing device.

According to the present invention, when an authorized user carries a wireless tag, the wireless tag is detected if the distance between the user and the main body is equal to or less than a predetermined threshold, and if the distance is larger than the threshold, the wireless tag is detected. Not done. Input is controlled based on the detection result of such a wireless tag. As a result, continuous user authentication is possible, illegal input operations can be continuously prevented, and data can be reliably protected. Further, since the input control can be performed without the user performing a special operation, the operation can be greatly simplified. Further, particularly when the information processing apparatus is connected to a communication network and used, important data shared by a plurality of users or computers can be protected.

[0013] The control means of the present invention is characterized in that when the wireless tag is no longer detected, the control means performs control to prohibit input by the input means.

According to the present invention, a circular area centered on the main body and having a threshold as a radius is defined. Input is prohibited when the authorized user carrying the wireless tag moves from the inside of the area to the outside of the area. Therefore, when the authorized user is separated from the main body, input operation by a non-authorized user is prevented. Can be. Therefore, unauthorized operation can be prevented, and data can be reliably protected.

Further, the control means of the present invention is characterized in that when a wireless tag is detected, control is performed to permit input by the input means.

According to the present invention, the input is permitted when the authorized user moves from the outside of the area to the inside of the area. Therefore, even if the input is prohibited, the authorized user returns to the main body. Only by doing so, the authorized user can resume the input operation again, and the operation can be further simplified.

Further, the wireless tag of the present invention includes key storage means for storing key data, and key communication means for transmitting key data, and the main body includes a lock for storing lock data. Storage means, lock communication means for receiving lock data, and collation means for collating the key data with the lock data, wherein the control means includes an input by the input means based on the collation result in addition to the detection result. Control for permitting or prohibiting is performed.

According to the present invention, specific key data is stored in advance in the key storage means of the wireless tag, and lock data which is the same data as the key data is stored in the lock storage means of one main body. Store it. In addition to the detection result of the wireless tag, based on the result of matching key data and lock data,
Since the input control is performed, the user can be more reliably authenticated, and the data can be strictly protected.

The control means of the present invention performs control for permitting input from the input means when a detection result of detecting the wireless tag and a collation result in which the key data and the lock data match are obtained, When a detection result that does not detect a wireless tag or a collation result in which key data and lock data do not match is obtained, control is performed to prohibit input by the input means.

According to the present invention, input is permitted only when the user is in the above-mentioned area and the key data and the lock data match. If the user is outside the area,
If the key data and the lock data do not match, or both, input is prohibited. Therefore, user authentication can be performed more reliably, and data can be strictly protected.

Further, the main body of the present invention further comprises a volatile storage means and a nonvolatile storage means, wherein the control means stores the contents of the volatile storage means in a nonvolatile storage when the input by the input means is prohibited. It is stored in the means.

According to the present invention, data created or used before input is prohibited is not lost, and data can be protected more reliably. Further, since the data is protected only by the user leaving the main body, when the user wants to interrupt the work, a special operation for interrupting the work can be omitted, and the operability can be improved.

In particular, when the user is no longer detected in the area, input is prohibited, data is stored in the non-volatile storage means, and information on the old user who has been operating up to that point is stored. By waiting until the authentication of a new user who operates later, a new work environment can be promptly provided to the new user, and the work status up to that point or the history thereof is not a regular user. The risk of being exposed to the eyes. Further, when a plurality of regular users are registered for one information processing apparatus, a new regular user performs a new work, so that a special content is added to the work content of the old user who has been operating immediately before. There is no need to pay attention, and the operability is further improved.

Further, the main body of the present invention is characterized by further comprising display means for displaying permission or prohibition of input by the input means.

According to the present invention, since the permission or prohibition of the input is displayed, the user can start the input operation after confirming the permission or prohibition of the input, thereby eliminating unnecessary operation. Operability can be improved.

In particular, only when it is confirmed by the detection of the wireless tag that the user is at the side of the main body, the information on the information processing apparatus is displayed on the screen by displaying the processing status such as the interruption of the work. Can be prevented from being seen by a third party, and information leakage can be prevented.

According to the present invention, there is provided a PO which comprises a portable wireless tag and a main body and manages sales data of a product.
A POS terminal device for providing sales data of each product in the S system, wherein the main body includes an input unit that allows a user to input sales data or a processing command, and a distance to the wireless tag is equal to or less than a predetermined threshold. A POS terminal device comprising: a detection unit that detects a wireless tag when the condition is a; and a control unit that performs control to permit or prohibit input by the input unit based on the detection result.

According to the present invention, the user is authenticated based on the detection result of the wireless tag and the input is controlled in the same manner as described above, so that the user can be continuously authenticated and the unauthorized operation can be continuously performed. Can be prevented. Therefore, the sales data of the product can be securely protected, and the statistical processing of the POS system can be executed accurately. Furthermore, P
When an EOS (Online Ordering System) is linked to the OS system, it is possible to quickly order products without excess or shortage. Further, as described above, since the input control can be performed without the user performing a special operation, the operation can be greatly simplified.

[0029]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The structure and operation of a first embodiment of the present invention will be sequentially described in detail below with reference to FIGS.

FIG. 1 shows a PO according to a first embodiment of the present invention.
FIG. 2 is a block diagram illustrating an electrical configuration of an S terminal device 10.
The POS terminal device 10 includes a wireless tag 21 and a main body 11. The wireless tag 21 includes an information storage unit 22 for storing unique key data and an antenna 23, and is carried by an authorized user. The main body 11 includes an input unit 12, a display unit 13, a storage unit 14, a communication processing unit 15, a control unit 16, a reading unit 17, and an antenna 18.

The input unit 12 is an input device for a user to input sales data of a product or a processing command.
Specifically, one or more of a keyboard, a barcode reader, a magnetic card reader, and the like are combined.

The display unit 13 is a display device for displaying sales data input from the input unit 12 or a processing result according to a processing command, and is specifically a CRT (CRT), LCD (liquid crystal display), or the like. . In addition,
Instead of or together with the display unit 13, R
A printing device such as a / J (receipt / journal) printer or a serial printer may be provided to output the sales data or the processing result.

The storage unit 14 includes a main storage unit 14a and an auxiliary storage unit 14b for storing input sales data, processed data, data to be output, and the like.
In particular, the auxiliary storage unit 14b stores unique lock data corresponding to the key data. Specifically, the main storage unit 14a includes a dynamic random access memory (DRAM).
The auxiliary storage unit 14b is a volatile storage device such as
It is a nonvolatile storage device such as a hard disk drive.

The communication processing unit 15 is an interface connected to the communication network of the POS terminal device 10,
A process for transmitting data to the communication network and a process for receiving data from the communication network are performed. Specifically, the communication processing unit 15 includes an Ethernet card,
Or an ISDN card. The user can access various information in the communication network via the communication processing unit 15. When the POS terminal device 10 is used alone without being connected to a communication network,
The communication processing unit 15 may not be provided.

The reading unit 17 is a reading device for reading information from the wireless tag 21 carried by the user via the antenna 18.

The control section 16 is mainly composed of a CPU (Central Processing Unit), controls the above-described sections, and executes various software programs. In particular,
Based on the reading result of the reading unit 17, a control for permitting or prohibiting the input from the input unit 12 is performed. When the input is permitted, a control for storing the data in the storage unit 14 and a control according to the input processing command are performed. Performs processing such as statistical calculations.

The wireless tag 21 is, for example, an RFID.
(Radio Frequency IDentification), which is composed of a non-contact type IC card or the like, and transmits the stored key data to the reading unit 17 in response to a reading request from the reading unit 17.
The reading unit 17 can receive data from the wireless tag 21 within a distance of, for example, about several tens of centimeters to about one meter.

The wireless tag 21 may further include a data writing unit for writing key data into the information storage unit 22, or the key data may be stored in the information storage unit 22 using an external writing device. May be written.

FIG. 2 is a block diagram showing an example of the network 29 including the POS terminal device 10. The network 29 has the same configuration as the main body 11 of FIG.
a to 11c are connected by wire. In the network 29, sales data provided by each of the main bodies 11a to 11c is totaled, and various processes such as a daily report operation are executed. Or, link the network 29 with EOS,
It is possible to quickly place an order with respect to a store in which the main bodies 11a to 11c are installed.

As shown in FIG. 2, the main body 11a and the wireless tag 21 constitute the POS terminal device 10. When the distance between the wireless tag 21 and the main body 11a is the distance L1, the solid line indicates that the wireless tag 21 and the main body 11a can communicate with each other. On the other hand, when the wireless tag 21 and the main body 11a are separated by a distance L2 larger than the distance L1, communication failure is indicated by a broken line.

FIG. 3 is a diagram showing an example of data 30 written in the information storage unit 22 of the wireless tag 21. The data 30 includes a header section 31 required for communication processing, a key data section 32 for identifying each user, and a checksum section 33 for confirming that the key data section 32 is normal. The key data part 32 of the data 30 is
The lock data is collated with the lock data stored in the auxiliary storage unit 14b of the main body 11.

FIG. 4 is a flowchart showing a processing flow of input control by the POS terminal device 10 of FIG. PO
The S terminal device 10 or the host computer of the network 29 including the same has a user ID of a specific user in advance.
And password are registered. Below, user ID
The user whose password and password are registered is an authorized user.

First, in step a1, the user inputs a user ID and a password from the input unit 12 for authentication. The authentication is a confirmation operation for indicating to the POS terminal device 10 that the user is an authorized user. Next, in step a2, if the correct combination of the user ID and the password is input and it can be confirmed that the user is an authorized user, the key data stored in the information storage unit 22 of the wireless tag 21 is read and stored in the auxiliary storage unit 14b. Store.

Next, in step a3, a reading request for wireless tag information is issued to the reading unit 17. Then step a
At 4, the response from the reading unit 17 is confirmed. If the information can be read normally, in the next step a5, the read key data is compared with the lock data stored in the auxiliary storage unit 14b.

Next, in step a6, it is determined whether or not the key data and the lock data match.
It is determined that the key data has been obtained from the wireless tag 21 carried by the authorized user, and that the authorized user is on the main body 11 side.

Next, in step a7, the process is interrupted with input being permitted until a predetermined monitoring time has elapsed. After the monitoring time has elapsed, step a3 is performed again.
, A reading request for information is made to the reading unit 17. As long as they match, the processing of step a3 to step a7 is repeated.

In step a7, the user is monitored for each monitoring time, so that an unnecessary processing load on the system can be reduced.

In step a4, if the result of the information reading request to the reading unit 17 is unsuccessful, step a8
Then, it is determined whether or not the number of consecutive failures is less than a predetermined number. If less than, continue with step a
At 9, an information reading request is issued. If reading fails consecutively for a predetermined number of times or more, it is determined that the user has left the POS terminal device 10 and further input is prohibited. At this time, the authentication of the current user is released, and the process returns to the user authentication process in step a1.

If the key data does not match the lock data in step a6, the authenticated user
It is determined that the user is away from the terminal device 10 and step a
In step 9, after the subsequent input is prohibited, the authentication of the current user is released, and the process returns to step a1 to perform another user authentication process.

FIG. 5 is a flowchart showing a processing flow of input control according to the second embodiment of the present invention.

First, as in the first embodiment, in step b1, the user inputs a user ID and a password in order to be authenticated, and based on the user ID and password, performs authentication using the user ID and the password. If the authentication has been performed correctly, in the next step b2, the wireless tag information is read and stored so that it can be referred to in the subsequent processing. Next, in step b3, the presence or absence of an input from the user is monitored. In the next step b4, when there is an input from the user, a reading request for information is made to the reading unit 17. In the next step b5, when the reading of the information is normally completed, in step b6, the key data and the lock data are collated.

Next, at step b7, it is determined whether or not the key data and the lock data match. If they match,
In the next step b8, it is determined that the currently operated user is the authorized user who has performed the authentication processing, and the input of the sales data or the processing command is permitted.

If the reading of the wireless tag information fails in step b5, or if the key data and the lock data do not match in step b7, the current operation is performed by the authorized user who has performed the authentication processing. In step b9, an error message indicating that the wireless tag information of the authenticated terminal user does not match is displayed. At this time, the input of the sales data or the processing command is prohibited, and the process returns to step b3 to wait for a new input.

Hereinafter, the third embodiment of the present invention will be described with reference to FIGS.
The configuration and operation of the embodiment will be sequentially described in detail.

FIG. 6 is a diagram showing storage areas of the main storage unit 14a and the auxiliary storage unit 14b. When the authentication process of the authorized user is completed, the program providing the service to the user secures a storage area dedicated to the authenticated user in a part of the main storage unit 14a. The secured storage area includes a user area 41 for storing various data used for executing the program, and an operation log area 42 for keeping a history of operations performed by a regular user.
Consists of These two areas may be secured as the same area collectively, or may be separately secured separately.

The auxiliary storage section 14b is composed of save areas of addresses A0, A1, A2,..., For example, the main storage section 14a is stored in the address A0.
Are copied. Further, the operation log information 44 of the main storage unit 14a is all copied to the same address A0. In order to accommodate a plurality of users, the save area has a size that is an integral multiple of the total size of the user information 43 and the operation log information 44.

FIG. 7 is a diagram showing an example of a management table for managing users. The management table is stored in the auxiliary storage unit 14b, and stores a user ID, a password, key data as wireless tag information, and an address of a save area for each reference number corresponding to each user.
By creating such a management table,
The input control of the input unit 12 is facilitated.

FIG. 8 is a flowchart showing the processing flow of input control according to the third embodiment of the present invention. First, in step c1 of the flowchart on the left side of FIG. 8, the user is authenticated by inputting the correct combination of the user ID and the password. At this time, the processing process shown in the flowchart on the right is newly activated. After the user is authenticated, in the next step c2, an operation for performing a normal business is performed by the authorized user. Here, the first
As in the embodiment, monitoring of the user is also performed. If there is no particular problem with the operation of the input unit 12, in step c3, an end process is performed at the end of the job, the authentication of the current user is released, and the process returns to step c1 to newly enter the user. Wait until the authentication process starts.

In step c2, if for some reason during the operation, for example, the authorized user has left the main body 11, the input by the authenticated user at that time is prohibited, as shown in the flowchart on the right side of FIG. A suspend processing request is issued to the suspended process. In the suspending process, first, the issuance of the suspend request from the original process is monitored, and when the suspend request is received in step c4, the user in FIG. All the information in the area 41 is copied to a reserved area reserved in advance.

Next, in step c6, management information is created in which the user ID, password, and wireless tag information relating to the current user are associated with the data storage address of the save area. Next, in step c7, the created management information is additionally stored in the management table of FIG. Finally, in step c8, all the user areas 41 used by the current user are released, the user authentication is released, and the process returns to step c1 to wait for an authentication processing request from a new user.

Hereinafter, the configuration and operation of the fourth embodiment of the present invention will be sequentially described in detail with reference to FIG.

FIG. 9 is a flowchart showing a processing flow of input control according to a fourth embodiment of the present invention. First, in step d1, a reading request for information is periodically sent to the reading unit 17 regardless of whether or not the user has been authenticated.

Next, in step d2, if the information reading fails, no special processing is performed, and the information reading request is repeated again. If the reading of the information has been completed normally, in the next step d3, the authentication of the user, that is, the user ID and the password are collated to determine whether or not the user has been authenticated. If the authentication is successful, the key data and the lock data are collated in the next step d4. Next, in step d5, it is determined whether or not the matching result matches. If they match, in the next step d6, after confirming the presence or absence of the input by the authorized user who is currently operating, the input of the sales data or the processing command is permitted.

On the other hand, if the key data and the lock data do not match in step d5,
In step d7, if the authenticated user has not performed the operation, in step d7, the management information is acquired by referring to the management table similar to the management table created in the third embodiment.

Next, in step d8, it is checked whether or not there is any information that matches the read data among the acquired information. If there is the matching data, it means that the management information related to the user who is presently on the main body 11 side is stored, and in step d9, the fact that the interruption process is being executed is output to the display unit 13. This notifies the user and also displays the information in the corresponding management table. If there is no matching wireless tag information in the management table, no special operation is performed.

However, if it is output to the display section 13 that the interruption process is already being executed in step d10, the previous old information remains, so that it is displayed in the next step d11. The old information that is missing.

When the above processing is completed, the flow returns to step d1 to issue an information reading request to the reading unit 17 again.

[0068]

As described above, according to the present invention, it is possible to reliably protect data and simplify operation by carrying a wireless tag with an authorized user.

Further, according to the present invention, when a legitimate user carrying a wireless tag moves from inside a predetermined area to outside the area, the user is prohibited from inputting data, thereby preventing unauthorized operation and enabling data to be stored. It can be protected reliably.

According to the present invention, the operation can be simplified by permitting an input when a legitimate user moves from outside the area to the inside of the area.

Further, according to the present invention, data can be strictly protected by performing input control based on the collation result of key data and lock data in addition to the detection result of the wireless tag.

Further, according to the present invention, the data can be more strictly protected by permitting the input only when the user is in the above-mentioned area and the key data and the lock data match. it can.

Further, according to the present invention, when the input is prohibited, the data of the volatile storage means is stored in the nonvolatile storage means, so that the data protection and the operability can be surely improved.

According to the present invention, operability can be improved by displaying permission or prohibition of input.

According to the present invention, the POS terminal can authenticate the user based on the detection result of the wireless tag and control the input in the same manner as described above, so that the sales data of the product can be reliably protected. Thus, the statistical processing of the POS system can be executed accurately.

[Brief description of the drawings]

FIG. 1 is a POS terminal device 1 according to a first embodiment of the present invention.
FIG. 3 is a block diagram illustrating an electrical configuration of a zero.

FIG. 2 is a block diagram showing an example of a network 29 including the POS terminal device 10 of FIG.

FIG. 3 is a diagram showing an example of data 30 written in an information storage unit 22 of a wireless tag 21.

FIG. 4 is a flowchart showing a processing flow of input control by the POS terminal device 10 of FIG.

FIG. 5 is a flowchart illustrating a processing flow of input control according to a second embodiment of the present invention.

FIG. 6 is a diagram illustrating storage areas of a main storage unit 14a and an auxiliary storage unit 14b.

FIG. 7 is a diagram showing an example of a management table for managing users.

FIG. 8 is a flowchart illustrating a processing flow of input control according to a third embodiment of the present invention.

FIG. 9 is a flowchart illustrating a processing flow of input control according to a fourth embodiment of the present invention.

[Explanation of symbols]

 Reference Signs List 10 POS terminal device 11, 11a, 11b, 11c Main body 12 Input unit 13 Display unit 14 Storage unit 14a Main storage unit 14b Auxiliary storage unit 15 Communication processing unit 16 Control unit 17 Reading unit 18 Antenna 21 Wireless tag 22 Information storage unit 23 Antenna 29 Communication Network

Claims (8)

[Claims] 1. An information processing apparatus comprising a portable wireless tag and a main body, wherein the main body has an input unit capable of inputting data or a processing command by a user, and a predetermined distance to the wireless tag. An information processing apparatus comprising: a detection unit that detects a wireless tag when the threshold value is equal to or less than a threshold value; and a control unit that performs control to permit or prohibit input by the input unit based on a detection result. 2. The information processing apparatus according to claim 1, wherein the control unit performs control to prohibit input by the input unit when the wireless tag is no longer detected. 3. The information processing apparatus according to claim 2, wherein said control means performs control for permitting input by the input means when a wireless tag is detected. 4. The wireless tag comprises: key storage means for storing key data; and key communication means for transmitting key data; and the main body includes lock storage means for storing lock data. Further comprising: lock communication means for receiving lock data; and collation means for collating key data with lock data, wherein the control means permits input by the input means based on the collation result in addition to the detection result. 2. The information processing apparatus according to claim 1, wherein prohibition control is performed. 5. The wireless communication apparatus according to claim 1, wherein the control unit performs control to permit input of the input unit when a detection result of detecting the wireless tag and a collation result in which the key data and the lock data match are obtained. 5. The information processing apparatus according to claim 4, wherein, when a detection result that does not detect the key data or a collation result that the key data does not match the lock data is obtained, control is performed to prohibit input by the input unit. 6. The main body further includes a volatile storage unit and a non-volatile storage unit, and the control unit stores the content of the volatile storage unit in the non-volatile storage unit when the input by the input unit is prohibited. The information processing apparatus according to claim 1, wherein the information is stored. 7. The information processing apparatus according to claim 1, wherein the main body further includes a display unit for displaying permission or prohibition of input by the input unit. 8. A POS terminal device comprising a portable wireless tag and a main body, for providing sales data of each product in a POS system for managing sales data of the products, wherein the main body is sold by a user. An input unit capable of inputting data or a processing command; a detection unit for detecting a wireless tag when a distance to the wireless tag is equal to or less than a predetermined threshold; A POS terminal device comprising: control means for performing control.