JP2005173861A - Processing method of internal report - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a processing method of an internal report whose report information can be read only by a receiver whom an organization specifies, and whose receiver's answer to the report information can be read only by the reporter who inputs the report information, while concealing personal information of the reporter. <P>SOLUTION: By this method, the reporter is made to input organization identification information that specifies the organization whom a reporter participates and report information. The report information is read only by the receiver, because it requires the input of one time PW notified to the receiver when accepting the report and receiver identification information. The answer to the report information is read only by the reporter who inputs the report information, because it requires the input of report ID notified to the reporter when accepting the report information and the organization identification information. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a whistleblower processing method for accepting from a whistleblower the status of fraud currently being carried out within a group such as a company and notifying a recipient designated in advance by the group. The present invention relates to a method for processing an internal report in which notification information is notified to a recipient via the Internet while the confidentiality of the information is maintained, and a reply of the recipient is notified to the reporter.

  In the process of social activities by corporations and other organizations, misappropriation of corporate secrets such as embezzlement, clothing, insider trading, fraudulent accounting, customer safety, acts that threaten health, internal violence, etc. Other than those who are involved in business, there is a risk of various frauds that are difficult to leak. Leaving these fraudulent acts without noticing them will not only cause significant damage to the organization itself, but will also cause serious damage and danger to its customers, which will further damage the social image of the organization and have a serious impact on its survival. I could receive it.

  Therefore, in the past, a person who knows the status of the fraud can receive a written report describing the status of the fraud in a posting box installed in the organization and notify the recipient designated by the organization in advance, which is considered to be treated fairly. An internal whistleblower system has been established to identify fraudulent acts and promptly take countermeasures within the organization.

  However, due to the nature of this whistleblowing system, the confidentiality of the whistleblower and the content of the whistleblower must be completely guaranteed, but the whistleblower remains and the whistleblower identifies the whistleblower from the handwriting and the person at the time of posting. In the previous system that could be used, effective operation could not be expected.

  On the other hand, if the whistleblower uses a method of internal whistle-blowing in which the whistleblower informs specific recipients using the Internet, there is no handwriting of the whistleblower information, and there is no eye for the whistleblower. Can expect more reports.

  For example, the customer's terminal device connected to the Internet is replaced with an identifier consisting of an appropriate code, and the customer's identifier is sent together with the customer's identifier, and the customer's personal information and the requirement specification are kept secret. Since there is known an intermediary method of experts who can receive answers from experts (Patent Document 1), the report information for reporting the customer to the reporter and the required specifications for the unauthorized status, and the expert, respectively. If the present invention is applied as a recipient, the report information can be reported to the recipient using the Internet while the reporter and the report information are kept secret.

JP 2002-7762 (page 3)

  However, in this internal report processing method using the Internet, information cannot be exchanged between the recipient and the reporter in a state where the reporter is completely concealed. For example, in the above-mentioned expert arbitration method, since the expert or expert arbitrator needs to communicate the answer to the required specification (report information) to the expert presented by the customer, e-mail, fax, The customer's address by telephone or the like is input to the customer, and the customer (reporter) cannot be completely hidden from the expert (recipient).

  In particular, when the whistleblower informs the recipient designated by the organization of the report information for reporting the fraudulent situation, the organization that accepts the report information and the whistleblower are involved in some form. With the internal notification processing method that informs the recipient of the destination and the IP address, it is impossible to obtain notification information that is truly required by the organization. On the other hand, the whistleblower wishes to know if the whistleblower was accepted by the recipient and how it will be dealt with, and the recipient also needs to know the details of the whistleblower from the whistleblower. In some cases, it was necessary to exchange information between the reporter and the recipient after the report. Nevertheless, there is a conflicting problem that the personal information of the whistleblower must be completely kept secret, and it has been practically difficult to satisfy both of these problems.

  As one countermeasure, if the answer from the recipient is posted on a website, for example, so that anyone can view it freely, the whistleblower should confirm the answer while keeping the personal information confidential. However, the report information was inferred from the contents of the publicly available recipient's reply, and the reply could not be communicated only to the reporter who kept the report information and the answer confidential and concealed the personal information.

  Further, in the above-mentioned expert arbitration method, the customer's required specifications (report information) are transmitted to the expert by e-mail or the like, but the contents may leak to the outside due to unauthorized access, and the required specifications. (Report Information) cannot be completely hidden.

  Furthermore, since the reporter will send the report information to the Internet website established by the organization in which the reporter is involved in some form, there is anxiety in the handling of the report information, and the report information necessary for the group can be obtained. It was not.

  The present invention has been made in consideration of such conventional problems, and it is possible to process an internal report that can be read only by a recipient designated by the organization while keeping the personal information of the reporter secret. It aims to provide a method.

  It is also intended to provide a method for handling internal reports that allows only the reporter who entered the report information to read the recipient's response to the report information specified by the organization while keeping the whistleblower's personal information confidential. To do.

  It is another object of the present invention to provide a whistleblower processing method that allows the whistleblower to report the report information without worrying about the process of receiving the report information.

  In order to achieve the above-mentioned object, the method for processing whistle-blowing according to claim 1 accepts report information for reporting an illegal situation being conducted in an organization from any reporter involved in the organization, This is a method for handling internal notifications to notify recipients specified in advance. Open a website on the Internet, and input at least the organization identification information and notification information that identifies the organization from the terminal device of the reporter connected to the Internet. Prompting (S1, S2), generating and assigning a report ID to the input report information and displaying it on the terminal device of the reporter (S4), generating a one-time password, and one-time password , Storing the group identification information and the report ID in the database of the website in association with the report information (S6), and specifying from the group identification information A recipient notifying the one-time password to the recipient designated in advance by the body (S7) and notifying the recipient from the terminal device of the recipient connected to the Internet; A step of reading out the notification information and the notification ID stored in association with the one-time password on the condition that the identification information and the one-time password notified to the recipient are inputted, and displaying them on the terminal device of the recipient (S9) And a step (S11) of storing the response of the recipient to the notification information in the database of the website in association with the notification ID, and associating with the notification information on condition that the response of the recipient to the notification information is stored. Erasing the stored one-time password (S12), and at least the report I from the reporter's terminal And the group identification information stored in association with the notification ID is input, and the recipient's reply to the notification information stored in association with the notification ID is read and displayed on the terminal device of the reporter (S14). ).

  Since the reporter inputs the group identification information and the report information, irrelevant input from a person who does not have the group identification information is excluded. In addition, since it is possible to determine which group the report information is based on from the group identification information, it is possible to notify the recipient designated by the group that an internal report has been made.

  When the report information is input to the Web site from the reporter's terminal device, the report information is stored in association with the one-time password, the group identification information, and the report ID, and the recipient identifies the recipient identification information that identifies the recipient. And the report information on the condition that the one-time password notified to the recipient is entered.

  When the reporter reads the response from the recipient to the report information, the reporter inputs the report ID that only the reporter and the recipient can know when inputting the group identification information and the report information. Answers cannot be read, and only the whistleblower can confirm the answer from the recipient without disclosing personal information. Therefore, when the recipient requests additional information from the report information or wants to know the progress of the report, the detailed information can be obtained without specifying the reporter by including a request to that effect in the reply. Is obtained.

  The internal notification processing method according to claim 2 is that the group identification information is a user ID given to each group by a system administrator who opens a website, and inputs a user ID and a user password given to each group. The condition is that the connection between the reporter's terminal and the Web site via the Internet is validated.

  Since a system administrator who assigns a user ID for each organization opens a Web site and receives report information, the organization in which the reporter is involved cannot process the report information for the convenience of the organization.

  The internal notification processing method according to claim 3 stores the report reception date and time when the report information is input in association with the report information together with the one-time password, the group identification information and the report ID, and the group specified from the group identification information Notify the recipient of the notification and the one-time password for receiving the notification, and warn the recipient if the recipient's response to the notification information is not entered from the recipient even after a specified period of time has passed since the notification was received. It is characterized by transmitting.

  If the recipient receives a notification that there has been a whistleblowing and does not enter an answer, he / she will receive a warning after a specified period of time has passed since the time the report was received. Encourage people to answer. In addition, the reporter can grasp the time from when the report information is input until the reply to the report is obtained.

  The internal reporting processing method according to claim 4 is to aggregate at least one of the number of accesses to the website for each group, the number of generated report IDs, and the number of generated one-time passwords every predetermined period, and notify the group. It is characterized by doing.

  The number of accesses to the Web site for each group serves as a measure of interest in whistleblowing by persons involved in the group, and the number of reports IDs and one-time passwords generated represents the number of whistleblowings that have occurred. Therefore, by collecting these values every predetermined period and notifying the group, it is possible to grasp the entity of the illegal situation being performed in the group by comparing the predetermined period.

  According to the invention of claim 1, without using an IP address for identifying the reporter's terminal device for processing the report information, the reporter can simply input the group identification information and the report information from the recipient. Since the answer can be confirmed, the personal information of the reporter can be completely concealed.

  In addition, when the report information is entered, the recipient is notified of the one-time password and does not send the report information itself, so no one other than the recipient can view the report information during the notification process. In addition, since the notification information is read out, it is necessary to input the recipient identification information for identifying the recipient and the one-time password that can be known only by the recipient who should reply to the notification information. Can be concealed.

  Since the one-time password for reading the report information disappears when the recipient responds to the report information, the report information can be read to the minimum necessary, and the report information can be concealed more completely.

  Further, according to the invention of claim 2, since the system administrator different from the organization in which the reporter is involved processes the report information, the reporter has no anxiety about the confidentiality of the reporter's personal information and report information. , You can expect to receive information that is important to the organization.

  In addition, according to the invention of claim 3, if the recipient neglects or forgets to reply to the report information, a warning is received, so that prompt processing within the time limit is possible, and the reporter responds to the report after a predetermined period. I can expect an answer.

  In addition to this, according to the invention of claim 4, the organization can periodically obtain the tendency of the potential fraud situation in the organization and the substance of the consciousness of those involved in the organization. .

  Hereinafter, a method for processing an internal notification according to an embodiment of the present invention will be described with reference to FIGS. FIG. 1 and FIG. 2 are conceptual diagrams showing the entire system 1 that implements the method for handling internal reports. In these drawings, arrows indicated by solid lines indicate the transmission direction of information (data).

  In FIG. 1 and FIG. 2, a system administrator A is a person who opens a website on the Internet 2 in order to implement the method for processing internal reports. A connected database 4 is provided.

  System administrator A is entrusted with processing of whistle-blowing according to the present embodiment from one or more arbitrary organizations in advance, and is a user who specifies which organization for each organization An ID and a user password (hereinafter referred to as user PW) are assigned. In the present invention, the organization may be any corporation, country, local public organization, association, foundation, etc., as long as it is a collective that performs at least social activities. Will be described.

  Each user ID and user PW is composed of an arbitrary combination of 6 to 12 single-byte alphanumeric characters, and each company is involved in the employees who work for the company and the business of the company with the assigned user ID and user PW. To inform trading partners. All persons who are informed of the user ID and the user PW can be the reporter B in the system 1. To what extent the company can make the user ID and user PW known is free, but as time passes, it may be known to unspecified persons other than those who should become the original whistleblower B. It is preferable to periodically change the user ID and the user PW. The user ID and user PW assigned to each company are stored in the database 4 connected to the Web server 3.

  The company to which the user ID and the user PW are assigned before and after that, with respect to the system administrator A, the names of two or three recipients C and the means of communication to each recipient C (for example, mobile phone numbers, mobile mail addresses) Contact and register. When the system administrator A accepts the registration of the recipients C, the recipient ID and recipients composed of any combination of 6 to 12 single-byte alphanumeric characters for each recipient C. A password (hereinafter referred to as recipient PW) is assigned and notified to each recipient C.

  Recipient C is a person who receives notification information for reporting an improper situation and substantially processes the information, and therefore selects a person who seems to make a fair judgment in the company (organization). The reason why the number of recipients C is two or three is that there is a case where one person is absent or busy and cannot reply within the time limit described later, and that plural persons are used to monitor each other so as not to cheat each other. is there. More preferably, as will be described later, when the recipient C does not reply within the time limit, the name of the supervisor who receives the alarm and the means of communication from the system administrator A to the supervisor are designated as the recipient C. Separately, the system administrator A is notified and registered. The above-mentioned recipient ID and recipient PW are also stored in the database 4 in association with the name of the recipient C and the communication means to the recipient C. Is also stored.

  The reporter B who intends to report the illegal information by the internal report processing method according to the present embodiment first uses the terminal device 5 with a display function connected to the Internet 2 such as a personal computer, and the system. The administrator A accesses a Web site established on the Internet 2. This access is performed by the system administrator A having disclosed the domain name of the website in advance, and the reporter B starting the web browser on the terminal device 5 and inputting the domain name.

  When accessing the Web site, characters prompting the input of the ID and password are displayed on the display screen of the terminal device 5. The reporter B is informed of the user ID and the user PW that can identify the company from the company with which the reporter B is involved in some form in advance. Input (step S1).

  When the Web server 3 of the Web site receives the input of the user ID and the user PW from the terminal device 5, the Web server 3 compares the combination of the user ID and the user PW assigned to each company stored in the database 4. When the combination matches, the access is determined to be from the reporter B, and a message for selecting either input of report information or viewing of the reply of the recipient C with respect to the report information is displayed on the display screen of the terminal device 5. If none of the combinations match, it is determined that the third party is not permitted to use the system 1, and error processing is performed.

  When the reporter B selects the input of the report information and inputs the report information for reporting the unauthorized situation (step S2), the Web server 3 displays a report ID input screen (step S3). When the report information is input for the first time, the report ID is not known, so if it is not entered on this input screen, a report ID is generated for the input report information in the Web server 3, and the display screen of the terminal device 5 is displayed. (Step S4). The report information input operation by the reporter B ends here.

  Subsequently, a one-time password (hereinafter referred to as a one-time PW) is further generated for the input notification information in the Web server 3 (step S5). The report ID and the one-time PW are generated by randomly combining a time stamp and an arbitrary character string, respectively. The report ID corresponds to one report case, and the one-time PW is an input report. Each information is generated corresponding to the report information.

  When the one-time PW is generated, the report information is stored in the database 4 in association with the user ID, the user PW, the one-time PW, and the report ID. . At this time, together with the one-time PW, the report reception date and time when the reporter B receives the report information is also stored in the database 4 in association with the report information (step S6).

  After the report information is stored, a notification is sent from the company (organization) identified by the user ID associated with the report information in order to notify the recipient C who should respond to the report information that there was a report. The name of the recipient C and the communication means for each recipient C are read from the database 4. The notification to the recipient C is made by notifying the report ID, the report reception date and time, and the one-time PW, and the report information is not included in the notification for the purpose of concealing (step S7). In addition, this notification includes a message instructing to reply to the report information within a certain period of time (for example, within 48 hours of the company's operating day) from the reception date and time of the report information. It is supposed to prompt. When a plurality of recipients C are registered for the user ID, a notification describing the above contents is simultaneously notified by each communication means. For example, as shown in FIG. 1, when the communication means to the recipient C is an e-mail to a mobile phone, the above contents are sent from the e-mail server (not shown) of the system administrator A to the mobile phone 6 of the recipient C. An e-mail describing is sent.

  Recipient C who has received the notification that there has been a report uses the terminal device 7 with a display function of the recipient C connected to the Internet 2 within a certain period (step S8) from the reception date and time of the report information. Access the Web site established by administrator A. Similar to the access by the reporter B, this access is performed by inputting the domain name of the website published by the system administrator A using the web browser activated by the terminal device 7.

  When accessing the Web site, characters prompting the input of the ID and password are displayed on the display screen of the terminal device 7. Since the recipient C has previously received a notification of the recipient ID and the recipient PW from the system administrator A, the recipient C inputs the recipient ID and the recipient PW from the terminal device 7.

  When the Web server 3 receives the input of the recipient ID and the recipient PW from the terminal device 7, the Web server 3 compares with the combination of the recipient ID and the recipient PW assigned to each company stored in the database 4. When the combination matches, the access from the recipient C is determined, and a message prompting the user to input the notification ID and the one-time PW is displayed on the display screen of the terminal device 7. If none of the combinations match, it is determined that the third party is not permitted to use the system 1, and error processing is performed.

  Since the report ID and the one-time PW are information notified only to the recipient C who should respond to the report information in step S7, the recipient ID, the report ID, and the one-time PW of the notified recipient are the terminal device 7 On the condition that the notification information is input from, the notification information stored in the database 4 in association with the notification ID and the one-time PW is read and displayed on the terminal device 7 of the recipient C (step S9). In addition to the display of the report information, prompting the recipient C to input a reply to the report information (step S10).

  With this display, recipient C can confirm the contents of the report information, but if it is within a certain period from the reception date and time of the report information, there is no need to reply to the report information immediately, just confirm the contents of the report information. Access to the Web site may be canceled. In that case, the process returns from step S10 of FIG. 3 to step S8, and the notification information is again received by the above input from the recipient C in step S9 (may be another recipient C who has received notification of the notification at the same time). An opportunity to input an answer to is given (step S10).

  When an answer to the report information is input from the recipient C, the answer is stored in the database 4 in association with the report ID. The content of the response to the report information is, for example, to explain that it has been accepted without fail and its response policy. However, if you do not require the reporter B to input additional report information as will be described later Enter the completion of the report case processing along with the answer. Since the report ID is already stored in step S6 in association with the report information together with the user ID, user PW, and one-time PW, the input answer (including processing completion) is also associated with these data. .

  However, among these, the one-time PW is deleted from the database 4 at the same time as the answer is stored in the database 4 (step S12). As a result, no one can perform the process of step S9 for inputting the one-time PW and reading the report information, and the report information is completely concealed.

  If the reply of the recipient C to the report information is not stored even after a certain period of time has passed since the reception date and time of the report information, the means for communicating with the recipient C to the recipient C notified in step S7 about the report information Is used to issue a warning that no answer has been made (steps S13 and S15). As a result, when the recipient C neglects or forgets to reply to the report information, input of a reply can be prompted and prompt processing can be expected. After issuing a warning to the recipient C (step S15), the period from the notification acceptance date and time of step S8 is extended by a certain time, and the input from the terminal device 7 of the recipient C from step S9 is accepted. Good. Further, the warning in step S15 may be sent to the supervisor when the supervisor is registered together with the recipient C.

  The fact that the recipient C will reply within a certain period (within 48 hours of the working day) from the reception date and time of the notification information is also displayed on the screen where the notification ID is displayed for the notification information in step S4. Then, the reporter B can know that an answer can be obtained after the elapse of the period. When the reporter accesses the website of the terminal device 5 and inputs the user ID and the user PW (step S1), as described above, the notification information is input to the display screen of the terminal device 5 or the report information is received. Since a message for selecting one of the responses to the response of the person C is displayed (step S2), the reporter B who wants to obtain the response selects to view the response. If the response viewing request is after a certain period of time has passed since the reception date and time of the notification information, the process proceeds from step S8 to step S13. If the response is stored, the notification information is displayed on the input screen displayed thereafter. Enter the notification ID that was notified when you entered.

  Since the report ID is information that only the reporter B who has input the report information in step S4 other than the recipient C knows, the input user ID, user PW, and report ID are respectively specific report information. On the condition that it matches any combination of the user ID, the user PW and the report ID stored in the database 4 in association with the message ID, and reads the response of the recipient C stored in association with the report ID, Is displayed on the terminal device 5 (step S14). Thereby, the whistleblower B can confirm only the reply of the receiver C with respect to report information, while whilst keeping his own personal information secret.

  Therefore, if there is an unclear point in the contents of the report information or if you want to know the progress after that, the recipient C writes that in the reply to the report information and adds additional report information from the reporter B. Can be requested.

  When there is a request for additional report information in the reply of the recipient C, the reporter B can also identify the report case by the report ID and inform the recipient C who requested the additional report information. When the reporter B transmits additional report information to the recipient C, the terminal device 5 is reconnected to the Web site established by the system administrator A, the user ID and the user PW are input in step S1, and step S2 Enter additional report information in the same way that you entered the first report information in. When additional report information is input, the Web server 3 displays a report ID input screen (step S3), and inputs the report ID that was notified when the first report information was input. The input of the report ID is distinguished from the input of the first report information, and the process proceeds to step S5, where a one-time PW is generated. That is, the one-time PW is generated in order to specify newly input additional report information, and is associated with the user ID, user PW, and report ID that are already stored in association with the report information specified by the report ID. And stored in the database 4 (step S6).

  Next, as with the first report information processing, the report ID, additional report reception date and time and one-time PW were notified to the recipient C of the company specified by the user ID, and there was additional report information (Step S7), the report ID entered by the reporter B can be found to be a report case that has already been answered by the recipient C, so the report information identified by the report ID was answered. The recipient C is preferably read from the database 4 and notified to the recipient C.

  Thereafter, the process of the recipient C confirming the additional report information is the same as the process of the first report information, and within a certain period (step S8) from the reception date and time of the additional report information, the recipient C Additional notification information is displayed on the display screen by inputting the recipient ID and the recipient PW from the terminal device 7 that has accessed the Web site, followed by the notification ID and the one-time PW (step S9). .

  After that, if there is a reply or request from the recipient C for the additional report information, the contents are transmitted as a reply to the Web server 3 and the reply is stored in the database 4 in association with the report ID. At the same time (step S11), the one-time PW generated for the additional report information is deleted from the database 4 (step S12).

  By repeating this, the reporter B and the recipient C can respond to the report item specified by the report ID until a sufficient understanding of the receiver C is obtained. This can be done with the content completely hidden.

  Note that the above-described data input / output between the terminal device 5 of the reporter B or the terminal device 7 of the recipient C and the Web server 3 via the Internet 2 is 128-bit data by an SSL (Secure Socket Layer) data encryption method. It is preferable to perform encryption to prevent information leakage during communication.

  In addition to processing individual whistleblowers as described above, the system administrator A periodically sends to the organizations specified by the user PW periodically, that is, each organization that has been previously entrusted with whistleblowing. Report on the status of whistleblowing. For example, on a monthly basis, the total number of accesses received by inputting the user ID of the organization entrusted by the terminal device connected to the Internet 2, the number of generated notification IDs, and the generation of one-time PW Report the number of cases to the organization specified by the user ID.

  Of course, this report does not include the contents of individual whistleblowers B or their report information, but based on the total number of accesses, the status of potential fraud in the organization and the degree of interest in this system 1 are accessed. From the comparison of the total number of reports and the number of report IDs generated, the number of persons hesitating to input report information, the number of report ID reports, the number of report information reports, the number of report IDs and one-time PW generated From the comparison, it is possible to know the average number of responses for one report item, that is, the importance of the contents of the report as a guide.

  In the above embodiment, when notifying the recipient C that the notification has been made, the notification ID is included, but the one-time PW and the notification information reception date and time are not included. Only the recipient C may be notified of (or the response time limit of the recipient C calculated from the reception date and time of the notification information). In this case, when the recipient C inputs the one-time PW and displays the notification information on the terminal device 7, the notification ID is also displayed and notified to the recipient C.

  Further, the recipient C does not necessarily need to register a plurality of persons in one group, and it is not always necessary to register the supervisor who receives the warning in step S15.

  Further, the report information may be deleted at the same time as the one-time PW disappears, but is stored in the database 4 for a certain period of time, for example, the same report between the recipient C and the reporter B as described above. When a response is repeated for a case (same report ID), the past history of the report information specified by the report ID can be checked exceptionally on condition that the recipient ID and the report ID are input by the receiver C. May be.

  Further, the reception date / time of the notification information is stored in the database 4 as the reception date / time data, but may be expressed by a notification ID or a time stamp included in the one-time PW.

  In addition, a group may be not only a specific company as a whole, but also a sub-organization such as a business division or factory in the company. In that case, the internal organization of each subdivided specific organization Can process notifications and understand fraud.

  The present invention does not use the IP address of the reporter's terminal device, and conceals the reporter between the reporter's terminal device connected to the Internet and the recipient's terminal device in a state of concealing the reporter and the report information. It is suitable for a method for processing an internal report in which the answer to is exchanged via a system administrator's Web server.

It is a conceptual diagram which shows the system 1 whole which implements the processing method of the internal report which concerns on embodiment of this invention. 1 is a conceptual diagram showing the entire system 1 showing the flow of data after a recipient C accesses a Web server 3. FIG. It is a flowchart which shows the process sequence of the processing method 1 of an internal report.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 System which carries out the internal report processing method 2 Internet 3 Web server 4 Database 5 Reporter B's terminal device 6 Recipient C's mobile phone 7 Receiver C's terminal device A System administrator B Reporter C Recipient

Claims (4)

It is a method of handling whistle-blowing in which report information for reporting the status of fraud being conducted within an organization is received from any whistleblower involved in the organization and the recipient is designated in advance by the organization,
Opening a website on the Internet and prompting input of at least group identification information for identifying the group and report information from the terminal device of the reporter connected to the Internet (S1, S2);
A step of generating and assigning a report ID to the input report information and displaying it on the terminal device of the reporter (S4);
Generating a one-time password, storing the one-time password, group identification information and report ID in the database of the website in association with the report information (S6);
A step (S7) of notifying that a one-time password is notified to a recipient designated in advance by a group identified from the group identification information and that an internal report has been made;
A message stored in association with the one-time password on condition that at least the recipient identification information for identifying the recipient and the one-time password notified to the recipient are inputted from the terminal device of the recipient connected to the Internet. Reading the information and the report ID and displaying them on the recipient's terminal device (S9);
Storing the response of the recipient to the report information in the database of the website in association with the report ID (S11);
A step (S12) of extinguishing the one-time password stored in association with the notification information on condition that the recipient's response to the notification information is stored;
From the reporter's terminal, at least the report ID and the group identification information stored in association with the report ID are input, and the recipient's response to the stored report information in association with the report ID is read out. A method of processing an internal report comprising the step of displaying on the terminal device (S14). The organization identification information is a user ID assigned to each organization by the system administrator who establishes the website, and the reporter's ID via the Internet is provided on condition that the user ID and the user password given to each organization are entered. 2. The internal notification processing method according to claim 1, wherein the connection between the terminal and the Web site is validated. The report reception date and time when the report information is entered is stored in association with the report information together with the one-time password, group identification information and report ID,
The organization identified from the organization identification information notifies the recipient specified in advance of the report reception date and time and the one-time password, and the recipient's response to the notification information is input from the recipient even if a predetermined period has elapsed from the notification reception date and time. 3. A method for processing an internal report according to claim 1, wherein a warning is sent to the recipient if the address is not received. At least one of the number of accesses to a website, the number of notification IDs generated, and the number of one-time passwords generated for each group is counted every predetermined period and notified to the group. Item 6. The internal reporting method according to Item 3.

Images