JP2006024051A - Customer information system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize a customer information system capable of reducing risk of an outflow of customer information by applying a large change to a current system. <P>SOLUTION: The customer information system for browsing customer information through a network is provided with: a database server in which the customer information is stored; a Web server for processing the customer information acquired by inquiring the database server to a document described by HTML and providing the document; a secure font server for substituting characters in the customer information acquired from the database server through the Web server for a secure font of each employee, transmitting the character-substituted customer information and providing the secure font in each display of the character-substituted customer information; and a computer for restoring the character-substituted customer information acquired from the secure font server by using the secure font and displaying the restored customer information. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a customer information system that browses customer information via a network, and more particularly to a customer information system that can reduce the risk of leakage of customer information without making major changes to the current system.

  Prior art documents related to a customer information system for browsing customer information via a conventional network, particularly a customer information system for encrypting customer information and the like, include the following.

JP-A-10-124030 JP-A-10-301924 JP 2002-040772 A JP 2002-077136 A JP 2002-077137 A JP 2002-169807 A

  FIG. 12 is a block diagram showing an example of such a conventional customer information system. In FIG. 12, 1 is a database server in which customer information is stored, 2 is a Web server that provides documents described in HTML (HyperText Markup Language: hereinafter simply referred to as HTML), and 3 and 6 are internal network networks. A firewall installed for the purpose of preventing unauthorized access from outside to the external network, 4, 5 and 7 are computers installed with Web browsers, and 100, 101 and 102 are in the organization (head office) A built-in network such as an intranet, 103 is a network such as the Internet, which is a collection of countless servers scattered in the world, and 104 is a network such as an intranet built in an organization (branch office).

  The database server 1 is connected to the network 100, and the Web server 2 is connected to the networks 100 and 101. The firewall 3 is connected to the networks 101 and 102 and also to the network 103.

  The computers 4 and 5 are connected to the network 102 and the computer 7 is connected to the network 104. Further, the firewall 6 is connected to the network 104 and is also connected to the network 103.

  Here, the operation of the conventional example shown in FIG. 12 will be described with reference to FIGS. 13, 14, 15, 16, 17, and 18. FIG. FIG. 13 is a flowchart for explaining the operation of each computer (specifically, the operation of the computer 7). FIGS. 14, 16, and 18 are explanatory diagrams for explaining the flow of information and the like. 15 is a flowchart for explaining the operation of the Web server 2, and FIG. 17 is a flowchart for explaining the operation of the database server 1.

  In “S001” in FIG. 13, the computer 7 accesses the Web server 2 via the network 104, the firewall 6, the network 103, the firewall 3, and the network 101 using an operating Web browser, 2 is requested, and the computer 7 waits until receiving the requested customer information in “S002” in FIG.

  For example, as indicated by “RQ01” in FIG. 14, the computer 7 accesses the Web server 2 via the network 104, the firewall 6, the network 103, the firewall 3, and the network 101 using an operating Web browser. Then, the customer information required for the Web server 2 is requested.

  If it is determined that the requested customer information has been received in “S002” in FIG. 13, the computer 7 displays the received customer information on the display means of the computer 7 in “S003” in FIG.

  Specifically, since the received customer information is described in HTML, the layout is reproduced according to the HTML tag using a Web browser running on the computer 7, and characters and images are reproduced to display the computer 7. Display on the means.

  In “S101” in FIG. 15, the Web server 2 determines whether or not a request for customer information from the computer 7 has been received, and if it is determined that a request for customer information has been received in “S101” in FIG. In S <b> 102 in FIG. 15, the Web server 2 inquires customer information requested to the database server 1 via the network 100.

  For example, when it is determined that a request for customer information has been received as indicated by “RQ11” in FIG. 16, the Web server 2 inquires the customer information requested to the database server 1 via the network 100. To do.

  On the other hand, in “S201” in FIG. 17, the database server 1 determines whether or not customer information has been inquired from the Web server 2, and if it is determined in “S201” in FIG. 17 that customer information has been inquired. In “S202” in FIG. 17, the database server 1 transmits the customer information inquired from the Web server 2 to the Web server 2 via the network 100.

  For example, when it is determined that customer information has been inquired as indicated by “SD11” in FIG. 16, the database server 1 transmits the customer information inquired from the web server 2 to the web server 2 via the network 100. To do.

  Then, in “S103” in FIG. 15, the Web server 2 processes the customer information acquired from the database server 1 into a document described in HTML, then the network 101, the firewall 3, the network 103, the firewall 6, and the network 104. To the computer 7.

  For example, as indicated by “TD21” in FIG. 18, the Web server 2 transfers the customer information acquired from the database server 1 to the computer 7 via the network 101, the firewall 3, the network 103, the firewall 6, and the network 104. .

  As a result, by accessing the Web server 2 using a Web browser installed on the computer and acquiring customer information, it is possible to easily obtain customer information in the company without installing special software on the computer. It becomes possible to share.

  However, in the conventional example shown in FIG. 12, in-house customer information can be easily shared with many employees without installing special software or the like on the computer. There was a problem that the possibility of spilling out would be high.

  In particular, since there is no means for the system administrator to manage the status of customer information sent to computers managed by many employees individually, customer information received by the computer is not deleted indefinitely. There is a possibility that the customer information may be stored, and customer information may be unintentionally leaked outside due to erroneous transmission of information or theft of a computer.

Further, since customer information received by the computer is stored indefinitely without being deleted, a malicious employee may intentionally leak the customer information received by the computer outside the company.
Therefore, the problem to be solved by the present invention is to realize a customer information system capable of reducing the risk of leakage of customer information without making a major change to the current system.

In order to achieve such a problem, the invention according to claim 1 of the present invention is:
In a customer information system that browses customer information via a network,
A database server in which customer information is stored; a web server that processes and provides the customer information obtained by referring to the database server into a document described in HTML; and the web server obtained from the database server via the web server Customer information is transmitted by replacing characters with a secure font for each employee, and each time the customer information with characters replaced is displayed, a secure font server that provides the secure font, and the characters acquired from the secure font server A computer that restores and displays the replaced customer information using the secure font to display the replaced customer information, thereby reducing the risk of leakage of customer information without making major changes to the current system Is possible.

The invention according to claim 2
In the customer information system which is the invention according to claim 1,
The computer is
Access the secure font server via the network using a running web browser, request the required customer information, wait until there is an employee authentication request from the secure font server, If it is determined that there is a customer authentication process and waits for reception of customer information with characters replaced by the secure font for each employee, and if it is determined that the customer information with characters replaced is received, the secure Wait until the font is received, and when it is determined that the secure font has been received, the customer information in which the character is replaced is displayed by restoring the character replacement using the secure font, thereby displaying the current system. It is possible to reduce the risk of customer information leak without major changes.

The invention described in claim 3
In the customer information system which is the invention according to claim 1,
The secure font server is
When it is determined that a request for customer information has been received from the computer, the computer requests employee authentication to the computer and waits until the employee authentication is completed. Requests customer information required by the computer from the Web server and waits until customer information is received. When it is determined that the customer information has been received, characters are written in a secure font unique to the employee that was previously authenticated by the employee. By generating the replaced customer information, transferring the customer information with the characters replaced to the computer via the network, and transmitting the employee-specific secure font to the computer via the network, It becomes possible to reduce the risk of leakage of customer information without making any changes.

The invention according to claim 4
In the customer information system which is the invention according to claim 1,
The web server is
When it is determined that the customer information request from the secure font server has been received, the customer information requested to the database server is inquired via the network, and the customer information acquired from the database server is expressed in HTML. By processing the document as described and transferring it to the secure font server via the network, it is possible to reduce the risk of leakage of customer information without making a major change to the current system.

The invention according to claim 5
In the customer information system which is the invention according to claim 1,
The database server is
When it is determined that the customer information is inquired from the web server, the customer information inquired from the web server is transmitted to the web server via the network, so that the customer information is not greatly changed. The risk of spillage can be reduced.

The invention described in claim 6
In the customer information system which is the invention according to claim 3,
The secure font server is
By generating the secure font unique to the employee at the time of the employee authentication, it is possible to reduce the risk of leakage of customer information without making a major change to the current system.

The invention described in claim 7
In the customer information system according to any one of claims 1 to 6,
By integrating the functions of the database server, the Web server, and the secure font server into one or two servers, the risk of leakage of customer information can be reduced without major changes to the current system. Is possible.

The present invention has the following effects.
According to the inventions of claims 1, 2, 3, 4, 5, 6 and 7, a secure font server is added to the conventional customer information system, and the customer information acquired by the secure font server via the Web server is added to the employee. By replacing (encrypting) characters with each secure font and sending them to the computer, each time the customer information with characters replaced (encrypted) is displayed, the secure font server provides the secure font to the computer. A customer information system that can reduce the risk of leakage of customer information without major changes to the system is realized.

  In the unlikely event that both the customer information with the characters replaced (encrypted) and the secure font are leaked, by analyzing the leaked secure font and identifying to which employee the secure font is assigned. , It becomes possible to easily identify the employee who leaked information.

  Hereinafter, the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing the configuration of an embodiment of a customer information system according to the present invention. In FIG. 1, 1, 2, 3, 4, 5, 6, 7, 100, 101, 102, 103 and 104 are assigned the same reference numerals as in FIG. This is a secure font server that provides customer fonts that have been replaced (encrypted) and that provides secure fonts each time the customer information with characters replaced (encrypted) is displayed.

  The database server 1 is connected to the network 100, and the Web server 2 is connected to the networks 100 and 101. The secure font server 8 is connected to the network 101, and the firewall 3 is connected to the networks 101 and 102 and also to the network 103.

  The computers 4 and 5 are connected to the network 102 and the computer 7 is connected to the network 104. Further, the firewall 6 is connected to the network 104 and is also connected to the network 103.

  Here, the operation of the embodiment shown in FIG. 1 will be described with reference to FIGS. 2, 3, 4, 5, 6, 6, 7, 8, 10, and 11. FIG. 2 is a flowchart for explaining the operation of each computer (specifically, the computer 7), FIGS. 3, 5 and 8 are explanatory diagrams for explaining the flow of information and the like, and FIG. 4 is an operation of the secure font server 8. 6 is a flowchart for explaining the operation of the Web server 2, FIG. 7 is a flowchart for explaining the operation of the database server 1, and FIG. 9 is an explanatory diagram showing an example of a document described in HTML. FIG. 10 is an explanatory diagram illustrating an example in which a document described in HTML is displayed on a Web browser, and FIG. 11 is an explanatory diagram illustrating an example when information displayed on the Web browser is copied and pasted.

  In “S301” in FIG. 2, the computer 7 accesses the secure font server 8 via the network 104, the firewall 6, the network 103, the firewall 3 and the network 101 by using a running Web browser, and performs secure processing. Necessary customer information is requested to the font server 8, and the computer 7 waits until an employee authentication request is received from the secure font server 8 in "S302" in FIG.

  For example, as indicated by “RQ31” in FIG. 3, the computer 7 uses the Web browser that is operating to the secure font server 8 via the network 104, the firewall 6, the network 103, the firewall 3, and the network 101. Access to the secure font server 8 to request necessary customer information.

  If it is determined that there is an employee authentication request in “S302” in FIG. 2, the computer 7 requests the employee who is the operator to input the employee ID and password in “S303” in FIG. Employee authentication processing is performed by transmitting the ID and password to the secure font server.

  Then, in “S304” in FIG. 2, the computer 7 waits until the encrypted customer information is received. When it is determined that the encrypted customer information is received in “S304” in FIG. 2, the computer 7 waits until receiving the secure font in “S305” in FIG.

  If it is determined that the secure font is received in “S305” in FIG. 2, the computer 7 restores the character replacement using the secure font that has received the encrypted customer information in “S306” in FIG. (Decrypted) and displayed on the display means of the computer 7.

  Specifically, since the received customer information is described in HTML, the layout is reproduced according to the HTML tag using a Web browser running on the computer 7, and characters and images are reproduced to display the computer 7. Display on the means.

  At this time, however, the customer information has characters replaced (encrypted) in a secure font, so that the character replacement is restored (decrypted) using the received secure font to reproduce legible characters. It is displayed on the display means of the computer 7.

  The secure font is acquired from the secure font server 8 and used every time the customer information with characters replaced (encrypted) is displayed.

  In “S401” in FIG. 4, the secure font server 8 determines whether or not a request for customer information from the computer 7 has been received, and determines that a request for customer information has been received in “S401” in FIG. In this case, the secure font server 8 requests employee authentication from the computer 7 in “S402” in FIG. 4, and waits until employee authentication is completed in “S403” in FIG.

  If it is determined that the employee authentication is completed in “S403” in FIG. 4, the secure font server 8 needs the computer 7 to the Web server 2 via the network 100 in “S404” in FIG. The customer information is requested, and it waits until customer information is received in “S405” in FIG.

  For example, when it is determined that the employee authentication has been completed as indicated by “RQ41” in FIG. 5, the secure font server 8 sends the customer information required by the computer 7 to the Web server 2 via the network 100. Request.

  When it is determined that customer information has been received in “S405” in FIG. 4, the secure font server 8 in “S406” in FIG. 4 replaces (encrypts) the character with the employee-specific secure font that has been authenticated by the employee. Information is generated, and the customer information whose characters are replaced (encrypted) in “S407” in FIG. 4 is transferred to the computer 7 via the network 101, the firewall 3, the network 103, the firewall 6, and the network 104.

  Further, in “S408” in FIG. 4, the secure font server 8 transmits the employee-authenticated secure font unique to the employee to the computer 7 via the network 101, the firewall 3, the network 103, the firewall 6, and the network 104.

  In “S501” in FIG. 6, the Web server 2 determines whether or not a request for customer information from the secure font server 8 has been received, and determines that a request for customer information has been received in “S501” in FIG. In this case, in “S502” in FIG. 6, the Web server 2 inquires the customer information requested to the database server 1 via the network 100.

  For example, when it is determined that a request for customer information has been received as indicated by “RQ42” in FIG. 5, the Web server 2 inquires the customer information requested to the database server 1 via the network 100. To do.

  On the other hand, in “S601” in FIG. 7, the database server 1 determines whether or not customer information has been inquired from the Web server 2, and if it is determined in “S601” in FIG. 7 that customer information has been inquired. In “S602” in FIG. 7, the database server 1 transmits the customer information inquired from the Web server 2 to the Web server 2 via the network 100.

  For example, when it is determined that customer information has been inquired as indicated by “SD51” in FIG. 8, the database server 1 transmits the customer information inquired from the web server 2 to the web server 2 via the network 100. To do.

  Then, in “S503” in FIG. 6, the Web server 2 processes the customer information acquired from the database server 1 into a document described in HTML, and then transfers the document to the secure font server 8 via the network 101.

  For example, as indicated by “SD 52” in FIG. 8, the Web server 2 processes the customer information acquired from the database server 1 into a document described in HTML, and then transfers the document to the secure font server 8 via the network 101.

  As shown in “TD51” in FIG. 8, customer information obtained by replacing (encrypting) characters transferred to the computer 7 via the network 101, the firewall 3, the network 103, the firewall 6, and the network 104 is, for example, It is described in HTML as shown in FIG.

  In FIG. 9, “SF61” is the name of the employee-specific secure font used to replace (encrypt) characters (for example, “MyFont01”), and in FIG. 9, “CP61” has characters replaced (encrypted). Customer information (for example, “GDKKN VNQKC”). In addition, Caesar encryption is used as an encryption algorithm.

  On the other hand, for comparison, “FT61” in FIG. 9 is a normal font name (for example, “Arial: English font”), and “NC61” in FIG. 9 is customer information in which characters are not replaced (encrypted) (for example, "HELLO @ WORLD").

  When the text described in HTML as shown in FIG. 9 is displayed on the Web browser using the received secure font, the display becomes “BR71” in FIG.

  That is, as shown in “DS71” in FIG. 10, customer information (for example, “GDKKN VNQKC”) in which the characters shown in “CP61” in FIG. 9 are replaced (encrypted) is an employee-specific secure font (for example, “ Character substitution is restored (decoded) by MyFont01 ”) and displayed as legible customer information (for example,“ HELLO @ WORLD ”).

  On the other hand, as shown in “DS72” in FIG. 10, customer information (for example, “HELLO @ WORLD”) in which the characters shown in “NC61” in FIG. 9 are not replaced (encrypted) is a normal font (for example, “ Customer information (for example, “HELLO @ WORLD”) is displayed in the “Arial”) typeface.

  Even if the customer information displayed as legible as shown in “BR81” in FIG. 11 is copied to other display applications by cut and paste as shown in “PS81” in FIG. Since the character is replaced (encrypted), it is displayed as information with the character replaced (encrypted) as indicated by “CP81” in FIG.

  Further, even if a sentence written in HTML as shown in FIG. 9 is transferred to another computer, it cannot be displayed in a legible manner because there is no secure font.

  Further, since the secure font is acquired from the secure font server 8 each time the customer information with characters replaced (encrypted) is displayed, the text described in HTML as shown in FIG. Even if it is stored in the computer, the secure font stored in the secure font server 8 can be discarded to make it unreadable.

  As a result, the secure font server 8 is added to the conventional customer information system, and the customer information acquired by the secure font server 8 via the Web server 2 is replaced (encrypted) with the secure font for each employee and transmitted to the computer. By providing a secure font from the secure font server 8 to the computer every time the customer information with characters replaced (encrypted) is displayed, there is a risk of leakage of customer information without making any major changes to the current system. A customer information system that can reduce

  In the unlikely event that both the customer information with the characters replaced (encrypted) and the secure font are leaked, by analyzing the leaked secure font and determining which employee the secure font is assigned to , It becomes possible to easily identify the employee who leaked information.

  In the description of the embodiment shown in FIG. 1, it is described that the secure font server 8 has a secure font for each employee in advance. However, even if an employee-specific secure font is generated at the time of employee authentication, I do not care.

  In this case, since the employee-specific secure font is generated every time the employee is authenticated, the risk of leakage of customer information can be further reduced.

  In the embodiment shown in FIG. 1, the database server 1, the web server 2, and the secure font server 8 are provided separately for simplicity of explanation. Of course, each function is integrated into one or two servers. It doesn't matter.

  In the embodiment shown in FIG. 1, the head office and the branch office are connected to each other via the network 103 such as the Internet. Of course, the network configuration is not limited to this, and any network can be used. Applicable to configuration.

  In the embodiment shown in FIG. 1, a firewall is provided at the boundary with the network 103 such as the Internet for ensuring security, but the firewall is not an essential component.

  In the embodiment shown in FIG. 1, the customer information system is exemplified. Of course, information such as trade secret information, management information, intellectual property information, or confidential information that should be handled strictly It can also be used to prevent spillage.

1 is a block diagram showing a configuration of an embodiment of a customer information system according to the present invention. FIG. 10 is a flowchart for explaining the operation of each computer. It is explanatory drawing explaining the flow of information etc. It is a flowchart explaining operation | movement of a secure font server. It is explanatory drawing explaining the flow of information etc. It is a flowchart explaining operation | movement of a Web server. It is a flowchart explaining operation | movement of a database server. It is explanatory drawing explaining the flow of information etc. It is explanatory drawing which shows an example of the document described by HTML. It is explanatory drawing which shows an example which displayed the document described by HTML with the web browser. It is explanatory drawing which shows an example at the time of copying and pasting the information displayed on the web browser. It is a block diagram showing an example of a conventional customer information system. FIG. 10 is a flowchart for explaining the operation of each computer. It is explanatory drawing explaining the flow of information etc. It is a flowchart explaining operation | movement of a Web server. It is explanatory drawing explaining the flow of information etc. It is a flowchart explaining operation | movement of a database server. It is explanatory drawing explaining the flow of information etc.

Explanation of symbols

1 Database Server 2 Web Server 3, 6 Firewall 4, 5, 7 Computer 8 Secure Font Server 100, 101, 102, 103, 104 Network

Claims (7)

In a customer information system that browses customer information via a network,
A database server storing customer information;
A web server that processes and provides the customer information obtained by referring to the database server into a document described in HTML;
A secure font server that transmits the customer information acquired from the database server via the Web server by replacing characters with a secure font for each employee, and provides the secure font each time the customer information with the characters replaced is displayed When,
A customer information system comprising: a computer that displays the customer information obtained by replacing the character acquired from the secure font server by restoring the character replacement using the secure font. The computer is
Access the secure font server via a network using a working web browser, request necessary customer information, and wait until there is an employee authentication request from the secure font server,
When it is determined that an employee authentication request has been made, employee authentication processing is performed, and waiting until customer information in which characters are replaced by the secure font for each employee is received,
When it is determined that the customer information in which the characters are replaced is received, wait until the secure font is received,
2. The customer information system according to claim 1, wherein when it is determined that the secure font has been received, the customer information in which the character is replaced is displayed by restoring the character replacement using the secure font. The secure font server is
If it is determined that a request for customer information has been received from the computer, the computer requests employee authentication and waits until employee authentication is completed,
When it is determined that the employee authentication is completed, the computer requests the customer information required by the computer from the Web server via the network, and waits until the customer information is received.
When it is determined that the customer information has been received, the customer information is generated by replacing the character with the employee-specific secure font that was previously authenticated by the employee,
Transferring the customer information with the characters replaced to the computer via a network;
2. The customer information system according to claim 1, wherein the employee-specific secure font is transmitted to the computer via a network. The web server is
When it is determined that a request for customer information from the secure font server has been received, the customer information requested for the database server is inquired via the network,
2. The customer information system according to claim 1, wherein the customer information acquired from the database server is processed into a document described in HTML and then transferred to the secure font server via a network. The database server is
2. The customer information system according to claim 1, wherein when it is determined that customer information is inquired from the web server, the customer information inquired from the web server is transmitted to the web server via a network. The secure font server is
4. The customer information system according to claim 3, wherein the secure font unique to the employee is generated when the employee authentication is performed. The customer information system according to any one of claims 1 to 6, wherein the functions of the database server, the Web server, and the secure font server are integrated into one or two servers.

Images