JP2007241339A - Operator monitoring device and operator monitoring method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an operator monitoring system for a POS system for monitoring centralizingly in a headquarter server a pattern of a key operation concerned in doubtful sales processing by an operator of each POS terminal device in a plurality of stores. <P>SOLUTION: In the POS system constituted of a plurality of store servers connected to the headquarter server via communication lines, and the plurality of POS terminal devices connected to the respective store servers via indoor communication lines, and for executing the sales processing for an article or service, the headquarter server is provided with a storage means for setting the plurality of operation patterns by the operator having the possibility of illicit action in the POS terminal device, and threshold values for processing data in the plurality of operation patterns, and for storing the threshold values, a communication means for receiving an electronic journal indicating sales processing data in the respective controlling POS terminal devices from the plurality of store servers, and a censoring means for censoring a content of the electronic journal. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention includes a headquarter server, a plurality of store servers connected to the headquarter server via a communication line, and a plurality of POSs that perform sales processing of products or services connected to each store server via an indoor communication line. The present invention relates to an operator monitoring system that detects and warns an unauthorized act by an operator of the POS terminal device in each store in a POS system constituted by a terminal device.

  In a POS terminal device that is installed in a retail store or the like that provides products or services and can manage sales management items in real time at the point of sale, the operator of the POS terminal device employed in the retail store has a key for fraudulent acts. There is a case where an operation is carried out to illegally take out a merchandise for sale or to give and receive illegal money.

  The increase in fraudulent acts by operators such as checkers for registering items for sale related to the operation of recent POS terminal devices and cashiers for sending and receiving money is due to the fact that operations of POS terminal devices employed at retail stores are not necessarily related to the retailers. One of the factors is the fact that it is often performed by short-term temporary employees rather than regular employees in stores. Such fraudulent acts by the operator of the POS terminal device enable various sales processing (discounted sales processing, return processing, correction processing, credit card payment processing, etc.) provided in the POS terminal device that has advanced in recent years. Often performed with the reverse functionality.

  FIG. 11 shows a first case where an unauthorized sales process is performed in the POS terminal device. In the example shown in FIG. 11, immediately after the billing item of the product with the product name C and the price of ¥ 4,800 is input, “direct correction” is illegally input in the product name column by the “correct immediately before” key. ¥ -4,800 is entered, and as a result, a product with a price of ¥ 4,800 has been stolen. Note that the merchandise may also be fraudulently caused by an unauthorized operation of the “specified correction” key having the same function as the “immediate correction” key.

  FIG. 12 shows a second case where an unauthorized sales process is performed in the POS terminal device. In this case, immediately after all the billing items of product names A to F are entered and subtotal of ¥ 4,130 is entered, “0” is entered together with an illegal “Cancel” input by the “Cancel” key. As a result, merchandise with a price of ¥ 4,800 was fraudulent.

  The merchandise may be fraudulently caused by an unauthorized operation of the “return” key or the “cancel” key having the same function as the “transaction stop” key. In addition, an illegally discounted product may be fraudulently caused by an illegal operation of a “discount” key or a “discount” key.

  For this reason, conventionally, there has been known a proposal for enhancing a monitoring function by automatically switching between a video image for monitoring the inside of a store and an original processing screen (for example, see Patent Document 1).

  Also, a register system is known in which cash cannot be accepted or taken out until a set time or an unlock command from a host device is received (see, for example, Patent Document 2).

  Further, the POS that detects that the operator has left the seat is detected by a monitoring sensor, and when the cash drawer safe of the cash drawer apparatus is open and the operator has left the seat for a certain period of time, the cash withdrawal safe is closed. A system is also known (see, for example, Patent Document 3).

In addition, when it is necessary to cancel the sales data by creating a new “false application” key, press this “false application” key to set the new “false application” flag and checkout. A POS terminal device and a POS management system that are approved by an administrator are disclosed (for example, see Patent Document 4).
JP-A-8-1224025 Japanese Patent Laid-Open No. 9-251577 Japanese Patent Laid-Open No. 10-211027 JP 2004-30210 A

  However, any of such conventional POS systems does not check the contents of the sales process by the key operation of the operator of the POS terminal device, and does not monitor the illegal sales process.

  In other words, the inventions described in Patent Documents 1 to 3 mainly monitor or steal money from a money storage box (cash drawer) that constitutes a POS terminal device. The invention described in Patent Document 4 prevents key operation input correction without an administrator's approval.

  Therefore, an object of the present invention is to provide an operator monitoring apparatus and method in a POS terminal device that extracts a key operation pattern related to suspicious sales processing by an operator of the POS terminal device and issues a warning.

  In view of the above object, the present invention provides a headquarter server, a plurality of store servers connected to the headquarter server via a communication line, and sales of products or services connected to each store server via an indoor communication line. In a POS system constituted by a plurality of POS terminal devices that perform processing, a monitoring device that detects and warns of an illegal act by an operator of the POS terminal device in each store, and the headquarter server is in the POS terminal device In each POS terminal device that has jurisdiction from the plurality of store servers, storage means for setting a plurality of operation patterns by an operator having the possibility of fraud and threshold values of processing data in the plurality of operation patterns and storing the threshold values Communication means for receiving an electronic journal indicating sales processing data, and censoring the contents of the electronic journal Censor means, collation means for collating whether or not any of the plurality of preset operation patterns is included in the sales process data in the electronic journal, and the operation extracted by the collation Means for determining whether or not each processing data related to a pattern has reached the threshold, and an output means for outputting a warning message regarding the sales processing related to the operation pattern that has reached the threshold An operator monitoring device characterized by comprising: is provided.

  Here, the key operation patterns including the possibility of fraud include the “Cancel” key, “Cancel” key, “Sell Price Change” key, “Discount” key, “Grant Point” key, and “Last Delete” key. Key operation includes any one or more of a key, “designated delete” key, “trade-in” key, or “coupon” key, and the threshold value includes a key operation pattern. Each pattern defines the number of occurrences of the pattern, the frequency of occurrence of the pattern, the handling amount of sales data, and / or the percentage of handling amount of sales data.

  The headquarter server is usually configured to collectively receive the electronic journal data of each POS terminal device integrated from each of the store servers after the end of the business of the POS terminal device of each store. You may comprise so that the said electronic journal data may be received via the said store server for every transaction by the said POS terminal device in each store.

  Further, the censoring by the censoring unit and the collation by the collating unit are performed by a preset time or predetermined data input to the store server. Here, in order to make it impossible for a person other than the administrator to check the verification result, the predetermined data input for starting the verification includes a preset password or password.

  The present application further includes a headquarter server, a plurality of store servers connected to the headquarter server via a communication line, and a plurality of sales processes for products or services connected to each store server via an indoor communication line. In the POS system constituted by the POS terminal device, there is a monitoring method for detecting and warning an illegal act by an operator of the POS terminal device in each store, and in the headquarters server, a possibility of an illegal act in the POS terminal device A plurality of operation patterns by an operator having an operation, a step of setting a threshold value of processing data in the plurality of operation patterns and storing the threshold value, and an electronic device indicating sales processing data in each POS terminal device having jurisdiction from the plurality of store servers Receiving a journal and censoring the contents of the electronic journal. And a step of collating whether or not any of the plurality of preset operation patterns is included in the sales process data in the electronic journal, and the operation pattern extracted by the collation A step of determining whether or not each processing data has reached the threshold value, and a step output means for outputting a warning message regarding the sales processing related to the operation pattern that has reached the threshold value. An operator monitoring method characterized by the above is provided.

  The operator monitoring apparatus according to the present invention searches for a key operation pattern related to a suspicious sales process by an operator of all the POS terminal apparatuses having jurisdiction over a plurality of in-store servers constituting the POS system, and warns the operator. It was possible to generate.

  Hereinafter, the details of the operator monitoring apparatus according to the present invention will be described with reference to the drawings.

  FIG. 1 schematically shows the overall configuration of an operator monitoring system in a POS system. As shown in FIG. 1, the POS system to which the operator monitoring system of the present invention is applied includes a headquarter server 31, a core business server 32, a collection / distribution server 33, and a plurality of headphone servers connected to the headquarter server via communication lines. The store server 4 includes a plurality of POS terminal devices 1, 2, and 3 that perform sales processing of products or services connected to the store servers 4 via indoor communication lines. The operator monitoring device is provided in the headquarter server 31. The communication means 28 (FIG. 2) in the present invention includes a collection / distribution server 33 and a router 41.

  In FIG. 1, POS terminal devices 1, 2, and 3 are operated by POS software for operating the POS terminal device as main components, and each POS terminal device is usually provided with a barcode scanner for customers. The purchased product is registered for each product, and electronic journal data indicating the sales record of the product is stored. And the shop server 4 receives each electronic journal data from each POS terminal device via an indoor communication line (LAN). Further, the head office server 31 connected to the plurality of store servers 4 via the communication line 40 censors the sales data in the electronic journal data of each POS terminal device 1, 2, 3 transmitted from each store server 4. The sales process with the possibility of fraud by the operator of the POS terminal device is monitored, a warning text is created, and displayed on the display of the headquarter server 31 or printed out on a printer. And the headquarters server 31 can transmit the said warning sentence with respect to the shop server 4 which has jurisdiction over the POS terminal device which showed the possibility of an unauthorized transaction.

FIG. 2 shows an example of the technical configuration of the headquarter server 31 shown in FIG. The headquarter server 31 shown in FIG. 2 includes a full keyboard data input means 15, a display device 16 such as a liquid crystal panel, and a printing device 17.
The head office server 31, a ROM 19 for storing fixed programs and data, a RAM 20 for use as a working memory and for storing variable data and temporary data, and a data storage device 24 are provided.

  This data storage device 24 stores various control programs and sales records of POS terminal devices transmitted from each store server 4. A central processing unit (CPU) 23 of the headquarter server 31 controls these devices as a whole.

  When a product is purchased by a customer at the POS terminal devices 1, 2, and 3 shown in FIG. 1, when the barcode of the product is read by a scanner (not shown), the store server 4 stores the product related to the barcode. The price of the product is read with reference to the PLU file storage device 21 and is sent to the POS terminal device. In response to this, the product name and sales price are displayed on the display device (not shown) of the POS terminal device. When the product is sold in this way, the sales record and the record relating to the sales process are first cumulatively written as journal data in the data storage device in the POS terminal device. This journal data replaces journal records printed and recorded by conventional journal printers, and cannot be rewritten to prove sales during tax processing. Product return processing, discount processing , Including all sales management data such as cancellation processing.

  The store server 4 is generally configured to receive the respective electronic journals in a lump after the operations of the POS terminal devices 1, 2, and 3 are completed. However, the store server 4 may receive electronic journal data for each transaction (product sales process) in each POS terminal device. As shown in FIG. 1, the electronic journal data of each POS terminal device accumulated in the store server 4 is transmitted to the head office server 31 via a dedicated line or a communication line such as the Internet.

  The headquarter server 31 stores electronic journal data in POS terminal devices in all stores under the control of the program / data storage device (hard disk device) 24, and a predetermined time or predetermined data input to the store server The above-described censorship and verification are performed. Predetermined data input for starting censorship and verification is performed by authenticating a preset password or password.

  In this way, the present invention provides the headquarter server 31, a plurality of store servers 4 connected to the headquarter server 31 via the communication line 40, and products connected to the store servers 4 via the indoor communication line or In a POS system composed of a plurality of POS terminal devices that perform service sales processing, the headquarters server 31 detects and warns of fraudulent acts by operators of POS terminal devices in all the stores in charge.

  As described above, the operator monitoring device 30 is provided in the headquarter server 31, and a) a plurality of operation patterns by an operator having a possibility of fraud in the POS terminal device 1 and processing in the plurality of operation patterns. Storage means for setting a threshold value of data and storing the threshold value; b) censor means for censoring the contents of the electronic journal indicating the sales processing data of the POS terminal device; and c) sales processing data in the electronic journal. Collating means for collating whether or not any of the plurality of preset operation patterns is included; and d) whether each processing data related to the operation pattern extracted by the collation reaches the threshold value. E) output a warning message for the sales process related to the operation pattern that has reached the threshold value; And means is provided with a respective means.

FIG. 3 shows a flowchart for explaining the outline of the control flow in the operator monitoring apparatus 30 of the present invention.
As shown in FIG. 3, the operator monitoring device 30 of the present invention is stored as one of the control programs in the program / data storage device 24 in the headquarter server 31. Then, the operator monitoring device 30 sets a plurality of operation patterns by an operator having a possibility of fraud in the POS terminal device and thresholds of processing data in the plurality of operation patterns, and stores the threshold values (S10). ). Then, the electronic journal data relating to the merchandise sales processing processed in each POS terminal device 1, 2, 3 is received from the store server 4 of each store having jurisdiction and stored in the data storage device (disk device) 24 (S11). .

  Next, in the headquarter server 31, when an input operation for starting a browsing process for the operator monitoring process is performed (S12), a password, a password, or the like is confirmed in order to confirm that the administrator has the authority. Confirmation is made (S13), and if the administrator is a valid administrator, the contents of the electronic journal indicating the sales processing data of the POS terminal device are censored (S14).

  Next, it is checked whether or not any of a plurality of preset operation patterns is included in the sales processing data in the electronic journal (S15), and the operation pattern extracted by this check is related to It is determined whether each processing data has reached the threshold (S16). If there is a sales process related to the operation pattern that has reached the set threshold value, a warning message for informing the sales process is created (S17) and displayed on the display device (16 in FIG. 2). Or, it is printed out to the printing device (17 in FIG. 2).

  Here, the plurality of operation patterns by the operator having the possibility of fraud stored in step 10 (S10) are, for example, “Cancel” key, “Cancel” key, “Selling price change” key, “Discount” ”Key,“ grant point ”key,“ previous erase ”key,“ designated erase ”key,“ trade-in ”key, or“ coupon ”key. The threshold value is the number of occurrences of the pattern, the frequency of occurrence of the pattern, the handling amount of sales data, and / or the handling amount ratio of sales data for each key operation pattern including the possibility of fraud. It is specified.

  Hereinafter, a specific example of verifying the presence / absence of a key operation pattern related to an unauthorized sales process included in the unauthorized monitoring software will be described.

FIG. 4 is an explanatory diagram (part 1) in which a threshold for an amount of money that requires a warning of a key operation pattern related to a sales process having a possibility of an illegal key operation is set.
The “cancel” key has a generated amount of ¥ 50,000, the “canceled” key has a generated amount of ¥ 40,000, the “sell price change” key has a generated amount of ¥ 20,000, and the “immediate discount” key The generated amount is ¥ 20,000, the “immediately correct” key is generated ¥ 50,000, the “specified correction” key is generated ¥ 50,000, and the “granted point” key is generated ¥¥ At 7,000, the “trade-in” key has a generated amount of ¥ 30,000, and the “coupon” key has a generated amount of ¥ 10,000, and the warning data is output respectively.

FIG. 5 is an explanatory diagram showing an example (part 1) of a key operation pattern related to sales processing to be monitored for fraud.
In FIG. 5 (a), the product prices of the three products ("Camera A", "Camera B", and "Camera C") are all entered with a negative sign, and the sum of them is It has reached ¥ -50,000. Further, in FIG. 5B, the “Cancel” key is operated immediately after the sales data of the two items (“Camera A” and “Camera B”) whose subtotal is ¥ 40,000 is input.

  In FIG. 5 (c), immediately after the sales data of the two items ("Camera A" and "Camera B") whose prices are ¥ 10,000 each, the product prices are changed from ¥ 30,000. A “sales price change” key indicating that the price has been changed to ¥ 10,000 is operated. Further, in FIG. 5D, immediately after the sales data of the two items (“camera A” and “camera B”) whose subtotal is ¥ 40,000 is input, the “discount” ”Key is operated.

  In FIG. 5 (e), the “-immediate correction” key of −−50,000 is operated immediately after the sales data of one item (“camera B”) whose price is ¥ 50,000 is input. Further, in FIG. 5F, immediately after the sales data of one item (“Camera B”) whose price is ¥ 50,000 and the sales data of the other one item (“Camera A”) are input. In addition, the “specified correction” key of ¥ −50,000 for specifying and correcting the sales data of the first one product (“camera B”) is operated.

  In FIG. 5 (g), after sales data of three items ("Camera A", "Camera B", and "Camera C") with a subtotal of ¥ 70,000 is input and the total is output. Then, the “point” key is operated and 7,000 points are given to the customer. Further, in FIG. 5H, immediately after the sales data of one item (“camera A”) with a price of ¥ 30,000 is input, the “trade-in” key is operated, and the price is ¥ 30,000. The product ("Camera A") is traded in.

  In FIG. 5 (i), immediately after the sales data of one item (“Camera A”) whose price is ¥ 10,000 is input, the “coupon” key is operated, and the price is ¥ 10,000. I have decided to settle the minutes with a coupon.

  All of these sales data is caught by the regulation based on the above-mentioned threshold value (FIG. 4), and thus all the above-mentioned warning data is output. However, it is also possible to configure so that warning data is output when the restriction occurs twice.

FIG. 6 is an explanatory diagram (part 2) in which a threshold for the amount of money that requires a warning of a key operation pattern related to a sales process having the possibility of an illegal key operation is set.
FIG. 6 shows that the generated amount is ¥ 10,000 or the generated amount ratio is 25 (%) as the threshold for the selling price changing process in which the “sell price changed” key is operated.

FIG. 7 shows an example (part 2) of a key operation pattern related to sales processing to be monitored for fraud.
In FIG. 7A, for a certain (customer ID: 153218), the sales data of one item (“Camera A”) is input and the next one item (the price is ¥ 20,000) ( Immediately after the input of sales data for “Camera B”), the “Sales Price Change” key indicating that the product price of the immediately preceding product (“Camera B”) has been changed from ¥ 30,000 to ¥ 20,000. Is being operated. Further, in FIG. 7B, for the same customer (customer ID: 153218), the sales data of (“Camera A”) is input, and one item (¥ 1,000 for the next price) Immediately after the sales data of “Camera B”) is input, the “Sales Price Change” key indicating that the product price of the immediately preceding product (“Camera B”) has been changed from ¥ 3,000 to ¥ 1,000 is operated. (In this case, the price change rate exceeds the threshold of 25%).

FIG. 8 is an explanatory diagram (part 3) in which a threshold for the amount of money that requires a warning of a key operation pattern related to a sales process having a possibility of an illegal key operation is set.
In FIG. 8, as the threshold values when the “Cancel” key is operated, the number of occurrences is 25 [times], the amount of occurrence is ¥ 500,000, the frequency of occurrence is 50 [%], and the ratio of the amount of occurrence is 50 [%]. Is stipulated. In addition, as a threshold when the “Cancel” key is operated, the number of occurrences is 50 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrences is 50 [%], and the ratio of the amount of occurrence is 50 [%]. Is stipulated. Further, as threshold values when the “sell price change” key is operated, the number of occurrences is 100 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrence is 50 [%], and the ratio of the amount of occurrence is 50 [%]. ] Is stipulated.

  Also, as threshold values when the “immediate discount” key is operated, the number of occurrences is 100 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrence is 50 [%], and the amount of occurrence is 50 [%]. %]. In addition, as the threshold when the “immediate correction” key is operated, the number of occurrences is 100 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrence is 50 [%], and the ratio of the amount of occurrence is 50 [%]. ] Is stipulated. Furthermore, as threshold values when the “specified correction” key is operated, the number of occurrences is 100 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrences is 50 [%], and the ratio of the amount of occurrence is 50 [%]. ]. Then, as the threshold when the “granting point” key is operated, the number of occurrences is 10 [times], the amount of occurrence is ¥ 200,000, the frequency of occurrence is 20 [%], and the amount of occurrence is 20 [%]. To do. In addition, as a threshold when the “trade-in” key is operated, the number of occurrences is 100 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrence is 50 [%], and the ratio of the amount of occurrence is 50 [%]. Is stipulated. Furthermore, as a threshold when the “coupon” key is operated, the number of occurrences is 100 [times], the amount of occurrence is ¥ 1,000,000, the frequency of occurrence is 50 [%], and the ratio of the amount of occurrence is 50 [%]. Is stipulated.

FIG. 9 is an explanatory diagram illustrating an example (part 3) of the key operation pattern related to the sales process to be illegally monitored.
In FIG. 9A, the sales data of one item (“Camera A”) whose price is ¥ 10,000 is input, and the next one item (“Camera B” whose price is ¥ 10,000). ”) Immediately after the sales data is input, the“ sell price change ”key indicating that the product price of the immediately preceding product (“ Camera B ”) has been changed from ¥ 30,000 to ¥ 10,000 is operated. ing. Further, in FIG. 9B, the sales data of one item (“Camera C”) whose price is ¥ 10,000 and the next one item (““ Camera C ”) whose price is ¥ 30,000 (“ Immediately after the input of sales data of “Camera D”), a “discount” key is operated, which indicates that the product price of the last one product (“Camera D”) has been reduced by ¥ 20,000.

FIG. 10 shows a specific example of a report output of a POS terminal device operator (a cashier person) extracted from the collected electronic journal data.
In the report output illustrated in FIG. 10, the number of transactions, the transaction amount, the number of occurrences, the transaction amount, the frequency of occurrences, and the transaction amount ratio are reported for each type of the operated specific key (however, FIG. 10 In the above, specific numerical values are omitted).

  Here, the types of specific keys are “sales”, “cancellation”, “cancel”, “sales price change”, “discount”, “grant point”, “immediately erased”, “designated erase”, “trading”, And “coupon”.

  Such a report output is generated at a predetermined cycle or a predetermined timing, and is displayed by a predetermined operation. Such a report output can be printed out by the receipt printing device 17 shown in FIG. 2 or can be displayed and output together with the printing output on an operator display device constituting the display device 16.

  As described above in detail, the present invention relates to a headquarter server, a plurality of store servers connected to the headquarter server via communication lines, and a product or service connected to each store server via an indoor communication line. In a POS system composed of a plurality of POS terminal devices that perform sales processing, the headquarter server is configured to store a plurality of operation patterns by an operator having a possibility of fraud in the POS terminal devices and processing data in the plurality of operation patterns. A threshold value is set and the threshold value is stored. Then, the electronic journal indicating the sales processing data in each POS terminal device having jurisdiction from the plurality of store servers is received, the contents of the received electronic journal are censored, and set in advance in the sales processing data in the electronic journal It is verified whether any one of the plurality of operation patterns is included. Then, it is determined whether or not each processing data related to the operation pattern extracted by this collation has reached the threshold value, and a warning message is output for the sales processing related to the operation pattern that has reached the threshold value. It is.

  Here, the key operation patterns including the possibility of fraud include the “Cancel” key, “Cancel” key, “Sell Price Change” key, “Discount” key, “Grant Point” key, and “Last Delete” key. Key operation includes any one or more of a key, “designated delete” key, “trade-in” key, or “coupon” key, and the threshold value includes a key operation pattern. For each, the number of occurrences of the pattern, the frequency of occurrence of the pattern, the handling amount of sales data, and / or the percentage of handling amount of sales data are defined.

  As a result, the operator monitoring device according to the present invention can collectively search the headquarters server 31 for key operation patterns related to suspicious sales processing by the operators of the POS terminal devices in all the stores under its jurisdiction and generate warnings thereof. is there.

  The present invention includes a headquarter server, a plurality of store servers connected to the headquarter server via a communication line, and a plurality of POSs that perform sales processing of products or services connected to each store server via an indoor communication line. The present invention relates to an operator monitoring system that detects and warns an illegal act by an operator of the POS terminal device in each store in a POS system constituted by a terminal device, and has industrial applicability.

1 schematically shows the overall configuration of a POS system to which an operator monitoring apparatus of the present invention is applied. An example of the technical configuration of the headquarter server shown in FIG. 1 is shown. The flowchart for demonstrating the outline | summary of the control flow in the operator monitoring apparatus 30 of this invention is shown. FIG. 6 is an explanatory diagram (part 1) in which a threshold for an amount of money that requires a warning of a key operation pattern related to a sales process having a possibility of illegal key operation in the operator monitoring apparatus is set. An example (part 1) of a key operation pattern related to a sales process to be illegally monitored in the operator monitoring apparatus is shown. FIG. 9 shows an explanatory diagram (part 2) in which a threshold of an amount of money that requires a warning of a key operation pattern related to a sales process having a possibility of an illegal key operation is set in the operator monitoring apparatus. An example (part 2) of a key operation pattern related to sales processing that is subject to fraud monitoring in this operator monitoring apparatus is shown. FIG. 9 shows an explanatory diagram (No. 3) in which a threshold for an amount of money that requires a warning of a key operation pattern related to a sales process having a possibility of illegal key operation is set in the operator monitoring apparatus. An example (No. 3) of a key operation pattern related to sales processing to be illegally monitored in the operator monitoring apparatus will be shown. The specific example of the report output of the POS terminal device operator (cash register person in charge) extracted from the collected electronic journal data is shown. A first example in which an unauthorized sales process is performed in a POS terminal device will be described. A second example in which unauthorized sales processing is performed in the POS terminal device will be described.

Explanation of symbols

1: POS terminal device 4: Store server 15: Data input means 16: Display device 17: Printing device 19: ROM
20: RAM
23: CPU (central processing unit)
24: Program / data storage device 25: Various control programs 26: Operator monitoring program 28: Communication means 30: Operator monitoring program 31: Head office server 32: Core business server 33: Weekly distribution server 40: Router constituting the communication means 28

Claims (10)

A headquarters server, a plurality of store servers connected to the headquarters server via a communication line, and a plurality of POS terminal devices for selling products or services connected to each store server via an indoor communication line In the configured POS system, a monitoring device that detects and warns of fraud by an operator of the POS terminal device in each store,
The headquarters server
Storage means for setting a plurality of operation patterns by an operator having a possibility of fraud in the POS terminal device and setting threshold values of processing data in the plurality of operation patterns and storing the threshold values;
Communication means for receiving an electronic journal indicating sales processing data in each POS terminal device under jurisdiction from the plurality of store servers;
Censor means for censoring the contents of the electronic journal;
Collating means for collating whether or not any of the preset operation patterns is included in the sales process data in the electronic journal;
Determination means for determining whether each processing data related to the operation pattern extracted by the collation has reached the threshold;
An output means for outputting a warning message regarding the sales process related to the operation pattern that has reached the threshold;
An operator monitoring apparatus comprising the means described above.   Key operation patterns including the possibility of fraud include “cancel” key, “cancel” key, “sell price change” key, “discount” key, “granting point” key, “last erase” key, “ The operator monitoring apparatus according to claim 1, wherein one or a plurality of key operations of a “designated delete” key, a “trade-in” key, or a “coupon” key are included.   The threshold value defines the number of occurrences of the pattern, the frequency of occurrence of the pattern, the handling amount of sales data, and / or the handling amount ratio of sales data for each key operation pattern including the possibility of fraud. The operator monitoring device according to claim 1, wherein the operator monitoring device is a device.   The headquarter server is configured to collectively receive the electronic journal data of each POS terminal device integrated from each of the store servers after the end of the operation of the POS terminal device of each store. Item 2. The operator monitoring device according to Item 1.   The operator monitoring device according to claim 1, wherein the headquarter server is configured to receive the electronic journal data via the store server for each transaction by the POS terminal device in each store.   The operator monitoring apparatus according to claim 4 or 5, wherein the censoring by the censoring unit and the collation by the collating unit are performed by a preset time or predetermined data input to the store server.   The operator monitoring apparatus according to claim 6, wherein the predetermined data input for starting the collation includes a preset password or password. A headquarters server, a plurality of store servers connected to the headquarters server via a communication line, and a plurality of POS terminal devices for selling products or services connected to each store server via an indoor communication line In the configured POS system, a monitoring method for detecting and warning an illegal act by an operator of the POS terminal device in each store,
In the headquarters server,
Setting a plurality of operation patterns by an operator having a possibility of fraud in the POS terminal device and setting a threshold value of processing data in the plurality of operation patterns, and storing the threshold value;
Receiving an electronic journal indicating sales processing data in each POS terminal device having jurisdiction from the plurality of store servers;
Censoring the contents of the electronic journal;
Checking whether or not any of the preset operation patterns is included in the sales process data in the electronic journal;
Determining whether each processing data related to the operation pattern extracted by the collation has reached the threshold;
A step output means for outputting a warning message for the sales process related to the operation pattern that has reached the threshold;
An operator monitoring method comprising the steps of:   Key operation patterns including the possibility of fraud include “cancel” key, “cancel” key, “sell price change” key, “discount” key, “granting point” key, “last erase” key, “ The operator monitoring method according to claim 8, wherein one or more key operations of any one of a “designated delete” key, a “trade-in” key, and a “coupon” key are included.   The threshold value defines the number of occurrences of the pattern, the frequency of occurrence of the pattern, the handling amount of sales data, and / or the handling amount ratio of sales data for each key operation pattern including the possibility of fraud. The operator monitoring method according to claim 8 or 9, wherein the method is an operator monitoring method.

Images