JP2008262258A - Misoperation preventing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a misoperation in using a computer terminal. <P>SOLUTION: The misoperation prevention system includes: an information receiving part for acquiring at least user identification information and PC identification information of a client terminal from the client terminal to which a user logs in; a user information storage part for storing at least the PC identification information of the client terminal to be normally used by the user through association with the user identification information; a determining part for extracting the PC identification information of the client terminal to be normally used by the user from in the user information storage part based on the acquired user information identification information, comparing the extracted PC identification information with the acquired PC identification information, and then, determining whether the user is using the client terminal to be normally used; and a function limit indicating part for transmitting a predetermined function limit indication to the client terminal to which the user logs in when it is determined that the user is not using the client terminal to be normally used. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

The present invention relates to an erroneous operation prevention system for preventing an erroneous operation when using a computer terminal.

  When a user performs an operation in an organization such as a company, the computer terminal that the user normally uses is often set with an environment such as a screen layout or a shortcut key so that the user can easily use the computer terminal. However, a computer terminal that is not normally used may be used for some reason, for example, due to a failure of a computer terminal that is normally used.

  In this case, since it is different from its own environment setting, the operation of the computer terminal cannot be performed as usual, so that the business efficiency is lowered or an erroneous operation is induced.

  In order to prevent such a situation, in the following patent document, the environment setting of the user's computer terminal is stored in a predetermined server or the like, and the user uses a computer terminal that is different from the usual one. A system is disclosed that enables work under the same environment settings as usual.

JP 2004-341866 A JP 2003-263325 A JP 2001-34580 A JP-A-11-143828

  By using the above-described conventional system, regardless of which computer terminal the user uses, the computer terminal can be used with the same environment setting as usual, which is highly convenient for the user. However, such reflection of environment settings is limited only to environment settings related to software, and cannot be applied to differences depending on hardware such as, for example, different input devices such as a keyboard and a mouse. For this reason, even if the environment displayed on the screen is the same as usual, there is a possibility that an erroneous operation is committed due to a difference in hardware such as a keyboard and a mouse for operating the environment.

  In addition, since the user's environment settings are stored in a predetermined server and reflected on each computer terminal, the user's environment settings, for example, which software icons are placed on the screen and what shortcut functions are set. It is necessary to register to the server. Furthermore, since the information on the user's environment setting is acquired from the server at the computer terminal where the user has logged in, the user's environment setting is stored in various computer terminals even temporarily, which is not preferable in terms of security.

  In view of the above problems, the present inventors have invented an erroneous operation prevention system that can reduce erroneous operations after solving the above problems when using a computer terminal different from the computer terminal that the user normally uses. did.

  The invention of claim 1 is an erroneous operation prevention system for preventing an erroneous operation at a client terminal used by a user, wherein the erroneous operation prevention system receives at least user identification information and a PC of the client terminal from the client terminal to which the user has logged in. Based on an information receiving unit that acquires identification information, a user information storage unit that stores at least PC identification information of a client terminal normally used by the user in association with the user identification information, and the acquired user identification information And extracting the PC identification information of the client terminal normally used by the user stored in the user information storage unit, and comparing the extracted PC identification information with the acquired PC identification information, so that the user normally uses the PC identification information. A determination unit that determines whether a client terminal is used, and the user normally If it is determined not using a client terminal to use a erroneous operation preventing system having a function restriction instruction section for instructing the predetermined function limitation, a.

  By configuring as in the present invention, it is possible to determine whether or not the client terminal to which the user has logged in is a client terminal that is normally used. When it can be determined that the client terminal is not normally used, if the user uses the client terminal as it is, a possibility of an erroneous operation is predicted because it is different from the normal use environment. Therefore, it is possible to control the function by transmitting a function restriction instruction so that the predetermined function cannot be used in the client terminal. Thereby, even if there is a difference in the usage environment depending on the hardware as in the prior art, it can be dealt with. In addition, it is possible to perform processing without registering the normal use environment of the user in the server, and the system has no problem with security.

  The invention according to claim 2 is an operation error prevention system for preventing an operation error at a client terminal used by a user, wherein the operation error prevention system includes at least user identification information from the client terminal logged in by the user, An information receiving unit that acquires PC identification information and device information of the client terminal, and at least PC identification information of the client terminal that is normally used by the user in association with the user identification information, and device information of the client terminal A user information storage unit that stores the information, and based on the acquired user identification information, the PC identification information of the client terminal normally used by the user stored in the user information storage unit is extracted, and the extracted PC identification information Compared with the acquired PC identification information, the user normally uses A determination unit that determines whether a client terminal is used, and a client terminal device that is normally used by the user and that is stored in the user information storage unit when it is determined that the client terminal that the user normally uses is not used Information is extracted, the difference between the extracted device information and the acquired device information is determined to determine a difference in use environment, and a function restriction corresponding to the determined difference in use environment is specified, and then the function restriction A function restriction instruction unit that transmits the instruction to the client terminal to which the user has logged in.

  By configuring as in the present invention, the same technical effects as those of the above-described invention can be obtained. Furthermore, since the function restriction is changed based on the difference between the device information of the client terminal used by the user and the device information of the normally used client terminal, the function restriction can be adapted more flexibly.

  The invention of claim 3 is an erroneous operation prevention system for preventing an erroneous operation at a client terminal used by a user, wherein the erroneous operation prevention system receives at least user identification information and an apparatus of the client terminal from the client terminal to which the user has logged in. Based on the information receiving unit that acquires information, the user information storage unit that stores at least the device information of the client terminal that the user normally uses in association with the user identification information, and the acquired user identification information, By extracting the device information of the client terminal normally used by the user stored in the user information storage unit and comparing the extracted device information with the acquired device information, the difference from the client terminal normally used by the user is determined. A determination unit for determining a client terminal that the user normally uses; After determining the difference with the currently used client terminal, if there is a predetermined difference, the client terminal to which the user logged in the function restriction instruction after specifying the function restriction according to the difference And a function restriction instructing unit for transmitting to the erroneous operation preventing system.

  By configuring as in the present invention, the same technical effects as those of the above-described invention can be obtained. Further, since the determination is made based on the device information without using the PC identification information of the client terminal, simple processing can be realized without specifying the PC identification information each time.

  In the invention of claim 4, when a plurality of PC identification information of the client terminal normally used by the user is stored in the user information storage unit, the determination unit extracts the acquired PC identification information and Compare with any of a plurality of PC identification information, compare with the PC identification information of the most recently used client terminal, or match the PC identification information of the client terminal that has been used for the longest time It is an erroneous operation prevention system that is determined by any one of the methods.

  There are various methods for determining whether the client terminal to which the user has logged in is a client terminal that is normally used, but it is preferable to adopt any method of the present invention.

  According to a fifth aspect of the present invention, there is provided a management server for storing at least PC identification information of a client terminal normally used by a user in a storage device in association with user identification information, from the client terminal logged in by the user, at least user identification information And the information receiving unit for acquiring the PC identification information of the client terminal, based on the acquired user identification information, the PC identification information of the client terminal normally used by the user stored in the storage device is extracted and extracted. A determination unit that determines whether the user is using a client terminal that is normally used by comparing the PC identification information with the acquired PC identification information, and determines that the client terminal that is normally used by the user is not being used If the client terminal is logged in, the predetermined function restriction instruction is sent to the client terminal. A erroneous operation prevention programs to function as a function restriction instruction unit, to be transmitted to.

  According to a sixth aspect of the present invention, the user logs in a management server that stores at least PC identification information of the client terminal normally used by the user and device information of the client terminal in a storage device in association with the user identification information. An information receiving unit that acquires at least user identification information, PC identification information of the client terminal, and device information of the client terminal from the client terminal stored in the storage device based on the acquired user identification information The PC identification information of the client terminal normally used by the user is extracted, and by comparing the extracted PC identification information with the acquired PC identification information, it is determined whether the user uses the client terminal normally used. If the determination unit determines that the user does not use a client terminal that is normally used, The device information of the client terminal normally used by the user stored in the storage device is extracted, and the difference between the usage environments is determined by comparing the extracted device information with the acquired device information. The program is an erroneous operation prevention program that functions as a function restriction instructing unit that transmits a function restriction instruction to a client terminal to which the user has logged in after specifying a function restriction according to a difference.

  According to a seventh aspect of the present invention, there is provided a management server that stores at least device information of a client terminal normally used by a user in a storage device in association with user identification information, and at least user identification information from the client terminal to which the user has logged in. An information receiving unit for acquiring the device information of the client terminal, based on the acquired user identification information, extracting device information of the client terminal normally used by the user stored in the storage device; A determination unit that determines a difference between the client terminal normally used by the user by comparing the acquired device information, and determines a difference between the client terminal normally used by the user and the client terminal currently used Later, if there is a certain difference, specify the function restriction according to the difference, and then check the function system. Instructions to, a wrong operation preventing program to function as a function restriction instruction unit, to be transmitted to the client terminal the user logs in.

  By reading each program of these inventions into the management server and executing the program, the above-described erroneous operation prevention system can be realized. This makes it possible to obtain the same technical effects as those of the above-described inventions.

By using the present invention, it is possible to prevent erroneous operation even when there is a difference in environment settings depending on hardware. In addition, it is not necessary to register the user's environment settings in the server in advance, and information on the user's environment settings is not stored in the computer terminal used by the user. This makes it possible to provide an erroneous operation prevention system that can solve the conventional problems.

  FIG. 1 is a conceptual diagram of an entire operation preventing system 1 according to the present invention, and FIG. 2 is a conceptual diagram of a system configuration.

  The erroneous operation prevention system 1 includes a client terminal 3 used by a user and a management server 2 that manages each client terminal 3. An example of the hardware configuration of the management server 2 is shown in FIG. The management server 2 includes an arithmetic device 20 such as a CPU that executes arithmetic processing of a program, a storage device 21 such as a RAM and a hard disk that stores information, and processing results of the arithmetic device 20 and information to be stored, such as the Internet and a LAN. And at least a communication device 24 that transmits and receives via a network. Each function (each unit) realized on the computer is executed when a unit (program, module, etc.) for executing the process is read into the arithmetic unit 20. When using the information stored in the storage device 21 in the processing, each function reads the corresponding information from the storage device 21 and uses the read information for processing in the arithmetic device 20 as appropriate. The management server 23 may include a display device 22 such as a display and an input device 23 such as a keyboard, a mouse, and a numeric keypad. Further, the management server 2 may have its functions distributed in a plurality of computer terminals or servers.

  Each means in the present invention is only logically distinguished in function, and may be physically or practically the same area. The data storage format in the storage unit may be a database, a data file, or another storage format.

  The management server 2 includes an information reception unit 4, a user information storage unit 5, a determination unit 6, and a function restriction instruction unit 7.

  The information receiving unit 4 receives at least the user ID used when logging in and the identification information (PC identification information) of the client terminal 3 logged in by the user from the client terminal 3 logged in by the user. Information received by the information receiving unit 4 may be received at the same timing or may be received at different timings.

  The user information storage unit 5 stores information related to users who use each client terminal 3 and information related to the client terminals 3 used by the user. For example, the user ID, the user name, the PC identification information (computer name, IP address, MAC address, etc.) of the client terminal 3 mainly used by the user, and the hardware configuration (keyboard type, mouse) of the client terminal 3 having the PC identification information Information on the presence / absence, display type, presence / absence of an external storage device, etc.) and software configuration (OS, type of Kana-Kanji input system, installed software, software settings, etc.). The number of client terminals 3 used mainly by the user may be one, or a plurality of client terminals 3 may be set. An example of the user information storage unit 5 is schematically shown in FIG. Software setting values are, for example, kana-kanji input systems, information indicating the distinction between kana input and romaji input, the distinction between the ATOK method and the IME method, and icon display in software that can change the screen layout such as Explorer There is information indicating the setting of list display (list display).

  FIG. 5 shows a case where the user ID, the PC identification information, and the device information are associated with each other in the user information storage unit 5, but the user ID and the PC identification information, the PC identification information and the device information, etc. In this way, PC identification information and device information may be associated with a user ID using a plurality of tables.

  The determination unit 6 searches the user information storage unit 5 based on the user ID received by the information reception unit 4 and the PC identification information, so that the client terminal 3 that is normally used by the client terminal 3 to which the user has logged in. It is determined whether it is.

  When the determining unit 6 determines that the client terminal 3 to which the user has logged in is a client terminal 3 other than the client terminal 3 that is normally used, the function restriction instructing unit 7 (the client terminal to which the user has logged in) In response to 3), a predetermined function restriction instruction is transmitted. There are various types of function restriction instructions, such as file copy, delete, move, and edit restrictions.

  The client terminal 3 has a function restriction execution unit (not shown) for executing the function restriction in the client terminal 3 by receiving the function restriction instruction from the function restriction instruction unit 7. The function restriction execution unit, for example, prevents the user from selecting file deletion or rejects the execution when the user selects file deletion. In addition, when the user inputs the function-restricted function from the input device 23 and the client terminal 3 accepts the input, the information indicating that the function that is restricted is about to be used is given to a predetermined administrator. For example, it may be configured to notify by e-mail or the like. Other function restriction instructions include application use restrictions, use of external storage devices, and access to file servers and mail servers. In the case of a control instruction for prohibiting access to the file server or the mail server, the function restriction instructing unit 7 may transmit it to the client terminal 3, or transmit it to the file server or mail server, The file server or the mail server that acquired the password may be configured to reject access from the client terminal 3.

  Next, an example of the processing process of the erroneous operation prevention system 1 of the present invention will be described with reference to the flowchart of FIG. 4 and the conceptual diagrams of FIGS.

  The user logs in to the client terminal 3 by a predetermined method by operating the input device 23 of the client terminal 3 installed in a company or the like (S100). For example, a user ID (user identification information: “S1234”, for example) and a password are input from the input device 23.

  If the login is successful, the client terminal 3 transmits the user ID (for example, “S1234”) and the PC identification information of the client terminal 3 (for example, “SKY123456”) to the management server 2. The user ID and the PC identification information are acquired by the information receiving unit 4 of the management server 2 (S110).

  When the user ID and the PC identification information are acquired from the client terminal 3 to which the user has logged in as described above, the determination unit 6 uses the client information stored in the user information storage unit 5 and the client terminal 3 to which the user has logged in. Is the client terminal 3 that the user normally uses (S120).

  That is, by comparing the PC identification information acquired by the information receiving unit 4 with the PC identification information extracted from the user information storage unit 5, it is determined whether the client terminal 3 is normally used (S130).

  In the above example, since the acquired user ID is “S1234”, based on this, the PC identification information of the user ID “S1234” is retrieved from the user information storage unit 5 and extracted. Then, since the stored PC identification information is “SKY123456” when the user information storage unit 5 is shown in FIG. 5, it is extracted. Then, when the PC identification information “SKY123456” acquired from the client terminal 3 by the information receiving unit 4 in S110 and the PC identification information “SKY123456” extracted from the user information storage unit 5 are compared, they match. The unit 6 can determine that the client terminal 3 to which the user has logged in is the client terminal 3 that is normally used. In this case, the function restriction instruction is not transmitted from the management server 2 to the client terminal 3, and the user can use the client terminal 3 as it is.

  On the other hand, if the information reception unit 4 has acquired the user ID “S1234” and the PC identification information “SKY234567” in S110, the information reception unit 4 acquires the PC identification information “SKY234567” acquired from the client terminal 3 and the user information. When the PC identification information “SKY123456” extracted from the storage unit 5 is compared, they do not match, and therefore the determination unit 6 determines that the client terminal 3 to which the user has logged in is not a client terminal 3 that is not normally used. Can be determined.

  In the determination process in the determination unit 6 described above, when a plurality of pieces of PC identification information are associated with one user ID in the user information storage unit 5, it may match one of the PC identification information. For example, it may be determined that the client terminal 3 is normally used. Alternatively, when the user information storage unit 5 stores the date and time when the user logged in to the client terminal 3 (client terminal 3 stored in the user information storage unit 5), the order of login, and the like (this Date and time, the date and time when the information receiving unit 4 acquired information such as a user ID from the client terminal 3, and the date and time when login processing was performed on the client terminal 3, and the PC identification of the most recently used client terminal 3 It may be determined whether it matches the information.

  Furthermore, when the usage time in the client terminal 3 to which the user has logged in is stored in the user information storage unit 5, it may be configured to compare with the PC identification information of the client terminal 3 having the longest usage time.

  As a result of the determination in the determination unit 6 as described above, when it is determined that the client terminal 3 to which the user has logged in is not the client terminal 3 that is normally used, the function restriction instruction unit 7 On the other hand, a restriction instruction that prevents execution of the predetermined function is transmitted (S140). For example, an instruction to prevent processing such as copying, deleting, and moving a file is transmitted to the client terminal 3.

  By accepting this restriction instruction by the function restriction execution unit of the client terminal 3, a function restriction process is executed in the client terminal 3 such that the designated function cannot be executed (S150).

  Next, a second embodiment of the erroneous operation prevention system 1 of the present invention will be described. In this embodiment, when it is determined that the client terminal 3 to which the user has logged in is other than the client terminal 3 that is normally used, the function restriction instructing unit 7 further uses the client terminal that the user normally uses. 3 is compared with the usage environment of the client terminal 3 to which the user has logged in this time, and the function restriction is changed accordingly. An example of the processing process in the second embodiment is shown in the flowchart of FIG.

  The user logs in to the client terminal 3 by a predetermined method by operating the input device 23 of the client terminal 3 installed in a company or the like (S200). For example, a user ID (user identification information: “S1234”, for example) and a password are input from the input device 23.

  If the login is successful, the client terminal 3 has the user ID (for example, “S1234”), the PC identification information of the client terminal 3 (for example, “SKY123456”), and the device information of the client terminal 3 (hardware configuration (whether there is a mouse) Keyboard type, display device type, monitor size, etc.) and software configuration (OS type, Kana-Kanji input system type, installed software type, etc.) are transmitted to the management server 2. This user ID and The PC identification information and device information are acquired by the information receiving unit 4 of the management server 2 (S210).

  When the user ID, the PC identification information, and the device information are acquired from the client terminal 3 where the user has logged in in this way, the determination unit 6 logs in based on the user information stored in the user information storage unit 5 and the like. It is determined whether the client terminal 3 is the client terminal 3 that is normally used by the user (S220).

  That is, it is determined whether the client terminal 3 is normally used by comparing the PC identification information acquired by the information receiving unit 4 with the PC identification information extracted from the user information storage unit 5 (S230).

  In the above example, since the acquired user ID is “S1234”, based on this, the PC identification information of the user ID “S1234” is retrieved from the user information storage unit 5 and extracted. Then, since the stored PC identification information is “SKY123456” when the user information storage unit 5 is shown in FIG. 5, it is extracted. Then, when the PC identification information “SKY123456” acquired from the client terminal 3 by the information receiving unit 4 in S110 and the PC identification information “SKY123456” extracted from the user information storage unit 5 are compared, they match. The unit 6 can determine that the client terminal 3 to which the user has logged in is the client terminal 3 that is normally used. In this case, the function restriction instruction is not transmitted from the management server 2 to the client terminal 3, and the user can use the client terminal 3 as it is.

  On the other hand, if the information reception unit 4 has acquired the user ID “S1234” and the PC identification information “SKY234567” in S210, the information reception unit 4 acquires the PC identification information “SKY234567” acquired from the client terminal 3 and the user information. When the PC identification information “SKY123456” extracted from the storage unit 5 is compared, they do not match, and therefore the determination unit 6 determines that the client terminal 3 to which the user has logged in is not a client terminal 3 that is not normally used. Can be determined.

  In the determination process in the determination unit 6 described above, when a plurality of pieces of PC identification information are associated with one user ID in the user information storage unit 5, various determination methods similar to those in the first embodiment are used. I can do it.

  As a result of the determination in the determination unit 6 as described above, when it is determined that the client terminal 3 to which the user has logged in is not the client terminal 3 that is normally used, the function restriction instruction unit 7 uses the information reception unit 4 A difference between the device information of the client terminal 3 acquired from the terminal 3 and the device information of the client terminal 3 normally used by the user stored in the user information storage unit 5 is determined. For example, in the hardware configuration, it is determined whether there is a mouse presence / absence difference, a keyboard difference, a display device 22 difference, etc., or a software configuration difference in OS type, Kana-Kanji input system type difference, installation, etc. It is determined whether there is a difference in the type of software that is present (S240).

  As described above, after the function restriction instruction unit 7 determines the difference in use environment between the normally used client terminal 3 and the client terminal 3 currently logged in, the function restriction instruction unit 7 It is determined whether to perform such function restriction (S250). This function restriction can be determined by referring to the use restriction determination table (FIG. 7) stored in advance in the function restriction instruction unit 7.

  For example, if only the monitor size is different between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in, the function restriction instructing unit 7 does not restrict file name change processing, but copying, moving, and deleting It is determined that the process is limited.

  When the client terminal 3 that is normally used and the client terminal 3 that is currently logged in have different keyboard layouts and monitor sizes, the function restriction instruction unit 7 performs copy, move, delete, and file name change. It is determined that processing is restricted. In the case where there are a plurality of differences, if a difference in use restriction for a certain function conflicts with a difference in which the use is not restricted, it is preferable to preferentially determine the use restriction.

  When the function restriction instruction unit 7 determines what kind of function restriction is to be performed in this way, the restriction instruction is transmitted to the client terminal 3 (S260). When only the monitor size is different between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in, it is determined that the copy, move, and delete processes are restricted. A restriction instruction for restricting the processing of movement and deletion is transmitted to the client terminal 3. In addition, when the keyboard layout and the monitor size are different between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in, it is determined that the processing of copy, move, delete, and file name change is restricted. Therefore, a restriction instruction for restricting the copy, move, delete, and file name change processing is transmitted to the client terminal 3.

  In this way, by receiving the restriction instruction transmitted from the management server 2 at the client terminal 3, the function restriction processing in accordance with the restriction instruction is executed by the function restriction execution unit of the client terminal 3 (S270).

  For example, when a restriction instruction for restricting copy, move, or delete processing is received from the management server 2, a restriction instruction that prevents the user from selecting copy, move, or delete processing at the client terminal 3, or execution thereof The client terminal 3 executes a restriction instruction to reject the request.

  As described above, by executing the processing in the second embodiment, it is possible to execute the function restriction according to the device of the client terminal 3 that is actually used by the user.

As an embodiment different from the above-described first and second embodiments, a third embodiment is further shown. In the present embodiment, the management server 2 acquires the user ID and device information from the client terminal 3, and determines whether to perform function restriction due to the difference in device information.
An example of the processing process of the erroneous operation prevention system 1 in this case will be described with reference to the flowchart of FIG. 8 and the conceptual diagrams of FIGS.

  The user logs in to the client terminal 3 by a predetermined method by operating the input device 23 of the client terminal 3 installed in a company or the like (S300). For example, a user ID (user identification information: “S1234”, for example) and a password are input from the input device 23.

  If the login is successful, the client terminal 3 displays the user ID (for example, “S1234”) and the device information (the hardware configuration (whether the mouse is present, the keyboard type, the display device 22 type, the monitor size), and the like. And the software configuration (type of OS, type of Kana-Kanji input system, type of installed software, etc.) are transmitted to the management server 2. The user ID and device information are transmitted to the information reception unit 4 of the management server 2. Obtain (S310).

  When the user ID and device information are acquired from the client terminal 3 where the user has logged in in this way, the client that the determination unit 6 normally uses based on the user information stored in the user information storage unit 5 It is determined whether there is a difference by extracting the device information of the terminal 3 and comparing the acquired device information with the extracted device information (S320, S330). This comparison determines whether the client terminal 3 to which the user has logged in is a client terminal 3 that is normally used or whether the client terminal 3 has a system configuration similar to that of the client terminal 3 that is normally used. Become.

  In the determination by the determination unit 6, for example, a difference in the presence / absence of a mouse, a difference in a keyboard, a difference in a display device 22, etc. in a hardware configuration is determined, a difference in OS type in a software configuration, a kana-kanji input system It is determined whether there is a difference in the type of software or a difference in the type of installed software.

  As described above, after determining the difference in use environment between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in in the determination unit 6, a predetermined difference (for example, a monitor with a different type of monitor) The function restriction instructing unit 7 determines what kind of function restriction is to be performed based on the difference (S340). This function restriction can be determined by referring to the use restriction determination table (FIG. 7) stored in advance in the function restriction instruction unit 7.

  For example, if only the monitor size is different between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in, the function restriction instructing unit 7 does not restrict file name change processing, but copying, moving, and deleting It is determined that the process is limited.

  When the client terminal 3 that is normally used and the client terminal 3 that is currently logged in have different keyboard layouts and monitor sizes, the function restriction instruction unit 7 performs copy, move, delete, and file name change. It is determined that processing is restricted. In the case where there are a plurality of differences, if a difference in use restriction for a certain function conflicts with a difference in which the use is not restricted, it is preferable to preferentially determine the use restriction.

  When the function restriction instruction unit 7 determines what kind of function restriction is to be performed in this way, the restriction instruction is transmitted to the client terminal 3 (S350). When only the monitor size is different between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in, it is determined that the copy, move, and delete processes are restricted. A restriction instruction for restricting the processing of movement and deletion is transmitted to the client terminal 3. In addition, when the keyboard layout and the monitor size are different between the client terminal 3 that is normally used and the client terminal 3 that is currently logged in, it is determined that the processing of copy, move, delete, and file name change is restricted. Therefore, a restriction instruction for restricting the copy, move, delete, and file name change processing is transmitted to the client terminal 3.

  In this way, by receiving the restriction instruction transmitted from the management server 2 at the client terminal 3, the function restriction processing according to the restriction instruction is executed by the function restriction execution unit of the client terminal 3 (S360).

  For example, when a restriction instruction for restricting copy, move, or delete processing is received from the management server 2, a restriction instruction that prevents the user from selecting copy, move, or delete processing at the client terminal 3, or execution thereof The client terminal 3 executes a restriction instruction to reject the request.

  As described above, by executing the processing in the second embodiment, it is possible to execute the function restriction according to the device of the client terminal 3 that is actually used by the user.

  Furthermore, in the above-described second and third embodiments, the function restriction level may be changed according to the difference in the device information. For example, as the magnitude of the difference in device information, the display size of the client terminal 3 that is normally used differs from the client terminal 3 that is currently used by a predetermined value or more (this is the display type of each client terminal 3). The type of function restriction determined by the function restriction instructing unit 7, for example, copying of all files is permitted in the case of a copy function, copying of files with access authority less than a certain level is permitted, Different function restriction levels are determined for the same function, such as not allowing copying of all files.

  In addition to the above, as the magnitude of the difference in device information, for example, the difference in the keyboard type (it can be seen that the key pitch varies depending on the type), the client terminal 3 that is normally used and the client terminal that is currently used 3 may be the number of different types of device information.

By using the erroneous operation prevention system 1 described above, it is possible to prevent erroneous operation even when there is a difference in environment settings depending on hardware. In addition, it is not necessary to register the user's environment settings in the server in advance, and information on the user's environment settings is not stored in the computer terminal used by the user. As a result, the erroneous operation prevention system 1 that can solve the conventional problems can be realized.

1 is an overall conceptual diagram of the present invention. It is a conceptual diagram which shows typically an example of the system configuration | structure of this invention. It is a figure which shows an example of the hardware constitutions of a management server typically. It is a flowchart which shows an example of the process of this invention typically. It is a figure which shows an example of a user information storage part typically. It is a flowchart which shows typically an example of the process in 2nd Example. It is a figure which shows an example of a use restriction determination table typically. It is a flowchart which shows typically an example of the process in a 3rd Example.

Explanation of symbols

1: erroneous operation prevention system 2: management server 3: client terminal 4: information reception unit 5: user information storage unit 6: determination unit 7: function restriction instruction unit 20: arithmetic device 21: storage device 22: display device 23: input device 24: Communication device

Claims (7)

An erroneous operation prevention system for preventing an erroneous operation in a client terminal used by a user,
The erroneous operation prevention system is
An information receiving unit that acquires at least user identification information and PC identification information of the client terminal from the client terminal to which the user has logged in;
A user information storage unit that stores at least PC identification information of a client terminal normally used by the user in association with the user identification information;
Extracting the PC identification information of the client terminal normally used by the user stored in the user information storage unit based on the acquired user identification information, and comparing the extracted PC identification information with the acquired PC identification information; A determination unit for determining whether the user is using a client terminal that is normally used;
When it is determined that the user does not use a normally used client terminal, a function restriction instruction unit that instructs a predetermined function restriction;
An erroneous operation prevention system characterized by comprising: An erroneous operation prevention system for preventing an erroneous operation in a client terminal used by a user,
The erroneous operation prevention system is
An information receiving unit that acquires at least user identification information, PC identification information of the client terminal, and device information of the client terminal from the client terminal to which the user has logged in;
A user information storage unit that stores at least PC identification information of the client terminal normally used by the user and device information of the client terminal in association with the user identification information;
Extracting the PC identification information of the client terminal normally used by the user stored in the user information storage unit based on the acquired user identification information, and comparing the extracted PC identification information with the acquired PC identification information; A determination unit for determining whether the user is using a client terminal that is normally used;
If it is determined that the user does not use a normally used client terminal, the device information of the client terminal normally used by the user stored in the user information storage unit is extracted, and the extracted device information and the acquired The difference in use environment is determined by comparing with the device information, the function restriction according to the determined difference in use environment is specified, and the function restriction instruction is sent to the client terminal to which the user has logged in A function restriction instruction section to transmit;
An erroneous operation prevention system characterized by comprising: An erroneous operation prevention system for preventing an erroneous operation in a client terminal used by a user,
The erroneous operation prevention system is
An information receiving unit that acquires at least user identification information and device information of the client terminal from the client terminal to which the user has logged in;
A user information storage unit that stores at least device information of a client terminal that is normally used by the user in association with the user identification information;
Based on the acquired user identification information, the device information of the client terminal normally used by the user stored in the user information storage unit is extracted, and by comparing the extracted device information with the acquired device information, A determination unit for determining a difference from a client terminal normally used by a user;
After determining the difference between the client terminal normally used by the user and the currently used client terminal, if there is a predetermined difference, the function restriction corresponding to the difference is specified and then the function restriction is determined. A function restriction instruction unit for transmitting an instruction to the client terminal to which the user has logged in;
An erroneous operation prevention system characterized by comprising: When a plurality of PC identification information of client terminals that are normally used by the user are stored in the user information storage unit,
The determination unit
Compares the acquired PC identification information with one of the extracted plurality of PC identification information, compares it with the most recently used client terminal PC identification information, or used for the longest time It is determined by any method of comparing whether it matches the PC identification information of the client terminal
The erroneous operation prevention system according to claim 1 or claim 2, wherein A management server that stores at least the PC identification information of the client terminal normally used by the user in the storage device in association with the user identification information,
An information receiving unit for acquiring at least user identification information and PC identification information of the client terminal from the client terminal to which the user has logged in;
Based on the acquired user identification information, the PC identification information of the client terminal normally used by the user stored in the storage device is extracted, and the extracted PC identification information is compared with the acquired PC identification information. A determination unit that determines whether the user is using a client terminal that is normally used;
A function restriction instruction unit that transmits a predetermined function restriction instruction to the client terminal to which the user has logged in, when it is determined that the user does not use a client terminal that is normally used;
An erroneous operation prevention program characterized in that it functions as a program. A management server that stores at least the PC identification information of the client terminal normally used by the user and the device information of the client terminal in a storage device in association with the user identification information.
An information receiving unit that acquires at least user identification information, PC identification information of the client terminal, and device information of the client terminal from the client terminal to which the user has logged in;
Based on the acquired user identification information, the PC identification information of the client terminal normally used by the user stored in the storage device is extracted, and the extracted PC identification information is compared with the acquired PC identification information. A determination unit that determines whether the user is using a client terminal that is normally used;
When it is determined that the user does not use the client terminal that is normally used, the device information of the client terminal that is normally used by the user stored in the storage device is extracted, and the extracted device information and the acquired device information are extracted. Is used to determine the difference in use environment, specify the function restriction according to the determined difference in use environment, and transmit the function restriction instruction to the client terminal to which the user has logged in Function restriction instruction section,
An erroneous operation prevention program characterized in that it functions as a program. In association with the user identification information, a management server that stores at least the device information of the client terminal normally used by the user in the storage device,
An information receiving unit that acquires at least user identification information and device information of the client terminal from the client terminal to which the user has logged in;
Based on the acquired user identification information, the device information of the client terminal normally used by the user stored in the storage device is extracted, and by comparing the extracted device information with the acquired device information, the user can A determination unit for determining a difference from a client terminal normally used;
After determining the difference between the client terminal normally used by the user and the currently used client terminal, if there is a predetermined difference, the function restriction corresponding to the difference is specified and then the function restriction is determined. A function restriction instruction unit for transmitting an instruction to the client terminal to which the user has logged in;
An erroneous operation prevention program characterized in that it functions as a program.

Images