JP2010224868A - Management rule notification method, program, and system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To automatically show an office management rule to a user. <P>SOLUTION: A management rule notification method includes processes for: specifying a section, to which a specific user associated with log-in information belongs, as a first section from a user DB storing sections to which respective users belong when the log-in information is received from a user terminal; acquiring positional information of the specific user from a positional information storage part storing positional information of the respective users and specifying an area, where the specific user is located, as a location area among a plurality of areas allocated by sections; specifying a section corresponding to the location area as a second section from an area DB storing sections corresponding to the areas for each of the areas and determining whether the first section agrees with the second section; and, if agreement between the first section and the second section is not obtained, acquiring office management rule data meeting the second section from a management rule DB storing office management rule data to be obeyed in the sections for each of the section and transmitting the obtained data to the user terminal. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present technology relates to a technology for automatically presenting office management rules such as security rules to a user.

  In recent years, security in offices has been regarded as important, and security management systems are being operated in various companies. In addition, in order to operate a security management system, each company creates a security policy unique to each department in addition to a security policy common to the entire company (hereinafter referred to as a security policy).

  For example, there is a case where one floor is divided into areas for each department (that is, a plurality of departments are divided and exist in the floor). For example, when an employee works in an area of another department, the employee needs to read the security regulations of the other department.

  However, if there are multiple files related to security regulations, it takes time to find the target file. For this reason, employees often work in the areas of other departments without reading the security regulations of other departments.

JP 2004-62416 A

  Accordingly, an object of the present technology is to provide a technology for automatically presenting office management rules (for example, security rules) related to other departments to the user when the user performs work in an area of other departments. It is.

  When the login information is received from the user terminal, the management rule notification method uses, as the first department, the department to which the particular user belongs to the received login information from the user master database storing the department to which the user belongs for each user. The location information of the specific user is acquired from the step of identifying and the location information storage unit that stores the location information for each user, and the location of the specific user is located among a plurality of areas divided by department based on the location information of the specific user A location area specifying step for specifying an area as a location area, a sector corresponding to the location area is specified as a second sector from an area database storing a sector corresponding to the area for each area, and the first sector and the second sector If the first department and the second department do not match, the step of determining whether or not the departments match, for each department Get the office management provisions of data corresponding to the second sector from the management provisions database storing data of office management provisions to be observed in the sector, and transmitting to the user terminal.

  When a user performs work in an area of another department, it becomes possible to automatically present office management rules relating to the other department to the user.

1 is a system configuration diagram of a management rule notification system according to an embodiment of the present technology. It is a figure which shows an example of the data stored in a positional information storage part. It is a functional block diagram of a security management server. It is a figure which shows an example of the data stored in user master DB. It is a figure which shows an example of the data stored in area DB. It is a figure which shows an example of the data stored in position management DB. It is a figure which shows an example of the data stored in security regulation DB. It is a figure for demonstrating the outline | summary of this Embodiment. It is a figure which shows an example of the data stored in a positional information storage part. It is a figure which shows the processing flow of a security management server. It is a figure which shows an example of the data stored in position management DB. It is a functional block diagram of a computer.

  FIG. 1 shows an overview of a management rule notification system according to an embodiment of the present technology. For example, a network 1 such as an in-house LAN (Local Area Network) is connected to a security management server 3 and a location management server 5 that perform main processing in the present embodiment. In FIG. 1, the floor 100 is divided into an R & D department area (area a), an SE department area (area b), and a security management department area (area c). The antenna 7 is installed. Specifically, the antenna 7a is installed in the area a, the antenna 7b is installed in the area b, and the antenna 7c is installed in the area c. The antennas 7a to 7c are connected to the position management server 5. A user terminal operated by the user is connected to the security management server 3 via a network (not shown) such as an in-house LAN. In FIG. 1, a notebook PC (Personal Computer) is shown as a user terminal, but the user terminal is not limited to this. For example, a desktop PC may be used. In the present embodiment, the terminal type is not particularly relevant, and will be described as a user terminal. 1 shows an example in which the number of areas in the floor 100 is three, the number of areas is not limited to three, and the number of antennas 7 is not limited to three. Furthermore, the number of users is not limited to nine.

  The location management server 5 includes a tag detection unit 51 and a location information storage unit 52. The tag detection unit 51 detects an RFID (Radio Frequency Identification) tag (hereinafter simply referred to as a tag) possessed by a user in the floor 100 via the antenna 7. In FIG. 1, the antenna 7a detects a tag possessed by a user in the area a (users A to C in FIG. 1). Further, the antenna 7b is configured to detect a tag possessed by a user in the area b (user D to user F in FIG. 1). Further, the antenna 7c detects a tag possessed by users in the area c (users G to I in FIG. 1). For example, the position information storage unit 52 stores data as shown in FIG. In the example of FIG. 2, the position information storage unit 52 includes an antenna column and a detection tag ID column. In the detection tag ID column, the ID of the tag detected by the antenna is set.

  FIG. 3 shows a functional block diagram of the security management server 3 shown in FIG. The security management server 3 includes a connection processing unit 31, a department determination unit 32, a user master DB 33, an area DB 34, a location management DB 35, and a security regulation DB 37. The connection processing unit 31 receives login information from the user terminal and outputs the login information to the department determination unit 32 or performs an authentication process. Based on the login information from the connection processing unit 31, the data stored in the user master DB 33 and the area DB 34, and the location information from the location management server 5, the department determination unit 32 determines whether the login user is in the department of the department to which it belongs. The location management DB 35 is updated according to the determination result, and when the login user is in an area of another department, the security regulation notification unit 36 is notified of that fact. Although details will be described later, the user master DB 33 stores identification information of a tag possessed by the user, a department to which the user belongs, and the like. Further, the area DB 34 stores identification information of antennas installed in the area, identification information of departments corresponding to the area, and the like. In response to the notification from the department determination unit 32, the security rule notification unit 36 acquires specific security rule data (hereinafter also referred to as a security rule file) from the security rule DB 37, and a user who is operated by the login user Send to the terminal.

  FIG. 4 shows an example of data stored in the user master DB 33. In the example of FIG. 4, the user master DB 33 includes a user name column, a user ID column, a tag ID column, and a department column. In the tag ID column, IDs of tags possessed by the user are set in advance.

  FIG. 5 shows an example of data stored in the area DB 34. In the example of FIG. 5, the area DB 34 includes an area column, an antenna column, and a department column. Identification information of antennas installed in the area is set in advance in the antenna column. In the department column, identification information of the department corresponding to the area is set in advance.

  FIG. 6 shows an example of data stored in the location management DB 35. In the example of FIG. 6, the location management DB 35 includes a user name column and a current location column. In the current position column, when the user is determined to be in the area of the department to which the user belongs, the “own department area” is set. When the user is determined to be in the area of the other department, the “other department area” is set. Is set.

  FIG. 7 shows an example of data stored in the security specification DB 37. In the example of FIG. 7, the security regulation DB 37 includes a file column and a department column. That is, in the security rule DB 37, a security rule file is stored in advance for each department.

  Next, processing of the management rule notification system shown in FIG. 1 will be described with reference to FIGS. In the present embodiment, it is assumed that the location management server 5 detects the tag possessed by the user via the antenna 7 at a predetermined timing. For example, as shown in FIG. 8, when the user A moves to the area b, data as shown in FIG. 9 is stored in the position information storage unit 52 of the position management server 5. In FIG. 9, the tag A possessed by the user A is included in the tags detected by the antenna b (antenna 7b in FIG. 8) installed in the area b.

  FIG. 10 shows a processing flow of the security management server 3. For example, a certain user logs in to the management rule notification system by operating the user terminal in the area of the department to which the user belongs or the area of another department (FIG. 10: step S1). In addition, since step S1 is a user's operation | movement, it represents with the block of the dotted line in FIG. Then, the connection processing unit 31 of the security management server 3 receives the login information from the user and stores it in the storage device (step S3). Then, the connection processing unit 31 outputs login information to the department determination unit 32.

  When the department determination unit 32 receives the login information from the connection processing unit 31, the department determination unit 32 searches the user master DB 33 based on the user identification information related to the login information, and the tag and login user possessed by the login user. To which the department belongs (hereinafter referred to as the first department) is identified (step S5).

  Then, the department determination unit 32 acquires login user location information from the location information storage unit 52 of the location management server 5 (step S7). Specifically, the department determination unit 32 transmits an acquisition request including the identification information of the tag specified in step S <b> 5 to the location management server 5. When receiving the acquisition request, the location management server 5 searches the location information storage unit 52 based on the identification information of the tag included in the acquisition request, extracts the identification information of the antenna that detected the tag, and determines the department To the unit 32. Then, the department determination unit 32 receives the identification information of the antenna that detected the tag, and stores it in the storage device as position information.

  Then, the department determination unit 32 searches the area DB 34 based on the location information of the login user, identifies the area where the login user is located, and corresponds to the identified area (hereinafter referred to as the second department). Is specified (step S9).

  Then, the department determination unit 32 determines whether the first department specified in step S5 matches the second department specified in step S9 (step S11). When it is determined that the first department matches the second department (step S11: Yes route), the department determination unit 32 sets the current position of the login user in the position management DB 35 to “own department area”. Set (step S13). If there is no change in the current position setting, this step is skipped. Then, the process ends.

  On the other hand, when it is determined that the first department and the second department do not match (step S11: No route), the department determination unit 32 sets the current position in the position management DB 35 to “other department area” ( Step S15). If there is no change in the current position setting, this step is skipped. The department determination unit 32 notifies the security regulation notification unit 36 that the login user is located in another department area. The notification includes information on the second department.

  When receiving the notification from the department determination unit 32, the security rule notification unit 36 acquires a security rule file related to the second department from the security rule DB 37 (step S17). The security regulation notification unit 36 transmits the acquired security regulation file to the user terminal operated by the login user (step S19). The user terminal receives the security regulation file from the security management server 3 and displays it on the display device or the like. Then, the process ends.

  For example, as shown in FIG. 8, when the user A belonging to the research and development department moves to the area (area b) of the SE department and performs work in the area b, the security regulations of the SE department are Presented to A. In this case, as shown in FIG. 11, the current position of the user A in the position management DB 35 is set to “other department area”.

  By performing the processing as described above, when the user performs an operation in an area of another department, it is possible to automatically present the security rules relating to the other department to the user. Further, since the security management server 3 acquires the location information from the location management server 5 when the login information is received, the communication load between the security management server 3 and the location management server 5 can be suppressed.

  In addition, when user A moves while holding his / her notebook type PC and works using the notebook type PC, even when he / she works using a desktop type PC installed in area b. This can be dealt with by executing the processing described above.

  Although one embodiment of the present technology has been described above, the present technology is not limited to this. For example, the functional block diagrams of the security management server 3 and the location management server 5 described above do not necessarily correspond to an actual program module configuration. Further, for example, the security 3 processing and the location management server 5 processing may be performed by a single computer.

  Further, the configuration of each table described above is an example, and the configuration as described above is not necessarily required. Further, in the processing flow, the processing order can be changed if the processing result does not change. Further, it may be executed in parallel.

  The present embodiment can be summarized as follows.

  When the login information is received from the user terminal, the management rule notification method uses, as the first department, the department to which the particular user belongs to the received login information from the user master database storing the department to which the user belongs for each user. The location information of the specific user is acquired from the step of identifying and the location information storage unit that stores the location information for each user, and the location of the specific user is located among a plurality of areas divided by department based on the location information of the specific user A location area specifying step for specifying an area as a location area, a sector corresponding to the location area is specified as a second sector from an area database storing a sector corresponding to the area for each area, and the first sector and the second sector If the first department and the second department do not match, the step of determining whether or not the departments match, for each department Get the office management provisions of data corresponding to the second sector from the management provisions database storing data of office management provisions to be observed in the sector, and transmitting to the user terminal.

  In this way, when logging in, if the user is located in an area of another department, the data of the office management regulations related to the other department is automatically transmitted to the user terminal. It becomes possible to automatically present the office management regulations related to the department. For the user, it is possible to save the trouble of searching for the target office management regulation data.

  Before the location area identification step described above, the location information is collected by detecting the RFID tag possessed by each user via the receiver installed in each area, and the location information storage unit The method may further include a step of storing in. Since the location can be easily confirmed, the user only needs to hold the RFID tag.

  The office management rules described above may be security rules. Users who work in a certain area can be thoroughly informed of the security regulations of the departments in that area, which leads to strengthening compliance with the security regulations.

  A program for realizing the security management server 3 and the location management server 5 together with hardware can be created, and the program is stored in a flexible disk, a CD-ROM, a magneto-optical disk, a semiconductor memory, a hard disk or the like, for example. Stored in a medium or storage device. The intermediate processing result is temporarily stored in a storage device such as a main memory.

  As shown in FIG. 12, the security management server 3 and the location management server 5 are connected to a memory 2501 (storage unit), a CPU 2503 (processing unit), a hard disk drive (HDD) 2505, and a display device 2509. A unit 2507, a drive device 2513 for a removable disk 2511, an input device 2515, and a communication control unit 2517 for connecting to a network are connected by a bus 2519. Application programs including the OS and the Web browser are stored in the HDD 2505, and are read from the HDD 2505 to the memory 2501 when executed by the CPU 2503. If necessary, the CPU 2503 controls the display control unit 2507, the communication control unit 2517, and the drive device 2513 to perform necessary operations. Further, data in the middle of processing is stored in the memory 2501 and stored in the HDD 2505 if necessary. Such a computer realizes various functions as described above by organically cooperating hardware such as the CPU 2503 and the memory 2501 described above with the OS and necessary application programs.

  The following supplementary notes are further disclosed with respect to the embodiments including the above examples.

(Appendix 1)
When receiving login information from a user terminal, from the user master database storing the department to which the user belongs for each user, identifying the department to which the specific user related to the received login information is identified as a first department;
The location information of the specific user is acquired from a location information storage unit that stores location information for each user, and the location of the specific user among a plurality of areas divided by department based on the location information of the specific user A location area identifying step for identifying the area to be identified as a location area;
Whether the department corresponding to the location area is specified as a second department from the area database storing the department corresponding to the area for each area, and whether the first department and the second department match A determining step;
When the first department and the second department do not match, the office corresponding to the second department from the management regulation database storing the office management regulation data to be observed in the department for each department Obtaining management regulation data and transmitting it to the user terminal;
A management regulation notification method executed by a computer.

(Appendix 2)
Before the location area specifying step, the location information is collected by detecting the RFID tag possessed by each user via a receiver installed in each area, and storing the location information The management rule notification method according to supplementary note 1, further comprising a step of storing in the section.

(Appendix 3)
The management rule notification method according to appendix 1 or 2, wherein the office management rule is a security rule.

(Appendix 4)
When receiving login information from a user terminal, from the user master database storing the department to which the user belongs for each user, identifying the department to which the specific user related to the received login information is identified as a first department;
The location information of the specific user is acquired from a location information storage unit that stores location information for each user, and the location of the specific user among a plurality of areas divided by department based on the location information of the specific user A location area identifying step for identifying the area to be identified as a location area;
Whether the department corresponding to the location area is specified as a second department from the area database storing the department corresponding to the area for each area, and whether the first department and the second department match A determining step;
When the first department and the second department do not match, the management rule database storing the data of the office management rule to be observed in the department for each of the departments, the corresponding to the second department Obtaining office management regulation data and transmitting it to the user terminal;
Management regulation notification program for causing a computer to execute

(Appendix 5)
A receiver for detecting the RFID tag possessed by each user;
A management server,
Have
The management server
A user master database for storing the department to which the user belongs for each user;
A location information storage unit for storing location information for each user;
An area database storing a department corresponding to the area for each area;
A management rule database for storing data of office management rules to be observed in each of the departments;
Means for collecting the location information by detecting the RFID tag via the receiver and storing it in the location information storage unit;
When receiving login information from a user terminal, means for specifying, from the user master database, the department to which the specific user related to the received login information belongs as a first department;
The location information of the specific user is acquired from the location information storage unit, and based on the location information of the specific user, an area where the specific user is located is specified as a location area among a plurality of areas divided by the department Means to
Means for identifying the department corresponding to the location area from the area database as a second department and determining whether the first department and the second department match;
If the first department and the second department do not match, means for acquiring the office management rule data corresponding to the second department from the management rule database and transmitting the data to the user terminal;
A management regulation notification system.

1 Network 3 Security Management Server 5 Location Management Server 7 Antenna 31 Connection Processing Unit 32 Department Determination Unit 33 User Master DB 34 Area DB
35 Location Management DB 36 Security Regulation Notification Unit 37 Security Regulation DB
51 Tag Detection Unit 52 Location Information Storage Unit

Claims (5)

When receiving login information from a user terminal, from the user master database storing the department to which the user belongs for each user, identifying the department to which the specific user related to the received login information is identified as a first department;
The location information of the specific user is acquired from a location information storage unit that stores location information for each user, and the location of the specific user among a plurality of areas divided by department based on the location information of the specific user A location area identifying step for identifying the area to be identified as a location area;
Whether the department corresponding to the location area is specified as a second department from the area database storing the department corresponding to the area for each area, and whether the first department and the second department match A determining step;
When the first department and the second department do not match, the office corresponding to the second department from the management regulation database storing the office management regulation data to be observed in the department for each department Obtaining management regulation data and transmitting it to the user terminal;
A management regulation notification method executed by a computer. Before the location area specifying step, the location information is collected by detecting the RFID tag possessed by each user via a receiver installed in each area, and storing the location information The management rule notification method according to claim 1, further comprising a step of storing in the unit. The management rule notification method according to claim 1, wherein the office management rule is a security rule. When receiving login information from a user terminal, from the user master database storing the department to which the user belongs for each user, identifying the department to which the specific user related to the received login information is identified as a first department;
The location information of the specific user is acquired from a location information storage unit that stores location information for each user, and the location of the specific user among a plurality of areas divided by department based on the location information of the specific user A location area identifying step for identifying the area to be identified as a location area;
Whether the department corresponding to the location area is specified as a second department from the area database storing the department corresponding to the area for each area, and whether the first department and the second department match A determining step;
When the first department and the second department do not match, the management rule database storing the data of the office management rule to be observed in the department for each of the departments, the corresponding to the second department Obtaining office management regulation data and transmitting it to the user terminal;
Management regulation notification program for causing a computer to execute A receiver for detecting the RFID tag possessed by each user;
A management server,
Have
The management server
A user master database for storing the department to which the user belongs for each user;
A location information storage unit for storing location information for each user;
An area database storing a department corresponding to the area for each area;
A management rule database for storing data of office management rules to be observed in each of the departments;
Means for collecting the location information by detecting the RFID tag via the receiver and storing it in the location information storage unit;
When receiving login information from a user terminal, means for specifying, from the user master database, the department to which the specific user related to the received login information belongs as a first department;
The location information of the specific user is acquired from the location information storage unit, and based on the location information of the specific user, an area where the specific user is located is specified as a location area among a plurality of areas divided by the department Means to
Means for identifying the department corresponding to the location area from the area database as a second department and determining whether the first department and the second department match;
If the first department and the second department do not match, means for acquiring the office management rule data corresponding to the second department from the management rule database and transmitting the data to the user terminal;
A management regulation notification system.

Images