JP2016194958A - Personal information collection system, information collection system, personal information collection method, information collection method, information processing apparatus, program, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To ensure security in an operation to collect personal information.SOLUTION: A personal information collection system comprises: an image acquisition part that scans a sheet designating an entry area in which personal information consisting of a plurality of character strings is entered and acquires the image of the sheet; a partial image creation part that creates a plurality of partial images including a part of the plurality of character strings entered in the entry area; a management part that manages the plurality of partial images created from one sheet; a screen display control part that displays, on any of one or more second information processing apparatuses, an input screen including a first partial image of the plurality of partial images managed by the management part and an entry column in which the details entered in the partial image are entered; an input data registration part that registers input data in which the details entered in the partial image are input on the basis of the partial image; and registration part that registers the details of the personal information entered in the entry area of the sheet on the basis of the input data input through the input screen corresponding respectively to the plurality of partial images created from one sheet.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a personal information collection system, an information collection system, a personal information collection method, an information collection method, an information processing apparatus, a program, and a recording medium.

  In the business of collecting personal information, it is necessary to ensure a high level of security. In particular, when carrying out the business of collecting personal information on a large scale in the form of outsourcing by an external business operator, since many people are involved in the business, it is not sufficient to make personal decisions regarding the handling of personal information.

  In Japan, the personal number system (commonly known as the “My Number System”) has recently been legislated, and it is expected that there will be a large amount of work to collect a large amount of personal information, “My Number”. ing. The “My Number System” is a social infrastructure (infrastructure) for confirming that personal information that exists in multiple institutions is the same person's information. It is a system that assigns a unique personal number to all citizens for the purpose of “ensuring safety and transparency” and “realizing a fair and fair society that is convenient for the people”.

  On the other hand, Patent Document 1 divides image data of an original or electronic document that has been read into a secure document and a non-secure document, and stores them in separate locations designated by the user on the user interface. A technique for achieving both reliable protection and easy management is disclosed.

  The above-mentioned method of dividing an electronic document into a secure document and a non-secure document cannot be applied when handling personal information itself such as “My Number”, and it is difficult to ensure a high level of security. is there.

  The present invention has been proposed in view of the above-described conventional problems, and an object of the present invention is to ensure security in the business of collecting personal information.

  In order to solve the above-described problems, the present invention includes an image forming apparatus, a first information processing apparatus, and one or more second information processing apparatuses. A personal information collection system in which the first information processing apparatus collects personal information of one or more users obtained on the basis of the above forms, and an entry area for entering the personal information consisting of a plurality of character strings is designated. An image acquisition unit that scans the paper and acquires an image of the paper, and a partial image that creates a plurality of partial images including only a part of the plurality of character strings written in the entry area from the image of the paper A creation unit; a management unit that manages the plurality of partial images created from one sheet; the one partial image of the plurality of partial images managed by the management unit; and the partial image Enter the information entered A screen display control unit that displays an input screen including any one of the one or more second information processing devices, and contents entered in the partial image based on the partial image are input Based on the input data input via the input screen corresponding to each of a plurality of partial images created from one paper and an input data registration unit for registering input data, the entry area of the paper And a registration unit for registering the content of the personal information entered in.

  In the present invention, security can be ensured in the business of collecting personal information.

It is a figure which shows the structural example of the system concerning one Embodiment of this invention. It is a figure which shows the structural example of a reception system. It is a figure which shows the hardware structural examples, such as a terminal device. FIG. 2 is a diagram illustrating a hardware configuration example of a multifunction peripheral. It is a sequence diagram (the 1) which shows the process example of embodiment. It is a sequence diagram (the 2) which shows the process example of embodiment. It is a sequence diagram (the 3) which shows the process example of embodiment. It is a figure which shows the example of the dispatch request data to which collection ID was provided. It is a figure which shows the example of my number provision book. It is a figure which shows the example of a notification card attachment paper. It is a figure which shows the example of an address sticker and a reply envelope. It is a figure which shows the example of division | segmentation image data. It is a figure which shows the example of a data input screen. It is a figure which shows the example of a data correction screen. It is a figure which shows the example of input and corrected data. It is a figure which shows the example of delivery data. FIG. 3 is a diagram illustrating an example of a system configuration for a business volume.

  Hereinafter, preferred embodiments of the present invention will be described. In addition, although collection of my number is demonstrated to an example, it cannot be overemphasized that it is applicable not only to this but collection of other personal information.

<Configuration>
FIG. 1 is a diagram showing a configuration example of a system according to an embodiment of the present invention. In FIG. 1, a personal information holder 1 is an individual such as an employee or a customer who has been given a My Number that is personal information to be collected. The personal information collection request source 2 is an organization such as a company or a financial institution that collects my numbers. Companies, financial institutions, etc. need to collect My Numbers after receiving the consent of employees and customers for tax processing of employees and customers.

  The personal information collection contractor 3 is a business operator who undertakes the work of collecting my numbers from the personal information collection request source 2. The cloud environment 4 is an environment that provides computer hardware and software resources on a network. The provision form sending / receiving company 5 is a business that sends the My Number provision form to the personal information holder 1 and receives a reply based on the contract with the personal information collecting contractor 3. The data entry company 6 is a business operator who inputs data based on a contract with the provision document sending / receiving company 5.

  Under the control of the personal information collection request source 2, a terminal device 21 is provided that outputs shipping request data including the address and name of the personal information holder 1 that the personal information collection request source 2 needs to manage My Number. It has been. Under management means that the user has the authority to perform desired information processing regardless of the physical installation location or possession of each device.

  Under the management of the personal information collection contractor 3, a processing server 31 and a terminal device 32 are provided. The processing server 31 acquires the shipping request data online from the terminal device 21 of the personal information collection request source 2 or acquires the shipping request data from a storage medium such as a flash memory via the terminal device 32 and acquires it. The shipping request data is transmitted to the cloud environment 4.

  The cloud environment 4 is provided with a reception system 41 that performs central processing for my number collection work. The reception system 41 is configured by one or more information processing apparatuses such as servers, and the number of information processing apparatuses to be used can be flexibly changed according to the business volume.

  Under the management of the provision document sending / receiving company 5, a provision document printing / shipping system 51, a terminal device 52, and a multifunction device 54 are provided. The provided document printing / shipping system 51 includes, for example, an information processing device such as a computer operated by a system administrator, and a printing device capable of printing on special paper or special materials different from plain paper such as envelopes and stickers. Then, the shipping request data to which the management collection ID is assigned is acquired from the reception system 41, and various documents (my number provision document etc.) to be shipped to the personal information holder 1 are printed based on the shipping request data. The terminal device 52 reads the barcode (one-dimensional code) from the envelope (reply envelope) of the My Number offer form returned from the personal information holder 1 by the barcode reader 53 and performs reception registration. The barcode is used for the envelope because the barcode reader 53 is more popular than the two-dimensional code reader, and it does not mean that the two-dimensional code cannot be used. Therefore, a two-dimensional code can be substituted. The terminal device 52 is also used for examination after acceptance. The multi-function device 54 reads an image such as a my number provision form and recognizes a two-dimensional code attached to the my number provision form.

  One or more terminal devices 61 are provided under the control of the data entry company 6. The terminal device 61 is used for inputting data or the like by visual confirmation from the divided image of the My number portion written by hand in the My Number offer form.

  FIG. 2 is a diagram illustrating a configuration example of the reception system 41 constructed in the cloud environment 4. In FIG. 2, the reception system 41 includes a plurality of site unit server groups 42 provided for each site of the provision document sending / receiving company 5 and the data entry company 6, and a data storage server group 43 that centrally manages data. I have. The base unit server group 42 is limited to access from the corresponding base.

  The base unit server group 42 includes a plurality of load balancers 421, a plurality of AP servers (application servers) 422, a plurality of input DB servers (input database servers) 423, and a virtualized storage 424. Yes. The load balancer 421 distributes data and processing requests sent from the outside via the network (network 44) to a plurality of devices (AP servers 422) that function equally, and suppresses the load per unit. The AP server 422 executes an application program that performs a business at each base (provides a business processing function). The input DB server 423 provides a DB processing function for the storage 424. The input data distributed by the AP server 422 is input into a cluster configuration (as if a plurality of computers are connected and as a whole a single computer for users and other computers) by the input DB server 423. The system is aggregated into one virtualized storage 424 by the behavior system).

  The data storage server group 43 includes a plurality of load balancers 431, a plurality of AP servers 432, a plurality of reference DB servers (reference database servers) 433, and a virtualized storage 434. The load balancer 431 distributes data and processing requests sent from the outside via the network (network 44) to a plurality of devices (AP servers 432) that function equally, reducing the load per unit, Improve response. The AP server 432 executes an application program such as data inquiry. The reference DB server 433 provides a DB processing function for the storage 434. The input data distributed by the AP server 432 is collected by the reference DB server 433 into one storage 434 virtualized by the cluster configuration.

  Further, the data accumulated in the storage 424 of the base unit server group 42 is collected into the storage 434 of the data accumulation server group 43 via the network 45 by night batch processing or the like.

  FIG. 3 is a diagram illustrating a hardware configuration example of the terminal device 21 and the like (terminal device 21, processing server 31, terminal device 32, terminal device 52, and terminal device 61). In FIG. 3, a terminal device 21 and the like include a CPU (Central Processing Unit) 201, a RAM (Random Access Memory) 202, a ROM (Read Only Memory) 203, and an HDD (Hard Disk Drive) which are connected to each other via a bus 207. 204, a connection I / F (Interface) 205, and a communication I / F 206. The CPU 201 performs overall control of the operation of the terminal device 21 and the like by executing a program stored in the ROM 203 or the HDD 204 using the RAM 202 as a work area. The connection I / F 205 is an interface with a device connected to the terminal device 21 or the like. The communication I / F 206 is an interface for communicating with other information processing apparatuses via a network.

  FIG. 4 is a diagram illustrating a hardware configuration example of the multi-function peripheral 54. 4, the multi-function device 54 includes a main body 510 capable of realizing various functions such as a copy function, a scanner function, a fax function, and a printer function, and an operation unit 520 that receives a user operation. The main body 510 and the operation unit 520 are connected to each other via a dedicated communication path 530 so that they can communicate with each other. The communication path 530 may be a USB (Universal Serial Bus) standard, for example, but may be of any standard regardless of wired or wireless. Note that the main body 510 can perform an operation according to the operation received by the operation unit 520. The main body 510 can also communicate with an external device such as a client PC (personal computer), and can perform an operation in accordance with an instruction received from the external device.

  The main body 510 includes a CPU 511, a ROM 512, a RAM 513, an HDD 514, a communication I / F 515, a connection I / F 516, and an engine unit 517, which are connected to each other via a system bus 518.

  The CPU 511 comprehensively controls the operation of the main body 510. The CPU 511 controls the overall operation of the main body 510 by executing a program stored in the ROM 512 or the HDD 514 using the RAM 513 as a work area (work area), and the above-described copy function, scanner function, FAX function, printer function, and the like. Implement various functions. The communication I / F 515 is an interface for connecting to a network. The connection I / F 516 is an interface for communicating with the operation unit 520 via the communication path 530. The engine unit 517 is hardware that performs processing other than general-purpose information processing and communication for realizing a copy function, a scanner function, a FAX function, and a printer function. For example, a scanner (image reading unit) that scans and reads an image of a document, a plotter (image forming unit) that performs printing on a sheet material such as paper, a FAX unit that performs FAX communication, and the like are provided. Further, a specific option such as a finisher for sorting printed sheet materials or an ADF (Auto Document Feeder) for automatically feeding a document can be provided.

  The operation unit 520 includes a CPU 521, a ROM 522, a RAM 523, a flash memory 524, a communication I / F 525, a connection I / F 526, an operation panel 527, and an external connection I / F 528, which are a system bus 529. Are connected to each other. The CPU 521 comprehensively controls the operation of the operation unit 520. The CPU 521 controls the overall operation of the operation unit 520 by executing a program stored in the ROM 522 or the flash memory 524 using the RAM 523 as a work area, and displays information (image) according to the input received from the user. Implement various functions. The communication I / F 525 is an interface for connecting to a network. The connection I / F 526 is an interface for communicating with the main body 510 via the communication path 530. The operation panel 527 accepts various inputs in accordance with user operations, and various types of information (for example, information in accordance with accepted operations, information indicating the operation status of the multifunction device 54, information indicating a setting state, etc.). Is displayed. Furthermore, in addition to or instead of this, an operation unit such as a hardware key and a display unit such as a lamp may be provided. The external connection I / F 528 is an interface for connecting to a device such as an IC card reader.

<Operation>
5 to 7 are sequence diagrams illustrating processing examples of the above embodiment.

[Shipment request]
In FIG. 5, the terminal device 21 of the personal information collection requesting source 2 delivers the shipping request data directly to the processing server 31 of the personal information collecting contractor 3 online via the network (step S101). Alternatively, the delivery request data read by the terminal device 32 of the personal information collection contractor 3 is delivered to the processing server 31 via the storage medium (offline) (step S101). The shipping request data includes personal information related to one or more personal information holders 1 that a company or financial institution that is the personal information collection request source 2 needs to collect and manage My Number by itself. The personal information includes at least the name and address of each personal information holder 1. The processing server 31 of the personal information collection contractor 3 transmits the delivered delivery request data to the reception system 41 of the cloud environment 4 (step S102).

  The reception system 41 stores the received shipping request data in the storage 434 (step S103), and assigns a unique collection ID to each record of the shipping request data at a predetermined timing (step S104). The collection ID may be issued as a serial number or may be issued randomly without duplication. That is, as will be described later, the My Number for one person to be collected is managed by one collection ID in the reception system 41. Therefore, the collection ID is information different from the My Number. Further, it is naturally desirable to assign a number or symbol from which the My Number is not easily guessed by this collection ID. FIG. 8 is a diagram illustrating an example of shipping request data to which a collection ID is assigned. In this example, “department code” in which information for identifying each branch of the financial institution is input, “account number” in which the account number of the customer who is the personal information holder 2 to be managed by the financial institution is input, the customer "Customer name" to which the name of the customer is input, "Address" to which the customer's address is input, and "Collection ID" to which the collection ID assigned to each record is input. As will be described later, when the My Number is acquired from each customer (user), the My Number of the customer is managed, but the My Number has not been registered yet at the time of Step S104. Note that the item “My Number” may be prepared at this point.

[Shipping]
In FIG. 5, the provision form printing / shipping system 51 of the provision form sending / receiving company 5 obtains the shipping request data to which the collection ID is given from the reception system 41 (step S105), and the collection ID is assigned to each record. A barcode (one-dimensional code) and a two-dimensional code in which are embedded are generated (step S106). The bar code is used to attach the reply envelope. The two-dimensional code is used for attaching to the My Number Provision Form.

  The provided form printing / shipping system 51 prints a shipping document to be shipped to each customer based on the shipping request data in accordance with a predetermined format (model). Specifically, to obtain an envelope (for sending) on which the customer's name and address are printed, a two-dimensional code-added my number provision form for allowing the customer to fill in my number, and a copy of the notification card possessed by the customer The two-dimensional code-attached notification card attached sheet, the bar code reply envelope address sticker, and the print data of the reply envelope are printed (step S107). Of these documents, those that can be created without being based on the shipping request data may be prepared in advance at a timing different from the processing in step S107. For example, in the example of this embodiment, a reply envelope or the like may be prepared in advance. Then, the employee who operates the provision form printing / shipping system 51 encloses the My Number offer form, the notice card attached sheet, the address seal for the reply envelope, and the reply envelope in the envelope (for delivery) created by the system 51. The mail is sent to the personal information holder 1 by mail (steps S108 and S109).

  FIG. 9 is a diagram showing an example of the My Number Provision Form, and a two-dimensional code in which the collection ID is embedded is printed on the upper right. In addition, markers for making it easy to recognize the vertical direction and the front and back sides of the paper are printed at the other three corners. The My Number offer form has a divided My Number entry frame for filling in the My Number of the addressee (person) (a column for entering a 12-digit My Number divided into 3 parts by 4 digits). A separate My Number entry box is also provided for dependent relatives to enter My Number. Note that the number of frames need not be three. For example, one frame may be separated by a dotted line so that the user can recognize a 12-character entry frame. Moreover, it is not essential that the number of characters to be entered in one frame is uniform, and it is not essential that the number is 4 digits.

  FIG. 10 is a diagram showing an example of a notification card attached sheet, in which a two-dimensional code and a marker are printed in the same manner as the My Number Provision Form (FIG. 9), and the My Number notification card (issued by the local government). A field for pasting a copy is provided.

  FIG. 11 is a diagram showing an example of an address sticker and a reply envelope. As shown in FIG. 11A, a reply envelope address sticker with a barcode is printed on a sticker mount, as shown in FIG. 11B. The reply envelope is provided with a field for attaching an address sticker.

[Receipt]
In FIG. 5, the personal information holder 1 who has received an envelope containing various documents fills in the My Number offer form, pastes a copy of the notification card on the notification card attachment sheet, and sends a reply envelope address. The sticker is pasted on a reply envelope, sealed in a reply envelope together with certificates such as a resident's card (step S110), and returned to the provision form sending / receiving company 5 (step S111).

  The person in charge of the provision document sending / receiving company 5 opens the reply envelope and confirms whether or not there is any entry or the like including the predetermined document (checks whether there is a clear defect) (step S112). . Then, when the person in charge of the provision document sending / receiving company 5 reads the barcode of the returned reply envelope with the barcode reader 53 (step S113) and inputs the deficiency confirmation result (step S114), the terminal device 52 Transmits the collection ID and the confirmation result included in the barcode to the reception system 41 (step S115). In response to this, the reception system 41 performs reception registration or incomplete registration (step S116).

  Next, the person in charge of the delivery form delivery / reception company 5 scans all documents enclosed by the scanner function of the multi-function peripheral 54 (step S117). The multi-function device 54 recognizes the two-dimensional code (the position assigned in advance is specified) included in the document by the code recognition function (step S118), and associates it with the collection ID included in the two-dimensional code. The read image of the document is transmitted to the reception system 41 (step S119). In response, the reception system 41 performs image registration (step S120). Each image is registered by assigning a management number with a branch number to the collection ID. For example, when the collection ID is “1” and there are three scanned documents, management numbers such as “1-1”, “1-2”, and “1-3” are assigned to the respective documents. Identify each document associated with one collection ID. Note that the number is not limited to a number as long as a plurality of documents enclosed in the same reply envelope can be identified. Further, when the person in charge reads one document at a time by one reading by the scanner, if the multi-function peripheral 54 can recognize at least one two-dimensional code from a plurality of read documents, Using the collection ID, it is also possible to manage documents that do not include a two-dimensional code (ancillary documents such as a copy of a resident's card). Alternatively, when reading multiple documents at once, for example, by reading the documents in the order in which the two-dimensional code comes first, such as My Number Provision Form, Notification Card Attached Sheet, Resident Card Copy, etc. 54 can acquire the collection ID from the first document for one document. Therefore, the collected collection ID is retained, and when a collection ID different from the retained collection ID is newly read, the retained collection ID is updated and retained. Then, branch numbers are assigned to the read documents in order until the collected collection ID is updated (the number is incremented every time the documents are read one by one). The same collection ID is assigned to each of the documents, and a different branch number can be assigned to each document.

  The person in charge of the provision document sending / receiving company 5 repeats the above processing for the reply envelope returned from the personal information holder 1, and stores the processed reply envelope and the document as the original (step S121).

[First screening]
In FIG. 6, the terminal device 52 of the delivery form receiving / receiving company 5 (if processing is performed in a department different from the reception of the reply, the terminal device is separate from the receiving device and the barcode reader 53 is not required). Acquires from the reception system 41 a document image collected in units of items identified by the collection ID (step S122).

  Based on the document image displayed on the terminal screen, the person in charge performs a primary examination by matching the contents described in the My Number Provision Form with the accompanying documents (step S123). At this time, an operation for painting a portion sensitive to content (mask setting at the time of display) is also performed. When the person in charge inputs the result of the primary examination (including the reason for the deficiency if there is a deficiency) (step S124), the terminal device 52 transmits the collection ID and the examination result to the reception system 41 (step S125). The system 41 registers the result of the primary examination (step S126). The person in charge repeats the above processing for the case to be processed.

[Secondary examination]
The terminal device 52 (provided that the processing is performed in a department other than the primary examination) is identified by the collection ID from the reception system 41 by the collection system. A document image and a primary examination result collected in units of a project are acquired (step S127).

  Based on the document image displayed on the terminal screen and the result of the primary examination, the person in charge performs the secondary examination by re-matching the description contents of the my number provision form and the accompanying documents (step S128). When deficiency is recognized in the secondary examination, a deficiency letter is created using the registration information of the reception system 41 (step S129), and the following processing is not performed for the case. The creation of a deficient letter includes the image of the deficient document and the reason for the deficiency, and includes the address and name of the address.

  If there is no deficiency in the secondary examination, the terminal device 52 divides the image of the My Number entry frame (position is defined in advance) into a plurality of images for each entry frame (Step S130). An OCR (Optical Character Reader) process is performed on the image (step S131), and an item ID with a branch number indicating the order of division is added to the collection ID (or management number) for each divided image (step S131). S132). Note that a divided image may be acquired after performing the OCR processing, and the OCR processing result may be divided according to the divided image. In addition, the item ID need only be able to restore the divided images divided using the item IDs assigned to the divided images in the order of the original My number entry frame, without using branch numbers. Then, the terminal device 52 transmits the divided image and the OCR result in association with the item ID to the reception system 41 (step S133), and the reception system 41 registers these as divided image data (step S134). The OCR result is used for collation with the manually entered content as will be described later. The person in charge repeats the above processing for the case to be processed.

  FIG. 12 is a diagram showing an example of the divided image data. An image obtained by dividing the image of the My Number entry frame of the My Number offer form into three parts each having four digits, an item ID assigned to each, and an OCR result. Is included. In this example, since the entry frame is already divided into a plurality of frames, it is only necessary to acquire an image for each entry frame. However, even if there is only one entry frame, the image of one entry frame is in units of a predetermined number of characters. A similar result can be realized even if a segmented image is acquired. That is, it is only necessary that specific information including a plurality of character strings can be divided into a plurality of pieces such as My Number. For the same collection ID, it is desirable that the branch number used for the management number for identifying each document does not overlap with the branch number used for the item ID for identifying each divided image. However, for example, in the case where all branch numbers are assigned in order from 1, if the divided images are managed by the item ID in which the branch number is further assigned to the management number instead of the collection ID, there is no overlap. In FIG. 12, the branch number for the management number is not entered in the My Number offer form with the collection ID “2348769” (no entry means the 0th order, and other documents) “1” and “2” are assigned branch numbers to each document, and “K1”, “K2”, and “K3” are given as branch numbers for item IDs. Yes. In the example shown in the figure, the OCR result is correctly displayed in all, but in the case of writing with a habit, a part of it may not be recognized correctly or may not be recognized at all. Since the divided image alone cannot identify the My Number, the user cannot identify the individual My Number simply by acquiring the individual divided images. Therefore, it is not necessary to consider security for each piece of divided image data, while the apparatus can specify the My Number by the item ID.

[Data entry]
In FIG. 6, the terminal device 61 of the data entry contractor 6 acquires a divided image (divided image data) identified by the item ID from the reception system 41 (step S135). Then, the terminal device 61 randomly extracts the divided image data, displays one divided image data on the screen (step S136), and accepts visual data input by the person in charge (step S137). FIG. 13 is a diagram showing an example of the data input screen. A divided image is displayed at the top, a data input field is displayed at the bottom, and an “OK” button is displayed at the bottom right. As can be seen from FIG. 13, the OCR result is not displayed on this data input screen. The person in charge confirms the divided images with the naked eye, inputs a corresponding number into the data input field using a numeric keypad, and presses an “OK” button to complete the input for one item. Note that a plurality of divided image data and a data input column for each may be displayed on the screen. However, it is important that the person in charge (user) combines the divided image data displayed on the data input screen to It is to make it impossible to specify my number. Therefore, it is desirable that the reception system 41 randomly extracts the divided images to be displayed on the screen from the divided images collected from the sufficient number of My Number offer forms. A sufficient number of people can be determined by the system operator as appropriate, but the larger the number, the better.

  Returning to FIG. 6, when the data input is completed, the terminal device 61 transmits the item ID and the division number manually input for one divided image to the reception system 41 (step S138). A division number is registered in association with the ID (step S139). The person in charge repeats the above processing for the case to be processed.

[Data correction]
In FIG. 7, the reception system 41 determines whether or not the manually input division number and the OCR result match for one divided image. Then, the reception system 41 notifies the divided image determined to be inconsistent to the terminal device 61 of the data entry company 6, and the terminal device 61 of the data entry company 6 receives the division number and the OCR result manually input from the reception system 41. For the case where the two do not match, the item ID of the divided image, the divided image, the division number, and the OCR result are acquired (step S140).

  Then, the terminal device 61 displays a data correction screen, and receives confirmation from the person in charge of data correction or no correction (step S141). FIG. 14 is a diagram illustrating an example of a data correction screen, in which randomly displayed number images (divided images), keystroke content (divided numbers), OCR results, and correction confirmation check boxes are displayed. As can be seen from FIG. 14, the item ID and the collection ID are not displayed on the data input screen. The person in charge confirms the number image and the keystroke content visually, and if the keystroke content is determined to be correct, the person in charge checks the “done” check box without correction. If it is determined that the keying content is not correct, correct the keying content and check the “Done” check box. It should be noted that the determination of whether or not it is correct and the object of correction may be the OCR result, or a separate data input field may be provided and the content determined to be correct may be input there.

  Returning to FIG. 7, when the data correction confirmation is completed, the terminal device 61 transmits the item ID and the correction confirmation content to the reception system 41 (step S142), and the reception system 41 registers the correction confirmation content in association with the item ID. (Step S143). FIG. 15 is a diagram illustrating an example of input / corrected data, in which a division number whose correction has been confirmed is associated with an item ID. The person in charge repeats the above processing for the case to be processed.

  In addition, for the case where the manually entered division number and the OCR result do not match, we explained an example of improving the division number accuracy by checking the person in charge for correction or no correction. The division number is manually entered by the person, and the most frequent division number can be adopted as the correct answer. In this case, the OCR result is unnecessary.

[Delivery data generation]
In FIG. 7, the reception system 41 reconstructs the personal My Number data from the input / corrected data based on the item ID, and generates delivery data (Step S144). In other words, after collecting in the main part of the item ID (collection ID part excluding the branch number), rearranged in the order of the branch numbers, merged to reconstruct my number, combined with other items, delivery data Is generated. FIG. 16 is a diagram showing an example of delivery data. In addition to items such as “department code”, “account number”, “customer name” and “address”, the My Number generated based on the input / corrected data is displayed. It has an item “My Number” to be entered.

  Then, the reception system 41 transmits delivery data to the personal information collection contractor 3 (step S145), and the personal information collection contractor 3 delivers the delivery data to the personal information collection request source 2 online or offline (step S146). ).

[Reception system configuration change]
As described above, the reception system 41 can flexibly change the system configuration according to the business volume. Since My Numbers will start to be used nationwide from a predetermined date, the collection work will be a considerable amount of work volume at the beginning, the work volume will gradually decrease, and then at a certain low level It is assumed to change. When the processing capacity of the system is insufficient with respect to the business volume, the response is deteriorated and the business efficiency is deteriorated. Therefore, it is important to maintain an appropriate processing capacity according to the business volume.

  FIG. 17 is a diagram showing an example of a system configuration for a business volume. FIG. 17A corresponds to the case where the business volume is the largest at the beginning of the operation. The number of sites of the provision document sending / receiving company 5 and the data entry company 6 is 10, and the site unit server group 42 is set as the site. There are 10 unit server groups 42 # 1 to 42 # 10. FIG. 17B corresponds to the case where the business volume is lowered. The number of bases is set to 5, and the base unit server group 42 is set to five base unit server groups 42 # 1 to 42 # 5. . FIG. 17C corresponds to the case where the business volume has converged, where the number of bases is 1, and the base unit server group 42 is one of the base unit server groups 42 # 1. That is, the reception system 41 can change the system configuration as appropriate for each base unit server group 42.

  The internal configuration of each of the base unit server groups 42 and the data storage server group 43 can also be changed, and the number of physical computer devices and network devices constituting each server group and the capacity of the disk device are increased or decreased. It is possible.

  The reception system 41 is constructed using the cloud environment 4, and it is not necessary to purchase a physical computer device, a network device, or a disk device and prepare it on its own. Since it is only necessary to pay the usage fee for the corresponding resource, it is possible to optimize the cost.

  On the other hand, as shown in the overall system configuration of FIG. 1, the reception system 41 is operated by a contractor who receives a collection request of personal numbers from a personal information collection request source 2 such as a company or a financial institution, and requests for collection. Data is received and delivery data is delivered. In addition, when it comes to the data input work of My Number at the level of millions and tens of millions, it is assumed that the request is made to a plurality of data entry providers 6 instead of requesting to one data entry supplier 6. As the business volume settles down, the number of data entry providers 6 that make requests will also decrease.

  Therefore, the order contractor may always monitor the request status and control the volume of the base unit server group 42. However, the order contractor assigns one or more base unit server groups 42 to one data entry trader 6. It is conceivable that the data storage server group 43 of the allocation and reception system 41 manages the correspondence. By doing in this way, the reception system 41 can control the increase / decrease of the base unit server group 42 in accordance with the increase / decrease of the data entry dealer 6 by the contractor.

  That is, when adding the requested data entry agent 6, the contractor inputs a new registration of the data entry agent 6 and the number of base unit server groups to be allocated to the reception system 41. The data storage server group 43 of the reception system 41 assigns a trader ID for identifying the new data entry trader 6, and also associates the assigned trader ID with the base unit server group 42 allocated to the new data entry trader 6. Register the server group ID.

  Further, when the order entry contractor reduces the number of data entry contractors 6 to be requested, it requests the reception system 41 to delete the target data entry contractor 6. The data storage server group 43 of the reception system 41 stops using the base unit server group 42 based on the server group ID associated with the trader ID of the target data entry trader 6. In this way, the contractor can flexibly change the number of servers borrowed from the cloud service provider in order to construct the reception system 41, and suppress the payment of extra usage fees.

<Summary>
As described above, according to the present embodiment, security can be ensured in the business of collecting personal information.

  The present invention has been described above by the preferred embodiments of the present invention. While the invention has been described with reference to specific embodiments, various modifications and changes may be made to the embodiments without departing from the broad spirit and scope of the invention as defined in the claims. Obviously you can. That is, the present invention should not be construed as being limited by the details of the specific examples and the accompanying drawings.

DESCRIPTION OF SYMBOLS 1 Personal information holder 2 Personal information collection request source 21 Terminal device 3 Personal information collection contractor 31 Processing server 32 Terminal device 4 Cloud environment 41 Reception system 42 Base unit server group 421 Load balancer 422 AP server 423 Input DB server 424 Storage 43 Data Storage Server Group 431 Load Balancer 432 AP Server 433 Reference DB Server 434 Storage 44, 45 Network 5 Provided Document Sending / Receiving Company 51 Provided Document Printing / Dispatching System 52 Terminal Device 53 Barcode Reader 54 Multifunction Device 6 Data Entry Contractor 61 Terminal device

JP 2007-133670 A

Claims (22)

Personal information of one or more users obtained on the basis of one or more sheets scanned by the image forming apparatus, including an image forming apparatus, a first information processing apparatus, and one or more second information processing apparatuses. A personal information collection system that the first information processing apparatus collects,
An image acquisition unit that scans the paper in which an entry area for entering the personal information composed of a plurality of character strings is specified and acquires an image of the paper;
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the paper;
A management unit that manages a plurality of the partial images created from one paper;
An input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image, the one or more second images A screen display control unit to be displayed on any of the information processing devices;
An input data registration unit for registering input data in which the content entered in the partial image is input based on the partial image;
Based on the input data input via the input screen corresponding to each of the plurality of partial images created from one paper, register the contents of the personal information entered in the entry area of the paper A registration department to
A personal information collection system. An individual including an image forming apparatus and a first information processing apparatus, wherein the first information processing apparatus collects personal information of one or more users obtained based on one or more sheets scanned by the image forming apparatus An information collection system,
An image acquisition unit that scans the paper in which an entry area for entering the personal information composed of a plurality of character strings is specified and acquires an image of the paper;
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the paper;
A management unit that manages the plurality of partial images created from each of the one or more sheets scanned in the image acquisition unit;
An input screen including one partial image selected at random from the plurality of partial images managed by the management unit, and an input field for inputting contents written in the partial image, second information A screen display control unit to be displayed on the processing device;
An input data registration unit for registering input data in which the content entered in the partial image is input based on the partial image;
The content of the personal information entered in the entry area of the paper is registered based on the input data inputted via the input screen corresponding to each of the partial images created from the one paper. A registration department;
A personal information collection system. 3. The personal information according to claim 1, wherein the screen display control unit does not simultaneously display each input screen corresponding to the plurality of partial images so that the personal information can be specified in one second information processing apparatus. Collection system. The management unit uses the first identification information for identifying one of the sheets and the second identification information for identifying each of the plurality of partial images created from the one sheet. Managing a plurality of partial images created from paper images;
The said registration part registers the content of the said personal information entered in the said entry area which fills in the said personal information based on the said 1st identification information and the said 2nd identification information. The personal information collection system according to any one of the above. A determination unit that determines whether or not the contents of the plurality of input data input to one partial image match;
Based on the determination by the determination unit, when the input data having different contents is input to one partial image, confirmation including the partial image and each of the plurality of input data having different contents A confirmation result acquisition unit that displays a screen and acquires the input data as a confirmation result based on the confirmation screen;
Have
The said registration part registers the content of the said personal information based on the said input data acquired as a confirmation result, when the confirmation by the said confirmation result acquisition part is performed. Personal information collection system described. The personal information collection according to claim 5, wherein the input data registration unit registers the input data in which a result of OCR processing on the partial image is input and the input data input through the input screen. system. The personal information collection system according to any one of claims 1 to 6, wherein the personal information is an individual personal number. An image forming apparatus, an information processing apparatus, and based on a sheet scanned by the image forming apparatus, entry information indicating contents of a plurality of character strings handwritten by a user in a predetermined entry area of the sheet An information collection system that an information processing device collects,
An image acquisition unit that scans the paper and acquires an image of the paper;
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the paper;
A management unit that manages a plurality of the partial images created from one paper;
A screen display control unit for displaying an input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image; ,
A registration unit for registering the contents of the entry information entered in the entry area based on the input data input via the input screen corresponding to each of the plurality of partial images created from the one sheet; ,
An information collection system. A plurality of information entered by a user by hand from an entry form that includes a first information processing device and a second information processing device and allows the user to manually write personal information consisting of a plurality of character strings in a predetermined entry area. An information collection system in which the first information processing apparatus collects the contents of the character string,
An image acquisition unit for acquiring an image of the entry form;
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the entry form;
A management unit that manages the plurality of partial images created from the one entry form;
A screen display control unit for displaying an input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image; ,
A registration unit for registering the content of the personal information entered in the entry area based on input data input via the input screen corresponding to each of the plurality of partial images created from one entry form When,
An information collection system. Personal information of one or more users obtained on the basis of one or more sheets scanned by the image forming apparatus, including an image forming apparatus, a first information processing apparatus, and one or more second information processing apparatuses. A method for collecting personal information collected by the first information processing apparatus,
An image acquisition step of scanning the paper in which an entry area for entering the personal information consisting of a plurality of character strings is designated and acquiring an image of the paper;
A partial image creating step of creating a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the paper;
A management step of managing a plurality of the partial images created from one paper;
An input screen including one partial image of the plurality of partial images managed by the management step and an input field for inputting contents entered in the partial image, the one or more second images A screen display step to be displayed on any of the information processing devices;
An input data registration step of registering input data in which the content entered in the partial image is input based on the partial image;
Based on the input data input via the input screen corresponding to each of the plurality of partial images created from one paper, register the contents of the personal information entered in the entry area of the paper A registration step to
Personal information collection method. An individual including an image forming apparatus and a first information processing apparatus, wherein the first information processing apparatus collects personal information of one or more users obtained based on one or more sheets scanned by the image forming apparatus An information collection method,
An image acquisition step of scanning the paper in which an entry area for entering the personal information consisting of a plurality of character strings is designated and acquiring an image of the paper;
A partial image creating step of creating a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the paper;
A management step of managing the plurality of partial images created from each of the one or more sheets scanned in the image acquisition step;
An input screen including one partial image selected at random from the plurality of partial images managed by the management step and an input field for inputting contents entered in the partial image, second information A screen display step to be displayed on the processing device;
An input data registration step of registering input data in which the content entered in the partial image is input based on the partial image;
The content of the personal information entered in the entry area of the paper is registered based on the input data inputted via the input screen corresponding to each of the partial images created from the one paper. Registration step;
Personal information collection method. An image forming apparatus, an information processing apparatus, and based on a sheet scanned by the image forming apparatus, entry information indicating contents of a plurality of character strings handwritten by a user in a predetermined entry area of the sheet An information collection method collected by an information processing device,
An image acquisition step of scanning the paper and acquiring an image of the paper;
A partial image creating step of creating a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the paper;
A management step of managing a plurality of the partial images created from one paper;
A screen display step for displaying an input screen including one partial image of the plurality of partial images managed by the management step and an input field for inputting content written in the partial image;
A registration step of registering the content of the entry information entered in the entry area based on input data input via the input screen corresponding to each of the plurality of partial images created from the one sheet; ,
A method for collecting information. A plurality of information entered by a user by hand from an entry form that includes a first information processing device and a second information processing device and allows the user to manually write personal information consisting of a plurality of character strings in a predetermined entry area. An information collection method in which the first information processing apparatus collects the contents of the character string,
An image acquisition step of acquiring an image of the entry form;
A partial image creating step of creating a plurality of partial images including only a part of a plurality of character strings written in the filling area from the image of the filling form;
A management step of managing the plurality of partial images created from the one entry form;
A screen display step for displaying an input screen including one partial image of the plurality of partial images managed by the management step and an input field for inputting content written in the partial image;
A registration step of registering the content of the personal information entered in the entry area based on the input data input via the input screen corresponding to each of the partial images created from one entry form When,
A method for collecting information. Personal information of one or more users obtained on the basis of one or more sheets scanned by the image forming apparatus, including an image forming apparatus, a first information processing apparatus, and one or more second information processing apparatuses. The first information processing apparatus in the personal information collection system collected by the first information processing apparatus,
The entry area for entering the personal information composed of a plurality of character strings includes only a part of the plurality of character strings entered in the entry area from the image of the paper obtained by scanning the designated paper. A partial image creation unit for creating a plurality of partial images;
A management unit that manages a plurality of the partial images created from one paper;
An input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image, the one or more second images A screen display control unit to be displayed on any of the information processing devices;
An input data registration unit for registering input data in which the content entered in the partial image is input based on the partial image;
Based on the input data input via the input screen corresponding to each of the plurality of partial images created from one paper, register the contents of the personal information entered in the entry area of the paper A registration department to
An information processing apparatus. An individual including an image forming apparatus and a first information processing apparatus, wherein the first information processing apparatus collects personal information of one or more users obtained based on one or more sheets scanned by the image forming apparatus The first information processing apparatus in the information collection system,
The entry area for entering the personal information composed of a plurality of character strings includes only a part of the plurality of character strings entered in the entry area from the image of the paper obtained by scanning the designated paper. A partial image creation unit for creating a plurality of partial images;
A management unit that manages the plurality of partial images created from each of the one or more scanned sheets;
An input screen including one partial image selected at random from the plurality of partial images managed by the management unit, and an input field for inputting contents written in the partial image, second information A screen display control unit to be displayed on the processing device;
An input data registration unit for registering input data in which the content entered in the partial image is input based on the partial image;
The content of the personal information entered in the entry area of the paper is registered based on the input data inputted via the input screen corresponding to each of the partial images created from the one paper. A registration department;
An information processing apparatus. An image forming apparatus, an information processing apparatus, and based on a sheet scanned by the image forming apparatus, entry information indicating contents of a plurality of character strings handwritten by a user in a predetermined entry area of the sheet The information processing apparatus in the information collection system collected by the information processing apparatus,
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings entered in the entry area, from an image of a paper obtained by scanning from the paper;
A management unit that manages a plurality of the partial images created from one paper;
A screen display control unit for displaying an input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image; ,
A registration unit for registering the contents of the entry information entered in the entry area based on the input data input via the input screen corresponding to each of the plurality of partial images created from the one sheet; ,
An information processing apparatus. A plurality of information entered by a user by hand from an entry form that includes a first information processing device and a second information processing device and allows the user to manually write personal information consisting of a plurality of character strings in a predetermined entry area. The first information processing apparatus in the information collection system in which the first information processing apparatus collects the content of the character string,
An image acquisition unit for acquiring an image of the entry form;
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the entry form;
A management unit that manages the plurality of partial images created from the one entry form;
A screen display control unit for displaying an input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image; ,
A registration unit for registering the content of the personal information entered in the entry area based on input data input via the input screen corresponding to each of the plurality of partial images created from one entry form When,
An information processing apparatus. Personal information of one or more users obtained on the basis of one or more sheets scanned by the image forming apparatus, including an image forming apparatus, a first information processing apparatus, and one or more second information processing apparatuses. A computer constituting the first information processing apparatus in the personal information collecting system collected by the first information processing apparatus;
The entry area for entering the personal information composed of a plurality of character strings includes only a part of the plurality of character strings entered in the entry area from the image of the paper obtained by scanning the designated paper. A partial image creation unit for creating multiple partial images,
A management unit that manages the plurality of partial images created from one of the sheets;
An input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting contents written in the partial image, the one or more second images A screen display control unit to be displayed on any of the information processing devices,
An input data registration unit for registering input data in which the content entered in the partial image is input based on the partial image;
Based on the input data input via the input screen corresponding to each of the plurality of partial images created from one paper, register the contents of the personal information entered in the entry area of the paper The registration department,
Program to function as. An individual including an image forming apparatus and a first information processing apparatus, wherein the first information processing apparatus collects personal information of one or more users obtained based on one or more sheets scanned by the image forming apparatus A computer constituting the first information processing apparatus in the information collecting system;
The entry area for entering the personal information composed of a plurality of character strings includes only a part of the plurality of character strings entered in the entry area from the image of the paper obtained by scanning the designated paper. A partial image creation unit for creating multiple partial images,
A management unit that manages a plurality of the partial images created from each of the one or more scanned sheets;
An input screen including one partial image selected at random from the plurality of partial images managed by the management unit, and an input field for inputting contents written in the partial image, second information A screen display control unit to be displayed on the processing device,
An input data registration unit for registering input data in which the content entered in the partial image is input based on the partial image;
The content of the personal information entered in the entry area of the paper is registered based on the input data inputted via the input screen corresponding to each of the partial images created from the one paper. Registration department,
Program to function as. An image forming apparatus, an information processing apparatus, and based on a sheet scanned by the image forming apparatus, entry information indicating contents of a plurality of character strings handwritten by a user in a predetermined entry area of the sheet A computer constituting the information processing apparatus in the information collection system collected by the information processing apparatus;
A partial image creation unit that creates a plurality of partial images including only a part of a plurality of character strings written in the entry area from an image of a paper obtained by scanning from the paper;
A management unit that manages the plurality of partial images created from one of the sheets;
A screen display control unit for displaying an input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting content written in the partial image;
A registration unit for registering the contents of the entry information entered in the entry area based on input data input via the input screen corresponding to each of the plurality of partial images created from the one sheet;
Program to function as. A plurality of information entered by a user by hand from an entry form that includes a first information processing device and a second information processing device and allows the user to manually write personal information consisting of a plurality of character strings in a predetermined entry area. A computer constituting the first information processing device in the information collecting system in which the first information processing device collects the contents of the character string;
An image acquisition unit for acquiring an image of the entry form;
A partial image creation unit for creating a plurality of partial images including only a part of a plurality of character strings entered in the entry area from the image of the entry form;
A management unit for managing the plurality of partial images created from the one entry form;
A screen display control unit for displaying an input screen including one partial image of the plurality of partial images managed by the management unit and an input field for inputting content written in the partial image;
A registration unit for registering the content of the personal information entered in the entry area based on input data input via the input screen corresponding to each of the plurality of partial images created from one entry form ,
Program to function as.   A computer-readable recording medium on which the program according to any one of claims 18 to 21 is recorded.