JP2017049690A - Information processing device, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device for a third person's access prevention to confidential information and for optimizing labor management in a telework management support system.SOLUTION: In a telework management support system 100, a management server 101, a PC 111 for a teleworker, and a PC 121 for a manager are connected through the Internet 130. The management server 101 integrally manages a vacant seat state of a teleworker, and trail data of peeping or impersonation by another person as telework information. The PC 111 for a teleworker prepares trail data to be a base of the telework information to transmit the trail data to the management server 101. The PC 121 for a manager confirms the telework information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program.

  In recent years, interest in telework has increased in each company. Telework has issues such as preventing third-party access to confidential information and optimizing labor management, and these issues must be resolved before it can be introduced.

  Currently, in order to solve these problems, a telework management support system using face authentication technology has been developed.

  By using this system, it is possible to authenticate a person from a webcam image, detect a labor situation, a security incident such as impersonation or peeping by a third party, and notify the administrator.

  However, in the above system, the labor manager of the telecommuter guarantees that the face image used for personal authentication of the person who performs the telework work (for example, telecommuter) is that of the telecommuter himself / herself. There is a need.

JP2015-103198A

  In Patent Document 1, first, when a telecommuter starts working, the face image of the telecommuter is taken, and the face image and the face image that is initially guaranteed to be the telecommuter himself / herself are used. Personal authentication, and set the authentication level (high / medium / low) according to the possibility of being a telecommuter.

  When the authentication level is medium, the face image used for personal authentication is updated with the captured face image to prevent a decrease in personal authentication accuracy. When the authentication level is low, the administrator is made to confirm whether or not the photographed face image can be used for personal authentication. When the administrator determines that the face image is the face image of the telecommuter, the face image used for personal authentication is updated with the photographed face image.

  The above mechanism provides a mechanism for recording the labor situation of a telecommuter and a trail of security incidents while reducing the burden on the administrator.

  However, with this mechanism, it is necessary to first register a facial image that is guaranteed to be the person working at home in the system.

  Therefore, until the face image that is guaranteed to be the person who is working at home for the first time is registered in the system, the person working at home cannot start working, and the productivity of the person working from home is reduced.

  Therefore, in the present invention, in monitoring the occurrence of information security problems in the telework management support system, a mechanism for reducing omissions in detection of information security problems from when a person who performs the telework work starts the telework work I will provide a. Furthermore, it provides a mechanism that reduces the decline in productivity of people who perform telework operations.

  The information processing apparatus according to the present invention includes a face image acquisition unit that acquires an applied authentication face image, and trail data that acquires trail data obtained by using the authentication face image acquired by the face image acquisition unit. Obtained by using the authentication face image based on the obtaining means, the approval process accepting means for accepting the approval process for the authentication face image obtained by the face image obtaining means, and the state of the approval process for the authentication face image. And trail data management means for managing the state of the recorded trail data.

  Further, the information processing method of the present invention is an information processing method in an information processing apparatus, wherein the face image acquisition means of the information processing apparatus acquires a face image for authentication applied by a user, A trail data acquisition unit of the information processing apparatus acquires a trail data obtained by using the authentication face image acquired by the face image acquisition process, and an approval process reception unit of the information processing apparatus However, the approval process accepting step for accepting the approval process for the authentication face image acquired by the face image obtaining step, and the trail data management means of the information processing apparatus, based on the state of the approval process for the authentication face image, And a trail data management step for managing the state of the trail data obtained using the authentication face image.

  The program of the present invention is a program that can be executed in an information processing apparatus, and the information processing apparatus includes a face image acquisition unit that acquires a face image for authentication requested by a user, and the face image acquisition unit. Trail data acquisition means for acquiring the trail data obtained using the acquired authentication face image, approval process reception means for receiving an approval process for the authentication face image acquired by the face image acquisition means, and the authentication It is made to function as a trail data management means for managing the state of the trail data obtained by using the authentication face image based on the state of the approval process for the face image for authentication.

  According to the present invention, it is possible to detect information security problems and the like from when a person who performs a telework service starts the telework service. Furthermore, it becomes possible to reduce the productivity drop of the person who performs telework work.

It is a system configuration figure showing an example of the composition of the telework management support system in the present invention. FIG. 2 is a block diagram illustrating a hardware configuration of an information processing apparatus applicable to the management server 101, the teleworker PC 111, and the administrator PC 121 illustrated in FIG. It is a block diagram which shows an example of a function structure of the telework management assistance system in this invention. It is a flowchart which shows an example of the trail data registration process of the telework management assistance system in this invention. It is a flowchart which shows an example of the detailed process of the face image application for authentication of the telework management assistance system in this invention. It is a flowchart which shows an example of the detailed process of the face image recognition for authentication of the telework management assistance system in this invention. It is a flowchart which shows an example of the detailed process of authentication face image re-selection at the time of the authentication face image return of the telework management assistance system in this invention. It is a flowchart which shows an example of the detailed process of the said trail data correction at the time of the authentication face image rejection of the telework management assistance system in this invention. It is a data block diagram which shows an example of the user information storage table of the telework management assistance system in this invention. It is a data block diagram which shows an example of the trail data storage table of the telework management assistance system in this invention. It is a screen image which shows an example of the approval screen of the face image for authentication of the telework management assistance system in this invention. It is a screen image which shows an example of the re-selection screen of the face image for authentication of the telework management assistance system in this invention. It is a screen image which shows an example of the trail data correction screen at the time of rejection of the face image for authentication of the telework management assistance system in this invention. It is a flowchart which shows an example of the detailed process of authentication face image re-selection at the time of the authentication face image return of the telework management assistance system in this invention. It is a screen image which shows an example of the re-selection screen of the face image for authentication of the telework management assistance system in this invention.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram showing an example of a configuration of a telework management support system to which the information security monitoring process of the present invention is applied.

  The telework management support system 100 is configured such that one or more management servers 101, one or more teleworker PCs 111, and one or more administrator PCs 121 are connected via the Internet 130.

  The management server 101 is a server that centrally manages the teleworker's absence status, peeping by others, or impersonation trail data as telework information, and is constructed on the service environment network 104.

  When the teleworker PC 111 and the administrator PC 121 are connected to the management server 101 by an authentication process using an account ID and a password, and the management server 101 receives telework information from the teleworker PC 111, the management server 101 Store in the database. When there is a telework information acquisition request from the administrator PC 121, the necessary telework information is extracted from the database of the management server 101.

  The teleworker PC 111 is a terminal that creates trail data that is the basis of telework information, and is present on the home network 110. The trail data is created by a dedicated application and passes through the router 112, the Internet 130, and the router 103. It is transmitted to the management server 101. The information security monitoring process of this embodiment operates as a function in this dedicated application.

  The administrator PC 121 is a terminal for confirming telework information, and is present on the in-house network 120. The telework information is confirmed by using a web management console (operating on a web browser), the router 122, the Internet. And the management server 101 via the router 103.

  Hereinafter, the hardware configuration of the information processing apparatus applicable to the management server 101, the teleworker PC 111, and the administrator PC 121 illustrated in FIG. 1 will be described with reference to FIG.

  FIG. 2 is a block diagram illustrating a hardware configuration of an information processing apparatus applicable to the management server 101, the teleworker PC 111, and the administrator PC 121 illustrated in FIG. Since each apparatus has the same configuration, the description will be made using the same reference numerals.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 202 or the external memory 212 is necessary to realize a BIOS (Basic Input / Output System), an operating system program (hereinafter referred to as OS), which is a control program of the CPU 201, and a function executed by each server or each PC. Various programs to be described later are stored.

  A RAM 203 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program or the like necessary for execution of processing from the ROM 202 or the external memory 212 to the RAM 203 and executing the loaded program.

  An input controller 205 controls input from a keyboard (KB) 209, a web camera 210, a pointing device such as a mouse (not shown), and the like. A video controller 206 controls display on a display device such as a CRT display (CRT) 211. In FIG. 2, although described as CRT 211, the display device may be not only a CRT but also other display devices such as a liquid crystal display. These are used by the administrator as needed.

  A memory controller 207 is provided in an external storage device (hard disk (HD)), a flexible disk (FD), or a PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 212 such as a compact flash (registered trademark) memory connected via an adapter.

  A communication I / F controller 208 is connected to and communicates with an external device via a network (for example, the network 104 shown in FIG. 1), and executes communication control processing on the network. For example, communication using TCP / IP is possible.

  Note that the CPU 201 can perform display on the CRT 211 by executing outline font rasterization processing on a display information area in the RAM 203, for example. Further, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the CRT 211.

  Various programs to be described later for realizing the present invention are recorded in the external memory 212, and are executed by the CPU 201 by being loaded into the RAM 203 as necessary. Further, a setting file used when executing the program is also stored in the external memory 212, and detailed description thereof will be described later.

  Hereinafter, the overall flow in the telework management support system 100 will be described with reference to FIG.

  In the telework management support system 100, the teleworker PC 111 performs labor monitoring and information security monitoring by personal authentication processing, the management server 101 manages monitoring information, and the administrator PC 121 displays monitoring information.

  The teleworker PC 111 performs a personal authentication process using an image based on data obtained by photographing with the web camera 210 using a dedicated application. The dedicated application establishes a communication connection with the management server 101 using the account ID and password.

  After establishing a connection with the management server 101, the worker is monitored for labor and information security by the personal authentication process. During monitoring, it detects absence, spoofing, and third-party peeping as events. When an event is detected or at a predetermined timing (for example, at an interval of 10 seconds), the teleworker PC 111 transmits event trail data to the management server 101.

  The teleworker PC 111 has a function for applying for an authentication face image to be used in the personal authentication process using a dedicated application, and transmits the authentication face image to the management server 101.

  Upon receiving the event trail data from the teleworker PC 111, the management server 101 stores the event trail data in the trail data storage table of the management database 402 as telework information. When receiving the trail data, the management server 101 notifies the administrator PC 121 of event detection. Further, when receiving the authentication face image from the teleworker PC 111, the management server 101 stores it as trail data processing information in the user information storage table of the management database 402. When receiving the authentication face image, the management server 101 notifies the administrator PC 121 of an approval request. Notification of the event detection and approval request may be realized, for example, by sending an e-mail, or may be notified on a web management console described later.

  The administrator PC 121 can check the trail data of the teleworker event on the management server using the web management console. The web management console can be used by accessing a dedicated URL from a web browser. In the web management console, you can check the time and image when an event is detected, the running application, the file being inquired, and so on. Moreover, the authentication face image of the teleworker on the management server can be confirmed, approved, rejected, and returned using the web management console.

  Next, each function of the teleworker PC 111 and the management server 101 in the present embodiment will be described with reference to FIG.

  The teleworker PC 111 includes an imaging unit 303 and a camera image acquisition unit 304. The imaging unit 303 is a camera for photographing a teleworker that is a subject, corresponds to the above-described web camera 210, and has a camera image. The acquisition unit 304 acquires data acquired by the imaging unit 303 as an image (hereinafter referred to as a camera image). The timing for acquiring the camera image may be acquired at every time interval set in advance, or may be acquired as soon as the previous processing is completed in the repetitive processing.

  The teleworker PC 111 includes a user information storage unit 301, a person identification unit 305, an authentication face image application unit 306, and an authentication face image transmission unit 307.

  The user information storage unit 301 stores information about users managed by the present system, including face photo data necessary for face recognition. In this embodiment, user information is stored on the management server 101, and difference data of user information is distributed from the management server 101 to the teleworker PC 111 when the system is activated.

  The person identification unit 305 recognizes the face of a person in the camera image acquired by the camera image acquisition unit 304 and uses the face photo data (authentication face image) stored in the user information storage unit 301. Identify a person. These can be realized by using a known face detection technique and face recognition technique.

  Further, the person specifying unit 305 classifies the terminal front state according to the specified person. That is, using the authentication face image, the terminal front state is classified into “person only”, “third party reflection”, and the like.

  The terminal front state is “only the person” when only the teleworker himself / herself is reflected in the camera image, and the teleworker himself / herself and other users (hereinafter referred to as other users) stored in the user information storage unit 301. When both of them are shown or only other users are shown, “other user's reflection”, the person who is not identified as the teleworker himself and the user stored in the user information storage unit 301 by the person specifying unit 305 (Hereinafter referred to as a third party) or when only a third party is shown as “Third Party Capture”, and when no person is shown in the camera image, "Seat".

  The authentication face image application 306 applies for an authentication face image to be used for the personal authentication process of the teleworker. A camera image is acquired from the camera image acquisition unit 304, the position of the face shown in the camera image is detected by a known face detection technique, and the detected face area can be acquired as an authentication face image.

  The authentication face image transmission unit 307 transmits the authentication face image acquired by the authentication face image application unit 306 to the management server 101 together with user information.

  The teleworker PC 111 includes a trail data transmission unit 308 and an authentication face image approval result reception unit 309.

  The trail data transmission unit 308 transmits the camera image acquired by the camera image acquisition unit 304 and the terminal front state classified by the person identification unit 305 using the authentication face image to the management server 101 as trail data. .

  The authentication face image approval result receiving unit 309 receives the approval result notified from the authentication face image approval unit of the management server 101 described later. If the authentication face image is returned, the authentication face image approval result receiving unit 309 notifies the authentication face image application unit 306 of the authentication face image acquisition request again. The notification of the authentication face image acquisition request may be realized, for example, by sending an e-mail to a teleworker PC, or may be notified by a dedicated application.

  The management server 101 includes an authentication face image reception unit 401, a management database 402, a trail data reception unit 403, a trail data processing unit 404, and an authentication face image approval unit 405.

  The authentication face image receiving unit 401 receives (acquires) the authentication face image applied by the user from the authentication face image application unit 306 and transmitted from the teleworker PC 111 authentication face image transmission unit 307, and receives the management database 402. To the user information storage table. Further, the manager PC 121 is notified of an approval request for the received (acquired) authentication face image.

  The management database 402 is a storage area for storing the user information exemplified in FIG. 9 and the trail data exemplified in FIG.

  The trail data receiving unit 403 receives (acquires) the trail data transmitted from the trail data transmission unit 308 of the teleworker PC 111 and stores it in the trail data storage table of the management database 402.

  The trail data processing unit 404 acquires the trail data from the trail data storage table of the management database 402 when the trail data receiving unit 403 makes a request to store the trail data, and acquires the teleworker user identification information from the trail data. Then, based on the value of the face image state for authentication of the user identification information, one of the values “confirmed”, “provisional approval”, and “hold” is set as the state of the trail data. Further, when there is a trail data browsing request from the administrator PC 121, the trail data is acquired from the trail data storage table of the management database 402, and the user identification information of the teleworker is acquired from the trail data.

The authentication face image approval unit 405 performs an approval process on the notified authentication face image approval request. That is, the approval process for the authentication face image is accepted based on the operation content on the administrator PC 121.
(Description of FIG. 9)

  Here, an example of the user information storage table of the management database 402 according to the embodiment of the present invention will be described with reference to FIG.

  The user information storage table in FIG. 9 represents users who use the telework management support system, one row of which is stored in the management database 402.

  The data set in the user ID column is an alphanumeric string that identifies the user who uses the telework management support system.

  The data set in the authentication face image field represents a link destination for the face photo data (authentication face image) used for face recognition, that is, a folder path name and a file name, and is specified by the link destination. Actual face image data is stored in the place.

  The data set in the registration date / time column stores the time when the authentication face image of the record is stored.

The data set in the authentication face image status field indicates whether or not the authentication face image of the record has been approved by the administrator. “Waiting for approval”, which has not been approved yet, “Approved” indicating that it has been approved by the administrator, “Rejection” indicating that it has not been approved as a result of the approval process by the administrator, Image of the person himself Is set to “return” indicating that the image is not approved because the image is unclear or inappropriate.
(Explanation of FIG. 10)

  Here, an example of the trail data storage table of the management database 402 in the embodiment of the present invention will be described with reference to FIG.

  The data set in the trail ID column is a numeric string uniquely set for each trail data in order to identify the trail data.

  The data set in the date / time column is a date and time indicating when the trail data is acquired.

  The data set in the terminal front state column is the terminal front state classified by the person specifying unit 305, and “person only”, “other user image”, “third party image”, “seating”. Is set.

  The data set in the user ID column is an alphanumeric string that identifies a user who uses this telework management support system and is assigned to each teleworker to identify which teleworker has transmitted the trail data.

  The data set in the camera image field represents a link destination for the camera image acquired by the camera image acquisition unit 304, that is, a folder path name and a file name, and the actual camera is located at the location specified by the link destination. Images are stored.

  The data set in the status column is a value set by the trail data processing unit 404 according to the status of the authentication face image of the user ID of the trail data, and any of “confirmed”, “provisional approval”, and “hold” Is set.

  Hereinafter, with reference to FIG. 4, the procedure of the registration process of the trail data in the telework management support system 100 of this embodiment will be described.

  The processes in steps S401 to S404 and S411 shown in FIG. 4 are processes in which the CPU 201 of the teleworker PC 111 reads and executes a predetermined control program.

  Further, the processes in steps S405 to S410 are processes in which the CPU 201 of the management server 101 reads and executes a predetermined control program.

  In step S401, the person identifying unit 305 of the teleworker PC 111 determines whether the authentication face image of the record corresponding to the user ID that activated the dedicated application in the user information storage unit 301 has been registered. If registered, the process proceeds to step S402. If not registered, the process proceeds to step S411.

  In step S <b> 402, the camera image acquisition unit 304 of the teleworker PC 111 acquires the camera image captured by the imaging unit 303.

  In step S403, the person specifying unit 305 of the teleworker PC 111 classifies the terminal front state on the camera image acquired in step S402.

  In step S404, the trail data transmission unit 308 of the teleworker PC 111 transmits to the management server 101 the trail data including the camera image acquired in step S402 and the terminal front state classified in step S403.

  In step S405, the trail data receiving unit 403 of the management server 101 receives the trail data transmitted from the teleworker PC 111.

  In step S406, the trail data processing unit 404 of the management server 101 refers to the authentication face image state of the record that matches the user ID of the trail data received in step S405 from the user information storage table of the management database 402, and performs authentication. It is determined whether or not the face image is “approved”. If the authentication face image state is “approved”, the process proceeds to step S407. If the authentication face image state is not “approved”, the process proceeds to step S408.

  In step S407, the status of the received trail data is registered as “confirmed” in the management database 402 of the management server 101.

  That is, since the state of the authentication face image has been approved, the trail data obtained using the authentication face image is registered as confirmed data.

  In step S408, the trail data processing unit 404 of the management server 101 determines whether or not the authentication face image state referred to in step S406 is “return”. If the authentication face image state is “return”, the process proceeds to step S409. If the authentication face image state is not “return”, the process proceeds to step S410.

  In step S409, the status of the received trail data is registered as “pending” in the management database 402 of the management server 101.

  In other words, when it is sent back for reasons such as the face image being unclear, the trail data obtained using the face image that has been sent back is considered to have low accuracy in determining the terminal front state. Therefore, the status of the trail data is put on hold.

  In step S410, the status of the received trail data is registered as “provisional approval” in the management database 402 of the management server 101.

  The status of the trail data registered as pending or provisional approval is updated to be confirmed by performing an approval process on the authentication face image.

  As described above, even when the authentication face image is not approved by the administrator, the trail data can be registered by setting the status to the trail data obtained using the authentication face image. . Accordingly, the telecommuter can start work without waiting for the authentication face image approval process, and thus it is possible to reduce a decrease in productivity.

  Then, by updating the status of the trail data according to the approval process for the authentication face image, it becomes possible to reduce the omission of recording and detection of security problems in the trail data.

  In step S411, the person identifying unit 305 of the teleworker PC 111 inputs an authentication face image application request to the authentication face image application unit 306. In response to the authentication face image application request, an authentication face image application process of FIG. 5 described later is performed. The application process here may be performed when instructed by a user (teleworker) using the teleworker PC 111.

  The procedure of the trail data registration process in the telework management support system 100 according to the embodiment of the present invention has been described above with reference to FIG.

  Next, the authentication face image application process in the telework management support system 100 according to the embodiment of the present invention will be described with reference to FIG.

  The processing of steps 501 to S504 and S506 shown in FIG. 5 is processing in which the CPU 201 of the teleworker PC 111 reads and executes a predetermined control program.

  The processing in step S505 (processing whose details are shown in the flowchart of FIG. 6) is processing in which the administrator PC 121 and the management server 101 read and execute a predetermined control program.

  In step S501, the authentication face image application unit 306 determines whether there is an authentication face image photographing request from the dedicated application of the teleworker PC 111. If there is a request for photographing the authentication face image, the process proceeds to step S502. If there is no request, the process proceeds to step S501, and a request for photographing the authentication face image is awaited again.

  In step S <b> 502, the authentication face image application unit 306 acquires a camera image from the camera image acquisition unit 304.

  In step S503, the authentication face image application unit 306 performs face detection processing on the camera image acquired in step S502, and detects the face position. An authentication face image is cut out from the camera image based on the detected face position, and the authentication face image is passed to the authentication face image transmission unit 307.

  In step S504, the authentication face image transmission unit 307 transmits the authentication face image input in step S503 to the authentication face image reception unit 401 of the management server 101.

  In step S505, the authentication face image receiving unit 401 of the management server 101 receives the authentication face image transmitted in step S504, and the administrator uses the administrator PC 121 to approve the authentication face image. I do. The authentication face image approval unit 405 of the management server 101 transmits the authentication face image approval result to the authentication face image approval result reception unit 309 of the teleworker PC 111. Details of the authentication face image approval process in step S505 will be described later with reference to FIG.

  In step S506, the authentication face image approval result receiving unit 309 of the teleworker PC 111 receives the authentication face image approval result transmitted in step S505. If the teleworker confirms the received approval result, is sent back, and re-photographing is requested, the teleworker may perform the authentication face image application process described with reference to FIG. 5 again.

  The authentication face image application processing procedure in the telework management support system 100 according to the embodiment of the present invention has been described above with reference to FIG.

  Next, with reference to FIG. 6, a detailed process of approving the face image for authentication in the telework management support system 100 according to the embodiment of the present invention will be described.

  The processes in steps S601, S602, and S608 to 612 illustrated in FIG. 6 are processes that the CPU 201 of the management server 101 reads out and executes a predetermined control program.

  Further, the processes in steps S603 to S607 are processes in which the CPU 201 of the administrator PC 121 reads and executes a predetermined control program.

  In step S601, the authentication face image reception unit 401 of the management server 101 receives the authentication face image transmitted in step S504, and stores the received authentication face image in the user information storage table of the management database 402. . At this point, the status is awaiting approval.

  Then, the authentication face image approval request is input to the authentication face image approval unit 405.

  In step S602, the authentication face image approval unit 405 of the management server 101 transmits the authentication face image approval request input in step S601 to the administrator PC 121.

  In step S603, the administrator PC 121 receives the authentication face image approval request transmitted in step S602.

  In step S604, the administrator PC 121 determines whether the administrator has performed an approval process for the authentication face image approval request received in step S603. If the approval process has been performed, the process proceeds to step S605. If not, the process proceeds to step S604. The administrator can perform the approval process on the authentication face image approval screen illustrated in FIG.

  Here, with reference to FIG. 11, an example of a display screen for the administrator to approve the face image for authentication in the web management console of the administrator PC 121 of the telework management support system 100 according to the present invention will be described.

  The display area indicated by 1101 is an area for displaying the authentication face image that is the subject of the approval process. If the administrator browses the image displayed in the display area designated by 1101 and uses it for personal authentication of the teleworker, the administrator may approve the authentication face image.

  Reference numeral 1102 denotes a button for accepting the approval of the authentication face image that is the subject of the approval process from the administrator.

  Reference numeral 1103 denotes a button for accepting an instruction to send back the authentication face image that is the subject of the approval process from the administrator.

  Reference numeral 1104 denotes a button for the administrator to accept an instruction to reject the authentication face image that is the subject of the approval process.

  When the administrator presses any one of the approval button 1102, the return button 1103, and the reject button 1104, the approval process is accepted and the processing result is transmitted to the management server 101.

As described above, the administrator can check the authentication face image applied by the teleworker and perform the authentication face image approval process using the screen shown in FIG.
Returning to the description of FIG.

  In step S <b> 605, the administrator PC 121 determines whether the administrator approval processing result is “return”. If it is “return”, the process proceeds to step S606. If it is not “return”, the process proceeds to step S607.

  In step S606, the administrator PC 121 performs re-selection processing of the authentication face image. Details of the authentication face image reselection processing in step S606 will be described later with reference to FIG.

  In step S <b> 607, the administrator PC 121 transmits the administrator approval processing result and the authentication face image to the authentication face image approval unit 405 of the management server 101.

  In step S608, the authentication face image approval unit 405 of the management server 101 receives the authentication face image and the approval result transmitted in step S607, and determines whether or not the approval result is “approval”. If the approval result is “approval”, the process proceeds to step S609. If it is “rejected”, the process proceeds to step S610.

  In step S609, the authentication face image approval unit 405 of the management server 101 matches the user ID of the authentication face image received in step S608 from the trail data storage table of the management database 402, and the status is “pending”. It is determined whether or not certain trail data exists. If it exists, the trail data group is stored in the primary storage device, and the process proceeds to step S611. If not, the process proceeds to step S612.

  In step S610, the authentication face image approval unit 405 of the management server 101 matches the user ID of the authentication face image received in step S608 from the trail data storage table of the management database 402, and the status is “provisional approval”. Further, a correction process is performed on the trail data group in which the terminal front state is “third party reflection”. Detailed processing of the trail data correction processing in step S610 will be described later with reference to FIG.

  In step S611, the authentication face image approving unit 405 of the management server 101 uses the authentication face image received in step S608 for the trail data group stored in step S609 to reclassify the terminal front state, Update the terminal forward state of the trail data record.

  With this process, the trail data managed as a hold because the authentication face image is returned can be re-determined and updated based on the approved authentication face image.

  In step S612, the authentication face image approval unit 405 of the management server 101 matches the user ID of the authentication face image received in step S608 from the trail data storage table of the management database 402, and the status is “pending” or For the trail data of “provisional approval”, the status of each record is updated to “confirmed”.

  That is, in step S608, when the authentication face image waiting for approval is approved, the status of the trail data obtained using the authentication face image can be updated from provisional approval to confirmation.

  As described above, the detailed processing procedure for the authentication face image approval in the telework management support system 100 according to the embodiment of the present invention has been described with reference to FIG.

Next, detailed processing of authentication face image reselection processing in the telework management support system 100 according to the embodiment of the present invention will be described with reference to FIG.

  The processes in steps S701, S704, S705, and S708 to S710 illustrated in FIG. 7 are processes in which the CPU 201 of the administrator PC 121 reads and executes a predetermined control program.

  Further, the processes in steps S702, S703, S706, S707, S711, and S712 are processes in which the CPU 201 of the management server 101 reads and executes a predetermined control program.

In step S <b> 701, the administrator PC 121 approves the authentication face image reselection request, the authentication face image, and the trail ID if the trail ID is stored in the primary storage device. To the unit 405. The administrator can reselect the authentication face image on the authentication face image reselection screen illustrated in FIG.
Returning to the description of FIG.

  In step S702, the authentication face image 405 of the management server 101 receives the authentication face image reselection request, the authentication face image, and the trail ID transmitted in step S701.

  In step S703, the authentication face image 405 of the management server 101 matches the user ID of the authentication face image received in step S702 from the trail data storage table of the management database 402, and the trail ID is received in step S702. If so, a trail data group that does not match the trail ID, the state is “provisional approval”, and the terminal forward state is “only the person” is acquired. The authentication face image 405 of the management server 101 stores the trail data record with the earliest date and time from the trail data group in the primary storage device. At this time, the trail data stored in the primary storage device may be selected at random, or may be selected according to the orientation of the face detected by performing face detection processing, for example, received in step S702 For example, the authentication face image may be selected in descending order of similarity calculated by performing personal authentication processing. The authentication face image 405 of the management server 101 performs face detection processing on the camera image of the trail data stored in the primary storage device, detects the face position, and detects the detected face position from the camera image. Based on this, the authentication face image is cut out, and the authentication face image and the trail ID of the trail data stored in the primary storage device are transmitted to the administrator PC 121.

  In step S704, the administrator PC 121 receives the trail ID and authentication face image transmitted in step S703, and stores the trail ID in the primary storage device.

  In step S705, the administrator PC 121 determines whether the administrator has performed an approval process on the authentication face image received in step S704. If the approval process has been performed, the approval result and the authentication face image are transmitted to the authentication face image approval unit 405 of the management server 101, and the process proceeds to step S706. If not, the process proceeds to step S708.

  In step S706, the authentication face image approving unit 405 of the management server 101 receives the authentication face image transmitted in step S705, and uses the authentication face image user ID of the authentication face image from the trail data storage table of the management database 402. A trail data group that matches and the status is “provisional approval” or “pending” is acquired. Using the authentication face image, the terminal front state is re-segmented with respect to the acquired camera image of each trail data record, and the terminal front state of each trail data record is updated.

  In step S707, the authentication face image approval unit 405 of the management server 101 matches the user ID of the authentication face image transmitted in step S705 from the trail data storage table of the management database 402, and the status is “pending”. Alternatively, the status of each record is updated to “confirmed” for the “temporary approval” trail data.

  In step S708, the administrator PC 121 determines whether the administrator has made a reselection request for the authentication face image received in step S704. If a reselection request has been made, the process proceeds to step S701. If not, the process proceeds to step S709.

  In step S709, the administrator PC 121 determines whether the administrator has made a re-shooting request for the authentication face image received in step S704. If a re-shooting request has been made, the process proceeds to step S710. If not, the process proceeds to step S708.

  In step S <b> 710, the administrator PC 121 transmits a request to re-photograph the authentication face image to the authentication face image approval unit 405 of the management server 101.

  In step S711, the authentication face image approval unit 405 of the management server 101 receives the authentication face image re-photographing request transmitted in step S710, and sends it to the authentication face image application unit 306 of the teleworker PC 111 for authentication. Send a face image capture request.

  In step S712, the authentication face image approval unit 405 of the management server 101 searches the authentication face image user ID corresponding to the authentication face image re-shooting request transmitted in step S710 from the trail data storage table of the management database 402. And the status of the trail data that is in the “provisional approval” state is updated to “pending”.

  The detailed processing procedure for reselecting the authentication face image in the telework management support system 100 according to the embodiment of the present invention has been described above with reference to FIG.

  Here, with reference to FIG. 12, an example of a display screen for the administrator to reselect the authentication face image in the web management console of the administrator PC 121 of the telework management support system 100 according to the present invention will be described.

  A display area 1201 is an area for displaying the authentication face image that is currently the subject of the approval process. If the administrator browses the image displayed in the display area indicated by 1201 and is sufficient to use it for personal authentication of the teleworker, the administrator may approve the face image for authentication.

  Reference numeral 1202 denotes a button for accepting an approval instruction for an authentication face image that is an object of approval processing from the administrator.

  Reference numeral 1203 denotes a button for receiving an instruction to request re-photographing of a face image for authentication by the teleworker from the administrator.

  Reference numeral 1204 denotes a button for receiving an instruction for reselecting the authentication face image from the administrator.

  As described above, the administrator uses the screen shown in FIG. 12 to send back the authentication face image applied by the teleworker, and then the state automatically selected by the management server 101 is “provisional approval”. The authentication face image approval process and reselection process acquired from the camera image of the trail data registered as “and the re-imaging request to the teleworker can be performed.

  Next, detailed processing of the trail data correction processing in the telework management support system 100 according to the embodiment of the present invention will be described with reference to FIG.

  The processes in steps S801, S802, S807, and S808 shown in FIG. 8 are processes that the CPU 201 of the management server 101 reads out and executes a predetermined control program.

  Further, the processes in steps S803 to S806 are processes in which the CPU 201 of the administrator PC 121 reads and executes a predetermined control program.

  The process illustrated in FIG. 8 is a process in which the administrator corrects the terminal front state for the trail data obtained by using the rejected authentication face image.

  That is, the fact that the authentication face image has been rejected means that the face of another person has been captured. Therefore, as for the trail data obtained from the face of another person, the terminal front state is inappropriate (the trail data determined using the face of the other person as the principal should be judged as a third party image originally. This is a process for correcting the data.

  In step S801, the authentication face image approving unit 405 of the management server 101 matches the user ID of the authentication face image received in step S608 of FIG. A trail data group in which the “provisional approval” and the state ahead of the terminal are “third party reflection” are acquired and stored in the primary storage device.

  In step S <b> 802, the authentication face image approval unit 405 of the physical server 101 transmits the trail data group stored in step S <b> 801 to the administrator PC 121.

  In step S803, the administrator PC 121 receives the trail data group transmitted in step S802.

  In step S804, the administrator PC 121 starts repetitive processing for the trail data group received in step S803.

  In step S805, the administrator PC 121 determines whether the administrator has performed correction processing on the trail data being processed. If correction processing has been performed, the process proceeds to step S806. If not, the process proceeds to step S805. The administrator can perform the correction process on the trail data correction screen illustrated in FIG.

  In step S806, if there is unprocessed trail data, the administrator PC 121 returns to step S805. If there is no unprocessed trail data, the repetitive processing is terminated, and the target trail data group and the correction result of the trail data group with respect to the terminal front state are transmitted to the authentication face image approval unit 405 of the management server 101. .

  In step S807, the authentication face image approval unit 405 of the management server 101 receives the trail data group and the correction result of the trail data group with respect to the terminal forward state, and the corresponding trail data in the trail data storage table of the management database 402 is received. The terminal front state of the record is updated to each correction result, and the state is updated to “confirmed”.

  With this process, the trail data determined using the other person's face can be updated to the third party reflection that is the original state in front of the terminal.

  In step S808, the authentication face image approving unit 405 of the management server 101 matches the user ID of the authentication face image received in step S608 of FIG. For the trail data group in which “provisional approval” and the terminal front state are “only the person”, the terminal front state is updated to “third party reflection” and the state is updated to “confirmed”.

  Referring to FIG. 13, after the administrator rejects the authentication face image in the web management console of the administrator PC 121 of the telework management support system 100 according to the present invention, the terminal front state is “third party reflection”. An example of a screen for correcting the terminal forward state of the trail data registered as “provisional approval” and the state will be described.

  A display area 1301 is an area for displaying a camera image of the trail data to be corrected. The administrator may view the image displayed in the display area indicated by 1301 and determine whether the terminal front state is fixed as “third-party reflection” or corrected to “only the person”.

  Reference numeral 1302 denotes a button for accepting an instruction from the administrator to confirm the terminal front state of the trail data that is subject to correction processing as “third-party capture”. When the button 1302 is pressed, the terminal forward state of the trail data is saved as “third party reflection” in the primary storage device.

  Reference numeral 1303 denotes a button for receiving an instruction from the administrator to correct the terminal front state of the trail data to be corrected to “only the person”. When the button 1303 is pressed, the terminal forward state of the trail data is corrected to “only the person” and stored in the primary storage device.

  As described above, the administrator uses the screen shown in FIG. 13 to reject the authentication face image applied for by the teleworker, and then the state is “provisional approval” in the management server 101 and the terminal front state. Can correct the state ahead of the terminal of the trail data registered as “third party reflection”.

As described above, the telework management support system provides a mechanism that can detect information security problems at the same time that the person who performs the telework work starts, and reduces the productivity loss of the person who performs the telework work. In addition, the work load when the administrator approves the face image for authentication for personal authentication can be reduced.
<Second Embodiment>
A second embodiment of the present invention will be described.

  However, with respect to the processing flow, screen, and data configuration, description of the same parts as those of the first embodiment will be omitted, and differences from the first embodiment will be described.

  FIG. 14 shows an example of detailed processing of authentication face image reselection processing in the telework management support system 100 according to the embodiment of the present invention.

  The process shown in FIG. 14 is performed after step S703 with step S706 as step S1401 of the detailed process of the authentication face image reselection process in the telework management support system 100 of the first embodiment shown in FIG. The processing flow is changed as described above.

  In the following, different processing is described according to the first embodiment.

  In step S703, the authentication face image 405 of the management server 101 matches the user ID of the authentication face image received in step S702 from the trail data storage table of the management database 402, and the trail ID is received in step S702. If so, a trail data group that does not match the trail ID, the state is “provisional approval”, and the terminal forward state is “only the person” is acquired. The authentication face image 405 of the management server 101 stores the trail data record with the earliest date and time from the trail data group in the primary storage device. At this time, the trail data stored in the primary storage device may be selected at random, or may be selected according to the orientation of the face detected by performing face detection processing, for example, received in step S702 For example, the authentication face image may be selected in descending order of similarity calculated by performing personal authentication processing. The authentication face image 405 of the management server 101 performs face detection processing on the camera image of the trail data stored in the primary storage device, detects the face position, and detects the detected face position from the camera image. Based on this, the authentication face image is cut out, and the authentication face image and the trail ID of the trail data stored in the primary storage device are stored in the primary storage device as the reselected authentication face image.

  In step S1401, the authentication face image 405 of the management server 101 matches the user ID of the authentication face image stored in the primary storage device in step S1402 from the trail data storage table of the management database 402, and the status is “temporary”. A trail data group that is “approved” or “pending” is acquired. For the acquired camera image of each trail data record, the authentication face image is used to re-divide the terminal front state. The authentication face image 405 of the management server 101 manages the authentication face image, the trail ID of the trail data stored in the primary storage device, the acquired trail data group, and the result of re-segmentation of the terminal front state. To the personal computer 121.

  In step S704, the administrator PC 121 receives the trail ID, the authentication face image, the trail data group, and the reclassification result of the terminal front state transmitted in step S703, and stores the trail ID in the primary storage device.

  In step S705, the administrator PC 121 determines whether the administrator has performed an approval process on the authentication face image received in step S704. If the approval process has been performed, the approval result, the authentication face image, the trail data group, and the reclassification result of the terminal front state are transmitted to the authentication face image approval unit 405 of the management server 101, and the process proceeds to step S707. If not, the process proceeds to step S708.

  In step S707, the authentication face image approval unit 405 of the management server 101 receives the authentication face image, the trail data group, and the result of re-segmentation of the terminal front state transmitted in step S705, and each of the trail data records. The terminal front state is updated, and the state of each record is updated to “confirmed”.

  Here, with reference to FIG. 15, an example of a display screen for the administrator to reselect the authentication face image in the web management console of the administrator PC 121 of the telework management support system 100 according to the present invention will be described.

  The display area 1501 is currently subject to approval processing for a camera image group of trail data whose current state is “provisional approval” or “hold” and for each camera image in the camera image group. This is an area for displaying a change in the terminal front state when the terminal front state is determined using the authentication face image.

  The administrator browses the image displayed in the display area indicated by 1201 and is sufficient to use it for personal authentication of the teleworker, and changes in the terminal front state displayed in the display area indicated by 1501 And confirming whether the terminal front state of the trail data is properly determined, and approving the authentication face image.

  As described above, the administrator can display the authentication face image that is currently the object of approval displayed in the display area indicated by 1201 and the authentication of the display area indicated by 1201 displayed in the display area indicated by 1501. Approval processing can be performed while comparing the results obtained by classifying the terminal front states of the camera images of the “provisional approval” and “hold” trail data with the face image. Therefore, the administrator can directly confirm the influence of the authentication face image on the trail data, and can efficiently perform the authentication face image reselection process and the approval process.

  Moreover, the program in this invention is a program which makes a computer perform the process of FIGS. 4-8, FIG. The program in the present invention may be a program for each process in FIGS. 4 to 8 and 14.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by reading and executing.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium recording the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Furthermore, after the program read from the recording medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code. It goes without saying that the case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  The present invention may be applied to a system constituted by a plurality of devices or an apparatus constituted by a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention. In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

101 Management server 111 Teleworker PC
121 Administrator PC

Claims (9)

A face image acquisition means for acquiring the applied face image for authentication;
Trail data acquisition means for acquiring trail data obtained using the authentication face image acquired by the face image acquisition means;
An approval process receiving means for receiving an approval process for the authentication face image acquired by the face image acquiring means;
Based on the status of the approval process for the authentication face image, trail data management means for managing the status of the trail data obtained using the authentication face image;
An information processing apparatus comprising:   The trail data management means updates the state of the trail data obtained by using the authentication face image according to the result of the approval process for the authentication face image received by the approval process reception means. The information processing apparatus according to claim 1.   The trail data management means, when accepting the approval process for the authentication face image by the approval process accepting means, indicates the terminal forward state of the trail data obtained by using the authentication face image for the approved authentication The information processing apparatus according to claim 1, wherein the information processing apparatus is updated using a face image. The approval process accepting unit accepts any result of approval, return, and rejection as an approval process for the authentication face image,
4. The apparatus according to claim 1, further comprising a reselecting unit configured to reselect the authentication face image when the approval process accepting unit accepts a return as an approval process for the authentication face image. The information processing apparatus according to item. The reselection means includes
The information processing apparatus according to claim 4, wherein reselection of the authentication face image is received from an image included in the trail data of the user who applied for the authentication face image.   6. The re-imaging request accepting unit that accepts a request to re-photograph the authentication face image when the approval process accepting unit accepts a return as an approval process for the authentication face image. The information processing apparatus described in 1.   When the approval process accepting unit accepts rejection as the approval process for the authentication face image, the approval process accepting unit further includes a correction accepting unit that accepts correction of the terminal front state of the trail data obtained using the authentication face image. The information processing apparatus according to claim 4, wherein the information processing apparatus is an information processing apparatus. An information processing method in an information processing apparatus,
A face image acquisition unit in which the face image acquisition means of the information processing apparatus acquires an authentication face image applied by a user;
The trail data acquisition unit of the information processing apparatus acquires a trail data obtained using the authentication face image acquired by the face image acquisition step, and a trail data acquisition step.
An approval process receiving means for receiving an approval process for the authentication face image acquired by the face image acquiring process,
The trail data management means of the information processing device manages the status of the trail data obtained using the authentication face image based on the status of the approval process for the authentication face image, and
An information processing method comprising: A program executable in the information processing apparatus,
The information processing apparatus;
Face image acquisition means for acquiring a face image for authentication requested by a user;
Trail data acquisition means for acquiring trail data obtained using the authentication face image acquired by the face image acquisition means;
An approval process receiving means for receiving an approval process for the authentication face image acquired by the face image acquiring means;
A program that functions as trail data management means for managing the state of trail data obtained by using the authentication face image based on the state of the approval process for the authentication face image.

Images