JP2018156509A - Email erroneous transmission prevention device, email erroneous transmission prevention program and email erroneous transmission prevention method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a secure e-mail sending/receiving technology focusing on a sender of an e-mail.SOLUTION: The email erroneous transmission prevention device includes: a destination confirmation processing part configured to output for confirming the destination before transmitting a created email; and a confirmation behavior analysis part configured to analyze a piece of information relevant to the behavior of an operator for confirming the destination of the email. The destination confirmation processing part is configured to determines whether the processing result by the confirmation behavior analysis part satisfies a predetermined reference, and when the predetermined reference is not satisfied, to output again for confirming the destination.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an erroneous mail transmission prevention device, an erroneous mail transmission prevention program, and an erroneous mail transmission prevention method.

  Patent Document 1 discloses means for analyzing and evaluating the safety of sending an e-mail and transmitting evaluation result information to a client device without going through a mail server, and response information from the client device to evaluation result information. Describes a technique for receiving e-mail according to the transmission instruction when the input information is received and the information is information indicating a transmission instruction.

JP 2010-198379 A

  In the technique described in Patent Document 1, there is no disclosure regarding the e-mail transmission safety focused on the operator.

  An object of the present invention is to provide a safer technique for sending and receiving e-mails by paying attention to the sender of e-mails.

  The present application includes a plurality of means for solving at least a part of the above-described problems. Examples of such means are as follows. In order to solve the above-described problem, a mail erroneous transmission preventing apparatus according to an aspect of the present invention includes a destination confirmation processing unit that performs output for confirming a destination before transmission of the created email, and the destination of the email A confirmation behavior analysis unit that analyzes information related to the behavior of the operator related to the confirmation, and the destination confirmation processing unit determines whether or not the processing result of the confirmation behavior analysis unit satisfies a predetermined criterion, When the predetermined criterion is not satisfied, an output for confirming the destination is performed again.

  Further, in the apparatus for preventing erroneous mail transmission, a confirmation risk analysis unit that analyzes a risk according to the characteristics of the e-mail destination, and a processing result of the confirmation behavior analysis unit according to an analysis result of the confirmation risk analysis unit A destination confirmation evaluation unit for evaluating the destination, and the destination confirmation processing unit may perform output for confirming the destination again in accordance with the evaluation.

  Further, in the email erroneous transmission prevention device, the destination confirmation time evaluation unit evaluates the superiority or inferiority of the processing result of the confirmation behavior analysis unit according to the level of risk in the analysis result of the confirmation risk analysis unit, The destination confirmation processing unit performs the transmission of the e-mail when the evaluation of the evaluation unit at the time of destination confirmation is more than a predetermined value, and outputs to confirm the destination when the evaluation is not more than a predetermined value. It may be characterized by that.

  In addition, in the email erroneous transmission preventing apparatus, a mail editing unit that receives an operation related to the creation of the email, and a creation behavior that analyzes information related to an operator's behavior related to the creation of the email by the email editing unit A comprehensive evaluation unit that evaluates using the analysis unit, the processing result of the creation behavior analysis unit, and the processing result of the confirmation behavior analysis unit, and the destination confirmation processing unit is a process of the comprehensive evaluation unit The determination may be performed using the result.

  Further, in the email erroneous transmission prevention device, a creation risk analysis unit that analyzes a risk corresponding to a situation in which the email is created, and a process of the creation behavior analysis unit according to an analysis result of the creation risk analysis unit An e-mail creation evaluation unit that evaluates the result, and the comprehensive evaluation unit performs the evaluation using the processing result of the e-mail creation evaluation unit, and the destination confirmation processing unit again performs the determination according to the determination. An output for confirming the destination may be performed.

  Further, in the erroneous mail transmission prevention device, a confirmation risk analysis unit that analyzes a risk according to characteristics of the destination of the email, and a processing result of the confirmation behavior analysis unit according to an analysis result of the confirmation risk analysis unit And an e-mail creation evaluator that evaluates the superiority or inferiority of the processing result of the created behavior analyzer according to the level of risk in the analysis result of the created risk analyzer. The destination confirmation processing unit transmits the e-mail when the evaluation by the evaluation unit at the time of destination confirmation and the evaluation by the evaluation unit at the time of creating the mail are more than a predetermined value, and the evaluation is not more than a predetermined value. In such a case, an output for confirming the destination may be performed.

  The erroneous email transmission prevention apparatus further includes a comprehensive evaluation unit, which compares the behavior of the operator with the behaviors of a plurality of other operators and identifies the behavior with a large deviation. An output that calls attention to the identified behavior with a large deviation may be performed.

  The program according to the present invention is a program for causing a computer to execute a procedure for preventing erroneous transmission of mail. The computer includes a control unit, and the generated electronic mail is provided to the control unit. Processing result of destination confirmation step for performing output for confirming destination before transmission, confirmation behavior analysis step for analyzing information on operator's behavior related to confirmation of destination of e-mail, and processing result of confirmation behavior analysis step And a reconfirming step of performing an output for confirming the destination again when the predetermined criterion is not satisfied.

  Further, the erroneous mail transmission prevention method according to the present invention is an erroneous mail transmission prevention method for causing a computer to execute a procedure for preventing erroneous mail transmission, wherein the computer includes a control unit, and the control unit includes: A destination confirmation step for performing output for confirming the destination before transmission of the created e-mail, a confirmation behavior analysis step for analyzing information related to the behavior of the operator relating to confirmation of the destination of the e-mail, and the confirmation It is determined whether or not the processing result of the behavior analysis step satisfies a predetermined criterion, and when the predetermined criterion is not satisfied, a reconfirmation step for performing output for confirming the destination again is executed. And

  ADVANTAGE OF THE INVENTION According to this invention, paying attention to the sender of an email, the safer email transmission / reception technique can be provided. Problems, configurations, and effects other than those described above will be clarified by the following description of embodiments.

It is a figure which shows the structural example of the mail erroneous transmission prevention system which concerns on embodiment of this invention. It is a figure which shows the example of a data structure stored in a log memory | storage part. It is a figure which shows the example of a data structure stored in an address book memory | storage part. It is a figure which shows the example of a data structure stored in a schedule memory | storage part. It is a figure which shows the hardware structural example of a mail mistransmission prevention apparatus. It is a figure which shows the example of an operation | movement flow of the risk evaluation process at the time of mail preparation. It is a figure which shows the example of an operation | movement flow of action evaluation processing at the time of mail preparation. It is a figure which shows the example of the mechanism of calculation of the evaluation score at the time of creation. It is a figure which shows the example of an operation | movement flow of the risk evaluation process at the time of a destination confirmation. It is a figure which shows the example of an operation | movement flow of a destination evaluation action evaluation process. It is a figure which shows the example of the mechanism of calculation of the evaluation point at the time of destination confirmation. It is a figure which shows the example of an output screen of a destination confirmation. It is a figure which shows the example of an output screen of comprehensive evaluation.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Note that components having the same function are denoted by the same reference symbols throughout the drawings for describing the embodiment, and the repetitive description thereof will be omitted. Further, in the following embodiments, the constituent elements (including element steps) are not necessarily indispensable unless otherwise specified and clearly considered essential in principle. Needless to say. In addition, when referring to “consisting of A”, “consisting of A”, “having A”, and “including A”, other elements are excluded unless specifically indicated that only that element is included. It goes without saying that it is not what you do. Similarly, in the following embodiments, when referring to the shapes, positional relationships, etc. of the components, etc., the shapes are substantially the same unless otherwise specified, or otherwise apparent in principle. And the like are included.

  In general, there is a mechanism for presenting detailed information about a destination to the sender immediately before the transmission so as to prevent confirmation of the destination and call attention in order to prevent erroneous transmission in which an e-mail is transmitted with a wrong destination. Regarding actual email transmission accidents, cases in which an email is created in a hurry and the recipient is incorrectly selected or entered, or cases where the user becomes accustomed to the address confirmation work each time an email is sent, resulting in a case where attention is insufficient. There is also.

  E-mail mis-transmission prevention system evaluates the safety / danger of e-mails by statically analyzing the structure, including the transmission history and domain, the presence / absence of encryption and attachments, and the inclusion of specified keywords. However, there are some that alert the sender. This is an analysis from the viewpoint of what kind of data an email contains regardless of the sender. In other words, even if it is determined that the e-mail is low-risk by performing such an analysis, there is a possibility that the e-mail may be mistransmitted if there is an inadvertent operation by the sender. If it is carefully operated, it can be transmitted normally.

  Therefore, regarding the prevention of erroneous email transmission, paying attention to the sender's behavior, there is little risk of erroneous transmission if the sender's behavior is excellent, and there is a risk of erroneous transmission if it is not excellent It is assumed that the idea is effective in preventing erroneous transmission. Needless to say, it is desirable to act more carefully to prevent erroneous transmission at the time of transmission for those with high risk determined from the static structure of e-mail.

  FIG. 1 is a diagram illustrating a configuration example of an erroneous mail transmission prevention system 1 according to an embodiment of the present invention. As shown in the figure, the erroneous email transmission prevention system 1 includes an erroneous email transmission prevention device 100, a network 50, and a mail server device 200. The erroneous mail transmission preventing apparatus 100 and the mail server apparatus 200 can exchange information with each other via the network 50.

  The network 50 is, for example, a public network such as the Internet, a LAN (Local Area Network), or a WAN (Wide Area Network), and connects the erroneous mail transmission preventing apparatus 100 and the mail server apparatus 200 so that they can communicate with each other.

  The erroneous mail transmission prevention device 100 is a so-called personal computer, smartphone, tablet device, or the like, and transmits electronic mail data to be transmitted to the mail server device 200 via the network 50. The mail server device 200 may be a general mail server, for example, an SMTP (Simple Mail Transfer Protocol) server.

  The erroneous mail transmission preventing apparatus 100 receives electronic mail data from the mail server apparatus 200 as a received mail via the network 50. This method is POP3 (Post Office Protocol Version 3) or IMAP (Internet Message Access Protocol).

  The erroneous mail transmission prevention apparatus 100 includes a control unit 110, a storage unit 120, a display unit 130, an input unit 140, a communication unit 150, a position information acquisition unit 160, and a heart rate acquisition unit 170.

  The control unit 110 includes an e-mail editing unit 111, an e-mail transmission / reception unit 112, and an erroneous transmission prevention unit 113. The e-mail editing unit 111 controls various editing processes such as new e-mail creation, reply, and transfer. The e-mail transmission / reception unit 112 sends the e-mail to be transmitted to the mail server apparatus 200 for transmission, and receives the e-mail transmitted to the operator's account from the mail server apparatus 200. The erroneous transmission prevention unit 113 interrupts immediately before the e-mail transmission / reception unit 112 transmits an e-mail, and performs destination confirmation processing. After the destination confirmation process, the erroneous transmission prevention unit 113 transmits the mail or performs the destination confirmation process again according to superiority or inferiority of the comprehensive evaluation.

  The erroneous transmission prevention unit 113 includes a destination confirmation processing unit 114, a mail creation time evaluation unit 115, a destination confirmation time evaluation unit 116, and a comprehensive evaluation unit 117. The destination confirmation processing unit 114 interrupts and performs destination confirmation processing immediately after the email editing unit 111 finishes editing and immediately before the email transmission / reception unit 112 performs transmission processing. In the destination confirmation process, destinations of e-mails to be subjected to transmission processing (e-mail addresses that receive e-mails) are listed, and a screen for visually confirming the correctness of the destinations is generated and displayed. Also, when the operator confirms that each of the listed destinations is correct, the operator performs a check input for each confirmed destination. When the check input is made for all destinations, the destination confirmation processing unit 114 finishes the destination confirmation. The address confirmation processing unit 114 determines whether to transmit the mail or perform the address confirmation process again depending on whether or not the evaluation including the evaluation of the action at the time of address confirmation satisfies a predetermined standard.

  The e-mail creation evaluation unit 115 analyzes risks and behaviors related to e-mail creation, and calculates a creation evaluation score. The e-mail creation evaluation unit 115 includes a creation risk analysis unit 115A and a creation behavior analysis unit 115B.

  The creation risk analysis unit 115A analyzes a risk associated with the creation of an e-mail and calculates a creation risk value. The creation behavior analysis unit 115B analyzes the behavior of the operator when creating an e-mail, and calculates a creation behavior value.

  The e-mail creation evaluation unit 115 calculates a creation evaluation score using these creation risk values and creation action values. Specifically, the e-mail creation evaluation unit 115 sets a difference between a predetermined action value obtained according to the creation risk value and the creation action value as a creation evaluation score. That is, for a high-risk mail, an action that is superior to that of the other mail is required. Therefore, the mail creation evaluation unit 115 calculates a creation evaluation score according to the degree of achievement of the request.

  The destination confirmation evaluator 116 analyzes the risks and actions associated with the e-mail destination confirmation and calculates the destination confirmation evaluation score. The destination confirmation evaluator 116 includes a confirmation risk analyzer 116A and a confirmation behavior analyzer 116B.

  The confirmation risk analysis unit 116A analyzes a risk related to the confirmation of the destination of the e-mail, and calculates a risk value at the time of confirmation of the destination. The confirmation behavior analysis unit 116B analyzes the behavior of the operator when confirming the destination of the e-mail and calculates a behavior value at the time of destination confirmation.

  The destination confirmation evaluation unit 116 calculates a destination confirmation evaluation score using the destination confirmation risk value and the destination confirmation action value. Specifically, the destination confirmation evaluator 116 sets a difference between a predetermined action value obtained according to the destination confirmation risk value and the destination confirmation action value as a creation evaluation score. That is, for a high-risk mail, an action that is superior to that of a mail that is not so is required. Therefore, the destination confirmation time evaluation unit 116 calculates a destination confirmation time evaluation score according to the degree of achievement of the request.

  The comprehensive evaluation unit 117 calculates a comprehensive evaluation score using the evaluation point at the time of creation calculated by the evaluation unit 115 at the time of mail creation and the evaluation point at the time of destination confirmation calculated by the evaluation unit 116 at the time of destination confirmation. Further, the comprehensive evaluation unit 117 compares the average value of the accounts of other operators belonging to the same company or the same organization among the accounts of other operators responsible for transmission by the mail server device 200. A large evaluation item is specified, and a predetermined message or advice for increasing the evaluation item is read from a storage area (not shown) of the storage unit 120 and displayed.

  The storage unit 120 includes a log storage unit 121, an address book storage unit 122, a schedule storage unit 123, and an e-mail storage unit 124.

  The log storage unit 121 stores, for each item, various count values or measurement values related to an e-mail, e-mail creation, and e-mail destination confirmation. For example, the present embodiment has the data structure of the log storage unit 121 shown in FIG.

  FIG. 2 is a diagram illustrating an example of a data structure stored in the log storage unit. The log storage unit 121 includes a classification 121a, an item name 121b, and a value 121c. The classification 121a is information indicating the classification of items. For example, “basic information” such as an account, “mail information” indicating mail items and characteristics, risks and actions at the time of mail creation, and mail address confirmation “Statistical information” on risk and behavior of

  The item name 121b is information indicating the item of the value 121c recorded as a log. For example, a “user identifier” that identifies the sender and a “push time” that indicates an elapsed time from the end of the key type to the transmission are included.

  The value 121c is a value recorded as a log. For example, for the item name “user identifier”, the identifier of the sender is the value. For the item name of “reduction time”, the elapsed time from the end of the key type to the transmission is a value.

  The address book storage unit 122 stores e-mail destinations and contact information such as telephone numbers for each target person. For example, the present embodiment has a data structure of the address book storage unit 122 shown in FIG.

  FIG. 3 is a diagram illustrating an example of a data structure stored in the address book storage unit. The address book storage unit 122 includes an identifier 122a, a surname 122b, a first name 122c, a mail address 122d, and details 122e. The address book storage unit 122 is not limited to this, and may have a data structure such as vCard managed by general electronic mail software.

  The identifier 122a is information for identifying the target person. The surname 122b is information that identifies the subject's name, surname, family name, and the like. The name 122c is information for specifying the name, first name, and the like of the target person. The email address 122d is information for specifying the email address of the subject person. The details 122e are information for specifying the company in which the target person is employed, the department to which the target person belongs, and the like.

  The schedule memory | storage part 123 memorize | stores the schedule information which is an action plan which has the date of scheduled start / end for every operator. For example, in this embodiment, it has the data structure of the schedule memory | storage part 123 shown in FIG.

  FIG. 4 is a diagram illustrating an example of a data structure stored in the schedule storage unit. The schedule storage unit 123 includes an identifier 123a, a start date and time 123b, an end date and time 123c, a title 123d, and a content 123e. However, the present invention is not limited to this, and the schedule storage unit 123 may have a data structure such as iCalendar managed by general schedule management software.

  The identifier 123a is information for identifying a schedule. The start date and time 123b is information for specifying the scheduled start date and time of the schedule. The end date and time 123c is information for specifying the scheduled end date and time of the schedule. The title 123d is information for specifying a scheduled title. The content 123e is information for specifying content such as details of the schedule.

  The e-mail storage unit 124 stores e-mail information for each operator. For example, the e-mail storage unit 124 may have a data structure such as eml managed by general e-mail software.

  The display unit 130 outputs display information via an output device such as a display output. The input unit 140 receives input from an operator via an input device such as voice input or contact input. The communication unit 150 communicates with a mail server device 200 connected to a public network such as the Internet and a network 50 such as a LAN or WAN.

  The position information acquisition unit 160 acquires information for specifying the coordinate position. Specifically, the position information acquisition unit 160 receives satellite waves such as GPS (Global Positioning System) and GLONASS (Global Navigation Satellite System), and acquires coordinates.

  The heart rate acquisition unit 170 acquires heart rate information. Specifically, the heart rate acquisition unit 170 acquires a moving average of the latest heart rate (times / min) of the heart rate sensor wearer (operator).

  FIG. 5 is a diagram illustrating a hardware configuration example of the erroneous mail transmission preventing apparatus. An erroneous mail transmission prevention device 100 includes a communication device 101 such as a NIC (Network Interface Card), a main storage device 102 such as a memory, an input device 103 such as a keyboard and a mouse, and an arithmetic device such as a CPU (Central Processing Unit). 104, an external storage device 105 such as a hard disk or SSD (Solid State Drive), a display device 106 such as a display, a speaker, or a printer, a GPS device 107, a heart rate measuring device 108, and a bus 109 that connects them. Consists of including.

  The communication device 101 is a wired communication device that performs wired communication via a network cable, or a wireless communication device that performs wireless communication via an antenna. The communication device 101 communicates with other devices connected to the network.

  The main storage device 102 is a memory such as a RAM (Random Access Memory).

  The input device 103 is a device that receives input information including a pointing device such as a keyboard and a mouse, a touch panel, or a microphone that is a voice input device.

  The external storage device 105 is a non-volatile storage device that can store digital information, such as a so-called hard disk, SSD, or flash memory.

  The display device 106 is a device that generates output information including a display, a printer, or a speaker that is an audio output device.

  The GPS device 107 is a GPS receiver. The heart rate measuring device 108 is a device that measures a heart rate using information from a sensor attached to an operator's body. As long as the heart rate can be acquired, the heart rate measuring device 108 may be either a contact type or a non-contact type.

  The e-mail editing unit 111, the e-mail transmission / reception unit 112, and the erroneous transmission prevention unit 113 described above are realized by a program that causes the arithmetic device 104 to perform processing. This program is stored in the main storage device 102 or the external storage device 105, loaded onto the main storage device 102 for execution, and executed by the arithmetic device 104.

  The log storage unit 121, the address book storage unit 122, the schedule storage unit 123, and the e-mail storage unit 124 stored in the storage unit 120 are realized by the main storage device 102 and the external storage device 105.

  A communication unit 150 that is communicably connected to a WAN, LAN, or the like is realized by the communication device 101. The input unit 140 is realized by the input device 103, and the display unit 130 is realized by the display device 106. The position information acquisition unit 160 is realized by the GPS device 107, and the heart rate acquisition unit 170 is realized by the heart rate measurement device 108.

  The above is the hardware configuration example of the erroneous email transmission preventing apparatus 100 in the present embodiment. However, the configuration is not limited to this, and other hardware may be used. For example, various information processing devices such as a car navigation device and a television device may be used.

  Although not shown in the figure, the erroneous mail transmission prevention apparatus 100 has known elements such as an OS (Operating System), middleware, and applications, and in particular, an existing process for displaying a GUI screen on an input / output device such as a display. It has a function.

  The mail server device 200 is a general electronic mail server that supports protocols such as SMTP, POP3, and IMAP, although hardware is not particularly illustrated.

  [Description of Operation] Next, the operation of the erroneous mail transmission preventing apparatus 100 in this embodiment will be described.

  FIG. 6 is a diagram illustrating an example of an operation flow of the risk evaluation process at the time of mail creation. First, the creation risk analysis unit 115A calculates an unread risk value (step S001). Specifically, the creation risk analysis unit 115A refers to the email storage unit 124, and among the received emails associated with the operator's account, the unread status received within a predetermined period (for example, within two weeks). The number of e-mails in the log storage unit 121 is counted and stored in association with the item name “unread risk” in the log storage unit 121.

  The creation risk analysis unit 115A calculates a scheduled behavior risk value (step S002). Specifically, the creation risk analysis unit 115A refers to the schedule storage unit 123, and counts the number of the latest schedules (for example, that day or within 24 hours thereafter) among the schedules associated with the operator's account. And stored in association with the item name of “scheduled behavior risk” in the log storage unit 121.

  The creation risk analysis unit 115A calculates a transmission number risk value (step S003). Specifically, the creation risk analysis unit 115A refers to the electronic mail storage unit 124, and has sent the latest (for example, the current day or within the past 24 hours) among the sent emails associated with the operator's account. The number of mails is counted and stored in association with the item name of “transmission number risk” in the log storage unit 121.

  Then, while the mail is being edited, that is, while the transmission is not instructed, the creation behavior analysis unit 115B continuously performs the processing from step S004 to step S006.

  The creation behavior analysis unit 115B counts the number of input mistakes (step S004). Specifically, the creation behavior analysis unit 115B counts the number of times the delkey or backspace key is pressed. Even if the key is pressed for a long time, it is counted once.

  The creation behavior analysis unit 115B measures the average type speed (times / second) (step S005). Specifically, the creation behavior analysis unit 115B calculates a moving average of the number of key presses per second.

  The creation behavior analysis unit 115B counts the heart rate (step S006). Specifically, the creation behavior analysis unit 115B acquires a moving average of heartbeats from the heart rate acquisition unit 170.

  Then, when the transmission of the mail is instructed, the erroneous transmission preventing unit 113 performs an interruption process and calculates a reception risk value (step S007). Specifically, the creation risk analysis unit 115A refers to the email storage unit 124, counts the number of emails in unread status among the received emails associated with the operator's account, and the log storage unit The increment from the number associated with the item name “unread risk” 121 is identified and stored in association with the item name “reception risk” in the log storage unit 121. That is, an increase in the number of received messages is regarded as an increase in the number of received emails. In addition, the creation risk analysis unit 115A logs the number of input errors counted in step S004, the average type speed (times / second) measured in step S005, and the heart rate counted in step S006, respectively. Are stored in association with the item names of “input error”, “type speed”, and “heart rate rise”.

  The creation risk analysis unit 115A calculates a scheduled additional action risk value (step S008). Specifically, the creation risk analysis unit 115A refers to the schedule storage unit 123, and counts the number of the latest schedules (for example, that day or within 24 hours thereafter) among the schedules associated with the operator's account. Then, the increment from the number associated with the item name “scheduled behavior risk” in the log storage unit 121 is specified and stored in association with the item name “scheduled additional action risk” in the log storage unit 121. That is, an increase in the number of scheduled actions is regarded as an addition of the number of scheduled actions.

  The creation risk analysis unit 115A acquires the time (step S009). Specifically, the creation risk analysis unit 115A specifies the current time from the OS or the like, and stores the current time in association with the item name “time risk” in the log storage unit 121.

  The creation risk analysis unit 115A acquires position information (step S010). Specifically, the creation risk analysis unit 115 </ b> A acquires the position information from the position information acquisition unit 160 and stores the position information in association with the item name “environmental risk” in the log storage unit 121.

  The creation risk analysis unit 115A calculates and stores a creation risk value (step S011). Specifically, the creation risk analysis unit 115A adds a value obtained by multiplying each value acquired in steps S001 to S003 and steps S007 to S010 by a predetermined risk coefficient and a weight to create a risk value at the time of creation. Calculate as

  For unread risk values, scheduled behavior risk values, transmission number risk values (numbers exceeding a predetermined threshold), reception risk values, and additional planned behavior risk values, the value multiplied by the respective risk coefficient and weight for each case. Use. For time risk, if it is included in the time zone where frequent erroneous transmissions occur frequently, it is counted as one case, multiplied by the risk coefficient and weight, and the environmental risk value for one or more positions determined for each account When it is not near (that is, when it is not in a usual environment for business trips, etc.), it is counted as one case and multiplied by a risk coefficient and weight.

  The above is the flow of the risk evaluation process at the time of mail creation. According to the risk processing at the time of mail creation, the behavior density (action amount per hour) of an operator who creates the mail can be estimated and quantitatively evaluated as a risk value at the time of creation at the time of mail creation.

  FIG. 7 is a diagram illustrating an example of an operation flow of the mail creation action evaluation process. First, the creation behavior analysis unit 115B calculates a behavior value for a period until reply (step S101). Specifically, the created behavior analysis unit 115B refers to the date and time of “time risk” in the email storage unit 124 and the log storage unit 121 when the created email is a reply or forwarded email. The elapsed time from the reception date and time is calculated and stored in association with the item name “period until reply” in the log storage unit 121.

  The creation behavior analysis unit 115B calculates a recommendation time behavior value (step S102). Specifically, the creation behavior analysis unit 115B calculates the elapsed time from the last key type at the time of editing to the date and time of “time risk” in the log storage unit 121, and the item name of “push time” in the log storage unit 121 Store in association with.

  The creation behavior analysis unit 115B calculates an input error behavior value using the number of input errors (step S103). Specifically, the creation behavior analysis unit 115 </ b> B refers to the number of “input mistakes” in the log storage unit 121.

  The creation behavior analysis unit 115B calculates a type velocity behavior value using the average type velocity (times / second) (step S104). Specifically, the creation behavior analysis unit 115B refers to the “type speed” in the log storage unit 121 and calculates an increase amount from the average type speed of the normal operator.

  The creation behavior analysis unit 115B calculates a heart rate increase behavior value using the heart rate (step S105). Specifically, the creation behavior analysis unit 115 </ b> B refers to “heart rate rise” in the log storage unit 121 and calculates an increase amount from the average heart rate of the normal operator.

  The creation behavior analysis unit 115B calculates other custom behavior values (step S106). Specifically, if there is a custom behavior value calculation criterion, the creation behavior analysis unit 115B calculates the behavior value.

  Then, the creation behavior analysis unit 115B calculates and stores a creation behavior value (step S107). Specifically, the creation behavior analysis unit 115B calculates a creation behavior value by adding a value obtained by multiplying each value calculated in steps S101 to S106 by a predetermined behavior coefficient and a weight.

  For the period action value until reply, a value obtained by multiplying a predetermined action coefficient and a weight for each elapsed time (seconds) after the read property is given to the mail is used. As the recommended time action value, a value obtained by multiplying a predetermined action coefficient and weight for each recommended time (second) is used. As for the input error action value, a value obtained by multiplying a predetermined action coefficient and weight for each number of re-strokes is used. As the type speed action value and the heart rate increase action value, a value obtained by multiplying a predetermined action coefficient and a weight for each increase from normal is used.

  Then, the e-mail creation evaluation unit 115 calculates and stores a creation evaluation point according to the distance from the distribution boundary for the creation action value in the creation risk value (step S108).

  FIG. 8 is a diagram illustrating an example of a mechanism for calculating the evaluation score at the time of creation. In the graph shown in FIG. 8, the horizontal axis is the creation risk value, and the vertical axis is the creation action value. A distribution boundary specified by a predetermined method is provided. The e-mail creation evaluation unit 115 plots the creation risk value and the creation action value on a graph, and calculates the creation evaluation point by obtaining the distance on the vertical axis from the distribution boundary. The distribution boundary is not limited to this example, and the evaluation at the time of creation, such as a correspondence table in which the value of the vertical axis, that is, the action value at the time of creation, is uniquely determined in advance with respect to the risk value at the time of creation corresponding to the horizontal axis. As long as a point can be calculated uniquely, it does not have to take a continuous value like the distribution boundary of FIG.

  The above is the flow of the action evaluation process at the time of mail creation. According to the action evaluation process at the time of mail creation, the action density (action amount per hour) of the operator who creates the mail can be estimated and quantitatively evaluated as the action value at the time of creation. Moreover, since an excellent action value is required according to the risk of the mail, the deviation can be quantitatively evaluated.

  FIG. 9 is a diagram illustrating an example of an operation flow of the risk evaluation process at the time of destination confirmation. First, the confirmation risk analysis unit 116A calculates the same family name risk value (step S201). Specifically, the confirmation risk analysis unit 116A refers to the address book storage unit 122, identifies the last name associated with each of the destination e-mail addresses among the contacts associated with the operator's account, and The number of contacts with the same surname is counted and stored in association with the item name of “same surname risk” in the log storage unit 121.

  The confirmation risk analysis unit 116A calculates a destination addition risk value (step S202). Specifically, the confirmation risk analysis unit 116A counts the number of mail destinations (TO, CC, BCC), and stores it in association with the item name of “destination additional risk” in the log storage unit 121. When the mail to be transmitted is a reply mail, the confirmation risk analysis unit 116A counts the number of increases from the number of destinations of the original mail.

  The confirmation risk analysis unit 116A calculates an initial risk value (step S203). Specifically, the confirmation risk analysis unit 116A counts the number of new email addresses that are not included in the destinations of emails that have been transmitted in the past, and stores the “first risk” in the log storage unit 121. "In association with the item name.

  The confirmation risk analysis unit 116A calculates a display field shortage risk value (step S204). Specifically, the confirmation risk analysis unit 116A acquires the number of characters that can be displayed in the display area of the destination details (for example, affiliation) information on the destination confirmation screen from the display unit 130, and refers to the address book storage unit 122. The number of characters whose details 122e exceed the number of characters that can be displayed among the contacts specified as the destination is counted and stored in association with the item name “risk of display field shortage” in the log storage unit 121. To do.

  Then, while the destination confirmation is being performed, that is, while the confirmation is not completed, the confirmation behavior analysis unit 116B continuously performs the processing from step S205 to step S206.

  The confirmation behavior analysis unit 116B measures the check interval for destination confirmation (step S205). Specifically, the confirmation behavior analysis unit 116B determines the time from the time when the destination confirmation screen is displayed to the time when the first destination check input is made, and the time when the first destination check input is made. The time until the check input of the first destination is made, and the time of the check interval per one destination is measured. Then, the confirmation behavior analysis unit 116B calculates an average check interval per destination.

  The confirmation behavior analysis unit 116B counts the number of times the address book has been confirmed (step S206). Specifically, when the first transmission destination is included, the confirmation behavior analysis unit 116B counts the number of transmission destinations for the first time and the number of times the address book is opened during destination confirmation.

  When the completion of destination confirmation is instructed, the confirmation risk analysis unit 116A calculates and stores a risk value at the time of destination confirmation (step S207). Specifically, the confirmation risk analysis unit 116A adds each value acquired in steps S201 to S204 to a value obtained by multiplying each value by a predetermined risk coefficient and a weight, thereby calculating a risk value at the time of destination confirmation. In addition, the confirmation risk analysis unit 116 </ b> A stores the destination confirmation check interval measured in step S <b> 205 in association with the item name “destination confirmation interval” in the log storage unit 121.

  For the same name surname risk value, destination addition risk value, initial risk value, and display field shortage risk value, a value obtained by multiplying each risk coefficient and weight is used for each case.

  The above is the flow of the risk evaluation process at the time of destination confirmation. According to the address confirmation risk process, when the mail address is confirmed, the degree of difficulty in confirming the mail address can be estimated and quantitatively evaluated as the risk value at the time of address confirmation.

  FIG. 10 is a diagram illustrating an example of an operation flow of the action evaluation process at the time of destination confirmation. First, the confirmation action analysis unit 116B calculates a destination confirmation interval action value (step S301). Specifically, the confirmation behavior analysis unit 116B refers to the “destination confirmation interval” in the log storage unit 121 and calculates a value obtained by subtracting a predetermined threshold.

  The confirmation behavior analysis unit 116B calculates a destination confirmation required time behavior value (step S302). Specifically, the confirmation behavior analysis unit 116B calculates a value obtained by dividing the elapsed time from the start of destination confirmation to the completion of confirmation by the number of destinations, and calculates the average required time of the normal operator per destination. The difference is stored in association with the item name “Destination Confirmation Required Time” in the log storage unit 121. If the time elapsed until completion of destination confirmation is too large (that is, when the confirmation operation is interrupted), the confirmation behavior analysis unit 116B calculates the destination confirmation required time behavior value as zero.

  The confirmation behavior analysis unit 116B calculates a display field expanded behavior value (step S303). Specifically, when the number of “display field shortage risk” in the log storage unit 121 is 1 or more, the confirmation behavior analysis unit 116B counts the number of display column scrolls, and displays “display field shortage risk”. The number of deficiencies in the number of the display column scrolled with respect to the number of items is stored in association with the “display column expansion” item name in the log storage unit 121.

  The confirmation action analysis unit 116B calculates an address book confirmation action value (step S304). Specifically, the confirmation action analysis unit 116B calculates the number of cases obtained by subtracting the number of times the address book has been opened during destination confirmation from the number of transmission destinations for the first time, and sets it as the address book confirmation action value. Note that the confirmation behavior analysis unit 116B sets the number of transmission destinations for the first time and the number of times the address book is opened during destination confirmation as item names of “initial risk” and “address book confirmation” in the log storage unit 121. Store in association.

  The confirmation behavior analysis unit 116B calculates other custom behavior values (step S305). Specifically, if there is a custom behavior value calculation criterion, the confirmation behavior analysis unit 116B calculates the behavior value.

  Then, the confirmation behavior analysis unit 116B calculates and stores a destination confirmation behavior value (step S306). Specifically, the confirmation behavior analysis unit 116B calculates a destination confirmation behavior value by adding a value obtained by multiplying each behavior value calculated in steps S301 to S305 by a predetermined behavior coefficient and a weight. .

  The destination confirmation evaluation unit 116 calculates and stores a destination confirmation evaluation score according to the distance from the distribution boundary for the destination confirmation behavior value in the destination confirmation risk value (step S307).

  FIG. 11 is a diagram illustrating an example of a mechanism for calculating an evaluation point at the time of destination confirmation. In the graph shown in FIG. 11, the horizontal axis represents the risk value at the time of destination confirmation, and the vertical axis represents the action value at the time of destination confirmation. A distribution boundary specified by a predetermined method is provided. The destination confirmation evaluator 116 plots the destination confirmation risk value and the destination confirmation behavior value on a graph, and calculates the destination confirmation evaluation score by obtaining the distance on the vertical axis from the distribution boundary. To do. Note that the distribution boundary is not limited to this example, and a destination such as a correspondence table in which a value on the vertical axis, that is, an action value at the time of destination confirmation, is uniquely determined with respect to a risk value at the time of destination confirmation corresponding to the horizontal axis. As long as the evaluation point at the time of confirmation can be calculated uniquely, it does not have to take a continuous value like the distribution boundary in FIG.

  Then, the comprehensive evaluation unit 117 calculates a comprehensive evaluation score using the creation evaluation point and the destination confirmation evaluation point (step S308). Specifically, the comprehensive evaluation unit 117 uses the evaluation score at the time of creation calculated in step S108 of the action evaluation process at the time of mail creation and the evaluation score at the time of address confirmation calculated in step S307 of the action evaluation process at the time of destination confirmation. Add together to calculate the overall score. In addition to simply adding together, the comprehensive evaluation unit 117 may perform predetermined weighting on each of the evaluation point at the time of creation and the evaluation point at the time of destination confirmation.

  Then, the destination confirmation processing unit 114 determines whether or not the overall evaluation score is greater than zero (step S309). If it is less than or equal to zero (“No” in step S309), the destination confirmation processing unit 114 outputs the destination confirmation screen again and re-performs the destination confirmation (step S310).

  If the overall evaluation score is greater than zero (“Yes” in step S309), the e-mail transmission / reception unit 112 transmits an e-mail (step S311).

  Then, the destination confirmation processing unit 114 stores the log information in the log storage unit 121 (step S312).

  Then, the comprehensive evaluation unit 117 displays a comprehensive evaluation screen (step S313).

  The above is the flow of the action evaluation process at the time of destination confirmation. According to the action confirmation process at the time of destination confirmation, the reliability of the destination confirmation of the operator who creates the mail can be estimated and quantitatively evaluated as the action value at the time of destination confirmation when the destination of the mail is confirmed. Moreover, since an excellent behavior value is required according to the risk of address confirmation, the deviation can be quantitatively evaluated.

  FIG. 12 is a diagram illustrating an example of an output screen for destination confirmation. The destination confirmation screen 400 is displayed by the destination confirmation processing unit 114 according to the mail destination at the end of the behavior evaluation process at the time of mail creation. In the destination confirmation screen 400, an email address is displayed in the destination 410a for each destination specified in the e-mail destination, that is, To, CC, and BCC. In the name 410b, the company 410c, and the affiliation 410d, the name of the destination person, the name of the company that works, and the organization to which they belong are displayed in association with each other. The name 410b, the company 410c, and the affiliation 410d are displayed with a name obtained by concatenating the last name 122b and the name 122c in the address book storage unit 122 and detailed information on the details 122e, respectively.

  In addition, a check box 420, a scroll bar 430, and an enter button 440 are displayed on the destination confirmation screen 400. The check box 420 accepts a selection input that clearly indicates a destination for which confirmation has been completed. The scroll bar 430 receives an instruction to expand and change the display range in order to receive a scroll instruction and display all when there is a lot of information indicating the organization to which the scroll bar 430 belongs and cannot be displayed. The decision button 440 accepts an instruction to decide transmission after confirming all destinations.

  FIG. 13 is a diagram illustrating an example of an overall evaluation output screen. The comprehensive evaluation screen 500 is displayed according to the comprehensive evaluation by the comprehensive evaluation unit 117 at the end of the action evaluation process at the time of destination confirmation. On the comprehensive evaluation screen 500, an evaluation value display area 510, a caution item display area 520, an advice display area 530, and a confirmation button 540 are displayed.

  In the evaluation value display area 510, a creation risk value, a creation action value, a destination confirmation risk value, and a destination confirmation action value are displayed. For each value, the evaluation in this case, the past average value of the sender (operator), and the average value of other people in the same affiliation are displayed in parallel. Thereby, the operator can know his / her relative evaluation.

  In the attention item display area 520, an item having a large deviation from the average value of another person in the same affiliation among its own evaluation items and its value are displayed in a comparable manner. In the advice display area 530, advice necessary for improving the evaluation of the item is displayed as a predetermined fixed phrase. Regarding the selection of advice, it is desirable to analyze the tendency of the operator using a predetermined algorithm and select the advice according to the tendency. For example, when the destination confirmation interval is constant and short, there is a possibility that a so-called machine check may be performed. Therefore, it is desirable to display advice for correcting this.

  As described above, the erroneous mail transmission prevention system 1 according to the embodiment has been specifically described. However, the present invention is not limited to the above embodiment, and various modifications can be made without departing from the scope of the invention. Not too long. For example, the erroneous mail transmission prevention device 100 may be the same device as the mail server device 200 or may be distributed.

  In that case, it is possible to save space for the e-mail related facilities.

  Further, for example, the erroneous transmission prevention unit 113 may be integrated with the electronic mail transmission / reception unit 112 or may be integrated with the electronic mail editing unit 111. In this way, the software configuration can be simplified.

  In the above-described embodiment, the configuration has been described in detail for easy understanding of the present invention, and is not necessarily limited to the configuration having all the configurations described.

  Each of the above-described configurations, functions, processing units, and the like may be realized by hardware, for example, by designing a part or all of them with an integrated circuit. Further, the control lines and information lines indicate what is considered necessary for the explanation, and not all the control lines and information lines on the product are necessarily shown. Actually, it may be considered that almost all the components are connected to each other.

  Each of the above-described configurations, functions, processing units, and the like may be realized in a distributed system by executing a part or all of them on another apparatus and performing integrated processing via a network, for example.

  Further, the technical elements of the above-described embodiments may be applied independently, or may be applied by being divided into a plurality of parts such as program parts and hardware parts.

  In the above, this invention was demonstrated centering on embodiment.

DESCRIPTION OF SYMBOLS 1 ... E-mail mistransmission prevention system, 50 ... Network, 100 ... E-mail mistransmission prevention apparatus, 110 ... Control part, 111 ... E-mail edit part, 112 ... E-mail transmission / reception part , 113 ... erroneous transmission prevention unit, 114 ... destination confirmation processing unit, 115 ... e-mail creation evaluation unit, 115A ... creation risk analysis unit, 115B ... creation behavior analysis unit, 116・ Destination confirmation evaluation unit, 116A ... confirmation risk analysis unit, 116B ... confirmation behavior analysis unit, 117 ... comprehensive evaluation unit, 120 ... storage unit, 121 ... log storage unit, 122 ..Address book storage unit, 123 ... schedule storage unit, 124 ... email storage unit, 130 ... display unit, 140 ... input unit, 150 ... communication unit, 160 ... position Information acquisition unit, 17 ... heart rate acquisition unit, 200 ... mail server apparatus

Claims (9)

A destination confirmation processing unit that performs output for confirming the destination before sending the created e-mail;
A confirmation behavior analysis unit that analyzes information related to the behavior of the operator related to confirmation of the destination of the email,
The destination confirmation processing unit determines whether the processing result of the confirmation behavior analysis unit satisfies a predetermined criterion, and when the predetermined criterion is not satisfied, performs output for confirming the destination again.
An apparatus for preventing erroneous email transmission. The device for preventing erroneous email transmission according to claim 1,
A confirmation risk analysis unit that analyzes risk according to the characteristics of the e-mail destination;
A destination confirmation evaluation unit that evaluates the processing result of the confirmation behavior analysis unit according to the analysis result of the confirmation risk analysis unit,
The destination confirmation processing unit performs output for confirming the destination again according to the evaluation.
An apparatus for preventing erroneous email transmission. An apparatus for preventing erroneous email transmission according to claim 2,
The destination confirmation time evaluation unit evaluates the superiority or inferiority of the processing result of the confirmation behavior analysis unit according to the level of risk in the analysis result of the confirmation risk analysis unit,
The destination confirmation processing unit transmits the e-mail when the evaluation of the evaluation unit at the time of destination confirmation is superior to a predetermined value, and outputs to confirm the destination when the evaluation is not superior to a predetermined value. ,
An apparatus for preventing erroneous email transmission. The device for preventing erroneous email transmission according to claim 1,
A mail editing unit that accepts an operation related to creation of the e-mail;
A creation behavior analysis unit that analyzes information related to an operator's behavior related to creation of the email by the email editing unit;
A comprehensive evaluation unit that evaluates using the processing result of the creation behavior analysis unit and the processing result of the confirmation behavior analysis unit,
The destination confirmation processing unit performs the determination using a processing result of the comprehensive evaluation unit.
An apparatus for preventing erroneous email transmission. The email erroneous transmission preventing device according to claim 4,
A creation risk analysis unit that analyzes a risk corresponding to a situation in which the email is created;
An e-mail creation evaluation unit that evaluates the processing result of the creation behavior analysis unit according to the analysis result of the creation risk analysis unit,
The comprehensive evaluation unit performs the evaluation using the processing result of the e-mail creation evaluation unit,
The destination confirmation processing unit performs output for confirming the destination again according to the determination.
An apparatus for preventing erroneous email transmission. The email erroneous transmission preventing device according to claim 5,
A confirmation risk analysis unit that analyzes risk according to the characteristics of the e-mail destination;
A destination confirmation evaluation unit that evaluates the processing result of the confirmation behavior analysis unit according to the analysis result of the confirmation risk analysis unit,
The e-mail creation evaluation unit evaluates the superiority or inferiority of the processing result of the creation behavior analysis unit according to the level of risk in the analysis result of the creation risk analysis unit,
The destination confirmation processing unit transmits the e-mail when the evaluation by the evaluation unit at the time of destination confirmation and the evaluation by the evaluation unit at the time of mail creation are more than predetermined, and when the evaluation is not more than predetermined Outputs to confirm the destination,
An apparatus for preventing erroneous email transmission. The device for preventing erroneous email transmission according to claim 1,
With a comprehensive evaluation department,
The comprehensive evaluation unit compares the behavior of the operator with the behaviors of a plurality of other operators, identifies the behavior with a large divergence,
Perform an output to call attention to the identified behavior with a large discrepancy,
An apparatus for preventing erroneous email transmission. A program that causes a computer to execute a procedure to prevent emails from being sent incorrectly.
The computer includes a control unit,
For the control unit
A destination confirmation step for performing output to confirm the destination before sending the created email;
A confirmation action analyzing step of analyzing information related to an action of an operator related to confirmation of the destination of the e-mail;
Re-confirming step for determining whether or not the processing result of the confirming behavior analysis step satisfies a predetermined criterion, and when the predetermined criterion is not satisfied, an output for confirming the destination again;
A program for preventing erroneous email transmission, characterized in that A method of preventing erroneous email transmission by causing a computer to execute a procedure for preventing erroneous email transmission,
The computer includes a control unit,
The controller is
A destination confirmation step for performing output to confirm the destination before sending the created email;
A confirmation action analyzing step of analyzing information related to an action of an operator related to confirmation of the destination of the e-mail;
Re-confirming step for determining whether or not the processing result of the confirming behavior analysis step satisfies a predetermined criterion, and when the predetermined criterion is not satisfied, an output for confirming the destination again;
A method for preventing erroneous email transmission, characterized in that:

Images