JP2021131795A - Information processor, information processing method, and program - Google Patents

Abstract

To solve a problem that it is difficult to handle information stored in each of two or more databases in a conventional information processor.SOLUTION: An information processor 100 includes: a user information storage unit 141 that acquires and stores two or more first user information contained in each of two or more databases distributed and stored in two or more storage units by associating them with a record identifier; an access request information reception unit 131 that receives access request information for accessing second user information associated with a user identifier; and an access control unit 144 that accesses, based on the record identifier corresponding to the user identifier associated with the access request information received by the access request information reception unit 131, the second user information stored in a corresponding database. Thus, the information processor can appropriately handle the information stored in each of two or more databases, and is highly convenient.SELECTED DRAWING: Figure 3

Description

The present invention relates to an information processing apparatus, an information processing method, and a program used in an information processing system having two or more databases distributed and stored in two or more storage units.

Conventionally, there is an information processing device used to refer to the contents of a database such as a customer management database (see, for example, Patent Document 1 below).

JP-A-2017-060225

By the way, in the conventional information processing apparatus, there is a problem that it is difficult to handle the information stored in each of the two or more databases distributed and stored in the two or more storage units.

The information processing device of the first invention is an information processing device used in an information processing system having two or more databases distributed and stored in two or more storage units, and is stored in each of the two or more databases. Is stored in association with the first user information including the user identifier for one user and the second user information including the attribute value different from the first user information for one user, and is stored in association with the information processing device. Acquires two or more first user information included in each of the user information storage unit and the two or more databases in association with a record identifier that identifies a record in the database in which each first user information is stored. The user information storage unit stored in the user information storage unit, the access request information reception unit that receives the access request information for accessing the second user information associated with the user identifier, and the access request information reception unit have received the information. It is an information processing apparatus including an access control unit that accesses second user information stored in the corresponding database based on the record identifier corresponding to the user identifier associated with the access request information.

With such a configuration, it is possible to appropriately access the information stored in each of the two or more databases in response to the access request.

Further, in the information processing apparatus of the second invention, the access request information received by the access request information receiving unit is associated with the requester identifier that identifies the requester who requested the access with respect to the first invention. The access control unit acquires the authority information regarding the access authority of the requester specified by the requester identifier corresponding to the access request information received by the access request information reception unit, and based on the acquired authority information, the first 2 An information processing device that accesses user information.

With such a configuration, it is possible to appropriately access the information stored in each of the two or more databases according to the access authority of the requester who made the access request.

Further, in the information processing apparatus of the third invention, with respect to the second invention, the access control unit has some attributes of the second user information subject to the access request based on the acquired authority information. An information processing device that performs at least one of limiting access to a value and limiting the types of operations that can be performed on the second user information that is the target of an access request.

With such a configuration, it is possible to appropriately access the information stored in each of the two or more databases according to the access authority of the requester who made the access request.

Further, in the information processing apparatus of the fourth invention, for any one of the first to third inventions, the authority information is for each of the two or more databases, and the access for two or more records stored in the databases. It is an information processing device that collectively regulates authority.

With such a configuration, the access authority of the requester can be easily specified.

Further, in the information processing apparatus of the fifth invention, for any one of the first to fourth inventions, the access record by the access control unit is stored in the distributed ledger type database realized in the information processing system. It is an information processing device further provided with a storage unit.

With such a configuration, access records can be reliably accumulated.

Further, the information processing apparatus of the sixth invention is input from the requester for the user information which is either the first user information or the second user information for any one of the first to fifth inventions. A search request information reception unit that accepts the searched search request information, a search execution unit that searches for user information based on the search request information received by the search request information reception unit, and a search that outputs search results by the search execution unit. It is an information processing device further provided with a result output unit.

With such a configuration, the information stored in each of the two or more databases can be appropriately searched.

Further, the information processing device of the seventh invention is an information processing device used in an information processing system having two or more databases distributed and stored in two or more storage units, and is a user information storage unit. 2. Acquire two or more user information including a user identifier for one user stored in each of the two or more databases in association with a record identifier that identifies a record in the database in which each user information is stored. Based on the user information storage unit stored in the information storage unit, the search request information reception unit that receives the search request information input from the requester for the user information, and the search request information received by the search request information reception unit. It is an information processing apparatus including a search execution unit that searches user information and a search result output unit that outputs search results by the search execution unit.

With such a configuration, the information stored in each of the two or more databases can be appropriately searched.

Further, in the information processing apparatus of the eighth invention, with respect to the sixth or seventh invention, the search result output unit visually observes the user information included in the search result and the database of the acquisition source from which the user information is acquired. This is an information processing device that outputs information in association with identification information for indicating the purpose.

With such a configuration, it is possible to easily understand whether the individual user information of the search result is based on any of two or more databases.

Further, in the information processing apparatus of the ninth invention, for any one of the sixth to eighth inventions, the search execution unit is based on the requester identifier that identifies the requester who input the search request information. This is an information processing device that searches for different search targets for each requester who has entered search request information.

With such a configuration, it is possible to perform a search according to the requester who has input the search request information.

Further, the information processing apparatus of the tenth invention acquires an index information storage unit and two or more index information including different contents for searching user information for the ninth invention, respectively. The search execution unit further includes an index information storage unit that is associated with the corresponding requester identifier and is stored in the index information storage unit, and the search execution unit is based on the requester identifier that identifies the requester who input the search request information. This is an information processing device that performs a search using the information corresponding to the requester identifier among the two or more index information stored in the storage unit.

With such a configuration, the information stored in each of the two or more databases can be quickly and appropriately searched.

Further, in the information processing apparatus of the eleventh invention, with respect to the ninth or tenth invention, the search execution unit is associated with a requester identifier that identifies the requester who has input the search request information. This is an information processing device that performs a search using the user information stored in the database of the above or the information derived from the user information as a search target.

With such a configuration, the information stored in each of the two or more databases can be appropriately searched according to the requester who has input the search request information.

Further, the information processing apparatus of the twelfth invention requests the display of the reception screen for receiving the search request information input from the requester for any one of the first to eleventh inventions. Reception screen A display request information reception unit that accepts display request information, and a reception screen information output unit that outputs reception screen information for displaying the reception screen based on the reception screen display request information received by the display request information reception unit. The reception screen information output unit is an information processing device that outputs reception screen information based on a requester identifier that identifies a requester who has input reception screen display request information.

With such a configuration, it is possible to display a reception screen having contents corresponding to the requester who has input the reception screen display request information.

According to the information processing apparatus according to the present invention, the information stored in each of the two or more databases can be appropriately handled, and the convenience is improved.

Block diagram of the information processing system according to this embodiment Block diagram of the information processing system Block diagram of the information processing device Block diagram of the terminal device The figure explaining an example of the operation of the information processing apparatus Flow chart showing an example of the operation of the information processing device Flow chart showing an example of index information generation and storage processing of the information processing device Flow chart showing an example of search processing of the information processing device Flow chart showing an example of access processing of the information processing device The figure which shows a specific example of the requester information stored in the requester information storage part of the information processing apparatus. The figure which shows a specific example of the authority information stored in the authority information storage part of the information processing apparatus. A diagram illustrating a specific example of a first database that can be accessed by the information processing apparatus. A diagram illustrating a specific example of a second database that can be accessed by the information processing apparatus. The figure which shows the specific example of the 1st display screen of the terminal apparatus The figure which shows the specific example of the 2nd display screen of the terminal apparatus The figure which shows the specific example of the 3rd display screen of the terminal apparatus The figure which shows the specific example of the 4th display screen of the terminal apparatus The figure which shows the 1st modification of the screen for displaying the search result of the terminal device. The figure which shows the 2nd modification of the screen for displaying the search result of the terminal device. The figure which shows the 3rd modification of the screen for displaying the search result of the terminal device. Overview of the computer system according to the above embodiment Block diagram of the computer system

Hereinafter, embodiments of the information processing apparatus and the like will be described with reference to the drawings. In addition, since the components with the same reference numerals perform the same operation in the embodiment, the description may be omitted again.

The terms used in the description of the embodiments are generally defined as follows. It should be noted that the meanings of these terms should not always be interpreted as shown here, and should be interpreted based on the explanations, for example, when they are explained individually in the description of the following embodiments. be.

The requester is a person who browses and operates information about the user by using the information processing system. Here, the user means a target person (customer) who receives a service or the like exclusively by a business performed by using an information processing system.

An identifier for a certain item is a character or a code that uniquely indicates the item. The identifier is, for example, an ID, but any type can be used as long as it is information that can identify the corresponding item. That is, the identifier may be the name of what it indicates, or it may be a combination of codes so as to uniquely correspond to each other. A combination of two or more pieces of information (for example, an attribute value of a record recorded in a database) may be used as an identifier.

User information refers to information about a user. The user information may be, for example, a user identifier that identifies the user, a user's name, information about the user's address (the address may be the address, or location information that indicates longitude / latitude, etc.). It may contain various information corresponding to the user, such as (good). The user information may be recorded as a record in the database, in which case each information contained in the user information may be included as an attribute value of the record.

The acquisition may include acquiring the matters input by the user or the like, or may include acquiring the information stored in another device. Acquiring the information stored in the other device may include acquiring the information stored in the other device via API or the like, or the document file provided by the other device. It may include acquiring the content (including the content of the web page) by scraping or the like. Further, it may include acquiring information in a format different from the original information based on the original information, such as acquiring information by performing optical character reading on the image file.

Further, the so-called machine learning method may be used to acquire the information. Regarding the use of the machine learning method, for example, the following can be performed. That is, a learning device that inputs a specific type of input information and outputs the output information of the type to be acquired is configured by using a machine learning method. For example, two or more sets of input information and output information are prepared in advance, and the two or more sets of information are given to a module for configuring a learning device for machine learning to configure a learning device, and the configured learning device is provided. Accumulate in the storage unit. The learner can also be called a classifier. The machine learning method may be, for example, deep learning, random forest, SVR, or the like. Further, for machine learning, for example, functions in various machine learning frameworks such as fastText, tinySVM, random forest, TensorFlow, and various existing libraries can be used.

Selecting or deciding on information is a concept that includes obtaining certain information, obtaining a link to certain information, flagging certain information, and the like.

To output information means to display on a display, project using a projector, print with a printer, output sound, transmit to an external device, store in a recording medium, process to another processing device or other program. It is a concept that includes delivery of results. Specifically, for example, it includes enabling display of information on a web page, sending it as an e-mail, and outputting information for printing.

Information reception means receiving information input from input devices such as keyboards, mice, and touch panels, receiving information transmitted from other devices via wired or wireless communication lines, optical disks, magnetic disks, and semiconductors. It is a concept including acceptance of information read from a recording medium such as a memory.

For various types of information stored in information processing devices, etc., updating means changing the stored information, adding new information to the stored information, and updating the stored information. It is a concept that includes the fact that part or all of it is erased.

(Embodiment)

The outline of the present embodiment is as follows. That is, in the present embodiment, the information processing system 900 has two or more databases arranged in a distributed manner. Each of the two or more databases stores user information including the first user information and the second user information associated with each other. The information processing device 100 of the information processing system 900 makes it possible to access the second user information stored in the corresponding second database based on the access request corresponding to the first user information. At this time, the information processing apparatus 100 may control the access to the second user information based on the authority information of the requester who requested the access. For example, a part of the information processing device 100 may be controlled based on the authority information. At least one of restricting access to attribute values and restricting access methods. Authority information may be specified for each of two or more databases. Further, the access record to the second user information may be stored in the distributed ledger database.

Further, in the present embodiment, the information processing system 900 searches for and outputs user information which is either the first user information or the second user information based on the search request information input from the requester. It may be. Here, the user information included in the search result may be output in association with the identification information for visually indicating the acquisition source database. It should be noted that the search may be performed for different search targets for each requester. For example, the search may be performed using the index information corresponding to the requester, or the user information of the database selected corresponding to the requester or the user information thereof. A search may be performed using the derived information as a search target. Further, the content of the reception screen displayed to the requester may be changed according to the requester.

(Embodiment 1)

Hereinafter, the configuration of the information processing system 900 according to the present embodiment configured in this way will be described.

FIG. 1 is a block diagram of the information processing system 900 according to the present embodiment.

As shown in FIG. 1, in the present embodiment, the information processing system 900 includes a first external device 910, a second external device 920, a third external device 930, an information processing device 100, a terminal device 600, and the like. The devices can communicate with each other via a network such as a local area network or the Internet. The configuration of the information processing system 900 is not limited to this. The number of each device included in the information processing system 900 does not matter, and other devices may be included in the information processing system 900.

In the present embodiment, the first external device 910 and the second external device 920 are devices used in different businesses. The first external device 910 is, for example, a business of supplying liquefied petroleum gas (LPG) for household use or the like (for example, for a user, a gas cylinder delivery business, a meter reading business, a facility security business, and the like are performed. ) Is the device used. On the other hand, the second external device 920 is used in, for example, a water supply supply business for each house (for example, a user is provided with a meter reading business for water usage, a payment and receipt business such as collection of charges, etc.). This is the device used. The device is not limited to this, and may be, for example, an apparatus used in a business such as sales and maintenance of equipment in addition to a gas or water supply business. In addition, these businesses may be operated by one organization, or may be operated by different organizations such as different companies.

The third external device 930 is a node used for managing a distributed ledger database using, for example, blockchain technology. The third external device 930 maintains and manages the distributed ledger database together with other devices and the like connected via the network.

In FIG. 1, for example, a portable information terminal device such as a so-called smartphone, a tablet-type information terminal device, and a personal computer (PC) such as a laptop computer are shown as the terminal device 600. Any of these may be used as the 600, or any device other than these may be used. The requester can use the information processing system 900 by using the terminal device 600. In the following examples, the terminal device 600 is described on the assumption that a so-called personal computer having a keyboard, a display, or the like is used, but the present invention is not limited to this.

FIG. 2 is a block diagram of the information processing system 900. FIG. 3 is a block diagram of the information processing apparatus 100. FIG. 4 is a block diagram of the terminal device 600.

First, the configurations of the first external device 910, the second external device 920, and the third external device 930 will be described.

As shown in FIG. 2, the first external device 910 includes a first external device storage unit 911, a first external device processing unit 915, a first external device transmission unit 916, and a first external device reception unit 917. The first external device 910 is, for example, a server device having a general configuration, but is not limited to this, and may be a computer of another form, or a device realized by connecting a plurality of devices to each other. It may be. The first external device 910 can be connected to the network and is configured to be able to communicate with other devices connected to the network.

The first external device storage unit 911 is preferably a non-volatile recording medium, but can also be realized by a volatile recording medium. Various information, programs, and the like are stored in the first external device storage unit 911. The process in which such information is stored does not matter. For example, the information may be stored in the first external device storage unit 911 via the recording medium, and the information transmitted via the communication line or the like may be stored in the first external device storage unit 911. Alternatively, the information input via the input device may be stored in the first external device storage unit 911.

The first external device storage unit 911 includes a first database storage unit 912.

The first database is stored in the first database storage unit 912. The first database will be described later.

The first external device processing unit 915 can usually be realized from an MPU, a memory, or the like. The processing procedure of the first external device processing unit 915 is usually realized by software, and the software is recorded on a recording medium such as ROM. However, it may be realized by hardware (dedicated circuit). The first external device processing unit 915 acquires, for example, information in the first external device 910. For example, based on the acquired SQL statement or the like, various databases stored in the first external device storage unit 911 are operated.

The first external device transmission unit 916 transmits information read from the first external device storage unit 911 and the like by the first external device processing unit 915. For example, the first external device transmission unit 916 transmits the user information read from the first external device storage unit 911 to the information processing device 100, the terminal device 600, or the like based on the operation of the first external device processing unit 915. Send over the network.

The first external device receiving unit 917 receives the information transmitted from the information processing device 100 and other devices via the network. The first external device receiving unit 917 stores the received information in, for example, the first external device storage unit 911 so that the first external device processing unit 915 and the like can acquire the received information.

The second external device 920 is also a server device configured in the same manner as the first external device 910. That is, the second external device 920 includes a second external device storage unit 921 having the same hardware configuration as the first external device storage unit 911. The second external device 920 includes a second external device processing unit 925, a second external device transmitting unit 926, and a second external device receiving unit 927. The second external device processing unit 925, the second external device transmitting unit 926, and the second external device receiving unit 927 are the first external device processing unit 915, the first external device transmitting unit 916, and the first external device receiving unit, respectively. It has the same configuration as 917, and detailed description thereof will be omitted.

The second external device storage unit 921 includes a second database storage unit 922. The second database is stored in the second database storage unit 922.

In the present embodiment, each of the first database and the second database includes user information about two or more users (customers). In the present embodiment, the user information includes at least a user identifier that identifies the user and one or more attribute values (sometimes referred to as user attribute values) related to the user. For example, the user information includes a user identifier consisting of a code uniquely indicating the user and information such as the user's name, address, and telephone number. The user information may include other user attribute values in addition to these information for each user. The user attribute value may include, for example, various things such as user position information (user's position information; for example, user's home address, latitude / longitude information, etc.), memo information recorded about the user, and the like. When the user identifier is something other than the user's name, it is preferable that the user's name is included as another user attribute value. The user's name may be a user identifier.

At least one of the first database and the second database may be provided inside the information processing device 100 instead of an external device of the information processing device 100.

In the present embodiment, the user information is associated with the first user information including the user identifier for one user and the second user information including the attribute value different from the first user information for one user. Information. For example, the user information may be one record stored in any database. Further, the first user information and the second user information may be stored as records in different tables. The second user information may be referred to as detailed user information. That is, in the present embodiment, each of the two or more databases contains a first user information including a user identifier for one user and a second user having an attribute value different from the first user information for one user. It can be said that the information is associated and stored.

In the present embodiment, the first user information includes a user identifier and some attribute values (for example, a user's address, etc.). The second user information includes other attribute values. For example, the user attribute value included in the second user information includes the user's family structure, the user's contract information, the user's usage information (gas, water usage, etc.), the user's payment information, and the like. It includes, but is not limited to, information that is relatively more sensitive than the information it contains.

Here, the first database and the second database distributed and arranged in the first external device 910 and the second external device 920 are inter-system cooperation infrastructures (https://e-estonia) called "X-Road". It is desirable that they are interoperated by using .com / solutions / interoperability-services / x-road /). As a result, the information processing apparatus 100 can access each database by a method that can be easily executed without individually dealing with the difference in the arrangement state and the system configuration of two or more distributed databases. can.

The third external device 930 is also a server device having the same hardware configuration as the first external device 910. That is, the third external device 930 includes a third external device storage unit 931 having the same hardware configuration as the first external device storage unit 911. In addition, the third external device 930 has various parts such as a third external device processing unit 935, a third external device transmitting unit 936, and a third external device receiving unit 937, similarly to the first external device 910. However, a detailed description will be omitted.

The third external device storage unit 931 includes a third database storage unit 932. The distributed ledger type database is stored in the third database storage unit 932. It is desirable that the distributed ledger database is managed by using, for example, a distributed ledger technology using so-called blockchain technology or other time stamping technology using hashed information.

The first external device 910, the second external device 920, and the third external device 930 may be interpreted as not being included in the information processing system 900. In this case, for example, each device of the information processing system 900 is configured to be able to communicate with two or more other external devices having the same configuration as the first external device 910 and the second external device 920 via a network. Just do it. That is, the information processing system 900 may be configured to be accessible to two or more databases stored in a distributed manner. Further, the third external device 930 may not be provided, or the function of the third external device 930 may be configured to be carried by another device of the information processing system 900.

As shown in FIG. 3, the information processing device 100 includes a storage unit 110, a reception unit 120, a reception unit 130, a processing unit 140, and an output unit 160. The information processing device 100 is, for example, a server device.

The storage unit 110 includes a user information storage unit 111, an index information storage unit 112, a requester information storage unit 113, and an authority information storage unit 114.

The storage unit 110 is preferably a non-volatile recording medium, but can also be realized by a volatile recording medium. For example, information acquired by the receiving unit 120 and the processing unit 140 is stored in each unit of the storage unit 110, but the process of storing the information or the like in each unit of the storage unit 110 is not limited to this. For example, information or the like may be stored in the storage unit 110 via a recording medium, or information or the like transmitted via a communication line or the like may be stored in the storage unit 110. Alternatively, the information or the like input via the input device may be stored in the storage unit 110.

The user information storage unit 111 stores the user information acquired by the user information storage unit 141.

The index information storage unit 112 stores the index information acquired by the index information storage unit 142.

The requester information storage unit 113 stores requester information relating to a requester who uses the information processing system 900. The requester information includes, but is not limited to, for example, two or more pieces of information in which a requester identifier that identifies one requester and an attribute value indicating information about the requester are associated with each other. The attribute value includes, for example, information that identifies the terminal device 600 used by the requester. In addition, the attribute value includes, for example, information that identifies the role of the requester, such as the group to which the person belongs, the type of job, or the position, or an identifier corresponding to the information. In addition, attribute values other than these may be included. The requester information storage unit 113 may be provided in the storage unit of the external device. That is, the requester information does not have to be stored in the storage unit 110 of the information processing device 100.

Authority information is stored in the authority information storage unit 114. In the present embodiment, the authority information is information regarding the access authority that each requester has for the records of each database. The access authority may be defined for each requester (for each requester identifier), for example. Further, it may be specified in association with information that identifies the role of the requester or an identifier that corresponds to the information. In this case, the access authority corresponding to each requester identifier can be specified based on the requester information. It becomes. The access authority restricts access to some attribute values of the second user information (restricts the target that can be operated), and an access method for the second user information that is the target of the access request (first). (2) Limiting the types of operations that can be performed on user information) may be set for at least one of them.

In the present embodiment, the authority information collectively defines the access authority for two or more records stored in the database for each of the two or more databases. That is, the authority information for one requester includes information indicating the content of the access authority to the user information stored in the first database and the content of the access authority to the user information stored in the second database. Includes information to indicate. The permission information differs for each record, such as one that collectively defines access rights for all records in two or more databases, and one that defines access rights corresponding to specific attribute values of each record. It may be one that can specify the access authority.

The receiving unit 120 receives the information transmitted from the other device. The receiving unit 120 stores the received information in, for example, the storage unit 110.

The reception unit 130 includes an access request information reception unit 131, a search request information reception unit 132, and a display request information reception unit 133.

The reception unit 130 receives the information received by the reception unit 120. The reception unit 130 is used to input information input using an input means connected to the information processing device 100 or input using a reading device (for example, a code reader) connected to the information processing device 100. Information input by an operation (including, for example, information read by the device) may be accepted. The received information is stored in, for example, the storage unit 110.

The access request information receiving unit 131 receives the access request information. The access request information is, for example, information for accessing the second user information input by the requester, and is information associated with the user identifier. In other words, the access request information is information for designating a target user and accessing the second user information of that user. In the present embodiment, when the access request information receiving unit 131 receives the access request information, the access request information receiving unit 131 also accepts the requester identifier that identifies the requester who input the access request information. In other words, the access request information received by the access request information receiving unit 131 is associated with a requester identifier that identifies the requester who requested access.

The access request information can be input in various ways. For example, an operation of designating the first user information of one of the first user information about a plurality of users displayed on the display in order to request confirmation of the second user information (operation using a keyboard or a pointing device, operation using a pointing device, or an operation). (Regardless of the operation mode, such as operation by voice or the like) can correspond to the input of access request information. Further, for example, an operation for inputting, changing, deleting, or the like inputting, changing, or deleting the attribute value of the information of the second user of one or more users displayed on the display may correspond to the input of the access request information. That is, the input of access request information is information for requesting acquisition, change, etc. of the attribute value of the second user information corresponding to one user identifier to the database including the record corresponding to the user identifier. It can be said that it is to input.

The search request information receiving unit 132 receives the search request information for the user information which is either the first user information or the second user information. The search request information is information given to the information processing device 100 in order to narrow down the user information that can be output by the information processing device 100 by searching. The search request information may include, for example, various information that specifies a character string to be searched and conditions. In the present embodiment, when the search request information receiving unit 132 receives the search request information, it also accepts the requester identifier that identifies the requester who input the search request information. In other words, the search request information received by the search request information receiving unit 132 is associated with a requester identifier that identifies the requester who requested the search.

The display request information reception unit 133 receives the reception screen display request information input from the requester, which requests the display of the reception screen for receiving the search request information. In the present embodiment, the information processing device 100 is a web server, and can output information that can be displayed by a web browser operating on the terminal device 600. The reception screen display request information is information output from the terminal device 600 in order to display the reception screen on the web browser operating on the terminal device 600. The information processing device 100 does not have to be a web server, and the reception screen display request information is information output from the terminal device 600 in order to display the reception screen in other applications operating on the terminal device 600. May be good. In the present embodiment, when the display request information reception unit 133 receives the reception screen display request information, it also receives the requester identifier that identifies the requester who has input the reception screen display request information. In other words, the reception screen display request information received by the display request information reception unit 133 is associated with a requester identifier that identifies the requester who requested the display of the reception screen.

The input of access request information, search request information, and reception screen display request information means that these information are indirectly input to the information processing device 100 by the requester via the terminal device 600 or the like. However, it may be interpreted to mean that the information processing device 100 is directly input by the requester using the input means. Further, the access request information, the search request information, and the reception screen display request information do not necessarily have to be the information generated based on the direct action (input operation, etc.) of the requester. That is, the input of these request information means various actions that cause the request information to be given to the information processing apparatus 100, for example, executing a program that automatically generates these request information or performing various information. It can include giving and functioning.

The processing unit 140 includes a user information storage unit 141, an index information storage unit 142, a search execution unit 143, an access control unit 144, and an access record storage unit 145. The processing unit 140 performs various processes. The various processes are, for example, the processes performed by each unit of the processing unit 140 as follows.

The user information storage unit 141 acquires two or more user information included in at least one of the first database and the second database. That is, the user information storage unit 141 is two or more databases stored in a distributed manner, and is included in at least one of two or more databases including a database stored in at least one external device. Get user information of. The user information storage unit 141 stores the acquired user information in the user information storage unit 111.

In the present embodiment, the user information storage unit 141 acquires and stores the first user information among the user information. The user information storage unit 141 acquires two or more first user information included in each of the two or more databases in association with a record identifier that identifies a record in the database in which each first user information is stored, and obtains two or more users. It is stored in the information storage unit 111. In the present embodiment, the record identifier is associated with the database identifier that specifies the acquisition source database (meaning the acquisition source database by the user information storage unit 141) in which the record specified by the record identifier is stored. However, it is not limited to this. That is, in the present embodiment, the first user information stored in the user information storage unit 111 is associated with information that can identify the acquisition source database and the records stored in the acquisition source database. The database identifier may be a device identifier that identifies an external device in which the acquisition source database is managed.

The index information storage unit 142 generates and generates index information for searching for user information corresponding to each first user information based on two or more first user information stored in the user information storage unit 111. The generated index information is stored in the index information storage unit 112. In the generation of index information, out of the user information (user information corresponding to the user identifier) corresponding to the first user information recorded in each database, the information to be searchable is acquired, and the acquired information is included. Use as index information. The index information is, for example, information having a data structure suitable for searching by a predetermined search algorithm by the search execution unit 143, but is not limited to this, and may be information including, for example, the acquired user information as it is. By using such index information, it is not necessary for the information processing device 100 to access the first external device 910 and the second external device 920 every time a search is performed. Therefore, the user information can be searched at high speed, and the load on the information processing system 900 at the time of the search can be reduced.

Here, in the present embodiment, the index information is accumulated in association with the requester identifier. That is, the index information storage unit 142 stores the index information generated so as to make the user information in the range corresponding to the access authority of the requester searchable in association with each requester identifier. That is, the index information storage unit 142 acquires two or more index information including different contents for searching the user information, and stores the index information storage unit 112 in association with the corresponding requester identifier. The index information in the range corresponding to such access authority is generated based on the authority information stored in the authority information storage unit 114. When there are two or more requester identifiers having the same access authority, the index information storage unit 142 generates index information in a range corresponding to the access authority once, and generates the generated index information in the second. It may be stored in association with the above requester identifier. Further, the index information storage unit 142 acquires the authority information corresponding to the requester identifier for each of the requester identifiers based on the requester information, generates the index information, and generates the generated index information. It may be stored in association with the requester identifier.

The index information is generated periodically. For example, it is performed every day when a predetermined time arrives. The index information may be generated according to another predetermined schedule, or may be generated, for example, when the reception unit 130 receives the information requesting the generation of the index information.

The search execution unit 143 searches for user information by generating a search query or the like based on the search request information received by the search request information reception unit 132. For example, the search execution unit 143 searches for a different search target for each requester who has input the search request information, based on the requester identifier that identifies the requester who has input the search request information.

In the present embodiment, the search execution unit 143 searches for user information using the index information stored in the index information storage unit 112. For example, the search execution unit 143 corresponds to the requester identifier among the two or more index information stored in the index information storage unit 112 based on the requester identifier that identifies the requester who input the search request information. Search using things. That is, the search execution unit 143 searches for the user information in the range corresponding to the access authority of the requester who has input the search request information. The search execution unit 143 directly searches the user information stored in the user information storage unit 111 and the user information stored in the first database or the second database without using the index information. You may do so.

The search execution unit 143 searches for the user information stored in the specific database associated with the requester identifier that identifies the requester who entered the search request information or the information derived from the user information as a search target. You may do so. For example, when the requester is a requester particularly related to the first database, when the requester inputs the search request information, the user information stored in the first database is used as a search target to access the first database. You may search by. In addition, when the requester inputs search request information, index information generated in advance based on the user information stored in the first database (information derived from the user information stored in a specific database). The first user information (stored in a specific database) stored in the user information storage unit 111, which is searched by searching for an example) or previously acquired from the first database and stored in the user information storage unit 111. The search may be performed using (an example of information derived from the existing user information) as a search target.

The access control unit 144 accesses the second user information stored in the corresponding database based on the record identifier corresponding to the user identifier associated with the access request information received by the access request information reception unit 131. Access means, for example, using SQL queries or the like to allow each database management program to operate the database by operations such as viewing (an example of acquisition), updating, adding, and deleting information (access method) contained in records. It means to execute, but it is not limited to this. The access control unit 144 is configured to access the second user information stored in the corresponding database by using the API, or is configured to access the second user information by using a function or the like. You may.

Specifically, in the present embodiment, the access control unit 144 accesses the requester specified by the requester identifier corresponding to the access request information when the access request information reception unit 131 receives the access request information. Get permission information about permissions. The access control unit 144 generates a query for performing access when the requester has access authority based on the acquired authority information. Then, the access control unit 144 executes access to the corresponding database by using the generated query. In other words, the access control unit 144 limits access to the second user information that is the target of the access request and the access method according to the access authority of the requester. More specifically, the access control unit 144 restricts access to some attribute values of the second user information that is the target of the access request according to the access authority of the requester, and the access request. It may be configured to be able to execute such as limiting the types of operations (select, update, append, delete, etc.) that can be performed on the second user information that is the target of.

The access record storage unit 145 is configured to be able to store information in a distributed ledger database managed by a third external device 930 or the like. The access record storage unit 145 stores the access records related to the access performed by the access control unit 144 in the distributed ledger database realized in the information processing system 900. As a result, the information processing apparatus 100 records an access trail such as an act of acquiring user information from each of the first database and the second database in a state where it is difficult to falsify.

The output unit 160 includes a search result output unit 161 and a reception screen information output unit 162. In the present embodiment, the output unit 160 outputs information by transmitting information to another device using the transmission unit 170 or the like, but the present invention is not limited to this, and for example, a display device provided in the information processing device 100 is provided. Information may be output by displaying the information in.

The search result output unit 161 outputs information indicating the search result by the search execution unit 143. Specifically, the search result output unit 161 visually displays, for example, the user information included in the search result (such as the user identifier corresponding to the user information hit by the search) and the database of the acquisition source from which the user information was acquired. It is output in association with the identification information to be shown in. The identification information is, for example, an image showing a predetermined mark or code, a code string that can be displayed as characters, or a character color or background color corresponding to the acquisition source database to indicate user information. Various things such as information can be applicable. For example, the identification information stored in the storage unit 110 in association with the record identifier or the database identifier may be output based on the user identifier corresponding to the user information included in the search result. Regarding the user information included in the search result, the second user information may be acquired and included in the search result as needed. In other words, the search result output unit 161 can output the user information included in the search result so as to be displayed on the terminal device 600 or the like in a visual manner according to the database of the acquisition source.

The information indicating the search result is, for example, information that can display the search result as a web page on the terminal device 600 (for example, a document in HTML format or a web page generation functioning on the information processing device 100 or the terminal device 600). Information used for systems (content management systems, etc.), but is not limited to this.

The reception screen information output unit 162 outputs reception screen information for displaying the reception screen based on the reception screen display request information received by the display request information reception unit 133. The reception screen information is, for example, information stored in the storage unit 110 in advance (for example, an HTML format document, or an information processing device 100 or a terminal device 600) used for displaying the reception screen as a web page. Information used in a functioning web page generation system (content management system, etc.), but is not limited to this.

The reception screen information output unit 162 may output the reception screen information based on the requester identifier that identifies the requester who has input the reception screen display request information. Specifically, for example, the reception screen information is output so that the content of the access authority according to the requester identifier is visually displayed, or the search request information is input only in a predetermined mode according to the access authority. It is also possible to output the reception screen information for displaying the reception screen that enables.

The transmission unit 170 transmits information to other devices constituting the information processing system 900 via the network. The transmission unit 170 transmits, for example, the information output by the output unit 160. The information output by the search result output unit 161 is transmitted to the terminal device 600 of the requester based on the requester identifier of the requester who input the search request information. Further, the information output by the reception screen information output unit 162 is transmitted to the terminal device 600 of the requester based on the requester identifier of the requester who has input the reception screen display request information.

Next, the configuration of the terminal device 600 will be described.

As shown in FIG. 4, the terminal device 600 includes a terminal storage unit 610, a terminal reception unit 620, a terminal reception unit 630, a terminal processing unit 640, a terminal output unit 660, and a terminal transmission unit 670.

The terminal device 600 is, for example, a general personal computer, and has a display as an output device, an input device used for an input operation of a requester (for example, a keyboard, a pointing device, etc.), and the like. It is not limited. The terminal device 600 can be connected to the network and is configured to be able to communicate with other devices connected to the network.

The terminal storage unit 610 is preferably a non-volatile recording medium, but can also be realized by a volatile recording medium. Various information, programs, and the like are stored in the terminal storage unit 610. The process in which such information is stored does not matter. For example, the information may be stored in the terminal storage unit 610 via the recording medium, or the information transmitted via the communication line or the like may be stored in the terminal storage unit 610. Alternatively, the information input via the input device may be stored in the terminal storage unit 610.

The terminal receiving unit 620 includes a reception screen information receiving unit 621. The terminal receiving unit 620 receives the information transmitted from the information processing device 100 and other devices via the network. The terminal receiving unit 620 stores the received information in, for example, the terminal storage unit 610 so that the terminal processing unit 640 and the like can acquire it.

The reception screen information receiving unit 621 receives the reception screen information transmitted from the information processing device 100 and stores it in the terminal storage unit 610.

The terminal reception unit 630 receives various input operations to the terminal device 600 by a requester who uses the terminal device 600. The operation is performed using, for example, an input device (not shown), but the operation is not limited thereto. The terminal reception unit 630 may, for example, accept an input operation by voice input by a microphone, or may perform an input operation performed by using a reading device (for example, a code reader) connected to the terminal device 600. You may accept it.

The terminal processing unit 640 performs various information processing operations using each unit of the terminal device 600.

The terminal output unit 660 outputs information by displaying it on a display device, for example. The information output method is not limited to this, and may be performed by outputting voice or the like from a speaker or the like.

The terminal transmission unit 670 includes an access request information transmission unit 671, a reception screen display request information transmission unit 672, and a search request information transmission unit 673. The terminal transmission unit 670 transmits information acquired by, for example, the terminal processing unit 640 or the like via a network.

The access request information transmission unit 671 transmits the access request information to the information processing device 100 when the input operation of the access request information by the requester is received by the terminal reception unit 630.

The reception screen display request information transmission unit 672 transmits the reception screen display request information to the information processing device 100 when the input operation requesting the display of the reception screen by the requester is received by the terminal reception unit 630.

The search request information transmission unit 673 transmits the search request information to the information processing device 100 when the input operation of the search request information by the requester is received by the terminal reception unit 630.

The processing unit 140 and the terminal processing unit 640 described above can usually be realized from an MPU, a memory, or the like. The processing procedure of the processing unit 140 and the terminal processing unit 640 is usually realized by software, and the software is recorded on a recording medium such as ROM. However, it may be realized by hardware (dedicated circuit).

Further, the input means that can be used for inputting the information that can be received by the reception unit 130 or the terminal reception unit 630 may be any input means such as a numeric keypad, a keyboard, a mouse, or a menu screen. The reception unit 130 and the terminal reception unit 630 can be realized by a device driver for input means such as a numeric keypad or a keyboard, control software for a menu screen, or the like.

Further, the first external device receiving unit 917, the second external device receiving unit 927, the third external device receiving unit 937, the receiving unit 120, and the terminal receiving unit 620 are usually realized by wireless or wired communication means. It may be realized by means for receiving a broadcast.

Further, the first external device transmission unit 916, the second external device transmission unit 926, the third external device transmission unit 936, the transmission unit 170, and the terminal transmission unit 670 are usually realized by wireless or wired communication means. It may be realized by broadcasting means.

Further, the output unit 160 and the terminal output unit 660 may or may not include an output device such as a display or a speaker. The output unit 160 and the terminal output unit 660 can be realized by the driver software of the output device, the driver software of the output device, the output device, and the like.

The information processing device 100, the first external device 910, the second external device 920, and the third external device 930 may each be configured by one server, or a plurality of servers operating in cooperation with each other. It may be configured by, or it may be an electronic computer or the like built in another device. The server may be a so-called cloud server, an ASP server, or the like, and it goes without saying that the type of server does not matter.

FIG. 5 is a diagram illustrating an example of the operation of the information processing apparatus 100.

As shown in FIG. 5, the user information storage unit 141 of the information processing device 100 acquires and stores the first user information from the first external device 910 and the second external device 920 located at different locations. That is, the user information storage unit 141 acquires the first user information included in the first database from the first external device 910, and acquires the second user information included in the second database from the second external device 920. ..

Further, the index information storage unit 142 generates and stores index information based on the information acquired from the first external device 910 and the second external device 920. For example, if there are two types of access authority of the requester (temporarily called A authority and B authority), two index information corresponding to each type is generated.

To such an information processing device 100, for example, the terminal device 600 used by the requester having the A authority and the terminal device 600 used by the requester having the B authority transmit search request information (simply search). It is assumed that the access request information is transmitted (sometimes simply referred to as an access request) to the second request information corresponding to the first user information.

When a search request is made from the terminal device 600 used by the requester having the A authority, the search execution unit 143 performs a search using the index information generated for the A authority. The search result is transmitted to the terminal device 600, and the search result according to the access authority of the requester of the terminal device 600 is output to the terminal device 600. Further, when an access request is made from the terminal device 600 used by the requester having the A authority, the access control unit 144, if accessible, according to the A authority, based on the access request, the first database. Alternatively, the second database is accessed and processing such as acquisition of the second user information is performed. As a result, the terminal device 600 can view the second user information and the like.

On the other hand, when a search request is made from the terminal device 600 used by the requester having the B authority, the search execution unit 143 performs a search using the index information generated for the B authority. As a result, the search result according to the access authority of the requester of the terminal device 600 is output to the terminal device 600. Further, when an access request is made from the terminal device 600 used by the requester having the B authority, the access control unit 144 responds to the B authority and, if accessible, the second user based on the access request. Processing such as acquiring information is performed so that the terminal device 600 can browse the second user information.

The access trail indicating that the information processing device 100 has accessed the first external device 910 and the second external device 920 is recorded in the third database by the access record storage unit 145 of the information processing device 100. NS. By recording the access trail in a recording mode that is difficult to falsify, it is possible to verify, for example, an access record for sensitive user information.

FIG. 6 is a flowchart showing an example of the operation of the information processing apparatus 100.

The information processing device 100 performs various operations as follows, for example. It should be noted that such an operation may be terminated, for example, when the power of the information processing apparatus 100 is turned off.

(Step S101) As shown in FIG. 6, the user information storage unit 141 acquires the first user information recorded in the database from each of the two or more databases and stores the first user information in the user information storage unit 111. ..

(Step S102) The processing unit 140 determines whether or not the index information generation timing has arrived. If the index information generation timing has arrived, the process proceeds to step S103, and if not, the process proceeds to step S104.

(Step S103) The index information storage unit 142 performs index information generation and storage processing. As a result, the index information corresponding to each requester identifier is stored in the index information storage unit 112. When the index information generation / accumulation process is completed, the process proceeds to step S104.

(Step S104) The processing unit 140 determines whether or not the display request information reception unit 133 has received the reception screen display request information. If the reception screen display request information is received, the process proceeds to step S105, and if not, the process proceeds to step S106.

(Step S105) The reception screen information output unit 162 outputs reception screen information for displaying the reception screen based on the reception screen display request information received by the display request information reception unit 133. The transmission unit 170 transmits the reception screen information to the terminal device 600 of the requester based on the requester identifier of the requester who has input the reception screen display request information.

(Step S106) The processing unit 140 determines whether or not the search request information receiving unit 132 has received the search request information. If the search request information is accepted, the process proceeds to step S107, and if not, the process proceeds to step S108.

(Step S107) The search execution unit 143 performs a search process based on the search request information received by the search request information reception unit 132. As a result, the search result is transmitted to the requester's terminal device 600.

(Step S108) The processing unit 140 determines whether or not the access request information receiving unit 131 has received the access request information. If the access request information is received, the process proceeds to step S109, and if not, the process returns to step S102.

(Step S109) The access control unit 144 performs access processing based on the access request information received by the access request information receiving unit. When the access process is completed, the process returns to step S102.

FIG. 7 is a flowchart showing an example of the index information generation / accumulation process of the information processing apparatus 100.

The index information storage unit 142 stores index information in the index information storage unit 112 in association with each requester identifier included in the requester information, for example, as follows.

(Step S121) The index information storage unit 142 sets 1 in the counter i.

(Step S122) The index information storage unit 142 acquires the authority information corresponding to the i-th requester identifier among the requester identifiers included in the requester information from the authority information storage unit 114.

(Step S123) The index information storage unit 142 acquires the user information in the range corresponding to the authority information among the user information acquired from each of the two or more databases. Then, index information is generated using the acquired user information.

(Step S124) The index information storage unit 142 associates the generated index information with the i-th requester identifier and stores it in the index information storage unit 112.

(Step S125) The index information storage unit 142 determines whether or not the counter i is the total number of requester identifiers included in the requester information. If i is the total number of requester identifiers, the index information generation / accumulation process is terminated and the process returns to the process shown in FIG. 6, otherwise the process proceeds to step S126.

(Step S126) The index information storage unit 142 increments the counter i by 1. Return to step S122.

Not limited to the above processing, index information is generated for each access permission granting pattern (access permission granting mode for one requester), and each requester identifier and access permission granting mode for the requester are generated. The index information corresponding to may be associated and accumulated.

FIG. 8 is a flowchart showing an example of the search process of the information processing apparatus 100.

(Step S141) The search execution unit 143 acquires the requester identifier corresponding to the search request information. The requester identifier is, for example, a requester identifier that is received by the search request information receiving unit 132 and identifies the requester who has input the search request information.

(Step S142) The search execution unit 143 identifies the index information corresponding to the requester identifier among the index information stored in the index information storage unit 112.

(Step S143) The search execution unit 143 searches for index information using the search request information. As a result, the search execution unit 143 acquires the search result.

(Step S144) The search result output unit 161 acquires and outputs the search result by the search execution unit 143. For example, the search result output unit 161 generates the user information hit by the search in association with the identification information for visually indicating the database of the acquisition source from which the user information was acquired. The search result output unit 161 may acquire the second user information related to the user information hit by the search from each database and include it in the search result.

(Step S145) The transmission unit 170 transmits the search result to the terminal device 600 corresponding to the requester identifier. As a result, the search result can be displayed in the format of a web page or the like on the terminal device 600. The process returns to the process shown in FIG.

FIG. 9 is a flowchart showing an example of access processing of the information processing apparatus 100.

(Step S161) The access control unit 144 acquires the requester identifier and the record identifier corresponding to the access request information.

(Step S162) The access control unit 144 acquires the authority information based on the requester identifier.

(Step S163) Based on the authority information, the access control unit 144 determines whether or not the requester who has input the access request information has the access authority to perform the access as requested. If there is access authority, the process proceeds to step S165. If not, the process proceeds to step S164.

(Step S164) The access control unit 144 does not perform access, and generates error information indicating that the access was not performed. The transmission unit 170 transmits the error information to the terminal device 600 corresponding to the requester identifier. Note that the error information does not have to be generated or transmitted. When the process of step S164 is completed, the process returns to the process shown in FIG.

(Step S165) The access control unit 144 creates a query for performing access based on the access request information and the record identifier.

(Step S166) The access control unit 144 accesses the database using a query.

(Step S167) The access control unit 144 acquires information indicating an access result. For example, when the access for acquiring the second user information is performed, the second user information is acquired.

(Step S168) The transmission unit 170 transmits information (for example, second user information, etc.) acquired as a result of access by the access control unit 144 to the terminal device 600 corresponding to the requester identifier. Information indicating the result of access may be generated by the output unit 160, and the information generated by the transmission unit 170 may be output. For example, information for the output unit 160 to display the acquired information as a web page on the terminal device 600 (for example, an HTML format document or a web page generation system that functions on the information processing device 100 or the terminal device 600). Information used for (content management system, etc.) may be generated. In this way, in the terminal device 600, the result of the access can be displayed in the form of a web page or the like. The process returns to the process shown in FIG.

Hereinafter, specific examples of functions that can be used by the requester using the information processing device 100 will be described.

In the following specific example, the information processing device 100 integrates customer databases of two different companies to provide a customer management service that enables a requester to browse and search customer information (user information). It is assumed that it is used to do so. In this specific example, the first external device 910 is, for example, a device of a gas company that operates an LPG supply business. The first database is, for example, a customer information database of a gas company. The second external device 920 is, for example, a device of a water supply company that operates a water supply supply business. The second database is, for example, a customer information database of a water company. Each customer information database records information about users of each company.

In this specific example, the range in which the user information can be viewed, the search, and the like differ depending on the access authority of each of the two or more requesters who use the information processing device 100. For example, the access authority can be set as follows. That is, the requester employed by the gas company has a relatively wide access authority for the user information contained in the first database and a relatively narrow access authority for the user information contained in the second database. On the other hand, the requester employed by the water company has a relatively narrow access authority for the user information contained in the first database and a relatively wide access authority for the user information contained in the second database. The access authority can be set as appropriate.

In this specific example, each requester who uses the information processing device 100 uses the customer management service by logging in to the customer management service realized by the information processing device 100 with a preset account. Is configured to allow It can be said that each account corresponds to the requester identifier.

FIG. 10 is a diagram showing a specific example of requester information stored in the requester information storage unit 113 of the information processing apparatus 100.

As shown in FIG. 10, in this specific example, the requester information storage unit 113 includes a plurality of requester information. Each requester information includes, for example, an attribute value for each attribute of a name, a requester ID, a password used for login, and a terminal identifier (terminal ID) of the terminal device 600 used (terminal device 600 used for login). Is recorded. Any of these attribute values may not be included, and attribute values of other attributes may be included. For example, an identifier or the like that identifies the organization to which the requester belongs may be included. In this specific example, for example, the requester ID is also used as the requester identifier, but the present invention is not limited to this. For example, the terminal identifier may be configured to be used as the requester identifier, in which case the requester identifier that identifies the requester when the terminal on which the requester is logged in with his account changes. Although it is changed, it is sufficient that the account of the requester and the terminal identifier of the terminal device 600 used for login are always associated with each other.

FIG. 11 is a diagram showing a specific example of the authority information stored in the authority information storage unit 114 of the information processing apparatus 100.

As shown in FIG. 11, in this specific example, the authority information storage unit 114 includes authority information for each requester ID. That is, in each authority information, for example, attribute values are recorded for each attribute of the requester ID which is the requester identifier, the content of the access authority related to the first database, and the content of the access authority related to the second database. .. Any of these attribute values may not be included, and attribute values of other attributes may be included. As the attribute value of the access authority, for example, only the first user information can be searched, each attribute value of the user information can be searched / acquired / changed, and each attribute value can be accessed including deletion. It suffices if it is possible or set appropriately. In addition, the range in which access is not permitted may be defined.

FIG. 12 is a diagram illustrating a specific example of a first database that can be accessed by the information processing apparatus 100.

As shown in FIG. 12, the customer information database of the gas company contains the customer ID, name, approximate address (for example, address excluding chome and below), detailed address, presence / absence of accrued charges, payment account, etc. for each user. For each attribute of, the attribute value is recorded in each user information. Any of these attribute values may not be included, and attribute values of other attributes may be included. In the customer information database, the attribute value of the customer ID may be treated as a user identifier, or the attribute value of another attribute such as a name or an address or a combination thereof may be treated as a user identifier.

FIG. 13 is a diagram illustrating a specific example of a second database that can be accessed by the information processing apparatus 100.

As shown in FIG. 12, the customer information database of the water company also contains the user for each attribute such as customer ID, name, approximate address, detailed address, last month's usage amount, and amount of receivable charges for each user. Attribute values are recorded for each piece of information. Any of these attribute values may not be included, and attribute values of other attributes may be included.

In this specific example, among the user information of these customer information databases, the attribute values of each attribute of the customer ID, the name, and the approximate address are included in the first user information, and other attribute values are included. It shall be included in the second user information. That is, in this specific example, the user information storage unit 141 acquires and stores the attribute values of the customer ID, the name, and the approximate address from each of the two databases. As a result, the information processing apparatus 100 can handle the first user information without accessing each database. For example, when there is a request for searching or browsing the first user information from the terminal device 600, it can be transmitted to the terminal device 600 without accessing each database. The distinction between the first user information and the second user information is not limited to this. For example, it may be interpreted that only the customer ID is the first user information, or that only some attribute values are the second user information and most of the other attribute values are the first user information. You may.

It is assumed that such information is stored in the information processing device 100, the first external device 910, and the second external device 920. In this specific example, the requester can use the customer management service by the information processing device 100 as follows by using one terminal device 600. In each of the following figures, the screen example shown surrounded by the alternate long and short dash line can be displayed on the web browser as a result of the web browser operating on the terminal device 600 accessing the information processing device 100. Note that each screen example may be displayed by another application operated by the terminal device 600 based on the information received from the information processing device 100.

FIG. 14 is a diagram showing a specific example of the first display screen S11 of the terminal device 600.

The first display screen S11 shown in FIG. 14 is an example of a login screen of the customer management service. The requester of the terminal device 600 can log in to the customer management service by inputting his / her own account information and performing an operation of transmitting the information to the information processing device 100. As the account information, various information such as a requester ID and a password paired with the requester ID can be used. When login is performed, for example, the transition to the second display screen S12 shown below is performed.

FIG. 15 is a diagram showing a specific example of the second display screen S12 of the terminal device 600.

The second display screen S12 shown in FIG. 15 is an example of a reception screen for receiving search request information in the customer management service. The reception screen is displayed after logging in. That is, in this specific example, it can be said that the operation of logging in on the login screen is an operation for transmitting the reception screen display request information.

The reception screen is provided with a search key input area for inputting information that serves as a search key for performing a search, and a search button for transmitting the information input to the information processing apparatus 100. That is, when the search button is operated while a character string or the like is input in the search key input area, the input character string is included in the search request information and transmitted. When the search request information is transmitted, for example, the transition to the third display screen S13 shown below is performed.

In this specific example, the reception screen is displayed in a manner corresponding to the requester. That is, the name of the requester who is logged in and an image showing the second user information that the requester can mainly access for each database are included in the reception screen. In FIG. 15, the name of the requester, "Ichitaro Tadashi," and the image showing that the second user information that has been acquired and included in the customer information database of the gas company can be accessed are shown in the upper right of the reception screen. It is displayed in.

FIG. 16 is a diagram showing a specific example of the third display screen S13 of the terminal device 600.

The third display screen S13 shown in FIG. 16 is a screen example for displaying the search result. In this specific example, the first user information is displayed in a list on the screen for the user whose user information is hit by the search. In this specific example, the user information is displayed together with the database (acquisition source database) in which the user information is recorded. For example, if it is the first database, it is displayed together with characters such as "gas", and if it is the second database, it is displayed together with characters such as "water services" (an example of identification information). Further, in this specific example, the user information is displayed together with the identification image F21 for visually showing the database of the acquisition source from which the user information was acquired. In the example shown in FIG. 16, only the user information of "Hanako Suido" in the second line is acquired from the second database, and the user information is an identification image different from other user information on the screen. It is displayed with the letters F21 and "water services". The display mode is not limited to this. The requester determines whether each user information is related to the gas company or the water company by displaying the identification image F21 indicating the acquisition source database and the characters in association with the user information. It is easy to know.

In this specific example, for the user information for which the requester has access authority, the access request button F23 for transitioning to the detail screen for confirming the second user information about the user is displayed. NS. A dummy image F24 is displayed for user information that does not have access authority. In the example shown in FIG. 16, the user information of "Hanako Suido" in the second line is obtained from the second database, and the logged-in requester "Ichitaro Tadashi" has only search access authority. Therefore (see the access authority of the first line of FIG. 11 corresponding to the first line of FIG. 10), the dummy image F24 is displayed for the user information. Since the requester has access authority to search, acquire, and change other user information, the access request button F23 is displayed. When the requester presses the access request button F23, the access request information corresponding to the corresponding user identifier is transmitted to the information processing device 100. When the access request information is transmitted, for example, the transition to the fourth display screen S14 shown below is performed. Since the access request button F23 and the dummy image F24 are displayed, the requester can easily know which user information the second user information can be confirmed. Instead of displaying the access request button F23 and the dummy image F24, the display mode of each user information may be changed according to the access authority. Further, the access request information may be transmitted by performing an operation on the area or characters where the user information is displayed.

FIG. 17 is a diagram showing a specific example of the fourth display screen S14 of the terminal device 600.

The fourth display screen S14 shown in FIG. 17 is a screen example of a detailed display screen that displays second user information about a user (selected user) for whom an access request has been made. Here, an example of a detailed display screen when there is an access request for the second user information for the user "Gasichiro" in the first line of FIG. 16 is shown. On the screen, information such as a detailed address and a telephone number included in the second user information about the selected user is displayed. In addition, identification information such as an identification image corresponding to the selected user may be displayed together.

In this specific example, on the detailed display screen, various information included in the second user information can be displayed in the sub display area F26 for each genre. Examples of the genre include, but are not limited to, matters related to charges, matters related to billing, matters related to equipment used by the user, matters related to reception and reception, matters related to security, and delivery services. On the detailed display screen, the genre selection unit F25 for the requester to select these genres is displayed, and the second user information about one genre selected by the requester is displayed in the sub display area F26. It has become like. The second user information that can be displayed in the sub display area F26 is collectively transmitted from the information processing device 100 to the terminal device 600 before the detailed display screen is displayed, and corresponds to the selected genre among them. The terminal device 600 may acquire the object and display it on the screen. Further, the second user information displayed in the sub display area F26 is transmitted from the information processing device 100 to the terminal device 600 by communicating with the terminal device 600 and the information processing device 100 each time a genre is selected. You may do so. In this case, in the information processing device 100, the access control unit 144 may acquire the second user information used for display each time the genre is selected, or the second user information collectively acquired for the selected user. 2 User information may be acquired from the storage unit 110.

In FIG. 17, the sub-display area F26 displays items related to billing of charges for selected users. That is, for example, information such as account information about the selected user and the presence / absence of receivables is displayed, but the present invention is not limited to this.

FIG. 18 is a diagram showing a first modification of the screen for displaying the search result of the terminal device 600.

FIG. 18 shows a third display screen S23 according to the first modification. That is, the requested person who is logged in is different from the above-mentioned third display screen S13, and the third display screen S23 is a screen for displaying the search result when the requester "multi-skilled two Hanako" is logged in. An example is shown. The search key is the same as the third display screen S13 described above. This requester "multi-skilled two Hanako" has only search access authority for the first database, and has access authority for search, acquisition, and modification for the second database (second line in FIG. 10). (See the access authority on the second line of FIG. 11 corresponding to). In this case, the user information other than "Hanako Suido" in the second line is obtained from the first database, and the logged-in requester has only search access authority. Therefore, for these user information. Is displayed as a dummy image F24. As for the user information of "Suido Hanako", the access request button F23 is displayed because the requester has the access authority to search, acquire, and change.

FIG. 19 is a diagram showing a second modification of the screen for displaying the search result of the terminal device 600.

FIG. 19 shows a third display screen S33 according to the second modification. That is, the requester who is logged in and the search key are different from the above-mentioned third display screen S13. The third display screen S33 shows an example of a screen for displaying the search result when the requester "Multi-purpose Sanjiro" who can access the second user information of both databases is logged in. Further, the search key is specified to search for user information that is said to have receivables regarding the presence or absence of receivables, which is an attribute value of the second user information. In this modification, the user information that is said to have receivables is searched using the index information that is associated with the "multi-skilled Sanjiro" that is generated in advance. As a result, for example, when a total of three user information hits, that is, two cases where the first database is the acquisition source and one case where the second database is the acquisition source, are displayed as shown in the figure.

FIG. 20 is a diagram showing a third modification of the screen for displaying the search result of the terminal device 600.

FIG. 20 shows a third display screen S43 according to the third modification. That is, the requester who is logged in is different from the above-mentioned third display screen S33, and on the third display screen S43, only the first user information can be searched for the first database. An example of a screen that displays the search results when "" is logged in is shown. As described above, the search key is specified to search for user information that is said to have receivables. In this modification, the user information that is said to have receivables is searched using the index information associated with the "multi-skilled two Hanako" generated in advance. As a result, based on the access authority, the second user information from which the first database is the acquisition source is not included in the index information, so only one user information from which the second database is the acquisition source is hit. Is displayed as shown in.

As described above, according to the present embodiment, the information processing apparatus 100 can access the user information stored in each of the two or more databases when the access request information is received. Therefore, the user information of two or more databases stored in a distributed manner can be appropriately handled, and the convenience is improved. Since the access is performed according to the access authority of the requester, it is possible to appropriately handle the requests by two or more requesters having different access authority.

The processing in this embodiment may be realized by software. Then, this software may be distributed by software download or the like. Further, this software may be recorded on a recording medium such as a CD-ROM and disseminated.

The software that realizes the information processing device 100 in this embodiment is the following program. That is, this program is used in an information processing system having two or more databases distributed and stored in two or more storage units, and is a program for an information processing device having a user information storage unit. In each of the above databases, the first user information including the user identifier for one user and the second user information including the attribute value different from the first user information for the one user are stored in association with each other. The computer of the information processing apparatus associates the first user information contained in each of the two or more databases with a record identifier that identifies a record in the database in which each first user information is stored, and is associated with two or more. A user information storage step that is acquired and stored in the user information storage unit, an access request information reception step that receives access request information for accessing the second user information associated with the user identifier, and an access request information reception step. Is a program that executes an access control step for accessing the second user information stored in the corresponding database based on the record identifier corresponding to the user identifier associated with the access request information received by. Further, this program is used in an information processing system having two or more databases distributed and stored in two or more storage units, and a computer of an information processing device having a user information storage unit has two or more databases. Two or more user information including a user identifier related to one user stored in each is acquired in association with a record identifier that identifies a record in the database in which each user information is stored, and stored in the user information storage unit. The user information is searched based on the user information storage step, the search request information reception step that accepts the search request information input from the requester, and the search request information received by the search request information reception step. It may be a program that executes the search execution step and the search result output step that outputs the search result by the search execution step.

(others)

FIG. 21 is an overview view of the computer system 800 according to the above embodiment. FIG. 22 is a block diagram of the computer system 800.

In these figures, the configuration of a computer that executes the program described in the present specification to realize the information processing apparatus and the like of the above-described embodiment is shown. The above-described embodiment can be realized by computer hardware and a computer program executed on the computer hardware.

The computer system 800 includes a computer 801 including a CD-ROM drive, a keyboard 802, a mouse 803, and a monitor 804.

In addition to the CD-ROM drive 8012, the computer 801 is connected to the MPU 8013, the bus 8014 connected to the CD-ROM drive 8012, the ROM 8015 for storing a program such as a bootup program, and the MPU 8013, and is connected to the application. It includes a RAM 8016 for temporarily storing program instructions and providing a temporary storage space, and a hard disk 8017 for storing application programs, system programs, and data. Although not shown here, the computer 801 may further include a network card that provides a connection to the LAN.

The program that causes the computer system 800 to execute the functions of the information processing apparatus and the like according to the above-described embodiment may be stored in the CD-ROM 8101, inserted into the CD-ROM drive 8012, and further transferred to the hard disk 8017. Alternatively, the program may be transmitted to the computer 801 via a network (not shown) and stored on the hard disk 8017. The program is loaded into RAM 8016 at run time. The program may be loaded directly from the CD-ROM 8101 or the network.

The program does not necessarily have to include an operating system (OS), a third-party program, or the like that causes the computer 801 to execute the functions of the information processing apparatus or the like according to the above-described embodiment. The program need only include a portion of the instruction that calls the appropriate function (module) in a controlled manner to obtain the desired result. It is well known how the computer system 800 works, and detailed description thereof will be omitted.

In the above program, in the transmission step of transmitting information and the receiving step of receiving information, processing performed by hardware, for example, processing performed by a modem or interface card in the transmission step (only performed by hardware). Processing that is not done) is not included.

Further, in the above embodiment, the transfer of information performed between the components is performed by, for example, one component when the two components that transfer the information are physically different. It may be performed by outputting information and accepting information by the other component, or if the two components that pass the information are physically the same, one component. It may be performed by moving from the processing phase corresponding to the above to the processing phase corresponding to the other component.

Further, in the above embodiment, information related to the processing executed by each component, for example, information received, acquired, selected, generated, transmitted, or received by each component. In addition, information such as threshold values, mathematical formulas, and addresses used by each component in processing may be temporarily or for a long period of time in a recording medium (not shown) even if it is not specified in the above description. In addition, each component or a storage unit (not shown) may store information on a recording medium (not shown). Further, each component or a reading unit (not shown) may read the information from the recording medium (not shown).

Further, in the above embodiment, when the information used in each component or the like, for example, the information such as the threshold value and the address used in the processing by each component and various setting values may be changed by the user, the above Although not specified in the description, the user may or may not be able to change the information as appropriate. When the information can be changed by the user, the change is realized by, for example, a reception unit (not shown) that receives a change instruction from the user and a change unit (not shown) that changes the information in response to the change instruction. You may. The reception unit (not shown) may accept the change instruction from, for example, an input device, information transmitted via a communication line, or information read from a predetermined recording medium. ..

The present invention is not limited to the above embodiments, and various modifications can be made, and these are also included in the scope of the present invention.

The configuration itself is not limited to the above-described embodiment, and each component of the above-described embodiment may be appropriately replaced or combined with the component of another embodiment. In addition, some components and functions may be omitted from the above-described embodiments.

Each database described in the above-described embodiment may be realized by a plurality of databases related to each other, and the plurality of databases are distributed and arranged on different hardware or devices. You may be. For example, an attribute value described as being contained in a record in one database may be an attribute value contained in another database associated with that one database.

Further, in each of the above-described embodiments, each process (each function) may be realized by centralized processing by a single device (system), or by distributed processing by a plurality of devices. (In this case, it is possible to grasp the entire system composed of a plurality of devices that perform distributed processing as one "device").

As described above, the information processing device according to the present invention has the effect of being able to appropriately handle the information stored in each of the two or more databases and increasing the convenience, and is used as an information processing device or the like. It is useful.

100 Information processing device 110 Storage unit 111 User information storage unit 112 Index information storage unit 113 Requester information storage unit 114 Authority information storage unit 120 Reception unit 130 Reception unit 131 Access request information reception unit 132 Search request information reception unit 133 Display request information Reception unit 140 Processing unit 141 User information storage unit 142 Index information storage unit 143 Search execution unit 144 Access control unit 145 Access record storage unit 160 Output unit 161 Search result output unit 162 Reception screen information output unit 170 Transmission unit 600 Terminal device 610 Terminal Storage unit 620 Terminal reception unit 621 Reception screen information reception unit 630 Terminal reception unit 640 Terminal processing unit 660 Terminal output unit 670 Terminal transmission unit 671 Access request information transmission unit 672 Reception screen display request information transmission unit 673 Search request information transmission unit 900 information Processing system

Claims (16)

An information processing device used in an information processing system having two or more databases distributed and stored in two or more storage units.
Each of the two or more databases is associated with a first user information including a user identifier for one user and a second user information including an attribute value different from the first user information for the one user. Is stored and stored
The information processing device
User information storage unit and
Two or more of the first user information included in each of the two or more databases are acquired in association with a record identifier that identifies a record in the database in which each first user information is stored, and the user information storage unit stores the first user information. User information storage unit to store and
An access request information receiving unit that receives access request information for accessing the second user information associated with the user identifier, and an access request information receiving unit.
It includes an access control unit that accesses the second user information stored in the corresponding database based on the record identifier corresponding to the user identifier associated with the access request information received by the access request information receiving unit. , Information processing equipment. The access request information received by the access request information receiving unit is associated with a requester identifier that identifies the requester who requested access.
The access control unit
Acquires the authority information regarding the access authority of the requester specified by the requester identifier corresponding to the access request information received by the access request information receiving unit.
The information processing device according to claim 1, which accesses the second user information based on the acquired authority information. The access control unit is based on the acquired authority information.
Restricting access to some attribute values of the second user information that is the target of the access request, and
The information processing apparatus according to claim 2, wherein at least one of limiting the types of operations that can be performed on the second user information that is the target of the access request is performed. The authority information according to any one of claims 1 to 3, wherein the access authority for two or more records stored in the two or more databases is collectively defined for each of the two or more databases. Information processing device. The information processing apparatus according to any one of claims 1 to 4, further comprising an access record storage unit that stores access records by the access control unit in a distributed ledger database realized in the information processing system. A search request information receiving unit that receives search request information input from a requester for user information that is either the first user information or the second user information.
A search execution unit that searches for the user information based on the search request information received by the search request information reception unit, and a search execution unit.
The information processing apparatus according to any one of claims 1 to 5, further comprising a search result output unit that outputs a search result by the search execution unit. An information processing device used in an information processing system having two or more databases distributed and stored in two or more storage units.
User information storage unit and
Two or more user information including a user identifier for one user stored in each of the two or more databases is acquired in association with a record identifier that identifies a record in the database in which each user information is stored, and the above is obtained. The user information storage unit stored in the user information storage unit and the user information storage unit
A search request information receiving unit that receives search request information input from a requester regarding the user information, and a search request information receiving unit.
A search execution unit that searches for the user information based on the search request information received by the search request information reception unit, and a search execution unit.
An information processing device including a search result output unit that outputs a search result by the search execution unit. Claim 6 or 7 that the search result output unit outputs the user information included in the search result in association with the identification information for visually indicating the database of the acquisition source from which the user information was acquired. The information processing device described in. The search execution unit searches for different search targets for each requester who has entered the search request information, based on the requester identifier that identifies the requester who has entered the search request information, according to claims 6 to 8. The information processing apparatus according to any one of the following items. Index information storage unit and
An index information storage unit that acquires two or more index information including different contents for searching the user information and stores the index information storage unit in association with the corresponding requester identifier is further provided.
The search execution unit corresponds to the requester identifier among two or more index information stored in the index information storage unit based on the requester identifier that identifies the requester who input the search request information. The information processing apparatus according to claim 9, wherein a search is performed using an information processing device. The search execution unit searches for user information stored in a specific database associated with a requester identifier that identifies a requester who has entered the search request information, or information derived from the user information, as a search target. The information processing apparatus according to claim 9 or 10. Reception screen that requests the display of the reception screen for receiving the search request information input from the requester The display request information reception unit that receives the display request information, and the display request information reception unit.
The reception screen information output unit for outputting the reception screen information for displaying the reception screen based on the reception screen display request information received by the display request information reception unit is further provided.
The reception screen information output unit outputs the reception screen information based on the requester identifier that identifies the requester who has input the reception screen display request information, according to any one of claims 1 to 11. Information processing device. A user information storage unit, an access request information reception unit, and an information processing device having a user information storage unit used in an information processing system having two or more databases distributed and stored in two or more storage units. It is an information processing method realized by the access control unit.
Each of the two or more databases is associated with a first user information including a user identifier for one user and a second user information including an attribute value different from the first user information for the one user. Is stored and stored
The user information storage unit acquires two or more of the first user information included in each of the two or more databases in association with a record identifier that identifies a record in the database in which each first user information is stored. , The user information storage step to be stored in the user information storage unit, and
An access request information receiving step in which the access request information receiving unit receives access request information for accessing the second user information associated with the user identifier, and
The access control unit accesses the second user information stored in the corresponding database based on the record identifier corresponding to the user identifier associated with the access request information received by the access request information receiving step. An information processing method including an access control step. A user information storage unit, a search request information reception unit, and an information processing device having a user information storage unit used in an information processing system having two or more databases distributed and stored in two or more storage units. It is an information processing method realized by the search execution unit and the search result output unit.
The user information storage unit associates user information including a user identifier for one user stored in each of the two or more databases with a record identifier that identifies a record in the database in which each user information is stored. The user information storage step of acquiring two or more and storing them in the user information storage unit,
The search request information reception unit receives the search request information input from the requester for the user information, and the search request information reception step.
A search execution step in which the search execution unit searches for the user information based on the search request information received by the search request information reception step.
An information processing method in which the search result output unit includes a search result output step that outputs a search result obtained by the search execution step. A program for an information processing device having a user information storage unit, which is used in an information processing system having two or more databases distributed and stored in two or more storage units.
Each of the two or more databases is associated with a first user information including a user identifier for one user and a second user information including an attribute value different from the first user information for the one user. Is stored and stored
To the computer of the information processing device
Two or more of the first user information included in each of the two or more databases are acquired in association with a record identifier that identifies a record in the database in which each first user information is stored, and the user information storage unit stores the first user information. User information accumulation steps to be accumulated and
An access request information receiving step for receiving access request information for accessing the second user information associated with the user identifier, and an access request information receiving step.
Based on the record identifier corresponding to the user identifier associated with the access request information received by the access request information receiving step, the access control step for accessing the second user information stored in the corresponding database is executed. Let the program. Used in an information processing system having two or more databases distributed and stored in two or more storage units, and in a computer of an information processing device having a user information storage unit.
Two or more user information including a user identifier for one user stored in each of the two or more databases is acquired in association with a record identifier that identifies a record in the database in which each user information is stored, and the above is obtained. The user information storage step to be stored in the user information storage unit and the user information storage step
A search request information receiving step for receiving the search request information input from the requester regarding the user information, and
A search execution step for searching the user information based on the search request information received by the search request information receiving step, and a search execution step.
A program that executes a search result output step that outputs a search result by the search execution step.

Images