JP2021157821A - Information management system, display method, and program - Google Patents

Abstract

To provide an information processing apparatus, a display method of an electronic document, and a program, which can flexibly control necessary registration information to be displayed to a user while ensuring security of registration information.SOLUTION: An information processing apparatus comprises: display control means for displaying an electronic document including a plurality of items and corresponding registration information with display restriction applied to registration information according to display restriction setting for each of the plurality of items; discrimination means for discriminating whether a display restriction release condition corresponding to items of the registration information is satisfied or not when a predetermined input operation for requesting display of the registration information in which display restriction is applied is made; and setting changing means for changing the display restriction setting so that the display restriction on the item is released when the release condition is determined to have been met. The display control means updates the display of the electronic document on the basis of the changed display restriction setting when the display restriction setting is changed by the setting changing means.SELECTED DRAWING: Figure 28

Description

The present invention relates to an information processing device, an electronic document display method, and a program.

Conventionally, there is an information processing device capable of displaying a part of registered information in a database as an electronic document such as an electronic form. An example of such an information processing device is a server device that provides a personnel information management system capable of registering and editing various data related to employees, and displaying and printing as an electronic document.

This type of information processing device often handles highly confidential information. For this reason, there is a technique for requesting the input of authentication information from a user when performing various processes related to registration information such as displaying an electronic document, and displaying the electronic document only when the authentication information is appropriate (for example, a patent). Document 1).

Japanese Unexamined Patent Publication No. 2005-346398

However, although an electronic document usually contains two or more items, in the above-mentioned conventional technique, only one of the control of displaying the entire registration information related to the two or more items or the control of not displaying the whole is available. I can't do it. That is, there is a problem that it is not possible to flexibly control the display of registration information for necessary items to the user while ensuring the security of the registration information.

An object of the present invention is to provide an information processing device, an electronic document display method, and a program capable of flexibly controlling the display of necessary registration information to a user while ensuring the security of the registration information.

In order to solve the above problems, the information processing apparatus of the present invention
A display control means for displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items by restricting the display of the registered information according to the display restriction setting for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. A discriminating means for determining whether or not the information has been used, and
When the determination means determines that the release condition for the item is satisfied, the setting change means for changing the display restriction setting so that the display restriction for the item is released.
With
The display control means is characterized in that, when the display restriction setting is changed by the setting changing means, the display of the electronic document is updated based on the changed display restriction setting.

According to the present invention, there is an effect that it is possible to flexibly control the display of necessary registration information to the user while ensuring the security of the registration information.

It is a figure which shows the schematic structure of an information processing system. It is a block diagram which shows the functional structure of the personnel information management server. It is a block diagram which shows the functional structure of the business information management server. It is a block diagram which shows the functional configuration of a terminal device. It is a schematic diagram explaining the login method in a personnel information management system and a business information management system. It is a figure which shows the login screen for logging in to a business information management system. It is a figure which shows the business information management menu screen. It is a figure which shows the initial screen (application status list screen) when logging in to a personnel information management system via a business information management system. It is a figure which shows the use application screen of a personnel information management system. It is a figure which shows the application status list screen after the use application. It is a figure which shows the content example of the e-mail sent when the usage application is approved. It is a figure which shows the application status list screen in the state where the use application is approved. It is a figure which shows the menu screen of the personnel information management system. It is a figure which shows the form reading screen which displays the electronic form. It is a figure which shows the content example of the initial setting table and the display restriction setting table. It is a figure which shows the content example of the release classification table. It is a figure explaining the release operation about the item of rank 1. It is a figure which shows the display restriction setting table in the state where a part of rank is changed. It is a figure which shows the form reading screen in the state which a part of the display restriction is lifted. It is a figure explaining the release operation about the item of rank 2. It is a figure explaining the release operation about the item of rank 3. It is a figure which shows the content example of the e-mail which described the one-time password. It is a figure which shows the login screen for logging in by the first login method to a personnel information management system. It is a figure which shows the personnel information management menu screen at the time of logging in to a personnel information management system by the first login method. It is a figure which shows the application status list screen. It is a figure which shows the approval screen. It is a flowchart which shows the control procedure of system basic processing. It is a flowchart which shows the control procedure of the electronic form display processing.

Hereinafter, embodiments of the information processing apparatus, electronic document display method, and program of the present invention will be described with reference to the drawings.

<Configuration of information processing system>
First, the schematic configuration of the information processing system 100 will be described with reference to FIG.
FIG. 1 is a diagram showing a schematic configuration of an information processing system 100.
As shown in FIG. 1, the information processing system 100 of the present embodiment includes a personnel information management server 1 (information processing device), a business information management server 2, and a plurality of terminal devices 3. Further, the personnel information management server 1, the business information management server 2, and the terminal device 3 are connected to each other via the communication network 4 so that information can be communicated.

The personnel information management server 1 provides users with a cloud service of a personnel information management system for managing personnel information of employees, etc., and the business information management server 2 provides information related to various operations (for example, to a health insurance association). Provide users with a cloud service of a business information management system for managing related business information). The personnel information management system and the business information management system can be accessed when authentication by separate authentication information is successful. Therefore, the authentication information of the personnel information management system cannot be used to log in to the business information management system, and the authentication information of the business information management system cannot be used to log in to the personnel information management system. However, a user who logs in to the business information management system can use some functions of the personnel information management system even if he / she does not have the authentication information of the personnel information management system. On the contrary, a user who logs in to the personnel information management system can use some functions of the business information management system even if he / she does not have the authentication information of the business information management system. That is, the personnel information management system and the business information management system are in a relationship in which the functions of the respective systems can be mutually used. In the present embodiment, for the sake of simplicity, a configuration required for a user who has logged in to the business information management system to use the functions of the personnel information management system is described, but in reality, the above-mentioned mutual It is assumed that the personnel information management server 1 and the business information management server 2 each have a configuration for enabling the use. The operation when the functions of the respective systems are mutually used in this way will be described in detail later.

The personnel information management server 1 stores and manages a personnel information DB (database) related to personnel information. Further, the personnel information management server 1 executes various programs to process various data related to the personnel information DB (for example, registration and editing of personnel information data, and as an electronic document (for example, an electronic form or an electronic ledger)). Perform processing to realize functions related to display and printing).

The business information management server 2 stores and manages the business information DB. In addition, the business information management server 2 realizes functions related to various data processing related to the business information DB (for example, registration and editing of business information data, display and printing as an electronic form, etc.) by executing various programs. Processing to do).

The terminal device 3 is, for example, a terminal device owned by a user of a personnel information management system or a business information management system. Examples of the terminal device 3 include a smartphone, a tablet PC (Personal Computer), a mobile phone, a PDA (Personal Digital Assistant), a notebook PC, a desktop PC, and the like.
Further, the terminal device 3 receives the input operation of the user and transmits it to the personnel information management server 1 and the business information management server 2, and displays the information transmitted and received from each server.

The communication network 4 is assumed to be the Internet, for example, but may be another network such as a LAN (Local Area Network).

FIG. 2 is a block diagram showing a functional configuration of the personnel information management server 1.
As shown in FIG. 2, the personnel information management server 1 includes a CPU 11 (Central Processing Unit) (display control means, discrimination means, setting change means, notification control means, rank adjustment means, reliability information acquisition means), and a RAM 12 (reliability information acquisition means). Random Access Memory), a storage unit 13, an operation unit 14, a display unit 15, and a communication unit 16. Further, each part of the personnel information management server 1 is connected via the bus 17.

The CPU 11 controls each part of the personnel information management server 1. The CPU 11 reads a designated program among the system programs and application programs stored in the storage unit 13, expands the program into the work area of the RAM 12, and executes various processes according to the program.

The RAM 12 is, for example, a volatile memory and has a work area for temporarily storing various programs and data read by the CPU 11.

The storage unit 13 is composed of, for example, an HDD (Hard Disk Drive), an SSD (Solid State Drive), or the like, and is a storage unit capable of writing and reading data and programs. Further, the storage unit 13 stores the program 13a, the account DB 13b, the personnel information DB 13c, the initial setting table 13d, the display restriction setting table 13e, the release classification table 13f, and the like.

The program 13a includes the above-mentioned various system programs and application programs executed by the CPU 11.
In the account DB 13b, information related to the user's account (hereinafter, also referred to as a personnel account) of the personnel information management system is registered. Here, the information related to the account includes an ID, an e-mail address, and a password unique to each account. In the present embodiment, the authentication information is configured by the combination of the ID or the e-mail address and the password.
The personnel information DB 13c is a database in which personnel information to be managed in the personnel information management system is registered.
The initial setting table 13d, the display restriction setting table 13e, and the release classification table 13f are table data used for displaying restrictions on the items of the electronic form when the data of the personnel information DB 13c is displayed as the electronic form, and the details will be described later. do.

The operation unit 14 has, for example, a key input unit such as a keyboard and a pointing device such as a mouse. Further, the operation unit 14 receives the key input and the position input, and outputs the operation information to the CPU 11.

The display unit 15 is composed of, for example, an LCD (Liquid Crystal Display), an organic EL (Electro-Luminescence) display, or the like. Further, the display unit 15 displays various screens according to the instruction of the display signal input from the CPU 11.

The communication unit 16 is composed of, for example, a network card or the like. Further, the communication unit 16 is communicatively connected to the communication network 4 and communicates with a device (for example, a terminal device 3 or the like) on the communication network 4.

FIG. 3 is a block diagram showing a functional configuration of the business information management server 2.
As shown in FIG. 3, the business information management server 2 includes a CPU 21, a RAM 22, a storage unit 23, an operation unit 24, a display unit 25, and a communication unit 26. Further, each part of the business information management server 2 is connected via the bus 27.

The CPU 21 controls each part of the business information management server 2. The CPU 21 reads a designated program among the system programs and application programs stored in the storage unit 23, expands the program into the work area of the RAM 22, and executes various processes according to the program.

The RAM 22 is, for example, a volatile memory and has a work area for temporarily storing various programs and data read by the CPU 21.

The storage unit 23 is composed of, for example, an HDD, an SSD, or the like, and is a storage unit capable of writing and reading data and programs. Further, the storage unit 23 stores the program 23a, the account DB23b, the business information DB23c, and the like.

The program 23a includes the above-mentioned various system programs and application programs executed by the CPU 21.
In the account DB23b, information related to the user's account (hereinafter, also referred to as a business account) of the business information management system is registered. Here, the information related to the account includes an ID, an e-mail address, and a password unique to each account.
The business information DB 23c is a database in which business information to be managed in the business information management system is registered.
Since the configurations of the operation unit 24, the display unit 25, and the communication unit 26 are the same as the configurations of the operation unit 14, the display unit 15, and the communication unit 16 of the personnel information management server 1, detailed description thereof will be omitted.

FIG. 4 is a block diagram showing a functional configuration of the terminal device 3.
As shown in FIG. 4, the terminal device 3 includes a CPU 31, a RAM 32, a storage unit 33, an operation unit 34, a display unit 35, and a communication unit 36. Further, each part of the terminal device 3 is connected via a bus 37.

The CPU 31 controls each part of the terminal device 3. The CPU 31 reads a designated program among the system programs and application programs stored in the storage unit 33, expands the program into the work area of the RAM 32, and executes various processes according to the program. At that time, the CPU 31 stores various processing results in the RAM 32, and displays the processing results on the display unit 35 as needed.

The RAM 32 is, for example, a volatile memory and has a work area for temporarily storing various programs and data read by the CPU 31.

The storage unit 33 is composed of, for example, an HDD, an SSD, or the like, and is a storage unit capable of writing and reading data and programs. Further, the storage unit 33 stores the program 33a. The program 33a includes the above-mentioned various system programs and application programs executed by the CPU 31. As this application program, for example, it accepts a user's input operation, transmits information based on the input operation to the personnel information management server 1 and the business information management server 2, and displays the information transmitted and received from each server in the display unit 35. An information display input program (so-called web browser) that realizes the function of displaying information is included.

Since the configurations of the operation unit 34, the display unit 35, and the communication unit 36 are the same as the configurations of the operation unit 14, the display unit 15, and the communication unit 16 of the personnel information management server 1, detailed description thereof will be omitted.

<How to log in to the personnel information management system and business information management system>
Next, a method of logging in to the personnel information management system and the business information management system will be described.
FIG. 5 is a schematic diagram illustrating a login method in the personnel information management system and the business information management system.
In the information processing system 100 of the present embodiment, as shown on the left side of FIG. 5, it is possible to log in to the personnel information management system by the personnel information management server 1 using the personnel account 1a. Specifically, when it is determined that the authentication information input in the terminal device 3 and transmitted to the personnel information management server 1 matches the authentication information of any personnel account 1a registered in the account DB 13b, personnel affairs The login process to the information management system is performed and the login session is started. In the following, such a login method for the personnel information management system will also be referred to as a first login method.
Further, as shown on the right side of FIG. 5, it is possible to log in to the business information management system by the business information management server 2 using the business account 2a. Specifically, when it is determined that the authentication information input in the terminal device 3 and transmitted to the business information management server 2 matches the authentication information of any business account 2a registered in the account DB 23b, the business is performed. The login process to the information management system is performed and the login session is started.

The personnel account 1a that can log in to the personnel information management system is managed by the account DB 13b of the personnel information management server 1, and the business account 2a that can log in to the business information management system is managed by the account DB 23b of the business information management server 2. For this reason, it is not possible to log in to the personnel information management system with authentication information that allows login to the business information management system.
However, for a user who has a business account 2a of the business information management system (hereinafter referred to as a business information management system user), such as when the information of the personnel information management system is required for work in the business information management system. You may want to allow access to the personnel information management system. In such a case, if the personnel account 1a of the personnel information management system is separately issued to the business information management system user, there is a problem that the number of accounts increases and the account management load increases. Further, such a method has a problem that it cannot respond to a request to a business information management system user to control the disclosure range of personnel information in the personnel information management system.

Therefore, in the information processing system 100 of the present embodiment, after logging in to the business information management system with the business account 2a, the personnel information management system is performed via the business information management system by performing a predetermined operation on the business information management system. It is now possible to log in to, and when logging in via a business information management system, a separate authentication is required to view personnel information. As a result, it is possible to control the disclosure of personnel information to the business information management system user while suppressing the increase in the number of accounts of the personnel information management system. In the following, the method of logging in to the personnel information management system via the business information management system will also be described as the second login method. Here, as shown in FIG. 5, in the login to the personnel information management system by the second login method, the dedicated account 1b that can be used only in the second login method is used. Further, in the following, the method of logging in to the business information management system with the business account 2a will also be described as a third login method.

Hereinafter, the second login method for the personnel information management system will be described in detail.
FIG. 6 is a diagram showing a login screen 41 for logging in to the business information management system.
The login screen 41 is a screen displayed on the display unit 35 when a browser program is executed on the terminal device 3 and a predetermined website for logging in to the business information management system by the business information management server 2 is accessed. Is. On the login screen 41, a text box A1 for entering the ID or e-mail address of the business account 2a used for login, a text box A2 for entering the password, and a login button B1 are displayed.

By the input operation to the operation unit 34 of the terminal device 3, the ID or the mail address is input to the text box A1, the password is input to the text box A2, and the input operation to select the login button B1 is performed in this state. The generated authentication information is transmitted to the business information management server 2 and collated with the authentication information stored in the account DB 23b. If the entered authentication information matches the authentication information of any of the registered business accounts 2a (when it is determined that the authentication information is appropriate), the CPU 21 of the business information management server 2 determines the relevant authentication information. The login process to the business information management system with the business account 2a is performed, and the login session is started (third login method).

FIG. 7 is a diagram showing a business information management menu screen 42 when logged in to the business information management system.
On the business information management menu screen 42 (top screen of the business information management system), the menu button B2 for executing various functions related to the business information management and the login by the second login method to the personnel information management system are performed. A login button B3 for performing the operation and a logout button B4 for logging out from the business information management system are displayed.

When the input operation for selecting the login button B3 is performed on the business information management menu screen 42, the login to the personnel information management system is performed by the second login method.
In the login by this second login method, on the personnel information management system side, the above-mentioned dedicated account 1b used when passing through the business information management system (hereinafter, the name of this dedicated account 1b is referred to as "user01". ) Is performed.

FIG. 8 is a diagram showing an initial screen when logging in to the personnel information management system via the business information management system.
This initial screen is an application status list screen 51 that displays a list of application statuses for using personnel information in the personnel information management system by a business information management system user logged in by the second login method. However, at this stage, since the usage application has not been made yet, the application status is not displayed, and the application button B5 for applying for the use of personnel information in the personnel information management system and personnel information management. Only the logout button B6 for logging out of the system is displayed. The business information management system user can display the usage application screen for the usage application of the personnel information management system by performing the input operation of selecting the application button B5.

FIG. 9 is a diagram showing a usage application screen 52 of the personnel information management system.
On the usage application screen 52, a text box A3 for entering the applicant's name, a text box A4 for entering the applicant's email address, a text box A5 for entering the applicant's employee number, and a text box (or text box for selecting the purpose of use classification). Pull-down menu) A6, text box A7 for entering the purpose of use, text box A8 for entering the start date and time of use, text box A9 for entering the end date and time of use, back button B7 for returning to the application status list screen 51, and text box The application button B8 for executing the usage application with the contents entered in A3 to A9 is displayed.
The business information management system user can apply for the use of the personnel information management system by performing an input operation of selecting the application button B8 after inputting the necessary items in the text boxes A3 to A9.

When the application button B8 is selected to apply for use, the application status list screen 51 is updated as shown in FIG. 10 and displayed on the display unit 35. On the application status list screen 51 of FIG. 10, "application No.", "login account", "purpose of use classification", "date and time of use (start and end)", "status", etc. are displayed for each application for use. Is displayed. Of these, "status" indicates the approval status of the application by the administrator of the personnel information management system.

On the other hand, when the usage application is made on the usage application screen 52, the input contents in the text boxes A3 to A9 are notified to the predetermined manager of the personnel information management system. When the administrator performs a predetermined approval process for approving the usage application in response to this notification, the personnel information management system can be used within the range according to the content of the usage application. In addition, an email indicating that the usage application has been approved is sent to the applicant's email address entered on the usage application screen 52. Here, the administrator may be a dedicated person who manages the operation of the personnel information management system, or the user who is logged in to the personnel information management system can approve the usage application, and the user is the administrator. May be. In addition, the notification of the usage application to the administrator may be performed on the personnel information management system, or may be performed by another system such as e-mail. The operation screen on the administrator side of the personnel information management system will be described later.

FIG. 11 is a diagram showing an example of the contents of an e-mail sent to the e-mail address of the business information management system user when the usage application is approved by the administrator. In this e-mail, in addition to the notification that the usage application has been approved, the password issued at the time of application for removing the display restriction described later is described.

When the usage application is approved by the administrator, the application status list screen 51 is updated as shown in FIG. In the application status list screen 51 of FIG. 12, the status is updated to "approved" in the line of the approved usage application. The business information management system user displays the personnel information management menu screen for using the functions of the personnel information management system by performing an input operation for selecting the approved usage application line on the application status list screen 51. be able to.

FIG. 13 is a diagram showing a personnel information management menu screen 53 of the personnel information management system. In the personnel information management menu screen 53 of FIG. 13, a menu button B9 for executing various functions of the personnel information management system, a back button B10 for returning to the application status list screen 51, and a logout from the personnel information management system are performed. Logout button B11 is displayed. As the menu button B9, only those related to the functions that can be executed according to the contents of the usage application may be displayed, or the menu buttons B9 related to all the functions may be displayed and executed according to the contents of the usage application. Only the menu button B9 related to the function may be displayed in a selectable state.

On the personnel information management menu screen 53 of FIG. 13, various functions of the personnel information management system such as registration, printing, and inquiry of employee ledger, wage ledger, salary ledger, etc. can be performed by performing an input operation by selecting the menu button B9. Can be executed. With these functions, personnel information such as employees, wage ledgers, and payroll ledgers is displayed as electronic forms. Here, the electronic form is an aspect of an electronic document, in which a plurality of predetermined items and registration information registered in association with the plurality of items are arranged in a predetermined layout. Such as a document.

<Restrictions on the display of electronic forms in the personnel information management system and how to cancel them>
In the personnel information management system of the present embodiment, when the login is made by the second login method, the display of the electronic form can be restricted for each item. The registered information of the item for which the display restriction is applied can be viewed by canceling the display restriction by performing a predetermined release operation for canceling the display restriction. In the following, the display restrictions on the items of the electronic form in the personnel information management system and the method of canceling the restrictions will be described.

FIG. 14 is a diagram showing a form viewing screen 54 on which the electronic form F is displayed.
The form viewing screen 54 of FIG. 14 is a terminal when an input operation for selecting a specific employee is performed after the menu button B9 of the “employee ledger inquiry” is selected on the personnel information management menu screen 53 of FIG. It is a screen displayed on the display unit 35 of the device 3, and the electronic form F related to the employee ledger of the selected employee is displayed. In the electronic form F of the form viewing screen 54, item C of "name", "date of birth", "address", "family", "punishment", "medical history", "individual number" and "card number" ( For each item C0 to C3), the registration information D (registration information D0 to D3) registered in association with the item C is displayed. Further, on the form viewing screen 54, a back button B12 for stopping the display of the electronic form F is displayed.

Here, each item C is assigned to any of a plurality of ranks 0 to 3 related to high confidentiality. Of these, the least confidential rank is rank 0, and the most confidential rank is rank 3. Among the items C of the electronic form F of FIG. 14, the items C0 of "name", "date of birth" and "address" are assigned to rank 0, and the items C1 of "family" and "punishment" are assigned to rank 1. Assigned, item C2 of "medical history" is assigned to rank 2, and item C3 of "individual number" and "card number" is assigned to rank 3.
Further, on the form viewing screen 54, the electronic form F is displayed in such a manner that the rank of each item C can be discriminated. Here, the colors of the display areas of each item C and the corresponding registration information D are different for each rank. The display mode is not limited to this as long as the rank can be determined. For example, the color of the frame (edge) of the display area may be changed for each rank, or characters or figures representing the rank may be displayed. good.

In the electronic form F of FIG. 14, the registration information D0 corresponding to the item C0 of rank 0 is displayed without any display restriction in the initial state. On the other hand, the registration information D1 to D3 corresponding to the items C1 to C3 of rank 1 or higher are subject to display restrictions so that the contents cannot be determined. That is, in the example of FIG. 14, the symbol “***” is displayed instead of the content of the registration information D. This display restriction is performed based on the initial setting table 13d and the display restriction setting table 13e stored in the storage unit 13 of the personnel information management server 1.

FIG. 15 is a diagram showing an example of the contents of the initial setting table 13d and the display restriction setting table 13e.
The initial setting table 13d of FIG. 15A shows the initial setting of the display restriction setting of each item of the electronic form F when the login to the personnel information management system is performed by the second login method. The initial setting table 13d is table data in which an item code, a form code, an item name, and a rank are set for each item C of the electronic form F.
The display restriction setting table 13e of FIG. 15B shows each item of the electronic form F for the dedicated address (here, “user01”) used for logging in to the personnel information management system by the second login method. Represents the current display limit setting of C. The display restriction setting table 13e is table data in which the setting contents related to the item C similar to the initial setting table 13d are stored for each account used for login. The "rank" in the display restriction setting table 13e can be changed according to a release operation described later.

For example, when the dedicated account "user01" is logged in by the second login method and the form viewing screen 54 of FIG. 14 is displayed first, the display restriction setting table 13e is set to the contents of the initial setting table 13d. The electronic form F is displayed after being initialized (the contents of the initial setting table 13d are copied) and the display is restricted based on the initialized display restriction setting table 13e (FIG. 14).

In the electronic form F of the form viewing screen 54 of FIG. 14, the display restriction can be released by performing a predetermined release operation different for each rank for the registration information corresponding to the items C1 to C3 of rank 1 or higher. The release operation required to release the display restriction of the item C of each rank is set in the release classification table 13f stored in the storage unit 13 of the personnel information management server 1.

FIG. 16 is a diagram showing an example of the contents of the release classification table 13f.
In the release category table 13f, a release category indicating the content of the release operation necessary for releasing the display restriction is set corresponding to the rank of the item C of the electronic form F. Specifically, the cancellation category corresponding to item C1 of rank 1 is "1: employee number", and the cancellation category corresponding to item C2 of rank 2 is "2: password issued at the time of application", and the rank. The cancellation category corresponding to item C3 of item 3 is "3: One-time password". That is, in order to release the display restriction for the item C1 of rank 1, it is necessary to perform a release operation for inputting the employee number entered by the user at the time of application for use, and in order to release the display restriction for the item C2 of rank 2. , It is necessary to enter the password issued at the time of application issued at the time of application for use, and in order to cancel the display restriction for item C3 of rank 3, the release operation to enter the most recently issued one-time password is required. As described above, the release operation required for releasing the display restriction is set so that the lower the rank, the easier it is for the user to know. That is, the lower the rank, the easier it is to satisfy the conditions for releasing the display restriction.

FIG. 17 is a diagram illustrating a release operation for item C1 of rank 1.
On the form viewing screen 54, for example, an input for designating the registration information D1 by selecting the display area of the registration information D1 corresponding to the item C1 of the rank 1 "family" or the "family" whose display is restricted. When the operation (that is, the input operation for requesting the release of the display restriction) is performed, a predetermined display for inputting the release operation is performed according to the release category corresponding to rank 1 in the release category table 13f. Here, since the release category corresponding to rank 1 is "1: employee number", the release operation window 54a for prompting the release operation for inputting the employee number is displayed as shown in FIG. The operation of displaying the release operation window 54a corresponds to a notification prompting the user to input the release operation.

In the release operation window 54a, a text box A10 for inputting an employee number, a back button B13 for canceling the display of the release operation window 54a, and a decision button B14 for confirming the input contents in the text box A10 are displayed. There is.

When the input operation of selecting the enter button B14 is performed while the employee number entered on the usage application screen 52 is entered in the text box A10 of the release operation window 54a, the display restriction of the item C1 of "family" is released. NS. Specifically, first, as shown in FIG. 18, the rank of the item name “family” in the display restriction setting table 13e is changed from rank 1 to rank 0. Then, the display of the electronic form F on the form viewing screen 54 is updated based on the changed display restriction setting table 13e. That is, as shown in FIG. 19, the contents of the registration information D can be browsed in the item C of the "family", and the color of the display area of the item C of the "family" and the registration information D corresponds to the rank 0. It is changed to the color to be.

In this way, in response to the input operation for designating the registration information D for which the display is restricted, the release operation window that prompts the user to input the predetermined release operation associated with the item C related to the registration information D. When the display of 54a is made and the input operation performed in response to the display matches a predetermined release operation, it is determined that the release condition for releasing the display restriction is satisfied. Then, when it is determined that the cancellation condition is satisfied, the display restriction setting in the display restriction setting table 13e is changed, and the display of the electronic form F is updated based on the changed display restriction setting. The display restriction for the specified item C is released.

At this stage, the display restriction of registration information D is not lifted for item C of "punishment" which was set to rank 1 as well as "family" in the initial setting, but after that, the registration information of the "punishment" is not lifted. When the input operation for specifying D is performed, the display restriction is released without displaying the release operation window 54a. This is because the release operation for releasing the display restriction of rank 1 has already been performed for the item C of "family". In this case, the display related to the omission of the input of the release operation may also be performed. As described above, it is possible to prevent the registration information of the item not specified by the input operation from being unnecessarily displayed while reducing the time and effort of the user by omitting the release operation.
However, if you want to focus on reducing the user's effort, instead, when the display restriction of the "family" item is lifted, all other items of the same rank (here, here) The display restriction may be automatically lifted for "punishment").

Although FIGS. 17 to 19 have been described with reference to an example of releasing the display restriction of the item C1 of the rank 1, the release of the display restriction for the items C2 and C3 of the rank 2 and the rank 3 is also performed by the same process.

Specifically, when the input operation for specifying the registration information D2 related to the item C2 of rank 2 is performed, the cancellation category corresponding to rank 2 is "2: Password issued at the time of application", so FIG. 20 shows. As shown, the release operation window 54b prompting the input of the password issued at the time of application is displayed. In the text box A11 of the cancellation operation window 54b, an input operation is performed to select the enter button B14 with the password issued at the time of application described in the e-mail (FIG. 11) sent at the time of approving the usage application entered. (That is, when a predetermined release operation is performed), it is determined that the release condition is satisfied, and the display restriction is released.

Further, when the input operation for designating the registration information D3 related to the item C3 of rank 3 is performed, the cancellation category corresponding to rank 3 is "3: one-time password", so that it is shown in FIG. , The release operation window 54c prompting the input of the one-time password is displayed. In the text box A12 of the release operation window 54c, when an input operation for selecting the enter button B14 is performed while the most recently issued one-time password is input (that is, when a predetermined release operation is performed), It is determined that the release condition is satisfied, and the display restriction is released. The method of issuing the one-time password is not particularly limited, but for example, the one-time password automatically generated on the personnel information management system is generated in response to the input operation for specifying the registration information D3 related to the item C3 of rank 3. It can be sent by e-mail. FIG. 22 shows an example of the contents of the e-mail.
The one-time password may be issued by an e-mail sent by the administrator approving the issuance in response to the one-time password issuance application.

<Screen display on the administrator side of the personnel information management system>
Next, the screen display on the administrator side of the personnel information management system will be described.
FIG. 23 is a diagram showing a login screen 55 for the administrator of the personnel information management system to log in to the personnel information management system by the first login method. On the login screen 55, a text box A13 for entering the ID or e-mail address of the personnel account 1a used for login, a text box A14 for entering the password, and a login button B15 are displayed. When an ID or email address is entered in the text box A13, a password is entered in the text box A14, and an input operation for selecting the login button B15 is performed in this state, the entered authentication information is transmitted to the personnel information management server 1. Then, it is collated with the authentication information stored in the account DB 13b. If the entered authentication information matches the authentication information of any of the registered personnel accounts 1a (when it is determined that the authentication information is appropriate), the CPU 11 of the personnel information management server 1 determines the relevant authentication information. The login process to the business information management system is performed by the personnel account 1a, and the login session is started.

FIG. 24 is a diagram showing a personnel information management menu screen 56 when the personnel information management system is logged in by the first login method. In the personnel information management menu screen 56, the menu button B9 similar to the personnel information management menu screen 53 in FIG. 13 and the application status list screen 57 (FIG. 25) relating to the application for use of the personnel information management system from the business information management system user. A usage application display button B16 for displaying the above and a logout button B17 for logging out from the personnel information management system are displayed. The usage application display button B16 also has a function of notifying the user that a usage application for the personnel information management system has been made, and is displayed only when a usage application for the personnel information management system is made. Alternatively, the usage application display button B16 may be always displayed and highlighted when a usage application for the personnel information management system is made.

FIG. 25 is a diagram showing an application status list screen 57. On the application status list screen 57, "application No.", "login account", "purpose of use classification", "date and time of use (start and end)", "status", etc. are displayed for each usage application currently applied. Will be done. Of these, "status" indicates the approval status of the application by the administrator of the personnel information management system. When the input operation for selecting the line to be approved or rejected from each of these usage applications is performed, the approval screen 58 (FIG. 26) for approving or rejecting the individual usage application is displayed. .. Further, on the application status list screen 57, a button B18 for returning to the personnel information management menu screen 56 and a logout button B19 for logging out from the personnel information management system are displayed. On the application status list screen 57, all the usage applications made up to now may be displayed in a list, and those whose usage date and time (end) have passed and those for which approval or rejection has been dismissed may be displayed in a list. You may make it come off. These can be set appropriately by the administrator.

FIG. 26 is a diagram showing an approval screen 58. On the approval screen 58, the input contents on the usage application screen 52 of FIG. 9, the approval button B20 for approving the usage application, the rejection button B21 for rejecting the usage application, and the application status list screen 57 are returned. The back button B22 for the purpose is displayed. Here, when the input operation for selecting the approval button B20 is performed, the process of approving the usage application is performed, and the e-mail of FIG. 11 is sent to the business information management system user who applied. Further, when the input operation for selecting the reject button B21 is performed, the usage application is not approved, and the status item on the application status list screen 51 of the display unit 35 of the business information management system user is updated to the display of "rejected". NS.

<Processing control procedure in the personnel information management system>
Next, the control procedure of the basic system processing including the electronic form display processing in the personnel information management system will be described.
FIG. 27 is a flowchart showing a control procedure by the CPU 11 for basic system processing.
This system basic process is executed when the person logs in to the personnel information management system by the second login method via the business information management system.

When the basic system processing is started, the CPU 11 causes the display unit 35 of the terminal device 3 to display the application status list screen 51 in the state shown in FIG. 8 as the initial screen (step S101), and responds to the input operation for the application button B5. The usage application screen 52 of FIG. 9 is displayed, and the usage application of the personnel information management system is accepted (step S102).

The CPU 11 determines whether or not the usage application received in step S102 has been approved by the administrator (step S103). If it is determined that the usage application has been rejected (“NO” in step S103), the CPU 11 returns the process to step S101.

When it is determined that the usage application has been approved (“YES” in step S103), the CPU 11 updates the application status list screen as shown in FIG. 12, and performs an input operation for selecting the approved usage application line. Correspondingly, the personnel information management menu screen 53 of FIG. 13 is displayed on the display unit 35 (step S104).

The CPU 11 determines whether or not any of the menu buttons B9 is selected on the personnel information management menu screen 53 (step S105), and if it is determined that the menu button B9 is not selected (step S105, "" NO "), the process of step S105 is executed again. When the menu button B9 is selected and it is determined that the display request for the electronic form F has been made (“YES” in step S105), the CPU 11 executes the electronic form display process described later (step S106).

When the electronic form display process is completed, the CPU 11 determines whether or not the logout operation has been performed (step S107), and if it is determined that the logout operation has not been performed (“NO” in step S107), performs the process. Returning to step S105, if it is determined that the logout operation has been performed (“YES” in step S107), the basic system processing is terminated. The process of terminating the system basic process based on the determination result of the logout operation may be performed at any other timing during the execution of the system basic process.

FIG. 28 is a flowchart showing a control procedure of the electronic form display process by the CPU 11.
When the electronic form display process is called, the CPU 11 initializes the contents of the display restriction setting table 13e corresponding to the currently logged-in dedicated account (“user01”) to the contents of the initial setting table 13d (step S201). ..

The CPU 11 applies a display restriction according to the display restriction setting table 13e to display the form viewing screen 54 on the display unit 35 (step S202: display step).

The CPU 11 determines whether or not an input operation (input operation for selecting the back button B12) for ending the display of the form viewing screen 54 has been performed (step S203), and when it is determined that the input operation has not been performed. (“NO” in step S203) determines whether or not an input operation for designating the registration information D whose display is restricted has been performed (step S204). If it is determined that the input operation has not been performed (“NO” in step S204), the CPU 11 returns the process to step S203.

When it is determined that the input operation for specifying the registration information D for which the display restriction is made has been performed (“YES” in step S204), the CPU 11 of the registration information D which is the target of the request for releasing the display restriction It is determined whether or not there is another item C having the same rank as the item C and the display restriction has already been released (step S205).

If it is determined that there is no item C of the same rank for which the display restriction has already been released (“NO” in step S205), the CPU 11 refers to the release classification table 13f and prompts a release operation according to the rank. One of the release operation windows 54a, 54b, and 54c is displayed, and the input of the release operation is accepted (step S206).

The CPU 11 determines whether or not the input release operation satisfies the release condition (step S207: determination step). That is, the CPU 11 determines that the release condition is satisfied when the item C subject to the display restriction release request is rank 1 and the input employee code matches the employee code of the business information management system user. If the item C of the above target is rank 2, it is determined that the cancellation condition is satisfied when the entered password issued at the time of application matches the password issued at the time of application described in the e-mail at the time of application approval. When the target item C is rank 3, it is determined that the cancellation condition is satisfied when the entered one-time password matches the previously issued one-time password. If it is determined that the input release operation does not satisfy the release condition (“NO” in step S207), the CPU 11 returns the process to step S203.

When it is determined that the input release operation satisfies the release condition (“YES” in step S207), or in step S205, it is determined that there is another item C of the same rank whose display restriction has already been released. If (“YES” in step S205), the CPU 11 changes the rank in the display restriction setting table 13e (step S208: setting change step). That is, the CPU 11 changes the rank of the item C, which is the target of the display restriction release request, to the rank 0 in which the display restriction is not applied in the display restriction setting table 13e.

When the process of step S208 is completed, the CPU 11 shifts the process to step S202, and based on the updated display restriction setting table 13e, the item C subject to the display restriction release request and the corresponding registration information. The display of the electronic form F is updated so that the display restriction of D is released.

If it is determined in step S203 that an input operation for ending the display of the form viewing screen 54 has been performed (“YES” in step S203), the CPU 11 ends the electronic form display process and sets the process to the system basic process. return.

<Modification example 1>
Next, a modification 1 of the above embodiment will be described.
In this modification, in order to release the display restriction, prior approval by a predetermined administrator is required according to the rank of item C, which is the target of the release request, instead of the above-mentioned release operation. Is different from the above embodiment. That is, when an input operation for designating the registration information D for which the display restriction is applied is performed, whether or not the administrator has approved the item C according to the rank of the item C for which the display restriction is released is performed. If it is determined and approved, it is determined that the cancellation condition is satisfied, and the display restriction of the registration information D corresponding to the item C is released.
The application method for obtaining approval for lifting the display restriction and the approval method for the application are not particularly limited, but for example, the use application and approval of the personnel information management system using the use application screen 52 of FIG. A similar method can be used. Here, the administrator who can approve the release of the display restrictions of ranks 1 to 3 can be appropriately set according to the confidentiality of ranks 1 to 3. For example, it is desirable to set an administrator who has a higher level of approval authority as the rank is higher.
In this modification, the input of the release operation based on the release classification table 13f described in the above embodiment can be omitted, but the input of the release operation may also be obtained.

<Modification 2>
Next, a modification 2 of the above embodiment will be described.
In this modification, when the release operation input in the release operation windows 54a, 54b, 54c is different from the predetermined release operation, the rank of the item C that is the target of the release request is changed at that time. It differs from the above embodiment in that it is changed to a rank higher than the rank (for example, a rank one rank higher).

Here, the case where the release operation is different from the predetermined release operation is, for example, the case where the input employee code is different from the employee code of the input person in the case of the rank 1 release category in the above embodiment. Yes, for the rank 2 cancellation category, the entered password issued at the time of application is different from the one described in the e-mail at the time of application approval, and for the rank 3 cancellation category, the entered one-time password. The password is different from the issued one-time password.

As described above, when an inappropriate release operation different from the specified one is performed, the rank corresponding to the item C in the display restriction setting table 13e is changed to a higher rank. Further, the release operation windows 54a, 54b, and 54c are closed after displaying an error indicating that the release operation is different from the specified one. After that, when an input operation for designating the registration information D whose display is restricted for the same item C is performed, the release operation windows 54a, 54b, 54c prompting the input of the release operation according to the changed rank are displayed. In order to be displayed and the display restriction is released, a release operation according to the changed rank is required.
The rank may be changed when an inappropriate release operation is performed a predetermined number of times in succession. Further, the target for changing the rank is not limited to the item C for which the request for releasing the display restriction is made, and for example, all the items C may be changed to a higher rank. In addition, if an inappropriate release operation is performed for item C of the highest rank (here, rank 3) in which the release condition is set, the rank is changed to a higher rank (for example, rank 4). In addition to changing to, the display restriction may not be lifted for the relevant item thereafter.

<Modification example 3>
Next, a modification 3 of the above embodiment will be described.
This modification is different from the above embodiment in that the rank of each item C is adjusted according to the reliability of the user.

In this modification, when the business information management system user logs in to the personnel information management system by the second login method and applies for the use of the personnel information management system, the reliability of the business information management system user is determined by the approver. Is evaluated. The specific method of this evaluation is not particularly limited, but for example, a method in which the administrator selects one of a plurality of predetermined reliability ranks indicating high reliability can be used. Then, based on the information (reliability information) related to the evaluation result of the reliability, the rank of each item C in the display restriction setting table 13e is adjusted so that the lower the reliability, the higher the rank. The rank adjustment range is the same for each item C (for example, the rank of all items C is adjusted to be one rank higher).
The rank adjustment in the display restriction setting table 13e may be performed after the process of step S201 for initializing the contents of the display restriction setting table when the electronic form display process (FIG. 28) is started. It may be performed at any other timing after the reliability evaluation is performed.
If the rank of item C of the highest rank (here, rank 3) for which the cancellation condition is set is changed to a higher rank (for example, rank 4), the item will be displayed thereafter. The restriction may not be lifted.

As described above, the personnel information management server 1 in the information processing system 100 of the present embodiment includes the CPU 11, and the CPU 11 includes a plurality of predetermined items C and registration information D corresponding to each of the plurality of items C. The electronic form F as an electronic document is displayed by applying display restrictions to the registration information D according to the display restriction settings for each of the plurality of items C (display control means), and any registration to which the display restrictions are applied. When a predetermined input operation for requesting the display of the information D is performed, it is determined whether or not the condition for releasing the display restriction set in advance associated with the item C of the registration information D is satisfied (determination). Means), when it is determined that the release condition for the item C is satisfied, the display restriction setting is changed so that the display restriction for the item C is released (setting change means), and the display restriction setting is performed. Is changed, the display of the electronic form F is updated based on the changed display restriction setting (display control means).
As a result, the security of the registered information can be ensured by restricting the display of the item C related to the highly confidential registration information D among the plurality of items C in the electronic form F. Further, since the display restriction can be released only for the specific item C that the user wants to view according to the satisfaction of the cancellation condition, the item C necessary for the user while ensuring the security of the registration information D It is possible to flexibly control the display of the registration information D of.

Further, each of the plurality of items C is assigned to any of the plurality of ranks, and the cancellation conditions corresponding to each of the plurality of items C are different for each rank to which the item C is assigned. As a result, the security of the registration information D can be ensured more appropriately by setting an appropriate cancellation condition according to the confidentiality of the rank. Further, the management load of the release condition can be reduced as compared with the case where the release condition is different for each individual item C.

Further, the CPU 11 displays the electronic form F in a manner in which the rank of the item C can be determined (display control means). As a result, it is possible to make it easier for the user to recognize the item C having the same release condition of the item C.

Further, when a predetermined input operation for requesting the display of any of the registration information Ds whose display is restricted is performed, the CPU 11 is associated with the item C of the registration information D and is predetermined to be released. A notification for prompting the user to input an operation is performed (notification control means), and when the input operation performed in response to the notification matches a predetermined release operation, the release condition for the item C is satisfied. It is determined that the information has been applied (determination means). As a result, the display restriction of the registration information D of the item C can be canceled only when the user can perform the predetermined cancellation operation related to the cancellation condition of the item C, so that the security of the registration information D can be further improved. It can be surely secured.

Further, when it is determined that the cancellation condition for one item C is satisfied, the CPU 11 displays the registration information D of another item C assigned to the same rank as the one item C. When a predetermined input operation is performed, the display restriction setting is changed so that the display restriction for the other item C is released regardless of the determination result by the CPU 11 as the determination means (setting). Means of change). As a result, the operation load of the user can be reduced within the range in which the security of the registration information D is ensured.

Further, when a predetermined input operation requesting the display of the registration information D of the other item C is performed, the CPU 11 causes a notification related to omission of the input of the release operation (notification control means). As a result, the user can be made aware that the display restriction is released without inputting the release operation.

Further, in the personnel information management server 1 according to the modification 2, the plurality of ranks are defined by associating the release conditions with which the lower the rank is, the easier it is to satisfy, and the CPU 11 is performed in response to the notification. When the input operation is different from the predetermined release operation, the rank to which the item C is assigned is changed to a rank higher than the rank (rank adjusting means). As a result, when the input of the release operation fails, the access restriction to the registration information D can be further strengthened. Therefore, when there is a possibility that a user who is not aware of the release operation is attempting to release the display restriction improperly, the security of the registration information D can be reliably ensured.

Further, the CPU 11 in the third modification acquires reliability information related to the reliability of the user (reliability information acquisition means), and each of the plurality of items C is assigned based on the acquired reliability information. The rank is adjusted so that the lower the reliability, the higher the rank (rank adjustment means). As a result, it is possible to make settings that make it difficult to remove the display restriction of the highly confidential registration information D for a user with low reliability, so that the security of the registration information D can be ensured more appropriately.

Further, in the display method of the electronic form F of the above embodiment, the electronic form F as an electronic document including the predetermined plurality of items C and the registration information D corresponding to each of the plurality of items C is displayed on the plurality of items C. When a display step for displaying the registration information D with the display restriction set according to the display restriction setting for each of the above, or a predetermined input operation for requesting the display of any of the registration information D for which the display restriction is applied is performed. In the determination step for determining whether or not the predetermined display restriction release condition associated with the item C of the registration information D is satisfied, and in the determination step, it is determined that the release condition for the item C is satisfied. When the display restriction setting is changed, the display restriction setting step for changing the display restriction setting so that the display restriction for the item C is released is included, and the display step includes the display restriction setting when the display restriction setting is changed in the display restriction setting step. The display of the electronic form F is updated based on the changed display restriction setting. According to such a method, the display restriction can be released only for the specific item C that the user wants to view according to the satisfaction of the cancellation condition. Therefore, while ensuring the security of the registration information D, the user can be notified. It is possible to flexibly control the display of the registration information D for the necessary item C.

Further, in the program of the above embodiment, the CPU 11 (computer) of the personnel information management server 1 is subjected to an electronic form F as an electronic document including a plurality of predetermined items C and registration information D corresponding to each of the plurality of items C. A display control means for displaying the registration information D with display restrictions according to the display restriction settings for each of the plurality of items C, and a predetermined display requesting the display of any of the registration information Ds with display restrictions. When an input operation is performed, the item C is released by the determination means and the determination means for determining whether or not the predetermined display restriction release condition associated with the item C of the registration information D is satisfied. When it is determined that the condition is satisfied, it functions as a setting changing means for changing the display restriction setting so that the display restriction for item C is released, and the display control means is restricted by the setting changing means. When the setting is changed, the display of the electronic form F is updated based on the changed display restriction setting. According to such a program, the display restriction can be released only for the specific item C that the user wants to view according to the satisfaction of the cancellation condition. Therefore, while ensuring the security of the registration information D, the user can be notified. It is possible to flexibly control the display of the registration information D for the necessary item C.

In the above description, an example in which the HDD and SSD of the storage unit 13 are used as the computer-readable medium of the program according to the present invention has been disclosed, but the present invention is not limited to this example. As another computer-readable medium, a portable recording medium such as a flash memory or a CD-ROM can be applied. A carrier wave is also applied to the present invention as a medium for providing data of a program according to the present invention via a communication line.

The description in the above embodiment is an example of the information processing device, the electronic form display method, and the program according to the present invention, and is not limited thereto.

For example, in the above-described embodiment and each modification, the personnel information management server 1 that provides the personnel information management system as an information processing device is given as an example, but the present invention is not limited to this, and any system that displays the electronic form F is provided. The present invention can be applied to an information processing device.

Further, in the above-described embodiment and each modification, the electronic document has been described as an example of an electronic document, but instead, the electronic document is subject to display restrictions such as contracts, minutes, and data materials. It can be any type of document that includes the item and the registration information corresponding to that item.

Further, in the above-described embodiment and each modification, the operation of inputting the employee number, the password issued at the time of application, and the one-time password has been described as an example of the release operation, but the release operation is not limited to this, and the release operation is performed in advance. Any operation can be performed as long as the content is registered and can be collated with the actual input operation. For example, the input of a registered keyword registered in advance by the user as an answer to a predetermined question (for example, "What is the parent's name?"), The input of a personal identification number, the drawing of a figure, or the like may be performed.

Further, in the above-described embodiment and each modification, the display restriction can be released by performing one release operation corresponding to the rank of the item for which the display restriction is released. It may be that all the release operations corresponding to the rank of the item for which the restriction is released and the rank higher than the limit are required. For example, in order to remove the display restriction of the item of rank 3, it is necessary to enter the employee code corresponding to rank 1, the display restriction release password corresponding to rank 2, and the one-time password corresponding to rank 3. May be.

Further, in the above embodiment and each modification, as a predetermined input operation for requesting the display of the registration information D whose display is restricted, an input for selecting the display area of the item C or the registration information D corresponding to the item C. The operation has been described as an example, but the present invention is not limited to this, and for example, an operation button corresponding to each item C for starting the process related to the release of the display restriction is displayed inside or outside the electronic form F. The input operation for selecting the operation button may be the above-mentioned predetermined input operation.

Further, in the above-described embodiment and each modification, the cancellation conditions are different for each rank of the item C in the electronic form F, but the present invention is not limited to this, and the cancellation conditions are separately defined for each item C. You may.

Further, although the explanation has been given using an example in which the rank of item C is set to 4 levels from rank 0 to rank 3, the number of ranks is not limited to this, and even if a rank of 3 levels or less or 5 levels or more is provided. good.

Further, in the above-described embodiment and each modification, the display operation of the registration information related to the item has been described as an example as a restricted operation, but the present invention is not limited to this, and the registration information such as the operation of editing the registration information is targeted. Any operation that has been set may be subject to restriction.

Further, it goes without saying that the detailed configuration and detailed operation of each component of the information processing system 100 in the above embodiment can be appropriately changed without departing from the spirit of the present invention.

Although the embodiments of the present invention have been described, the scope of the present invention is not limited to the above-described embodiments, but includes the scope of the invention described in the claims and the equivalent scope thereof.
The inventions described in the claims originally attached to the application of this application are added below. The claims in the appendix are as specified in the claims originally attached to the application for this application.
[Additional Notes]
<Claim 1>
A display control means for displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items by restricting the display of the registered information according to the display restriction setting for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. A discriminating means for determining whether or not the information has been used, and
When the determination means determines that the release condition for the item is satisfied, the setting change means for changing the display restriction setting so that the display restriction for the item is released.
With
The information processing device is characterized in that, when the display restriction setting is changed by the setting changing means, the display of the electronic document is updated based on the changed display restriction setting.
<Claim 2>
Each of the plurality of items is assigned to one of the plurality of ranks.
The information processing apparatus according to claim 1, wherein the cancellation condition corresponding to each of the plurality of items differs depending on the rank to which the item is assigned.
<Claim 3>
The information processing device according to claim 2, wherein the display control means displays the electronic document in a manner in which the rank of the item can be determined.
<Claim 4>
When a predetermined input operation for requesting the display of any of the registration information for which the display restriction is applied is performed, the user is input with a predetermined release operation associated with the item of the registration information. Equipped with a notification control means that prompts notification
The discriminating means is characterized in that when the input operation performed in response to the notification matches the predetermined release operation, it is determined that the release condition for the item is satisfied. The information processing apparatus according to any one of claims 1 to 3.
<Claim 5>
When a predetermined input operation for requesting the display of any of the registration information for which the display restriction is applied is performed, the user is input with a predetermined release operation associated with the item of the registration information. Equipped with a notification control means that prompts notification
When the input operation performed in response to the notification matches the predetermined release operation, the determination means determines that the release condition for the item is satisfied.
The setting changing means displays the registration information of another item assigned to the same rank as the one item when it is determined that the cancellation condition for the one item is satisfied. When the required predetermined input operation is performed, the display restriction setting is changed so that the display restriction on the other items is released regardless of the determination result by the determination means. The information processing apparatus according to claim 2 or 3.
<Claim 6>
5. The notification control means is characterized in that, when a predetermined input operation requesting display of registration information of the other item is performed, a notification relating to omission of input of the release operation is performed. The information processing device described.
<Claim 7>
The plurality of ranks are defined in association with the cancellation conditions, which are more easily satisfied as the lower ranks are.
The information processing apparatus changes the rank to which the item is assigned to a rank higher than the rank when the input operation performed in response to the notification is different from the predetermined release operation. The information processing apparatus according to claim 5 or 6, further comprising adjusting means.
<Claim 8>
The plurality of ranks are defined in association with the cancellation conditions, which are more easily satisfied as the lower ranks are.
The information processing device
A reliability information acquisition means for acquiring reliability information related to a user's reliability, and
A rank adjusting means for adjusting the rank to which each of the plurality of items is assigned based on the reliability information acquired by the reliability information acquisition means so that the lower the reliability, the higher the rank. ,
The information processing apparatus according to claim 2, 3, 5 or 6, wherein the information processing apparatus is provided.
<Claim 9>
A display step of displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items with display restrictions applied to the registration information according to the display restriction settings for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. Discrimination step to determine whether or not
A setting change step of changing the display restriction setting so that the display restriction for the item is released when it is determined in the determination step that the release condition for the item is satisfied.
Including
In the display step, when the display restriction setting is changed in the setting change step, the display of the electronic document is updated based on the changed display restriction setting.
<Claim 10>
The computer of the information processing device,
A display control means for displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items by restricting the display of the registered information according to the display restriction setting for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. Discrimination means for determining whether or not the information has been added,
A setting changing means for changing the display restriction setting so that the display restriction for the item is released when the determination means determines that the release condition for the item is satisfied.
To function as
The display control means is a program characterized in that when the display restriction setting is changed by the setting changing means, the display of the electronic document is updated based on the changed display restriction setting.

1 Personnel information management server (information processing device)
2 Business information management server 3 Terminal device 4 Communication network 11 CPU (display control means, discrimination means, setting change means, notification control means, rank adjustment means, reliability information acquisition means)
13 Storage 13a Program 13b Account DB
13c Personnel information DB
13d Initial setting table 13e Display restriction setting table 13f Cancellation classification table 14 Operation unit 15 Display unit 16 Communication unit 41 Login screen 42 Business information management menu screen 51 Application status list screen 52 Usage application screen 53 Personnel information management menu screen 54 Form viewing screen 54a Cancellation operation window 55 Login screen 56 Personnel information management menu screen 57 Application status list screen 58 Approval screen 100 Information processing system C Item D Registration information F Electronic form (electronic document)

The present invention relates to an information management system, a display method and a program.

An object of the present invention is to provide an information management system, a display method, and a program capable of flexibly controlling the display of necessary registration information to a user while ensuring a security level corresponding to the registration information. ..

In order to solve the above problems, the information management system according to the present invention is an information management system capable of displaying an electronic form having a plurality of display items, and includes a display control means for displaying a list of the display items and the above. When any display item is selected from the list, an authentication control means that executes password authentication to allow the selected display item to display the item contents when displaying the electronic form, and an authentication control means. The list includes display items having different security levels due to differences in the password acquisition method applied to the password authentication, and the display control means displays the list. Is characterized in that the display item is displayed in a display mode corresponding to the security level assigned to the display item .
Further, the display method according to the present invention is a display method executed by an information management system capable of displaying an electronic form having a plurality of display items, and includes a display control step for displaying a list of the display items and the list. When any of the display items is selected, the authentication control step of executing password authentication for permitting the display of the item contents in the selected display item when displaying the electronic form, and the authentication control step. The list includes display items having different security levels due to differences in the password acquisition method applied to the password authentication, and the display control step is when displaying the list. Is characterized in that the display item is displayed in a display mode corresponding to the security level assigned to the display item.
Further, the program according to the present invention is a display control means for displaying a list of the display items on a computer of an information management system capable of displaying an electronic form having a plurality of display items, or displaying any one of the lists. When an item is selected, it functions as an authentication control means for executing password authentication for permitting the selected display item to display the item contents when displaying the electronic form. Display items having different security levels are included due to the difference in the password acquisition method applied to the password authentication, and when the display control means displays the list, the display items are displayed. It is characterized in that it is displayed in a display mode corresponding to the security level assigned to the item.

Claims (10)

A display control means for displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items by restricting the display of the registered information according to the display restriction setting for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. A discriminating means for determining whether or not the information has been used, and
When the determination means determines that the release condition for the item is satisfied, the setting change means for changing the display restriction setting so that the display restriction for the item is released.
With
The information processing device is characterized in that, when the display restriction setting is changed by the setting changing means, the display of the electronic document is updated based on the changed display restriction setting. Each of the plurality of items is assigned to one of the plurality of ranks.
The information processing apparatus according to claim 1, wherein the cancellation condition corresponding to each of the plurality of items differs depending on the rank to which the item is assigned. The information processing device according to claim 2, wherein the display control means displays the electronic document in a manner in which the rank of the item can be determined. When a predetermined input operation for requesting the display of any of the registration information for which the display restriction is applied is performed, the user is input with a predetermined release operation associated with the item of the registration information. Equipped with a notification control means that prompts notification
The discriminating means is characterized in that when the input operation performed in response to the notification matches the predetermined release operation, it is determined that the release condition for the item is satisfied. The information processing apparatus according to any one of claims 1 to 3. When a predetermined input operation for requesting the display of any of the registration information for which the display restriction is applied is performed, the user is input with a predetermined release operation associated with the item of the registration information. Equipped with a notification control means that prompts notification
When the input operation performed in response to the notification matches the predetermined release operation, the determination means determines that the release condition for the item is satisfied.
The setting changing means displays the registration information of another item assigned to the same rank as the one item when it is determined that the cancellation condition for the one item is satisfied. When the required predetermined input operation is performed, the display restriction setting is changed so that the display restriction on the other items is released regardless of the determination result by the determination means. The information processing apparatus according to claim 2 or 3. 5. The notification control means is characterized in that, when a predetermined input operation requesting display of registration information of the other item is performed, a notification relating to omission of input of the release operation is performed. The information processing device described. The plurality of ranks are defined in association with the cancellation conditions, which are more easily satisfied as the lower ranks are.
The information processing apparatus changes the rank to which the item is assigned to a rank higher than the rank when the input operation performed in response to the notification is different from the predetermined release operation. The information processing apparatus according to claim 5 or 6, further comprising adjusting means. The plurality of ranks are defined in association with the cancellation conditions, which are more easily satisfied as the lower ranks are.
The information processing device
A reliability information acquisition means for acquiring reliability information related to a user's reliability, and
A rank adjusting means for adjusting the rank to which each of the plurality of items is assigned based on the reliability information acquired by the reliability information acquisition means so that the lower the reliability, the higher the rank. ,
The information processing apparatus according to claim 2, 3, 5 or 6, wherein the information processing apparatus is provided. A display step of displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items with display restrictions applied to the registration information according to the display restriction settings for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. Discrimination step to determine whether or not
A setting change step of changing the display restriction setting so that the display restriction for the item is released when it is determined in the determination step that the release condition for the item is satisfied.
Including
In the display step, when the display restriction setting is changed in the setting change step, the display of the electronic document is updated based on the changed display restriction setting. The computer of the information processing device,
A display control means for displaying an electronic document containing a plurality of predetermined items and registration information corresponding to each of the plurality of items by restricting the display of the registered information according to the display restriction setting for each of the plurality of items.
When a predetermined input operation for requesting the display of any of the registered information for which the display restriction is applied is performed, the condition for canceling the display restriction set in advance associated with the item of the registration information is satisfied. Discrimination means for determining whether or not the information has been added,
A setting changing means for changing the display restriction setting so that the display restriction for the item is released when the determination means determines that the release condition for the item is satisfied.
To function as
The display control means is a program characterized in that when the display restriction setting is changed by the setting changing means, the display of the electronic document is updated based on the changed display restriction setting.

Images