JP2021196748A - Administrative server, administrative system, administrative method and administrative program - Google Patents

Abstract

To provide an administrative server having high security.SOLUTION: An administrative server 1 of one embodiment according to the present disclosure includes an authentication unit 2 that authenticates whether or not authentication information is matched with user information of a user of a first office, a position retrieval unit 3 that determines whether or not a portable terminal possessed by a person registered in the user information exists within a first range with respect to the first office, and a control unit 4 that controls a third private network connection device that connects between a first private network connection device arranged in the first office and a second private network connection device arranged in a second office, when the authentication information is matched with the user information and the portable terminal exists within the first range with respect to the first office.SELECTED DRAWING: Figure 1

Description

The present disclosure relates to management servers, management systems, management methods and management programs.

In recent years, work style reforms have been strongly demanded, and satellite offices and shared offices have been built not only in regional revitalization but also in the city center, and opportunities to work outside the office are increasing. Therefore, for example, in Patent Document 1, a remote access control device is connected to a personal computer provided in a satellite office, and personal authentication is performed via the remote access control device. If the personal authentication is successful, the satellite office The technology for remote access from a personal computer to an office personal computer is disclosed.

Japanese Unexamined Patent Publication No. 2011-70325

The remote access control method of Patent Document 1 has a problem of low security because it can remotely access an office personal computer by impersonating the person himself / herself.

One of the objectives to be achieved by the embodiments disclosed herein is to provide a management server, management system, management method and management program that contributes to the solution of the problem. It should be noted that this object is only one of the purposes that the plurality of embodiments disclosed herein seek to achieve. Other objectives or issues and novel features will be apparent from the description or accompanying drawings herein.

The management server of the first aspect is
An authentication unit that authenticates whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office matches the preset user information, and the authentication unit.
A position search unit that determines whether or not the mobile terminal possessed by the person registered in the user information exists within the first range preset for the first office.
A control unit that controls a third private network connection device that connects the first private network connection device arranged in the first office and the second private network connection device arranged in the second office. When,
Equipped with
The control unit is the first when the authentication information and the user information match and the mobile terminal is within the first range preset for the first office. The third private network connection device is controlled so that the private network connection device and the second private network connection device are connected to each other.

The management system of the second aspect is
An authentication device, a computer, and a first private network connection device connected to the computer, which are arranged in the first office and acquire the authentication information of the user of the first office.
A second ply-based network connection device located in the second office,
A third private network connection device that connects the first private network connection device and the second private network connection device, and
With the management server mentioned above,
To prepare for.

The management method of the third aspect is
The process of authenticating whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match, and the process of authenticating.
The step of determining whether or not the mobile terminal possessed by the person registered in the user information exists within the range preset for the first office, and
When the authentication information and the user information match and the mobile terminal exists within a range preset for the first office, the first office arranged in the first office. A process of controlling the third private network connection device so that the private network connection device and the second private network connection device located in the second office are connected.
To prepare for.

The management program of the fourth aspect is
The process of authenticating whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match, and the process of authenticating.
A process of determining whether or not a mobile terminal owned by a person registered in the user information exists within a preset range for the first office, and a process of determining whether or not the mobile terminal is within a preset range.
When the authentication information and the user information match and the mobile terminal exists within a range preset for the first office, the first office arranged in the first office. A process of controlling the third private network connection device so that the private network connection device and the second private network connection device located in the second office are connected.
Let the computer run.

According to the above-described embodiment, it is possible to realize a highly secure management server, management system, management method and management program.

It is a block diagram which shows the structure of the management server of Embodiment 1. FIG. It is a flowchart which shows the flow of the management method of Embodiment 1. FIG. It is a block diagram which shows the structure of the management system of Embodiment 2. FIG. 5 is a flowchart showing a flow when a user tries to use a computer in a shared office in the management system of the second embodiment. It is a block diagram which shows the structure of the management system of Embodiment 3. It is a block diagram which shows the structure of the management server of Embodiment 3. It is a flowchart which shows the flow of a process when a user selects a movement route to a visited office via a mobile terminal. Positional relationship between the user's current location and the office of the company to which the user belongs, the first shared office, the second shared office, the user's home, the first visited office and the second visited office. It is a figure for demonstrating such as. It is a block diagram which shows the structure of the management system of Embodiment 4. It is a figure which shows an example of the hardware configuration included in a management system.

Hereinafter, the best mode for carrying out the present disclosure will be described with reference to the accompanying drawings. However, the present disclosure is not limited to the following embodiments. Further, in order to clarify the explanation, the following description and drawings are appropriately simplified.

<Embodiment 1>
First, the configuration of the management server of the present embodiment will be described. FIG. 1 is a block diagram showing a configuration of a management server according to the present embodiment. As shown in FIG. 1, the management server 1 of the present embodiment includes an authentication unit 2, a position search unit 3, and a control unit 4.

The authentication unit 2 authenticates whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match. do. The location search unit 3 determines whether or not the mobile terminal possessed by the person (registrant) registered in the user information exists within the first range preset for the first office. ..

The control unit 4 connects a third private network connection device that connects the first private network connection device arranged in the first office and the second private network connection device arranged in the second office. Control.

Next, the flow of the management method of this embodiment will be described. FIG. 2 is a flowchart showing the flow of the management method of the present embodiment. First, it is authenticated whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match (S1). ).

Next, it is determined whether or not the mobile terminal possessed by the person registered in the user information exists within the first range preset for the first office (S2). Then, when the authentication information and the user information match and the mobile terminal exists within the first range preset for the first office (YES in S1 and S2), the first private The third private network connection device is controlled so that the network connection device and the second private network connection device are connected (S3).

On the other hand, when the authentication information and the user information do not match, or the mobile terminal does not exist within the first range preset for the first office (NO in S1, NO in S2), the first private. The third private network connection device is controlled so that the network connection device and the second private network connection device are not connected (S4).

As described above, in the management server 1 and the management method of the present embodiment, the authentication information and the user information match, and the mobile terminal exists within the first range preset for the first office. When doing so, the first private network connection device and the second private network connection device are connected. That is, the management server 1 and the management method of the present embodiment connect the first private network connection device and the second private network connection device by the double authentication method. Therefore, security is high.

<Embodiment 2>
First, the configuration of the management system of the present embodiment will be described. FIG. 3 is a block diagram showing the configuration of the management system of the present embodiment. In the management system 11 of the present embodiment, in addition to the management server 1 of the first embodiment, the authentication device 12, the computer 13, the first private network connection device 14, the second private network connection device 15, and the third A private network connection device 16 is provided.

User information is registered in the management server 1. User information includes the user's ID (for example, address, name, telephone number, email address, etc.), the ID of a mobile terminal such as a smartphone owned by the user, and information indicating the company to which the user belongs (for example,). (Telephone number, e-mail address, etc.), information indicating the second private network connection device 15 installed in the office of the company concerned, and authentication information for performing biometric authentication are included, and the user registers the user information in advance. do. Such a management server 1 is provided in the cloud computing 21, for example, as shown in FIG.

The authentication device 12 is arranged in the individual booth 221 of the shared office (first office) 22 and is connected to the management server 1 via a network. The authentication device 12 is, for example, a face authentication device installed on the door of the individual booth 221 of the share office 22, and captures a face image and transmits the face image or the feature points of the face to the management server 1. The authentication device 12 may be a face recognition application installed on the computer 13. The authentication device 12 does not have to be face authentication as long as it is biometric authentication.

The computer 13 is arranged, for example, in the individual booth 221 of the shared office 22. The first private network connection device 14 is, for example, a VPN (Virtual Private Network) router and is located in the shared office 22. A computer 13 is connected to the first private network connection device 14. The second private network connection device 15 is, for example, a VPN router, and is arranged in the office (second office) 23 of the company to which the user belongs.

The third private network connection device 16 is, for example, a VPN router, which is provided in the cloud computing 21. The third private network connection device 16 connects the first private network connection device 14 and the second private network connection device 15 by VPN based on the instruction of the management server 1.

However, the first private network connection device 14, the second private network connection device 15, and the third private network connection device 16 are not limited to the VDC router, and correspond to the SDN (Software Defined Networking) controller and SDN. It may be configured with a switch, and in short, it is sufficient if a private network can be configured.

Next, in the management system 11 of the present embodiment, the flow when the user A tries to use the computer 13 of the shared office 22 will be described. FIG. 4 is a flowchart showing a flow when a user tries to use a computer in a shared office in the management system of the present embodiment.

First, after the user A enters the shared office 22 (S11), the user A performs personal authentication with the authentication device 12 (S12). Specifically, the authentication device 12 captures, for example, a face image and transmits the face image or the feature points of the face to the management server 1. The management server 1 collates the received face image or facial feature point with the user information registered in advance to perform authentication.

When the received face image or feature point of the face does not match the user information registered in advance, that is, when the authentication fails (NO in S12), the management server 1 is connected to the first private network connection device 14. The third private network connection device 16 is controlled so that the second private network connection device 15 is not connected (S13). At this time, the management server 1 may connect the computer 13 to a public line such as the Internet, for example.

On the other hand, when the received face image or facial feature point matches the pre-registered user information, that is, when the authentication is successful (YES in S12), the management server 1 has the user information registrant. It is determined whether or not the possessed mobile terminal 24 exists within the first range preset for the share office 22 (S14).

Specifically, the management server 1 communicates with the application of the share office service pre-installed in the mobile terminal 24 based on the ID of the mobile terminal 24 possessed by the registrant of the user information, and the mobile terminal 24 Get location information. Then, the management server 1 collates whether or not the acquired location information of the mobile terminal 24 matches the location information in the share office 22.

When the acquired location information of the mobile terminal 24 matches the location information in the shared office 22 (YES in S14), the management server 1 connects the first private network connection device 14 and the second private network connection device 15. The third private network connection device 16 is controlled so as to connect (S15). As a result, the computer 13 of the shared office 22 can be connected to the second private network connection device 15 arranged in the office 23 of the company to which the user A belongs.

On the other hand, when the acquired location information of the mobile terminal 24 does not match the location information in the shared office 22 (NO in S14), the management server 1 has the first private network connection device 14 and the second private network connection device 15. The third private network connection device 16 is controlled so that the third private network connection device 16 is not connected (S13).

At this time, since the registrant of the user information that matches the authentication information does not exist in the share office 22, the management server 1 determines that the biometric authentication from the share office 22 may be spoofed, and the user A determines that there is a possibility of spoofing. It is advisable to inform the company to which the registrant of the spoofed user information belongs and the mobile terminal owned by the registrant that there was an unauthorized connection.

As a result, the evidence that the malicious user A tried to connect to the second private network connection device 15 located in the office 23 of the company to which the registrant of the user information belongs, such as misplacement of the mobile terminal, is used. It can be recognized by the registrant of personal information.

As described above, in the management server 1, the management system 11, and the management method of the present embodiment, the authentication information and the user information match, and the mobile terminal 24 is set in advance for the share office 22. If it is within range, it connects the first private network connection device 14 and the second private network connection device 15. That is, the management server 1, the management system 11, and the management method of the present embodiment also connect the first private network connection device 14 and the second private network connection device 15 by the double authentication method. Therefore, security is high.

<Embodiment 3>
FIG. 5 is a block diagram showing the configuration of the management system of the present embodiment. As shown in FIG. 5, the management system 31 of the present embodiment has a configuration substantially the same as that of the management system 11 of the second embodiment. It is configured so that the management server 32 can search for and reserve a shared office 22 or the like that can be used according to the location of the office (third office) or the like.

FIG. 6 is a block diagram showing a configuration of the management server according to the present embodiment. As shown in FIG. 6, the management server 32 includes a route search unit 33, a parking lot search unit 34, a transmission / reception unit 35, and a reservation processing unit 36. At this time, the management server 32 uses the location information of the plurality of shared offices 22, the usage information indicating the availability and reservation status of the individual booths 221 of the shared office 22, and the availability and reservation status of the rental car 37 provided in the shared office 22. Usage information indicating usage information, location information and arrival time information of the visited office entered by the user via the mobile terminal 24, public traffic information indicating train routes and schedules, delay status, etc., map information, parking lots (for example, It is possible to acquire location information (coin parking), usage information indicating availability and reservation status, and road congestion information.

The route search unit 33 includes location information of a plurality of shared offices 22, usage information of individual booths 221 of the shared office 22, usage information of the rental car 37 provided in the shared office 22, location information of the visited office, and arrival. A plurality of shared offices 22 for arriving at the visited office by the arrival time based on time information, public traffic information, map information, parking lot location information, usage information, and road congestion information. Search for each departure time and travel route.

At this time, if the management server 32 can acquire the location information of the user's home, the route search unit 33 will visit the destination based on the location information of the user's home, public transportation information, and map information. You should also search for a return route from the office.

The parking lot search unit 34 is within the second range preset for the visited office based on the location information and usage information of the parking lot, the location information of the visited office, and the arrival time information. And, search for a parking lot that can be parked at the time of arrival at the visited office.

The transmission / reception unit 35 transmits information indicating the departure time and movement route for each of the plurality of shared offices 22 to the mobile terminal 24 possessed by the user. Further, the transmission / reception unit 35 receives information indicating the selected movement route via the mobile terminal 24.

The reservation processing unit 36 reserves an individual booth 221 of the share office 22 at the departure point of the travel route based on the information indicating the travel route selected via the mobile terminal 24 possessed by the user. At this time, if the selected travel route uses the rental car 37, it is advisable to make a reservation for the rental car 37 and the parking lot at the same time.

Next, the flow of processing when the user selects a movement route to the visited office via the mobile terminal 24 will be described. FIG. 7 is a flowchart showing a flow of processing when a user selects a movement route to a visited office via a mobile terminal.

An application for a shared office service for selecting a movement route is installed in the mobile terminal 24 in advance, and the user operates the screen of the application to select the movement route.

Here, FIG. 8 shows the current location of the user, the office of the company to which the user belongs, the first shared office, the second shared office, the user's home, the first visited office, and the second visit. It is a figure for demonstrating the positional relationship with the destination office.

The user is currently a person in the sales department, and when he / she visits the first visited office 41 in the morning, he / she is contacted after that and decides to visit the second visited office 42 in the afternoon. Suppose. Further assume that there are several hours of free time by then.

In the example of FIG. 8, the first shared office 22a is 20 minutes by public transportation, the second shared office 22b is 40 minutes by public transportation, and the office 43 of the company to which the user belongs is public transportation. It is located at a distance of 60 minutes. Further, it is assumed that the first shared office 22a is equipped with a rental car (for example, a connected car) 37 that is always connected to the Internet, and a parking lot 44 exists in the vicinity of the second visited office 42.

First, from the point where the user leaves the first visited office 41, the user inputs the location information and the arrival time information of the second visited office 42 via the screen of the application (S21). Next, the application of the mobile terminal 24 transmits the location information and the arrival time information of the second visited office 42 to the management server 32 (S22).

When the management server 32 receives the location information and the arrival time information of the second visited office 42 via the transmission / reception unit 35, the route search unit 33 of the management server 32 receives the location information of the plurality of shared offices 22 based on the location information of the plurality of shared offices 22. Search for the share office 22 within the third range preset for the user's current location (S23). In the present embodiment, it is assumed that the first shared office 22a and the second shared office 22b exist within a third range preset with respect to the user's current location.

Next, the route search unit 33 of the management server 32 is the first from the user's current location based on the location information of the first shared office 22a and the second shared office 22b, the public transportation information, and the map information. The arrival time to reach the first shared office 22a and the second shared office 22b is calculated (S24).

Next, the route search unit 33 of the management server 32 has usage information of the individual booths 221 of the first share office 22a and the second share office 22b, and usage information of the rental car 37 provided in the first share office 22a. And, based on the location information and arrival time information of the second visited office 42, public traffic information, map information, and road congestion information, the second visited office 42 is reached by the arrival time. The first share office 22a and the second share office 22b are searched for the departure time and the movement route, and the first share office 22a and the second share office 22b are reached from the arrival time to the departure time. It is determined whether or not at least one of the shared offices 22 of the shared office 22a or the second shared office 22b is available (S25). At this time, the route search unit 33 of the management server 32 may also search for a return route from the second visited office 42 to the user's home 45 (see FIG. 8).

Here, when the movement route from the first shared office 22a to the second visited office 42 uses the rental car 37, the parking lot search unit 34 of the management server 32 provides the parking lot location information and usage information. Based on the location information and arrival time information of the second visited office 42, it is within the second range preset for the second visited office 42, and the second visited destination. It is advisable to search for a parking lot that can be parked at the time of arrival at the office 42. Then, the route search unit 33 of the management server 32 may search for a movement route by adding the position information of the searched parking lot 44.

When at least one of the shared offices 22 of the first shared office 22a or the second shared office 22b is available (YES in S25), the transmission / reception unit 35 of the management server 32 uses the departure time information of the available shared office 22. , The travel route information from the shared office 22 to the second visited office 42, and the arrival time information to the second visited office 42 are transmitted to the mobile terminal 24 (S26). At this time, when the user's return route to the home 45 is also searched, the transmission / reception unit 35 of the management server 32 may also transmit the return route information to the user's home 45 to the mobile terminal 24.

Upon receiving the departure time information of the shared office 22 that can be used by the mobile terminal 24, the travel route information from the shared office 22 to the second visited office 42, and the arrival time information of the second visited office 42, As shown in FIG. 8, the mobile terminal 24 displays a movement route from each available shared office 22 to the second visited office 42 (S27).

Here, in FIG. 8, the moving route from the first shared office 22a to the second visited office 42 is shown by a broken line. At this time, when the return route information to the user's home 45 is also received, the mobile terminal 24 may also display the return route to the user's home 45. Further, the mobile terminal 24 may display the movement route and also display the departure time of the shared office 22 and the arrival time of the second visited office 42.

When the user selects a movement route via the mobile terminal 24, the mobile terminal 24 transmits the movement route information selected by the user to the management server 32 (S28). When the transmission / reception unit 35 of the management server 32 receives the movement route information, the reservation processing unit 36 of the management server 32 reserves the individual booth 221 of the share office 22 at the departure point of the movement route selected by the user (S29).

For example, when the user selects a movement route that uses the first shared office 22a, the reservation processing unit 36 of the management server 32 makes a reservation for the first shared office 22a. At this time, when the movement route from the first shared office 22a to the second visited office 42 uses the rental car 37, the reservation processing unit 36 may also make a reservation for the rental car 37 and the searched parking lot 44.

The transmission / reception unit 35 of the management server 32 transmits information to the effect that the reservation for the first share office 22a or the like has been completed to the mobile terminal 24 (S30). When the mobile terminal 24 receives the information that the reservation for the first share office 22a or the like has been completed, the mobile terminal 24 displays that the reservation for the first share office 22a or the like has been completed (S31).

When both the first share office 22a and the second share office 22b are unavailable (NO in S25), the transmission / reception unit 35 of the management server 32 carries information that the available share office 22 does not exist. It is transmitted to the terminal 24 (S32). Upon receiving the information that the available share office 22 does not exist, the mobile terminal 24 displays that the available share office 22 does not exist (S33).

In this way, the management server 32, the management system 31, and the management method can easily search for the shared office 22 that can be used by the user on the go by using the free time to the visited office. Moreover, the user can select an appropriate share office 22 from the available share offices 22 within the third range from the user's current location. That is, the share office 22 that can maximize the free time and the share office 22 that has a simple movement route to the visited office can be appropriately selected by the user.

Further, when the shared office 22 to be used is selected, the convenience of the user can be improved when the reservation of the shared office 22 or the like is automatically made. Further, when the return route from the visited office is also searched and displayed on the mobile terminal 24, the convenience of the user can be further improved.

<Embodiment 4>
FIG. 9 is a block diagram showing the configuration of the management system of the present embodiment. Since the management system 51 of the present embodiment has substantially the same configuration as the management system 31 of the third embodiment, the analysis unit 52 is provided, although overlapping description is omitted.

The analysis unit 52 accumulates location information when the user searches for the shared office 22, location information of the visited office, travel time information from the shared office 22 to the visited office, and the like as big data. Next, find out where the shared office 22 is needed.

For example, a new share on a straight line connecting a group in which a large number of positions where the user searched for the share office 22 gathers and a group in which a large number of input visited offices gather, and near the station. It is good to find out the candidate site of the office 22. By using the candidate site information of the share office 22 determined in this way, it is possible to encourage the business operator of the share office 22 to open an appropriate candidate site.

<Other embodiments>
Although the present disclosure has been described as a hardware configuration in the above-described embodiments 1 to 4, the present disclosure is not limited thereto. The present disclosure can also be realized by causing a CPU (Central Processing Unit) to execute a computer program to process each component.

For example, the management system of the above embodiment can be provided with the following hardware configuration. FIG. 10 is a diagram showing an example of a hardware configuration included in a management system.

The device 61 shown in FIG. 10 includes a processor 63 and a memory 64 together with the interface 62. The management system described in the above embodiment is realized by the processor 63 reading and executing the program stored in the memory 64. That is, this program is a program for making the processor 63 function as the management system of the above embodiment.

The programs described above are stored using various types of non-transitory computer readable medium and can be supplied to a computer (a computer including an information notification device). Non-temporary computer-readable media include various types of tangible storage media. Examples of non-temporary computer-readable media include magnetic recording media (eg, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (eg, magneto-optical disks). Further, this example includes a CD-ROM (Read Only Memory), a CD-R, and a CD-R / W. Further, this example includes semiconductor memories (eg, mask ROM, PROM, EPROM, flash ROM, RAM). The program may also be supplied to the computer by various types of transient computer readable medium. Examples of temporary computer-readable media include electrical, optical, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

The above embodiment is merely an example relating to the application of the technical idea obtained by the inventor of the present invention. That is, the technical idea is not limited to the above-described embodiment, and it goes without saying that various changes can be made.

Some or all of the above embodiments may be described as in the appendix below, but are not limited to the following.
(Appendix 1)
An authentication unit that authenticates whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office matches the preset user information, and the authentication unit.
A position search unit that determines whether or not the mobile terminal possessed by the person registered in the user information exists within the first range preset for the first office.
A control unit that controls a third private network connection device that connects the first private network connection device arranged in the first office and the second private network connection device arranged in the second office. When,
Equipped with
The control unit is the first when the authentication information and the user information match and the mobile terminal is within the first range preset for the first office. A management server that controls the third private network connection device so that the private network connection device and the second private network connection device are connected to each other.

(Appendix 2)
The location information of the mobile terminal, the location information of a plurality of the first offices, the usage information of the first office, the location information of the third office input by the user via the mobile terminal, and the said. Based on the arrival time information to the third office, public traffic information, and map information, the departure time and the departure time for each of the plurality of first offices for reaching the third office by the arrival time. A route search unit that searches for a movement route, and a route search unit
A transmission unit that transmits the search result information of the departure time and the movement route for each of the plurality of first offices for reaching the third office by the arrival time, and the transmission unit.
The management server according to Appendix 1.

(Appendix 3)
The management server according to Appendix 2, further comprising a reservation processing unit for making a reservation for use of the first office, which is the departure point of the movement route, when the user selects any movement route via the mobile terminal. ..

(Appendix 4)
The route search unit adds the usage information of the rental car provided in the first office and the traffic jam information, and the plurality of first offices for arriving at the third office by the arrival time. The management server according to Appendix 2 or 3, which searches for each departure time and travel route.

(Appendix 5)
A second office preset for the third office based on the parking lot location information and usage information, the location information of the third office, and the arrival time information of the third office. It is equipped with a parking lot search unit that searches for a parking lot that is within the range and can be parked at the time of arrival at the third office.
The route search unit searches for a departure time and a movement route for each of the plurality of first offices in order to reach the third office by the arrival time by adding information indicating the parking lot where parking is possible. , The management server described in Appendix 4.

(Appendix 6)
When the user selects any of the travel routes via the mobile terminal, a reservation processing unit for making a reservation for use of the first office, which is the departure point of the travel route, is provided.
The management server according to Appendix 5, wherein the reservation processing unit also makes a reservation for using the rental car and a reservation for using the parking lot when the travel route uses the rental car.

(Appendix 7)
The management server according to any one of Supplementary note 2 to 6, wherein the route search unit searches for a return route from the third office to the home based on the location information of the user's home.

(Appendix 8)
An authentication device, a computer, and a first private network connection device connected to the computer, which are arranged in the first office and acquire the authentication information of the user of the first office.
A second ply-based network connection device located in the second office,
A third private network connection device that connects the first private network connection device and the second private network connection device, and
The management server according to any one of Supplementary Notes 1 to 7 and the management server.
A management system.

(Appendix 9)
The location information of the mobile terminal possessed by the user, the location information of the plurality of the first offices, the location information of the third office visited by the user, and the third from each of the first offices. The management server according to Appendix 8, further comprising an analysis unit that analyzes a new first office candidate site based on the time required to reach the office.

(Appendix 10)
The process of authenticating whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match, and the process of authenticating.
The step of determining whether or not the mobile terminal possessed by the person registered in the user information exists within the range preset for the first office, and
When the authentication information and the user information match and the mobile terminal exists within a range preset for the first office, the first office arranged in the first office. A process of controlling the third private network connection device so that the private network connection device and the second private network connection device located in the second office are connected.
A management method.

(Appendix 11)
The process of authenticating whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match, and the process of authenticating.
A process of determining whether or not a mobile terminal owned by a person registered in the user information exists within a preset range for the first office, and a process of determining whether or not the mobile terminal is within a preset range.
When the authentication information and the user information match and the mobile terminal exists within a range preset for the first office, the first office arranged in the first office. A process of controlling the third private network connection device so that the private network connection device and the second private network connection device located in the second office are connected.
A management program that lets your computer run.

1 Management server 2 Authentication unit 3 Location search unit 4 Control unit 11 Management system 12 Authentication device 13 Computer 14 First private network connection device 15 Second private network connection device 16 Third private network connection device 21 Cloud computing 22 Share office 221 Individual booth 22a First share office 22b Second share office 23 Office of the company to which the user belongs 24 Mobile terminal 31 Management system 32 Management server 33 Route search unit 34 Parking lot search unit 35 Transmission / reception unit 36 Reservation Processing unit 37 Rent-a-car 41 First visited office 42 Second visited office 43 Office of the company to which the user belongs 44 Parking lot 45 Home 51 Management system 52 Analysis unit 61 Device 62 Interface 63 Processor 64 Memory

Claims (10)

An authentication unit that authenticates whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office matches the preset user information, and the authentication unit.
A position search unit that determines whether or not the mobile terminal possessed by the person registered in the user information exists within the first range preset for the first office.
A control unit that controls a third private network connection device that connects the first private network connection device arranged in the first office and the second private network connection device arranged in the second office. When,
Equipped with
The control unit is the first when the authentication information and the user information match and the mobile terminal is within the first range preset for the first office. A management server that controls the third private network connection device so that the private network connection device and the second private network connection device are connected to each other. The location information of the mobile terminal, the location information of a plurality of the first offices, the usage information of the first office, the location information of the third office input by the user via the mobile terminal, and the said. Based on the arrival time information to the third office, public traffic information, and map information, the departure time and the departure time for each of the plurality of first offices for reaching the third office by the arrival time. A route search unit that searches for a movement route, and a route search unit
A transmission unit that transmits the search result information of the departure time and the movement route for each of the plurality of first offices for reaching the third office by the arrival time, and the transmission unit.
The management server according to claim 1. The management according to claim 2, further comprising a reservation processing unit for making a reservation for use of the first office, which is the departure point of the movement route, when the user selects any movement route via the mobile terminal. server. The route search unit adds the usage information of the rental car provided in the first office and the traffic jam information, and the plurality of first offices for arriving at the third office by the arrival time. The management server according to claim 2 or 3, which searches for each departure time and travel route. A second office preset for the third office based on the parking lot location information and usage information, the location information of the third office, and the arrival time information of the third office. It is equipped with a parking lot search unit that searches for a parking lot that is within the range and can be parked at the time of arrival at the third office.
The route search unit searches for a departure time and a movement route for each of the plurality of first offices in order to reach the third office by the arrival time by adding information indicating the parking lot where parking is possible. , The management server according to claim 4. When the user selects any of the travel routes via the mobile terminal, a reservation processing unit for making a reservation for use of the first office, which is the departure point of the travel route, is provided.
The management server according to claim 5, wherein the reservation processing unit also makes a reservation for using the rental car and a reservation for using the parking lot when the travel route uses the rental car. The management server according to any one of claims 2 to 6, wherein the route search unit searches for a return route from the third office to the home based on the location information of the user's home. An authentication device, a computer, and a first private network connection device connected to the computer, which are arranged in the first office and acquire the authentication information of the user of the first office.
A second ply-based network connection device located in the second office,
A third private network connection device that connects the first private network connection device and the second private network connection device, and
The management server according to any one of claims 1 to 7.
A management system. The process of authenticating whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match, and the process of authenticating.
The step of determining whether or not the mobile terminal possessed by the person registered in the user information exists within the range preset for the first office, and
When the authentication information and the user information match and the mobile terminal exists within a range preset for the first office, the first office arranged in the first office. A process of controlling the third private network connection device so that the private network connection device and the second private network connection device located in the second office are connected.
A management method. The process of authenticating whether or not the authentication information of the user of the first office acquired through the authentication device arranged in the first office and the preset user information match, and the process of authenticating.
A process of determining whether or not a mobile terminal owned by a person registered in the user information exists within a preset range for the first office, and a process of determining whether or not the mobile terminal is within a preset range.
When the authentication information and the user information match and the mobile terminal exists within a range preset for the first office, the first office arranged in the first office. A process of controlling the third private network connection device so that the private network connection device and the second private network connection device located in the second office are connected.
A management program that lets your computer run.

Images