JP2022118199A - Check support apparatus, check support method, and check support program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To efficiently perform security checks.

SOLUTION: A check support apparatus 100 refers to a check master DB 121, and identifies a check item excluding check items completed by a person in charge other than a designated person in charge among check items corresponding to the designated person in charge. The check support apparatus 100 generates check sheet information 124 including the identified check items, and transmits and displays the same to a terminal apparatus.

SELECTED DRAWING: Figure 2

COPYRIGHT: (C)2022,JPO&INPIT

Description

The present invention relates to a check support device and the like.

In recent years, in order to provide various services and products safely and continuously, the occurrence of failures caused by natural disasters, cyber-attacks, the involvement of malicious third parties, etc. has been reduced as much as possible, and recovery from failures has occurred. is required to be performed promptly.

In order to meet such demands, government agencies and the like have created unified standards for information security measures, and companies and the like are required to provide various services and products that meet these unified standards. For this reason, in companies, before providing services and products, the person in charge in the company checks the uniform standards for information security measures one by one and confirms whether the uniform standards are met. there is

JP-A-11-007473 JP 2016-126398 A Japanese Patent Application Laid-Open No. 2012-238038

However, the conventional technology described above has a problem that the security check cannot be performed efficiently.

The unified standards created by government agencies, etc., include multiple check items, but since the content of the check items is abstract, there are actually overlapping check items, and checks cannot be carried out efficiently. do not have.

In one aspect, an object of the present invention is to provide a check support device, a check support method, and a check support program capable of efficiently performing a security check.

In the first proposal, the check support device has a storage unit, a generation unit, and a display control unit. The storage unit stores check items related to the unified standards of security measures, the person in charge of the check items, the item number of the check items, the common item number indicating the item number of the check items common to the check items, and the completion of the check. It has information associated with the item number that has been added. When receiving the designation of one of the multiple persons in charge, the generation unit assigns the designated person in charge based on the item number, the common item number, and the item number for which the check has been completed. Of the corresponding check items, a check sheet is generated that includes check items excluding check items that have been checked by a person in charge other than the designated person in charge. The display control unit transmits the check sheet to the terminal device and displays it.

Security checks can be performed efficiently.

FIG. 1 is a diagram showing an example of a system according to this embodiment. FIG. 2 is a functional block diagram showing the configuration of the check support device according to this embodiment. FIG. 3 is a diagram showing an example of the data structure of a check master DB. FIG. 4 is a diagram showing an example of the data structure of a check status management table. FIG. 5 is a diagram showing an example of the data structure of a check result management table. FIG. 6 is a diagram showing an example of the data structure of check sheet information. FIG. 7 is a diagram showing an example of a display screen of check sheet information. FIG. 8 is a flow chart showing the processing procedure of the check support device according to the present embodiment. FIG. 9 is a diagram showing an example of a hardware configuration of a computer that implements functions similar to those of the check support device.

Exemplary embodiments of the check support device, the check support method, and the check support program disclosed in the present application will be described in detail below with reference to the drawings. In addition, this invention is not limited by this Example.

FIG. 1 is a diagram showing an example of a system according to this embodiment. As shown in FIG. 1, this system has terminal devices 10 a and 10 b and a check support device 100 . For example, check support device 100 and terminal devices 10 a and 10 b are interconnected via network 50 . Although the terminal devices 10 a and 10 b are shown here as an example, other terminal devices may be connected to the network 50 .

The terminal devices 10a and 10b are, for example, terminal devices used when a person in charge checks a service or product (hereinafter referred to as an object to be checked) in order to meet uniform standards created by government agencies or the like. The terminal devices 10a and 10b are mobile terminal devices such as smart phones and tablet PCs that can be carried and used by the person in charge. In the following description, the terminal devices 10a and 10b are collectively referred to as the "terminal device 10" unless otherwise specified.

The terminal device 10 accesses the check support device 100 and transmits to the check support device 100 the “input information” input by the person in charge. For example, the input information includes person-in-charge identification information, keywords, item numbers of unified standards, and the like. The person-in-charge identification information included in the input information is information that uniquely identifies the person-in-charge who performs the check using the terminal device 10 . Keywords indicate keywords of large items, medium items, and small items of a check master DB (Data Base) described later. Note that the keywords may be the names of the major items, the medium items, and the minor items themselves. The item number of the uniform standard is the item number that specifies the check contents included in the uniform standard created by the government agency.

In the first embodiment, as an example, it is assumed that the input information includes any one of the person-in-charge identification information, the keyword, and the item number of the unified criteria.

The check support device 100 is a device that, upon receiving access from the terminal device 10 and receiving input information, generates check sheet information of check items corresponding to the input information. When generating check sheet information, the check support device 100 excludes check items that have already been checked. The check support device 100 transmits the generated check sheet information to the terminal device 10 for display.

The person in charge checks the object to be checked while referring to the check sheet information displayed on the terminal device 10 and inputs the check result to the terminal device 10 . The terminal device 10 transmits the check result information input by the person in charge to the check support device 100 .

As described above, the check support device 100 according to the present embodiment causes the terminal device 10 to display the check sheet information including the check items corresponding to the input information and excluding the check items for which the check has been completed. support the check of the person. Therefore, security checks can be efficiently performed.

Next, the configuration of the check support device 100 according to this embodiment will be described. FIG. 2 is a functional block diagram showing the configuration of the check support device according to this embodiment. As shown in FIG. 2, this check support device 100 has a communication section 110, a storage section 120, and a control section .

The communication unit 110 is a processing unit that transmits and receives data to and from the terminal device 10 via the network 50 . The communication unit 110 corresponds to a communication device. A control unit 130 , which will be described later, exchanges data with the terminal device 10 via the communication unit 110 .

The storage unit 120 has a check master DB 121 , a check status management table 122 , a check result management table 123 and check sheet information 124 . Storage unit 120 corresponds to a storage device such as a semiconductor memory device such as RAM (Random Access Memory), ROM (Read Only Memory), and flash memory.

The check master DB 121 is a DB that holds information on check items related to unified standards for security measures by government agencies. FIG. 3 is a diagram showing an example of the data structure of a check master DB. As shown in FIG. 3, this check master DB 121 associates major items, medium items, minor items, item numbers, check items, person-in-charge identification information, common item numbers, and unified standard item numbers.

Major items, medium items, and minor items classify groups to which check items belong. A major item includes a plurality of medium items, and a medium item includes a plurality of minor items. Also, although illustration is omitted, the minor items may be further classified into a plurality of detailed items.

The item number is a number that uniquely identifies the check item. The check item is information indicating the contents of the check item. The check items stored in the check master DB 121 are check items obtained by redefining abstract check items included in unified standards created by government agencies or the like in more specific terms. The person-in-charge identification information is information that uniquely identifies the person in charge who checks the corresponding check item.

The common item number indicates the item number of the check item with the corresponding item number and the same or equivalent check item. For example, in the first line of FIG. 3, the item number "6.1.1.1a" and the common item number "8.2.2.1a" are associated, so the item number "6.1" .1.1a” and the check item with the item number (common item number) “8.2.2.1a” are the same or equivalent. Therefore, if the check item of item number (common item number) “8.2.2.1a” has been checked, check the check item of item number “6.1.1.1a”. It means you don't have to.

The uniform standard item number is a number that uniquely identifies a uniform standard check item (abstract check item) created by a government agency. For example, in the first line of FIG. 3, the check item (abstract check item) with item number “9” of the unified criteria is the check item with item number “6.1.1.1a” and the common item number Indicates that the check item of "8.2.2.1a" is supported.

Returning to the description of FIG. The check status management table 122 is a table that holds whether or not each check item has been checked. FIG. 4 is a diagram showing an example of the data structure of a check status management table. As shown in FIG. 4, this check status management table 122 associates item numbers/common item numbers with check completion flags.

The item number/common item number is the item number or common item number that uniquely identifies the check item. The check completion flag is a flag indicating whether or not the check has been completed. If the check completion flag is "on", it indicates that the check item corresponding to the item number or common item number has been checked. If the check completion flag is "off", it indicates that the check item corresponding to the item number or common item number has not been checked.

The check result management table 123 is a table that holds information on check results of check items. FIG. 5 is a diagram showing an example of the data structure of a check result management table. As shown in FIG. 5, this check result management table 123 associates item numbers, check results, and person-in-charge identification information. The item number is a number that uniquely identifies the check item. The check result is the check result for the check item with the corresponding item number. The person-in-charge identification information is information that uniquely identifies the person-in-charge who checked the check item.

The check sheet information 124 is check sheet information including check items corresponding to the input information. FIG. 6 is a diagram showing an example of the data structure of check sheet information. As shown in FIG. 6, the check sheet information 124 is associated with item numbers and check items.

The control unit 130 has a reception unit 131 , a generation unit 132 , a display control unit 133 and an update unit 134 . The control unit 130 corresponds to an integrated device such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array). Also, the control unit 130 corresponds to, for example, an electronic circuit such as a CPU or an MPU (Micro Processing Unit).

The reception unit 131 is a processing unit that receives input information from the terminal device 10 . Accepting unit 131 outputs the accepted input information to generating unit 132 .

The generation unit 132 is a processing unit that generates the check sheet information 124 based on the input information. The generation unit 132 executes a process of identifying an item number corresponding to input information, a process of deleting the checked item number from the identified item number, and a process of generating check sheet information.

A process for identifying an item number corresponding to input information will be described. In the following description, the item number corresponding to the input information will be referred to as "corresponding item number" as appropriate. The generation unit 132 determines which of the information included in the input information is the person-in-charge identification information, the keyword, and the item number of the unified criteria.

When the input information includes the person-in-charge identification information, the generation unit 132 compares the person-in-charge identification information in the input information with the person-in-charge identification information in the check master DB 121 . The generation unit 132 identifies a row record having the same person-in-charge identification information as the person-in-charge identification information of the input information in the check master DB 121, and identifies the item number of the identified row record as the corresponding item number.

If the input information includes a keyword, the generation unit 132 compares the keyword of the input information with the keywords of the major, middle, and minor items of the check master DB 121 . The generation unit 132 identifies the major item, the medium item, or the minor item corresponding to the keyword of the input information in the check master DB 121, and generates the item of the line record corresponding to the identified major item, the medium item, or the minor item. Identifies the number as the corresponding item number.

When the input information includes a unified criterion item number, the generating unit 132 compares the unified criterion item number of the input information with the unified criterion item number of the check master DB 121 . In the check master DB 121, the generation unit 132 identifies a row record having the same item number of the unified criterion as that of the input information, and identifies the item number of the identified row record as the corresponding item number.

By the way, when identifying the corresponding item number, the generation unit 132 determines whether or not there is a common item number corresponding to the corresponding item number. If there is a common item number corresponding to the corresponding item number, the generation unit 132 associates the corresponding item number with the corresponding common item number to identify them.

For example, in FIG. 3, if the corresponding item number is "6.1.1.1a", the common item number "8.2.2.1a" exists. In this case, the generation unit 132 identifies the corresponding item number “6.1.1.1a” and the common item number “8.2.2.1a”.

On the other hand, in FIG. 3, when the corresponding item number is "6.1.1.2a", there is no common item number. In this case, the generator 132 identifies only the corresponding item number.

In the following description, a corresponding item number having a corresponding common item number will be referred to as a "first corresponding item number". A corresponding item number that does not have a corresponding common item number is referred to as a "second corresponding item number".

By executing the above process, the generating unit 132 repeatedly executes the process of identifying the corresponding item number (first corresponding item number, second corresponding item number) corresponding to the input information, and generates the identified plural corresponding items. The number information is registered in the group information (not shown).

Next, the process of deleting the checked item number from the corresponding item numbers (the first corresponding item number and the second corresponding item number) will be described. The generating unit 132 compares the first corresponding item number with the check status management table 122, and generates a check completion flag corresponding to the first corresponding item number (item number) or the common item number corresponding to this first corresponding item number. is "on", the corresponding first corresponding item number is deleted from the set information.

The generation unit 132 compares the second correspondence item number with the check status management table 122, and if the check completion flag corresponding to the second correspondence item number (item number) is "on", the corresponding Delete the second corresponding item number to be set from the set information.

By executing the above process, the generation unit 132 deletes the checked correspondence item number from the plurality of correspondence item numbers (the first correspondence item number and the second correspondence item number) included in the set information.

Next, processing for generating check sheet information will be described. The generation unit 132 acquires from the check master DB 121 the check item information corresponding to the corresponding item numbers (first corresponding item number, second corresponding item number) remaining in the set information. The generation unit 132 generates check sheet information 124 based on the acquired information on the check items, and stores the check sheet information 124 in the storage unit 120 .

The display control unit 133 is a processing unit that transmits various types of screen information to the terminal device 10 and displays various types of screen information. For example, when receiving access from the terminal device 10 , the display control unit 133 causes the terminal device 10 to display a login screen. After the login of the person in charge of the terminal device 10 is approved, the display control unit 133 causes the terminal device 10 to display a screen for inputting input information.

Further, when the check sheet information 124 is generated by the generation unit 132 and stored in the storage unit 120, the display control unit 133 transmits the display screen of the check sheet information 124 to the terminal device 10 to display it.

FIG. 7 is a diagram showing an example of a display screen of check sheet information. For example, the display control section 133 generates the display screen 20 of the check sheet information 124 . The display screen 20 includes item numbers, check items, and answers registered in the check sheet information 124 .

The person in charge refers to the display screen 20 displayed on the terminal device 10 to check the items to be checked, and operates the terminal device 10 to input an answer. For example, when the person in charge determines that the check item is satisfied, he or she selects the answer "yes" and puts a check. If the person in charge determines that the check item is not satisfied, he/she selects "No" as an answer and puts a check. The terminal device 10 generates check result information based on the reply input by the person in charge, and transmits the check result information to the check support device 100 . In addition, the terminal device 10 sets the person-in-charge identification information of the person in charge who performed the check to the check result information.

Returning to the description of FIG. The updating unit 134 is a processing unit that updates the check status management table 122 and the check result management table 123 when receiving check result information from the terminal device 10 .

For example, the update unit 134 refers to the check result information, and sets the check completion flag of the item number for which "yes" is selected among the item numbers in the check status management table 122 to "on".

The updating unit 134 refers to the check result information, associates the item number, the check result, and the person-in-charge identification information, and registers them in the check result management table 123 .

Next, an example of the processing procedure of the check support device 100 according to this embodiment will be described. FIG. 8 is a flow chart showing the processing procedure of the check support device according to the present embodiment. As shown in FIG. 8, the reception unit 131 of the check support device 100 receives input information from the terminal device 10 (step S101).

The generation unit 132 of the check support device 100 identifies the corresponding item number corresponding to the input information (step S102). The generation unit 132 selects an unselected corresponding item number (step S103). The generation unit 132 determines whether or not there is a common item number corresponding to the corresponding item number (step S104).

If there is a common item number corresponding to the corresponding item number (step S104, Yes), the generation unit 132 associates the corresponding item number with the common item number and registers them in the collective information (step S105). Move to S107.

When the common item number corresponding to the corresponding item number does not exist (step S104, No), the generation unit 132 registers the corresponding item number in the set information (step S106), and proceeds to step S107.

The generation unit 132 deletes from the set information the corresponding item number that is the same as the item number/common item number for which the check completion flag is turned on (step S108). The generation unit 132 acquires the check item corresponding to the corresponding item number remaining in the set information from the check master DB 121 (step S109), and generates check sheet information 124 (step S110).

The display control unit 133 of the check support device 100 transmits the check sheet information to the terminal device 10 for display (step S111). The update unit 134 of the check support device 100 receives the check result information (step S112). The update unit 134 updates the check status management table 122 and the check result management table 123 based on the check result information (step S113).

Next, the effects of the check support device 100 according to this embodiment will be described. When receiving the designation of the person in charge, the check support device 100 refers to the check master DB 121 and confirms that the person in charge other than the designated person completed the check among the check items corresponding to the designated person in charge. Check sheet information 124 including check items excluding the checked items is generated and transmitted to the terminal device 10 for display. This saves the person in charge from checking the check items already checked by another person in charge. Also, the check items registered in the check master DB 121 correspond to the item numbers of the unified standards prepared by government agencies, and the check items are defined with specific contents. This allows personnel to efficiently perform security checks.

When the check result information is received from the terminal device 10, the check support device 100 performs a process of updating the item number of the check item for which the check has been completed from OFF to ON. This can prevent check items that have already been checked from being checked again.

When receiving designation of keywords corresponding to major items, medium items, and small items, the check support device 100 identifies major items, medium items, and small items corresponding to the accepted keywords, and identifies items corresponding to the identified items. Check sheet information including check items excluding check items for which checks have been completed is generated. As a result, among the check items included in the groups of major items, medium items, and minor items, only check items that have not been checked can be efficiently checked.

When the check support device 100 receives the designation of the item number of the unified standard, it generates check sheet information including check items excluding check items for which checks have been completed, among the check items corresponding to the received item number. . As a result, it is possible to efficiently check only the check items that have not been checked among the check items corresponding to the items of the unified criteria.

By the way, in the above-described embodiment, as an example, the input information has been described as including any one of information among the identification information of the person in charge, the keyword, and the item number of the unified standard. is not limited to For example, the input information may include person-in-charge identification information, keywords, and item numbers of unified standards. In this case, the check support device 100 corresponds to the first group including each corresponding item number corresponding to the person in charge identification information, the second group including each corresponding item number corresponding to the keyword, and the item number of the unified standard. A third group containing each corresponding item number is identified. The check support device 100 identifies corresponding item numbers that exist in any of the first, second, and third groups, and generates check sheet information 124 of check items corresponding to the identified corresponding item numbers. may

Next, an example of the hardware configuration of a computer that realizes the same functions as those of the check support device 100 shown in the above embodiment will be described. FIG. 9 is a diagram showing an example of a hardware configuration of a computer that implements functions similar to those of the check support device.

As shown in FIG. 9, a computer 200 has a CPU 201 that executes various arithmetic processes, an input device 202 that receives data input from a user, and a display 203 . The computer 200 also has a reading device 204 that reads programs and the like from a storage medium, and an interface device 205 that exchanges data with other devices via a wired or wireless network. The computer 200 also has a RAM 206 that temporarily stores various information, and a hard disk device 207 . Each device 201 - 207 is then connected to a bus 208 .

The hard disk device 207 has a reception program 207a, a generation program 207b, a display control program 207c, and an update program 207d. The CPU 201 reads each program 207 a to 207 d and develops them in the RAM 206 .

The reception program 207a functions as a reception process 206a. Generation program 207b functions as generation process 206b. The display control program 207c functions as a display control process 206c. The update program 207d functions as an update process 206d.

The processing of the reception process 206 a corresponds to the processing of the reception unit 131 . The processing of the generation process 206 b corresponds to the processing of the generation unit 132 . Processing of the display control process 207 c corresponds to processing of the display control unit 133 . The processing of the update process 206d corresponds to the processing of the updating unit 134. FIG.

Note that the programs 207a to 207d do not necessarily have to be stored in the hard disk device 207 from the beginning. For example, each program is stored in a “portable physical medium” such as a flexible disk (FD), CD-ROM, DVD, magneto-optical disk, IC card, etc. inserted into the computer 200 . Then, the computer 200 may read and execute each of the programs 207a-207d.

10a, 10b terminal device 100 check support device 110 communication unit 120 storage unit 121 check master DB
122 check status management table 123 check result management table 124 check sheet information 130 control unit 131 reception unit 132 generation unit 133 display control unit 134 update unit

Claims (6)

Check items related to unified standards for security measures, a person in charge of the check items, the item number of the check items, a common item number indicating the item number of the check items common to the check items, and the check completed a storage unit having information associated with item numbers;
When receiving the designation of one of a plurality of persons in charge, respond to the designated person in charge based on the item number, the common item number, and the item number for which the check has been completed. a generator for generating a check sheet containing check items excluding check items that have been checked by a person in charge other than the designated person, among the check items to be checked;
and a display control unit that transmits the check sheet to a terminal device and displays it. 2. The apparatus further comprises an updating unit that, when receiving a check result corresponding to the check item from the terminal device, updates the information of the checked item number based on the check result. The check support device described in . The storage unit further associates the item number with a group to which the check item corresponding to the item number belongs. A check sheet containing check items belonging to a specified group excluding check items that have been checked is generated based on the number, the common item number, and the checked item number. 3. The check support device according to claim 1 or 2, further executing a process for checking. The storage unit further associates the item number with the item number of the unified criteria, and the generation unit accepts designation of any item number from among the plurality of item numbers of the unified criteria, Based on the item number, the common item number, and the item number for which the check has been completed, the check items for which the check has been completed are excluded from among the check items corresponding to the designated item number of the unified standard. 4. The check support device according to claim 1, further executing a process of generating a check sheet including check items. A computer-implemented check assistance method comprising:
Check items related to unified standards for security measures, a person in charge of the check items, the item number of the check items, a common item number indicating the item number of the check items common to the check items, and the check completed referring to the storage unit having information associated with the item number,
When receiving the designation of one of a plurality of persons in charge, respond to the designated person in charge based on the item number, the common item number, and the item number for which the check has been completed. Generate a check sheet containing check items excluding check items that have been completed by a person in charge other than the designated person,
A check support method characterized by executing a process of transmitting the check sheet to a terminal device and displaying the check sheet. to the computer,
Check items related to unified standards for security measures, a person in charge of the check items, the item number of the check items, a common item number indicating the item number of the check items common to the check items, and the check completed referring to the storage unit having information associated with the item number,
When receiving the designation of one of a plurality of persons in charge, respond to the designated person in charge based on the item number, the common item number, and the item number for which the check has been completed. Generate a check sheet containing check items excluding check items that have been completed by a person in charge other than the designated person,
A check support program characterized by executing a process of transmitting and displaying the check sheet to a terminal device.

Images