JP2023033078A - Information processing device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device and a program capable of specifying used services.

SOLUTION: According to one embodiment of the present invention, an information processing device is provided. The information processing device includes a management unit, a detection unit and a specification unit. The management unit is configured to be able to manage management object services. The detection unit is configured to be able to detect the used services based on information acquirable via a communication network. The specification section specifies non-management-object services from the services detected by the detection unit.

SELECTED DRAWING: Figure 1

COPYRIGHT: (C)2023,JPO&INPIT

Description

The present invention relates to an information processing apparatus and program.

In recent years, many services via networks such as SaaS (Software as a Service) have been provided, and their use is expanding. As a result, managing the use of services has become an important issue even in organizations such as companies. Patent Literature 1 discloses centrally managing login information.

JP-A-2004-62876

By the way, for services such as SaaS, procedures for use can be performed online, and users can easily start using the service. For this reason, there are cases where the administrator of an organization or the like cannot grasp the services used by the people belonging to the organization.

In view of the above circumstances, the present invention provides an information processing apparatus and program capable of identifying a service being used.

According to one aspect of the present invention, an information processing device is provided. This information processing apparatus includes a management section, a detection section, and a specification section. The management unit is configured to be able to manage services to be managed. The detection unit is configured to be able to detect the service being used based on information obtainable via the communication network. The identifying unit identifies services that are not to be managed from the services detected by the detecting unit.

According to one aspect of the present invention, it becomes easy to grasp the service being used.

It is a figure showing an example of arrangement of information processing equipment 1 concerning an embodiment of the present invention. 1 is a diagram showing a configuration of an information processing device 1; FIG. 2 is a block diagram showing a functional configuration of the information processing device 1; FIG. 4 is a diagram for explaining service detection by the detection unit 102. FIG. 4 is a diagram for explaining service detection by the detection unit 102. FIG. 4 is a diagram for explaining service detection by the detection unit 102. FIG. 4 is a diagram for explaining service detection by the detection unit 102. FIG.

Embodiments of the present invention will be described below with reference to the drawings. Various features shown in the embodiments shown below can be combined with each other.

By the way, the program for realizing the software appearing in this embodiment may be provided as a non-transitory computer-readable medium (Non-Transitory Computer-Readable Medium), or may be downloaded from an external server. It may be provided as possible, or may be provided so that the program is activated on an external computer and the function is realized on the client terminal (so-called cloud computing).

Further, in the present embodiment, the term “unit” may include, for example, a combination of hardware resources implemented by circuits in a broad sense and software information processing that can be specifically realized by these hardware resources. . In addition, various information is handled in the present embodiment, and these information are, for example, physical values of signal values representing voltage and current, and signal values as binary bit aggregates composed of 0 or 1. It is represented by high and low, or quantum superposition (so-called quantum bit), and communication and operation can be performed on a circuit in a broad sense.

A circuit in a broad sense is a circuit implemented by appropriately combining at least circuits, circuits, processors, memories, and the like. Application Specific Integrated Circuits (ASICs), programmable logic devices (e.g., Simple Programmable Logic Devices (SPLDs), Complex Programmable Logic Devices (CPLDs), and field It includes a programmable gate array (Field Programmable Gate Array: FPGA).

1. Overall Configuration FIG. 1 is a diagram showing an arrangement example of an information processing apparatus 1 according to an embodiment of the present invention. As shown in the figure, an information processing apparatus 1 is communicably connected to a plurality of user terminals 2 via a network 3 . It is also assumed that a server 4, a server 5, a server 6, etc. that provide services are connected to the network 3 so as to be able to communicate with each other. Server 4, server 5, and server 6 provide different services. For example, server 4 provides service A, server 5 provides service B, and server 6 provides service C. .

The information processing device 1 is a device that manages the use of services provided by the servers 4 , 5 and 6 . Details of the information processing apparatus 1 will be described later.

The user terminal 2 is a terminal used by a user, such as a personal computer, tablet, or smart phone on which a web browser operates.

The network 3 is a network that enables communication between the information processing device 1 and the user terminal 2, and includes, for example, the Internet.

2. Configuration of Information Processing Apparatus Next, the configuration of the information processing apparatus 1 will be described. FIG. 2 is a diagram showing the configuration of the information processing device 1. As shown in FIG. As shown in the figure, the information processing apparatus 1 has a processing section 11, a storage section 12, a temporary storage section 13, an external device connection section 14, and a communication section 15, and these constituent elements are are electrically connected via a communication bus 16 inside the information processing apparatus 1 .

The processing unit 11 is implemented by, for example, a central processing unit (CPU), operates according to a predetermined program stored in the storage unit 12, and implements various functions.

The storage unit 12 is a non-volatile storage medium that stores various information. This is realized by a storage device such as a hard disk drive (HDD) or a solid state drive (SSD). Note that the storage unit 12 can be arranged in another device that can communicate with the information processing device 1 .

Temporary storage unit 13 is a volatile storage medium. This is implemented by a memory such as a random access memory (RAM), for example, and stores information (arguments, arrays, etc.) temporarily required when the processing unit 11 operates.

The external device connection unit 14 is, for example, a connection unit that conforms to a standard such as a Universal Serial Bus (USB) or a high-definition multimedia interface (HDMI (registered trademark)). An input device and a display device such as a monitor can be connected.

The communication unit 15 is, for example, communication means conforming to a local area network (LAN) standard, and realizes communication between the information processing apparatus 1 and the local area network or a network 3 such as the Internet via the local area network. do.

For the information processing apparatus 1, a general-purpose server computer, a personal computer, or the like can be used, and the information processing apparatus 1 can be configured using a plurality of computers.

3. Functions of Information Processing Apparatus 1 Next, functions of the information processing apparatus 1 will be described. The information processing apparatus 1 manages the use of services, and operates according to a program to implement each functional unit described later. This program is a program that causes a computer to operate or function as an information processing device.

FIG. 3 is a block diagram showing the functional configuration of the information processing device 1. As shown in FIG. As shown in the figure, the information processing apparatus includes 1 a management unit 101 , a detection unit 102 , a specification unit 103 and a determination unit 104 .

The management unit 101 is configured to be able to manage services to be managed. Specifically, the management unit 101 manages at least the name of the service used by the user, and manages the administrator account of each service when permission is obtained. This administrator account is an account that is granted administrator authority among accounts used by users of the service, and has a different meaning from an administrator who uses the information processing apparatus 1 .

The detection unit 102 is configured to be able to detect the service being used based on information obtainable via the network 3 . At this time, if possible, an account using the service is acquired together with the service. The account is preferably an administrator account, but may also be a user account. A specific example of information acquired by the detection unit 102 will be described later.

The specifying unit 103 specifies services that are not managed by the management unit 101 from the services detected by the detection unit 102 . Further, the identifying unit 103 identifies a service whose usage frequency is equal to or higher than a predetermined value from the services detected by the detecting unit 102, and causes the management unit 101 to manage the identified service as a new management target. Services with a low frequency of use include services used for trial purposes, etc., and are not necessarily subject to management. Therefore, by identifying services based on frequency of use, it is possible to exclude services that do not require management. Of course, if a service whose usage frequency is 0 or more is specified, all services detected by the detection unit 102 can be specified as objects to be managed.
Further, when identifying a new service, that is, a service not managed by the management unit 101, the identification unit 103 issues a warning to a predesignated notification destination indicating that a new service has been detected. can be This warning may be issued by the identification unit 103, or the information processing apparatus 1 may be provided with a warning unit (not shown). Further, the warning may be issued only when the new service is specified as a new service to be managed by the management unit 101 .

Further, the identifying unit 103 identifies the account that first used the service detected by the detecting unit 102 . For example, when detecting a service by acquiring a communication log from the connection device 20 to be described later, the account that used the service for the first time is determined by specifying the user who accessed the service first. The user who used the service for the first time is likely to have administrator authority, and even if the user has transferred administrator authority to another user, the transfer Since there is a high possibility of knowing the future, it is significant when obtaining consent for management of the account by the management unit 101 . It is also possible to have the identified administrator issue an account (with administrator authority) for management by the management unit 101 .

The determination unit 104 counts the usage frequency of the services managed by the management unit, estimates whether or not the service will be used in the future, and determines whether or not the service can be canceled based on the results. This estimation can be made, for example, by using an activity log, and based on the frequency of service usage and the ratio of the number of users, services below a certain percentage are assumed to be less likely to be used in the future. Specifically, when there is no use (access) for a predetermined number of days, for example, 45 days or more, or when the percentage of users who continue to use is less than a predetermined percentage, for example, 10% or less, the usability is low. Consider.
At this time, it is possible to omit guessing whether or not the service will be used in the future, and determine whether or not to cancel the service based only on the frequency of use.

Further, the determination unit 104 may determine whether or not there is an alternative service to the service managed by the management unit 101, and determine whether or not cancellation is possible based on the determination result. An alternative service is a service managed by the management unit 101 . For alternative services, for example, identify alternative services based on the characteristics of users who use similar services. Similar services should be determined based on the usage and category of the service, and the price and frequency of use should be used as a reference. may For this reason, the management unit 101 may manage the content of the service, the price, etc. together. If there is a service that has been determined to be cancelable, the determining unit 104 notifies the administrator of this as an alert. Note that the determination unit 104 may perform determination based on rules, or may perform determination using learning results obtained by machine learning.

4. Operation of Detection Unit 102 Next, service detection by the detection unit 102 will be described. 4 to 7 are diagrams for explaining service detection by the detection unit 102. FIG. The service detection by the detection unit 102 may be performed by any of the methods described below, or may be performed by appropriately combining them.

As shown in FIG. 4, the detection unit 102 acquires payment information from the server 7 that provides accounting services, and detects the service used from the payee or details included in the acquired payment information. The server 7 provides services for recording, managing, and executing payments in the cloud, specifically, accounting services, expense services, prepaid card services, and the like. , it is possible to detect services used within an organization such as a company. Also, instead of the server 7, it is possible to obtain the usage details provided by the credit card company, the payment details provided by the bank, and the like, and detect the service being used from this information.

Further, as shown in FIG. 5, the detection unit 102 acquires a communication log from the connection device 20 that connects to the network 3, and detects services used by communication destinations included in the acquired communication log. . Further, the detection unit 102 acquires the usage history of the user terminal 2 from the user terminal 2 that can use the service, and detects the service being used from the usage content included in the acquired usage history. The connection device 20 is, for example, a router or a proxy server, and detects the service being used from the address of the connection destination. Also, when the user terminal 2 is connected to the network 3 without going through the connection device 20, the user terminal 2 runs an agent program that records window titles, communication destinations, etc. as usage history. and detect the services being used from the agent program. The usage history may be browsing history of the browser. Alternatively, a mail transmission/reception history may be acquired from a mail server or mailer, and the service used may be detected from the transmission/reception history.

Further, as shown in FIG. 6, the detection unit 102 acquires the usage history of the account provided by the ID provider from the server 8 of the ID provider, and detects the service used by the destination included in the usage history. do. This can be done when many services allow logging in with an account provided by an ID provider, such as "login with an AAA account". The service can be detected by acquiring the usage history of .

Further, as shown in FIG. 7, the detection unit 102 receives a report from a user who can use a service, and detects the service being used from the contents of the received report. Specifically, the detection unit 102 provides the user terminal 2 with a declaration screen (web page) for declaring the use of the service, and acquires the content entered on this declaration screen, thereby allowing the user to You can get a declaration from Note that service use reporting is not limited to the use of the reporting screen, but can be done by uploading a file, for example, by uploading a file (output from a service, etc.) describing the contract details of the service to the detection unit 102. , may be declared.

5. Others Summarizing the targets to be detected by the detection unit 102,
・Find a service (SaaS, etc.) ・Find a service user account and find the first account ・Find usage status (activity log) ・Find payment data and payment date ・Security setting status (specifically, 2 factor authentication settings).

The present invention may be provided in each aspect described below.
In the information processing device, the specifying unit specifies a service whose usage frequency is equal to or greater than a predetermined value from the services detected by the detection unit, and manages the specified service as a new management target by the management unit. Information processing equipment that allows
In the information processing device, the identification unit identifies an account that first used the service detected by the detection unit.
In the information processing device, the detection unit acquires payment information from a server that provides accounting services, and detects a service used from a payee or a statement included in the acquired payment information.
In the information processing device, the detection unit acquires a communication log from a connection device that connects to the communication network, and detects a service used by a communication destination included in the acquired communication log. .
In the information processing device, the detection unit acquires from an ID provider a usage history of an account provided by the ID provider, and detects a service used by a destination included in the usage history.
In the information processing device, the detection unit acquires a usage history of a terminal from which a service is available, and detects the service being used from the usage content included in the usage history.
In the information processing device, the detection unit receives a report from a user who can use the service, and detects the service being used from the contents of the received report.
In the information processing apparatus, the information processing apparatus includes a determination unit, and the determination unit determines whether or not cancellation of the service managed by the management unit is possible based on the frequency of use of the service.
In the information processing device, the determination unit determines whether or not there is an alternative service to the service managed by the management unit, and determines whether or not the cancellation is possible based on the determination result.
A program that causes a computer to operate as an information processing device, the program causing the computer to function as the information processing device.
Of course, it is not limited to this.

1: Information processing device 2: User terminal 3: Network 4: Server 5: Server 6: Server 7: Server 8: Server 11: Processing unit 12: Storage unit 13: Temporary storage unit 14: External device connection unit 15: Communication Unit 16: communication bus 20: connection device 101: management unit 102: detection unit 103: identification unit 104: determination unit

Claims (11)

An information processing device,
comprising a management unit, a detection unit, and an identification unit,
The management unit is configured to be able to manage services to be managed,
The detection unit is configured to be able to detect the service being used based on information obtainable via a communication network,
The information processing apparatus, wherein the identifying unit identifies the service not to be managed from the services detected by the detecting unit. In the information processing device according to claim 1,
The information processing apparatus, wherein the identifying unit identifies a service whose usage frequency is equal to or greater than a predetermined value from the services detected by the detecting unit, and causes the management unit to manage the identified service as a new management target. In the information processing apparatus according to claim 1 or claim 2,
The information processing apparatus, wherein the identifying unit identifies an account that first used the service detected by the detecting unit. In the information processing apparatus according to any one of claims 1 to 3,
The information processing apparatus, wherein the detection unit acquires payment information from a server that provides accounting services, and detects a service used from a payee or a statement included in the acquired payment information. In the information processing apparatus according to any one of claims 1 to 4,
The information processing apparatus, wherein the detection unit acquires a communication log from a connection device that connects to the communication network, and detects a service used by a communication destination included in the acquired communication log. In the information processing apparatus according to any one of claims 1 to 5,
The information processing apparatus, wherein the detection unit acquires from an ID provider a usage history of an account provided by the ID provider, and detects a service used by a destination included in the usage history. In the information processing apparatus according to any one of claims 1 to 6,
The information processing apparatus, wherein the detection unit acquires a usage history of a terminal that can use a service, and detects a service that is being used from usage details included in the usage history. In the information processing apparatus according to any one of claims 1 to 7,
The information processing apparatus, wherein the detection unit receives a report from a user who can use the service, and detects the service being used from the contents of the received report. In the information processing apparatus according to any one of claims 1 to 8,
Equipped with a judgment unit,
The information processing apparatus, wherein the determination unit determines whether or not cancellation of the service managed by the management unit is possible based on the frequency of use of the service. In the information processing device according to claim 9,
The determination unit determines whether or not there is an alternative service for the service managed by the management unit, and determines whether or not the cancellation is possible based on the determination result. A program for operating a computer as an information processing device,
A program that causes a computer to function as the information processing apparatus according to any one of claims 1 to 10.

Images