JP2023043258A - Program, information processor, information processing system, and information processing method - Google Patents

Abstract

To solve the problem that when a specific user who has been given authority to operate a device is absent, it is necessary to newly give the authority to operate the device to a person who replaces the specific user in order to operate the device.SOLUTION: A program comprises the steps of: acquiring function identification information; searching for user information; acquiring authority information of a group to which a user belongs, based on the user information; and outputting a user who has operation authority for a function associated with the function identification information, based on the function identification information and the authority information.SELECTED DRAWING: None

Description

The present disclosure relates to a program, an information processing device, and an information processing method.

2. Description of the Related Art In a workplace or the like, there is a technique for limiting the operation of equipment to only specific users by giving the specific users the authority to operate the equipment necessary for performing specific tasks.
Patent Literature 1 discloses an information processing device and a program capable of giving a user appropriate authority to operate or use the device based on the relationship between the device and the user of the device.
Japanese Patent Laid-Open No. 2002-200000 discloses a technique that allows a person with specific authority to perform manager duties from any POS terminal, and prevents manager duties from being performed simultaneously on a plurality of POS terminals.

JP 2018-084912 Japanese Patent Application Laid-Open No. 2004-185112

If a specific user who has been given the authority to operate the equipment is absent, it is necessary to newly give the authority to operate the equipment to a person who replaces the specific user in order to operate the equipment. In such a case, there may be no system for determining an authorized operator to replace a specific user, and business may be delayed.

Therefore, the present disclosure has been made to solve the above problems, and its purpose is to enable a user with appropriate authority to operate apparatuses, equipment, and devices (hereinafter referred to as apparatuses) so that operations can be performed smoothly. It is to provide a service that does.

A program to be executed by a computer comprising a processor and a storage unit, the program comprising a step of acquiring first authority stipulating information that stipulates an authority for operating the function of the device to the processor; and a first determining step of determining whether or not the user has the operating authority for the function based on the first authority defining information and the first authority information.

According to the present disclosure, business can be performed smoothly.

1 is a diagram showing an overall configuration of an information processing system 1; FIG. 3 is a block diagram showing the functional configuration of the server 10; FIG. 2 is a block diagram showing a functional configuration of a user terminal 20; FIG. 3 is a block diagram showing the functional configuration of an administrator terminal 40; FIG. 3 is a block diagram showing the functional configuration of a device terminal 60; FIG. FIG. 10 is a diagram showing the data structure of a device table 1012; FIG. FIG. 7A is a diagram showing the data structure of the function table (first embodiment) 1013A, and FIG. 7B is a diagram showing the data structure of the function table (second embodiment) 1013B. FIG. 10 is a diagram showing the data structure of an area table 1014; FIG. FIG. 10 is a diagram showing the data structure of an imaging data table 1015; FIG. FIG. 10 is a diagram showing the data structure of a first group table 1016; FIG. FIG. 11 shows the data structure of a second group table 1017. FIG. FIG. 10 shows the data structure of a user table 1018. FIG. FIG. 10 is a diagram showing the data structure of an operation log table 1019; FIG. 4 is a flowchart showing operation of user output processing (first embodiment) in the server 10; 8 is a flowchart showing the operation of user output processing (second embodiment) in the server 10; 4 is a flowchart showing the operation of device operation processing; It is a figure which shows the example of a display screen of the user terminal 20 in a user output process (1st Example, 2nd Example). FIG. 10 is a diagram showing an example of a display screen of the user terminal 20 in device operation processing; 2 is a block diagram showing the basic hardware configuration of computer 90. FIG.

Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In all the drawings for explaining the embodiments, common constituent elements are given the same reference numerals, and repeated explanations are omitted. It should be noted that the following embodiments do not unduly limit the content of the present disclosure described in the claims. Also, not all the components shown in the embodiments are essential components of the present disclosure. Each figure is a schematic diagram and is not necessarily strictly illustrated.

<Overview of information processing system 1>
FIG. 1 is a diagram showing the overall configuration of an information processing system 1. As shown in FIG. The information processing system 1 in the present disclosure includes a plurality of different types of devices such as doors and air conditioners, and various functions of each device (locking and unlocking for doors, switch ON, switch OFF for air conditioners, etc.) , adjustment of temperature, air volume, air direction, etc.), and provides a service in which the user operates and controls various functions of the device.
The information processing system 1 is an information processing system for realizing a technique for smoothly performing work by a user having appropriate authority operating various functions of the apparatus.

<Basic Configuration of Information Processing System 1>
FIG. 1 shows an information processing system 1 according to the present disclosure. The information processing system 1 includes a server 10, a plurality of user terminals 20A, 20B, 20C, . configured as follows. FIG. 2 is a block diagram showing the functional configuration of the server 10. As shown in FIG. FIG. 3 is a block diagram showing the functional configuration of the user terminal 20. As shown in FIG. FIG. 4 is a block diagram showing the functional configuration of the administrator terminal 40. As shown in FIG. FIG. 5 is a block diagram showing the functional configuration of the device terminal 60. As shown in FIG.

The server 10 is an information processing apparatus that provides a service for a user with appropriate authority to operate apparatus, equipment, and devices (hereinafter referred to as apparatus). The user terminal 20 is an information processing device operated by a user who uses the service. The administrator terminal 40 is an information processing device operated by a user (hereinafter referred to as an administrator) who has authority to manage services. The user terminal 20 and the administrator terminal 40 may be, for example, mobile terminals such as smart phones and tablets, stationary PCs (Personal Computers), and laptop PCs. It may also be a wearable terminal such as an HMD (Head Mount Display) or a wristwatch type terminal. The device terminal 60 is an information processing device for controlling a device to be operated by a user.

Each information processing device is composed of a computer having an arithmetic device and a storage device. The basic hardware configuration of the computer and the basic functional configuration of the computer realized by the hardware configuration will be described later. For each of the server 10, the user terminal 20, the administrator terminal 40, and the device terminal 60, descriptions overlapping the basic hardware configuration of the computer and the basic functional configuration of the computer, which will be described later, will be omitted.

The configuration and operation of each device will be described below.

<Functional Configuration of Server 10>
A functional configuration realized by the hardware configuration of the server 10 is shown in FIG. The server 10 has a storage unit 101 and a control unit 104 .

<Configuration of Storage Unit of Server 10>
The storage unit 101 of the server 10 includes a device table 1012, a function table 1013, an area table 1014, an imaging data table 1015, a first group table 1016, a second group table 1017, a user table 1018, and an operation log table 1019.
FIG. 6 is a diagram showing the data structure of the device table 1012. As shown in FIG. FIG. 7A is a diagram showing the data structure of the function table (first embodiment) 1013A, and FIG. 7B is a diagram showing the data structure of the function table (second embodiment) 1013B. FIG. 8 is a diagram showing the data structure of the area table 1014. As shown in FIG. FIG. 9 is a diagram showing the data structure of the imaging data table 1015. As shown in FIG. FIG. 10 shows the data structure of the first group table 1016. As shown in FIG. FIG. 11 shows the data structure of the second group table 1017. As shown in FIG. FIG. 12 is a diagram showing the data structure of the user table 1018. As shown in FIG. FIG. 13 shows the data structure of the operation log table 1019. As shown in FIG.

The device table 1012 is a table for managing the user's operation authority with respect to devices, equipment, devices, etc. (hereafter referred to as devices) installed in various places.
The device table 1012 is a table having device ID as a primary key, device type, and second authority threshold as columns.

The device ID is device identification information for identifying the device to be operated. A unique value is set for each device in the device identification information. The device type is information indicating the type of device to be operated by the user. The device type may be a name indicating the type of device, or may be in the form of an identifier such as a device type ID. The second authority threshold value is information for defining authority to operate various functions of the device defined by the device ID.

The function table 1013 is a table for managing user's operation authority for various functions of the device.

The function table 1013A is a function table according to the first embodiment, and has columns of a function method, a device type, and a first authority threshold with a function ID as a primary key.
The function ID is function identification information for specifying the function of the device to be operated. As the function identification information, a unique value is set for each function of each device type. The function method defines the contents of the control processing of the device to be operated. A form of referring to specific control processing may be used. The device type is the device type of the device having the function specified by the function ID.
By configuring the table like the function table 1013A, a uniform first authority threshold can be set for the same function of the same device, so authority can be easily managed.

The function table 1013B is a function table according to the second embodiment, and has columns of a function method, a device ID, and a first authority threshold, with a function ID as a primary key.
The function ID is function identification information for specifying the function of the device to be operated. As the function identification information, a unique value is set for each function of each device type. The function method defines the contents of the control processing of the device to be operated. A form of referring to specific control processing may be used. The device ID is the device ID of the device having the function specified by the function ID.
By configuring the table like the function table 1013B, it is possible to set different first authority thresholds for the same function of the same device. Therefore, detailed authority management for each user can be performed according to the installation position of the device. can.

The area table 1014 is a table for managing the user's operation authority for the apparatus in area units.
The area table 1014 is a table having columns of device ID and area ID.

The device ID is device identification information for identifying the device to be operated. The area ID is area identification information that identifies an area. Area refers to a part or the whole of a space such as a room or a hallway, seats placed in a room, a predetermined range in an outdoor space, a part or the whole of a vehicle space such as a car, a bus, a train, a car, a bus, Indicates any physical area where a user can be, such as a seat on a train or the like. The area identification information is information for identifiably specifying the physical area.

The photographed data table 1015 is a table that stores photographed data (recorded data) obtained by photographing a predetermined area around the device including the device for each device. A system according to the present disclosure includes a camera (not shown), and each device is photographed by the camera. It should be noted that it is not necessary to prepare photographed data for all devices, and a configuration may be adopted in which photographing is performed only for devices for which it is desirable to generate photographed data from the standpoint of confidentiality, safety, and the like. When one device is photographed by a plurality of cameras, a plurality of photographed data are associated with one device ID. When multiple devices are captured by one camera, multiple device IDs are associated with one piece of captured data.
The imaging data table 1015 is a table having columns of device ID and imaging data.

The device ID is device identification information for identifying the device to be imaged. The photographed data stores moving image data obtained by photographing an area of a predetermined range including the device. Note that the photographed data may refer to a predetermined location (path) in the storage area in which the moving image data is stored.

The first group table 1016 is a table that defines authority in the first group to which the user belongs. In the present disclosure, the first group is an example of positions in a company organization. Note that the first group does not necessarily have to be a position, and may be any group to which the user belongs. Also, a user may belong to a plurality of groups.
The first group table 1016 is a table having columns of a first group name and a first authority, with the first group ID as a primary key.

The first group ID is identification information for identifying the first group. A unique value is set for each group as the first group ID. The first group name is the name of the group set for each first group ID. The first authority is the value of authority information (first authority information) given to the group identified by the first group ID.

The second group table 1017 is a table that defines authority in the second group to which the user belongs. In the present disclosure, the second group is an example of departments in a company organization. Note that the second group does not necessarily have to be a department, and may be any group to which the user belongs. Also, a user may belong to a plurality of groups.
The second group table 1017 is a table having a second group ID as a primary key, a second group name, and a second authority column.

The second group ID is identification information for identifying the second group. A unique value is set for each group as the second group ID. The second group name is the name of the group set for each second group ID. The second authority is the value of authority information (second authority information) given to the group identified by the second group ID.

The user table 1018 is a table that stores and manages information on member users (hereinafter referred to as users) who use the service. By registering to use the service, the user's information is stored in a new record in the user table 1018 . This enables the user to use the service according to the present disclosure.
The user table 1018 is a table having user ID as a primary key and columns of user name, first group ID, second group ID, and area ID.

User ID is an item that stores an identifier for uniquely identifying a user. The user name is an item that stores the name of the user. The first group ID stores the first group ID to which the user identified by the user ID belongs. A user may belong to a plurality of first groups. The second group ID stores the second group ID to which the user identified by the user ID belongs. A user may belong to a plurality of second groups.
The area ID stores area identification information for identifying the area where the user is currently located. For example, the user can use his or her own user terminal 20 or an ID card to unlock an electronic lock provided on the door of a predetermined room and enter the room. At this time, the electronic lock transmits to the server 10 a request including the user ID and the area ID indicating that the user has entered the predetermined room. The server 10 that has received the request updates the area ID of the user identified by the received user ID in the user table. As a result, the area where the user is currently located is stored in the area ID of the user table.
The area ID identifies the area where the user is located by using image recognition technology such as face recognition using a camera (not shown), arbitrary wired and wireless communication technology, pressure sensors provided on the seat, etc. It is good also as a structure which updates.
The user himself/herself may operate his/her own user terminal 20 and manually transmit the area in which he/she is located to the server 10 to update his/her own area ID. The area ID of the user may be updated by manually transmitting the area in which the user is located to the server 10 by operating the user terminal 20 by an administrator other than the user, a superior, or the like.

The operation log table 1019 stores, as a log, a history of user's operation of various functions for each device.
The operation log table 1019 is a table having columns of user ID, device ID, function ID, successful operation, start date/time, end date/time, and video data.

User ID is an item that stores user identification information for identifying a user who has operated various functions of each device. The device ID is an item stored by the device identification information of the device operated by the user. The function ID is an item in which the function identification information of the function of the device operated by the user is stored. Operation success is an item that stores whether or not the user has successfully operated various functions of each device. True is stored in case of success, and False is stored in case of failure. For example, False is stored when an unauthorized user requests the server to operate a given function of a given device.
The start date and time is an item that stores the date and time when the user started operating various functions of each device. The start date and time can be the date and time when the server receives a request from the user requesting operation of various functions of each device. The start date and time may be the date and time when the operation of various functions of each device is actually started.
The end date and time is an item that stores the date and time when the user finished operating various functions of each device. The end date and time may be the date and time when the server receives a request from the user to end the operation of various functions of each device. The end date and time may be the date and time when the user last operated the various functions when a predetermined time has passed (timeout) after the user operated the various functions of each device. The end date and time may be a date and time after a predetermined time has passed since the date and time when a request requesting operation of various functions of each device was received from the user.

<Configuration of Control Unit of Server 10>
The control unit 104 of the server 10 includes a user registration control unit 1041 , a user output control unit 1042 , an apparatus operation control unit 1043 and an imaging data storage control unit 1044 . By executing the application program 1011 stored in the storage unit 101, the control unit 104 realizes functional units of a user registration control unit 1041, a user output control unit 1042, an apparatus operation control unit 1043, and a captured data storage control unit 1044. be done.
FIG. 14 is a flow chart showing the operation of user output processing (first embodiment) in the server 10 . FIG. 15 is a flow chart showing the operation of user output processing (second embodiment) in the server 10 . FIG. 16 is a flow chart showing the operation of the device operation process.
FIG. 17 is a diagram showing an example of a display screen of the user terminal 20 in user output processing (first embodiment, second embodiment). FIG. 18 is a diagram showing an example of a display screen of the user terminal 20 in device operation processing.

The user registration control unit 1041 performs processing for storing information of users who wish to use the service according to the present disclosure in the user table 1018 .
The user ID and user name information stored in the user table 1018 can be obtained by opening a web page or the like operated by the service provider from any information processing terminal and entering the user ID and user name in a predetermined input form. Send to server 10 . The user registration control unit 1041 of the server 10 stores the received user ID and user name in a new record of the user table 1018, and user registration is completed. This allows the users stored in the user table 1018 to use the service.
Prior to registration of user information in the user table 1018 by the user registration control unit 1041, the service provider may perform a predetermined examination to limit whether or not the user can use the service.
The user ID may be any character string or number that can identify the user, any character string or number desired by the user, or any character string or number automatically set by the user registration control unit 1041 of the server 10. can be

The user output control unit 1042 performs user output processing. Details will be described later.
The device operation control unit 1043 performs device operation processing. Details will be described later.
The photographed data storage control unit 1044 performs photographed data storage processing. Details will be described later.

<Functional Configuration of User Terminal 20>
A functional configuration realized by the hardware configuration of the user terminal 20 is shown in FIG. The user terminal 20 includes a storage unit 201 , a control unit 204 , a touch panel 206 , a touch sensitive device 2061 , a display 2062 , a microphone 2081 , a speaker 2082 , a position information sensor 2083 , a camera 2084 and a motion sensor 2085 .

<Configuration of Storage Unit of User Terminal 20>
The storage unit 201 of the user terminal 20 stores a user ID 2011 for identifying a user who uses the user terminal 20 and an application program 2012 .
The user ID is the user's account ID. The user transmits the user ID 2011 from the user terminal 20 to the server 10 . The server 10 identifies the user based on the user ID 2011 and provides the user with the service according to the present disclosure. The user ID includes information such as a session ID temporarily assigned by the server 10 to identify the user using the user terminal 20 .
The application program 2012 may be stored in the storage unit 201 in advance, or may be downloaded from a web server or the like operated by the service provider via the communication IF. Application program 2012 includes an interpreted programming language that runs on a web browser application stored on user terminal 20 .

<Configuration of Control Unit of User Terminal 20>
The control unit 204 of the user terminal 20 has an input control unit 2041 and an output control unit 2042 . By executing the application program 2012 stored in the storage unit 201 , the control unit 204 implements functional units of an input control unit 2041 and an output control unit 2042 .
The input control unit 2041 of the user terminal 20 outputs from input devices such as the user's operation content to the touch-sensitive device 2061 of the touch panel 206, voice input to the microphone 2081, position information sensor 2083, camera 2084, motion sensor 2085, etc. Acquire information and execute various processes. The input control unit 2041 of the user terminal 20 executes a process of transmitting the information acquired from the input device together with the user ID 2011 to the server 10 .
The output control unit 2042 of the user terminal 20 receives the user's operation on the input device and information from the server 10 , and executes control processing of the display content of the display 2062 and the audio output content of the speaker 2082 .

<Functional Configuration of Administrator Terminal 40>
A functional configuration realized by the hardware configuration of the administrator terminal 40 is shown in FIG. The administrator terminal 40 has a storage unit 401 and a control unit 404 . The administrator terminal 40 is connected with an input device 406 and an output device 408 . Input device 406 includes camera 4061 , microphone 4062 and keyboard 4063 . The output device 408 includes a display 4081 and speakers 4082 .

<Configuration of Storage Unit of Administrator Terminal 40>
The storage unit 401 of the administrator terminal 40 stores an administrator ID 4011 for identifying an administrator who uses the administrator terminal 40 and an application program 4012 .
The administrator ID is the administrator's account ID. The administrator transmits the administrator ID 4011 from the administrator terminal 40 to the server 10 . The server 10 identifies the administrator based on the administrator ID 4011 and provides the administrator with the service according to the present disclosure. The administrator ID includes information such as a session ID temporarily assigned by the server 10 to identify the administrator who uses the administrator terminal 40 .
The application program 4012 may be stored in the storage unit 401 in advance, or may be downloaded from a web server or the like operated by the service provider via the communication IF. Application program 4012 includes an interpreted programming language that runs on a web browser application stored on administrator terminal 40 .

<Configuration of Control Unit of Administrator Terminal 40>
The controller 404 of the administrator terminal 40 has an input controller 4041 and an output controller 4042 . By executing the application program 4012 stored in the storage unit 401 , the control unit 404 implements the functional units of the input control unit 4041 and the output control unit 4042 .
The input control unit 4041 of the administrator terminal 40 acquires information output from input devices such as the camera 4061 and the microphone 4062, and the details of the administrator's operation on the keyboard 4063, and executes various processes. The input control unit 4041 of the administrator terminal 40 executes processing for transmitting the information acquired from the input device to the server 10 together with the administrator ID 4011 .
The output control unit 4042 of the administrator terminal 40 receives the user's operation on the input device and information from the server 10 , and executes control processing of the display content of the display 4081 and the audio output content of the speaker 4082 .

<Functional Configuration of Device Terminal 60>
A functional configuration realized by the hardware configuration of the device terminal 60 is shown in FIG. The device terminal 60 includes a storage section 601 and a control section 604 . Device terminal 60 is connected to input device 606 and device 208 . Input device 606 includes camera 6061 , fingerprint reader 6062 , non-contact reader 6063 , and operation button 6064 .
The devices 208 include doors, safes, air conditioners, POS systems (point of sale information management systems), automobiles, trucks, buses, trains, ships, airplanes, drones, lifting lifts installed in factories, cranes, machine tools, Belt conveyors, shutters, product manufacturing lines, seal stamps (registered seals) and other arbitrary devices, equipment, and devices are included.

<Configuration of Storage Unit of Device Terminal 60>
The storage unit 601 of the device terminal 60 stores a device ID 6011 for identifying a device that uses the device terminal 60 and an application program 6012 .
The device ID is device identification information for identifying the device. The device terminal transmits the device ID 6011 to the server 10 . The server 10 identifies the device based on the device ID 6011 and transmits control information based on the service according to the present disclosure to the device terminal 60 .
The application program 6012 may be stored in the storage unit 601 in advance, or may be downloaded from a web server or the like operated by the service provider via the communication IF. Application program 6012 includes an interpreted programming language that runs on a web browser application stored on device terminal 60 .

<Configuration of Control Unit of Device Terminal 60>
The control section 604 of the device terminal 60 includes an input control section 6041 and a device control section 6042 . By executing the application program 6012 stored in the storage unit 601 , the control unit 604 implements the functional units of the input control unit 6041 and the device control unit 6042 .
An input control unit 6041 of the device terminal 60 acquires information output from input devices such as the camera 6061, fingerprint reading unit 6062, non-contact reading unit 6063, and executes various processes. The input control unit 6041 of the device terminal 60 executes processing for transmitting the information acquired from the input device 606 to the server 10 together with the device ID 6011 .
The device control unit 6042 of the device terminal 60 receives the user's operation on the input device 606 and information from the server 10 , and executes control processing for the device 208 .

<Operation of information processing system 1>
Each process of the information processing system 1 will be described below.

<Server management processing>
The administrator operates the administrator terminal 40 to operate the contents (records) of the device table 1012, the function table 1013, the area table 1014, the first group table 1016, the second group table 1017, and the user table 1018 stored in the server 10. ) can be added, changed, or deleted to manage the service according to the present disclosure.

The administrator opens a web page or the like operated by the service provider using a web browser or the like of the administrator terminal 40, and fills out a predetermined input form with a request including a user ID, a user name, a first group ID, and a second group ID. to the server 10. The user registration control unit 1041 of the server 10 stores the user ID, user name, first group ID, and second group ID in new records of the user table 1018 based on the received request, and user registration is completed. This allows the users stored in the user table 1018 to use the service.
Also, if the user ID is already stored in the user table 1018, the user name, first group ID, and second group ID of the record having that user ID are updated. As a result, the first group and second group to which the user already stored in the user table 1018 belongs are updated.

<User output processing (first embodiment)>
A user can operate the user terminal 20 to execute a user output process of querying the server 10 for a user who has operation authority for each device and function. Details of the user output processing (first embodiment) will be described below with reference to the flowchart of FIG. 14 and the display screen example of FIG.

<Overview of user output processing (first embodiment)>
In the user output process (first embodiment), the server 10, having received an inquiry request including device identification information and function identification information from the user terminal 20, selects device identification information and function identification information among users located in a predetermined area. This is a series of processes for searching for a user who has the operation authority for the device and function corresponding to , and sending the search result to the user terminal 20 .
Specifically, the server 10 compares the device area information associated with the device and the user area information associated with the user, and searches for the user determined to be located in the predetermined area. Next, the server 10 selects the second authority definition information and the first authority definition information associated with the device and the function among the users located in the predetermined area, and the second authority information and the first authority definition information associated with the user. information, and search for a user who has the operation authority for the device and function. The server 10 outputs the user information of the user having the operation authority, which is the search result, to the user terminal 20 as a query result.

<Details of user output processing (first embodiment)>
In the login user name 8003 item of the display screen 81 displayed on the display 2062 of the user terminal 20, the user name of the user logging in to the service and the user's location area are displayed.

The user terminal 20 acquires the user's user name and location area from the server 10 as follows. User terminal 20 transmits a request including user ID 2011 to server 10 . The server 10 refers to the user table 1018 from the received user ID, searches for the user name and area ID, and transmits a response including the searched user name and area ID to the user terminal 20 .

The user selects the user button 8001 on the display screen 81 displayed on the display 2062 of the user terminal 20 to start user output processing.

In step S<b>101 , the user operates the user terminal 20 to send an inquiry request including the device ID and the function ID to the server 10 .
Specifically, the user selects a device 8101 and a function 8102 on the display screen 81 displayed on the display 2062 of the user terminal 20, and the corresponding device ID and function ID are selected and transmitted to the server 10. .

In step S121, the server 10 receives a query request.

In step S122, the user output control unit 1042 of the server 10 refers to the device table 1012 from the device ID included in the inquiry request, and searches for the second authority domain value associated with the device ID. The user output control unit 1042 of the server 10 refers to the area table 1014 from the device ID included in the inquiry request, and searches for the area ID associated with the device ID.

In step S123, the user output control unit 1042 of the server 10 refers to the function table 1013 from the function ID included in the inquiry request, and searches for the first authority threshold associated with the function ID.

In step S124, the user output control unit 1042 of the server 10 refers to the user table 1018 from the area ID and searches for the user IDs of one or more users located in the area ID. That is, the area ID (device area information) associated with the device is compared with the area ID (user area information) associated with each user in the user table 1018, and the user area information is included in the device area information. A configuration may be adopted in which only the user ID of the determined user is extracted.

In step S125, the user output control unit 1042 of the server 10 refers to the user table 1018 from the user ID and searches for the first group ID and second group ID to which each user ID belongs.

In step S126, the user output control unit 1042 of the server 10 refers to the first group table 1016 based on the first group ID to which each user ID belongs, and searches for the first authority of each user ID. The user output control unit 1042 of the server 10 refers to the second group table 1017 from the second group ID to which each user ID belongs, and searches for the second authority of each user ID.

In step S127, the user output control unit 1042 of the server 10 compares the first authority threshold and the second authority threshold with the first authority and second authority for each user ID, respectively, and determines whether or not each user has operation authority. do.
Specifically, if the first authority associated with the user is greater than or equal to the first authority threshold, and if the second authority associated with the user is greater than or equal to the second authority threshold, the user is allowed to perform the function It is determined that the user has the operation authority for . On the other hand, in other cases, it is determined that the user does not have the operation authority.
Specifically, a user whose first authority is "1", "2", or "3" is determined to have operation authority for a function whose first authority threshold is "3". A user whose second authority is "A" and "B" is determined to have the authority to operate a device whose second authority threshold is "A, B, C". In the present disclosure, the comparison between the second authority and the second authority threshold is a comparison based on the inclusion relationship (true if the range of the second authority threshold includes the second authority and false if not). However, similar to the first authority, comparison based on priority (if the priority of the first authority is equal to or higher than the first authority threshold, the result is true; otherwise, the result is false). Similarly, the comparison between the first authority and the first authority threshold is based on the priority, but it may be compared based on the inclusive relation as in the case of the second authority. In this way, the first authority threshold and the second authority threshold are regarded as first authority stipulation information and second authority stipulation information for prescribing more comprehensive first authority and second authority operating authority, respectively. be able to.
In the priority-based comparison, only one user with the highest priority may be determined to be the user with the operating authority, and the other users may be determined to be the users without the operating authority. Thereby, the operation authority can be temporarily transferred to the user having the lower authority only when the user having the higher authority is absent.

In step S<b>128 , the user output control unit 1042 of the server 10 transmits the user ID of the user who has the operation authority to the user terminal 20 .

In step S<b>102 , the user terminal 20 displays a list of users who have the operation authority received from the server 10 . Specifically, the display screen 81 of the user terminal 20 displays a user 8103 who has the operation authority for the function 8102 .
At this time, if the user ID 2011 stored in the user terminal 20 is included in the user having the operation authority, the operation button 8105 is displayed. By selecting the operation button 8105, the user can cause the device and function to execute device operation processing, which will be described later.

<User Output Processing (Second Embodiment)>
A user can operate the user terminal 20 to execute a user output process of querying the server 10 for a user who has operation authority for each device. Details of the user output processing (second embodiment) will be described below with reference to the flowchart of FIG. 15 and the display screen example of FIG. The description of the contents common to the user output process (first embodiment) will be omitted.

The user output processing (first embodiment) executes user output processing for querying the user who has the operation authority for each device and function, while the user output processing (second embodiment) executes, for each device, A user output process is executed to inquire of a user who has operation authority for each of all the functions of the device.

<Overview of User Output Processing (Second Embodiment)>
In the user output process (second embodiment), the server 10, which receives an inquiry request containing device identification information but not function identification information from the user terminal 20, responds to the device identification information among users located in a predetermined area. This is a series of processes for searching for a user who has the operation authority for the device to be used for each function of the device and sending the search results to the user terminal 20 .
Specifically, the server 10 compares the device area information associated with the device and the user area information associated with the user, and searches for the user determined to be located in the predetermined area. The server 10 retrieves all functions that the device has. Next, the server 10 selects the second authority definition information associated with the device, the first authority definition information associated with each function, and the second authority definition information associated with the user among the users located in the predetermined area. , and the first authority information, and searches for a user who has the operation authority for the device and function for each function. The server 10 outputs the user information of the user who has the operation authority for each function, which is the search result, to the user terminal 20 as a query result.

<Details of User Output Processing (Second Embodiment)>
The user selects the user button 8001 on the display screen 81 displayed on the display 2062 of the user terminal 20 to start user output processing.

In step S<b>201 , the user operates the user terminal 20 to send an inquiry request including the device ID to the server 10 .
Specifically, the user selects the device 8101 on the display screen 81 displayed on the display 2062 of the user terminal 20 , and the corresponding device ID is selected and transmitted to the server 10 .

In step S221, the server 10 receives a query request.

In step S222, the user output control unit 1042 of the server 10 refers to the device table 1012 from the device ID included in the inquiry request, and searches for the second authority domain value associated with the device ID. The user output control unit 1042 of the server 10 refers to the area table 1014 from the device ID included in the inquiry request, and searches for the area ID associated with the device ID.

In step S223, the user output control unit 1042 of the server 10 refers to the function table 1013 from the device ID included in the inquiry request, and searches for first authority thresholds for all function IDs associated with the device ID.
In the function table 1013A (first embodiment), the user output control unit 1042 of the server 10 refers to the device table 1012 from the device ID to search for the device type. The user output control unit 1042 of the server 10 refers to the function table 1013A from the retrieved device type, and retrieves the first authority threshold for each function.
In the function table 1013B (second embodiment), the user output control unit 1042 of the server 10 refers to the function table 1013B from the device ID and searches for the first authority threshold for each function.

In step S224, the user output control unit 1042 of the server 10 refers to the user table 1018 from the area ID and searches for the user IDs of one or more users located in the area ID.

In step S225, the user output control unit 1042 of the server 10 refers to the user table 1018 from the user ID and searches for the first group ID and second group ID to which each user ID belongs. That is, the area ID (device area information) associated with the device is compared with the area ID (user area information) associated with each user in the user table 1018, and the user area information is included in the device area information. A configuration may be adopted in which only the user ID of the determined user is extracted.

In step S226, the user output control unit 1042 of the server 10 refers to the first group table 1016 from the first group ID to which each user ID belongs, and searches for the first authority of each user ID. The user output control unit 1042 of the server 10 refers to the second group table 1017 from the second group ID to which each user ID belongs, and searches for the second authority of each user ID.

In step S227, the user output control unit 1042 of the server 10 compares the first authority threshold value and the second authority threshold value for each function with the first authority threshold value and the second authority threshold value for each user ID, respectively. determines whether or not there is an operation authority for Determination of the presence or absence of operation authority is the same as in the user output process (first embodiment).

In step S228, the user output control unit 1042 of the server 10 transmits to the user terminal 20 the user ID of the user who has the operation authority for each function.

In step S<b>202 , the user terminal 20 displays a list of users who have operation authority for each function received from the server 10 . Specifically, the display screen 81 of the user terminal 20 displays a user 8103 who has the operation authority for the function 8102 and a user 8113 who has the operation authority for the function 8112 .
At this time, if the user ID 2011 stored in the user terminal 20 is included in the user having the operation authority, the operation button 8105 is displayed. By selecting the operation button 8105, the user can cause the device and function to execute device operation processing, which will be described later.

<Device operation processing>
A user can operate the user terminal 20 to execute a process of operating the function of each device with respect to the server 10 . Details of the device operation processing will be described below using the flowchart of FIG. 16 and the display screen example of FIG.

<Overview of device operation processing>
In the device operation processing, the server 10 receives an operation request including user identification information, device identification information, and function identification information from the user terminal 20, determines whether or not there is an operation authority for the device and functions based on the user identification information, and grants the operation authority. This is a series of processing for transmitting a device request including parameters for operating and controlling the device function to the device terminal 60 if it has the device function, and for operating and controlling the device function.
Specifically, the server 10 compares device area information associated with the device and user area information associated with the user to determine whether the user is located in a predetermined area. When the user is located in a predetermined area, the server 10 stores second authority definition information and first authority definition information associated with the device and function, and second authority information and first authority information associated with the user. to determine whether the user has the operation authority for the device and function. When it is determined that the user has the operation authority for the device and the function, the server 10 transmits a device request including parameters for operating and controlling the function of the device to the device terminal 60 associated with the device identification information. and controls the functions of the device.

<Details of device operation processing>
In the login user ID 8003 item on the display screen 82 displayed on the display 2062 of the user terminal 20, the user name of the user logging in to the service and the user's location area are displayed.

The display screen 82 displays a list of devices 8201 and functions 8202 that the user of the user terminal 20 has the operation authority for. An operation button 8203 (function operation user interface) for operating each function is displayed in the function 8202 . Appropriate user interfaces such as buttons, switches, toggle switches, pull-downs, pickers, selectors, sliders, and steppers are assigned to the function operation user interface according to the operation contents of each function. By operating the function operation user interface, the user can operate various functions of the device for which he/she has the operation authority.

The user selects the user button 8002 on the display screen 82 displayed on the display 2062 of the user terminal 20 to start device operation processing.

In step S<b>301 , the user operates the user terminal 20 to transmit an operation request (operation instruction) including the user ID, device ID, and function ID to the server 10 .
Specifically, the user selects an operation button 8203 on the display screen 82 displayed on the display 2062 of the user terminal 20 to associate the user ID 2011 stored in the user terminal 20 with the selected operation button 8203. A device ID and a function ID corresponding to each of the device 8201 and function 8202 obtained are selected and transmitted to the server 10 .

In step S321, the device operation control unit 1043 of the server 10 receives the operation request.

In step S322, the device operation control unit 1043 of the server 10 refers to the user table 1018 based on the user ID included in the operation request, and extracts the first group ID, second group ID, and area ID associated with the user ID. search for.

In step S323, the device operation control unit 1043 of the server 10 refers to the first group table 1016 to search for the first authority from the first group ID to which the user ID belongs. The device operation control unit 1043 of the server 10 refers to the second group table 1017 from the second group ID to which the user ID belongs to search for the second authority.

In step S324, the device operation control unit 1043 of the server 10 refers to the device table 1012 from the device ID included in the operation request and searches for the second authority domain value associated with the device ID. The device operation control unit 1043 of the server 10 refers to the area table 1014 from the device ID included in the inquiry request, and searches for the area ID associated with the device ID.

In step S325, the device operation control unit 1043 of the server 10 refers to the function table 1013 from the function ID included in the operation request, and searches for the first authority threshold associated with the function ID.

In step S326, the device operation control unit 1043 of the server 10 determines whether or not the user is in the area associated with the device to be operated. Specifically, the device operation control unit 1043 of the server 10 converts the area ID (user area information) where the user searched in step S322 is to the area ID (device area information) associated with the device searched in step S324. (area determination step). If so, the user is determined to be the user who has the operation authority for the function, and the process proceeds to step S327. On the other hand, if it is not included, it is determined that the user does not have the operation authority, and the process proceeds to step S351.

In step S327, the device operation control unit 1043 of the server 10 determines whether or not the user has the operation authority for the device and functions. Specifically, the device operation control unit 1043 of the server 10 compares the first authority and second authority retrieved in step S323 with the first authority threshold and second authority threshold retrieved in step S324, respectively, to determine whether the user's Determine whether or not there is an operation authority. Determination of the presence or absence of operation authority is the same as in the user output process (first embodiment).
If the user is determined to be the user who has the operation authority for the function, the process proceeds to step S328. On the other hand, if it is determined that the user does not have operation authority, the process proceeds to step S351.

In step S<b>328 , the device operation control unit 1043 of the server 10 stores the user ID, the device ID, the function ID, and the operation success value “True” included in the operation request in the operation log table 1019 .
In the user output process, if the device operation process is executed by operating the operation button 8105 displayed on the display 2062 of the user terminal 20, the processes from steps S322 to S327 are omitted and the process proceeds to step S328. can be This is because the determination of the operation authority for the user has been completed.

In step S329, the device operation control unit 1043 of the server 10 refers to the function table 1013 from the function ID included in the operation request and searches for the function method associated with the function ID. The device operation control unit 1043 of the server 10 transmits a device request including the function method to the device terminal 60 specified by the device ID included in the operation request (output step). Device terminal 60 receives the device request. The device control unit 6042 of the device terminal 60 controls the device 208 based on the function method information included in the device request.
For example, if the device is a door, it controls locking or unlocking of the key. For example, if the device is an air conditioner, it switches the air conditioner and controls the temperature adjustment.
The device request may include parameters for operating and controlling the functions of the device included in the operation request. For example, if the device is an air conditioner, the parameters include the amount of temperature adjustment, the amount of air flow and air direction adjustment, and the like.
The device operation control unit 1043 of the server 10 stores the transmission date and time of the device request to the device terminal 60 in the start date and time of the operation log table 1019 .

In step S<b>330 , the device control unit 6042 of the device terminal 60 transmits a response indicating that the control of the device 208 is finished to the server 10 after finishing the control of the device 208 . The device operation control unit 1043 of the server 10 stores the reception date and time of the response in the end date and time of the operation log table 1019 .
Note that the device operation control unit 1043 of the server 10 may store the date and time when a predetermined period of time has passed since the device request transmission date and time as the end date and time of the operation log table 1019 . In this case, the server 10 need not receive a response from the device terminal 60 .

In step S331, the captured data storage control unit 1044 of the server 10 executes captured data storage processing. Details of the photographed data storage processing will be described later.

In step S332, the device operation control unit 1043 of the server 10 transmits to the user terminal 20 a response to the effect that the device operation process was successful. Based on the response, the user terminal 20 may notify the user via the display 2062, the speaker 2082, etc. that the device operation process has succeeded.

In step S<b>351 , the device operation control unit 1043 of the server 10 stores the user ID, the device ID, the function ID, and the operation success value “False” included in the operation request in the operation log table 1019 .

In step S352, the device operation control unit 1043 of the server 10 transmits to the user terminal 20 a response to the effect that the device operation processing has failed. Based on the response, the user terminal 20 may notify the user via the display 2062, the speaker 2082, etc. that the device operation process has failed.

<Device Operation Processing (Modified Example)>
In step S301 of the device operation process, the user transmits an operation request including the user ID, the device ID, and the function ID to the server 10 via the input device 606 provided integrally or separately with the device terminal 60. Also good.

The user designates the function (function ID) of the device by operating the operation button 6064 . At this time, the input control unit 6041 of the device terminal 60 reads the user's fingerprint from the fingerprint reading unit 6062 of the input device 606, and refers to a database (not shown) in which the user ID registered in advance is associated with the fingerprint data. , to retrieve the user ID of the user.
Note that the device terminal 60 may retrieve the user ID of the user from the physical features such as the face of the user operating the device captured by the camera 6061 . The device terminal 60 may acquire the user ID of the user from an information identification device such as a non-contact IC card possessed by the user by means of the non-contact reading section 6063 through wireless communication.

The device terminal 60 transmits to the server 10 an operation request including the user ID obtained from the input device 606, the device ID 6011, and the function ID specified by the user. With this configuration, the user can operate the function of each device by naturally operating the user interface for each function provided in the device.

For example, if device 208 is a door, input device 606 may be configured as a doorknob, handle, handle, lock, or the like. For example, when the device 208 is an air conditioner, the input device 606 may be configured as a remote controller or the like. For example, if device 208 is a safe, input device 606 may be configured as a knob, combination lock, handle, or the like.

In step S<b>332 of the device operation process, the server 10 may be configured to transmit a response to the effect that the device operation process was successful to the device terminal 60 . Similarly, in step S352 of the device operation processing, the server 10 may be configured to transmit a response to the effect that the device operation processing was successful to the device terminal 60. FIG.
Based on the response, the device terminal 60 may notify the user of the success or failure of the device operation process via an output device such as a display or speaker (not shown).

<Shooting data storage processing>
The photographed data storage control unit 1044 of the server 10 performs photographed data storage processing for storing, as moving images, various functions of the device operated by the user.
Specifically, when the user's operation on the device ends (when the end date and time are specified), the captured data storage control unit 1044 of the server 10 searches the captured data table 1015 using the device ID as a key, and to search for shooting data. The imaged data storage control unit 1044 of the server 10 extracts the moving image data for a predetermined period from the start date and time to the end date and time from the imaged data, and extracts the moving image data column of the record in which the corresponding operation history of the operation log table 1019 is stored. store the video data in the

If the shooting data table 1015 holds shooting data for a sufficient period, the start date and time and the ending date and time stored in the operation log table 1019 are referred to, and the shooting data of the shooting data table 1015 that has been operated by the user is checked. Since the state of various functions of each device can be checked, the photographed data storage processing may be omitted. Further, data that refers to the shooting data stored in the shooting data table 1015 may be stored in the moving image data column of the operation log table 1019 .

In extracting the moving image data, the moving image data may be extracted from a predetermined time (for example, several minutes) before the start date and time (predetermined time before) to a predetermined time after the end date and time. Thereby, the user can confirm from the moving image data whether or not the user is performing an appropriate operation on the device during the time period before the start date and time.
Depending on the device and function, the moving image data may be extracted during a period from a predetermined time before the start date and time to a predetermined time after the end date and time. For example, in the case of a device and a function that require operation by the user prior to the operation start date and time of the device, video data of the period from the time before the start date and time to the end date and time or the time after the end date and time after the predetermined time is configured to extract As a result, it is possible to store, as moving image data, work performed by the user prior to the operation start date and time of the apparatus. Note that the predetermined time that goes back from the start date and time may be time according to the device and function. As a result, it is possible to store the moving image data for the optimum time according to the device and function.

<Modification>
In the user output process (first embodiment), user output process (second embodiment), and device operation process, the area ID and first authority area for each device and function are determined for each device and function. Although the configuration for comparing the value, the second authority threshold value, the area ID, the first authority, and the second authority for each user has been described, the operation based only on the first authority threshold for each function and the first authority for each user has been described. It may be configured to determine whether or not there is authority.

For example, in area table 1014, all area IDs can be associated with all device IDs. In this way, all users located in any area can have operation authority over all devices. In other words, it is not necessary to use the area ID to determine the presence or absence of operation authority.

For example, in the device table 1012, all device IDs can be associated with a second authority threshold that has operational authority for all second authorities. In this way, a user associated with any second group ID can have operational authority over all devices. In other words, the second authority threshold value and the determination of the presence or absence of the operation authority based on the second authority may not be essential.

<Basic computer hardware configuration>
FIG. 19 is a block diagram showing the basic hardware configuration of the computer 90. As shown in FIG. The computer 90 includes at least a processor 901, a main storage device 902, an auxiliary storage device 903, and a communication IF 991 (interface). These are electrically connected to each other by a communication bus 921 .

The processor 901 is hardware for executing an instruction set described in a program. The processor 901 is composed of an arithmetic unit, registers, peripheral circuits, and the like.

The main storage device 902 is for temporarily storing programs and data processed by the programs. For example, it is a volatile memory such as a DRAM (Dynamic Random Access Memory).

Auxiliary storage device 903 is a storage device for storing data and programs. For example, flash memory, HDD (Hard Disc Drive), magneto-optical disk, CD-ROM, DVD-ROM, semiconductor memory, and the like.

The communication IF 991 is an interface for inputting and outputting signals for communicating with other computers via a network using a wired or wireless communication standard.
The network is composed of various mobile communication systems constructed by the Internet, LAN, wireless base stations, and the like. For example, networks include 3G, 4G, and 5G mobile communication systems, LTE (Long Term Evolution), wireless networks (for example, Wi-Fi (registered trademark)) that can be connected to the Internet through predetermined access points, and the like. When connecting wirelessly, communication protocols include, for example, Z-Wave (registered trademark), ZigBee (registered trademark), Bluetooth (registered trademark), and the like. In the case of wired connection, the network includes direct connection using a USB (Universal Serial Bus) cable or the like.

It should be noted that the computer 90 can be virtually realized by distributing all or part of each hardware configuration to a plurality of computers 90 and connecting them to each other via a network. Thus, the computer 90 is a concept that includes not only the computer 90 housed in a single housing or case, but also a virtualized computer system.

<Basic Functional Configuration of Computer 90>
A functional configuration of the computer realized by the basic hardware configuration of the computer 90 (FIG. 19) will be described. The computer includes at least functional units of a control section, a storage section, and a communication section.

Note that the functional units included in the computer 90 can also be implemented by distributing all or part of each functional unit to a plurality of computers 90 interconnected via a network. The computer 90 is a concept that includes not only a single computer 90 but also a virtualized computer system.

The control unit is implemented by the processor 901 reading out various programs stored in the auxiliary storage device 903, developing them in the main storage device 902, and executing processing according to the programs. The control unit can implement functional units that perform various information processing according to the type of program. Thereby, the computer is implemented as an information processing device that performs information processing.

A storage unit is realized by the main storage device 902 and the auxiliary storage device 903 . The storage unit stores data, various programs, and various databases. Also, the processor 901 can secure a storage area corresponding to the storage unit in the main storage device 902 or the auxiliary storage device 903 according to a program. In addition, the control unit can cause the processor 901 to execute addition, update, and deletion processing of data stored in the storage unit according to various programs.

A database refers to a relational database, and is for managing data sets called tables in tabular form, which are structurally defined by rows and columns, in association with each other. In a database, a table is called a table, columns of a table are called columns, and rows of a table are called records. Relational databases allow you to establish and associate relationships between tables.
Each table usually has a primary key column to uniquely identify a record, but setting a primary key to a column is not essential. The control unit can cause the processor 901 to add, delete, and update records in a specific table stored in the storage unit according to various programs.

A communication unit is implemented by the communication IF 991 . The communication unit implements a function of communicating with another computer 90 via a network. The communication section can receive information transmitted from another computer 90 and input it to the control section. The control unit can cause the processor 901 to execute information processing on the received information according to various programs. Also, the communication section can transmit information output from the control section to another computer 90 .

<Appendix>
The items described in the above embodiments will be added below.

(Appendix 1)
A program to be executed by a computer having a processor and a storage unit, the program acquiring first authority stipulating information, which defines authority for operating functions of the device, to the processor (S123, S223, S325), obtaining first authority information associated with the user (S126, S226, S323), and whether or not the user has the operation authority for the function based on the first authority defining information and the first authority information. A program for executing a first determination step (S127, S227, S327) for determining
As a result, even when a specific user who has been given the operation authority for the function of each device is absent, the user with appropriate authority can operate the function for each device, so that business can be performed smoothly.

(Appendix 2)
Note that the first determination step is a step (S127, S227, S327) of determining whether or not the user has the operation authority for the function by comparing the first authority stipulation information and the first authority information. 1. The program described in 1.
As a result, even when a specific user who has been given the operation authority for the function of each device is absent, the user with appropriate authority can operate the function for each device, so that business can be performed smoothly.

(Appendix 3)
The program instructs the processor to obtain device area information associated with the device (S122, S222, S324), obtain user area information associated with the user (S124, S224, S322), device area 3. The program according to appendix 1 or 2, causing execution of an area determination step (S124, S224, S326) for determining whether or not the user has the operation authority for the function based on the information and the user area information.
As a result, it is possible to set the operation authority for each device and function only for users located in areas assigned to each device. For devices and functions that require on-site operation, the operation authority can be limited only to users on-site.

(Appendix 4)
Supplementary Note 1: The first determination step is a step of determining that the user has the operation authority based on the first authority stipulating information and the first authority information when the user has the highest priority in the first authority information. 3. The program according to any one of -3.
Thereby, the operation authority can be delegated to the user having lower authority only when the user having higher authority is absent.

(Appendix 5)
The program instructs the processor to acquire second authority stipulating information that defines the authority to operate the device (S122, S222, S324) and to acquire second authority information associated with the user (S126, S226). , S323) and a second determination step (S127, S227, S327) of determining whether or not the user has the operation authority for the function based on the second authority stipulation information and the second authority information. 5. The program according to any one of 1 to 4.
This makes it possible to more easily manage the operation authority of functions for each device by combining two types of authority regulation information, the first authority regulation information for each function and the second authority regulation information for each device.

(Appendix 6)
The program instructs the processor to receive a function-related operation instruction from the user (S321), and if it is determined in the first determination step that the user has operation authority over the function, issue a device request for controlling the function. 6. The program according to any one of Appendices 1 to 5, causing an output step (S329) of outputting to the device.
As a result, even when a specific user who has been given the operation authority for the function of each device is absent, the user with appropriate authority can operate the function for each device, so that business can be performed smoothly.

(Appendix 7)
A program to be executed by a computer system comprising a camera and a computer according to Appendices 1 to 6, the program causing a processor to execute a step (S331) of photographing the periphery of the device with the camera.
As a result, it is possible to store the state of various functions of each device operated by the user as photographed data.

(Appendix 8)
7. The program according to Supplementary Note 7, wherein the program causes the processor to store recorded data after a predetermined period of time from a predetermined period of time before the step of receiving the operation among the recorded data captured by the camera (S331).
Thereby, the user can confirm from the moving image data whether or not the user is performing an appropriate operation on the device during the time period before the start date and time.

(Appendix 9)
6. The program according to appendix 5, wherein the second authority and the second authority defining information are authority information relating to departments within the organization.
As a result, it is possible to uniformly grant the operation authority to the device to a specific department within the organization.

(Appendix 10)
10. The program according to any one of Appendices 1 to 9, wherein the first authority and first authority defining information are authority information relating to positions within an organization.
As a result, it is possible to uniformly grant the operation authority for each function of the device to a specific post in the organization.

(Appendix 11)
An information processing apparatus comprising a processor and a storage unit, wherein the processor acquires first authority stipulating information that stipulates authority for operating functions of the apparatus (S123, S223, S325); a step of acquiring the obtained first authority information (S126, S226, S323); and a first determination step of determining whether or not the user has the authority to operate the function based on the first authority defining information and the first authority information. (S127, S227, S327) and an information processing device for executing.

(Appendix 12)
An information processing method executed by an information processing device comprising a processor and a storage unit, wherein the processor acquires first authority stipulating information that defines authority for operating functions of the device (S123, S223, S325), obtaining first authority information associated with the user (S126, S226, S323), and whether or not the user has the operation authority for the function based on the first authority defining information and the first authority information. and a first determination step (S127, S227, S327) for determining the information processing method.

1 information processing system, 10 server, 101 storage unit, 103 control unit, 20A, 20B, 20C user terminal, 201 storage unit, 202 control unit, 40 administrator terminal, 401 storage unit, 402 control unit, 60A, 60B, 60C User terminal, 601 storage unit, 602 control unit

Claims (12)

A program to be executed by a computer comprising a processor and a storage unit,
The program causes the processor to:
a step of obtaining first authority defining information defining authority to operate functions of the device;
obtaining first authorization information associated with the user;
a first determination step of determining whether the user has the operation authority for the function based on the first authority stipulation information and the first authority information;
program to run. The first determination step is a step of determining whether or not the user has the operation authority for the function by comparing the first authority stipulation information and the first authority information.
A program according to claim 1. The program causes the processor to:
obtaining device area information associated with the device;
obtaining user area information associated with the user;
an area determination step of determining whether or not the user has operation authority for the function based on the device area information and the user area information;
to run
3. A program according to claim 1 or 2. The first determination step is a step of determining that the user has the operation authority based on the first authority stipulation information and the first authority information when the user has the highest priority in the first authority information. 4. The program according to any one of items 1 to 3. The program causes the processor to:
obtaining second authority-defining information that defines the authority to operate the device;
obtaining second authorization information associated with the user;
a second determination step of determining whether the user has the operation authority for the function based on the second authority stipulation information and the second authority information;
to run
A program according to any one of claims 1 to 4. The program causes the processor to:
a step of receiving an operation instruction regarding the function from the user;
an output step of outputting a device request for controlling the function to the device when the user is determined to have operation authority for the function in the first determination step;
to run
A program according to any one of claims 1 to 5. A program to be executed by a computer system comprising a camera and the computer according to any one of claims 1 to 6,
The program causes the processor to:
A step of photographing the surroundings of the device with the camera;
program to run. The program causes the processor to:
a step of storing recorded data taken by the camera after a predetermined period of time from a predetermined period of time before the step of accepting the operation;
8. The program according to claim 7, causing the execution of The second authority and second authority defining information are authority information related to a department within an organization,
6. A program according to claim 5. wherein the first authority and first authority defining information are authority information related to a position within an organization;
A program according to any one of claims 1 to 9. An information processing device comprising a processor and a storage unit,
to the processor;
a step of obtaining first authority defining information defining authority to operate functions of the device;
obtaining first authorization information associated with the user;
a first determination step of determining whether the user has the operation authority for the function based on the first authority stipulation information and the first authority information;
Information processing device that executes An information processing method executed by an information processing device comprising a processor and a storage unit,
to the processor;
a step of obtaining first authority defining information defining authority to operate functions of the device;
obtaining first authorization information associated with the user;
a first determination step of determining whether the user has the operation authority for the function based on the first authority stipulation information and the first authority information;
Information processing method that causes the execution of

Images