JP4170248B2 - Approval method and approval system - Google Patents

Description

  The present invention relates to an approval method and an approval system performed through a communication network, and an external storage device used in the approval system.

  Approval for approval by the superior is still made by the seal or handwritten signature of the approver who makes the approval from the viewpoint of clarity and confidentiality of responsibility. In this case, there was a problem that the approval process could not proceed quickly, such as it was delayed to look through the approval document because it was mixed with other documents, or it took time for the approval document to reach the person in charge. .

A method has been proposed in which an environment in which a personal computer terminal is always connected to a network is prepared and an approval process is performed from a personal computer terminal in an arbitrary place through a communication network (for example, see Patent Document 1). However, the conventional approval method merely restricts the access right of the approval document by using an ID and a password as a method for ensuring that the approval process is performed by an authorized approver. For this reason, even if an unauthorized decision process is performed by a person other than the one who knows the ID and password, it cannot be distinguished from the contents of a valid decision process. Although there is a means for confirming an authorizer by fingerprint authentication or the like, it is a means for preventing an illegal approval process as in the case of a password, and it is not possible to distinguish between an authorized approval process and an illegal approval process. As described above, if the approval process can be performed from a client in an arbitrary place through the communication network, it is not possible to distinguish between a legitimate approval process and an illegal approval process, resulting in a problem that reliability of the approval process is lowered.
JP-A-6-332818

  The problem to be solved is that in a system that performs an approval process using a communication network, an approval process can be performed by an arbitrary client in an arbitrary location, and a proper approval process and an illegal approval process are performed. It is an object of the present invention to provide an approval method, an approval system, and an external storage device used for the approval system.

  According to the present invention, when the approval process is performed by the client, the server connected via the communication network confirms the external storage device connected to the client, and the approval process can be performed only when the external storage device is confirmed. An arbitrary client at an arbitrary location performs an approval process for the approved approval document, and the contents of the approval process are stored and saved in the server and the external storage device. The contents of the approval process include a random number generated at the time of the approval process as well as whether approval is possible.

  The server can transmit / receive to / from any client through the communication network, and stores and saves the contents of the approval process including the random number from the client that has performed the approval process through the communication network.

  The external storage device can be connected to and detached from an arbitrary client, and is connected to a client used by an approver who performs an approval process. The external storage device is connected to a client used by the approver when the approver performs an approval process, and stores and saves the content of the approval process. The contents of the approval process are stored and stored in the external storage device, whereby the contents of the approval process of the individual approver are stored.

  The content of the settlement process including the random number stored and stored in the server is compared with the content of the settlement process including the random number stored and stored in the external storage device as necessary. As a result, it is possible to confirm that the content of the approval process stored and stored in the server is that of the approver. Therefore, it is possible to provide a settlement method and a settlement system that can perform a settlement process with any client in any place and can distinguish between a legitimate settlement process and an unauthorized settlement process. become.

Specifically, the approval method according to the present invention is an approval method using a communication network in which an approval document that has been applied is approved by a client, and the contents of the approval processing are stored and stored in a server. The application document acquisition step in which the client acquires the approved approval document, the information specific to the removable external storage device connected to the arbitrary client and the external stored in advance in the server The external storage device confirmation step of confirming the client as an approval client by collating with information unique to the storage device, and whether or not the arbitrary client that has acquired the approval document by the application document acquisition step can accept the input The approval information acquisition step for acquiring the approval information including the application document acquisition step, and Random number generation step in which the arbitrary client that has obtained the written document or the external storage device confirmed in the external storage device confirmation step generates a random number, and the decision document and / or the decision information obtained in the application document acquisition step The external storage step in which the arbitrary client stores and saves the decision information acquired in the acquisition step and the random number generated in the random number generation step in the external storage device as the verified decision information, and the application document acquisition step. An approval information transfer process in which the arbitrary client transfers the approval information acquired in the approval document and / or the approval information acquisition step and the random number generated in the random number generation step as unverified approval information to the server through the communication network. And an approval information storage step in which the server stores and stores the unverified approval information transferred in the approval information transfer step, and an arbitrary client including the arbitrary client is the input transfer instruction. A transfer instruction acquisition step for acquiring a transfer instruction for instructing transfer of the verification decision information, and the arbitrary client that has acquired the transfer instruction in the transfer instruction acquisition step stores the transfer instruction in the external storage device by the external storage step. An external storage transfer step of transferring at least the random number of the stored verification decision information to the server through the communication network; and the random number transferred by the server at least in the external storage transfer step and the decision information Decision information to collate with the random number stored and saved in the saving step And a collating step.

  According to the present invention, the requested approval document can be approved using an arbitrary client. Each time the approval process is performed, a random number is generated, and the content of the approval process including the random number is stored and stored in a server through a communication network, and the external storage device owned by the approver connected to the client Remember to save. As a result, the contents of the approval process stored and stored in the server and the contents of the approval process stored and stored in the external storage device are collated as necessary. It can be confirmed that the content of the final approval process is by the approver. Therefore, it is possible to provide a settlement method that can be performed by any client in any place and that can distinguish between a legitimate settlement process and an unauthorized settlement process.

  It is preferable that before the external storage device confirmation step, there is further provided an external storage device requesting step for requesting that the arbitrary client connects the external storage device to an interface provided in the arbitrary client. By urging that an external storage device is required when performing the approval process, it is possible to prevent an unauthorized approval process from occurring due to a legal authorizer forgetting to connect to the external storage device. For this reason, it is possible to quickly respond when a truly illegal approval process is performed. Therefore, it is possible to perform an approval process with an arbitrary client at an arbitrary location, and it is possible to distinguish between an authorized approval process and an unauthorized approval process, and an unauthorized approval process has been performed. It becomes possible to provide an approval method that can respond quickly.

The approval system according to the present invention is an approval system including an approval client, a transfer client, and a server connected through a communication network, and the approval client acquires the requested approval document to the approval client. An application document acquisition means, an approval information acquisition means for acquiring approval information input to the approval client and including approval / disapproval, and a removable external storage device connected to the approval client. Acquired by the external storage device confirmed by the external storage device confirmation means to be confirmed, or by a random number generation means for generating a random number by the decision making client, and the decision document obtained by the application document obtaining means and / or the decision information obtaining means The decision information and the random number generating means An external storage unit that stores and saves the number as verification approval information in the external storage device, the approval document acquired by the application document acquisition unit and / or the approval information acquired by the approval information acquisition unit and the random number generation unit Approval information transfer means for transferring the generated random number as unverified approval information to the server through the communication network, wherein the transfer client is a transfer instruction input to the transfer client, and is sent to the server. Transfer instruction acquisition means for acquiring transfer instructions for instructing transfer of verification decision information through the communication network, and transfer instructions acquired by the transfer client by the transfer instruction acquisition means by the external storage means to the external storage device At least before the verification decision information stored and saved Comprising an external storage transfer means for transferring the random number to said server through said communication network, wherein the server is stored in advance stored in the connected removable the external storage device specific information and the server on the settlement client The external storage device confirmation means for confirming the client as the decision-making client by collating with the information unique to the external storage device, and the unverified decision information transferred from the decision-making client by the decision information transfer means is stored and saved An approval information storage means for determining, and at least the random number stored and stored by the approval information storage means and an approval information verification means for verifying at least the random number transferred from the transfer client by the external storage transfer means.

  An approval client is an arbitrary client capable of performing an approval process for obtaining an approved approval document, generating the random number, storing and storing it in the external storage device, and transferring the unverified approval information to the server. It's okay. The transfer client may be any client capable of performing a transfer process for acquiring the transfer instruction and transferring the verified decision information from the external storage device to the server. As described above, the approval process and the transfer process can be performed using an arbitrary client. Each time the approval process is performed, a random number is generated, and the content of the approval process including the random number is stored and stored in a server through a communication network, and the external storage device owned by the approver connected to the client Remember to save. As a result, the contents of the approval process stored and stored in the server and the contents of the approval process stored and stored in the external storage device are collated as necessary, and stored and stored in the server. It is possible to confirm that the content of the approval process being performed is the approval by the approver. Accordingly, it is possible to provide an approval system that can perform an approval process by an arbitrary client in an arbitrary place and can distinguish between a valid approval process and an illegal approval process.

  The approval client further includes an external storage device requesting unit that requests connection of an external storage device to an interface provided in the approval client, and the external storage device that is confirmed by the external storage device confirmation unit is determined by the external storage device requesting unit. Preferably the requested external storage device.

  By urging that an external storage device is required when performing the approval process, it is possible to prevent an unauthorized approval process from occurring due to a legal authorizer forgetting to connect to the external storage device. For this reason, it is possible to quickly respond when a truly illegal approval process is performed. Therefore, it is possible to perform an approval process with an arbitrary client at an arbitrary location, and it is possible to distinguish between an authorized approval process and an unauthorized approval process, and an unauthorized approval process has been performed. It becomes possible to provide an approval method that can respond quickly.

  INDUSTRIAL APPLICABILITY According to the present invention, an approval method, an approval system, and an approval system capable of performing an approval process by an arbitrary client in an arbitrary place and capable of distinguishing between an authorized approval process and an unauthorized approval process It is possible to provide an external storage device used for the above.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In addition, this invention is not limited to embodiment shown below.
(Embodiment 1)
First, an approval system using a network according to the present invention will be described with reference to FIG. FIG. 1 is a conceptual diagram showing the information flow of the decision making system according to the present invention.

  The approval system according to the present invention includes a communication network 11, an approval client 21, an external storage device 31, a transfer client 22, and a server 15. The approval client 21 is connected to the server 15 through the communication network 11. An external storage device 31 is connected to the approval client 21. The transfer client 22 is connected to the server 15 through the communication network 11. An external storage device 31 is connected to the transfer client 22. The approval client 21 and the transfer client 22 do not operate at the same time, and the external storage device 31 is connected when they operate.

  The communication network 11 is capable of transferring the content of the finalized approval process. A signal transmitted from a transmission device included in the admission client, the transfer client, and the server may be transmitted and delivered to a specified address. The transmission means may transmit an electric signal, but may be other than that. For example, an optical signal may be transmitted. For example, a wireless signal may be transmitted. Also, a local area network may be used or the Internet may be used. Further, it may be encrypted and transmitted / received.

  The approval client 21 finalizes the applied approval document A, stores and saves the content of the approval processing, and transfers the content of the approval processing through the communication network 11. The approval client 21 includes an application document acquisition unit 61, an approval information acquisition unit 62, a random number generation unit 63, an external storage unit 64, and an approval information transfer unit 65. The approval client 21 displays the approval document A acquired by the application document acquisition unit 61, and acquires the approval information B including approval / disapproval of the approval document A by the approval information acquisition unit 62. The approval client 21 generates a random number C by the random number generation means 63 and causes the external storage means 64 to store and save the contents of the approval process including the approval information B as the verification approval information E in the external storage device 31. The approval client 21 transfers the contents of the approval process including the approval information B as unverified approval information F to the server 15 through the communication network 11. The approval client 21 can use any client having the above functions.

  The application document acquisition means 61 acquires the applied approval document A. The application document acquisition means 61 may acquire the approval document A stored and stored in the server 15 to the approval client 21 through the communication network 11. The approval client 21 may obtain the approval document A stored and stored in an external storage medium such as a compact disk or MO. The applied approval document A is an electronic document. The saving format of the approval document A is not limited. For example, an html format, an xml format, a pdf format, or a text format can be used.

  The application document acquisition means 61 has a function of requesting input of an ID and password before the approval client 21 acquires the approval document A, and the ID and password input to the approval client 21 and the server 15 or the external storage device 31. And a function of acquiring the approval document A by matching with the stored ID and password. As a result, only the person who knows the ID and password stored and stored in advance in the server 15 or the external storage device 31 can be permitted to obtain the approval document A. For this reason, it becomes possible to prevent an approval process by a person other than the person who knows the ID and password.

  Further, the application document acquisition means 61 includes a function for the approval client 21 to request input of ID and biometric information before the approval client 21 acquires the approval document A, and the ID and biometrics input to the approval client 21. And a function of acquiring the approval document A by matching the information with the ID and biometric information stored and stored in the server 15 or the external storage device 31. Biometric information is not limited. For example, fingerprints, voiceprints, irises, ear shapes and faces. Thereby, it is possible to allow only those who have the biometric information of the authorizer, that is, the authorizer himself to obtain the approval document. For this reason, it becomes possible to prevent the approval process of a person other than the approver.

  The approval information acquisition unit 62 acquires approval information B that is input to the approval client 21 and includes approval / disapproval. Information input by a keyboard provided in the approval client 21 may be acquired. Information input by input means such as an input pad or a scanner may be acquired. The approval information B acquired by the approval information acquisition unit 62 only needs to include approval / disapproval of the approval document A. The approval information B may include information related to the approval process such as items to be transmitted from the approver, the department and name of the approver, and the time at which the approval process is performed.

  The random number generation means 63 receives the random number C from the external storage device 31 confirmed by the external storage device confirmation means 77 for confirming the removable external storage device 31 connected to the approval client 21 provided in the server 15 or the approval client 21. Is generated. The random number generation means 63 may generate a random number C using an arithmetic processing device mounted on the approval client 21. The random number generation means 63 may acquire the random number C generated by the arithmetic processing device provided in the external storage device 31 from the external storage device 31. The generated random number C may include a numerical value unique to the external storage device 31 in part.

  The external storage unit 64 uses the approval document A acquired by the application document acquisition unit 61 and / or the approval information B acquired by the approval information acquisition unit 62 and the random number C generated by the random number generation unit 63 as the verification approval information E as an external storage device. 31 is stored and saved. Any external storage device 31 connected to the approval client 21 may be used as long as the verification approval information E can be stored and saved. It may be one that can be stored and saved through a conventional interface such as a USB interface or an IEEE1394 interface.

  The approval information transfer unit 65 uses the approval document A acquired by the application document acquisition unit 61 and / or the approval information B acquired by the approval information acquisition unit 62 and the random number C generated by the random number generation unit 63 as unmatched approval information F as the server 15. To be transferred to. The approval information transfer means 65 may be transmitted using a transmission means provided in the approval client 21 and transferred to the server 15 through the communication network 11.

  The external storage device 31 stores and saves the contents of the approval process approved by the approval client 21 as collated approval information E. The external storage device 31 finalizes the requested approval document A, stores the content of the approval processing in the external storage device 31 that can be connected and removed, and stores the unverified approval information F that is the content of the approval processing. Connected to the approval client 21 for transferring through the communication network 11, the transfer client 22 for transferring the contents of the approval process stored and stored in the external storage device 31 through the communication network 11 as checked approval information E, and the approval client 21 The external storage device 31 is confirmed, the unverified decision information F that is the contents of the decision process transferred by the decision client 21 is stored and saved, and the unmatched decision information F that is the contents of the decision process and the decision that is transferred by the transfer client 22 This is used in a settlement system including a server 15 that collates collated settlement information E, which is the content of processing. The external storage device 31 further includes a random number C generated by the approval client 21 and the approval document input or transferred to the approval client 21 and / or the approval information input to the approval client 21 and including approval / disapproval information B Is stored and saved as verified decision information E.

  The external storage device 31 only needs to be connectable to and removable from the decision making client 21 and the transfer client 22, store and save the collation decision decision information E, and can be read by the transfer client 22.

  For example, there is a personal computer device 32 using a semiconductor storage device that can be connected to a USB interface to perform writing / reading. The personal computer device 32 includes a storage storage unit 36 that can store and save the verified decision information E, and a connection unit 37 that connects the storage storage unit 36 to the approval client 21 and the transfer client 22. The storage storage unit 36 and the connection unit 37 are electrically connected, and the approval client 21 stores and stores the verified decision information E in the storage storage unit 36 through the connection unit 37. Further, the transfer client 22 reads the verified decision information E from the storage storage unit 36 through the connection unit 37.

  The storage storage unit 36 may be a conventional one that can store and store digital signals such as a semiconductor storage device and an optical recording device. It may be one that can be added only from the approval system. By limiting the additional writing, the reliability of information stored and saved in the external storage device 31 can be improved. By making the memory storage unit 36 resistant to impact, it becomes possible to provide the personal computer device 32 that can be always carried by the authorizer.

  The connection unit 37 is attached to the USB interface provided in the approval client 21 and the transfer client 22, and connects the approval client 21 or the transfer client 22 and the storage storage unit 36. The interface to which the connection unit 37 is attached is not limited to the USB interface. Magnetic information stored in the card or information stored in the IC chip may be read. It may be a general-purpose interface that can be connected to and detached from any client including a mobile terminal such as a personal computer, an electronic notebook, and a mobile phone.

  The external storage device 31 may further include external random number generation means 35 that generates a random number C. The external random number generator 35 is provided in the external storage device 31 and can generate a random number C in the external storage device 31. Since the external storage device 31 includes the external random number generation means 35, a value unique to the external storage device can be added. For example, the first 5 digits of a 15-digit numerical value may be a value unique to the external storage device 31, and the remaining 10 digits may be random numbers. This makes it possible to clarify the external storage device that has performed the approval process. Therefore, it is possible to provide an approval system that can perform an approval process with an arbitrary client at an arbitrary location and can prevent an illegal approval.

  Note that the external storage device 31 may not be an independent device having the above functions. That is, it may be provided as one of the functions of a card-type memory or a mobile phone that has a function of storing information.

  The transfer client 22 transfers the verified decision information E stored and saved in the external storage device 31 through the communication network 11. The transfer client 22 includes a transfer instruction acquisition unit 71 and an external storage transfer unit 72.

  The transfer instruction acquisition unit 71 is a transfer instruction that is input to the transfer client 22 and that acquires a transfer instruction that instructs the server 15 to transfer the verified decision information E through the communication network 11. The transfer instruction may be sent from the server 15 to the electronic mail address owned by the authorizer using the electronic mail. The transfer instruction may be sent directly to the authorizer via telephone, e-mail, facsimile, or the like by a person involved in the approval system.

The external storage transfer unit 72 uses the transfer instruction acquired by the transfer client 22 by the transfer instruction acquisition unit 71 to transmit at least the random number C of the verification decision information E stored and stored in the external storage device 31 by the external storage unit 64. 11 to the server 15. For example, when the verified decision information E is the decision document A, the decision information B, and the random number C, only the decision information B and the random number C may be transferred.
The transfer client 22 can use any client having the above functions.

  The server 15 confirms the external storage device 31, stores and stores the unmatched decision information F transferred by the decision making client 21, and compares the unmatched decision information F with the matched decision information E transferred by the transfer client 22. The server 15 includes an external storage device confirmation unit 77, an approval information storage unit 73, and an approval information collation unit 74.

  The external storage device confirmation unit 77 confirms the removable external storage device 31 connected to the approval client 21. The external storage device confirmation unit 77 only needs to collate the information of the external storage device 31 connected to the approval client 21 with the information of the external storage device 31 stored and stored in the server 15 in advance.

  For example, the external storage device confirmation unit 77 acquires device information G specific to the external storage device 31 from the approval client 21 to which the external storage device 31 is connected, and stores the external storage device 31 stored in advance in the server 15. The device information G may be checked against the device information G. The approval process may be advanced when the device information G stored in the server 15 and stored in the external storage device 31 matches the device information G transferred from the approval client 21. If the external storage device confirmation unit 77 cannot acquire the device information G from the approval client 21, it is possible to prevent unauthorized approval by setting so that the approval process is stopped.

  The device information G may be information automatically acquired by the approval client 21 when the external storage device 31 is connected to the approval client 21. The device information G may be hardware information that the external storage device 31 has. The device information G may be information stored and saved in the external storage device 31. In this case, the approval client 21 instructed by the external storage device confirmation unit 77 may access the external storage device 31 and acquire the device information G from the external storage device 31.

  Further, the external storage device confirmation unit 77 may further have a function of collating and confirming the password input to the approval client 21 and the password stored and stored in the server 15 or the external storage device 31. . The approver 41 inputs the password to the approval client 21, and the external storage device confirmation unit 77 acquires the password input to the approval client 21, and verifies the input password against the stored and stored password. .

  The external storage device confirmation unit 77 further has a function of collating and confirming biometric information input to the approval client 21 and biometric information stored and stored in the server 15 or the external storage device 31. May be. The approver 41 inputs the biometric information to the approval client 21, the biometric information input to the approval client 21 is acquired by the external storage device confirmation unit 77, and the input biometric information and the stored biometrics are stored. Check against the information. Biometric information is not limited. Biometric information includes, for example, fingerprints, voiceprints, irises, ear shapes, and faces.

  When the password and / or biometric information are stored and stored in the server 15, the external storage device confirmation unit 77 may acquire the password stored and stored in the server 15.

  When the password and / or biometric information is stored and stored in the external storage device 31, the password and / or biometric information is obtained from the external storage device 31 by including the password and / or biometric information in the device information G. It can also be acquired by the external storage device confirmation unit 77. Further, when the approver 41 inputs the password and / or biometric information to the approval client 21, the approval client 21 accesses the external storage device 31 to acquire the password and / or biometric information, and the input password and / or biometric information is obtained. The metrics information and the password and / or biometric information acquired from the external storage device 31 may be transferred to the server 15 through the communication network 11. By confirming the password and / or biometric information in this way, only the person who knows the password and / or biometric information stored and stored in advance can be authorized. For this reason, it becomes possible to prevent the approval process by a person other than the person who owns the password and / or biometric information.

  The approval client 21 further includes external storage device requesting means 78 for requesting connection of the external storage device 31 to an interface provided in the approval client 21, and the external storage device 31 confirmed by the external storage device confirmation means 77 is an external storage device request. The external storage device requested by the means 78 may be used.

  For example, in the external storage device request unit 78, the approval client 21 displays that the external storage device 31 is connected after the application document acquisition unit 61 accesses the server 15 and acquires the approval document A. The display method is not limited. For example, the display may be performed by displaying on a screen, but may be performed by a lamp or sound. The external storage device confirmation unit 77 confirms the external storage device 31 connected to the displayed approval client 21. In this way, by prompting that an external storage device is required when performing the approval process, it is possible to prevent an unauthorized approval process from being caused by forgetting to connect the external storage device 31 of a valid authorizer. For this reason, it is possible to quickly respond when a truly illegal approval process is performed.

  It should be noted that the external storage device confirmation unit 77 may be arranged anywhere as long as it precedes the random number generation unit 63. That is, when the random number generation means 63 is arranged after the application document acquisition means 61, the external storage device confirmation means 77, and the approval information acquisition means 65, the application document acquisition means 61, the external storage device confirmation means 77, , It may be arranged anywhere in the approval information acquisition means 65. Further, they may be arranged in parallel. For example, if it is in parallel with the application document acquisition unit 61, the external storage device confirmation unit 77 may operate when the approval client 21 accesses the server 15.

  The approval information storage unit 73 stores and stores the unverified approval information F transferred from the approval client 21 by the approval information transfer unit 65. The verification information E transferred from the transfer client 22 is stored and stored by the approval information storage means 73.

  The approval information collating unit 74 collates at least the random number C stored and stored by the approval information storing unit 73 and at least the random number C transferred from the transfer client 22 by the external storage transfer unit 72. The decision information collating means 74 is capable of collating at least random numbers. The approval information collating unit 74 may collate the document number of the approval document together with a random number. A plurality of random numbers may be collated by parallel processing.

  Note that at least two of the approval client 21 and the transfer client 22 may be mounted on one information processing apparatus. The information processing apparatus is an apparatus capable of performing arithmetic processing such as a personal computer, an electronic notebook, and a mobile phone. Since one information processing apparatus has the functions of at least two of the approval client 21 and the transfer client 22, an approval system can be constructed using an arbitrary client. Therefore, the approval process can be performed by an arbitrary client in an arbitrary place.

An approval method of the approval system according to the present invention will be described with reference to FIG. FIG. 2 is a diagram for explaining an approval method for the approval system shown in FIG.
The approval method shown in FIG. 2 is an arbitrary approval method using the communication network 11 in which the approved approval document A is processed by the client, and the contents of the approval processing are stored in the server 15 and collated. An application document acquisition step (S101) in which the client 51 acquires the requested approval document A, and an external storage device confirmation step (S110) in which the server 15 confirms the removable external storage device 31 connected to the arbitrary client 51. , And an approval information acquisition step (S102) in which the arbitrary client 51 that has acquired the approval document A in the application document acquisition step (S101) acquires the approval information B including whether or not the input approval is accepted, and an application document acquisition step Any client 51 or external storage device confirmation step (S101) that has obtained the approval document A in (S101) The external storage device 31 confirmed in 10) generates a random number C (S103), and the approval document A acquired in the application document acquisition step (S101) and / or the approval information acquisition step (S102). The external storage step (S104) in which the arbitrary client 51 stores and saves the information A and the random number C generated in the random number generation step (S103) as the verified decision information E in the external storage device 31 and the application document acquisition step (S101) Arbitrary clients 51 send the obtained approval document A and / or the approval information B acquired in the approval information acquisition step (S102) and the random number C generated in the random number generation step (S103) as unverified approval information F to the server through the communication network 11. Confirmation information transfer step to be transferred (S105), an approval information storage step (S106) in which the server stores and stores the unverified approval information F transferred in the approval information transfer step (S105), and an arbitrary client 52 including an arbitrary client 51, A transfer instruction acquisition step (S107) for acquiring a transfer instruction that is an input transfer instruction for instructing transfer of the verification decision information, and any client 52 that has acquired the transfer instruction in the transfer instruction acquisition step (S107) An external storage transfer step (S108) for transferring at least the random number C of the verification decision information E stored and stored in the external storage device 31 in the storage step (S104) to the server 15 through the communication network 11, and the server 15 at least Random number C transferred in the external storage transfer step (S108) and approval information A decision information collation step (S109) for collating the random number C stored and saved in the saving step (S106).

  In the application document acquisition step (S101), an arbitrary client 51 used by the authorizer 41 acquires the approved document A. In the application document acquisition step (S101), the approval document A stored and stored in the server 15 may be acquired by the arbitrary client 51 through the communication network 11. The approval client 21 may obtain the approval document stored and saved in an external storage medium such as a compact disk or MO.

  In the application document acquisition step (S101), before the arbitrary client 51 acquires the approval document A, the arbitrary client 51 requests input of an ID and password, and the ID and password input to the arbitrary client 51 An arbitrary client 51 may acquire the approval document A when the ID and password stored and saved in the server 15 or the external storage device 31 match. As a result, only the person who knows the ID and password stored and stored in advance in the server 15 or the external storage device 31 can be permitted to obtain the approval document A. For this reason, it becomes possible to prevent an approval process by a person other than the person who knows the ID and password.

  In addition, in the application document acquisition step (S101), before the arbitrary client 51 acquires the approval document A, the arbitrary client 51 requests input of ID and biometric information, and the ID input to the arbitrary client 51 When the biometric information matches the ID and biometric information stored and stored in the server 15 or the external storage device 31, any client 51 may obtain the approval document A. Thereby, it is possible to allow only those who have the biometric information of the authorizer, that is, the authorizer himself to obtain the approval document. For this reason, it becomes possible to prevent the approval process of a person other than the approver.

  In the external storage device confirmation step (S110), the server 15 confirms the removable external storage device 31 connected to the arbitrary client 51. The method by which the server 15 confirms the external storage device 31 is not limited. In the external storage device confirmation step (S110), the information of the external storage device 31 connected to the arbitrary client 51 may be collated with the information of the external storage device 31 stored and stored in the server 15 in advance.

  For example, the server 15 sends an instruction to search for device information G included in the external storage device 31 to an arbitrary client 51. The arbitrary client 51 that has received the instruction from the server 15 searches the instructed device information G. The arbitrary client 51 acquires the device information G when the device information G is found. The arbitrary client 51 transfers the device information G to the server 15 through the communication network 11. The server 15 checks the device information G transferred from the arbitrary client 51 by checking it against the device information G of the external storage device 31 stored and stored in the server 15 in advance. When the device information G of the external storage device 31 stored and stored in the server 15 matches the device information G of the external storage device 31 transferred from an arbitrary client 51, the approval process may be advanced. For example, a random number can be generated or the external storage unit 31 can be written. If the device information G is not found when the arbitrary client 51 searches for the device information G, an unauthorized decision can be prevented by setting so that the decision process is stopped.

  Further, in the external storage device confirmation step (S110), the password input to the arbitrary client 51 and the password stored and stored in the server 15 or the external storage device 31 may be verified. The password input to the arbitrary client 51 by the authorizer 41 and the password stored and saved in the server 15 or the external storage device 31 are collated and confirmed. By confirming the password in this way, the approval process can be permitted only to those who know the password stored and stored in advance. For this reason, it becomes possible to prevent an approval process by a person other than the person who owns the password.

  In the external storage device confirmation step (S110), the biometric information input to the arbitrary client 51 and the biometric information stored and stored in the server 15 or the external storage device 31 may be further verified. Good. The biometric information input to the arbitrary client 51 by the authorizer 41 and the biometric information stored and stored in the server 15 or the external storage device 31 are collated and confirmed. Biometric information is not limited. Biometric information includes, for example, fingerprints, voiceprints, irises, ear shapes, and faces. By confirming the biometric information in this way, only those who know the biometric information stored and stored in advance can be authorized. For this reason, it becomes possible to prevent the approval process by a person other than the person who owns the biometric information.

Before the external storage device confirmation step (S110), an arbitrary client 51 further includes an external storage device request step (S111) for requesting connection of the external storage device 31 to an interface provided in the arbitrary client 51. Also good.
In the external storage device request step (S111), an arbitrary client 51 indicates that the external storage device 31 is connected after the arbitrary client 51 accesses the server 15 and acquires the approval document A in the application document acquisition step (S101). Is displayed. In the external storage device confirmation step (S110), the external storage device 31 connected to the arbitrary client 51 displayed in the external storage device request step (S111) is confirmed. The display method in the external storage device request step (S111) is not limited. For example, the display may be performed by displaying on a screen, but may be performed by a lamp or sound. In this way, by prompting that an external storage device is necessary when performing the approval process, it is possible to prevent an unauthorized approval process from occurring due to forgetting to connect the external storage device of a valid authorizer. For this reason, it is possible to quickly respond when a truly illegal approval process is performed.

  The external storage device confirmation step (S110) may be arranged anywhere before the random number generation step (S103). That is, when the random number generation step (S103) is arranged after the application document acquisition step (S101), the external storage device confirmation step (S110), and the approval information acquisition step (S102), the application document acquisition step (S101) As long as it is before or after the approval information acquisition step (S102) after the application document acquisition step (S101), it may be placed anywhere. Further, the external storage device confirmation step (S110) may be arranged in parallel with the application document acquisition step (S101) or the approval information acquisition step (S102). For example, when the external storage device confirmation step (S110) and the application document acquisition step (S101) are arranged in parallel, the external storage device confirmation step (S110) is operated when an arbitrary client 51 accesses the server 15. Thus, the arbitrary client 51 can be made unable to obtain the approval document A if the external storage device 31 is not connected.

  In the approval information acquisition step (S102), the arbitrary client 51 that has acquired the approval document A in the application document acquisition step (S101) receives the approval information B including whether or not the approval is input to the arbitrary client 51 by the approver 41. get. Information input by a keyboard provided in an arbitrary client 51 may be acquired. Information input by input means such as an input pad or a scanner may be acquired. The approval information B only needs to include approval / disapproval of the approval document A. The approval information B may include information transmitted from the approver, the department and name of the approver, and the time at which the approval process was performed.

  In the random number generation step (S103), the random client C that has acquired the final approval document A in the application document acquisition step (S101) or the removable external storage device 31 connected to the arbitrary client 51 generates the random number C. The random number C may be generated using an arithmetic processing device mounted on an arbitrary client 51. An arithmetic processing device may be mounted on the external storage device 31 and the external storage device 31 may generate the random number C. The generated random number C may include a numerical value unique to the external storage device 31 in part.

  In the external storage step (S104), the approval document A acquired in the application document acquisition step (S101) and / or the approval information B acquired in the approval information acquisition step (S102) and the random number C generated in the random number generation step (S103) are received. An arbitrary client 51 is stored and saved in the external storage device 31 as the verification decision information E. It suffices if the verification information E to be verified can be stored and saved in the external storage device 31 connected to the approval client 21.

  In the approval information transfer step (S105), the approval document A acquired in the application document acquisition step (S101) and / or the approval information B acquired in the approval information acquisition step (S102) and the random number C generated in the random number generation step (S103) are used. An arbitrary client 51 transfers the unverified settlement information F to the server 15 through the communication network 11. The unverified approval information F may be only the approval information B and the random number C. The unverified approval information F may include the approval document A, the approval information B, and the random number C. An arbitrary client 51 may access the server 15 from a specific address owned by the authorizer 41 and transfer it. The arbitrary client 51 may transfer to the server 15 using electronic mail.

  In the decision information saving step (S106), the server 15 stores and saves the unverified decision information F transmitted from the arbitrary client 51 and received by the server 15 in the decision information transfer step (S105). Since the unverified approval information F is information that has been subjected to the approval process by the approver 41, the unverified approval information F may not be able to be rewritten.

  In the transfer instruction acquisition step (S107), an arbitrary client 52 including an arbitrary client 51 acquires a transfer instruction that is a transfer instruction that is input to the arbitrary client 52 and that instructs transfer of the verified decision information. Here, the transfer instruction may be sent from the server 15 to the electronic mail address owned by the authorizer using the electronic mail. The transfer instruction may be sent directly to the authorizer via telephone, e-mail, facsimile, or the like by a person involved in the approval system. This step need not be performed every time the decision information collation step (S109). For example, the due date of the decision information collation step (S109) may be determined in advance, and the date may be acquired by a device having a calendar function such as a mobile phone or an electronic notebook. Further, the transfer instruction acquisition step (S107) may not be performed every time the approval client 21 performs the approval process. It can also be done at regular intervals, such as once a month.

  In the external storage transfer step (S108), any client 52 that has acquired the transfer instruction in the transfer instruction acquisition step (S107) stores the verification decision information E stored in the external storage device 31 in the external storage step (S104). At least the random number C is transferred to the server 15 through the communication network 11. For example, if the verified decision information E is the decision document A, the decision information B, and the random number C, only the decision information B and the random number C may be transferred here.

  In the decision information collation step (S109), the server 15 collates at least the random number C transferred in the external storage transfer step (S108) and the random number C stored and saved in the decision information saving step (S106). Here, it is not necessary to collate only with random numbers. The document number of the final approval document may be checked together with a random number. Also, the decision information collation step (S109) can be performed every predetermined period such as once a month. In this case, it is only necessary to collate the items after the last one.

  The flow shown in FIG. 2 is an example. For example, either the decision information acquisition step (S102) or the random number generation step (S103) may be arranged before or at the same time. In addition, either the external storage step (S104) or the decision information transfer step (S105) may be arranged before or at the same time. Further, after the approval information acquisition step (S102), the random number generation step (S103), the external storage step (S104), and the approval information transfer step (S105) may be performed simultaneously.

  According to the present invention, the requested approval document can be approved using an arbitrary client. Each time the approval process is performed, a random number is generated, and the contents of the approval process including the random number are stored and stored in the server through the communication network, and stored in an external storage device owned by the determiner connected to the client. Save. As a result, the contents of the approval process stored and stored in the server and the contents of the approval process stored and stored in the external storage device are collated as necessary. It can be confirmed that the content of the final approval process is by the approver. Therefore, it is possible to provide a settlement method that can be performed by any client in any place and that can distinguish between a legitimate settlement process and an unauthorized settlement process.

(Embodiment 2)
The present invention will be described below with reference to embodiments. First, an approval system using a network according to the present invention will be described with reference to FIG. FIG. 3 is a conceptual diagram showing the information flow of the decision making system according to the present invention.

  An approval system comprising an application client, an approval client, a transfer client, and a server connected through a communication network, wherein the application client obtains the input approval document; and Approval application means for transferring the approval document acquired by the approval document creation means to the server through the communication network.

  The approval system shown in FIG. 3 includes a communication network 11, an approval client 21, an external storage device 31, a transfer client 22, a server 15, and an application client 23. In the decision making system shown in FIG. 3, an application client 23 is connected to the communication network 11 in addition to the decision making system shown in FIG. The server 15, the approval client 21, the transfer client 22, and the application client 23 can be connected to each other through the communication network 11. An external storage device 31 is connected to the approval client 21. An external storage device 31 is connected to the transfer client 22. The approval client 21 and the transfer client 22 do not operate at the same time, and the external storage device 31 is connected when they operate.

  The application client 23 transfers the input approval document A through the communication network 11. In addition, the application client 23 includes an approval document creation unit 81 and an approval application unit 82.

  The approval document creation means 81 acquires the input approval document A. Information input by a keyboard provided in the approval client 21 may be acquired. Information input by input means such as an input pad or a scanner may be acquired. The approval document A stored and stored in an external storage medium such as a compact disk or MO may be acquired by the application client 23.

  The approval application unit 82 transfers the approval document A acquired by the approval document creation unit 81 to the server 15 through the communication network 11. The approval application unit 82 transmits the approval document A to the server 15 through the communication network 11 using the transmission function provided in the application client 23.

  The application client 23 can use any client having the above functions.

  Note that at least two of the application client 23, the approval client 21, and the transfer client 22 may be mounted on one information processing apparatus. The information processing apparatus is an apparatus capable of performing arithmetic processing such as a personal computer, an electronic notebook, and a mobile phone. Since one information processing apparatus has the functions of at least two of the application client 23, the approval client 21, and the transfer client 22, an approval system can be constructed using any client. Therefore, the approval process can be performed by an arbitrary client in an arbitrary place.

An approval method of the approval system according to the present invention will be described with reference to FIG. FIG. 4 is a diagram for explaining an approval method for the approval system shown in FIG.
An arbitrary client obtains the inputted final approval document in an approval method using a communication network in which the final approval document applied is processed by the client, and the content of the final approval processing is stored in the server and collated. An approval document creation step, an approval application step in which the arbitrary client that has acquired the approval document in the approval document generation step transfers it to the server through the communication network, and the server has been transferred in the approval application step. An undecided document storing step for storing and storing the approved document.

  The decision method shown in FIG. 4 is the same as the decision method described with reference to FIG. 2 described above, and an arbitrary client 57 obtains an inputted decision document A (S201), and a decision document creation step. An approval application step (S202) in which the arbitrary client 57 that has acquired the approval document A in (S201) transfers it to the server 15 through the communication network 11, and the approval document A transferred by the server 15 in the approval application step (S202). An undecided document saving step (S203) for storing and saving is provided before the application document obtaining step (S101).

  In the approval document creation step (S201), an arbitrary client 57 acquires the input approval document A. Information input by a keyboard provided in an arbitrary client 57 may be acquired. Information input by input means such as an input pad or a scanner may be acquired. The decision document A stored and saved in an external storage medium such as a compact disk or MO may be acquired by an arbitrary client 57.

  In the approval application step (S 202), any client 57 that has acquired the approval document A in the approval document creation step (S 201) transfers it to the server 15 through the communication network 11. The arbitrary client 57 transmits the approval document A using the transmission device provided in the arbitrary client 57. The server 15 receives the approval document A transmitted through the communication network 11 using the receiving device provided in the server 15.

  The flow shown in FIG. 4 is an example. For example, the decision information acquisition step (S102) and the random number generation step (S103) may be performed simultaneously. For example, the external storage step (S104) and the decision information transfer step (S105) may be performed simultaneously. For example, after the approval information acquisition step (S102), the random number generation step (S103), the external storage step (S104), and the approval information transfer step (S105) may be performed simultaneously.

  According to the present invention, the requested approval document can be approved using an arbitrary client. Each time the approval process is performed, a random number is generated, and the content of the approval process including the random number is stored and stored in a server through a communication network, and the external storage device owned by the approver connected to the client Remember to save. As a result, the contents of the approval process stored and stored in the server and the contents of the approval process stored and stored in the external storage device are collated as necessary. It can be confirmed that the content of the final approval process is by the approver. Therefore, it is possible to provide an approval method that can perform an approval process by an arbitrary client in an arbitrary place distributed over a wide range, and can distinguish between an authorized approval process and an unauthorized approval process. It becomes possible.

  According to the present invention, processing is performed by an arbitrary client at an arbitrary location using a portable terminal such as a personal computer, an electronic notebook, and a mobile phone, and the processing log is managed by the server and an external storage device owned by each person. can do. About necessary items such as application for approval, means of transportation used when going out, receipts at the time of withdrawal, using cards and mobile phones equipped with compound functions such as storage and transfer of information etc. Can be used.

It is the conceptual diagram which showed the flow of the information of the approval system which concerns on this invention. (Embodiment 1) It is a figure explaining the approval method about the approval system shown in FIG. (Embodiment 1) It is the conceptual diagram which showed the flow of the information of the approval system which concerns on this invention. (Embodiment 2) It is a figure explaining the approval method about the approval system shown in FIG. (Embodiment 2)

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 Communication network 15 Server 21 Approval client 22 Transfer client 23 Application client 31 External storage device 32 Personal computer device 35 External random number generation means 36 Memory storage part 37 Connection part 41 Approver 45 Applicant 51, 52, 57 Arbitrary client 61 Application document Acquisition means 62 Approval information acquisition means 63 Random number generation means 64 External storage means 65 Approval information transfer means 71 Transfer instruction acquisition means 72 External storage transfer means 73 Approval information storage means 74 Approval information collation means 75 Undecided document storage means 76 Notification of approval required Means 77 External storage device confirmation means 78 External storage device request means 81 Approval document preparation means 82 Approval application means A Approval document B Approval information C Random number E Checked approval information F Unmatched approval information G Device information S101 Application document acquisition step S102 Approval information acquisition step S103 Random number generation step S104 External storage step S105 Approval information transfer step S106 Approval information storage step S107 Transfer instruction acquisition step S108 External storage transfer step S109 Approval information collation step S110 External storage device confirmation step S111 External storage device request step S201 Approval document creation step S202 Approval application step S203 Undecided document storage step

Claims (4)

In an approval method using a communication network, in which an application for approval documents is processed by a client, and the contents of the approval processing are stored and verified in a server,
An arbitrary client acquires an application document obtaining step for obtaining the applied approval document;
The server confirms the client as an admission client by checking information specific to the removable external storage device connected to the arbitrary client and information specific to the external storage device stored and stored in the server in advance. An external storage device confirmation step;
The arbitrary client that has acquired the final approval document in the application document acquisition step, the final approval information acquisition step of acquiring final approval information including whether or not the input final approval,
A random number generation step for generating random numbers by the arbitrary client that has acquired the approval document by the application document acquisition step or the external storage device confirmed by the external storage device confirmation step;
The arbitrary client sends the final approval document acquired in the application document acquisition step and / or the approval information acquired in the approval information acquisition step and the random number generated in the random number generation step to the external storage device as verified verification information. An external storage step for storing and storing,
The arbitrary client transmits the approval document acquired in the application document acquisition step and / or the approval information acquired in the approval information acquisition step and the random number generated in the random number generation step as unverified approval information through the communication network. An approval information transfer step to transfer to the server;
An approval information storage step in which the server stores and stores the unverified approval information transferred in the approval information transfer step;
A transfer instruction acquisition step in which an arbitrary client including the arbitrary client acquires a transfer instruction that is an input transfer instruction and instructs transfer of the verification decision information;
The arbitrary client that has acquired the transfer instruction by the transfer instruction acquisition step transfers at least the random number of the verification decision information stored and stored in the external storage device by the external storage step to the server through the communication network. An external storage transfer step,
An approval information collation step in which the server collates at least the random number transferred in the external storage transfer step and the random number stored and saved in the decision information saving step;
An approval method characterized by comprising:   The external storage device requesting step of requesting the arbitrary client to connect the external storage device to an interface provided in the arbitrary client before the external storage device confirmation step. 2. The approval method according to 1. An approval system comprising an approval client, a transfer client, and a server connected through a communication network,
The approval client
An application document acquisition means for acquiring the applied approval document to the approval client;
An approval information acquisition means for acquiring approval information input to the approval client and including approval information;
An external storage device confirmed by external storage device confirmation means for confirming the removable external storage device connected to the decision making client, or a random number generation means for generating a random number in the decision making client;
External storage for storing and saving the final approval document acquired by the application document acquisition means and / or the approval information acquired by the approval information acquisition means and the random number generated by the random number generation means in the external storage device as checked approval information Means,
An approval for transferring the approval document acquired by the application document acquisition means and / or the approval information acquired by the approval information acquisition means and the random number generated by the random number generation means to the server as unverified approval information through the communication network An information transfer means,
The transfer client is
Transfer instruction acquisition means for acquiring, through the communication network, a transfer instruction input to the transfer client and instructing the server to transfer the verification decision information to the server;
In accordance with the transfer instruction acquired by the transfer client by the transfer instruction acquisition unit, at least the random number of the verification decision information stored and stored in the external storage device by the external storage unit is transferred to the server through the communication network. External storage transfer means
The server
External storage for confirming the client with the decision-making client by comparing information specific to the removable external storage device connected to the decision-making client with information specific to the external storage device stored and stored in advance in the server Device confirmation means;
An approval information storage unit for storing and storing the unverified approval information transferred from the approval client by the approval information transfer unit;
A decision information collating unit for collating at least the random number stored and saved by the decision information saving unit and at least the random number transferred from the transfer client by the external storage transfer unit;
An approval system characterized by comprising:   The approval client further includes an external storage device requesting unit that requests connection of an external storage device to an interface provided in the approval client, and the external storage device that is confirmed by the external storage device confirmation unit is determined by the external storage device requesting unit. 4. The approval system according to claim 3, wherein the approval system is a requested external storage device.

Images