JP5464313B2 - Internal control system - Google Patents

Description

  The present invention relates to internal control in an organization such as a company, and more particularly, to an internal control control system that audits information such as operations of each member.

  In Japan, following the Sarbanes-Oxley Act (SOX Act) in the United States, in order to prevent accounting scandals and lack of compliance by members belonging to organizations such as companies, or external persons other than the organization A fundamental revision of the Securities and Exchange Law (popular name, the Japanese version of the SOX Act) was made. Therefore, in recent years, there has been a strong demand for strengthening the internal control of organizations such as companies.

  Therefore, Patent Document 1 discloses an internal control system in which an audit processing unit performs an audit process by adding time-series information and accuracy information to an office data file and a verification record file.

  Further, in Patent Document 2, in order to efficiently aggregate data related to daily operations performed by a plurality of members, a plurality of units connected via an in-house network such as a mail server, a network management server, a business terminal, and a PBX. Collect the logs recorded in the system of the system, create an integrated log that is organized by each member unit, output this integrated log data as a report, or sort it according to time series A log integrated management system that provides useful information for internal control by comparison is disclosed.

  Further, Patent Document 3 discloses an electronic seal stamp authentication system for the purpose of reducing the number of audit steps and improving the efficiency of accurate audits.

JP 2007-280195 A JP 2007-233661 A JP-A-2005-293404

  However, since the inventions disclosed in Patent Documents 1 to 3 have insufficient security for data communication, for example, the accuracy of auditing can be maintained as the number of members increases and the information related to business increases. It becomes difficult. In other words, even if an organization such as a company has unauthorized access or falsification of corporate information by a third party other than the person in charge, unless security is enhanced for data communication between each terminal and server, It becomes impossible to audit accurately. Furthermore, as the information related to the business increases, the workability of the members who report the business tends to decrease, and it is necessary to maintain these.

  Therefore, an object of the present invention is to prevent unauthorized access to and alteration of corporate information by a third party other than the person in charge in an organization such as a company, and facilitate work while improving the workability of each member. Is to provide an internal control system that can be audited.

Means and effects for solving the problems

  The internal control system according to the present invention has the following features to achieve the above object. That is, the internal control system of the present invention has the following features alone or in combination as appropriate.

In order to achieve the above object, an internal control system according to the present invention has a server that collects work content information that is information related to the work of each member and audits the work of each member based on this information. In the internal control system, the server receives first information data input from each communication terminal owned by each member via communication means, and communication of the transmission source of the first information data When the second information is input from the member at the terminal, the second information data input from the communication terminal is received via the communication means, and the first information is received by the receiving means . Based on the information data, specifying means for specifying a communication terminal that is the transmission source of the first information data, and information indicating a result of specifying the communication terminal by the specifying means, the communication of the transmission source of the first information data Terminal When the specific result of the communication terminal indicates that the communication terminal has the right to access the server, an input image for causing the member to input the second information is displayed on the communication terminal, and the first information data When the specific result of the communication terminal indicates that the communication terminal of the transmission source is not a communication terminal having the right to access the server, information for preventing the input image from being displayed on the communication terminal is the transmission source of the first information data The second information received from the communication terminal when the communication terminal that is the transmission source of the first information data is specified as the communication terminal having the right to access the server by the means for transmitting to the communication terminal and the specifying means . based on the information data, it performs an authentication process for authenticating the member that inputs the second information data, closed access by a particular means, to the transmission source communication terminal of the first information data server That if it is identified as not a communication terminal, an authentication unit that does not perform the authentication process, it collates the members that have been authenticated by the specified communication terminal and the authentication unit by identification means, verification decision to determine its consistency And the means for transmitting the information indicating the result of the consistency determination by the collation determining means to the communication terminal that is the transmission source of the second information data, and the collation determining means The business information data receiving control means for receiving the business information data indicating the business content information input from the newly authenticated member from the receiving means, and the storage means for storing the business information data, the received business information data Temporarily storing business information data temporary storage control means, and when the business information data is temporarily stored by the business information data temporary storage control means, the communication terminal that is the transmission source of the business information data In response to the temporary storage signal transmitting means for transmitting the temporary storage signal and the temporarily stored business transmitted from the communication terminal that received the temporary storage signal in response to an instruction from the member that owns the communication terminal. Business information data storage control means for storing the temporarily stored business information data in the storage means when receiving confirmed information data including information indicating that the information data is correct.

  According to the above configuration, since business information data related to the business of each member is collected on the server using the communication terminal, the work of each member is easier than using a large amount of reports such as paper media. Can be audited. In addition, since the communication terminal that has accessed the server is specified by the specifying unit, unauthorized access from a communication terminal that is not registered in advance in the server can be restricted. Furthermore, since the member who has accessed the server is authenticated by the authentication means, unauthorized access from a third party who is not registered in advance in the server can be restricted. Furthermore, since the matching judgment means judges the consistency between the communication terminal identified by the identification means and the member authenticated by the authentication means, unauthorized access from members other than the owner of the communication terminal is restricted. can do. Therefore, the work can be easily audited while improving the workability of each member, and the security can be improved.

In the server provided in the internal control system according to the present invention, the communication unit uses IP-PBX, and the authentication unit performs voice authentication and voice authentication based on the second information data received via the IP-PBX. The member may be authenticated by human body authentication.

According to said structure, the 2nd information data regarding a member's voice, a fingerprint, a facial photograph etc. is received by a server via IP-PBX, for example. Furthermore, based on the received second information data, voice authentication and / or human body authentication of members is performed by the authentication means. Thereby, since authentication of a member can be made more accurate, security can be improved more. Furthermore, by using IP-PBX, it is possible to easily communicate the second information data used when voice authentication and / or human body authentication is performed, thereby improving the workability of each member. Can be easily audited.

In the server included in the internal control system according to the present invention, the communication terminal includes an IC tag including information data, and the specifying means uses the first information data included in the IC tag to determine the first information . The communication terminal of the source of the information data may be specified.

  According to said structure, since an IC tag with which the communication terminal was equipped can identify a communication terminal efficiently, work can be audit | inspected easily, improving the workability | operativity of each member more.

Further, in the server provided in the internal control control system according to the present invention, the first information data includes a telephone number of the communication terminal, the second information data includes audio information of members, The specifying unit may specify the communication terminal based on the telephone number received from the communication terminal, and the authentication unit may authenticate the member based on the voice information.

According to the above configuration, the member can authenticate the member simply by calling the server using the communication terminal and having a conversation, so the workability of each member can be improved while improving the workability. Can be audited .

  An embodiment of the present invention will be described below with reference to FIGS.

(Outline of internal control system)
FIG. 1 is a configuration diagram of an internal control system 1 according to the present embodiment. The internal control system 1 shown in FIG. 1 is an internal control system 1 having a server 8 that audits the work of each member 2, and the server 8 is a communication terminal (fixed telephone 5) owned by each member 2. , Information data (telephone number, e-mail address, IC data, voice information, image information, character information, etc.) respectively input from the mobile phone 3 and the business terminal 6) are communicated with communication means (telephone network 10, network 20, Information data (audio information) received from the communication terminal by specifying the communication terminal based on the information data (telephone number, mail address, IC data, etc.) received via the IP-PBX7, LAN30) , Image information, character information, etc.), authenticating the member 2 who entered the information data, collating the identified communication terminal with the authenticated member 2, and matching When it is determined that consistency is obtained, the business content information related to the business newly input from the member 2 is received, and the received business content is stored in the storage unit 84 that stores the business content information. The information is temporarily stored, and when the confirmation information including information indicating that the temporarily stored business content information is correct is received from the communication terminal, the temporarily stored business content information is stored in the storage unit 84.

  By using the internal control system 1 described above, a member 2 belonging to an organization such as a company aggregates information (business content information) related to each business in the server 8, and for example, fraud such as budget tampering Are being audited to see if they are performing At this time, when the business content is reported, the business content information is transmitted to the server 8 using the various communication terminals assigned thereto. In the present embodiment, in the case of the fixed telephone 5, the telephone is placed on the server 8 via the IP-PBX 7 and the business content information by voice is reported. In the case of the mobile phone 3, a telephone call may be made to the server 8 via the IP-PBX 7 to report the business content information by voice, or the business content information by image or text via the network 20. May be reported. In the case of the business terminal 6, the business content information may be reported by voice by IP telephone via the in-house LAN 30, or the business content information may be reported by image or text.

(Configuration of internal control system)
As shown in FIG. 1, the internal control system 1 according to the present embodiment includes a communication terminal (a fixed telephone 5, a mobile phone 3, and a business terminal 6) owned by each member 2, an IP-PBX 7, The server 8, the LAN 30 that connects the IP-PBX 7 and the server 8, and the telephone line network 10 and the network 20 that connect the communication terminal and the IP-PBX 7 so that they can communicate with each other.

  In the case of the present embodiment, the communication terminals owned by each member 2 are a fixed telephone 5, a mobile phone 3 with an IC tag, and a business terminal 6. The fixed telephone 5 enables a call to a desired partner by the operation of the member 2. In particular, in the case of the present embodiment, the fixed telephone 5 is connected to the IP-PBX 7 via the telephone network 10 so as to be communicable. Therefore, when the member 2 makes a call from the fixed telephone 5, the “phone number” of the fixed telephone 5 and the “voice information” of the member 2 are transmitted to the server 8 via the IP-PBX 7. ing.

  The mobile phone 3 enables a call to a desired partner by the operation of the member 2. In particular, in the case of the present embodiment, the mobile phone 3 is connected to the IP-PBX 7 via the telephone network 10 similarly to the fixed phone 5. Therefore, when the member 2 makes a call from the mobile phone 3, the “phone number” of the mobile phone 3 and the “voice information” of the member 2 are transmitted to the server 8 via the IP-PBX 7. ing. In addition, the mobile phone 3 has a fingerprint reading function and a camera function (not shown), and can capture image information such as fingerprint data and face photo data of the member 2. Further, since the mobile phone 3 is connected to the IP-PBX 7 via the network 20 so as to be communicable, “image information” such as fingerprint data and face photo data of the captured members, and “character information” such as e-mails. Are transmitted to the server 8 via the IP-PBX 7. Further, the mobile phone 3 includes an IC tag storing IC data unique to the mobile phone, and the IC data can be extracted by causing the IC reader 4 to read the IC tag. The extracted IC data is transmitted to the server 8 via the network 20 and the IP-PBX 7 by the transmission function of the IC reader 4.

  The business terminal 6 can capture image information and voice information such as fingerprint data and face photo data of members by using a fingerprint reading function, a camera function, and a microphone function (not shown). . The captured “image information”, “character information”, and “voice information” are transmitted to the server 8 via the LAN 30.

  The IP-PBX 7 is a device that performs line switching of IP telephone terminals in an IP network. In the case of the present embodiment, the line exchange of the IP telephone terminal is performed in the LAN 30 which is an extension network by the IP telephone. The IP-PBX 7 relays between the telephone line network 10 and the LAN 30. In other words, in the case of the present embodiment, the IP-PBX 7 aggregates voice information, image information, and character information from a plurality of fixed telephones 5 and mobile phones 3 and converts them into signals that can be processed by the server 8. Via the server 8. By such an operation of the IP-PBX 7, each member 2 uses the fixed telephone 5 and the mobile phone 3, for example, to input voice without using a special converter, and the server 8 performs processing. It is converted to a signal that can be made. As a result, voice information, image information, and character information used for voice authentication and human body authentication, which will be described later, can be easily communicated, so that the work can be easily audited while improving the workability of each member. it can.

  When the server 8 determines that the identified communication terminal and the authenticated member 2 are consistent with each other through the collation determination process described later, the business content relating to the work newly input from the member 2 Information is received and temporarily stored in the storage unit 84. After that, when the confirmation information including information indicating that the temporarily stored business content information is correct is received from the communication terminal, the storage unit 84 stores the temporarily stored business content information. In this way, the server 8 aggregates the work content information from each member 2 and audits the work of the member 2.

  In the case of the present embodiment, the server 8 roughly performs three processes for security enhancement. The first process is “terminal identification process”. The terminal specifying process is a process of specifying the accessed communication terminal when the communication terminal owned by each member 2 accesses the server 8. Specifically, by referring to a “terminal verification table” stored in the storage unit 84 of the server 8 to be described later, the terminal is determined based on various information such as the telephone number, mail address, and IC data of the acquired communication terminal. This is the process to identify.

  The second processing of the server 8 is “person authentication processing”. The personal authentication process is a process of authenticating the member 2 who has accessed the server 8 using a communication terminal. Specifically, by referring to the “terminal verification table”, the personal authentication of the member 2 (speech) based on voice information such as voices uttered by the member 2 from various communication terminals and image information such as fingerprints and facial photographs. Authentication and / or human body authentication).

  The third process of the server 8 is a “collation determination process”. The collation determination process is a process of collating the communication terminal identified by the terminal identification process with the member 2 authenticated by the personal authentication process and determining the consistency thereof. That is, it is a process for preventing another third party from accessing the server 8 by impersonating the user from another communication terminal that the third party does not own.

  Through the processing of the server 8 described above, the business content information related to the business of each member 2 is collected by the server 8 using the communication terminal, so that each configuration can be easily performed rather than using a large amount of reports such as paper media. The work of member 2 can be audited. Further, since the communication terminal that has accessed the server 8 is specified by the terminal specifying process, unauthorized access from a communication terminal that is not registered in the server 8 in advance can be restricted. Furthermore, since the member 2 who has accessed the server 8 is authenticated by the personal authentication process, unauthorized access from a third party who is not registered in the server 8 in advance can be restricted. Further, since the matching determination process determines the consistency between the communication terminal specified by the terminal specifying process and the member 2 authenticated by the personal authentication process, fraud from the member 2 other than the owner of the communication terminal. Access can be restricted. Therefore, the work can be easily audited while improving the workability of each member 2, and the security can be improved.

  Furthermore, since the mobile phone 3 can be efficiently specified by the IC tag 9 provided in the mobile phone 3 in the terminal specifying process, the work can be easily audited while further improving the workability of each member 2.

  Furthermore, in the personal authentication process, since the member 2 can authenticate the member 2 simply by calling the server 8 using the communication terminal and having a conversation, the workability of each member 2 can be further improved. Audit business easily.

(Configuration diagram of mobile phone)
FIG. 2 is a configuration diagram of the mobile phone 3 in the present embodiment. As shown in FIG. 2, the mobile phone 3 includes a radio wave transmission / reception unit 32, a control unit 33, and a storage unit 34. Further, an antenna 31 for enabling communication with the outside is connected to the radio wave transmission / reception unit 32. In particular, in the present embodiment, the antenna 31 can communicate with the IP-PBX 7 via the telephone line network 10 and the network 20. The antenna 31 transmits voice information via the telephone line network 10 and transmits image information and character information via the network 20.

  The radio wave transmission / reception unit 32 converts various signals received from the antenna 31 into signals that can be processed by the control unit 33 described later. On the other hand, the radio wave transmission / reception unit 32 converts the signal from the control unit 33 into a signal that the antenna 31 can transmit to the outside.

  The control unit 33 controls various signal processing. Specifically, the control unit 33 performs various processes described below on various information data (such as audio information, image information, and character information) input from the input unit 39, the audio acquisition unit 40, and the image acquisition unit 41 described below. (Input processing unit 35, audio processing unit 36, image processing unit 37). Further, it has a role of storing various processed information data in the storage unit 34. Further, the control unit 33 transmits various information data stored in the storage unit 34 from the antenna 31 to the IP-PBX 7 via the radio wave transmission / reception unit 32.

  As shown in FIG. 2, the mobile phone 3 includes an input processing unit 35 connected to the input unit 39, an audio processing unit 36 connected to the audio acquisition unit 40, and an image connected to the image acquisition unit 41. A processing unit 37, an IC data processing unit 38 connected to the IC tag 9, and a display unit 42 are included.

  The input unit 39 receives character information input from the member 2. Specifically, the member 2 can input character information by pressing a key switch (not shown). The input character information is converted into a signal that can be transmitted from the antenna 31 to the IP-PBX 7 by the input processing unit 35.

  The voice acquisition unit 40 receives voice information input from the member 2. Specifically, the member 2 can input voice information by uttering a voice to a microphone (not shown). The input audio information is converted into a signal that can be transmitted from the antenna 31 to the IP-PBX 7 by the audio processing unit 36.

  The image acquisition unit 41 receives image information input from the member 2. Specifically, the member 2 can input image information by taking a picture of his / her face with a camera (not shown). The input image information is converted into a signal that can be transmitted from the antenna 31 to the IP-PBX 7 by the image processing unit 37.

  The IC data processing unit 38 has a role of detecting radio waves emitted from the IC reader 4 by bringing the IC tag 9 close to the IC reader 4 and causing the IC reader 4 to read IC data inherent to the mobile phone 3.

  The display unit 42 has a role of displaying video and images so that the member 2 can visually recognize various information.

(Server configuration diagram)
FIG. 3 is a configuration diagram of the server 8 in the present embodiment. As illustrated in FIG. 3, the server 8 includes a transmission / reception unit 82 that is communicably connected to the LAN 30, a control unit 83, and a storage unit 84.

  The transmission / reception unit 82 converts various signals received via the LAN 30 into signals that can be processed by the control unit 83 described later.

  The control unit 83 controls various signal processing. Specifically, the control unit 83 has a role of causing the various processing units (sound processing unit 85, image processing unit 86) described later to process the acquired various information data (sound information, image information, character information, etc.). ing. Moreover, it has a role which memorize | stores the processed various information data in the terminal collation table of FIG.

  Further, the control unit 83 executes the above-described terminal identification process, personal authentication process, and verification determination process based on various information data stored in the terminal verification table. Further, when acquiring the business content information from the transmission / reception unit 82, the control unit 83 first temporarily stores the business content information in the storage unit 84, and then stores the temporarily stored business content information when the confirmed information is acquired. Control is performed so as to store in the unit 84.

  When the voice processing unit 85 acquires voice information, the voice processing unit 85 converts the voice information so that the control unit 83 can store the voice information in the storage unit 84.

  When acquiring the image information, the image processing unit 86 converts the image information so that the control unit 83 can store the image information in the storage unit 84.

  As described above, the server 8 receives and transmits information data input from the communication terminals owned by each member 2 via the communication means (telephone network 10, network 20, IP-PBX 7, LAN 30). Based on the information data received from the unit 82 and the communication terminal, the terminal identification process of the control unit 83 that identifies the communication terminal, and the member 2 that has input the information data is authenticated based on the information data received from the communication terminal Control for checking the consistency by comparing the personal authentication process of the control unit 83, the communication terminal specified by the terminal specifying process of the control unit 83 with the member 2 authenticated by the personal authentication process of the control unit 83 When the collation judgment process of the unit 83 and the control unit 83 judge that the consistency is achieved, the transmission / reception unit transmits the business content information related to the business newly input from the member 2 2, the control unit 83 that receives the business content information from the communication terminal, the control unit 83 that temporarily stores the received business content information in the storage unit 84 that stores the business content information, and the information that the business content information temporarily stored is correct from the communication terminal. And a control unit 83 that stores temporarily stored business content information in the storage unit 84 when the confirmation information including is received.

  According to the above configuration, since the business content information related to the business of each member 2 is collected by the server 8 using the communication terminal, each member can be easily operated rather than using a large amount of reports such as paper media. Auditing two tasks. Further, since the communication terminal that has accessed the server 8 is specified by the terminal specifying process of the control unit 83, unauthorized access from a communication terminal that is not registered in the server 8 in advance can be restricted. Furthermore, since the member 2 who has accessed the server 8 is authenticated by the personal authentication process of the control unit 83, unauthorized access from a third party who is not registered in the server 8 in advance can be restricted. Furthermore, since the matching determination process of the control unit 83 determines the consistency between the communication terminal identified by the terminal identification process of the control unit 83 and the member 2 authenticated by the personal authentication process of the control unit 83, the communication Unauthorized access from the members 2 other than the terminal owner can be restricted. Therefore, the work can be easily audited while improving the workability of each member 2, and the security can be improved.

(Terminal verification table)
Next, FIG. 4 is a diagram showing a terminal verification table stored in the storage unit 84 of the server 8. This terminal verification table stores information on communication terminals that can be used by each member 2 and information on the members themselves. As shown in FIG. 4, the terminal verification table has a “user available” column, a “terminal identification information” column, and a “personal authentication information” column.

  In the “available user” column, information on “employee number” assigned to each member 2 and information on “terminal type” of communication terminals that can be used by the member 2 are stored. . For example, the member 2 with the employee number “800402” indicates that the mobile phone 3 can be used.

  The “terminal identification information” column stores information for identifying a communication terminal that can be used by the member 2. Specifically, information relating to the “telephone number”, “mail address”, and “IC data” of the communication terminal is stored. In the case of the fixed telephone 5, since there is only a telephone call function, there is no information regarding the mail address and IC data.

  Information relating to the member 2 is stored in the “personal authentication information” column. Specifically, information on “voice pattern”, “fingerprint pattern”, and “face pattern” is stored. Each pattern is classified into a plurality of types, and when the member 2 registers in advance, the patterns are stored after being divided into patterns.

  When the server 8 receives information data such as voice information, image information, and character information, the server 8 refers to the terminal collation table described above to perform terminal identification processing and personal authentication processing.

(Operation of mobile phone 3: terminal-side terminal identification processing routine)
Next, FIG. 5 is a flowchart showing a terminal specifying process routine of the mobile phone 3. When the terminal identification processing routine is executed, the control unit 33 determines whether there is a connection command to the server 8 by the member 2 (A1). That is, it is determined whether the member 2 has accessed the server 8 using the mobile phone 3. The connection command includes an action of making a call and an action of connecting to the Internet via the network 20. If it is determined that there is no connection command to the server 8 (A1, NO), the system waits until there is a connection command to the server 8 by the member 2. On the other hand, when it is determined that there is a connection command to the server 8 (A1, YES), the server 8 is connected (A2). Thereafter, the terminal information signal is transmitted to the server 8 (A3). Here, the terminal information signal is information necessary for specifying the mobile phone 3, and is terminal specifying information (telephone number, mail address, IC data, etc.) in the terminal verification table of FIG.

  Next, the control part 33 determines whether the terminal specific signal was received from the server 8 (A4). Here, the terminal specifying signal is a signal including result information in which the control unit 83 of the server 8 specifies the accessed terminal based on the terminal information signal. That is, the terminal identification signal is a signal including result information indicating whether or not the terminal that has accessed the server 8 is identified as a registered terminal in the terminal identification processing of FIG. In the process of A4, when it is determined that the terminal identification signal is not received (A4, NO), the process waits until the terminal identification signal is received. On the other hand, if it is determined that the terminal specifying signal has been received (A4, YES), it is determined whether or not the terminal is the specified information (A5). If it is determined that the terminal is not specified information (A5, NO), a terminal unspecified image is displayed on the display unit 42 (A6). Thereafter, the connection to the server 8 is disconnected (A7), and this routine is terminated.

  On the other hand, when it is determined in the process of A5 that the terminal is specified information (A5, YES), the terminal specifying image is displayed on the display unit 42 (A8). Thereafter, the process proceeds to the personal authentication process (A9), and this routine is terminated.

(Operation of the mobile phone 3: terminal side personal authentication processing routine)
Next, FIG. 6 is a flowchart showing a personal authentication processing routine of the mobile phone 3. When the personal authentication processing routine is executed, the control unit 33 displays a personal information input image on the display unit 42 and prompts the member 2 to input personal information (A11). Here, the personal information is sound information such as the voice of the member 2, and image information such as fingerprint data and face photo data. Next, it is determined whether or not personal information has been input from the member 2 (A12). If it is determined that no personal information is input (A12: NO), the process waits until personal information is input. On the other hand, if it is determined that personal information has been input (A12: YES), a personal information signal based on the input personal information is transmitted to the server 8 (A13).

  Next, it is determined whether a personal authentication determination signal is received from the server 8 (A14). Here, the personal authentication determination signal refers to verification result information with the terminal that the control unit 83 of the server 8 authenticates the member 2 that has accessed the server 8 based on the personal information signal and specifies in the terminal specifying process. It is a signal including That is, the personal authentication determination signal is a signal including verification result information in the personal authentication and verification determination processing of FIG. 9 described later. In the process of A14, when it is determined that the personal authentication determination signal is not received (A14, NO), the process waits until the personal authentication determination signal is received. On the other hand, if it is determined that the personal authentication determination signal has been received (A14, YES), it is determined whether or not the collation result is correct information (A15). If it is determined that the collation result is not correct (A15, NO), a collation error image is displayed on the display unit 42 (A16), and the process returns to A11.

  On the other hand, when it is determined that the collation result is correct (A15, YES), a collation confirmation image is displayed on the display unit 42 (A17). Thereafter, the process proceeds to a business content input process (A18), and this routine ends.

(Operation of mobile phone 3: terminal-side business content input processing routine)
Next, FIG. 7 is a flowchart showing a business content input processing routine of the mobile phone 3. When the business content input processing routine is executed, the control unit 33 displays the business content input image on the display unit 42 and prompts the member 2 to input business content information (A21). Next, it is determined whether or not business content information has been input from the member 2 (A22). If it is determined that no business content information has been input (A22: NO), the process waits until business content information is input. On the other hand, if it is determined that business content information has been input (A22: YES), a business content information signal based on the input business content information is transmitted to the server 8 (A23).

  Next, it is determined whether or not a temporary registration signal has been received from the server 8 (A24). Here, the temporary registration signal is a signal including information indicating that the control unit 83 of the server 8 temporarily stores it in the storage unit 84 based on the business content information signal. That is, the temporary registration signal is a signal including information indicating that the business content information is temporarily stored in the storage unit 84 in the business content input process of FIG. In the process of A24, when it is determined that the temporary registration signal is not received (A24, NO), the process waits until the temporary registration signal is received. On the other hand, if it is determined that the temporary registration signal has been received (A24, YES), a temporary registration image indicating that the business content information input to the display unit 42 has been temporarily registered is displayed, and the confirmation information is displayed to the member 2. (A25).

  Next, it is determined whether or not the confirmation information of the member 2 has been input (A26). If it is determined that no confirmation information has been input (A26, NO), the process waits until confirmation information is input. On the other hand, if it is determined that the confirmation information has been input (A26, YES), a confirmation input signal is transmitted to the server 8 (A27).

  Next, it is determined whether an official registration signal is received from the server 8 (A28). Here, the formal registration signal is a signal including information that the control unit 83 of the server 8 stores the business content information temporarily stored in the storage unit 84 based on the business content information signal. That is, the formal registration signal is a signal including information indicating that the business content information is stored in the storage unit 84 in the business content input process of FIG. In the process of A28, when it is determined that the formal registration signal has not been received (A28, NO), the process waits until the formal registration signal is received. On the other hand, if it is determined that the formal registration signal has been received (A28, YES), a formal registration completion image indicating that the business content information input to the display unit 42 has been officially registered is displayed (A29). End the routine.

(Operation of server 8: server-side terminal identification processing routine)
Next, FIG. 8 is a flowchart showing a terminal specifying process routine of the server 8. When the terminal identification processing routine is executed, the control unit 83 determines whether a terminal information signal has been received from the mobile phone 3 (B1). If it is determined that the terminal information signal has not been received (B1: NO). Wait until a terminal information signal is received. On the other hand, if it is determined that the terminal information signal has been received (B1: YES), the terminal verification table in FIG. 4 is referred to, and the terminal that has accessed is identified based on the terminal information signal (B2). Thereafter, a terminal identification signal including the identified result information is transmitted to the mobile phone 3 (B3), and this routine is terminated.

(Operation of Server 8: Server-side User Authentication / Verification Judgment Processing Routine)
FIG. 9 is a flowchart showing a personal authentication / collation determination processing routine of the server 8. When the personal authentication / collation determination processing routine is executed, the control unit 83 determines whether a personal information signal is received from the mobile phone 3 (B11). If it is determined that a personal information signal has not been received (B11: NO). Wait until a personal information signal is received. On the other hand, if it is determined that the personal information signal has been received (B11: YES), the terminal verification table of FIG. 4 is referred to, and the identity of member 2 is authenticated based on the personal information signal. The identified terminal and the authentication result are collated to determine the consistency (B12). Thereafter, a personal authentication determination signal including the collated result information is transmitted to the mobile phone 3 (B13), and this routine is terminated.

(Operation of server 8: server-side business content input processing routine)
Next, FIG. 10 is a flowchart showing a business content input processing routine of the server 8. When the business content input processing routine is executed, the control unit 83 determines whether or not a business content information signal is received from the mobile phone 3 (B21). If it is determined that the business content information signal has not been received (B21: NO). Wait until a business content information signal is received. On the other hand, when it is determined that the business content information signal has been received (B21: YES), the business content information is temporarily stored in the storage unit 84 based on the business content information signal (B22). Thereafter, a temporary registration signal is transmitted to the mobile phone 3 (B23).

  Next, it is determined whether or not a confirmed input signal has been received from the mobile phone 3 (B24). If it is determined that the confirmed input signal has not been received (B24: NO). Wait until a definite input signal is received. On the other hand, if it is determined that the confirmed input signal has been received (B24: YES), the temporarily stored business content information is stored in the storage unit 84 (B25). Thereafter, an official registration signal is transmitted to the mobile phone 3 (B26), and this routine is terminated.

  According to the operations of the mobile phone 3 and the server 8 described above, since the business content information related to the work of each member 2 is collected by the server 8 using the mobile phone 3, a large amount of reports such as paper media are used. It is possible to audit the operations of each member 2 more easily. In addition, since the mobile phone 3 that has accessed the server 8 is specified by the terminal specifying process of the control unit 83, unauthorized access from the mobile phone 3 that is not registered in the server 8 in advance can be restricted. Furthermore, since the member 2 who has accessed the server 8 is authenticated by the personal authentication process of the control unit 83, unauthorized access from a third party who is not registered in the server 8 in advance can be restricted. Further, the matching determination process of the control unit 83 determines the consistency between the mobile phone 3 specified by the terminal specifying process and the member 2 authenticated by the personal authentication process. Unauthorized access from the member 2 can be restricted. Therefore, the work can be easily audited while improving the workability of each member 2, and the security can be improved.

(Outline of the embodiment of the present invention)
As described above, the internal control system 1 according to the present embodiment is the internal control system 1 having the server 8 that audits the business of each member 2, and the server 8 is owned by each member 2. Information data (telephone number, e-mail address, IC data, voice information, image information, character information, etc.) input from each communication terminal (fixed telephone 5, mobile phone 3, business terminal 6) is transferred to communication means (telephone line). Network 10, network 20, IP-PBX 7, LAN 30), transmission / reception unit 82 received from the communication terminal based on information data received from the communication terminal, control unit 83 identifying process of the communication terminal, and communication terminal Based on the received information data, the communication terminal identified by the personal authentication process of the control unit 83 that authenticates the member 2 who has input the information data and the terminal identification process of the control unit 83 When it is judged that consistency is obtained by the collation judgment process of the control unit 83 that collates the member 2 authenticated by the personal authentication process of the control unit 83 and judges the consistency thereof, and the control unit 83 In addition, a control unit 83 that receives new business content information input from the member 2 from the transmission / reception unit 82 and a control unit that temporarily stores the received business content information in the storage unit 84 that stores the business content information. 83, and a control unit 83 for storing the temporarily stored business content information in the storage unit 84 when receiving a finalized input signal including information indicating that the temporarily stored business content information is correct from the communication terminal. I have.

  According to the above configuration, since the business content information related to the business of each member 2 is collected by the server 8 using the communication terminal, each member can be easily operated rather than using a large amount of reports such as paper media. Auditing two tasks. Further, since the communication terminal that has accessed the server 8 is specified by the terminal specifying process of the control unit 83, unauthorized access from a communication terminal that is not registered in the server 8 in advance can be restricted. Furthermore, since the member 2 who has accessed the server 8 is authenticated by the personal authentication process of the control unit 83, unauthorized access from a third party who is not registered in the server 8 in advance can be restricted. Furthermore, since the matching determination process of the control unit 83 determines the consistency between the communication terminal identified by the terminal identification process of the control unit 83 and the member 2 authenticated by the personal authentication process of the control unit 83, the communication Unauthorized access from the members 2 other than the terminal owner can be restricted. Therefore, the work can be easily audited while improving the workability of each member 2, and the security can be improved.

  In the server 8 provided in the internal control system 1 according to the present embodiment, the communication unit uses the IP-PBX 7 and the authentication unit performs voice authentication based on the information data received via the IP-PBX 7. The member 2 may be authenticated by human body authentication.

  According to said structure, the information data regarding the voice of the member 2, a fingerprint, a facial photograph etc. are received by the server via IP-PBX7, for example. Furthermore, voice authentication and / or human body authentication of the member 2 is performed by the personal authentication process of the control unit 83 based on the received information data. Thereby, since the authentication of the member 2 can be made more accurate, the security can be further improved. Furthermore, by using IP-PBX7, information data used for voice authentication and / or human body authentication can be easily communicated, so that workability of each member 2 can be improved and work can be facilitated. Can be audited.

  Further, in the server 8 provided in the internal control system 1 according to the present embodiment, the communication terminal includes an IC tag including IC data, and the specifying unit uses the IC data included in the IC tag to determine the communication terminal. May be specified.

  According to said structure, since an IC tag with which the communication terminal was equipped can identify a communication terminal efficiently, work can be audit | inspected easily, improving the workability | operativity of each member 2 more.

  Further, in the server 8 provided in the internal control system 1 according to the present embodiment, the information data includes the telephone number of the communication terminal and the voice information of the member 2, and the terminal specifying process of the control unit 83 is as follows. The communication terminal may be identified based on the telephone number received from the communication terminal, and the personal authentication process of the control unit 83 may authenticate the member 2 based on the voice information.

According to the above configuration, since the member 2 can authenticate the member 2 simply by calling the server 8 using the communication terminal and having a conversation, the workability of each member 2 can be further improved. Audit business easily.
(Modification of this embodiment)
As mentioned above, although this invention was demonstrated based on suitable embodiment, this invention is not limited to this, The internal control control system 1 adds the following structures to the structure in the above-mentioned embodiment. Alternatively, they may be duplicated or replaced.

  For example, in the present embodiment, the IP-PBX 7 exists as hardware different from the server 8, but the present invention is not limited to this, and a part of software included in the server 8 has the function. May be.

  In this embodiment, the communication terminal uses the fixed telephone 5, the mobile phone 3, and the business terminal 6. However, the communication terminal is not limited to this. For example, the communication terminal is a member such as a PDA or a portable game machine. Any communication terminal 2 may be used as long as 2 can input business contents by voice and characters and can further communicate.

  The embodiments of the present invention have been described above, but only specific examples have been illustrated, and the present invention is not particularly limited. Specific configurations and the like can be appropriately changed in design. It should be noted that the actions and effects described in the embodiments of the present invention are merely a list of the most preferable actions and effects resulting from the present invention, and are limited to those described in the embodiments of the present invention. is not.

It is a block diagram of the internal control system in this Embodiment. It is a block diagram of the communication terminal in this Embodiment. It is a block diagram of the server in this Embodiment. It is the figure which showed the terminal collation table which a server has. It is a flowchart showing the terminal specific process routine of the communication terminal. It is a flowchart showing the personal authentication process routine of the communication terminal. It is a flowchart showing the business content input processing routine of the communication terminal. It is a flowchart showing the terminal specific process routine of the server. It is the flowchart showing the personal authentication and collation judgment processing routine of the server. It is the flowchart showing the business content input processing routine of the server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Internal control control system 2 Member 3 Mobile phone 4 IC reader 5 Fixed telephone 6 Business terminal 7 IP-PBX
8 Server 9 IC tag 10 Telephone network 20 Network 30 LAN

Claims (4)

An internal control control system having a server that collects work content information that is information related to the work of each member and audits the work of each member based on this information,
The server
The first information data input from each communication terminal owned by each member is received via the communication means, and the second information is received from the member at the communication terminal that is the transmission source of the first information data. Receiving means for receiving, via the communication means, second information data input from the communication terminal when input ;
Based on the first information data received by the receiving means, a specifying means for specifying a communication terminal that is a transmission source of the first information data;
Specifying the communication terminal is information indicating the result of specifying the communication terminal by the specifying means, and that the communication terminal that is the transmission source of the first information data is a communication terminal that has an access right to the server When the result indicates that an input image for causing the member to input the second information data is displayed on the communication terminal, and the communication terminal that is the transmission source of the first information data accesses the server Means for transmitting information for preventing the input image from being displayed on the communication terminal to the communication terminal that is the transmission source of the first information data when the specific result of the communication terminal indicates that the communication terminal is not authorized When,
When the specifying means specifies that the communication terminal that is the transmission source of the first information data is a communication terminal that has access rights to the server, the second information data received from the communication terminal Based on this, the authentication process for authenticating the member who has input the second information data is performed, and the communication terminal that is the transmission source of the first information data is not a communication terminal that has the right to access the server by the specifying means. Authentication means that does not perform the authentication process ,
A collation determining unit that collates the communication terminal identified by the identifying unit and the member authenticated by the authenticating unit, and determines consistency thereof;
Means for transmitting information indicating the result of the consistency judgment by the collation judgment means to a communication terminal that is a transmission source of the second information data;
Business information data for receiving, from the receiving means, business information data indicating the business content information newly input from the authenticated member when it is determined that the consistency is obtained by the collation judgment means Reception control means;
Business information data temporary storage control means for temporarily storing the received business information data in a storage means for storing the business information data;
Temporary storage signal transmission means for transmitting a temporary storage signal to the communication terminal that is the transmission source of the business information data when the business information data is temporarily stored by the business information data temporary storage control means;
The communication terminal that has received the temporary storage signal has received confirmed information data that is transmitted in response to an instruction from the member that owns the communication terminal and that includes information indicating that the temporarily stored business information data is correct A business information data storage control means for storing the temporarily stored business information data in the storage means;
An internal control system characterized by comprising: In the server,
The communication means uses IP-PBX,
The internal part according to claim 1, wherein the authentication unit authenticates the member by voice authentication and / or human body authentication based on the second information data received via the IP-PBX. Control and control system. In the server,
The communication terminal includes an IC tag including the information data,
The specifying means, internal controls described by the first information data included in the IC tag, to claim 1 or 2, characterized in that for identifying the transmission source communication terminal of the first information data Control system. In the server,
The first information data includes a telephone number of the communication terminal, said second information data includes audio information of the members,
The specifying means specifies the communication terminal based on the telephone number received from the communication terminal,
4. The internal control system according to claim 1, wherein the authentication unit authenticates the member based on the voice information.