JP5585485B2 - Abnormal behavior detection apparatus, program and method, and user management system - Google Patents

Description

  The present case relates to an abnormal behavior detection device, a program and method, and a user management system.

  Recently, classes using information equipment (PC: Personal Computer) are often performed in universities and the like. Some instructors in charge of classes using information equipment are concerned about poor performance due to frequent actions (abnormal behavior) such as snoozing and non-class related operations (games, etc.). Some people think that automatic detection is necessary.

  As an automatic detection method for abnormal behavior, for example, an application of a technique for determining sleep based on a measurement result of a human brain wave or body temperature as disclosed in Patent Document 1 can be considered. In general, it is also possible to detect abnormal behavior by analyzing an operation log.

JP 2004-302858 A

  However, the method of measuring human brain waves and body temperature as in Patent Document 1 cannot appropriately detect abnormal behavior caused by some of a plurality of users who should perform the same behavior, such as a student taking a class. There is a fear. Further, in the process of analyzing the operation log, the processing amount may become enormous if the number of students is large.

  Accordingly, the present invention has been made in view of the above problems, and an object thereof is to provide an abnormal behavior detection device, a program, and a method that can appropriately detect an abnormal behavior of a user. In addition, the object of the present invention is to provide a user management system capable of appropriately managing user behavior.

  The abnormal behavior detection device described in the present specification is a first device that receives power supply from a power source and shifts from a startup state to a standby state when a first time elapses after an operation from a user is interrupted; When the first device is connected to the first device and receives power supply from the power source through the first device and the first device shifts to a standby state, or detection by a detector that detects the presence of a user is lost. A second device that shifts from a startup state to a standby state when a second time that is shorter than the first time has elapsed, wherein the abnormal behavior detection device detects abnormal behavior of a user who uses the second device. Based on the information acquired by the acquisition unit and the acquisition unit that acquires the information from the power information detection device that detects the power consumption information in the first device and the second device connected to the first device. The first device and the second device connected to the first device have transitioned from the activated state to the standby state, and both devices have maintained the standby state for a predetermined abnormal behavior monitoring time. Or when the first device and the second device connected to the first device shift from a standby state to an activated state, and both devices are activated for a predetermined abnormal behavior monitoring time or longer. A specific unit that identifies a user who uses the first device and the second device, and a plurality of other actions that should be the same or equivalent to the user identified by the specific unit From the information on the power consumption of the first device and the second device used by the user, the identified user during the abnormal behavior monitoring time by the first device and the second device used by the other user An abnormal behavior detection device comprising: a determination unit that determines that the identified user is performing an abnormal behavior when it is determined that the first device and the second device are different from each other. .

  The user management system described in the present specification includes a first device that receives power supply from a power source and transitions from a startup state to a standby state when a first time has elapsed since the operation from the user was interrupted, Connected to the first device and supplied with power from the power source via the first device, and when the first device shifts to the standby state, or after detection by the detector that detects the presence of the user disappears. This specification detects, when a second time shorter than the first time elapses, a second device that shifts from a startup state to a standby state, and an abnormal behavior of a user who uses the first and second devices. A user management system comprising: the abnormal behavior detection device according to 1).

  The abnormal behavior detection program described in the present specification includes a first device that receives power supply from a power source and shifts from a startup state to a standby state when a first time has elapsed since the operation from the user was interrupted; When the first device is connected to the first device and receives power supply from the power source through the first device and the first device shifts to a standby state, or detection by a detector that detects the presence of a user is lost. An abnormal behavior detection program for causing a computer to detect an abnormal behavior of a user using a second device that shifts from a startup state to a standby state when a second time shorter than the first time has elapsed since Acquiring the information from a power information detection device that detects power consumption information in the first device and the second device connected to the first device, and acquiring the information. Based on the information acquired in the process, the first device and the second device connected to the first device shift from the activated state to the standby state, and both devices are in standby for a predetermined abnormal behavior monitoring time or longer. When it is determined that the state is maintained, or the first device and the second device connected to the first device shift from a standby state to an activated state, and both devices are in a predetermined abnormality. When it is determined that the activation state is maintained for the behavior monitoring time or longer, the user who uses the first device and the second device should be specified, and the same or equivalent behavior as the user specified in the specifying process should be taken From the information on the power consumption of the first device and the second device used by a plurality of other users, the first device and the second device used by the other users during the abnormal behavior monitoring time, When the computer is determined to be in a state different from the first device and the second device used by the specified user, the computer executes processing for determining that the specified user is performing an abnormal action This is an abnormal behavior detection program.

  The abnormal behavior detection method described in the present specification includes a first device that receives power supply from a power source and transitions from a startup state to a standby state when a first time elapses after an operation from a user is interrupted; When the first device is connected to the first device and receives power supply from the power source through the first device and the first device shifts to a standby state, or detection by a detector that detects the presence of a user is lost. When the second time shorter than the first time elapses from the second device that shifts from the activated state to the standby state, the abnormal behavior detecting method for detecting the abnormal behavior of the user using the second device, An acquisition step of acquiring the information from the power information detection device that detects information of power consumption in the first device and the second device connected to the first device, and the information acquired in the acquisition step Based on this, the first device and the second device connected to the first device shift from the activated state to the standby state, and both devices maintain the standby state for a predetermined abnormal behavior monitoring time or longer. Or when the first device and the second device connected to the first device shift from a standby state to an activated state, and both devices are activated for a predetermined abnormal behavior monitoring time or longer. If it is determined that the user uses the first device and the second device, a plurality of other steps that should take the same or equivalent actions as the user specified in the specific step From the information on the power consumption of the first device and the second device used by the user, the first device and the second device used by the other user specify the identification during the abnormal behavior monitoring time. The computer executes a determination step of determining that the specified user is performing an abnormal behavior when it is determined that the first device and the second device used by the user are different from each other. This is an abnormal behavior detection method.

  The abnormal behavior detection apparatus, program, and method described in the present specification have an effect of being able to appropriately detect abnormal behavior of the user. In addition, the user management system described in this specification has an effect of being able to appropriately manage user behavior.

It is a figure showing roughly the composition of the user management system concerning one embodiment. It is a figure which shows the connection relation of PC and LCD of a terminal for students. It is a figure which shows the standby time setting value of PC and LCD. FIG. 4A and FIG. 4B are diagrams illustrating examples of changes in power consumption in the student terminal. It is a figure which shows the hardware constitutions of an abnormal action detection server. It is a functional block diagram of an abnormal action detection server. It is a flowchart which shows abnormal action detection processing (the 1). It is a figure which shows the power consumption table according to state. FIG. 9A and FIG. 9B are diagrams for explaining step S30 in FIG. It is a flowchart which shows abnormal action detection processing (the 2). It is a flowchart which shows abnormal action monitoring reference time update processing. It is a flowchart which shows abnormal action monitoring time calculation processing. FIG. 13A is a diagram illustrating a power determination threshold value table, and FIG. 13B is a diagram illustrating a power consumption information table. It is a figure which shows an electric power waveform table. It is a figure which shows an abnormal action monitoring time calculation table. It is a figure which shows an abnormal action judgment occupation rate table. It is a figure which shows a lecture table. FIG. 18A is a diagram illustrating an abnormal action count (time) table, and FIG. 18B is a diagram illustrating an abnormal action count (lecture) table.

  Hereinafter, an embodiment of a user management system will be described in detail with reference to FIGS. FIG. 1 schematically shows a user management system 100 including an abnormal behavior detection server 10 as an abnormal behavior detection device. The user management system 100 includes an abnormal behavior detection server 10, a power tap management device 70, and a teacher terminal 31. The abnormal behavior detection server 10, the power tap management device 70, and the teacher terminal 31 are connected via a network 60 such as the Internet.

  A large number of student terminals 30 are connected to the power strip management device 70. The student terminal 30 is a terminal used by students (users) who take classes at schools and the like, and the teacher terminal 31 is a terminal used by teachers. The student terminal 30 and the teacher terminal 31 may be connected via the network 60 or may not be connected. In the user management system 100 of the present embodiment, the abnormal behavior detection server 10 detects whether or not a student using the student terminal 30 is performing abnormal behavior (for example, behavior such as dozing or playing a game) Processing to report to the teacher terminal 31 is performed.

  As shown in FIG. 2, the student terminal 30 includes a PC (Personal Computer) 40 as a first device and a display such as an LCD (Liquid Crystal Display) as a second device (hereinafter referred to as “LCD”). 80. As illustrated in FIG. 2, the PC 40 includes a processing unit 42, a power control unit 44, an operation detection unit 46, and a power supply unit 48. The processing unit 42 and the power supply control unit 44 are realized by the CPU of the PC 40 executing a program.

  The processing unit 42 executes a process to be executed on the PC. The power supply control unit 44 controls the power supply of the PC 40 based on the detection result of the operation detection unit 46. Here, the operation detection part 46 detects operation of a keyboard or a mouse. Therefore, the power control unit 44 changes the PC 40 from the power-on state (start-up state) to the standby state when the keyboard or mouse is not operated for a predetermined time (first time). Further, the power supply control unit 44 changes the power supply of the PC 40 to an on state (startup state) when a keyboard or mouse is operated from the standby state.

  The power supply unit 48 acquires power from the power tap 50 and supplies it to each unit of the PC 40, and supplies a part of the acquired power to the power supply unit 88 of the LCD 80.

  The LCD 80 includes a display unit 82, a power control unit 84, a human sensor 86, and a power supply unit 88.

  The display unit 82 displays information processed by the processing unit 42 of the PC 40. The power supply control unit 84 controls the power supply of the LCD 80 based on the detection result of the human sensor 86. Here, the human sensor 86 is a temperature sensor, an infrared sensor, or the like, and is a sensor that detects whether or not a person is present in front of the LCD 80. The power control unit 84 changes the LCD 80 from a power-on state (start-up state) to a standby state when the human sensor 86 does not detect a person continues for a second time shorter than the first time described above. To do. Further, the power supply control unit 44 changes the power supply of the LCD 80 to an ON state when the human sensor 86 detects a person when the LCD 80 is in a standby state. In the case where the LCD 80 is in the activated state, when the PC 40 changes from the activated state to the standby state, the power supply unit 88 changes the LCD 80 from the activated state to the standby state at the same time or almost simultaneously with the change of the PC 40 to the standby state. Change to

  The power supply unit 88 acquires power from the power tap 50 via the power supply unit 48 and supplies the acquired power to each unit of the LCD 80.

  Here, in the power supply control unit 44 and the power supply control unit 84, the time as shown in FIG. 3 is set as the standby time set value (first time, second time). That is, the power supply control unit 44 changes the PC 40 (and the LCD 80) to the standby state when the operation detection unit 46 does not detect the keyboard and mouse operations for 5 minutes (first time) from the state in which the PC 40 is activated. To do. Further, the power supply control unit 84 changes the LCD 80 to the standby state when the human sensor 86 does not detect a person for one minute (second time) from the state in which the LCD 80 is activated.

  Therefore, in this embodiment, normally, when the student is no longer in front of the student terminal 30 (LCD 80) (when the student leaves the seat), the LCD 80 first enters the standby state, and then the PC 40 enters the standby state. In this case, the change in power consumption in the student terminal 30 is as shown in FIG. On the other hand, if the student is in front of the student terminal 30, but the student does not operate the keyboard or mouse, the PC 40 is in a standby state and the LCD 80 is also in a standby state. In this case, the change in power consumption in the student terminal 30 is as shown in FIG.

  A change in power consumption of each student terminal 30 can be detected by a sensor 52 as a power information detection device built in the power tap 50 shown in FIG. It is assumed that the sensor 52 can detect power consumption in units of 1 W, for example. The detection result of the sensor 52 is transmitted to the power strip management device 70 and managed by the power strip management device 70. The same terminal as the student terminal 30 can be adopted for the teacher terminal 31 of FIG. However, the present invention is not limited to this, and as the teacher terminal 31, a terminal having a configuration different from that shown in FIG.

  Next, the abnormal behavior detection server 10 in FIG. 1 will be described. FIG. 5 schematically shows the hardware configuration of the abnormal behavior detection server 10. As shown in FIG. 5, the abnormal behavior detection server 10 includes a CPU 90, a ROM 92, a RAM 94, a storage unit (HDD (Hard Disk Drive)) 96, a network interface 97, a portable storage medium drive 99, and the like. Each part of the abnormal behavior detection server 10 is connected to the bus 98. In the abnormal behavior detection server 10, the CPU 90 stores a program (abnormal behavior detection program) stored in the ROM 92 or HDD 96 or a program (abnormal behavior detection program) read from the portable storage medium 91 by the portable storage medium drive 99. By executing the function, the function of each unit in FIG. 6 is realized.

  FIG. 6 shows a functional block diagram of the abnormal behavior detection server 10. As shown in FIG. 6, in the abnormal behavior detection server 10, the CPU 90 executes the abnormal behavior detection program, whereby the power consumption information acquisition unit 20, the power data acquisition unit 22 as the acquisition unit, the specification unit 24, and the determination unit 26. The function as the display unit 28 and the setting unit 32 is realized. FIG. 6 also shows various tables stored in the RAM 94, the HDD 96, and the like. The various tables include a power determination threshold table 102, a power consumption information table 104, a power waveform table 106, an abnormal action monitoring time calculation table 108, an abnormal action determination occupancy table 110, a lecture table 112, and an abnormal action. A frequency (time zone) table 114 and an abnormal behavior frequency (lecture) table 116 are included.

  The power consumption information acquisition unit 20 acquires the power consumption information 1 to 3 of each student terminal 30 and stores it in the power consumption information table 104. The power consumption information 1 to 3 means power consumption information for each state (starting state or standby state) of the student terminal 30, and details of the information will be described later.

  The power data acquisition unit 22 acquires the power consumed by each outlet (each student terminal 30) of the power tap 50 at a predetermined time interval (for example, every one minute) and stores it in the power waveform table 106.

  Based on the power consumption of each student terminal 30 acquired by the power data acquisition unit 22, the specifying unit 24 specifies a student who may be performing an abnormal action. The determination unit 26 uses the power consumption of the student terminal 30 used by the student specified by the specifying unit 24 and another student who should take the same or equivalent action as the student (that is, a student taking the same class). When the power consumption of the student terminal 30 used by is in a state different from that of the student terminal 30, it is determined that the student specified by the specifying unit 24 is performing abnormal behavior.

  The display unit 28 displays information on the student determined by the determination unit 26 as performing an abnormal behavior on the teacher terminal 31. The setting unit 32 sets an abnormal action reference time.

  The power determination threshold value table 102 is a table that prescribes the width in order to set a value having a predetermined width as the power consumption information 1 to 3. The power determination threshold value table 102 is a table as shown in FIG. 13A, and here, ± 3 W is defined as the width. The power consumption information table 104 is a table that defines the values of the power consumption information 1 to 3 as shown in FIG.

  As shown in FIG. 14, the power waveform table 106 is a table that stores the power consumption of each terminal every predetermined time (for example, 1 minute).

The abnormal behavior monitoring time calculation table 108 is a table used by the specifying unit 24 to determine the possibility of abnormal behavior of each student, or used by the setting unit 32 to calculate abnormal behavior monitoring time. . Specifically, as shown in FIG. 15, a portion for storing the time of abnormal behavior of each student (time during which behavior is different from other students) (lines A to F), and standby release time average A portion for storing an abnormal behavior monitoring reference time, an abnormal behavior monitoring time correction value, and an abnormal behavior monitoring time. Although the abnormal behavior monitoring time correction value and the abnormal behavior monitoring time are actually different values for each student, for convenience of illustration, only one (for example, student A) is shown in FIG. Yes. The abnormal behavior monitoring time is a time obtained by the following equation (1).
Abnormal behavior monitoring time = abnormal behavior monitoring reference time + abnormal behavior monitoring time correction value
... (1)

  The abnormal behavior determination occupancy ratio table 110 indicates how many students (occupancy ratio) have different behaviors from the students who may be performing abnormal behavior among the students around the students who may be performing abnormal behavior. If it is taken, it is a table which determines whether it determines with abnormal behavior being actually performed. Specifically, the abnormal action determination occupation ratio table 110 is a table as shown in FIG. 16, and the occupation ratio is determined according to the number of abnormal actions in the past.

  The lecture table 112 stores information on each lecture and abnormal behavior monitoring reference time in each lecture. Specifically, the lecture table 112 is a table as shown in FIG. In the lecture table 112 of FIG. 17, the lecture ID, time limit, day of the week, and lecture name of each lecture are defined as information on each lecture.

  As shown in FIG. 18A, the abnormal action count (time slot) table 114 includes a time slot, the abnormal action count, and the number of lecture participants. The abnormal action count (lecture) table 116 includes a lecture ID, the abnormal action count, and the number of lecture participants as shown in FIG. Note that the tables in FIGS. 18A and 18B are tables created for each student.

  Next, the processing of the abnormal behavior detection server 10 will be described in detail based on the flowcharts of FIGS. 7 and 10 to 12 and with reference to other drawings.

  FIG. 7 shows a flowchart of the abnormal behavior detection process (part 1). The abnormal behavior detection process (part 1) in FIG. 7 is a process of detecting an abnormal behavior (such as dozing) of a student during a class and reporting it to the teacher terminal 31. As a premise that this processing is performed, it is assumed that each student who takes a lesson logs in to each student terminal 30 with a user ID, a password, or the like. In other words, each student and the student terminal 30 are associated with each other.

  In the process of FIG. 7, first, in step S10, the power consumption information acquisition unit 20 uses the power consumption information 1 as the power consumption information 1 and the range of the power consumption value ± power determination threshold when both the PC 40 and the LCD 80 are operating (started up). Is stored. Specifically, the power consumption information acquisition unit 20 acquires the measurement result (power consumption value) of each sensor 52 in a state where both the PC 40 and the LCD 80 are operating. Further, the power consumption information acquisition unit 20 acquires a power determination threshold value (here, ± 3 W) from the power determination threshold value table 102 illustrated in FIG. And the power consumption information acquisition part 20 stores the range calculated | required from the measurement result of the sensor 52, and a power determination threshold value in the column of "Power consumption information 1" of the power consumption information table 104 of FIG.13 (b). For example, if the measurement result of the sensor 52 is the “start-up” value (100 W) in FIG. 8, the power consumption information acquisition unit 20 displays the “power consumption information 1” column of the power consumption information table 104. 97W to 103W are stored in (see FIG. 13B).

  Next, in step S <b> 12, the power consumption information acquisition unit 20 stores, as power consumption information 2, a range of power consumption value ± power determination threshold when only the PC 40 is operating. In this case, the power consumption information acquisition unit 20 performs the same process as in step S10. For example, when the measurement result of the sensor 52 is the value (85 W) of “LCD standby” in FIG. 8, the power consumption information acquisition unit 20 stores “power consumption information 2” in the power consumption information table 104. 82W to 88W are stored in the column (see FIG. 13B).

  Next, in step S <b> 14, the power consumption information acquisition unit 20 stores, as power consumption information 3, a range of power consumption value ± power determination threshold when the PC 40 and the LCD 80 are in a standby state. In this case, the power consumption information acquisition unit 20 performs the same processing as steps S10 and S12. For example, when the measurement result of the sensor 52 is the “PC standby” value (10 W) in FIG. 8, the power consumption information acquisition unit 20 stores “power consumption information 3” in the power consumption information table 104. 7W to 13W is stored in the column (see FIG. 13B).

  Since the processing in steps S10 to S14 is performed for all outlets (all student terminals 30), the power consumption information table 104 in FIG. 13B is generated for each outlet (student terminal 30). Will be.

  Next, in step S16, the power data acquisition unit 22 acquires the power consumption of all the PCs 40 and LCDs 80 in the classroom at a constant period and stores them in the power waveform table 106 of FIG. In the example of FIG. 14, the power consumption of six student terminals (symbols A to D) is acquired at 1-minute intervals.

  Next, in step S18, the specifying unit 24 determines whether or not the power consumption of each student terminal 30 is within the range of the power consumption information 3 (7W to 13W). For example, at 8:01 in FIG. 14, the power consumption of all terminals is 100 W, so the determination here is denied. On the other hand, at 8:02 in FIG. 14, since the power consumption of the terminal (D) is 10 W, the determination here is affirmed. If the determination in step S18 is negative, the process returns to step S16. If the determination in step S18 is positive, the process proceeds to step S20.

  In step S20, the specifying unit 24 determines whether or not the previous value of the power consumption information 3 (power consumption before becoming the power consumption information 3) is the power consumption information 1 (97W to 100W). If the terminal (D) is in the state of 8:02, its previous value (value of 8: 1) is 100 W, so the determination here is affirmed. On the other hand, if the terminal (A) is in the 8: 7 state, its previous value (value of 8: 6) is 85 W, so the determination here is denied. If the determination in step S20 is affirmative, the process proceeds to step S22. If the determination is negative, the process returns to step S16. In addition, when determination of step S20 is affirmed, it is a case where the change of power consumption as shown in FIG.4 (b) is shown, and it means that the student may be asleep. On the other hand, if the determination in step S20 is negative, it indicates a change in power consumption as shown in FIG. 4 (a), which means that the student has left (the absence is the current detection). Different from the subject's abnormal behavior).

  In the process of FIG. 7, when the process proceeds to step S <b> 22, the specifying unit 24 monitors the time that is the power consumption information 3. More specifically, the specifying unit 24 counts up for 60 seconds in step S22. In the next step S24, the specifying unit 24 determines whether or not the range of the power consumption information 3 is maintained. When the determination here is affirmed, the process returns to step S22, and the specifying unit 24 monitors the time that is the power consumption information 3 again (counts up for 60 seconds). That is, it can be said that the specifying unit 24 measures the time during which the power consumption information 3 is continued by repeating steps S22 and S24.

  When the determination in step S24 is negative and the process proceeds to step S26, the specifying unit 24 stores the time in the power consumption information 3 as the standby release time. Here, the abnormal behavior monitoring time calculation table 108 in FIG. 15 stores the number of seconds. For example, in the example of FIG. 15, 60 seconds is stored in the column of 8: 2 and 3 minutes of the terminal (D), or 60 seconds is stored in the column of 8: 8 and 9 minutes of the terminal (B). Or stored.

  Next, in step S28, the specifying unit 24 determines whether or not the standby release time is longer than the abnormal behavior monitoring time. Here, the abnormal behavior monitoring time is the time described in the lowermost part of FIG. 15, and when a certain student's standby release time is longer than the abnormal behavior monitoring time, the student is performing abnormal behavior. It means that there is a possibility. As described above, the abnormal behavior monitoring time is different for each student, but here, for convenience of explanation, the abnormal behavior monitoring time is a time common to all students (abnormal behavior monitoring time in FIG. 15). It will be explained as a thing.

  If the determination in step S28 is affirmative, that is, if it is determined that there is a possibility that the student is performing abnormal behavior, the process proceeds to step S29. On the other hand, if the determination in step S28 is negative, that is, if it is determined that there is no possibility that the student is performing abnormal behavior, the process proceeds to step S34. When the process proceeds to step S29, the identifying unit 24 identifies a student who may be performing an abnormal action, and proceeds to the next step S30.

  When the process proceeds to step S30, the determination unit 26 acquires power consumption information of all peripheral student terminals of the student terminals used by the students who may be performing the abnormal behavior specified in step S29. Then, the occupation ratio of the power consumption information 1 is obtained. Here, as shown in FIG. 9A, the terminal (D) continues to be detected by the human sensor 86, while the operation detection unit 46 no longer detects the operation, and 5 minutes after the detection is lost. The power consumption is changed from 100 W to 10 W later (after the second time has elapsed). That is, the process of step S30 is a process for obtaining the ratio of terminals showing a change in power consumption as shown in FIG.

  For example, at a time (8:13, 14 minutes) when a student using the terminal (D) in FIG. 14 may be performing an abnormal behavior, the power consumption of other terminals is 100 W (power consumption information 1 ), The occupation ratio is 100%. On the other hand, at the time (8: 18-25) when the student using the terminal (A) in FIG. 14 may be performing abnormal behavior, only the power consumption of one terminal of the peripheral terminal is 100 W (consumption Since the power information is 1), the occupation ratio is 1/5 = 20%.

  Next, in step S <b> 32, the determination unit 26 determines whether the occupation rate of the power consumption information 1 is equal to or greater than the abnormal behavior determination occupation rate. Here, as shown in the abnormal behavior determination occupation ratio table 110 of FIG. 16, the abnormal behavior determination occupation ratio varies depending on the number of past abnormal behaviors of each student. For example, for the terminal (D), when no abnormal behavior has been detected in the past, the abnormal behavior determination occupancy rate is 100%. On the other hand, when the number of times abnormal behavior has been detected in the past is the third time or the fifth time or more, the abnormal behavior determination occupancy is as low as 90% or 80%. In this way, it is easier to detect abnormal behaviors of students with a higher number of abnormal behaviors by lowering the abnormal behavior judgment occupancy rate according to the increase in the number of abnormal behaviors (increase monitoring as the number of abnormal behaviors increases). Can do.

  If the determination in step S32 is affirmative, that is, it is possible to determine that the power consumption information of a terminal that may be performing an abnormal action is different from that of many nearby terminals and that the terminal is performing an abnormal action. If so, the process proceeds to step S36. On the other hand, if the determination in step S32 is negative, that is, if there is a low possibility that a terminal that may be performing an abnormal action is actually performing an abnormal action, the process returns to step S16.

  When the determination in step S32 is affirmed and the process proceeds to step S36, the determination unit 26 determines that the student using the student terminal 30 that has detected the power consumption information 3 is performing abnormal behavior. In step S <b> 38, the display unit 28 displays the abnormal behavior appropriate person on the teacher terminal 31. When the process of step S38 ends, the entire process of FIG. 7 ends.

  On the other hand, when the determination in step S28 is negative (when it is determined that there is no abnormal action), in step S34, the setting unit 32 sets the abnormal action monitoring reference time using the standby release time. The “standby release time” in step S34 is the time required for a student who has not performed an abnormal action to release the standby of the student terminal 30 (the time required from the time when the student terminal 30 enters the standby state until the mouse is operated). ).

  For example, as shown in FIG. 15 at 8: 4, when the abnormal behavior monitoring reference time up to that time is 180 seconds and the current standby release time is 120 seconds, the average value thereof is used. Let (180 + 120) / 2 = 150 seconds be the new abnormal behavior monitoring reference time. Here, 180 seconds means the abnormal behavior monitoring reference time in the previous same lecture. This abnormal behavior monitoring reference time is stored in the lecture table 112 of FIG. If there is no value in the lecture table 112 of FIG. 17, the standby time setting value of the PC 40 (5 minutes in FIG. 3) may be used. On the other hand, as shown in FIG. 15 at 8:25, when the abnormal behavior monitoring reference time up to that time is 150 seconds and the current standby release time is 60 seconds, the average value thereof is used. Let (150 + 60) / 2 = 105 seconds be the new abnormal behavior monitoring reference time. Thereafter, the process returns to step S16. A predetermined time (for example, 60 seconds) may be set as the lower limit value of the abnormal behavior monitoring reference time.

  By performing the above processing, it is possible to detect abnormal behavior of the student using the student terminal 30 (here, dozing) and display it on the teacher terminal 31, and cancel the abnormal behavior monitoring reference time from standby. It is possible to change based on time. In the table of FIG. 15, abnormal behavior is detected at 8: 7 and 8 minutes of the terminal (B) and at 8:13 and 14 minutes of the terminal (D).

  Next, the abnormal behavior detection process (part 2) will be described with reference to the flowchart of FIG. The abnormal behavior detection process (part 2) in FIG. 10 is a process of detecting abnormal behavior of a student (such as a game on the student terminal 30) during a class and reporting it to the teacher terminal 31. In FIG. 10, steps corresponding to the steps in the flowchart of FIG. 7 are shown with step numbers obtained by adding 100 to the step numbers of FIG. 7.

  In the process of FIG. 10, the processes from step S110 to S116 are performed in the same manner as steps S10 to S16 in FIG. If steps S10 to S14 have already been performed, the processes of steps S110 to S114 may be omitted. On the other hand, if steps S110 to S114 have already been performed, the processes of steps S10 to S14 in FIG. 7 may be omitted.

  In steps S118 to S126 of FIG. 10, unlike the steps S18 to S26 of FIG. 7, the time when the student terminal 30 whose power consumption information has changed from 3 to 1 continues the power consumption information 1 is referred to as “PC operation time”. To do.

  In step S128, the specifying unit 24 determines whether the PC operation time is longer than the abnormal behavior monitoring time. When the determination here is affirmed, the specifying unit 24 specifies a student who is performing abnormal behavior in step S129, and proceeds to step S130. In step S <b> 130, the determination unit 26 acquires the power consumption information of the student terminals 30 around the student and obtains the occupation ratio of the power consumption information 3. Further, in step S132, the determination unit 26 determines whether or not the occupation rate of the power consumption information 3 is equal to or greater than the abnormal behavior determination occupation rate (see FIG. 16).

  If the determination in step S132 is affirmed, the determination unit 26 indicates that the student of the student terminal 30 that has detected the power consumption information 1 is performing an abnormal behavior (other students are not operating the student terminal). However, it is determined that the student terminal is being operated. In step S 138, the display unit 28 displays that fact on the teacher terminal 31. In the example of FIGS. 14 and 15, the teacher terminal 31 displays that the student using the terminal (C) is acting abnormally at 8:19.

  Through the processing of FIG. 10, the abnormal behavior of the student using the student terminal 30 (here, a game on the student terminal 30) can be detected, and the student information is stored in the teacher terminal 31. Can be displayed.

  In addition, in the process of FIG. 10, it is good also as determination of abnormal action in the terminal 30 for students based on a teacher's utterance timing with the determination of step S132 or instead of this. In this case, a voice recognition sensor for recognizing the teacher's voice is provided in the vicinity of the teacher terminal 31, and the determination unit 26 detects the voice of the teacher at the time when the power consumption information 1 is detected by the student terminal 30. Whether or not is recognized. Then, when the teacher's voice is detected for a long time at the time, the determination unit 26 determines that an abnormal action has been performed on the student terminal 30 that has detected the power consumption information 1. By doing in this way, it becomes possible to detect abnormal behavior (games etc.) in the class appropriately.

  In the process of FIG. 10, the same process as the process of step S34 of FIG. 7 is not performed.

  Next, the abnormal behavior monitoring reference time update process will be described with reference to the flowchart of FIG. This processing is processing performed by the setting unit 32 in FIG. Note that the processing of FIG. 11 is executed concurrently with other processing.

  In the process of FIG. 11, first, in step S <b> 52, the setting unit 32 determines whether or not an abnormal behavior has been detected for a predetermined time (for example, 10 minutes) after detecting the previous abnormal behavior. If the determination here is affirmed, the process proceeds to step S54, and the setting unit 32 increases the abnormal behavior monitoring reference time by 10% and stores it in the abnormal behavior monitoring time calculation table 108.

  Next, in step S56, the setting unit 32 determines whether or not the class end time has come. If the determination here is negative, the process returns to step S52, but if the determination in step S56 is positive, the process proceeds to step S58. In step S58, the setting unit 32 registers the abnormal behavior monitoring reference time at the lecture end time as the next value of the abnormal behavior monitoring reference time of the finished lecture in the lecture table 112. Note that the end time of each lecture can be known from the time limit of the lecture table in FIG. 17 (the time start time and end time are defined separately).

  As described above, the abnormal behavior monitoring reference time can be increased as the time during which abnormal behavior is not detected becomes longer. Further, since the setting unit 32 registers the next value of the abnormal behavior monitoring reference time in the lecture table 112, the specifying unit 24 can continuously use the abnormal behavior monitoring reference time for each lecture.

  Next, the abnormal behavior monitoring time calculation process will be described with reference to the flowchart of FIG. This processing is processing performed by the setting unit 32 in FIG. Note that the process in FIG. 12 is a process executed in parallel with other processes, for example, a process performed every predetermined time. Moreover, the process of FIG. 12 is a process performed for every student.

  In the process of FIG. 12, first, in step S60, student grade information is obtained from a grade database (not shown). Next, in step S62, the setting unit 32 determines whether the acquired score is equal to or higher than the average score. When judgment here is affirmed, it transfers to step S64.

  In step S64, the setting unit 32 resets (sets to the initial value) the abnormal behavior monitoring time correction value. In the next step S72, the setting unit 32 calculates the abnormal behavior monitoring time using the reset abnormal behavior monitoring time correction value. More specifically, the setting unit 32 calculates the abnormal behavior monitoring time from the sum of the abnormal behavior monitoring reference time and the abnormal behavior monitoring time correction value (initial value) based on the above equation (1). Then, the setting unit 32 stores the abnormal behavior monitoring time correction value and the calculated abnormal behavior monitoring time in the abnormal behavior monitoring time calculation table 108 in FIG.

  On the other hand, if the determination in step S62 is negative, that is, if the student's grade is lower than the average score, the process proceeds to step S66. In step S66, the setting unit 32 counts the number of abnormal behaviors detected per time slot for each student, and stores it in the abnormal behavior count (time slot) table 114 of FIG. Next, in step S68, the setting unit 32 counts the number of abnormal behaviors detected per lecture for each student and stores it in the abnormal behavior number (lecture) table 116 in FIG.

  Next, in step S70, the setting unit 32 sets the abnormal behavior monitoring time correction value so that the monitoring time is shortened for each student when there are many abnormal behaviors. Specifically, the abnormal behavior monitoring time correction value is set as follows.

  First, the setting unit 32 calculates the abnormal action ratio c for each time period. Specifically, from FIG. 18A, the ratio of the 8 o'clock range is 3/6 = 0.5, the ratio of the 9 o'clock range is 0/6 = 0, and the ratio of the 10 o'clock range is 2/6 = 0. The ratio of 13:00 to 13:00 is 1/6 = 0.17.

  Next, the setting unit 32 calculates the abnormal action ratio e for each lecture. Specifically, from FIG. 18B, the ratio of lecture ID = 1 (Japanese history (see FIG. 17)) is 3/6 = 0.5, and the ratio of lecture ID = 2 (world history) is 2/6. = 0.33, the ratio of lecture ID = 3 (Japanese) is 2/6 = 0.33, the ratio of lecture ID = 4 (English) is 0/6 = 0,.

Then, the setting unit 32 calculates the abnormal behavior monitoring reference time correction value b (abnormal behavior monitoring reference time / 2 <b <0) based on the following equation (2). In the following equation (2), the abnormal action monitoring reference time is a.
b = − {a / 2 × ((c + e) / 2)} (2)

  Here, ((c + e) / 2) represents the average of c and e. For example, in a Japanese history class at 8 o'clock, ((c + e) / 2) becomes {(2/6) + (2/6)} / 2 = 2/6. When ((c + e) / 2) exceeds 1, it is assumed that ((c + e) / 2) = 1.

Therefore, for example, in the case of a Japanese history class at 8 o'clock, if the abnormal behavior monitoring reference time a = 180 (FIG. 17),
b = − (180/2 × (2/6)) = − 30
It becomes.

Then, the setting unit 32 sets the abnormal behavior monitoring time based on the above equation (1).
Abnormal behavior monitoring time = 180 + (− 30) = 150 (seconds)
And calculate.

  As described above, by performing the processing of FIG. 12, the abnormal behavior monitoring time for each student can be calculated and set so as to decrease as the abnormal behavior increases. As a result, it is possible to set an appropriate abnormal behavior monitoring time for each student, and thus it is possible to appropriately detect the abnormal behavior of the student.

  As described above in detail, according to the present embodiment, as described with reference to FIG. 7, the power data acquisition unit 22 acquires information on the power consumption (power value) in the PC 40 and the LCD 80 from the sensor 52. Further, the specifying unit 24 makes the PC 40 and the LCD 80 shift from the activated state to the standby state based on the information acquired by the power data acquiring unit 22, and the PC 40 and the LCD 80 maintain the standby state for the abnormal action monitoring time or longer. If it is determined that there is a student, the student who uses the PC 40 and the LCD 80 is specified. Then, the determination unit 26 determines that the PC and LCD used by other users are abnormal from the information on the power consumption of the PC and LCD used by neighboring students who are taking the same class as the user specified by the specifying unit 24. If it is determined that the state is different from the PC and LCD used by the identified student during the behavior monitoring time, it is determined that the identified student is performing an abnormal behavior. As described above, in this embodiment, when the PC 40 and the LCD 80 shift from the activated state to the standby state, that is, when the PC 40 is not operated even though the student is present (possibility of abnormal behavior). When the identification unit 24 identifies the student, the determination unit 26 determines whether or not the behavior of other students in the vicinity is different from that of the identified student. As a result, it is determined that the identified student is performing an abnormal behavior (such as dozing) that the other student is operating the PC 40 but not operating the PC 40 despite being seated. can do. Therefore, according to the abnormal behavior detection server 10 of the present embodiment, it is possible to appropriately detect the abnormal behavior of a student in consideration of not only terminals that may be performing abnormal behavior but also peripheral terminals. Is possible. Further, according to the user management system 100 of the present embodiment, the abnormal behavior detection server 10 that can appropriately detect the abnormal behavior of the student is provided, so that the user's behavior can be appropriately managed.

  In the present embodiment, as described with reference to FIG. 10, the specifying unit 24 moves the PC 40 and the LCD 80 from the standby state to the activated state based on the information acquired by the power data acquisition unit 22, and the PC 40 and the LCD 80. However, when it is determined that the activation state is maintained for the abnormal behavior monitoring time or longer, the student who uses the PC 40 and the LCD 80 is specified. Then, the determination unit 26 determines that the PC and LCD used by other users are abnormal from the information on the power consumption of the PC and LCD used by neighboring students who are taking the same class as the user specified by the specifying unit 24. If it is determined that the state is different from the PC and LCD used by the identified student during the behavior monitoring time, it is determined that the identified student is performing an abnormal behavior. As described above, in this embodiment, when the PC 40 and the LCD 80 shift from the standby state to the activated state, the identifying unit 24 identifies the student, and the determining unit 26 identifies the students of other nearby students. It is determined whether or not the action is different. As a result, the identified student is performing an abnormal behavior (such as a game using the student terminal 30 (PC 40)) that the other student is not operating the PC 40 while the PC 40 is being operated. Can be judged. Therefore, according to the abnormal behavior detection server 10 of the present embodiment, it is possible to appropriately detect the abnormal behavior of the student.

  In this embodiment, the abnormal behavior monitoring time is the sum of the abnormal behavior monitoring reference time and the abnormal behavior monitoring time correction value that varies based on the abnormal behavior history (number of times) of each student. . Thereby, in this embodiment, the abnormal behavior monitoring time can be set to an appropriate value according to the history of abnormal behavior of each student, and accordingly, the abnormal behavior can be detected appropriately using the abnormal behavior monitoring time. It becomes.

  In the present embodiment, the abnormal behavior monitoring reference time is determined based on the time until the student terminal 30 (PC 40, LCD 80) enters the activated state from the standby state within the abnormal behavior monitoring time (step 34). ). In this way, by determining the abnormal behavior monitoring reference time based on the time from the standby state to the activated state (standby release time) within the abnormal behavior monitoring time, appropriate abnormal behavior based on each student's history It is possible to set the monitoring reference time and the abnormal behavior monitoring time.

  In the present embodiment, a sensor 52 that can detect the power consumption in units of outlets included in the power tap 50 is employed as a sensor that detects power consumption. Therefore, by using the power tap as described above, it is not necessary to prepare / install a sensor separately. Thereby, complication of wiring and the like can be suppressed. Further, the power strip 50 having the sensor 52 can be used for other purposes (such as visualization of power consumption). Therefore, in a school or the like where the power strip 50 has already been deployed for another use, the user management system 100 can be introduced simply and at low cost. In addition, since the human sensor 86 is used as a detector for detecting the presence of the student, it is possible to reduce the cost as compared with the case of measuring an electroencephalogram or a body temperature as in Patent Document 1. is there.

  In addition, it is considered that the lower the value of the abnormal behavior ratio (e) for each lecture described in step S72 of FIG. 12, the more concentrated the students are working on the lesson. Therefore, for example, a value obtained by adding up the ratios (e) of abnormal behavior of all students for each lecture may be used as a class evaluation value, and the class may be evaluated based on the class evaluation value. By doing in this way, it becomes possible to optimize the lesson of the whole school and to improve scholastic ability.

  In the above-described embodiment, the case where two types of abnormal behavior are detected by performing the processing of FIG. 7 and the processing of FIG. 10 is described, but the present invention is not limited to this. That is, only one of the processes in FIGS. 7 and 10 may be performed.

  In the above embodiment, the case where the abnormal behavior monitoring reference time correction value is obtained for each student has been described. However, the present invention is not limited to this, and the abnormal behavior monitoring reference time correction value may be common to all students. Further, the abnormal behavior monitoring reference time update process of FIG. 11 may not be performed. The abnormal behavior monitoring time may be a fixed value. In this case, the abnormal behavior monitoring reference time setting / updating process (step S24 in FIG. 7, the process in FIG. 11) and the process of calculating the abnormal behavior monitoring reference time correction value (the process in FIG. 12) may be omitted. .

  In the above embodiment, a case has been described in which the specifying unit 24 specifies a student who is performing an abnormal behavior on the student terminal 30 using the power consumption value. However, the present invention is not limited to this. The identifying unit 24 may identify a student who is performing an abnormal behavior on the student terminal 30 using the power waveform. In this case, the specifying unit 24 can specify the student who is performing the abnormal action by pattern matching between the obtained power waveform and the pattern of the power waveform obtained when the abnormal action is performed.

  In addition, although the said embodiment demonstrated the case where the information of the student who is performing abnormal behavior was displayed on the terminal 31 for teachers, it is not restricted to this. For example, information on students who are performing abnormal behavior may be stored in the abnormal behavior detection server 10. In this case, the teacher may read the information held in the abnormal behavior detection server 19 when examining the student's grade.

  In the above embodiment, the case where the first device is the PC 40 and the second device is the LCD 80 has been described. However, the present invention is not limited to this, and other devices may be employed as the first and second devices. It is also good.

  In the above embodiment, the case where the first device and the second device are part of the student terminal 30 has been described. However, the present invention is not limited to this. For example, the first device and the second device may be part of a terminal used by each individual who constitutes a group that should perform the same or equivalent behavior outside the school.

  The above processing functions can be realized by a computer. In that case, a program describing the processing contents of the functions that the processing apparatus should have is provided. By executing the program on a computer, the above processing functions are realized on the computer. The program describing the processing contents can be recorded on a computer-readable recording medium.

  When the program is distributed, for example, it is sold in the form of a portable recording medium such as a DVD (Digital Versatile Disc) or a CD-ROM (Compact Disc Read Only Memory) on which the program is recorded. It is also possible to store the program in a storage device of a server computer and transfer the program from the server computer to another computer via a network.

  The computer that executes the program stores, for example, the program recorded on the portable recording medium or the program transferred from the server computer in its own storage device. Then, the computer reads the program from its own storage device and executes processing according to the program. The computer can also read the program directly from the portable recording medium and execute processing according to the program. Further, each time the program is transferred from the server computer, the computer can sequentially execute processing according to the received program.

  The above-described embodiment is an example of a preferred embodiment of the present invention. However, the present invention is not limited to this, and various modifications can be made without departing from the scope of the present invention.

In addition, the following additional notes are disclosed regarding the above description.
(Supplementary Note 1) A first device that shifts from a startup state to a standby state when a first time elapses after an operation from a user is interrupted by receiving power supply from a power source, and connected to the first device It is shorter than the first time after receiving the power supply from the power source through the first device and when the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. An abnormal behavior detecting device for detecting an abnormal behavior of a user who uses a second device that transitions from a startup state to a standby state when a second time has elapsed, wherein the first device and the first device include Based on the information acquired by the acquisition unit that acquires the information from the power information detection device that detects the power consumption information in the connected second device, the first device and the information When the second device connected to the first device shifts from the activated state to the standby state and both devices determine that the standby state has been maintained for a predetermined abnormal behavior monitoring time, or It is determined that the first device and the second device connected to the first device have transitioned from the standby state to the activated state, and both devices have maintained the activated state for a predetermined abnormal behavior monitoring time. The first device used by a plurality of other users who should take the same or equivalent action as the user specified by the specifying unit, and the specifying unit that specifies the user who uses the first device and the second device And the first device used by the identified user and the first device used by the other user during the abnormal behavior monitoring time, based on the power consumption information of the second device, and Serial When it is determined that has the second device is different from state, abnormal behavior detection apparatus and a determination unit that determines that the user who the specific is the abnormal behavior.
(Supplementary Note 2) The abnormal behavior monitoring time is the sum of the abnormal behavior monitoring reference time, which is a fixed value or a variable value, and the abnormal behavior monitoring time correction value that varies based on the history of the abnormal behavior of the user. The abnormal behavior detecting device according to supplementary note 1, characterized by:
(Supplementary Note 3) The abnormal behavior monitoring reference time is based on the time until the first and second devices used by the identified user enter the activated state from the standby state within the abnormal behavior monitoring time. The abnormal behavior detecting device according to supplementary note 2, wherein the abnormal behavior detecting device is determined.
(Supplementary Note 4) The abnormal behavior detection device according to any one of Supplementary Notes 1 to 3, wherein the power consumption information is a value of the power consumption or a waveform of the power consumption.
(Additional remark 5) The said electric power information detection apparatus is a power sensor which can measure the power consumption value for every outlet, and the said detector is a human sensitive sensor in any one of additional marks 1-4 characterized by the above-mentioned. Abnormal behavior detection device.
(Supplementary Note 6) A first device that shifts from a startup state to a standby state when a first time has elapsed since the operation from the user was interrupted by receiving power supply from the power source, and connected to the first device It is shorter than the first time after receiving the power supply from the power source through the first device and when the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. The second device that transitions from the activated state to the standby state at the time when the second time has elapsed and the abnormal behavior of the user who uses the first and second devices are detected. A user management system comprising: an abnormal behavior detection device.
(Supplementary Note 7) A first device that transitions from a startup state to a standby state when a first time has elapsed since the user's operation was interrupted upon receiving power supply from a power source, and connected to the first device It is shorter than the first time after receiving the power supply from the power source through the first device and when the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. An abnormal behavior detection program for causing a computer to detect an abnormal behavior of a user using a second device that transitions from a startup state to a standby state when a second time has elapsed, the first device and the first device From the power information detection device that detects information of power consumption in the second device connected to one device, based on the information acquired in the acquisition process, acquiring the information, It has been determined that the first device and the second device connected to the first device have transitioned from the activated state to the standby state, and that both devices have maintained the standby state for a predetermined abnormal behavior monitoring time. Or the first device and the second device connected to the first device shift from the standby state to the activated state, and both devices maintain the activated state for a predetermined abnormal behavior monitoring time or more. When it is determined that the user uses the first device and the second device, the user uses the plurality of other users who should take the same or equivalent action as the user specified in the specifying process From the power consumption information of the first device and the second device, the first device used by the other user and the second device used by the specified user during the abnormal behavior monitoring time. An abnormal behavior detection that causes the computer to execute a process of determining that the identified user is performing an abnormal behavior when it is determined that the first device and the second device are different from each other. program.
(Supplementary Note 8) The abnormal behavior monitoring time is the sum of the abnormal behavior monitoring reference time, which is a fixed value or a variable value, and the abnormal behavior monitoring time correction value that varies based on the history of abnormal behavior of the user. The abnormal behavior detection program according to appendix 7, characterized by:
(Supplementary Note 9) The abnormal behavior monitoring reference time is based on a time until the first and second devices used by the identified user change from the standby state to the activated state within the abnormal behavior monitoring time. The abnormal behavior detection program according to supplementary note 8, wherein the abnormal behavior detection program is determined.
(Additional remark 10) The information of the said power consumption is the value of the said power consumption, or the waveform of the said power consumption, The abnormal action detection program in any one of additional marks 7-9 characterized by the above-mentioned.
(Supplementary Note 11) A first device that shifts from a startup state to a standby state when a first time elapses after an operation from a user is interrupted by receiving power supply from a power source, and is connected to the first device. It is shorter than the first time after receiving the power supply from the power source through the first device and when the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. An abnormal behavior detection method for detecting an abnormal behavior of a user using a second device that transitions from a startup state to a standby state when a second time has elapsed, wherein the first device and the first device include: Based on the acquisition process of acquiring the information from the power information detection apparatus that detects information of power consumption in the connected second apparatus, and the information acquired in the acquisition process, the first apparatus And when the second device connected to the first device shifts from the activated state to the standby state, and both devices maintain the standby state for a predetermined abnormal behavior monitoring time, or It is determined that the first device and the second device connected to the first device have transitioned from a standby state to an activated state, and both devices have maintained the activated state for a predetermined abnormal behavior monitoring time or more. In this case, the specifying step for specifying the user who uses the first device and the second device, and the second user who uses the plurality of other users who should take the same or equivalent action as the user specified in the specifying step. From the power consumption information of one device and the second device, the first device used by the other user and the second device used by the identified user during the abnormal behavior monitoring time. An abnormal behavior characterized in that the computer executes a determination step of determining that the specified user is performing an abnormal behavior when it is determined that the device and the second device are in a different state. Detection method.
(Supplementary Note 12) The abnormal behavior monitoring time is the sum of the abnormal behavior monitoring reference time that is a fixed value or a variable value and the abnormal behavior monitoring time correction value that varies based on the abnormal behavior history of the user. The method for detecting abnormal behavior according to supplementary note 11, characterized by:
(Supplementary Note 13) The abnormal behavior monitoring reference time is based on the time until the first and second devices used by the identified user enter the activated state from the standby state within the abnormal behavior monitoring time. The abnormal behavior detection method according to supplementary note 12, wherein the abnormal behavior detection method is determined.
(Supplementary note 14) The abnormal behavior detection method according to any one of supplementary notes 11 to 13, wherein the power consumption information is a value of the power consumption or a waveform of the power consumption.

10 Abnormal Behavior Detection Server (Abnormal Behavior Detection Device)
22 Power data acquisition unit (acquisition unit)
24 identification unit 26 determination unit 40 PC (first device)
52 Sensor (Power information detection device, Power sensor)
80 LCD (second device)
100 User management system

Claims (8)

A first device that receives power supply from a power source and transitions from a startup state to a standby state when a first time elapses after an operation from a user is interrupted, and the first device connected to the first device The second time shorter than the first time after receiving the power supply from the power source and the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. An abnormal behavior detecting device for detecting abnormal behavior of a user who uses the second device that transitions from the activated state to the standby state when the time has elapsed;
An acquisition unit that acquires the information from a power information detection device that detects power consumption information in the first device and the second device connected to the first device;
Based on the information acquired by the acquisition unit, the first device and the second device connected to the first device shift from an activated state to a standby state, and both devices perform predetermined abnormal behavior monitoring. When it is determined that the standby state is maintained for more than an hour, or when the first device and the second device connected to the first device shift from a standby state to an activated state, and both devices are predetermined. A determination unit that specifies a user who uses the first device and the second device when it is determined that the activated state is maintained for an abnormal behavior monitoring time or more,
From the information on the power consumption of the first device and the second device used by a plurality of other users who should take the same or equivalent action as the user specified by the specifying unit, the first used by the other user When the device and the second device are determined to be in a state different from the first device and the second device used by the identified user during the abnormal behavior monitoring time, the identified user An abnormal behavior detection device comprising: a determination unit that determines that the user is performing.   The abnormal behavior monitoring time is a sum of an abnormal behavior monitoring reference time that is a fixed value or a variable value and an abnormal behavior monitoring time correction value that varies based on a history of abnormal behavior of the user. The abnormal behavior detection device according to claim 1.   The abnormal behavior monitoring reference time is determined based on a time until the first and second devices used by the identified user enter the activated state from the standby state within the abnormal behavior monitoring time. The abnormal behavior detection device according to claim 2, wherein:   The abnormal behavior detection apparatus according to claim 1, wherein the information on the power consumption is a value of the power consumption or a waveform of the power consumption.   The said power information detection apparatus is an electric power sensor which can measure the power consumption value for every outlet, and the said detector is a human sensitive sensor, It is characterized by the above-mentioned. Abnormal behavior detection device. A first device that receives power supply from a power source and transitions from a startup state to a standby state when a first time elapses after an operation from a user is interrupted;
When the first device is connected to the first device and receives power supply from the power source through the first device and the first device shifts to a standby state, or detection by a detector that detects the presence of a user is lost. A second device that transitions from a startup state to a standby state when a second time shorter than the first time has elapsed;
An abnormal behavior detecting device according to any one of claims 1 to 5, wherein the abnormal behavior detecting device according to any one of claims 1 to 5 detects abnormal behavior of a user who uses the first and second devices. A first device that receives power supply from a power source and transitions from a startup state to a standby state when a first time elapses after an operation from a user is interrupted, and the first device connected to the first device The second time shorter than the first time after receiving the power supply from the power source and the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. An abnormal behavior detection program for causing a computer to detect an abnormal behavior of a user who uses the second device that transitions from a startup state to a standby state when the time has elapsed,
Obtaining the information from a power information detection device that detects power consumption information in the first device and the second device connected to the first device;
Based on the information acquired in the acquisition process, the first device and the second device connected to the first device shift from a startup state to a standby state, and both devices monitor predetermined abnormal behavior. When it is determined that the standby state is maintained for more than an hour, or when the first device and the second device connected to the first device shift from a standby state to an activated state, and both devices are predetermined. If it is determined that the activated state is maintained for more than the abnormal behavior monitoring time, the user using the first device and the second device is identified,
From the information on the power consumption of the first device and the second device used by a plurality of other users who should take the same or equivalent action as the user specified in the specified processing, the first user uses the first device. When it is determined that one device and the second device are in a state different from the first device and the second device used by the identified user during the abnormal behavior monitoring time, the identified user is abnormal An abnormal behavior detection program that causes the computer to execute a process of determining that an action is being performed. A first device that receives power supply from a power source and transitions from a startup state to a standby state when a first time elapses after an operation from a user is interrupted, and the first device connected to the first device The second time shorter than the first time after receiving the power supply from the power source and the first device shifts to the standby state or when the detection by the detector for detecting the presence of the user disappears. An abnormal behavior detection method for detecting an abnormal behavior of a user who uses a second device that transitions from a startup state to a standby state at the time when it has elapsed,
An acquisition step of acquiring the information from a power information detection device that detects information of power consumption in the first device and the second device connected to the first device;
Based on the information acquired in the acquisition step, the first device and the second device connected to the first device shift from the activated state to the standby state, and both devices monitor predetermined abnormal behavior. When it is determined that the standby state is maintained for more than an hour, or when the first device and the second device connected to the first device shift from a standby state to an activated state, and both devices are predetermined. A specific step of identifying a user who uses the first device and the second device, when it is determined that the activated state is maintained for the abnormal behavior monitoring time or more,
From the information on the power consumption of the first device and the second device used by a plurality of other users who should take the same or equivalent action as the user specified in the specifying step, the first used by the other user. When it is determined that one device and the second device are in a state different from the first device and the second device used by the identified user during the abnormal behavior monitoring time, the identified user is abnormal An abnormal behavior detection method, wherein the computer executes a determination step of determining that an action is being performed.

Images