JP7245882B1 - Skill diagnostic device, skill diagnostic program and skill diagnostic method - Google Patents

Abstract

Kind Code: A1 An object of the present invention is to evaluate a user's skill using check results of setting values and operation history information in order to control the use of systems and services.
A system comprising an operation terminal and a skill diagnosis device, wherein the skill diagnosis device compares setting values for system functions set from the operation terminal with a setting value master, thereby determining settings for each user and system function. A setting skill value calculation unit that calculates skill values, and an operation skill value that calculates an operation skill value for each user and system function by comparing operation log data, which is information indicating the operation history of the operation terminal, with the log level master. A calculation unit and a general skill value calculation unit that calculates a general skill value for each user and system function based on at least one of the set skill value and the operation skill value are provided, and use control of systems and services is performed.
[Selection drawing] Fig. 2

Description

The present disclosure relates to a skill diagnosis device, a skill diagnosis program, and a skill diagnosis method.

In recent years, a variety of data has come to be generated from people and things, and not only has the amount of data handled increased, but the types and importance of data have also diversified. Due to the spread of online environments such as cloud services, security risks such as information leaks are increasing compared to conventional offline environments.
Therefore, it has become important for users with appropriate skills to set up systems and services in consideration of various conditions such as usage environments and usage patterns.
In addition, in cloud services, there is a technique for performing service usage control based on operation history information, such as performing access control to online storage using operation history information (for example, Patent Document 1).

JP 2016-139380 A

In Patent Literature 1, in service usage control of a cloud service, a proficiency level is calculated based on the user's operation content, and access to online storage is controlled based on the calculated proficiency level. However, in password setting, for example, although there are no particular system restrictions, it is assumed that eight or more characters are a setting condition as a security policy. In this case, if a 6-character password is allowed to be set in the password registration operation, there is no problem with the contents of the user's systemic operation, but it goes against the security policy of the service to be used. In this way, even if there is no problem with the system-wise user operation content, but there is an error that violates the security policy, the operation content of the user who made the error cannot be reflected in the proficiency level. There is a problem that it cannot be reflected in the control of access permission.
The present disclosure has been made in order to solve the aforementioned problems when setting up systems and services. The purpose is to provide a mechanism that can control the use of systems and services by using inspection results.

A skill diagnosis device according to the present disclosure is a system comprising an operation terminal and a skill diagnosis device. Operation skill values for each user and each system function are calculated by comparing the setting skill value calculation unit that calculates the setting skill value for each system function and the operation log data, which is information indicating the operation history of the operation terminal, with the log level master. and an overall skill value calculation part for calculating an overall skill value for each user and system function based on at least one of the set skill value and the operation skill value. control.

According to the present disclosure, in order to control the use of systems and services, a user's skill evaluation is performed using inspection results of setting values and operation history information.

1 is a configuration diagram of a skill diagnosis system according to Embodiment 1; FIG. 1 is a functional configuration diagram of a skill diagnosis system according to Embodiment 1; FIG. FIG. 2 is a hardware configuration diagram of the skill diagnosis system according to the first embodiment; FIG. 4 is a transaction data configuration diagram of the skill diagnosis system according to the first embodiment; FIG. 2 is a master data configuration diagram of the skill diagnosis system according to Embodiment 1. FIG. FIG. 10 is a flowchart of setting skill diagnosis processing according to the first embodiment; FIG. 4 is a flow diagram of operation skill diagnosis processing according to the first embodiment; FIG. FIG. 4 is a flowchart of general skill diagnosis processing according to the first embodiment; FIG. 4 is a flowchart of system function usage control processing according to the first embodiment; FIG. 2 is a hardware configuration diagram of a skill diagnosis system according to Modification 1 of Embodiment 1. FIG. FIG. 11 is a functional configuration diagram of a skill diagnosis system according to Embodiment 2; FIG. 10 is a transaction data configuration diagram of the skill diagnosis system according to the second embodiment; FIG. 10 is a master data configuration diagram of the skill diagnosis system according to the second embodiment; FIG. 11 is a flowchart of set skill diagnosis processing according to the second embodiment; FIG. FIG. 11 is a flowchart of operation skill diagnosis processing according to the second embodiment;

Embodiment 1.
*** Configuration of Embodiment 1 ***
Embodiment 1 is a system configuration of a skill diagnosis system 1 including a skill diagnosis device 10 and an operation terminal 30. FIG. In this system configuration, when the user changes the setting of the system function 130 of the skill diagnosis device 10, the changed setting value is checked to calculate the set skill value, and the system function 130 of the skill diagnosis device 10 is changed. A process of calculating the user's operation skill value based on the operation history information and calculating the user's comprehensive skill value from the set skill value and the operation skill value will be described.
A user is a user of the skill diagnosis device 10 who uses the system functions of the system function 130 of the skill diagnosis device 10 through the operation terminal 30 and changes settings for the system functions.
An administrator is a person who has the authority to manage the skill diagnosis device 10 and change the settings of master data.

FIG. 1 is a configuration diagram of a skill diagnosis system 1 comprising a skill diagnosis device 10 and an operation terminal 30. As shown in FIG.
In this embodiment, the skill diagnosis device 10, the network 20, and two operation terminals 30a and 30b are provided.
It is assumed that each device connected to the network 20 stores information necessary for communication with other devices and can exchange information with each other.

FIG. 2 is a functional configuration diagram showing the functional configuration of the skill diagnosis system 1. As shown in FIG.
The skill diagnosis device 10 includes a set skill value calculation unit 101, an operation skill value calculation unit 102, a total skill value calculation unit 103, a system function usage control unit 104, a communication unit 105, a storage unit 110, and a system function . The storage unit 110 includes a skill diagnosis result 111 , an operation log 112 , a system function setting value 113 , a setting value master 121 , a log level master 122 and a usage control master 123 .
The set skill value calculation unit 101 checks the set values changed by changing the settings of the system functions on the system function 130, and calculates the set skill values of the user.
The operation skill value calculation unit 102 calculates the user's operation skill value based on the operation history information when the system function on the system function 130 is used or the setting of the system function on the system function 130 is changed. do. In this embodiment, the operation history information is assumed to be a log output by the system function 130 .
The total skill value calculation unit 103 calculates the total skill value of the user from the set skill value and the operation skill value.
The system function usage control unit 104 controls availability of system functions on the system function 130 for each user based on the set skill value, the operation skill value, and the total skill value.
The communication unit 105 communicates with the operation terminal 30 connected via the network 20 .
The storage unit 110 stores various information.
The system functions 130 are various functions on the system that can be used by the user, and the user changes settings. Further, when a system function on the system function 130 is used by the user, the system function 130 saves a log output by the system function 130 at the time of use in the operation log 112 . Furthermore, the system function 130 registers the changed setting value in the system function setting value 113 when the setting of the system function on the system function 130 is changed by the user. Note that the setting values of the system functions on the system function 130 may be held as internal information of the system function 130 or in the form of a setting value file or the like.
The data configuration diagram will be described later with reference to FIGS. 4 and 5, but mainly the following data are saved.
The skill diagnosis result 111 stores the set skill value, operation skill value, and overall skill value for each user. It should be noted that the higher the set skill value, the operation skill value, and the overall skill value, the better the result.
The operation log 112 stores logs output by the system function 130 .
System function settings 113 store settings for system functions on system function 130 .
The setting value master 121 defines the permissible range of setting values that can be set for each system function setting item on the system function 130 .
The log level master 122 defines, for each system function on the system function 130, a log level indicating the type of log and an additional value for the operation skill value corresponding to the log level.
The usage control master 123 defines, for each system function on the system function 130, a setting skill value, an operation skill value, and an overall skill value necessary for using the function.

The operation terminals 30 a and 30 b each have a communication section 301 and an input/output section 302 .
The communication unit 301 communicates with the skill diagnosis device 10 connected via the network 20 .
The input/output unit 302 receives input from the user and outputs information to the user.

Each function of the skill diagnosis system 1 configured as described above is realized by hardware as shown in FIG. This hardware includes a processing device 401 such as a CPU (Central Processing Unit), a storage device 402 such as a ROM (Read Only Memory) or a hard disk device, a communication device 403 connected to other hardware and the network 20, and a keyboard and mouse. , and an input/output device 404 such as a speaker and a display are connected by a bus. Note that the CPU may have its own memory.
In this embodiment, the skill diagnosis device 10 includes a processing device 401, a storage device 402, a communication device 403, and an input/output device 404, and the operation terminal 30a includes the processing device 401, the storage device 402, the communication device 403 , and an input/output device 404 , and the operation terminal 30 b includes a processing device 401 , a storage device 402 , a communication device 403 , and an input/output device 404 .
A plurality of processing devices 401 may be provided, and the plurality of processing devices 401 may cooperate to execute a program that implements each function.

FIG. 4 is a data configuration diagram of transaction data.
Transaction data, unlike master data, indicates data that fluctuates. The skill diagnosis result 111 includes a user ID that identifies the user, a system function ID that identifies the system function on the system function 130 that performed the skill diagnosis, an inspection result value for calculating the set skill value, a set skill transition value, and a set skill value. , an operation diagnostic value for calculating an operation skill value, an operation skill transition value, an operation skill value, an overall skill value, and a diagnosis date and time.
The operation log 112 includes the date and time when the operation log was recorded, the user ID for identifying the user who operated the operation log, the system function ID for identifying the system function on the system function 130 which was operated, the log level, and the log level. and an individual operation diagnosis value which is an additional value to the operation skill value corresponding to the .
The system function setting value 113 includes a set date and time when the setting was changed, a user ID for identifying the user who changed the setting, and a system function ID for identifying the system function on the system function 130 which changed the setting. It consists of a system setting item ID that identifies the changed setting item, a system setting value of the setting value for the system setting item, and an individual inspection result value that is an addition value to the setting skill value according to the inspection result.
As will be described later, the skill diagnosis result 111 is changed by the set skill value calculation unit 101 , the operation skill value calculation unit 102 , and the total skill value calculation unit 103 . Operation log 112 is changed by system function 130 and operation skill value calculation unit 102 . The system function set value 113 is changed by the system function 130 and the set skill value calculation unit 101 .

FIG. 5 is a data configuration diagram of master data.
The setting value master 121 includes a system function ID that identifies a system function on the system function 130, a system setting item ID that identifies a system setting item, and a setting value allowance that defines the allowable range of setting values that can be set for each system setting item. It consists of items of range and setting skill addition value which is an addition value to the setting skill value according to the system setting item.
The log level master 122 includes items such as a system function ID that identifies a system function on the system function 130, a log level that indicates the type of operation log, and an operation skill addition value that is an addition value to the operation skill value corresponding to the log level. consists of
The usage control master 123 includes a system function ID that identifies a system function on the system function 130, a required setting skill value that defines a setting skill value necessary for using the system function on the system function 130, and a system function use on the system function 130. and a required comprehensive skill value defining a comprehensive skill value required to use the system function on the system function 130 .
It is assumed that the setting value master 121, the log level master 122, and the usage control master 123 are set in advance by the administrator.

***Operation of Embodiment 1***
The operation of the skill diagnosis system 1 will be explained using a flow chart.
With reference to FIG. 6, the flow of setting skill diagnosis processing for calculating the setting skill value by checking the changed setting value when the user changes the setting of the system function 130 of the skill diagnosis device 10 will be described.
It is assumed that the set skill diagnosis process is set to be periodically executed by the administrator. At the time of regular execution, unprocessed data at the time of the previous regular execution is acquired from the registered data of the skill diagnosis result 111 . If the regular execution interval is one month, the skill diagnosis result 111 for one month from the day of the previous regular execution to the day before the current regular execution is acquired as the skill diagnosis result 111 during the fixed period. In this embodiment, the regular execution interval is one month.

The set skill value calculation unit 101 of the skill diagnostic device 10 starts processing at the timing of regular execution, acquires the current date and time, and uses it as the processing date and time, which is temporary date and time information.
After that, the set skill value calculation unit 101 acquires, from the system function setting values 113, data whose setting date and time are included in the past one month of the processing date and time as system function setting value data as data of the regular execution interval period.
After that, the set skill value calculation unit 101 performs the following process as the item inspection process.
Records of system function setting value data are sequentially retrieved, the system function ID and system setting item ID of the retrieved system function setting value record are specified, and the corresponding setting value master record is obtained from the setting value master 121 .
After that, it is confirmed whether the system setting value of the obtained system function setting value record is included in the setting value allowable range of the corresponding setting value master record.
If it is included as a result of confirmation, set the setting skill addition value of the corresponding setting value master record to the individual inspection result value of the acquired system function setting value record.
If it is not included as a result of confirmation, 0 is set to the individual inspection result value of the acquired system function set value record.
This is a series of item inspection processing, and this item inspection processing is executed for all records included in the system function set value data.
After that, the set skill value calculation unit 101 aggregates the item check result values of the system function setting value data for each user ID and system function ID of the system function setting value data, and calculates the check result value for each user ID and system function ID. Calculate
After that, the set skill value calculation unit 101 combines the user ID and system function ID of the system function set value data, the calculated check result value, and the processing date and time with the user ID, system function ID, and check result value of the skill diagnosis result 111. The date and time of diagnosis are set, and the data is registered in the skill diagnosis result 111 (step S101).
For example, in the system function setting value data, as the first record, the user ID is "user 1", the system function ID is "function 1", the system setting item ID is "setting item 1", and the system setting value is "000001". , and as the second record, a record with a user ID of "user 1", a system function ID of "function 1", a system setting item ID of "setting item 2", and a system setting value of "A". A record that exists and has a system function ID of "function 1", a system setting item ID of "setting item 1", a setting value allowable range of "000000-999999", and a setting skill addition value of "10" in the setting value master data Assume that there is a record with a system function ID of "function 1", a system setting item ID of "setting item 2", a setting value allowable range of "AZ", and a setting skill addition value of "5".
In this case, due to the item inspection process, the item inspection result value of the first record of the system function set value data becomes "10" and the item inspection result value of the second record becomes "5". When the individual inspection result values of the set value data are aggregated and the inspection result value for each user ID and system function ID is calculated, the inspection result value for the user ID "user 1" and the system function ID "function 1" is " 15 (=10+5)”.

Subsequently, the set skill value calculation unit 101 acquires the data of the skill diagnosis result 111 during a certain period as the set skill transition data.
After that, the set skill value calculation unit 101 calculates the set skill transition value for each user ID and system function ID from the set skill value and diagnosis date and time for each user ID and system function ID in the acquired set skill transition data.
After that, the set skill value calculation unit 101 designates the user ID, system function ID, and diagnosis date/time of the skill diagnosis result 111 and the user ID, system function ID, and processing date/time of the set skill transition data to specify the record. , the calculated set skill transition value is registered as the set skill transition value of the record of the identified skill diagnosis result 111, and the added value of the inspection result value and the set skill transition value of the same record is registered as the set skill value (step S102). ).
Note that the set skill transition value may be calculated, for example, as follows.
As the data before the regular execution interval period, from the skill diagnosis result 111, the data whose diagnosis date and time is more than one month past the processing date and time is acquired as set skill transition data. A time-series correlation coefficient is calculated from the set skill value of the set skill transition data and the distribution of diagnosis dates, and 10 times the calculated time-series correlation coefficient is set as the set skill transition value. When a positive correlation is observed, it is assumed that setting skills are improving, and when a negative correlation is observed, it is assumed that setting skills are declining.
For example, if the setting skill transition data is extracted with the user ID "user 1" and the system function ID "function 1", and the time-series correlation coefficient of the extracted data is "0.5", the setting skill transition value becomes “5 (=0.5×10)”.
Also, when acquiring setting skill transition data from the skill diagnosis result 111, data to be acquired may be limited to a certain number of cases or a certain period of time so that the number of data items to be acquired does not become too large.

With reference to FIG. 7, the flow of operation skill diagnosis processing for calculating the user's operation skill value based on the operation history information of the system function 130 will be described.
It is assumed that the operation skill diagnosis process is set to be executed periodically according to the settings made by the administrator. At the time of regular execution, unprocessed data at the time of the previous regular execution is acquired from the registered data of the skill diagnosis result 111 . If the regular execution interval is one month, the skill diagnosis result 111 for one month from the day of the previous regular execution to the day before the current regular execution is acquired as the skill diagnosis result 111 during the fixed period. In this embodiment, the regular execution interval is one month.

The operation skill value calculation unit 102 of the skill diagnosis device 10 starts processing at the time of regular execution, acquires the current date and time, and uses it as the processing date and time, which is temporary date and time information.
After that, the operation skill value calculation unit 102 acquires, from the operation log 112, data included in the log date and time within one month past the processing date and time as operation log data as data for the regular execution interval period.
After that, the operation skill value calculation unit 102 performs the following processing as operation diagnosis processing.
The records of the operation log data are sequentially retrieved, the system function ID and log level of the retrieved operation log records are designated, and the corresponding log level master record is obtained from the log level master 122 .
After that, the operation skill addition value of the corresponding log level master record is set to the individual operation diagnostic value of the acquired operation log record.
The operations up to this point constitute a series of operation diagnosis processing, and this operation diagnosis processing is executed for all records included in the operation log data.
After that, the operation skill value calculation unit 102 aggregates the individual operation diagnostic values of the operation log data for each user ID and system function ID of the operation log data, and calculates the operation diagnostic value for each user ID and system function ID.
After that, the operation skill value calculation unit 102 combines the user ID and system function ID of the operation log data, the calculated operation diagnosis value, and the processing date and time into the user ID, system function ID, operation diagnosis value, and diagnosis date and time of the skill diagnosis result 111 . , and the operation diagnosis value is registered in the skill diagnosis result 111 (step S201).
For example, in the operation log data, as the first record, the user ID is "user 1", the system function ID is "function 1", and the log level is "information", and as the second record, the user ID is "user 1", the system function ID is "function 1", and the log level is "warning". There is a record with a level of "error", and in the log level master data, there is a record with a log level of "information" and an operation skill addition value of "5", and a record with a log level of "warning" and an operation skill addition value of "-". 5” and a record with a log level of “error” and an operation skill addition value of “−10”.
In this case, by the operation diagnosis processing, the individual operation diagnostic value of the first record of the operation log data is "5", the individual operation diagnostic value of the second record is "-5", and the third record is Since the individual operation diagnostic value is "-10", the individual operation diagnostic value of the operation log data is totaled, and the operation diagnostic value for each user ID and system function ID is calculated. The operation diagnosis value for the function ID "function 1" is "-10 (=5+(-5)+(-10))".

Subsequently, the operation skill value calculation unit 102 acquires data of the skill diagnosis result 111 during a certain period of time as operation skill transition data.
After that, the operation skill value calculation unit 102 calculates an operation skill transition value for each user ID and system function ID from the operation skill value and diagnosis date and time for each user ID and system function ID in the acquired operation skill transition data.
After that, the operation skill value calculation unit 102 specifies the user ID, system function ID, and diagnosis date/time of the skill diagnosis result 111 and the user ID, system function ID, and processing date/time of the operation skill transition data to specify the record. , the calculated operation skill transition value is registered as the operation skill transition value of the record of the specified skill diagnosis result 111, and the added value of the operation diagnosis value and the operation skill transition value of the same record is registered as the operation skill value (step S202). ).
Note that the operation skill transition value may be calculated, for example, as follows.
As the data before the regular execution interval period, from the skill diagnosis result 111, data whose diagnosis date and time is more than one month past the processing date and time is acquired as operation skill transition data. A time-series correlation coefficient is calculated from the distribution of the operation skill value of the operation skill transition data and the diagnosis date and time, and 10 times the calculated time-series correlation coefficient is set as the operation skill transition value. It is considered that the operation skill is improving when a positive correlation is observed, and the operation skill is declining when a negative correlation is observed.
For example, if the operation skill transition data is extracted with the user ID "user 1" and the system function ID "function 1", and the time series correlation coefficient of the extracted data is "-0.5", the setting skill transition The value is "-5 (=-0.5 x 10)".
Further, when acquiring operation skill transition data from the skill diagnosis result 111, data to be acquired may be limited to a certain number of items or a certain period of time so that the number of data items to be acquired does not become too large.

FIG. 8 describes the flow of comprehensive skill diagnosis processing for calculating the comprehensive skill value from the set skill value and the operation skill value.
It is assumed that the general skill diagnosis process is set to be executed periodically by the administrator's setting. In this embodiment, the regular execution interval is one month.

The total skill value calculation unit 103 of the skill diagnosis device 10 starts processing at the timing of regular execution, acquires the current date and time, and uses it as the processing date and time, which is temporary date and time information.
After that, the total skill value calculation unit 103 selects, from the skill diagnosis result 111, data in which a value is set in the set skill value and whose diagnosis date and time is within one month past the processing date and time, as data for the regular execution interval period. , acquired as setting skill value data.
After that, the total skill value calculation unit 103 extracts data with the latest diagnosis date and time for each user ID and system function ID from the acquired set skill value data, and sets the user ID and system function ID of the extracted data. skill value and the latest set skill value data is temporarily created (step S301).
In addition, when skill diagnosis is performed multiple times during the regular execution interval period and multiple data are extracted for each user ID and system function ID from the acquired skill diagnosis result information, the average of the set skill values is updated. The set skill value may be set for each user ID and system function ID of the set skill value data.

Subsequently, the total skill value calculation unit 103 determines that the operation skill value is set to a value based on the skill diagnosis result 111 as valid data for the regular execution interval period, and the diagnosis date and time are included in the past one month of the processing date and time. Data is acquired as operation skill value data.
After that, the total skill value calculation unit 103 extracts data with the latest diagnosis date and time from the acquired operation skill value data for each user ID and system function ID, and compares the extracted data with the user ID, system function ID, and operation skill value and the latest operation skill value data is temporarily created (step S302).
In addition, when skill diagnosis is performed multiple times during the regular execution interval period and multiple data are extracted for each user ID and system function ID from the acquired skill diagnosis result information, the average operation skill value is updated. An operation skill value for each user ID and system function ID of the operation skill value data may be used.

Subsequently, the total skill value calculation unit 103 integrates the created combination of the user ID and the system function ID of the latest setting skill value data and the combination of the user ID and the system function ID of the latest operation skill value data to eliminate duplication. It omits it and acquires the combined data of the user ID and the system function ID.
After that, the total skill value calculation unit 103 sequentially retrieves records of combination data of the user ID and the system function ID, designates the user ID and the system function ID of the acquired combination record of the user ID and the system function ID, and sets the latest settings. Acquire the skill value data record and the latest operation skill value record respectively.
After that, the set skill value of the obtained latest set skill value data record and the operation skill value of the latest operation skill value record are added to calculate the overall skill value.
The process up to this point is defined as a series of general skill diagnosis processing, and this general skill diagnosis processing is executed for all records included in the combined data of the user ID and the system function ID.
After that, the total skill value calculation unit 103 combines the user ID and system function ID of the combination data of the user ID and the system function ID, the calculated total skill value, and the processing date and time with the user ID and system function ID of the skill diagnosis result 111. The general skill value and diagnosis date and time are set, and the data is registered in the skill diagnosis result 111 (step S303).

FIG. 9 describes the flow of system function usage control processing for controlling the system functions of the system function 130 that can be used by the user based on the skill diagnosis result.

When the input/output unit 302 of the operation terminal 30a receives a request from the user to use the system function on the system function 130, the input/output unit 302 uses the communication unit 301 to transmit the user ID of the user who made the request and the target of use. Along with the system function ID of the system function, a system function use request is transmitted to the skill diagnosis device 10 (step S401).

The system function usage control unit 104, which receives the system function usage request through the communication unit 105, specifies the received system function ID as the system function ID of the usage control master 123, specifies the record, and specifies the specified usage control master data. A record is acquired (step S402).

Subsequently, the system function usage control unit 104 designates the received user ID and the received system function ID as the user ID and system function ID of the skill diagnosis result 111, and the set skill value is set. The record with the latest measurement date and time is specified, and the setting skill value of the specified record of the skill diagnosis result 111 is acquired. After that, the system function usage control unit 104 designates the received user ID and the received system function ID as the user ID and system function ID of the skill diagnosis result 111, and the operation skill value is set and measured. The record with the latest date and time is specified, and the operation skill value of the specified record of the skill diagnosis result 111 is acquired. After that, the system function usage control unit 104 designates the received user ID and the received system function ID as the user ID and system function ID of the skill diagnosis result 111, and the total skill value is set and measured. The record with the latest date and time is specified, and the total skill value of the specified record of the skill diagnosis result 111 is acquired (step S403).

Subsequently, the system function usage control unit 104 converts the acquired set skill value, operation skill value, and overall skill value into the required set skill value, required operation skill value, and required overall skill value of the record of the usage control master data. using at least one or a combination of the results of comparison between the set skill value and the required set skill value, the comparison result between the operation skill value and the required set skill value, and the comparison result between the overall skill value and the required overall skill value. , to determine whether system functions are available. If available, use of the system function is permitted, and the system function use control unit 104 uses the communication unit 105 to transmit a use availability notification to the operation terminal 30a.
If the system function cannot be used, use of the system function is not permitted, and the system function use control unit 104 uses the communication unit 105 to transmit a use disapproval notification to the operation terminal 30a (step S404).
Judgment as to whether or not system functions can be used is made when the acquired set skill value is greater than the required set skill value, the acquired operation skill value is greater than the required operation skill value, and the acquired total skill value is greater than the required total skill value. If it is larger, it may be determined that it can be used, and if not, it may be determined that it cannot be used.

The input/output unit 302 of the operation terminal 30a that has received the use-disapproval notification through the communication unit 301 notifies the user of the use-disapproval, and ends the process (step S405).

The input/output unit 302 of the operation terminal 30a that has received the availability notification through the communication unit 301 notifies the user of the availability and uses the system function on the system function 130 (step S406).

The above is the operation of the first embodiment.
In the present embodiment, the setting skill diagnosis process, the operation skill diagnosis process, and the general skill diagnosis process are started by regular execution, but each process can be started at any timing specified by the user, It may be activated as a subsequent process of a specific process, such as by registering to execute the comprehensive skill diagnosis process after executing the skill diagnosis process.
*** Effect of Embodiment 1 ***
The user's skill is evaluated from the result of checking the setting change work and the evaluation result of the operation history information, and by controlling the use of the system functions on the system function 130 based on the evaluation result, security incidents due to lack of skill of the user can occur. can be prevented.
<Modification 1>
In Embodiment 1, each functional component is realized by software. However, as Modification 1, each functional component may be implemented by hardware. Differences between the first modification and the first embodiment will be described.

The configuration of the skill diagnosis system 1 according to Modification 1 will be described with reference to FIG.
When each functional component is realized by hardware, an electronic circuit 405 is provided instead of the processing device 401 and the storage device 402 . The electronic circuit 405 is a dedicated circuit that implements the functions of the processing device 401 and the storage device 402 .

The electronic circuit 405 includes single circuit, composite circuit, programmed processor, parallel programmed processor, logic IC (INTEGRATED CIRCUIT), GA (GATE ARRAY), ASIC (APPLICATION SPECIFIC).
INTEGRATED CIRCUIT), FPGA (FIELD-PROGRAM MABLE GATE ARRAY) are assumed.
Each functional component may be implemented by one electronic circuit 405, or each functional component may be implemented by being distributed among a plurality of electronic circuits 405. FIG.
<Modification 2>
As a modification 2, some functional components may be implemented by hardware and other functional components may be implemented by software.

The processing device 401, the storage device 402 and the electronic circuit 405 are referred to as processing circuitry. That is, the function of each functional component is realized by the processing circuit.
<Modification 3>
As a modification 3, part or all of the functional components of the skill diagnosis device may be built on the cloud and implemented on a cloud server.
Embodiment 2.
As a second embodiment, in order to improve the accuracy of skill evaluation of the user, the skill may be evaluated using external related data acquired through data linkage. Differences of the second embodiment from the first embodiment will be described.
It should be noted that data linkage assumes the use of general data linkage processing, and is not specifically described in the present embodiment.
*** Configuration of Embodiment 2 ***

FIG. 11 is a functional configuration diagram showing the functional configuration of the skill diagnosis system 1. As shown in FIG.
The skill diagnosis device 10 includes an external inspection result acquisition unit 106 , an external skill acquisition unit 107 , an external inspection result 114 , a user external skill 115 , an external inspection master 124 and an external skill master 125 .
The external inspection result acquisition unit 106 acquires inspection result data outside the system through data linkage and saves it in the external inspection result 114 .
The external skill acquisition unit 107 acquires skill data possessed by the user outside the present system through data linkage and stores it in the user external skill 115 .
The external inspection result 114 stores inspection result data outside this system acquired through data linkage.
The user external skill 115 saves user-owned skill data outside this system acquired through data linkage.
The external inspection master 124 defines an additional value for the set skill value according to inspection result data outside this system.
The external skill master 125 defines additional values for operation skill values according to skill data possessed by users outside this system.

FIG. 12 is a data configuration diagram of transaction data.
The external inspection result 114 includes the inspection date and time when the inspection was performed, the user ID for identifying the user who was logged in when the inspection was performed, the system function ID for identifying the system function on the system function 130 which performed the inspection, and the external inspection result. and an individual inspection result value that is an additional value to the set skill value according to the inspection result.
The user external skill 115 includes a user ID that identifies the user, a system function ID that identifies the system function on the system function 130 to which the external skill is related, an external skill ID that identifies the external skill acquired by the user, and the external skill. and an individual operation diagnostic value that is an additional value to the corresponding operation skill value.

FIG. 13 is a data configuration diagram of master data.
The external inspection master 124 includes a system function ID that identifies a system function on the system function 130, an inspection result that is the result of the external inspection, a set skill addition value that is an addition value to the set skill value according to the inspection result, consists of items
The external skill master 125 contains a system function ID that identifies a system function on the system function 130, an external skill ID that identifies an external skill, and a skill addition value that is an addition value to the operation skill value corresponding to the external skill. Consists of items.
It is assumed that the external inspection master 124 and the external skill master 125 are set in advance by the administrator.

***Operation of Embodiment 2***
The operation of the second embodiment will be explained using a flow chart.
With reference to FIG. 14, the flow of setting skill diagnosis processing for reflecting external inspection result information on the setting skill value calculated in the setting skill diagnosis processing will be described.
Note that the processing up to step 102 is the same as in the first embodiment.

Subsequently, the set skill value calculation unit 101 acquires, from the external inspection results 114, data included in the inspection date and time within one month past the processing date and time as the data of the regular execution interval period as the external inspection result data.
If the number of external inspection result data is one or more, the process proceeds to step S104.
If the number of external inspection result data is 0, the process is terminated (step S103).

The set skill value calculation unit 101 performs the following process as the external inspection process.
The records of the external inspection result data are sequentially retrieved, the system function ID of the retrieved external inspection result record is specified, and the corresponding external inspection master record is acquired from the external inspection master 124 .
After that, the setting skill addition value of the corresponding external inspection master record is set to the individual inspection result value of the acquired external inspection result data.
The process up to this point is a series of external inspection processes, and this external inspection process is executed for all records included in the external inspection result data.
After that, the set skill value calculation unit 101 aggregates the individual inspection result values of the external inspection result data for each user ID and system function ID of the external inspection result data, Calculate
After that, the set skill value calculation unit 101 specifies the user ID, system function ID, and diagnosis date/time of the skill diagnosis result 111 by specifying the user ID, system function ID, and processing date/time of the external inspection result information, and specifies the data. The set skill addition tally value is added to the set skill value of the data of the skill diagnosis result 111 (step S104).

FIG. 15 describes the flow of operation skill diagnosis processing for reflecting external skill information on the operation skill value calculated in the operation skill diagnosis processing.
Note that the processing up to step 202 is the same as in the first embodiment.

Next, the operation skill value calculation unit 102 acquires user external skill data from the user external skill 115 .
When the number of cases of user external skill information is one or more, the process proceeds to step S204.
If the number of cases of user external skill information is 0, the process ends (step S203).

The operation skill value calculation unit 102 performs the following process as the user external skill acquisition process.
The records of the user external skill data are sequentially retrieved, the system function ID and the external skill ID of the retrieved user external skill record are specified, and the corresponding external skill master record is acquired from the external skill master 125 .
After that, the operation skill addition value of the corresponding external skill master record is set to the individual operation diagnostic value of the acquired user external skill data.
A series of user external skill acquisition processing is performed up to this point, and this user external skill acquisition processing is executed for all records included in the user external skill data.
After that, the operation skill value calculation unit 102 aggregates the individual operation diagnostic values for each user ID and system function ID of the user external skill data, and calculates an operation skill addition aggregation value for each user ID and system function ID.
After that, the operation skill value calculation unit 102 specifies the user ID, the system function ID, and the diagnosis date/time of the skill diagnosis result 111 by specifying the user ID, the system function ID, and the processing date/time of the user external skill data, and specifies the data. The operation skill addition tally value is added to the operation skill value of the data of the skill diagnosis result 111 (step S204).

*** Effect of Embodiment 2 ***
By using external related data acquired through data linkage, the accuracy of user skill evaluation can be improved.

1 skill diagnosis system 10 skill diagnosis device 20 network 30 operation terminal 30a operation terminal 30b operation terminal 101 set skill value calculation unit 102 operation skill value calculation unit 103 total skill value calculation unit 104 system function use Control unit 105 Communication unit 106 External inspection result acquisition unit 107 External skill acquisition unit 110 Storage unit 111 Skill diagnosis result 112 Operation log 113 System function setting value 114 External inspection result 115 User external skill 121 Setting value master 122 Log level master 123 Usage control master 124 External inspection master 125 External skill master 130 System function 301 Communication unit 302 Input/output unit 401 Processing device 402 Storage device 403 Communication device 404 Input/output device, 405 electronics.

Claims (11)

A skill diagnosis device network-connected to an operation terminal,
By comparing the setting value of the system function set from the operation terminal with the setting value allowable range of the setting value master that defines the setting value allowable range, which is the allowable range of setting values that can be set for each system setting item , a set skill value calculation unit that calculates a set skill value for each of the user and the system function;
By comparing the operation log data, which is information indicating the operation history of the operation terminal, with the log level of a log level master that defines the log level, which is the type of log for each system function , the user and each system function an operation skill value calculation unit that calculates the operation skill value of
a total skill value calculation unit that calculates a total skill value for each of the user and the system function based on at least one of the set skill value and the operation skill value;
Skill diagnosis device. The setting value master defines a setting skill addition value,
The setting skill value calculation unit
confirming whether the setting value of the system function is included in the setting value allowable range defined in the setting value master for each of the system setting items;
If it is included, obtain the setting skill addition value,
setting the acquired set skill additional value as the set skill value for each of the user and the system function;
The skill diagnosis device according to claim 1. The set skill value calculation unit further calculates a set skill transition value from a history transition of the set skill value during a certain period of time, and based on the calculated set skill transition value, sets the settings for each of the user and the system function. change skill value
The skill diagnosis device according to claim 1 or 2. The skill diagnosis device further
an external inspection result acquisition unit that acquires external inspection result data, which is external information related to the set skill value;
The setting skill value calculation unit
varying the set skill value according to the external inspection result data;
The skill diagnosis device according to any one of claims 1 to 3. The log level master defines an operation skill addition value corresponding to the log level,
The operation skill value calculation unit
obtaining the operation skill addition value corresponding to the log level defined in the log level master of the operation log data;
setting the acquired operation skill additional value as the operation skill value for each of the user and the system function;
The skill diagnosis device according to claim 1 or 4. The operation skill value calculation unit further calculates an operation skill transition value from the history transition of the operation skill value during a certain period of time, and based on the calculated operation skill transition value, the operation for each of the user and the system function is performed. change skill value
The skill diagnosis device according to claim 5. The skill diagnosis device further
an external skill acquisition unit that acquires user external skill data, which is external information related to the operation skill value;
The operation skill value calculation unit
varying the operation skill value according to the user external skill data;
The skill diagnosis device according to claim 6. The skill diagnosis device further
a usage control master that defines a required setting skill value, a required operation skill value, and a required general skill value, which are required for using the system functions;
At least one or a combination of the result of comparison between the set skill value and the required set skill value, the result of comparison between the operation skill value and the required set skill value, and the result of comparison between the overall skill value and the required overall skill value. A system function usage control unit that controls the system functions used by the user using
The system function usage control unit
when receiving a request to use the system function from the operation terminal, determining whether or not the system function for which the use request is received is available;
permitting use of the system function when the system function for which the use request is received is available;
disallowing the use of the system function when the system function that receives the use request cannot be used;
The skill diagnostic device according to any one of claims 1 to 7. The skill diagnosis device according to any one of claims 1 to 8, wherein said skill diagnosis device is constructed on a cloud. By comparing the setting value of the system function set from the operation terminal with the setting value allowable range of the setting value master that defines the setting value allowable range, which is the allowable range of setting values that can be set for each system setting item ,
setting skill diagnosis processing for calculating a setting skill value for each user and system function;
By comparing the operation log data, which is information indicating the operation history of the operation terminal, with the log level of a log level master that defines the log level, which is the type of log for each system function , the user and each system function operation skill diagnosis processing for calculating the operation skill value of
Comprehensive skill diagnosis processing for calculating a comprehensive skill value of the user based on at least one of the set skill value and the operation skill value;
a usage control master defining required setting skill values, required operation skill values, and required overall skill values required for using the system functions;
At least one of the result of comparison between the set skill value and the required set skill value, the result of comparison between the operation skill value and the required set skill value, and the result of comparison between the overall skill value and the required overall skill value is used. comprising system function usage control processing for controlling the system functions used by the user;
skill diagnosis program. The setting skill value calculation unit
By comparing the setting value of the system function set from the operation terminal with the setting value allowable range of the setting value master that defines the setting value allowable range, which is the allowable range of setting values that can be set for each system setting item ,
Calculate the setting skill value for each user and system function,
The operation skill value calculation unit
By comparing the operation log data, which is information indicating the operation history of the operation terminal, with the log level of a log level master that defines the log level, which is the type of log for each system function , the user and each system function Calculate the operation skill value of
The general skill value calculation unit
calculating a total skill value for each of the user and the system function based on at least one of the set skill value and the operation skill value;
The system function usage control unit
a usage control master defining required setting skill values, required operation skill values, and required overall skill values required for using the system functions;
At least one of the result of comparison between the set skill value and the required set skill value, the result of comparison between the operation skill value and the required set skill value, and the result of comparison between the overall skill value and the required overall skill value is used. and controlling the system functions used by the user.

Images